@kungfu-tech/buildchain 4.0.0 → 4.0.1-alpha.10

package/architecture/v4-delivery-warrant-shadow-fixtures.json

@@ -25,19 +25,24 @@
           "id": "submit-101",
           "operation": "submit",
           "pullRequestNumber": 101,
+          "overrides": { "deliveryClass": "non-native-fast" },
           "now": "2026-08-07T00:00:01Z"
         },
         {
           "id": "submit-102",
           "operation": "submit",
           "pullRequestNumber": 102,
-          "overrides": { "priority": "expedited" },
+          "overrides": {
+            "deliveryClass": "non-native-fast",
+            "priority": "expedited"
+          },
           "now": "2026-08-07T00:00:02Z"
         },
         {
           "id": "duplicate-101",
           "operation": "submit",
           "pullRequestNumber": 101,
+          "overrides": { "deliveryClass": "non-native-fast" },
           "now": "2026-08-07T00:00:03Z"
         },
         {
@@ -61,7 +66,7 @@
           "now": "2026-08-07T00:02:00Z"
         }
       ],
-      "expectedLegacyProjectionRoot": "sha256:e01018e4797e98813454328aba2c0a04932885fcd6da7d216697c7961bc26f56"
+      "expectedLegacyProjectionRoot": "sha256:da58eec588414e16781ffad1b92d3733b207b43e2c7846f6b659c71b150d964d"
     },
     {
       "id": "lease-expiry-and-stale-fence",
@@ -76,36 +81,60 @@
           "id": "submit",
           "operation": "submit",
           "pullRequestNumber": 120,
+          "overrides": {
+            "environmentRoot": "sha256:9999999999999999999999999999999999999999999999999999999999999999",
+            "nativeCommandContract": {
+              "schema": "kungfu.buildchain.native-command-contract/v1",
+              "runner": "bash-lc",
+              "command": "node --test tests/v4-warrant-shadow-plan.test.mjs",
+              "commandRoot": "sha256:4d9a03536802c46fe254f247b7236925aec49d789e5e9ac7b2dceac08d7cefab"
+            }
+          },
           "now": "2026-08-07T01:00:01Z"
         },
+        {
+          "id": "submit-successor",
+          "operation": "submit",
+          "pullRequestNumber": 121,
+          "overrides": { "deliveryClass": "non-native-fast" },
+          "now": "2026-08-07T01:00:02Z"
+        },
         {
           "id": "select-old",
           "operation": "select",
           "saveWarrant": "old",
           "leaseSeconds": 60,
-          "now": "2026-08-07T01:00:02Z"
+          "now": "2026-08-07T01:00:03Z"
         },
         {
           "id": "recover",
           "operation": "recover-expired",
           "now": "2026-08-07T01:02:00Z"
         },
+        {
+          "id": "close-expired",
+          "operation": "close",
+          "useWarrant": "old",
+          "outcome": "terminal-failure",
+          "reason": "fenced native worker stop proved",
+          "now": "2026-08-07T01:02:01Z"
+        },
         {
           "id": "select-new",
           "operation": "select",
           "saveWarrant": "new",
           "leaseSeconds": 60,
-          "now": "2026-08-07T01:02:01Z"
+          "now": "2026-08-07T01:02:02Z"
         },
         {
           "id": "reject-old",
           "operation": "heartbeat",
           "useWarrant": "old",
           "expectError": "stale-fencing-token",
-          "now": "2026-08-07T01:02:02Z"
+          "now": "2026-08-07T01:02:03Z"
         }
       ],
-      "expectedLegacyProjectionRoot": "sha256:3c39ba66a2329a22f3834c4212bda001b6d5c527dcb9fa8a1b3ca88a199a7d16"
+      "expectedLegacyProjectionRoot": "sha256:24cf52c9108393b268cb40943f540c0e9a000a782e59251e3a9b6d5a63c1eb06"
     },
     {
       "id": "settlement-idempotence",
@@ -129,6 +158,7 @@
           "id": "submit",
           "operation": "submit",
           "pullRequestNumber": 150,
+          "overrides": { "deliveryClass": "non-native-fast" },
           "now": "2026-08-07T02:00:02Z"
         },
         {
@@ -153,7 +183,7 @@
           "now": "2026-08-07T02:02:00Z"
         }
       ],
-      "expectedLegacyProjectionRoot": "sha256:b67669b2093105f3b4539ca5e4ba3d366bd7005a8781b5352377ae724d310d26"
+      "expectedLegacyProjectionRoot": "sha256:60fead53ff605fcd81934e6d752ea5f2b4951c57addcec1c1df87fb6dec9b7ba"
     },
     {
       "id": "queued-cancellation-idempotence",
@@ -168,6 +198,7 @@
           "id": "submit",
           "operation": "submit",
           "pullRequestNumber": 151,
+          "overrides": { "deliveryClass": "non-native-fast" },
           "now": "2026-08-07T03:00:01Z"
         },
         {
@@ -187,7 +218,7 @@
           "now": "2026-08-07T03:00:03Z"
         }
       ],
-      "expectedLegacyProjectionRoot": "sha256:128104385600c72af175a3ff6a58a4266ca7dcd59a5019adbd87ca7fd9bc65c9"
+      "expectedLegacyProjectionRoot": "sha256:7000f721d975b379c0f321d935ab70e38589229a691517a3c41d2b1330fd3796"
     },
     {
       "id": "cas-response-loss-provider-conflict",
@@ -202,6 +233,7 @@
           "id": "submit",
           "operation": "submit",
           "pullRequestNumber": 160,
+          "overrides": { "deliveryClass": "non-native-fast" },
           "now": "2026-08-07T04:00:01Z"
         },
         {
@@ -221,7 +253,7 @@
         },
         { "id": "provider-stop", "operation": "provider-conflict" }
       ],
-      "expectedLegacyProjectionRoot": "sha256:e5082eab6504bab8ee382d43429594d0bbe1ee0353f78eb21b0ead03a4740887"
+      "expectedLegacyProjectionRoot": "sha256:c616a8278ace8ece6933987cf9559ca53d4e2fba0e937664c2770464800cff04"
     }
   ]
 }

