@kungfu-tech/buildchain 4.0.0 → 4.0.1-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +13 -5
- package/actions/promote-buildchain-ref/README.md +11 -6
- package/architecture/internal-capabilities.json +11 -2
- package/architecture/maintainability-policy.json +149 -17
- package/architecture/v4-floating-consumer-policy.json +75 -0
- package/architecture/v4-floating-consumer-policy.md +32 -0
- package/architecture/v4-runtime-ref-resume-authority.json +64 -0
- package/architecture/v4-stage-capsule-qualification.json +2 -2
- package/bin/internal/trust-release-release-handlers.mjs +5 -0
- package/contracts/fixtures/v4-floating-consumer-policy-v1/cases.json +53 -0
- package/contracts/fixtures/v4-runtime-ref-resume-authority-v1/scenario.json +15 -0
- package/contracts/v4-floating-consumer-policy-receipt-v1.schema.json +105 -0
- package/contracts/v4-runtime-ref-resume-authority-v1.schema.json +235 -0
- package/dist/site/buildchain-contract.json +101 -31
- package/dist/site/buildchain-site.json +73 -27
- package/dist/site/capability-registry.json +3 -3
- package/dist/site/controller-registry.json +62 -6
- package/dist/site/kfd-claims.json +68 -13
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +6 -6
- package/dist/site/node-api-registry.json +799 -127
- package/dist/site/page-registry.json +63 -17
- package/dist/site/public-surface-audit.json +49 -17
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/release-provenance.json +2 -0
- package/dist/site/site-manifest.json +10 -10
- package/dist/site/workflow-registry.json +46 -18
- package/docs/MAP.md +2 -0
- package/docs/dev-delivery-warrant.md +19 -1
- package/docs/lifecycle-protocol.md +41 -0
- package/docs/node-api-reference.md +207 -134
- package/docs/reusable-build-surface.md +41 -0
- package/docs/runtime-train-validation.md +10 -0
- package/docs/v4-runtime-ref-resume-authority.md +69 -0
- package/docs/versioning.md +1 -0
- package/package.json +6 -4
- package/packages/core/artifact-signing.js +61 -0
- package/packages/core/buildchain-config.js +66 -1
- package/packages/core/dev-delivery-proof.js +37 -3
- package/packages/core/dev-delivery-warrant.js +3 -3
- package/packages/core/index.js +2 -0
- package/packages/core/publication-authority.js +5 -5
- package/packages/core/release-candidate.js +79 -19
- package/packages/core/release-passport.js +239 -33
- package/packages/core/v4-floating-consumer-evidence.js +324 -0
- package/packages/core/v4-floating-consumer-policy.js +446 -0
- package/packages/core/v4-floating-consumer-release-passport.js +126 -0
- package/packages/core/v4-runtime-ref-resume-authority.js +625 -0
- package/packages/core/v4-runtime-selector-persistence.js +228 -0
- package/packages/core/workflow-yaml-contract.js +48 -0
- package/scripts/audit-publication-control-plane.mjs +31 -31
- package/scripts/check-inventory.mjs +1 -1
- package/scripts/check-v4-floating-consumer-policy-contract.mjs +198 -0
- package/scripts/check-v4-public-dogfood-contract.mjs +6 -11
- package/scripts/dev-delivery-source-proof-reuse.mjs +631 -0
- package/scripts/dev-pr-auto-merge.mjs +37 -48
- package/scripts/dev-pr-delivery-warrant.mjs +205 -2
- package/scripts/dev-pr-prequeue-guard.mjs +399 -0
- package/scripts/ensure-github-release.mjs +3 -3
- package/scripts/generate-channel-build-workflow.mjs +3 -0
- package/scripts/generate-channel-promotion-workflow.mjs +112 -12
- package/scripts/generate-release-candidate-passport.mjs +41 -33
- package/scripts/init-repo.mjs +5 -1
- package/scripts/inspect-artifact-signing-requests.mjs +6 -0
- package/scripts/npm-publish-transaction.mjs +101 -89
- package/scripts/resume-from-candidate-run.mjs +11 -14
- package/scripts/seal-artifact-signing-requests.mjs +6 -0
- package/scripts/site-capability-metadata.mjs +2 -0
- package/scripts/v4-consumer-policy.mjs +231 -0
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
"product": {
|
|
5
5
|
"name": "Buildchain",
|
|
6
6
|
"package": "@kungfu-tech/buildchain",
|
|
7
|
-
"version": "4.0.
