@kungfu-tech/buildchain 3.0.9-alpha.8 → 4.0.0-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (255) hide show
  1. package/AGENTS.md +39 -0
  2. package/README.md +17 -13
  3. package/actions/promote-buildchain-ref/README.md +0 -10
  4. package/actions/release-tail/README.md +6 -10
  5. package/architecture/internal-capabilities.json +502 -0
  6. package/architecture/maintainability-baseline.json +59 -0
  7. package/architecture/maintainability-policy.json +1384 -0
  8. package/architecture/release-tail-contract-inventory.json +587 -0
  9. package/architecture/v3-core-mechanism-inventory.json +1043 -0
  10. package/architecture/v3-core-mechanism-inventory.md +67 -0
  11. package/architecture/v4-adopter-delivery-parity.json +47 -0
  12. package/architecture/v4-architecture-constitution.md +210 -0
  13. package/architecture/v4-bootstrap-authority.json +56 -0
  14. package/architecture/v4-canonical-contract-fixtures.json +105 -0
  15. package/architecture/v4-capability-state-machine-manifest.json +480 -0
  16. package/architecture/v4-capability-state-machine-manifest.schema.json +202 -0
  17. package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.json +830 -0
  18. package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.md +223 -0
  19. package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.schema.json +318 -0
  20. package/architecture/v4-delivery-warrant-shadow-fixtures.json +227 -0
  21. package/architecture/v4-delivery-warrant-shadow-fixtures.schema.json +67 -0
  22. package/architecture/v4-exception-ledger.json +5 -0
  23. package/architecture/v4-exception-ledger.schema.json +56 -0
  24. package/architecture/v4-partial-mutation-recovery-qualification.json +65 -0
  25. package/architecture/v4-platform-stage-checkpoints.json +97 -0
  26. package/architecture/v4-provider-operation-journal-contract.json +113 -0
  27. package/architecture/v4-release-activation-shadow-domain.json +61 -0
  28. package/architecture/v4-release-train-parity.json +68 -0
  29. package/architecture/v4-rust-libnode-bridge-evaluation.json +107 -0
  30. package/architecture/v4-rust-libnode-bridge-spike.md +85 -0
  31. package/architecture/v4-stable-publication-fence.json +66 -0
  32. package/architecture/v4-stage-capsule-contract.json +90 -0
  33. package/architecture/v4-stage-capsule-qualification.json +99 -0
  34. package/architecture/v4-stage-capsule-resume-planner.json +52 -0
  35. package/architecture/v4-stage-capsule-store-contract.json +72 -0
  36. package/bin/buildchain.mjs +15 -6
  37. package/contracts/auditable-demo-scenario-v1.schema.json +1 -1
  38. package/contracts/buildchain-v2-residuals-v1.json +2 -2
  39. package/contracts/fixtures/v4-delivery-warrant-trace-v1/golden.json +158 -0
  40. package/contracts/fixtures/v4-delivery-warrant-trace-v1/property.json +380 -0
  41. package/contracts/fixtures/v4-delivery-warrant-trace-v1/replay.json +163 -0
  42. package/contracts/fixtures/v4-partial-mutation-recovery-v1/shared.json +155 -0
  43. package/contracts/fixtures/v4-provider-operation-journal-v1/shared.json +457 -0
  44. package/contracts/fixtures/v4-provider-readback-idempotency-v1/shared.json +682 -0
  45. package/contracts/fixtures/v4-release-activation-shadow-v1/shared.json +53 -0
  46. package/contracts/fixtures/v4-stable-publication-fence-v1/shared.json +56 -0
  47. package/contracts/fixtures/v4-stage-capsule-resume-v1/late-platform-failure.json +176 -0
  48. package/contracts/fixtures/v4-stage-capsule-store-v1/shared.json +132 -0
  49. package/contracts/fixtures/v4-stage-capsule-v1/shared.json +111 -0
  50. package/contracts/v4-canonical-contracts-v1.schema.json +182 -0
  51. package/contracts/v4-delivery-warrant-semantic-diff-report-v1.schema.json +284 -0
  52. package/contracts/v4-delivery-warrant-trace-v1.schema.json +215 -0
  53. package/contracts/v4-host-contract-v1.schema.json +135 -0
  54. package/contracts/v4-partial-mutation-recovery-v1.schema.json +168 -0
  55. package/contracts/v4-provider-operation-journal-v1.schema.json +381 -0
  56. package/contracts/v4-release-activation-shadow-v1.schema.json +186 -0
  57. package/contracts/v4-stable-publication-fence-v1.schema.json +125 -0
  58. package/contracts/v4-stage-capsule-resume-v1.schema.json +225 -0
  59. package/contracts/v4-stage-capsule-store-v1.schema.json +154 -0
  60. package/contracts/v4-stage-capsule-v1.schema.json +178 -0
  61. package/crates/buildchain-v4-bridge/Cargo.lock +213 -0
  62. package/crates/buildchain-v4-bridge/Cargo.toml +12 -0