package/architecture/v4-floating-consumer-policy.json

@@ -0,0 +1,81 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-floating-consumer-policy/v1",
+  "policyVersion": "2026-08-14",
+  "scope": {
+    "repository": "kungfu-systems/buildchain",
+    "majorLine": "v4",
+    "persistedSelectors": ["v4", "v4-alpha"],
+    "publicWorkflowEntrypoints": [
+      ".github/workflows/.build.yml",
+      ".github/workflows/publication-artifact.yml",
+      ".github/workflows/release-candidate-promote.yml",
+      ".github/workflows/v4-stage-capsule-canary.yml"
+    ]
+  },
+  "contractLocks": {
+    "stable": {
+      "selector": "v4",
+      "path": ".buildchain/contract-lock.json"
+    },
+    "alpha": {
+      "selector": "v4-alpha",
+      "path": ".buildchain/alpha-contract-lock.json"
+    },
+    "selectedLockMustBindResolvedWorkflowShell": true,
+    "bothRootsRequiredInReceipt": true
+  },
+  "sourcePolicy": {
+    "directExactSha": "deny",
+    "exactDefault": "deny",
+    "repositoryVariableIndirection": "deny",
+    "inputOrEnvironmentIndirection": "deny",
+    "nestedCompositeIndirection": "deny",
+    "unknownSyntax": "deny",
+    "missingCallerCheckout": "deny"
+  },
+  "runtimeEscapeBoundary": {
+    "persistedSelectorOverride": false,
+    "protectedAlphaRecoveryBootstrap": {
+      "selector": "alpha/v4/v4.0",
+      "sourcePath": ".github/workflows/buildchain-ref-promotion-recovery.yml",
+      "workflow": ".github/workflows/.release-candidate-promote.yml",
+      "repository": "kungfu-systems/buildchain"
+    },
+    "trustedNonPersistentInput": true,
+    "requiresSeparateAuthority": true,
+    "requiresReadback": true,
+    "receiptReuse": false
+  },
+  "receipt": {
+    "schema": "contracts/v4-floating-consumer-policy-receipt-v1.schema.json",
+    "bindings": [
+      "caller-repository",
+      "caller-source-sha",
+      "invoked-workflow",
+      "visible-selector-class",
+      "channel",
+      "stable-contract-lock-root",
+      "alpha-contract-lock-root",
+      "resolved-workflow-shell-sha",
+      "resolved-runtime-sha",
+      "policy-version",
+      "policy-root",
+      "scanner-root",
+      "source-scan-root"
+    ]
+  },
+  "enforcement": {
+    "earliestConsumerAdmissionRequired": true,
+    "heavyJobsTransitivelyGated": true,
+    "externalCertificationRequired": true,
+    "releasePassportRequired": true,
+    "oldRuntimeSelfAuthorization": false
+  },
+  "authority": {
+    "v3BehaviorChange": false,
+    "providerEffects": false,
+    "credentials": false,
+    "productionMutation": false
+  }
+}

