@kungfu-tech/buildchain 3.0.9-alpha.7 → 3.0.9-alpha.9

package/docs/cli-reference.md

@@ -269,6 +269,127 @@ buildchain create runner-provenance --input-json <file-or-json> [--output <file>
 buildchain dev
 ```
 
+### `buildchain dev authority admit-merge-group`
+
+- Help: `buildchain dev authority admit-merge-group --help`
+- Canonical id: `dev`
+- Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
+- Syntax:
+
+```text
+buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
+```
+
+### `buildchain dev authority complete-qualification`
+
+- Help: `buildchain dev authority complete-qualification --help`
+- Canonical id: `dev`
+- Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
+- Syntax:
+
+```text
+buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
+```
+
+### `buildchain dev authority heartbeat-landing`
+
+- Help: `buildchain dev authority heartbeat-landing --help`
+- Canonical id: `dev`
+- Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
+- Syntax:
+
+```text
+buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
+```
+
+### `buildchain dev authority heartbeat-qualification`
+
+- Help: `buildchain dev authority heartbeat-qualification --help`
+- Canonical id: `dev`
+- Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
+- Syntax:
+
+```text
+buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
+```
+
+### `buildchain dev authority lease-landing`
+
+- Help: `buildchain dev authority lease-landing --help`
+- Canonical id: `dev`
+- Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
+- Syntax:
+
+```text
+buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
+```
+
+### `buildchain dev authority lease-qualification`
+
+- Help: `buildchain dev authority lease-qualification --help`
+- Canonical id: `dev`
+- Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
+- Syntax:
+
+```text
+buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
+```
+
+### `buildchain dev authority migrate`
+
+- Help: `buildchain dev authority migrate --help`
+- Canonical id: `dev`
+- Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
+- Syntax:
+
+```text
+buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
+```
+
+### `buildchain dev authority observe`
+
+- Help: `buildchain dev authority observe --help`
+- Canonical id: `dev`
+- Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
+- Syntax:
+
+```text
+buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
+```
+
+### `buildchain dev authority recover`
+
+- Help: `buildchain dev authority recover --help`
+- Canonical id: `dev`
+- Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
+- Syntax:
+
+```text
+buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
+```
+
+### `buildchain dev authority settle`
+
+- Help: `buildchain dev authority settle --help`
+- Canonical id: `dev`
+- Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
+- Syntax:
+
+```text
+buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
+```
+
+### `buildchain dev authority submit`
+
+- Help: `buildchain dev authority submit --help`
+- Canonical id: `dev`
+- Options: `--branch`, `--execute`, `--json`, `--output`, `--repository`
+- Syntax:
+
+```text
+buildchain dev authority <migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe> --repository <owner/repo> --branch <dev/vN/vN.M> [--execute] [--output <file>] [--json]
+```
+
 ### `buildchain dev merge-queue`
 
 - Help: `buildchain dev merge-queue --help`

package/docs/dev-delivery-qualification-landing-adr.md

@@ -0,0 +1,137 @@
+---
+status: accepted
+period: ongoing
+theme: dev-delivery-qualification-landing-authority
+doc_type: architecture-decision-record
+source_level: local-files
+confidence: high
+sensitivity: public
+evidence_grade: A
+review_state: self-reviewed
+last_reviewed: 2026-08-12
+---
+
+# ADR: Qualification Leases and the exclusive Landing Warrant
+
+## Decision
+
+Buildchain has two explicit protected-dev authority modes:
+
+1. `single-flight-warrant` is the default and continues to use the
+   `kungfu-buildchain-dev-delivery-warrant-queue` v1 state and
+   `buildchain dev warrant` commands unchanged.
+2. `bounded-qualification-landing` is opt-in and uses the
+   `kungfu-buildchain-dev-delivery-authority` v2 state. It may issue up to the
+   configured number of Qualification Leases, but it may issue exactly one
+   Landing Warrant.
+
+The modes use different contracts, state refs, and CLI command families. There
+is no implicit reinterpretation of a v1 Warrant. A consumer turns the new mode
+on only by explicitly migrating the exact current v1 state and deploying the
+v2 controller against the dedicated
+`buildchain/dev-delivery-authority/<dev-line>` state ref.
+
+Migration preserves the immutable v1 `stateRoot`, candidate identity, source
+and proof roots, fencing token, generation, and lease times in a rooted
+migration receipt. An active provisional Warrant becomes a
+qualification-only lease and remains unable to admit `merge_group`; an active
+qualified Warrant becomes the one exclusive Landing Warrant. The migration is
+one-shot: a v2 state is never accepted as v1 input, and source/evidence bytes
+are not regenerated. The legacy ref remains immutable rollback evidence.