|
|
7
|
+
"version": "4.0.1-alpha.2",
|
|
8
8
|
"repository": "https://github.com/kungfu-systems/buildchain"
|
|
9
9
|
},
|
|
10
10
|
"majorLine": "v4",
|
|
@@ -52,7 +52,7 @@
|
|
|
52
52
|
"retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
|
|
53
53
|
],
|
|
54
54
|
"breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
|
|
55
|
-
"auditDigest": "sha256:
|
|
55
|
+
"auditDigest": "sha256:b3cad87356b28e5d78fe8663f63354fada735cf8ad32c93884bb804ef73be76c"
|
|
56
56
|
},
|
|
57
57
|
{
|
|
58
58
|
"contractVersion": 1,
|
|
@@ -91,7 +91,7 @@
|
|
|
91
91
|
"alpha and stable channel selections use separate consumer contract locks by default"
|
|
92
92
|
],
|
|
93
93
|
"breakingDigest": "sha256:c4597dfa89e1a58f1023905092b849644f5c080abf150aeba9c7e1cd5ed43962",
|
|
94
|
-
"auditDigest": "sha256:
|
|
94
|
+
"auditDigest": "sha256:97fa61f0e97641edd3b1b435ace06c621e702f0b8b406c4f3998c148a337c74a"
|
|
95
95
|
},
|
|
96
96
|
{
|
|
97
97
|
"contractVersion": 1,
|
|
@@ -193,7 +193,7 @@
|
|
|
193
193
|
"sha256:acd401cfc46450115a3763fd4b679d85f185e8757ebd52510d6262e1533df4cf"
|
|
194
194
|
],
|
|
195
195
|
"breakingDigest": "sha256:5f10c81d3f80cb417960be682921884639c40b6d875f1a3b1ffae7e652c3f468",
|
|
196
|
-
"auditDigest": "sha256:
|
|
196
|
+
"auditDigest": "sha256:2d8eaa093d31391c56a7c672a8ba1fbb756b66f5d05dc4f04909fceb077ea376"
|
|
197
197
|
},
|
|
198
198
|
{
|
|
199
199
|
"contractVersion": 1,
|
|
@@ -251,7 +251,7 @@
|
|
|
251
251
|
"sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
|
|
252
252
|
],
|
|
253
253
|
"breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
|
|
254
|
-
"auditDigest": "sha256:
|
|
254
|
+
"auditDigest": "sha256:b7532257bb94b8cf5ed401a49caa14a7beda404efa201a89bee928b0fb52a7c9"
|
|
255
255
|
},
|
|
256
256
|
{
|
|
257
257
|
"contractVersion": 1,
|
|
@@ -478,7 +478,7 @@
|
|
|
478
478
|
"sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874"
|
|
479
479
|
],
|
|
480
480
|
"breakingDigest": "sha256:6147c0a8d5c36bfaa6021871574e1fc28192a3f1b8cfdae4d24ef3059ac1ebda",
|
|
481
|
-
"auditDigest": "sha256:
|
|
481
|
+
"auditDigest": "sha256:c84da8a7e2bf428288e24c7a105dd718a8cc2db1d08d9e8fd0fa374430653fa7"
|
|
482
482
|
},
|
|
483
483
|
{
|
|
484
484
|
"contractVersion": 1,
|
|
@@ -593,7 +593,7 @@
|
|
|
593
593
|
"release-state SHA is recorded as a durable audit entrance"
|
|
594
594
|
],
|
|
595
595
|
"breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
|
|
596
|
-
"auditDigest": "sha256:
|
|
596
|
+
"auditDigest": "sha256:8276788ccdcfb55fab5a0343ecf9474273e91c99fc5e1630e19ccf6b920cbd90"
|
|
597
597
|
},
|
|
598
598
|
{
|
|
599
599
|
"contractVersion": 1,
|
|
@@ -642,7 +642,7 @@
|
|
|
642
642
|
"prose-only public claims downgrade the release trust passport audit"
|
|
643
643
|
],
|
|
644
644
|
"breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
|
|
645
|
-
"auditDigest": "sha256:
|
|
645
|
+
"auditDigest": "sha256:8276788ccdcfb55fab5a0343ecf9474273e91c99fc5e1630e19ccf6b920cbd90"
|
|
646
646
|
},
|
|
647
647
|
{
|
|
648
648
|
"contractVersion": 1,
|
|
@@ -792,7 +792,7 @@
|
|
|
792
792
|
"manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