package/architecture/v4-floating-consumer-policy.md

@@ -0,0 +1,32 @@
+# Architecture Decision: v4 Floating Consumer Admission
+
+Status: accepted for the v4 shadow and protected-delivery line on 2026-08-14.
+
+Buildchain v4 consumers persist only the public `v4` and `v4-alpha` selectors.
+They commit both `.buildchain/contract-lock.json` and
+`.buildchain/alpha-contract-lock.json`; the selected lock binds the exact commit
+behind the visible workflow selector. An exact SHA remains evidence, not a
+source selector.
+
+Every declared public v4 entrypoint runs consumer admission after immutable
+source/runtime checkout and before package setup, matrix expansion, build, or
+publication work. Downstream jobs depend on that admission. The scanner uses
+the shared workflow YAML semantic layer and follows local composite action
+manifests, so block scalar text is not mistaken for a `uses` node and nested
+indirection cannot hide a selector.
+
+The rooted receipt binds the caller repository and source SHA, invoked workflow,
+selector class and channel, visible workflow-shell SHA, actual runtime SHA, both
+contract-lock roots, and the policy/scanner/source-scan roots. A trusted manual
+train or SHA may replace only the actual runtime coordinate; it does not rewrite
+the tracked selector or the lock-to-shell binding.
+
+Release-candidate Passport construction requires the receipt for v4 runtimes.
+Promotion independently certifies it, and final Release Passport construction
+requires that certification to match the caller source and actual runtime.
+Missing, rejected, stale, root-mismatched, or old-runtime evidence fails closed.
+
+The normative machine declaration is
+[`v4-floating-consumer-policy.json`](v4-floating-consumer-policy.json). v3
+behavior, provider effects, credentials, and production mutation authority are
+outside this decision.