+
+## Authority invariants
+
+A Qualification Lease carries:
+
+- `authority = qualification-only`;
+- `mergeGroupAdmission = false`;
+- one exact candidate id, token, generation, issue time, and expiry; and
+- a place in a list bounded by `policy.maxQualificationLeases`.
+
+It authorizes expensive qualification work only. It cannot authorize GitHub
+`merge_group`, cannot be upgraded in place to landing authority, and is removed
+when qualification evidence is recorded. Each new candidate declares a sorted
+set of rooted `qualificationDomains`. Candidates with disjoint sets may hold
+leases concurrently. An overlapping set is serialized; an empty set is treated
+as unknown and therefore conflicts with every active candidate. The scheduler
+returns a content-rooted reason for either refusal.
+
+The Landing Warrant carries:
+
+- `authority = merge-group-admission`;
+- `mergeGroupAdmission = true`;
+- one exact qualified candidate id, token, generation, issue time, and expiry;
+  and
+- the only non-null `landingWarrant` slot in the durable state.
+
+Only `admitDevDeliveryMergeGroup` and `buildchain dev authority
+admit-merge-group` consume Landing authority. They bind the exact current state
+root, candidate, protected base, source head, merge-group head, token, and
+generation. A Qualification Lease fails closed at this boundary.
+
+The state normalizer rejects a lease beyond the configured bound, duplicate
+Qualification Leases for one candidate, a candidate holding qualification and
+Landing authority together, a Landing Warrant without its exact landing
+candidate, and any state-root drift. Git expected-old, non-force ref advancement
+continues to serialize durable mutations. These checks retain the existing
+two-phase safety rule: source/native qualification is evidence, while the
+exclusive final authority is candidate- and integration-specific.
+
+## Bounded scheduler and recovery
+
+Landing selection is FIFO among candidates that have completed qualification.
+When a later candidate receives a Landing Warrant, each older nonterminal
+candidate consumes one durable overtake from its
+`policy.maxLandingOvertakes` budget. Once an older candidate reaches that
+bound, later candidates cannot receive a Warrant. The older candidate receives
+the next landing priority after qualification, or reaches a rooted terminal
+failure after `policy.maxQualificationAttempts` heartbeat expiries. This makes
+the bound independent of controller restart frequency or later arrival rate;
+setting it to zero enforces strict FIFO landing priority.
+
+Qualification Leases and Landing Warrants both support fenced heartbeats. A
+missed heartbeat is recovered at expiry; recovery releases capacity and emits
+a deterministic content-rooted wake instruction for the next domain-eligible
+qualification candidates and the next fair landing candidate. Completion,
+cancellation, terminal failure, dequeue, and already-merged settlement emit the
+same wake shape. Exact duplicate heartbeats, recovery, and terminal events are
+state-root-preserving no-ops. Competing controllers still commit through one
+expected-old, non-force ref update, so only one transition can become durable.
+
+## Terminal settlement
+
+Terminal provider evidence is authoritative cleanup input. A matching merged,
+failed, dequeued, or cancelled candidate releases its Qualification Lease or
+Landing Warrant in the same expected-old state transition, even when the lease
+TTL has not expired. An active authority requires its exact token and
+generation for that transition. Repeating the same outcome and evidence is a
+root-preserving no-op; outcome or evidence drift fails closed. A terminal event
+for a candidate that never entered the state is also an explicit no-op.
+
+TTL recovery remains crash recovery, not the normal terminal cleanup path.
+
+## Public contract
+
+- Machine schema:
+  [`contracts/dev-delivery-authority-v2.schema.json`](../contracts/dev-delivery-authority-v2.schema.json),
+  packaged as `dist/site/schemas/dev-delivery-authority-v2.schema.json`.
+- Node API: `@kungfu-tech/buildchain/dev-delivery-authority` exports the v2
+  state, migration, lease, heartbeat, recovery, Landing, admission,
+  observation, and settlement functions. `@kungfu-tech/buildchain/dev-delivery-warrant`
+  remains byte- and behavior-compatible for v1 consumers.
+- CLI: `buildchain dev authority
+<migrate|submit|lease-qualification|heartbeat-qualification|complete-qualification|lease-landing|heartbeat-landing|recover|admit-merge-group|settle|observe>`.
+- Generated references: [`cli-reference.md`](cli-reference.md) and
+  [`node-api-reference.md`](node-api-reference.md).
+
+All mutations are plan-only unless `--execute` is supplied. Merge-group
+admission is always a read-only authority check; it never mutates GitHub Merge
+Queue itself.