|
|
793
793
|
],
|
|
794
794
|
"breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
|
|
795
|
-
"auditDigest": "sha256:
|
|
795
|
+
"auditDigest": "sha256:e55862ef0e7e4c93238c953d01c758846fd72f73fbf0d1c99a589fc900142127"
|
|
796
796
|
},
|
|
797
797
|
{
|
|
798
798
|
"contractVersion": 1,
|
|
@@ -814,7 +814,7 @@
|
|
|
814
814
|
"agents can discover supported Node APIs without importing internal file paths"
|
|
815
815
|
],
|
|
816
816
|
"breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
|
|
817
|
-
"auditDigest": "sha256:
|
|
817
|
+
"auditDigest": "sha256:67fa2bad84b1c726e71b9a22c8ca3fe80864b044476fd6fe18d776bfb3b21cc0"
|
|
818
818
|
},
|
|
819
819
|
{
|
|
820
820
|
"contractVersion": 1,
|
|
@@ -859,13 +859,18 @@
|
|
|
859
859
|
"mode",
|
|
860
860
|
"node-version",
|
|
861
861
|
"require-version-state",
|
|
862
|
+
"source-proof-closure-paths-json",
|
|
863
|
+
"source-proof-dependency-paths-json",
|
|
864
|
+
"source-proof-policy-paths-json",
|
|
865
|
+
"source-proof-required-contexts-json",
|
|
866
|
+
"source-proof-reuse",
|
|
862
867
|
"upload-artifacts",
|
|
863
868
|
"working-directory"
|
|
864
869
|
],
|
|
865
870
|
"controllerDescriptor": {
|
|
866
871
|
"contract": "buildchain.controller-descriptor/v1",
|
|
867
|
-
"digest": "sha256:
|
|
868
|
-
"registryDigest": "sha256:
|
|
872
|
+
"digest": "sha256:91aeff9ffcc598918626c24850a00063a79ddf26aa48702fa22e7dce8c761968",
|
|
873
|
+
"registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
|
|
869
874
|
"inputClassifications": {
|
|
870
875
|
"buildchain-ref": {
|
|
871
876
|
"classification": "included",
|
|
@@ -887,6 +892,26 @@
|
|
|
887
892
|
"classification": "included",
|
|
888
893
|
"source": "workflow-call-input"
|
|
889
894
|
},
|
|
895
|
+
"source-proof-closure-paths-json": {
|
|
896
|
+
"classification": "digest-only",
|
|
897
|
+
"source": "workflow-call-input"
|
|
898
|
+
},
|
|
899
|
+
"source-proof-dependency-paths-json": {
|
|
900
|
+
"classification": "digest-only",
|
|
901
|
+
"source": "workflow-call-input"
|
|
902
|
+
},
|
|
903
|
+
"source-proof-policy-paths-json": {
|
|
904
|
+
"classification": "digest-only",
|
|
905
|
+
"source": "workflow-call-input"
|
|
906
|
+
},
|
|
907
|
+
"source-proof-required-contexts-json": {
|
|
908
|
+
"classification": "digest-only",
|
|
909
|
+
"source": "workflow-call-input"
|
|
910
|
+
},
|
|
911
|
+
"source-proof-reuse": {
|
|
912
|
+
"classification": "included",
|
|
913
|
+
"source": "workflow-call-input"
|
|
914
|
+
},
|
|
890
915
|
"upload-artifacts": {
|
|
891
916
|
"classification": "included",
|
|
892
917
|
"source": "workflow-call-input"
|
|
@@ -904,7 +929,7 @@
|
|
|
904
929
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
905
930
|
],
|
|
906
931
|
"breakingDigest": "sha256:d4bd0f2a1921bfed71a4d9104d45934555bde74a5c189f93ad79f37074c02b87",
|
|
907
|
-
"auditDigest": "sha256:
|
|
932
|
+
"auditDigest": "sha256:d85f695dd506fba489dab99d7c37f3ebf6ac7efed32d887288286b9496108209"
|
|
908
933
|
},
|
|
909
934
|
{
|
|
910
935
|
"contractVersion": 1,
|
|
@@ -985,6 +1010,7 @@
|
|
|
985
1010
|
"buildchain-expected-major",