package/architecture/v4-next-development-parity.json

@@ -0,0 +1,192 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-next-development-parity",
+  "sourceAuthority": {
+    "branch": "dev/v3/v3.0",
+    "capturedCommit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
+    "transitionCommit": "d165c2f733859dd2e46a2d1fdb25b242e2fc2567",
+    "controllerCommit": "63f494d4b92c0bd01ffb454c6fce23d0692148fb",
+    "selfDogfoodCommit": "518bb4cb4706db1854e5a5b39bf7198f2aaa1d1d"
+  },
+  "target": {
+    "branch": "dev/v4/v4.0",
+    "implementationBaseline": "36ad1dc03a9d2785aca938a7a369e4b96707fa32",
+    "publicConsumerCaller": ".github/workflows/v4-public-consumer-dogfood.yml",
+    "publicConsumerReusable": "kungfu-systems/buildchain/.github/workflows/v4-stage-capsule-canary.yml@v4-alpha"
+  },
+  "earlierContinuityDelta": {
+    "assignment": "2026-08-11-buildchain-next-development-version-continuity",
+    "disposition": "no-current-reusable-implementation-evidence",
+    "requiredDelta": "implement and re-prove the exact v3 semantics against the live protected v4 head"
+  },
+  "allowedDispositions": [
+    "implemented",
+    "superseded-equivalent",
+    "missing-before-closeout"
+  ],
+  "invariants": [
+    {
+      "id": "ND-01",
+      "claim": "The exact v3 planner, controller, projection and recovery authorities are mapped to current v4 files rather than inferred from the earlier continuity family.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "architecture/decisions/0002-next-development-transition.md",
+        "packages/core/next-development-transition.js",
+        "packages/core/next-development-controller.js",
+        "packages/core/next-development-projection.js"
+      ],
+      "verificationEvidence": ["tests/v4-next-development-parity.test.mjs"]
+    },
+    {
+      "id": "ND-02",
+      "claim": "Semver automatic planning deterministically advances only the Alpha sequence on the same patch and rejects operator-selected targets.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-transition.js",
+        "contracts/next-development-transition-v1.schema.json"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "contracts/fixtures/next-development-transition-v1/semver-auto-planned.json"
+      ]
+    },
+    {
+      "id": "ND-03",
+      "claim": "Anchored manual planning remains waiting until reviewed target and exact read-only manifest digest authority are both supplied.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-transition.js",
+        "scripts/next-development-transition.mjs"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "tests/next-development-controller.test.mjs",
+        "contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json"
+      ]
+    },
+    {
+      "id": "ND-04",
+      "claim": "Atomic create-if-absent and compare-and-swap checkpoints create one child per completed Alpha and recover idempotent materialization after runner loss.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-controller.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-controller.test.mjs",
+        "tests/next-development-self-dogfood.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-05",
+      "claim": "Protected Dev movement supersedes only stale preparation, retries from current readback and preserves completed Alpha identity without rebuilding it.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-controller.js",
+        "actions/promote-buildchain-ref/internal/promote-alpha-channel.js",
+        "actions/promote-buildchain-ref/lib.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-controller.test.mjs",
+        "tests/promote-buildchain-ref-governance.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-06",
+      "claim": "A protected version pull request and exact source, derived, ancestry and target-version readback are mandatory before verified state.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-controller.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-controller.test.mjs",
+        "tests/next-development-self-dogfood.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-07",
+      "claim": "Completed candidates and Alpha publication remain immutable and terminal; next-development exposes no tag, release, package, candidate or ref-update effect.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-transition.js",
+        "packages/core/next-development-controller.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "tests/next-development-self-dogfood.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-08",
+      "claim": "Candidate Patrol ignores pure version preparation and requires current exact blob reservation readback before later product candidate settlement.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-candidate-reservation.js",
+        "packages/core/channel-promotion-baseline.js",
+        "scripts/dev-alpha-candidate-patrol.mjs"
+      ],
+      "verificationEvidence": ["tests/dev-alpha-candidate-patrol.test.mjs"]
+    },
+    {
+      "id": "ND-09",
+      "claim": "The public CLI, Node exports, schemas, init and Paper templates, generated Agent guidance and manual all project one contract source.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "bin/buildchain.mjs",
+        "bin/internal/command-registry.mjs",
+        "scripts/next-development-transition.mjs",
+        "package.json",
+        "contracts/next-development-request-v1.schema.json",
+        "contracts/next-development-transition-v1.schema.json",
+        "scripts/init-repo.mjs",
+        "packages/core/paper.js",
+        "packages/core/paper-agent-entry.js",
+        "packages/core/next-development-projection.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "tests/v4-next-development-parity.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-10",
+      "claim": "V4 recovery proof runs as pure tests through the standard lifecycle.verify reached by the exact thin public consumer caller, while existing hosted dual-channel evidence keeps public v4-alpha and v4 routes.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        ".github/workflows/v4-public-consumer-dogfood.yml",
+        ".github/workflows/buildchain-alpha-self-dogfood.yml",
+        ".buildchain/buildchain.toml",
+        "scripts/next-development-self-dogfood.mjs",
+        "scripts/next-development-self-dogfood-harness.mjs"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-self-dogfood.test.mjs",
+        "tests/v4-public-dogfood-contract.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-11",
+      "claim": "Architecture inventory, capability metadata, generated references and site facts expose the current v4 next-development contract without stale generated output.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "architecture/v3-core-mechanism-inventory.json",
+        "architecture/v4-capability-state-machine-manifest.json",
+        "scripts/check-inventory.mjs",
+        "scripts/site-capability-metadata.mjs",
+        "scripts/generate-site-bundle.mjs"
+      ],
+      "verificationEvidence": [
+        "tests/core-mechanism-inventory.test.mjs",
+        "tests/v4-architecture.test.mjs",
+        "tests/v4-next-development-parity.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-12",
+      "claim": "Independent review, protected merge into dev/v4/v4.0 and exact post-merge containment and readback are required external closeout evidence and cannot be inferred from local green tests.",
+      "disposition": "missing-before-closeout",
+      "implementationEvidence": [],
+      "verificationEvidence": []
+    }
+  ],
+  "matrixRoot": "sha256:0f0d69dd338cad33dc61870675cbedb8664e019e403f73a1ddcf8471d69df405"
+}