+
+## Consequences
+
+Qualification throughput can increase without increasing the number of
+candidates permitted to land. Consumers retain the byte- and behavior-compatible
+single-flight default until they deliberately deploy the v2 mode. The tradeoff
+is a second state contract and controller family; Buildchain keeps that
+separation explicit so a rollout cannot silently weaken Warrant semantics.

package/docs/dev-delivery-warrant.md

@@ -44,8 +44,11 @@ source binding. It reserves the next protected-dev landing before expensive
 native shards start, but it is not GitHub Merge Queue admission authority.
 Heartbeat extends only that generation. Native proof success atomically
 upgrades the same token and generation to `qualified`; only then may enqueue
-begin. Expiry recovery rejects the old token, retains queue age, and returns
-the candidate to selection.
+begin. Expiry fences further mutations by the old token, but it does not prove
+that the old native process stopped. The active Warrant therefore remains in
+place until bounded termination is proven by rooted terminal evidence. Only
+that exact fenced settlement may clear the holder and permit successor
+selection.
 
 A terminal event may cancel a candidate before selection without minting a
 Warrant. This transition is limited to an exact non-active queued candidate and
@@ -55,7 +58,12 @@ An active candidate still requires its current fencing token and lease
 generation. Exact duplicate cancellation evidence is a visible no-op; identity,
 state, event, or evidence drift fails closed.
 
-The reusable terminal controller uses one `settle` operation for active,
+The reusable terminal controller classifies authoritative completion,
+cancellation, supersession, native failure, and transient dequeue separately.
+`dequeued` alone never clears an active Warrant: a fresh holder continues with
+the same generation and token, while an expired holder waits for proof that its
+fenced worker stopped. Queued work may still settle as dequeued because it never
+started native execution. The controller uses one `settle` operation for active,
 queued, already-terminal, and never-admitted pull requests. An active Warrant
 still requires its exact fence and evidence. A matching queued cancellation is
 persisted normally. A duplicate terminal event or a pull request that never
@@ -86,9 +94,11 @@ evidence. Ready state and approval are established before provisional
 selection.
 
 Native Qualification Proof is separate. It binds semantic source and patch,
-plan, affected closure, dependency graph, toolchain, covered paths, native
-shard evidence, and the exact dev base used by the native composition. Before
-reuse, the consumer classifies the dev delta:
+plan, affected closure, dependency graph, toolchain, the exact execution
+environment contract, covered paths, native shard evidence, and the exact dev
+base used by the native composition. Before reuse, the consumer roots the
+complete attributed Dev delta, including both sides of every rename, then
+classifies it:
 
 - unchanged semantic roots plus an unrelated fully attributed base delta reuse
   native qualification and run only a cheap Project Cut replay. GitHub's `behind`
@@ -97,8 +107,15 @@ reuse, the consumer classifies the dev delta:
   context roots, and a qualified `project.cut.merge-queue-admission/v1`
   receipt;
 - an overlapping delta reruns affected native shards or the full native plan;
-- an unknown graph or changed source, plan, closure, dependency, or toolchain
-  root fails closed to full native qualification.
+- an unknown or truncated graph, ambiguous rename, missing attribution, or
+  changed source, plan, closure, dependency, toolchain, or environment root
+  fails closed to full native qualification.
+
+The reuse decision binds the exact old and current Dev heads, normalized changed
+paths and rename pairs in `baseDeltaRoot`. This makes local and hosted replay of
+the same inputs byte-deterministic. Generated outputs that participate in the
+affected closure must be listed in `affected-paths-json`; a delta touching one
+of those surfaces is overlap, not a documentation-only advance.
 
 Integration Delivery Proof is separate and cannot be cached across candidates.
 It binds the exact current dev base, replay tree, GitHub `merge_group` head and
@@ -123,10 +140,12 @@ buildchain dev warrant select --repository owner/repository \
   --branch dev/v4/v4.0 --execute
 
 buildchain dev proof native --branch dev/v4/v4.0 \
-  --qualified-base <sha> --affected-paths-json '["packages/native"]' ...
+  --qualified-base <sha> --environment-root <root> \
+  --affected-paths-json '["packages/native"]' ...
 
 buildchain dev proof classify-native --source-proof native-proof.json \
-  --current-base <sha> --graph-known true --changed-paths-json '[]' ...
+  --current-base <sha> --graph-known true --attribution-complete true \
+  --changed-paths-json '[]' --renames-json '[]' ...
 
 buildchain dev warrant qualify --repository owner/repository \
   --branch dev/v4/v4.0 --fencing-token <root> --lease-generation 1 \
@@ -144,6 +163,13 @@ buildchain dev warrant cancel-queued --repository owner/repository \
 Warrant-scoped mutations require the exact fencing token and lease generation.
 `close` also requires a rooted terminal evidence object.