  63. package/crates/buildchain-v4-bridge/src/main.rs +495 -0
  64. package/dist/site/agent-index.json +0 -3
  65. package/dist/site/artifact-schemas.json +0 -6
  66. package/dist/site/buildchain-contract.json +103 -397
  67. package/dist/site/buildchain-site.json +302 -270
  68. package/dist/site/capability-registry.json +9 -11
  69. package/dist/site/cli-registry.json +8 -30
  70. package/dist/site/controller-registry.json +48 -8
  71. package/dist/site/kfd-claims.json +129 -142
  72. package/dist/site/kfd-upstream-aggregate.json +9 -9
  73. package/dist/site/manual-registry.json +18 -49
  74. package/dist/site/node-api-registry.json +1882 -4118
  75. package/dist/site/page-registry.json +278 -230
  76. package/dist/site/public-surface-audit.json +87 -185
  77. package/dist/site/publication-authority-registry.json +11 -1
  78. package/dist/site/publication-registry.json +4 -4
  79. package/dist/site/release-provenance.json +3 -7
  80. package/dist/site/schemas/kfd-support-projection-v1.schema.json +106 -0
  81. package/dist/site/site-manifest.json +22 -38
  82. package/dist/site/workflow-registry.json +80 -35
  83. package/docs/MAP.md +8 -4
  84. package/docs/auditable-demo.md +2 -2
  85. package/docs/aws-us-elastic-runner-burst-plane.md +7 -59
  86. package/docs/cli-reference.md +15 -92
  87. package/docs/cli.md +14 -14
  88. package/docs/dev-alpha-candidate-patrol.md +3 -11
  89. package/docs/dev-delivery-warrant.md +28 -100
  90. package/docs/engineering-housekeeper.md +12 -4
  91. package/docs/getting-started.md +1 -1
  92. package/docs/install.md +5 -5
  93. package/docs/kfd-support.md +2 -7
  94. package/docs/lifecycle-protocol.md +2 -4
  95. package/docs/node-api-reference.md +414 -523
  96. package/docs/release-flow.md +31 -31
  97. package/docs/release-governance.md +16 -28
  98. package/docs/release-passport.md +2 -15
  99. package/docs/release-tail-contract.md +13 -6
  100. package/docs/release-tail-provider-plane.md +13 -19
  101. package/docs/release-train.md +4 -4
  102. package/docs/reusable-build-surface.md +14 -27
  103. package/docs/site-bundle-contract.md +1 -5
  104. package/docs/stable-candidate-patrol.md +7 -7
  105. package/docs/v4-canonical-contracts.md +92 -0
  106. package/docs/v4-delivery-warrant-read-candidate.md +73 -0
  107. package/docs/v4-delivery-warrant-semantic-diff.md +75 -0
  108. package/docs/v4-production-release.md +63 -0
  109. package/docs/v4-stage-capsule.md +193 -0
  110. package/docs/versioning.md +3 -3
  111. package/package.json +19 -17
  112. package/packages/core/adopter-delivery-gate.js +576 -0
  113. package/packages/core/adopter-delivery-json.js +66 -0
  114. package/packages/core/artifact-signing.js +0 -61
  115. package/packages/core/artifact-verification-envelope.js +5 -5
  116. package/packages/core/build-facts.js +12 -4
  117. package/packages/core/buildchain-agent-manuals.js +0 -2
  118. package/packages/core/buildchain-config.js +4 -69
  119. package/packages/core/buildchain-contract.js +232 -46
  120. package/packages/core/buildchain-kfd-claims.js +1 -1
  121. package/packages/core/channel-candidate.js +0 -8
  122. package/packages/core/channel-promotion-baseline.js +0 -52
  123. package/packages/core/controller-evidence.js +3 -4
  124. package/packages/core/dev-alpha-candidate-selection.js +2 -10
  125. package/packages/core/dev-delivery-warrant-cancellation.js +0 -1
  126. package/packages/core/dev-delivery-warrant-settlement.js +1 -5
  127. package/packages/core/dev-delivery-warrant.js +12 -52
  128. package/packages/core/diagnostics.js +3 -8
  129. package/packages/core/github-governance-authority.js +3 -1
  130. package/packages/core/kfd-adopter-category-driver.js +167 -0
  131. package/packages/core/kfd-adopter-manifest.js +47 -46
  132. package/packages/core/kfd-gate.js +15 -45
  133. package/packages/core/paper-agent-entry.js +7 -16
  134. package/packages/core/paper-fleet.js +2 -2
  135. package/packages/core/paper-repository.js +2 -3
  136. package/packages/core/paper-scaffold-content.js +2 -23
  137. package/packages/core/paper.js +11 -43
  138. package/packages/core/publication-reproducibility.js +4 -4
  139. package/packages/core/release-line-bootstrap.js +21 -8
  140. package/packages/core/release-passport-contract.js +5 -5
  141. package/packages/core/release-passport.js +20 -131
  142. package/packages/core/self-dogfood-version.js +48 -35
  143. package/packages/core/spawn-command.js +232 -8