|
|
986
1011
|
"buildchain-ref",
|
|
987
1012
|
"buildchain-repository",
|
|
1013
|
+
"buildchain-visible-workflow",
|
|
988
1014
|
"cache-dependency-lock-root",
|
|
989
1015
|
"cache-policy-root",
|
|
990
1016
|
"cache-toolchain-root",
|
|
@@ -1051,8 +1077,8 @@
|
|
|
1051
1077
|
],
|
|
1052
1078
|
"controllerDescriptor": {
|
|
1053
1079
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1054
|
-
"digest": "sha256:
|
|
1055
|
-
"registryDigest": "sha256:
|
|
1080
|
+
"digest": "sha256:03677ba50080b3813a20004c41802e340368e4d225782fae194e3722c763bd01",
|
|
1081
|
+
"registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
|
|
1056
1082
|
"inputClassifications": {
|
|
1057
1083
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
|
|
1058
1084
|
"classification": "redacted",
|
|
@@ -1198,6 +1224,10 @@
|
|
|
1198
1224
|
"classification": "included",
|
|
1199
1225
|
"source": "workflow-call-input"
|
|
1200
1226
|
},
|
|
1227
|
+
"buildchain-visible-workflow": {
|
|
1228
|
+
"classification": "included",
|
|
1229
|
+
"source": "workflow-call-input"
|
|
1230
|
+
},
|
|
1201
1231
|
"cache-dependency-lock-root": {
|
|
1202
1232
|
"classification": "included",
|
|
1203
1233
|
"source": "workflow-call-input"
|
|
@@ -1463,7 +1493,7 @@
|
|
|
1463
1493
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
1464
1494
|
],
|
|
1465
1495
|
"breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
|
|
1466
|
-
"auditDigest": "sha256:
|
|
1496
|
+
"auditDigest": "sha256:b3cad87356b28e5d78fe8663f63354fada735cf8ad32c93884bb804ef73be76c"
|
|
1467
1497
|
},
|
|
1468
1498
|
{
|
|
1469
1499
|
"contractVersion": 1,
|
|
@@ -1539,6 +1569,7 @@
|
|
|
1539
1569
|
"buildchain-ref",
|
|
1540
1570
|
"buildchain-repository",
|
|
1541
1571
|
"buildchain-stable-contract-lock-path",
|
|
1572
|
+
"buildchain-visible-workflow",
|
|
1542
1573
|
"cache-dependency-lock-root",
|
|
1543
1574
|
"cache-policy-root",
|
|
1544
1575
|
"cache-toolchain-root",
|
|
@@ -1605,8 +1636,8 @@
|
|
|
1605
1636
|
],
|
|
1606
1637
|
"controllerDescriptor": {
|
|
1607
1638
|
"contract": "buildchain.controller-descriptor/v1",
|
|
1608
|
-
"digest": "sha256:
|
|
1609
|
-
"registryDigest": "sha256:
|
|
1639
|
+
"digest": "sha256:45978a572cf3ce57b48e5c3190761ad4fbeedc8e75ea0dae2e66ea5a980282df",
|
|
1640
|
+
"registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
|
|
1610
1641
|
"inputClassifications": {
|
|
1611
1642
|
"BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
|
|
1612
1643
|
"classification": "redacted",
|
|
@@ -1764,6 +1795,10 @@
|
|
|
1764
1795
|
"classification": "digest-only",
|
|
1765
1796
|
"source": "workflow-call-input"
|
|
1766
1797
|
},
|
|
1798
|
+
"buildchain-visible-workflow": {
|
|
1799
|
+
"classification": "included",
|
|
1800
|
+
"source": "workflow-call-input"
|
|
1801
|
+
},
|
|
1767
1802
|
"cache-dependency-lock-root": {
|
|
1768
1803
|
"classification": "included",
|
|
1769
1804
|
"source": "workflow-call-input"
|
|
@@ -2025,7 +2060,7 @@
|
|
|
2025
2060
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
2026
2061
|
],
|
|
2027
2062
|
"breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df",