 
+Expensive native commands must run through `dev-delivery-native-run.mjs` (or an
+equivalent exact consumer). It performs an exact fenced heartbeat before spawn,
+renews throughout the complete child lifetime, performs a final renewal before
+accepting success, and terminates the process group on heartbeat or fencing
+failure. Missing, stale, expired, or mismatched Warrant state therefore blocks
+native spawn instead of becoming qualification evidence.
+
 Proof commands create, verify, classify, and compose the two proof layers:
 
 ```sh
@@ -157,7 +183,7 @@ buildchain dev proof integration --warrant-result warrant.json ...
 
 ## Bounded-concurrency shadow qualification
 
-The production queue remains single-flight. A separate effect-disabled shadow
+The default production queue remains single-flight. A separate effect-disabled shadow
 planner can replay the same deterministic candidate order with a bound of one
 or two lanes. It does not issue, renew, supersede, close, or persist a Warrant;
 it cannot enqueue a pull request; and its output explicitly carries no
@@ -188,6 +214,62 @@ additional runner cost, ambiguity, and false positives. A `proceed` result is
 only evidence for a separate reviewed rollout decision; it never changes the
 live Warrant schema, queue state, merge-queue policy, or protected branch.
 
+## Opt-in bounded qualification and exclusive landing
+
+Buildchain also defines an explicit production opt-in that turns successful
+shadow evidence into a separate v2 authority state. It does not widen or
+reinterpret the v1 Warrant queue. The accepted
+[`Qualification Lease and Landing Warrant ADR`](dev-delivery-qualification-landing-adr.md)
+and `contracts/dev-delivery-authority-v2.schema.json` are authoritative.
+
+In `bounded-qualification-landing` mode, a configured number of exact
+Qualification Leases may coexist. Each lease carries
+`authority = qualification-only` and `mergeGroupAdmission = false`. Completing
+qualification records evidence and releases that lease. Qualified candidates
+then wait for the one `Landing Warrant`, which alone carries
+`authority = merge-group-admission` and may be checked for `merge_group`
+admission.
+
+Concurrency is granted only across disjoint rooted `qualificationDomains`.
+Overlap and unknown domains are held behind the active safety boundary with an
+explicit content-rooted reason. `maxLandingOvertakes` prevents a slow older
+candidate from being bypassed indefinitely, while `maxQualificationAttempts`
+turns repeated heartbeat loss into a rooted terminal failure. Every release
+returns a deterministic rooted wake instruction; an exact duplicate release or
+recovery is a state-root-preserving no-op.
+
+The public command family is explicit:
+
+```sh
+buildchain dev authority migrate --repository owner/repository \
+  --branch dev/v3/v3.0 --legacy-state v1-queue.json --execute --json
+buildchain dev authority lease-qualification --repository owner/repository \
+  --branch dev/v4/v4.0 --execute
+buildchain dev authority heartbeat-qualification --repository owner/repository \
+  --branch dev/v4/v4.0 --candidate-id <root> \
+  --authority-token <root> --authority-generation 1 --execute
+buildchain dev authority complete-qualification --repository owner/repository \
+  --branch dev/v4/v4.0 --candidate-id <root> \
+  --authority-token <root> --authority-generation 1 \
+  --evidence-root <qualification-root> --execute
+buildchain dev authority lease-landing --repository owner/repository \
+  --branch dev/v4/v4.0 --execute
+buildchain dev authority heartbeat-landing --repository owner/repository \
+  --branch dev/v4/v4.0 --candidate-id <root> \
+  --authority-token <root> --authority-generation 1 --execute
+buildchain dev authority recover --repository owner/repository \
+  --branch dev/v4/v4.0 --execute
+buildchain dev authority admit-merge-group --repository owner/repository \
+  --branch dev/v4/v4.0 --candidate-id <root> \
+  --authority-token <root> --authority-generation 1 \
+  --merge-group-head <sha>
+```
+
+Terminal settlement releases either authority immediately from exact evidence;
+it does not wait for TTL. Exact duplicate settlement is a state-root-preserving
+no-op. The default `buildchain dev warrant` commands, v1 state bytes, and
+single-flight behavior do not change while this mode is off.
+
 ## Workflow rollout and rollback
 
 The reusable `dev-pr-auto-merge.yml` supports three explicit rollout modes:
@@ -209,13 +291,24 @@ The reusable `dev-pr-auto-merge.yml` supports three explicit rollout modes:
   configured consumer workflow is dispatched immediately for that exact PR,
   head, and source run; the candidate is not left waiting for a patrol cron.