  144. package/packages/core/v4-adopter-delivery-parity.js +219 -0
  145. package/packages/core/v4-canonical-contracts.js +284 -0
  146. package/packages/core/v4-delivery-warrant-fixture-runner.js +371 -0
  147. package/packages/core/v4-delivery-warrant-read-candidate.js +279 -0
  148. package/packages/core/v4-delivery-warrant-semantic-diff-gate.js +352 -0
  149. package/packages/core/v4-delivery-warrant-shadow-adapter.js +447 -0
  150. package/packages/core/v4-partial-mutation-recovery-qualification.js +395 -0
  151. package/packages/core/v4-platform-stage-checkpoints.js +471 -0
  152. package/packages/core/v4-provider-operation-journal.js +531 -0
  153. package/packages/core/v4-provider-readback-idempotency.js +394 -0
  154. package/packages/core/v4-release-activation-shadow.js +519 -0
  155. package/packages/core/v4-stable-publication-fence.js +357 -0
  156. package/packages/core/v4-stage-capsule-local-store.js +426 -0
  157. package/packages/core/v4-stage-capsule-qualification-campaign.js +512 -0
  158. package/packages/core/v4-stage-capsule-qualification.js +456 -0
  159. package/packages/core/v4-stage-capsule-resume-planner.js +397 -0
  160. package/packages/core/v4-stage-capsule-store.js +401 -0
  161. package/packages/core/v4-stage-capsule.js +319 -0
  162. package/scripts/assemble-self-publication-admission.mjs +1 -1
  163. package/scripts/audit-publication-control-plane.mjs +5 -5
  164. package/scripts/auditable-demo-bundle-verification.mjs +3 -2
  165. package/scripts/auditable-demo-platform.mjs +2 -2
  166. package/scripts/auditable-demo-renditions.mjs +1 -1
  167. package/scripts/auditable-demo.mjs +2 -2
  168. package/scripts/aws-macos-jit-controller-core.mjs +13 -346
  169. package/scripts/aws-macos-jit-controller-runtime.mjs +2 -210
  170. package/scripts/aws-macos-jit-controller.mjs +37 -275
  171. package/scripts/aws-macos-jit-core.mjs +3 -41
  172. package/scripts/aws-macos-jit.mjs +0 -12
  173. package/scripts/aws-windows-jit-campaign.mjs +2 -2
  174. package/scripts/aws-windows-jit-controller-core.mjs +1 -1
  175. package/scripts/aws-windows-jit-controller.mjs +3 -3
  176. package/scripts/build-contract-core.mjs +3 -8
  177. package/scripts/build-standalone-binary.mjs +3 -14
  178. package/scripts/buildchain-channel-router.mjs +4 -0
  179. package/scripts/buildchain-cli-help.mjs +7 -13
  180. package/scripts/buildchain-contract-lock.mjs +0 -6
  181. package/scripts/check-action-bundles.mjs +3 -4
  182. package/scripts/check-internal-architecture.mjs +7 -6
  183. package/scripts/check-inventory.mjs +30 -25
  184. package/scripts/check-v4-public-dogfood-contract.mjs +270 -0
  185. package/scripts/create-release-bundle.mjs +8 -4
  186. package/scripts/dev-alpha-candidate-patrol.mjs +1 -22
  187. package/scripts/dev-delivery-proof.mjs +2 -54
  188. package/scripts/dev-delivery-warrant.mjs +59 -77
  189. package/scripts/dev-pr-auto-merge.mjs +4 -30
  190. package/scripts/dev-pr-delivery-warrant.mjs +0 -55
  191. package/scripts/dispatch-artifact-signing-authority.mjs +7 -4
  192. package/scripts/generate-buildchain-kfd-witnesses.mjs +94 -88
  193. package/scripts/generate-channel-build-workflow.mjs +54 -24
  194. package/scripts/generate-channel-promotion-workflow.mjs +15 -6
  195. package/scripts/generate-site-bundle.mjs +5 -21
  196. package/scripts/git-fetch-process-tree.mjs +34 -1
  197. package/scripts/init-repo.mjs +64 -159
  198. package/scripts/inspect-artifact-signing-requests.mjs +0 -6
  199. package/scripts/locked-source-checkout.mjs +3 -4
  200. package/scripts/maintainability-metrics.mjs +8 -2
  201. package/scripts/npm-publish-dry-run.mjs +2 -2
  202. package/scripts/npm-publish-transaction.mjs +2 -2
  203. package/scripts/publication-commit-evidence.mjs +23 -69
  204. package/scripts/release-candidate-resolver.mjs +11 -17
  205. package/scripts/release-tail.mjs +3 -49
  206. package/scripts/resume-from-candidate-run.mjs +9 -123
  207. package/scripts/run-lifecycle-core.mjs +12 -13
  208. package/scripts/seal-artifact-signing-requests.mjs +17 -21
  209. package/scripts/site-capability-metadata.mjs +2 -7
  210. package/scripts/stable-candidate-qualification.mjs +10 -10
  211. package/scripts/v4-architecture.mjs +12 -2
  212. package/scripts/v4-bridge-bootstrap.mjs +141 -0
  213. package/scripts/v4-bridge-evidence.mjs +141 -0
  214. package/scripts/v4-host-adapter.mjs +182 -0
  215. package/scripts/v4-platform-stage-checkpoint-rehearsal.mjs +207 -0