|
|
2028
|
-
"auditDigest": "sha256:
|
|
2063
|
+
"auditDigest": "sha256:97fa61f0e97641edd3b1b435ace06c621e702f0b8b406c4f3998c148a337c74a"
|
|
2029
2064
|
},
|
|
2030
2065
|
{
|
|
2031
2066
|
"contractVersion": 1,
|
|
@@ -2095,7 +2130,7 @@
|
|
|
2095
2130
|
"controllerDescriptor": {
|
|
2096
2131
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2097
2132
|
"digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d",
|
|
2098
|
-
"registryDigest": "sha256:
|
|
2133
|
+
"registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
|
|
2099
2134
|
"inputClassifications": {
|
|
2100
2135
|
"artifact-name": {
|
|
2101
2136
|
"classification": "included",
|
|
@@ -2312,7 +2347,7 @@
|
|
|
2312
2347
|
"controllerDescriptor": {
|
|
2313
2348
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2314
2349
|
"digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575",
|
|
2315
|
-
"registryDigest": "sha256:
|
|
2350
|
+
"registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
|
|
2316
2351
|
"inputClassifications": {
|
|
2317
2352
|
"artifact-path": {
|
|
2318
2353
|
"classification": "digest-only",
|
|
@@ -2535,11 +2570,13 @@
|
|
|
2535
2570
|
"artifact-paths",
|
|
2536
2571
|
"artifact-retention-days",
|
|
2537
2572
|
"build-command",
|
|
2573
|
+
"buildchain-alpha-contract-lock-path",
|
|
2538
2574
|
"buildchain-contract-compatibility-policy",
|
|
2539
2575
|
"buildchain-contract-drift-issue-mode",
|
|
2540
2576
|
"buildchain-contract-lock-path",
|
|
2541
2577
|
"buildchain-ref",
|
|
2542
2578
|
"buildchain-repository",
|
|
2579
|
+
"buildchain-stable-contract-lock-path",
|
|
2543
2580
|
"node-version",
|
|
2544
2581
|
"package-name",
|
|
2545
2582
|
"prepare-paper-package",
|
|
@@ -2555,8 +2592,8 @@
|
|
|
2555
2592
|
],
|
|
2556
2593
|
"controllerDescriptor": {
|
|
2557
2594
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2558
|
-
"digest": "sha256:
|
|
2559
|
-
"registryDigest": "sha256:
|
|
2595
|
+
"digest": "sha256:e48bb7719886d3949d63ec69d638264b20c7de8a70ee2db3cca78d4369f5a41e",
|
|
2596
|
+
"registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
|
|
2560
2597
|
"inputClassifications": {
|
|
2561
2598
|
"artifact-name": {
|
|
2562
2599
|
"classification": "included",
|
|
@@ -2574,6 +2611,10 @@
|
|
|
2574
2611
|
"classification": "digest-only",
|
|
2575
2612
|
"source": "workflow-call-input"
|
|
2576
2613
|
},
|
|
2614
|
+
"buildchain-alpha-contract-lock-path": {
|
|
2615
|
+
"classification": "digest-only",
|
|
2616
|
+
"source": "workflow-call-input"
|
|
2617
|
+
},
|
|
2577
2618
|
"buildchain-contract-compatibility-policy": {
|
|
2578
2619
|
"classification": "included",
|
|
2579
2620
|
"source": "workflow-call-input"
|
|
@@ -2594,6 +2635,10 @@
|
|
|
2594
2635
|
"classification": "included",
|
|
2595
2636
|
"source": "workflow-call-input"
|
|
2596
2637
|
},
|
|
2638
|
+
"buildchain-stable-contract-lock-path": {
|
|
2639
|
+
"classification": "digest-only",
|
|
2640
|
+
"source": "workflow-call-input"
|
|
2641
|
+
},
|
|
2597
2642
|
"node-version": {
|
|
2598
2643
|
"classification": "included",
|
|
2599
2644
|