package/architecture/v4-publication-rehearsal-parity.json

@@ -0,0 +1,84 @@
+{
+  "schema": "buildchain.v4.publication-rehearsal-parity/v1",
+  "source": {
+    "branch": "dev/v3/v3.0",
+    "commit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
+    "runtime": "packages/core/publication-rehearsal-runtime.js"
+  },
+  "target": {
+    "branch": "dev/v4/v4.0",
+    "commit": "bc12cd0ff18a7e1d918777ea093c169349952d34",
+    "capsuleContract": "packages/core/v4-publication-rehearsal-capsule.js",
+    "runtime": "packages/core/v4-publication-rehearsal.js",
+    "providerBindings": "packages/core/v4-publication-rehearsal-provider-bindings.js"
+  },
+  "sharedProductionCore": {
+    "planner": "compileReleaseTailDeclaration",
+    "initializer": "createReleaseTailTransaction",
+    "executor": "executeReleaseTailTransaction",
+    "version": "buildchain.release-tail/v1"
+  },
+  "stageCapsuleBoundary": {
+    "contract": "buildchain-v4-stage-capsule/v1",
+    "purpose": "pure platform-stage build checkpoint reuse",
+    "publicationEffects": false,
+    "publicationAuthority": false
+  },
+  "matrix": [
+    {
+      "invariant": "capsule-purpose",
+      "v3": "publication rehearsal",
+      "v4": "publication rehearsal distinct from Stage Capsule",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "content-addressed-inputs",
+      "v3": "capsule, declaration, transaction, files, data-only provider bindings, policy and observations",
+      "v4": "capsule, source, candidate, manifest, config, provider bindings, provider policy, expected observations and core version",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "provider-request-binding",
+      "v3": "provider binding payload is capsule-rooted and every input path is in files",
+      "v4": "providerBindingsRoot covers canonical bindings and every request byte is inventory-rooted before adapters",
+      "parity": "exact"
+    },
+    {
+      "invariant": "shared-release-tail-core",
+      "v3": "shared planner and executor",
+      "v4": "same production planner, initializer and executor",
+      "parity": "exact"
+    },
+    {
+      "invariant": "effect-default",
+      "v3": "simulate and replay local defaults",
+      "v4": "provider policy is rooted and effect-disabled by default",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "authorized-provider-rehearsal",
+      "v3": "provider observations are recorded without authority",
+      "v4": "exact capsule-bound rehearsal-only authority plus request and readback transcript",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "release-authority",
+      "v3": "externalPublicationClaimed false",
+      "v4": "productionAuthority false and releasePassport null",
+      "parity": "exact"
+    },
+    {
+      "invariant": "tamper-response",
+      "v3": "capsule and file mismatch fail closed",
+      "v4": "every named identity root and core version mismatch fails closed",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "portability",
+      "v3": "platform-independent local capsule root",
+      "v4": "byte-identical offline linux, macos and windows vector",
+      "parity": "exact"
+    }
+  ],
+  "matrixRoot": "sha256:521694ce2cc1d5b383eaa6b84f1b6926ef8ce8f33085e02507e611e9f9b6e784"
+}