  216. package/scripts/v4-stage-capsule-qualification.mjs +528 -0
  217. package/scripts/v4-stage-capsule-resume-rehearsal.mjs +57 -0
  218. package/scripts/v4-warrant-shadow-plan.mjs +601 -0
  219. package/scripts/verify-golden-path.mjs +5 -5
  220. package/scripts/web-surface-cloudfront-rewrite.mjs +15 -15
  221. package/scripts/web-surface-core.mjs +2 -8
  222. package/scripts/workflow-call-contract.mjs +5 -184
  223. package/contracts/fixtures/kfd-adopter-release-v1/kfd-4-perspective.json +0 -16
  224. package/contracts/fixtures/kfd-adopter-release-v1/kfd-4-replay.json +0 -57
  225. package/contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json +0 -47
  226. package/contracts/fixtures/next-development-transition-v1/semver-auto-planned.json +0 -47
  227. package/contracts/fixtures/next-development-transition-v1/version-model-cases.json +0 -40
  228. package/contracts/next-development-request-v1.schema.json +0 -66
  229. package/contracts/next-development-transition-v1.schema.json +0 -292
  230. package/contracts/publication-rehearsal-capsule-v1.schema.json +0 -173
  231. package/dist/site/schemas/publication-rehearsal-capsule-v1.schema.json +0 -269
  232. package/dist/site/schemas/release-tail-capabilities-v1.schema.json +0 -353
  233. package/dist/site/schemas/release-tail-provider-bindings-v1.schema.json +0 -94
  234. package/docs/next-development-transition.md +0 -119
  235. package/docs/publication-rehearsal.md +0 -94
  236. package/packages/core/buildchain-compatibility-proof.js +0 -631
  237. package/packages/core/dev-delivery-native-proof.js +0 -333
  238. package/packages/core/dev-delivery-warrant-shadow.js +0 -502
  239. package/packages/core/next-development-candidate-reservation.js +0 -186
  240. package/packages/core/next-development-controller.js +0 -726
  241. package/packages/core/next-development-projection.js +0 -288
  242. package/packages/core/next-development-transition.js +0 -738
  243. package/packages/core/publication-rehearsal-projection.js +0 -173
  244. package/packages/core/publication-rehearsal-runtime.js +0 -921
  245. package/scripts/aws-macos-jit-instance-rehydrate.mjs +0 -260
  246. package/scripts/aws-macos-jit-source-rebind.mjs +0 -724
  247. package/scripts/dev-delivery-native-run.mjs +0 -187
  248. package/scripts/dev-delivery-two-phase.mjs +0 -598
  249. package/scripts/generate-next-development-guidance.mjs +0 -49
  250. package/scripts/materialize-self-release-candidate-version.mjs +0 -137
  251. package/scripts/next-development-self-dogfood-harness.mjs +0 -409
  252. package/scripts/next-development-self-dogfood.mjs +0 -532
  253. package/scripts/next-development-transition.mjs +0 -47
  254. package/scripts/release-candidate-tail-reseal.mjs +0 -426
  255. package/templates/native-dev-delivery.yml +0 -82
@@ -0,0 +1,53 @@
1
+ {
2
+ "schema": "buildchain-v4-release-activation-request/v1",
3
+ "declaredAt": "2026-08-09T06:00:00.000Z",
4
+ "transactionRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
5
+ "qualificationRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
6
+ "authorityRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
7
+ "policyRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
8
+ "steps": [
9
+ {
10
+ "id": "github-release",
11
+ "dependencies": [],
12
+ "operation": {
13
+ "schema": "buildchain-v4-provider-operation-identity/v1",
14
+ "transactionRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
15
+ "capabilityId": "release.github",
16
+ "subjectRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
17
+ "targetRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
18
+ "authorityRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
19
+ "policyRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
20
+ },
21
+ "compensationBoundaryRoot": "sha256:7777777777777777777777777777777777777777777777777777777777777777"
22
+ },
23
+ {
24
+ "id": "npm-package",
25
+ "dependencies": ["github-release"],
26
+ "operation": {
27
+ "schema": "buildchain-v4-provider-operation-identity/v1",
28
+ "transactionRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
29
+ "capabilityId": "package.npm",
30
+ "subjectRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
31
+ "targetRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
32
+ "authorityRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
33
+ "policyRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
34
+ },
35
+ "compensationBoundaryRoot": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