 
+The controller persists a completed native proof before its final base
+reclassification. A later exact retry can supply that proof and avoid the
+expensive native command when the rooted delta still proves reuse safe. A
+duplicate dispatch against the same already-qualified Warrant returns the same
+proof and reuse roots without another queue mutation. Both result forms carry
+`landingAuthority: false`: only the live qualified Warrant plus exact-head
+GitHub merge-queue admission can authorize landing.
+
 The required controller checks the protected base again after native work. A
 disjoint attributed delta reuses the proof. Overlap or unknown attribution
 triggers one automatic revalidation on the latest base; continued overlap,
 native failure, cancellation, semantic head movement, or an unrecoverable merge
 conflict closes the exact fence. The next queued candidate is notified through
-the `buildchain-dev-delivery-wake` repository event. If cancellation prevents
-cleanup, lease expiry recovers retained queue age and mints a new fence.
+the `buildchain-dev-delivery-wake` repository event. Its complete semantic
+candidate is carried under the single `client_payload.candidate` envelope so
+GitHub's ten-property top-level limit cannot discard proof bindings. If
+cancellation prevents cleanup, lease expiry recovers retained queue age and
+mints a new fence.
 
 Consumers should deploy `shadow` first, inspect receipts, then change their
 protected caller to `required`. Rollback is a reviewed caller change back to

package/docs/node-api-reference.md

@@ -1426,7 +1426,7 @@ Target: `./packages/core/buildchain-contract.js`. Public symbols: 26.
 | `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = "v3", resolvedSha = "", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = "v3", resolvedSha = "", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:846` |
 | `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:137` |
 | `createHistoricalBuildchainCompatibilityProofs` | function: function createHistoricalBuildchainCompatibilityProofs() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createHistoricalBuildchainCompatibilityProofs } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:252` |
-| `evaluateBuildchainChannelBinding` | function: function evaluateBuildchainChannelBinding({ workflowShellRef = "", runtimeRef = "", lockRef = "", lockMajorLine = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false } = {}) | { workflowShellRef = "", runtimeRef = "", lockRef = "", lockMajorLine = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateBuildchainChannelBinding } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-channel-identity.js:97` |
+| `evaluateBuildchainChannelBinding` | function: function evaluateBuildchainChannelBinding({ workflowShellRef = "", runtimeRef = "", lockRef = "", lockMajorLine = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false } = {}) | { workflowShellRef = "", runtimeRef = "", lockRef = "", lockMajorLine = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateBuildchainChannelBinding } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-channel-identity.js:96` |
 | `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock({ lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {}) | { lock, current, runtimeRef = "", runtimeSha = "", runtimeClass = "", compatibilityPolicy = "", workflowShellRef = "", expectedChannel = "", expectedMajor = "", allowOpaqueRuntime = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-compatibility-proof.js:476` |
 | `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-contract.js:801` |
 | `normalizeBuildchainRef` | function: function normalizeBuildchainRef(ref = "") | ref = "" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeBuildchainRef } from "@kungfu-tech/buildchain/buildchain-contract";` | `packages/core/buildchain-channel-identity.js:10` |
@@ -1533,19 +1533,49 @@ Target: `./packages/core/diagnostics.js`. Public symbols: 30.
 | `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = "platforms-first-main-last", requireTrustedPublishing = true, requireLifecycleStages = ["install", "build", "verify", "publish"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = "platforms-first-main-last", requireTrustedPublishing = true, requireLifecycleStages = ["install", "build", "verify", "publish"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from "@kungfu-tech/buildchain/diagnostics";` | `packages/core/diagnostics.js:329` |
 | `writeDiagnosticsArtifact` | function: function writeDiagnosticsArtifact(filePath, diagnostics) | filePath, diagnostics | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { writeDiagnosticsArtifact } from "@kungfu-tech/buildchain/diagnostics";` | `packages/core/diagnostics.js:1464` |
 
+## `@kungfu-tech/buildchain/dev-delivery-authority`
+
+Target: `./packages/core/dev-delivery-authority.js`. Public symbols: 22.