"source": "workflow-call-input"
|
|
@@ -2651,7 +2696,7 @@
|
|
|
2651
2696
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
2652
2697
|
],
|
|
2653
2698
|
"breakingDigest": "sha256:3f76502666069c2727d23efcfdb08fb80f89ced1955a69e29f11525ae88aca1d",
|
|
2654
|
-
"auditDigest": "sha256:
|
|
2699
|
+
"auditDigest": "sha256:eddb584c84c0ee26ce90388d17de9f16645c8f585d5f092c46f70cb5ae384104"
|
|
2655
2700
|
},
|
|
2656
2701
|
{
|
|
2657
2702
|
"contractVersion": 1,
|
|
@@ -2738,7 +2783,7 @@
|
|
|
2738
2783
|
"controllerDescriptor": {
|
|
2739
2784
|
"contract": "buildchain.controller-descriptor/v1",
|
|
2740
2785
|
"digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173",
|
|
2741
|
-
"registryDigest": "sha256:
|
|
2786
|
+
"registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
|
|
2742
2787
|
"inputClassifications": {
|
|
2743
2788
|
"artifact-name": {
|
|
2744
2789
|
"classification": "included",
|
|
@@ -2959,6 +3004,7 @@
|
|
|
2959
3004
|
"branch-protection-bypass-apps",
|
|
2960
3005
|
"branch-protection-bypass-teams",
|
|
2961
3006
|
"branch-protection-bypass-users",
|
|
3007
|
+
"buildchain-alpha-contract-lock-path",
|
|
2962
3008
|
"buildchain-contract-compatibility-policy",
|
|
2963
3009
|
"buildchain-contract-drift-issue-mode",
|
|
2964
3010
|
"buildchain-contract-lock-path",
|
|
@@ -2969,6 +3015,7 @@
|
|
|
2969
3015
|
"buildchain-issue-token",
|
|
2970
3016
|
"buildchain-ref",
|
|
2971
3017
|
"buildchain-repository",
|
|
3018
|
+
"buildchain-stable-contract-lock-path",
|
|
2972
3019
|
"channel",
|
|
2973
3020
|
"declarative-release-tail",
|
|
2974
3021
|
"dry-run",
|
|
@@ -2987,6 +3034,8 @@
|
|
|
2987
3034
|
"promotion-publication-channel",
|
|
2988
3035
|
"promotion-router-ref",
|
|
2989
3036
|
"promotion-router-sha",
|
|
3037
|
+
"promotion-runtime-authorization-json",
|
|
3038
|
+
"promotion-runtime-authorization-root",
|
|
2990
3039
|
"promotion-runtime-ref",
|
|
2991
3040
|
"promotion-runtime-sha",
|
|
2992
3041
|
"promotion-shell-ref",
|
|
@@ -3052,6 +3101,7 @@
|
|
|
3052
3101
|
"release-passport-output-dir",
|
|
3053
3102
|
"release-passport-platform-manifest-paths",
|
|
3054
3103
|
"release-passport-product-name",
|
|
3104
|
+
"release-passport-v4-runtime-resume-evidence-json",
|
|
3055
3105
|
"release-propagation-config-path",
|
|
3056
3106
|
"required-artifact-count",
|
|
3057
3107
|
"required-status-check",
|
|
@@ -3072,8 +3122,8 @@
|
|
|
3072
3122
|
],
|
|
3073
3123
|
"controllerDescriptor": {
|
|
3074
3124
|
"contract": "buildchain.controller-descriptor/v1",
|
|
3075
|
-
"digest": "sha256:
|
|
3076
|
-
"registryDigest": "sha256:
|
|
3125
|
+
"digest": "sha256:3c83524f650a4d04004400d3821dbbd081b8802035dc6004464cdcfd0b5cdfc3",
|
|
3126
|
+
"registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
|
|
3077
3127
|
"inputClassifications": {
|
|
3078
3128
|
"BUILDCHAIN_ISSUE_APP_ID": {
|
|
3079
3129
|
"classification": "redacted",
|
|
@@ -3127,6 +3177,10 @@
|
|
|
3127
3177
|
"classification": "included",
|
|
3128
3178
|
"source": "workflow-call-input"
|
|
3129
3179
|
},
|
|
3180
|
+
"buildchain-alpha-contract-lock-path": {
|
|
3181
|
+