36
+ },
37
+ {
38
+ "id": "oci-image",
39
+ "dependencies": ["github-release"],
40
+ "operation": {
41
+ "schema": "buildchain-v4-provider-operation-identity/v1",
42
+ "transactionRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
43
+ "capabilityId": "image.oci",
44
+ "subjectRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
45
+ "targetRoot": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
46
+ "authorityRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
47
+ "policyRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
48
+ },
49
+ "compensationBoundaryRoot": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
50
+ }
51
+ ],
52
+ "events": []
53
+ }
@@ -0,0 +1,56 @@
1
+ {
2
+ "schema": "buildchain-v4-stable-publication-request/v1",
3
+ "declaredAt": "2026-08-09T07:30:00.000Z",
4
+ "candidate": {
5
+ "generation": 21,
6
+ "commit": "95f5e5ffa5a4eeed67506ae11fe6dbd1a1d6ba2f",
7
+ "sourceRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
8
+ "metadataRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
9
+ "journalRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
10
+ "protectedAncestryRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
11
+ },
12
+ "qualification": {
13
+ "mode": "n-minus-one",
14
+ "authorityGeneration": 20,
15
+ "qualifiedCandidateRoot": "sha256:32eb0ee0e680280f148702bdc48afe64fb9df4bd8c8d301115d0a41804f3505c",
16
+ "qualifierAuthorityRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
17
+ "sealRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
18
+ "sourceRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
19
+ "metadataRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
20
+ "journalRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
21
+ "protectedAncestryRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
22
+ "providerConfirmationRoots": [
23
+ "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
24
+ "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
25
+ "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
26
+ "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
27
+ ]
28
+ },
29
+ "publisherAuthorityRoot": "sha256:7777777777777777777777777777777777777777777777777777777777777777",
30
+ "targets": [
31
+ {
32
+ "id": "stable-ref",
33
+ "kind": "stable-ref",
34
+ "desired": "release/v4/v4.0",
35
+ "providerConfirmationRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
36
+ },
37
+ {
38
+ "id": "npm-tag",
39
+ "kind": "npm-tag",
40
+ "desired": "latest",
41
+ "providerConfirmationRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
42
+ },
43
+ {
44
+ "id": "oci-tag",
45
+ "kind": "oci-tag",
46
+ "desired": "v4.0.0",
47
+ "providerConfirmationRoot": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
48
+ },
49
+ {
50
+ "id": "github-release",
51
+ "kind": "github-release",
52
+ "desired": "v4.0.0",
53
+ "providerConfirmationRoot": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd"
54
+ }
55
+ ]
56
+ }
@@ -0,0 +1,176 @@
1
+ {
2
+ "schema": "buildchain-v4-stage-capsule-resume-request/v1",
3
+ "evaluatedAt": "2026-08-10T00:00:00.000Z",
4
+ "nodes": [
5
+ {
6
+ "key": "build",
7
+ "dependencies": [],
8
+ "expectedIdentity": {
9
+ "schema": "buildchain-v4-stage-capsule-identity/v1",
10
+ "sourceRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
11
+ "platform": "linux-x64-gnu",
12
+ "platformRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
13
+ "stage": "build",
14
+ "toolchainRoots": [
15
+ {
16
+ "name": "clang",
17
+ "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
18
+ },
19
+ {
20
+ "name": "node",
21
+ "root": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
22
+ }
23
+ ],
24
+ "runtimeRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
25
+ "policyRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
26
+ "declaredInputs": [
27
+ {
28
+ "name": "lockfile",
29
+ "root": "sha256:7777777777777777777777777777777777777777777777777777777777777777"
30
+ },
31
+ {
32
+ "name": "source-tree",
33
+ "root": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
34
+ }
35
+ ],
36
+ "transformationRoot": "sha256:9999999999999999999999999999999999999999999999999999999999999999",
37
+ "outputManifestRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
38
+ "qualificationRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
39
+ "observationRoots": [
40
+ {
41
+ "name": "supply-chain",
42
+ "root": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
43
+ }
44
+ ]
45
+ },
46