package/architecture/v4-release-train-parity.json

@@ -26,6 +26,7 @@
     {
       "path": "tests/dev-alpha-candidate-patrol.test.mjs",
       "count": 37,
+      "targetAdditionalCount": 4,
       "result": "exact"
     },
     {

package/architecture/v4-runtime-ref-resume-authority.json

@@ -0,0 +1,64 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-runtime-ref-resume-authority/v1",
+  "schemaAuthority": "contracts/v4-runtime-ref-resume-authority-v1.schema.json",
+  "fixtureAuthority": "contracts/fixtures/v4-runtime-ref-resume-authority-v1/scenario.json",
+  "runtimeAuthority": "packages/core/v4-runtime-ref-resume-authority.js",
+  "mode": "v4-only",
+  "transientSelection": {
+    "trustedEvent": "workflow_dispatch",
+    "actorPermissions": ["write", "maintain", "admin"],
+    "approvedRefs": [
+      "v4",
+      "v4-alpha",
+      "train/v4/v4.N/*",
+      "authority/v4/v4.N/*"
+    ],
+    "exactShaRequiresApprovedRefReachability": true,
+    "operatorReasonRequired": true,
+    "sourceTreeBound": true,
+    "consumerPolicyReceiptBound": true,
+    "dualContractLockRootsBound": true,
+    "providerReadbackRooted": true
+  },
+  "persistence": {
+    "exactShaDefault": "deny",
+    "trainOrAuthorityDefault": "deny",
+    "repositoryVariableIndirection": "deny",
+    "secretIndirection": "deny",
+    "environmentIndirection": "deny",
+    "oidcIamAndExternalAuthorityInventory": "metadata-only"
+  },
+  "resume": {
+    "freshAttemptRequired": true,
+    "failedJobRerun": false,
+    "floatingRefMovementRequired": true,
+    "buildAndResumeRuntimeMustDiffer": true,
+    "sealedCapsuleIdentity": [
+      "source-sha",
+      "source-tree-sha",
+      "platform",
+      "build-runtime-sha",
+      "consumer-policy-receipt-root",
+      "capsule-root",
+      "identity-root",
+      "artifact-digest"
+    ],
+    "validUnaffectedPlatforms": "reuse",
+    "missingPlatforms": "rebuild",
+    "staleOrAmbiguousCapsules": "reject"
+  },
+  "passport": {
+    "section": "v4RuntimeResume",
+    "recordsRuntimeAAndB": true,
+    "authorizationRootRequired": true,
+    "lineageRootRequired": true,
+    "finalPublicReadbackRootRequired": true
+  },
+  "authority": {
+    "v3BehaviorChange": false,
+    "credentialsInEvidence": false,
+    "persistentExactSha": false,
+    "providerMutation": false
+  }
+}

package/architecture/v4-stage-capsule-qualification.json

@@ -26,7 +26,7 @@
   "publicConsumerDogfood": {
     "callerWorkflow": ".github/workflows/v4-public-consumer-dogfood.yml",
     "reusableWorkflow": "kungfu-systems/buildchain/.github/workflows/v4-stage-capsule-canary.yml",
-    "validationRef": "4178776bf635d0738cb1917e449076d64883218c",
+    "validationRef": "v4-alpha",
     "invocation": "workflow_call",
     "runtimeBinding": "job.workflow_sha",
     "consumerSourceBinding": "github.sha",
@@ -46,7 +46,7 @@
     "relativeOrSelfInvocationAllowed": false,
     "directQualificationInvocationAllowed": false,
     "candidateBranchOverrideAllowed": false,
-    "recursionRecovery": "public-train-ref-only"
+    "recursionRecovery": "floating-selector-with-trusted-runtime-input"
   },
   "faultCampaign": [
     "corrupt",