+
+| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `acquireDevDeliveryLandingWarrant` | function: function acquireDevDeliveryLandingWarrant(stateInput, { now = new Date().toISOString(), leaseSeconds } = {}) | stateInput, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { acquireDevDeliveryLandingWarrant } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:735` |
+| `acquireDevDeliveryQualificationLease` | function: function acquireDevDeliveryQualificationLease(stateInput, { now = new Date().toISOString(), leaseSeconds } = {}) | stateInput, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { acquireDevDeliveryQualificationLease } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:553` |
+| `admitDevDeliveryMergeGroup` | function: function admitDevDeliveryMergeGroup(stateInput, authorityInput, { mergeGroupHead, now = new Date().toISOString() } = {}) | stateInput, authorityInput, { mergeGroupHead, now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { admitDevDeliveryMergeGroup } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:859` |
+| `completeDevDeliveryQualification` | function: function completeDevDeliveryQualification(stateInput, leaseInput, { evidenceRoot, now = new Date().toISOString() } = {}) | stateInput, leaseInput, { evidenceRoot, now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { completeDevDeliveryQualification } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:672` |
+| `createDevDeliveryAuthorityState` | function: function createDevDeliveryAuthorityState({ repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {}) | { repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createDevDeliveryAuthorityState } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:144` |
+| `DEV_DELIVERY_AUTHORITY_CONTRACT` | constant: const DEV_DELIVERY_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_AUTHORITY_CONTRACT } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:5` |
+| `DEV_DELIVERY_AUTHORITY_MIGRATION_SCHEMA` | constant: const DEV_DELIVERY_AUTHORITY_MIGRATION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_AUTHORITY_MIGRATION_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:11` |
+| `DEV_DELIVERY_AUTHORITY_MODE` | constant: const DEV_DELIVERY_AUTHORITY_MODE | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_AUTHORITY_MODE } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:6` |
+| `DEV_DELIVERY_AUTHORITY_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_AUTHORITY_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_AUTHORITY_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:9` |
+| `DEV_DELIVERY_LANDING_WARRANT_SCHEMA` | constant: const DEV_DELIVERY_LANDING_WARRANT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_LANDING_WARRANT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:8` |
+| `DEV_DELIVERY_MERGE_GROUP_ADMISSION_SCHEMA` | constant: const DEV_DELIVERY_MERGE_GROUP_ADMISSION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_MERGE_GROUP_ADMISSION_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:10` |
+| `DEV_DELIVERY_QUALIFICATION_LEASE_SCHEMA` | constant: const DEV_DELIVERY_QUALIFICATION_LEASE_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_QUALIFICATION_LEASE_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:7` |
+| `DEV_DELIVERY_SCHEDULER_REASON_SCHEMA` | constant: const DEV_DELIVERY_SCHEDULER_REASON_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_SCHEDULER_REASON_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:12` |
+| `DEV_DELIVERY_SCHEDULER_WAKE_SCHEMA` | constant: const DEV_DELIVERY_SCHEDULER_WAKE_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_SCHEDULER_WAKE_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:13` |
+| `heartbeatDevDeliveryLandingWarrant` | function: function heartbeatDevDeliveryLandingWarrant(stateInput, warrantInput, { now = new Date().toISOString(), leaseSeconds } = {}) | stateInput, warrantInput, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { heartbeatDevDeliveryLandingWarrant } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:814` |
+| `heartbeatDevDeliveryQualificationLease` | function: function heartbeatDevDeliveryQualificationLease(stateInput, leaseInput, { now = new Date().toISOString(), leaseSeconds } = {}) | stateInput, leaseInput, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { heartbeatDevDeliveryQualificationLease } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:628` |
+| `migrateDevDeliveryAuthorityState` | function: function migrateDevDeliveryAuthorityState(queueInput, { policy = {}, now = new Date().toISOString() } = {}) | queueInput, { policy = {}, now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { migrateDevDeliveryAuthorityState } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:264` |
+| `normalizeDevDeliveryAuthorityState` | function: function normalizeDevDeliveryAuthorityState(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeDevDeliveryAuthorityState } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:202` |
+| `observeDevDeliveryAuthorityState` | function: function observeDevDeliveryAuthorityState(stateInput, { now = new Date().toISOString() } = {}) | stateInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { observeDevDeliveryAuthorityState } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:961` |
+| `recoverDevDeliveryAuthority` | function: function recoverDevDeliveryAuthority(stateInput, { now = new Date().toISOString() } = {}) | stateInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoverDevDeliveryAuthority } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:711` |
+| `settleDevDeliveryAuthorityCandidate` | function: function settleDevDeliveryAuthorityCandidate(stateInput, input, { now = new Date().toISOString() } = {}) | stateInput, input, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { settleDevDeliveryAuthorityCandidate } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:882` |
+| `submitDevDeliveryAuthorityCandidate` | function: function submitDevDeliveryAuthorityCandidate(stateInput, input, { now = new Date().toISOString() } = {}) | stateInput, input, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { submitDevDeliveryAuthorityCandidate } from "@kungfu-tech/buildchain/dev-delivery-authority";` | `packages/core/dev-delivery-authority.js:366` |
+
 ## `@kungfu-tech/buildchain/dev-delivery-warrant`
 
-Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 42.
+Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 44.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| `cancelQueuedDevDeliveryCandidate` | function: function cancelQueuedDevDeliveryCandidate(queueInput, input, options) | queueInput, input, options | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cancelQueuedDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:600` |
+| `cancelQueuedDevDeliveryCandidate` | function: function cancelQueuedDevDeliveryCandidate(queueInput, input, options) | queueInput, input, options | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cancelQueuedDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:641` |
 | `classifyDevDeliveryDelta` | function: function classifyDevDeliveryDelta({ proof, current = {} } = {}) | { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyDevDeliveryDelta } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:75` |
-| `closeDevDeliveryWarrant` | function: function closeDevDeliveryWarrant(queueInput, warrant, { outcome, evidenceRoot, reason = "", now = new Date().toISOString() } = {}) | queueInput, warrant, { outcome, evidenceRoot, reason = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { closeDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:552` |
-| `createDevDeliveryQueue` | function: function createDevDeliveryQueue({ repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {}) | { repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:106` |
+| `closeDevDeliveryWarrant` | function: function closeDevDeliveryWarrant(queueInput, warrant, { outcome, evidenceRoot, reason = "", now = new Date().toISOString() } = {}) | queueInput, warrant, { outcome, evidenceRoot, reason = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { closeDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:586` |
+| `createDevDeliveryQueue` | function: function createDevDeliveryQueue({ repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {}) | { repository: repositoryInput, protectedBase: protectedBaseInput, policy = {}, now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:120` |
 | `createIntegrationDeliveryProof` | function: function createIntegrationDeliveryProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createIntegrationDeliveryProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:207` |
-| `createNativeProofReuseDecision` | function: function createNativeProofReuseDecision({ proof, current = {} } = {}) | { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:205` |
-| `createNativeQualificationProof` | function: function createNativeQualificationProof(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:55` |
+| `createNativeProofBaseDelta` | function: function createNativeProofBaseDelta(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofBaseDelta } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:58` |
+| `createNativeProofReuseDecision` | function: function createNativeProofReuseDecision({ proof, current = {} } = {}) | { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:288` |
+| `createNativeQualificationProof` | function: function createNativeQualificationProof(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:88` |
 | `createProjectCutReplayPlan` | function: function createProjectCutReplayPlan(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createProjectCutReplayPlan } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:121` |
 | `createProjectCutReplayProof` | function: function createProjectCutReplayProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createProjectCutReplayProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:141` |
 | `createReleaseBlockerPriorityClaim` | function: function createReleaseBlockerPriorityClaim(repairInput, input = {}) | repairInput, input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseBlockerPriorityClaim } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/release-blocker-priority.js:32` |
@@ -1554,31 +1584,32 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 42.
 | `DEV_DELIVERY_CLASSES` | constant: const DEV_DELIVERY_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_CLASSES } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:24` |
 | `DEV_DELIVERY_LEASE_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_LEASE_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_LEASE_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:16` |
 | `DEV_DELIVERY_PRIORITIES` | constant: const DEV_DELIVERY_PRIORITIES | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_PRIORITIES } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:18` |
-| `DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:16` |
+| `DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:18` |
 | `DEV_DELIVERY_QUEUE_CONTRACT` | constant: const DEV_DELIVERY_QUEUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_QUEUE_CONTRACT } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:12` |
 | `DEV_DELIVERY_SELECTION_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_SELECTION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_SELECTION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:15` |
 | `DEV_DELIVERY_SETTLEMENT_RECEIPT_SCHEMA` | value: DEV_DELIVERY_SETTLEMENT_RECEIPT_SCHEMA | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_SETTLEMENT_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `DEV_DELIVERY_SUBMISSION_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_SUBMISSION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_SUBMISSION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:14` |
 | `DEV_DELIVERY_WARRANT_SCHEMA` | constant: const DEV_DELIVERY_WARRANT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_WARRANT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:13` |
 | `devDeliveryContentRoot` | function: function devDeliveryContentRoot(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { devDeliveryContentRoot } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-common.js:27` |
-| `heartbeatDevDeliveryWarrant` | function: function heartbeatDevDeliveryWarrant(queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {}) | queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { heartbeatDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:467` |
+| `heartbeatDevDeliveryWarrant` | function: function heartbeatDevDeliveryWarrant(queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {}) | queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { heartbeatDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:508` |
 | `INTEGRATION_DELIVERY_PROOF_SCHEMA` | constant: const INTEGRATION_DELIVERY_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { INTEGRATION_DELIVERY_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:5` |