+ "expectedRetentionPromise": {
47
+ "class": "wave-two",
48
+ "retainUntil": "2026-11-07T00:00:00.000Z"
49
+ },
50
+ "candidate": {
51
+ "capsule": {
52
+ "schema": "buildchain-v4-stage-capsule/v1",
53
+ "writerAuthority": "typescript-v3",
54
+ "rustAuthority": "validation-only",
55
+ "identity": {
56
+ "schema": "buildchain-v4-stage-capsule-identity/v1",
57
+ "sourceRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
58
+ "platform": "linux-x64-gnu",
59
+ "platformRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
60
+ "stage": "build",
61
+ "toolchainRoots": [
62
+ {
63
+ "name": "clang",
64
+ "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
65
+ },
66
+ {
67
+ "name": "node",
68
+ "root": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
69
+ }
70
+ ],
71
+ "runtimeRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
72
+ "policyRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
73
+ "declaredInputs": [
74
+ {
75
+ "name": "lockfile",
76
+ "root": "sha256:7777777777777777777777777777777777777777777777777777777777777777"
77
+ },
78
+ {
79
+ "name": "source-tree",
80
+ "root": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
81
+ }
82
+ ],
83
+ "transformationRoot": "sha256:9999999999999999999999999999999999999999999999999999999999999999",
84
+ "outputManifestRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
85
+ "qualificationRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
86
+ "observationRoots": [
87
+ {
88
+ "name": "supply-chain",
89
+ "root": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
90
+ }
91
+ ]
92
+ },
93
+ "identityRoot": "sha256:48e3ef563193c466785032b512aae986c4ce02c2c94b6749910e711812bcbacf",
94
+ "retentionPromise": {
95
+ "class": "wave-two",
96
+ "retainUntil": "2026-11-07T00:00:00.000Z"
97
+ },
98
+ "capsuleRoot": "sha256:d847ce1b9dc5d5c6f888ee5c196e9f17f921429b89c6f10ddcb5b9449e87d998"
99
+ },
100
+ "availability": {
101
+ "schema": "buildchain-v4-stage-capsule-availability/v1",
102
+ "capsuleRoot": "sha256:d847ce1b9dc5d5c6f888ee5c196e9f17f921429b89c6f10ddcb5b9449e87d998",
103
+ "observedAt": "2026-08-09T00:00:00.000Z",
104
+ "status": "available",
105
+ "contentRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
106
+ "qualificationRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
107
+ "transports": [
108
+ {
109
+ "name": "primary",
110
+ "root": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
111
+ }
112
+ ],
113
+ "faultCode": null
114
+ }
115
+ }
116
+ },
117
+ {
118
+ "key": "verify",
119
+ "dependencies": ["build"],
120
+ "expectedIdentity": {
121
+ "schema": "buildchain-v4-stage-capsule-identity/v1",
122
+ "sourceRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
123
+ "platform": "linux-x64-gnu",
124
+ "platformRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
125
+ "stage": "verify",
126
+ "toolchainRoots": [
127
+ {
128
+ "name": "clang",
129
+ "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
130
+ },
131
+ {
132
+ "name": "node",
133
+ "root": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
134
+ }
135
+ ],
136
+ "runtimeRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
137
+ "policyRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
138
+ "declaredInputs": [
139
+ {
140
+ "name": "lockfile",
141
+ "root": "sha256:7777777777777777777777777777777777777777777777777777777777777777"
142
+ },
143
+ {
144
+ "name": "source-tree",
145
+ "root": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
146
+ }
147
+ ],
148
+ "transformationRoot": "sha256:9999999999999999999999999999999999999999999999999999999999999999",
149
+ "outputManifestRoot": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
150
+ "qualificationRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
151
+ "observationRoots": [
152
+ {
153
+ "name": "supply-chain",
154
+ "root": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
155
+ }
156
+ ]
157
+ },
158
+ "expectedRetentionPromise": {
159
+ "class": "wave-two",
160
+ "retainUntil": "2026-11-07T00:00:00.000Z"
161
+ },
162
+ "candidate": null
163
+ }
164
+ ],
165
+ "targets": ["verify"],
166
+ "effects": [
167
+ {
168
+ "id": "publish-release",
169
+ "kind": "release-tail",
170
+ "provider": "github",
171
+ "afterStages": ["verify"],
172
+ "providerReadback": true,
173
+ "mutation": false
174
+ }
175
+ ]
176
+ }
@@ -0,0 +1,132 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "contract": "buildchain-v4-stage-capsule-store-fixtures/v1",
4
+ "validCases": [
5
+ {
6
+ "id": "linux-build-stage-store",
7
+ "capsule": {
8
+ "schema": "buildchain-v4-stage-capsule/v1",
9
+ "writerAuthority": "typescript-v3",
10
+ "rustAuthority": "validation-only",
11
+ "identity": {
12
+ "schema": "buildchain-v4-stage-capsule-identity/v1",
13
+ "sourceRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
14
+ "platform": "linux-x64-gnu",
15
+ "platformRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
16
+ "stage": "build",
17
+ "toolchainRoots": [
18
+ {
19
+ "name": "clang",
20
+ "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
21
+ },
22
+ {
23
+ "name": "node",
24
+ "root": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
25
+ }
26
+ ],
27
+ "runtimeRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
28
+ "policyRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
29
+ "declaredInputs": [
30
+ {
31
+ "name": "lockfile",
32
+ "root": "sha256:7777777777777777777777777777777777777777777777777777777777777777"
33
+ },
34
+ {
35
+ "name": "source-tree",
36
+ "root": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
37
+ }
38
+ ],
39
+ "transformationRoot": "sha256:9999999999999999999999999999999999999999999999999999999999999999",
40
+ "outputManifestRoot": "sha256:fa6e4dd512773a9853b2224a466354fb3f1999fd6a6f3caecc8f07faa0a60e39",
41
+ "qualificationRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
42
+ "observationRoots": [
43
+ {
44
+ "name": "supply-chain",
45
+ "root": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
46
+ }
47
+ ]
48
+ },
49
+ "identityRoot": "sha256:6c5ff8ab5748d3947ab899704179f2f22e970bb01737f484b8c147673790b084",
50
+ "retentionPromise": {
51
+ "class": "wave-two",
52
+ "retainUntil": "2026-11-07T00:00:00.000Z"
53
+ },
54
+ "capsuleRoot": "sha256:761781689e98149ea23992edd2d0662e2655e9bb179d7cf5fcd3ac6920c7a245"
55
+ },
56
+ "manifest": {
57
+ "schema": "buildchain-v4-stage-capsule-output-manifest/v1",
58
+ "entries": [
59
+ {
60
+ "name": "binary",
61
+ "root": "sha256:8992d9877af6ac31cf0800e3a31b0053ef452c26163892f6c2ac685abc9ab9b3",
62
+ "size": 7
63
+ },
64
+ {
65
+ "name": "metadata",
66
+ "root": "sha256:611e85acf03fe345e98db7a0d7a196259b6192dcee2858457b8e17b382fab703",
67
+ "size": 6
68
+ }
69
+ ],
70
+ "manifestRoot": "sha256:fa6e4dd512773a9853b2224a466354fb3f1999fd6a6f3caecc8f07faa0a60e39"
71
+ },
72
+ "blobs": [
73
+ {
74
+ "name": "binary",
75
+ "root": "sha256:8992d9877af6ac31cf0800e3a31b0053ef452c26163892f6c2ac685abc9ab9b3",
76
+ "bytesBase64": "YWxwaGFcbg=="
77
+ },
78
+ {
79
+ "name": "metadata",
80
+ "root": "sha256:611e85acf03fe345e98db7a0d7a196259b6192dcee2858457b8e17b382fab703",
81
+ "bytesBase64": "YmV0YVxu"
82
+ }
83
+ ],
84
+ "evaluatedAt": "2026-08-10T00:00:00.000Z",
85
+ "retentionState": {
86
+ "schema": "buildchain-v4-stage-capsule-retention-state/v1",
87
+ "capsuleRoot": "sha256:761781689e98149ea23992edd2d0662e2655e9bb179d7cf5fcd3ac6920c7a245",
88
+ "promiseRoot": "sha256:3104d636d57c55f6c30ffbf5a044abc73770470e02174f834b447bcefb950653",
89
+ "evaluatedAt": "2026-08-10T00:00:00.000Z",
90
+ "status": "retained",
91
+ "stateRoot": "sha256:37a2b94c4f06af6401fa41dca7cc5c2b32685a46d83b3a1be6691966aaf01d19"
92
+ },
93
+ "transport": {
94
+ "schema": "buildchain-v4-stage-capsule-transport/v1",
95
+ "provider": "local-filesystem",
96
+ "mode": "local-reference",
97
+ "locatorRoot": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
98
+ "observedAt": "2026-08-10T00:00:00.000Z",
99
+ "transportRoot": "sha256:87157fe43486352218600fae35f9d748e96914468886507864a3ad5ce6c17c2f"
100
+ },
101
+ "availability": {
102
+ "schema": "buildchain-v4-stage-capsule-availability/v1",
103
+ "capsuleRoot": "sha256:761781689e98149ea23992edd2d0662e2655e9bb179d7cf5fcd3ac6920c7a245",
104
+ "observedAt": "2026-08-10T00:00:00.000Z",
105
+ "status": "available",
106
+ "contentRoot": "sha256:fa6e4dd512773a9853b2224a466354fb3f1999fd6a6f3caecc8f07faa0a60e39",
107
+ "qualificationRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
108
+ "transports": [
109
+ {
110
+ "name": "local-reference",
111
+ "root": "sha256:87157fe43486352218600fae35f9d748e96914468886507864a3ad5ce6c17c2f"
112
+ }
113
+ ],
114
+ "faultCode": null
115
+ },
116
+ "receipt": {
117
+ "schema": "buildchain-v4-stage-capsule-store-receipt/v1",
118
+ "operation": "put",
119
+ "recordedAt": "2026-08-10T00:00:00.000Z",
120
+ "capsuleRoot": "sha256:761781689e98149ea23992edd2d0662e2655e9bb179d7cf5fcd3ac6920c7a245",
121
+ "manifestRoot": "sha256:fa6e4dd512773a9853b2224a466354fb3f1999fd6a6f3caecc8f07faa0a60e39",