-| `NATIVE_PROOF_REUSE_DECISION_SCHEMA` | constant: const NATIVE_PROOF_REUSE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_REUSE_DECISION_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:14` |
+| `NATIVE_PROOF_BASE_DELTA_SCHEMA` | constant: const NATIVE_PROOF_BASE_DELTA_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_BASE_DELTA_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:20` |
+| `NATIVE_PROOF_REUSE_DECISION_SCHEMA` | constant: const NATIVE_PROOF_REUSE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_PROOF_REUSE_DECISION_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:16` |
 | `NATIVE_QUALIFICATION_PROOF_SCHEMA` | constant: const NATIVE_QUALIFICATION_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_QUALIFICATION_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:12` |
-| `normalizeDevDeliveryQueue` | function: function normalizeDevDeliveryQueue(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:121` |
-| `observeDevDeliveryQueue` | function: function observeDevDeliveryQueue(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { observeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:603` |
+| `normalizeDevDeliveryQueue` | function: function normalizeDevDeliveryQueue(input, expected = {}) | input, expected = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:135` |
+| `observeDevDeliveryQueue` | function: function observeDevDeliveryQueue(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { observeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:651` |
 | `PROJECT_CUT_REPLAY_PROOF_SCHEMA` | constant: const PROJECT_CUT_REPLAY_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { PROJECT_CUT_REPLAY_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:4` |
-| `qualifyDevDeliveryWarrant` | function: function qualifyDevDeliveryWarrant(queueInput, warrant, options) | queueInput, warrant, options | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { qualifyDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:501` |
-| `rankDevDeliveryCandidates` | function: function rankDevDeliveryCandidates(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { rankDevDeliveryCandidates } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:302` |
-| `recoverExpiredDevDeliveryWarrant` | function: function recoverExpiredDevDeliveryWarrant(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoverExpiredDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:502` |
+| `qualifyDevDeliveryWarrant` | function: function qualifyDevDeliveryWarrant(queueInput, warrant, options) | queueInput, warrant, options | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { qualifyDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:545` |
+| `rankDevDeliveryCandidates` | function: function rankDevDeliveryCandidates(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { rankDevDeliveryCandidates } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:339` |
+| `recoverExpiredDevDeliveryWarrant` | function: function recoverExpiredDevDeliveryWarrant(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoverExpiredDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:548` |
 | `RELEASE_BLOCKER_PRIORITY_CLAIM_SCHEMA` | constant: const RELEASE_BLOCKER_PRIORITY_CLAIM_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_BLOCKER_PRIORITY_CLAIM_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/release-blocker-priority.js:15` |
-| `selectDevDeliveryWarrant` | function: function selectDevDeliveryWarrant(queueInput, { now = new Date().toISOString(), leaseSeconds } = {}) | queueInput, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { selectDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:326` |
-| `settleDevDeliveryTerminalEvent` | constant: const settleDevDeliveryTerminalEvent | none | value | Import does not declare a throw contract. | none-on-import | `import { settleDevDeliveryTerminalEvent } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:601` |
+| `selectDevDeliveryWarrant` | function: function selectDevDeliveryWarrant(queueInput, { now = new Date().toISOString(), leaseSeconds } = {}) | queueInput, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { selectDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:363` |
+| `settleDevDeliveryTerminalEvent` | constant: const settleDevDeliveryTerminalEvent | none | value | Import does not declare a throw contract. | none-on-import | `import { settleDevDeliveryTerminalEvent } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:644` |
 | `SOURCE_QUALIFICATION_PROOF_SCHEMA` | constant: const SOURCE_QUALIFICATION_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { SOURCE_QUALIFICATION_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:3` |
-| `submitDevDeliveryCandidate` | function: function submitDevDeliveryCandidate(queueInput, input, { now = new Date().toISOString() } = {}) | queueInput, input, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { submitDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:216` |
+| `submitDevDeliveryCandidate` | function: function submitDevDeliveryCandidate(queueInput, input, { now = new Date().toISOString() } = {}) | queueInput, input, { now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { submitDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:245` |
 | `verifyIntegrationDeliveryProof` | function: function verifyIntegrationDeliveryProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyIntegrationDeliveryProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:228` |
-| `verifyNativeProofReuseDecision` | function: function verifyNativeProofReuseDecision(decisionInput, { proof, current = {} } = {}) | decisionInput, { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:209` |
-| `verifyNativeQualificationProof` | function: function verifyNativeQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:85` |
+| `verifyNativeProofReuseDecision` | function: function verifyNativeProofReuseDecision(decisionInput, { proof, current = {} } = {}) | decisionInput, { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:292` |
+| `verifyNativeQualificationProof` | function: function verifyNativeQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:119` |
 | `verifyProjectCutReplayProof` | function: function verifyProjectCutReplayProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyProjectCutReplayProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:187` |
 | `verifySourceQualificationProof` | function: function verifySourceQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifySourceQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:52` |