122
+ "retentionStateRoot": "sha256:37a2b94c4f06af6401fa41dca7cc5c2b32685a46d83b3a1be6691966aaf01d19",
123
+ "availabilityRoot": "sha256:9f638a486f440eafa9acfa0ef75a90752075d74a97432b810caacf6e7e35d2e9",
124
+ "transportRoot": "sha256:87157fe43486352218600fae35f9d748e96914468886507864a3ad5ce6c17c2f",
125
+ "qualificationRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
126
+ "outcome": "stored",
127
+ "faultCode": null,
128
+ "receiptRoot": "sha256:9b391831ab5fcfc5014067dbb2e862a6d6b06a09de2705beddcdf0d5b9523cd2"
129
+ }
130
+ }
131
+ ]
132
+ }
@@ -0,0 +1,111 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "contract": "buildchain-v4-stage-capsule-fixtures/v1",
4
+ "validCases": [
5
+ {
6
+ "id": "linux-build-stage",
7
+ "capsule": {
8
+ "schema": "buildchain-v4-stage-capsule/v1",
9
+ "writerAuthority": "typescript-v3",
10
+ "rustAuthority": "validation-only",
11
+ "identity": {
12
+ "schema": "buildchain-v4-stage-capsule-identity/v1",
13
+ "sourceRoot": "sha256:1111111111111111111111111111111111111111111111111111111111111111",
14
+ "platform": "linux-x64-gnu",
15
+ "platformRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
16
+ "stage": "build",
17
+ "toolchainRoots": [
18
+ {
19
+ "name": "clang",
20
+ "root": "sha256:3333333333333333333333333333333333333333333333333333333333333333"
21
+ },
22
+ {
23
+ "name": "node",
24
+ "root": "sha256:4444444444444444444444444444444444444444444444444444444444444444"
25
+ }
26
+ ],
27
+ "runtimeRoot": "sha256:5555555555555555555555555555555555555555555555555555555555555555",
28
+ "policyRoot": "sha256:6666666666666666666666666666666666666666666666666666666666666666",
29
+ "declaredInputs": [
30
+ {
31
+ "name": "lockfile",
32
+ "root": "sha256:7777777777777777777777777777777777777777777777777777777777777777"
33
+ },
34
+ {
35
+ "name": "source-tree",
36
+ "root": "sha256:8888888888888888888888888888888888888888888888888888888888888888"
37
+ }
38
+ ],
39
+ "transformationRoot": "sha256:9999999999999999999999999999999999999999999999999999999999999999",
40
+ "outputManifestRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
41
+ "qualificationRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
42
+ "observationRoots": [
43
+ {
44
+ "name": "supply-chain",
45
+ "root": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
46
+ }
47
+ ]
48
+ },
49
+ "identityRoot": "sha256:48e3ef563193c466785032b512aae986c4ce02c2c94b6749910e711812bcbacf",
50
+ "retentionPromise": {
51
+ "class": "wave-two",
52
+ "retainUntil": "2026-11-07T00:00:00.000Z"
53
+ },
54
+ "capsuleRoot": "sha256:d847ce1b9dc5d5c6f888ee5c196e9f17f921429b89c6f10ddcb5b9449e87d998"
55
+ },
56
+ "availability": {
57
+ "schema": "buildchain-v4-stage-capsule-availability/v1",
58
+ "capsuleRoot": "sha256:d847ce1b9dc5d5c6f888ee5c196e9f17f921429b89c6f10ddcb5b9449e87d998",
59
+ "observedAt": "2026-08-09T00:00:00.000Z",
60
+ "status": "available",
61
+ "contentRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
62
+ "qualificationRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
63
+ "transports": [
64
+ {
65
+ "name": "primary",
66
+ "root": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
67
+ }
68
+ ],
69
+ "faultCode": null
70
+ },
71
+ "reuse": {
72
+ "evaluatedAt": "2026-08-10T00:00:00.000Z",
73
+ "expectedCapsuleRoot": "sha256:d847ce1b9dc5d5c6f888ee5c196e9f17f921429b89c6f10ddcb5b9449e87d998",
74
+ "expectedOutputManifestRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
75
+ "expectedQualificationRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
76
+ }
77
+ }
78
+ ],
79
+ "invalidCases": [
80
+ {
81
+ "id": "provider-run-id-is-not-identity",
82
+ "kind": "identity",
83
+ "value": {
84
+ "schema": "buildchain-v4-stage-capsule-identity/v1",
85
+ "providerRunId": "mutable-run-42"
86
+ }
87
+ },
88
+ {
89
+ "id": "missing-requires-fault",
90
+ "kind": "availability",
91
+ "value": {
92
+ "schema": "buildchain-v4-stage-capsule-availability/v1",
93
+ "capsuleRoot": "sha256:d847ce1b9dc5d5c6f888ee5c196e9f17f921429b89c6f10ddcb5b9449e87d998",
94
+ "observedAt": "2026-08-09T00:00:00.000Z",
95
+ "status": "missing",
96
+ "contentRoot": null,
97
+ "qualificationRoot": null,
98
+ "transports": [],
99
+ "faultCode": null
100
+ }
101
+ },
102
+ {
103
+ "id": "reuse-shape-is-closed",
104
+ "kind": "reuse",
105
+ "value": {
106
+ "schema": "buildchain-v4-stage-capsule-reuse/v1",
107
+ "ambientNow": "2026-08-09T00:00:00.000Z"
108
+ }
109
+ }
110
+ ]
111
+ }