"classification": "digest-only",
|
|
3182
|
+
"source": "workflow-call-input"
|
|
3183
|
+
},
|
|
3130
3184
|
"buildchain-contract-compatibility-policy": {
|
|
3131
3185
|
"classification": "included",
|
|
3132
3186
|
"source": "workflow-call-input"
|
|
@@ -3167,6 +3221,10 @@
|
|
|
3167
3221
|
"classification": "included",
|
|
3168
3222
|
"source": "workflow-call-input"
|
|
3169
3223
|
},
|
|
3224
|
+
"buildchain-stable-contract-lock-path": {
|
|
3225
|
+
"classification": "digest-only",
|
|
3226
|
+
"source": "workflow-call-input"
|
|
3227
|
+
},
|
|
3170
3228
|
"channel": {
|
|
3171
3229
|
"classification": "included",
|
|
3172
3230
|
"source": "workflow-call-input"
|
|
@@ -3239,6 +3297,14 @@
|
|
|
3239
3297
|
"classification": "included",
|
|
3240
3298
|
"source": "workflow-call-input"
|
|
3241
3299
|
},
|
|
3300
|
+
"promotion-runtime-authorization-json": {
|
|
3301
|
+
"classification": "digest-only",
|
|
3302
|
+
"source": "workflow-call-input"
|
|
3303
|
+
},
|
|
3304
|
+
"promotion-runtime-authorization-root": {
|
|
3305
|
+
"classification": "included",
|
|
3306
|
+
"source": "workflow-call-input"
|
|
3307
|
+
},
|
|
3242
3308
|
"promotion-runtime-ref": {
|
|
3243
3309
|
"classification": "included",
|
|
3244
3310
|
"source": "workflow-call-input"
|
|
@@ -3499,6 +3565,10 @@
|
|
|
3499
3565
|
"classification": "included",
|
|
3500
3566
|
"source": "workflow-call-input"
|
|
3501
3567
|
},
|
|
3568
|
+
"release-passport-v4-runtime-resume-evidence-json": {
|
|
3569
|
+
"classification": "digest-only",
|
|
3570
|
+
"source": "workflow-call-input"
|
|
3571
|
+
},
|
|
3502
3572
|
"release-propagation-config-path": {
|
|
3503
3573
|
"classification": "digest-only",
|
|
3504
3574
|
"source": "workflow-call-input"
|
|
@@ -3576,7 +3646,7 @@
|
|
|
3576
3646
|
"missing receipts are non-qualifying and must not be represented as a successful controller run"
|
|
3577
3647
|
],
|
|
3578
3648
|
"breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
|
|
3579
|
-
"auditDigest": "sha256:
|
|
3649
|
+
"auditDigest": "sha256:b7532257bb94b8cf5ed401a49caa14a7beda404efa201a89bee928b0fb52a7c9"
|
|
3580
3650
|
},
|
|
3581
3651
|
{
|
|
3582
3652
|
"contractVersion": 1,
|
|
@@ -3641,7 +3711,7 @@
|
|
|
3641
3711
|
"controllerDescriptor": {
|
|
3642
3712
|
"contract": "buildchain.controller-descriptor/v1",
|
|
3643
3713
|
"digest": "sha256:660579b5561e8e33375a3f3b1fefbb8a5bd8241a55ba43374d786fb772c24a12",
|
|
3644
|
-
"registryDigest": "sha256:
|
|
3714
|
+
"registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
|
|
3645
3715
|
"inputClassifications": {
|
|
3646
3716
|
"agent-work-context-json": {
|
|
3647
3717
|
"classification": "digest-only",
|
|
@@ -3776,7 +3846,7 @@
|
|
|
3776
3846
|
"controllerDescriptor": {
|
|
3777
3847
|
"contract": "buildchain.controller-descriptor/v1",
|
|
3778
3848
|
"digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555",
|
|
3779
|
-
"registryDigest": "sha256:
|
|
3849
|
+
"registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
|
|
3780
3850
|
"inputClassifications": {}
|
|
3781
3851
|
},
|
|
3782
3852
|
"guarantees": [
|
|
@@ -3790,5 +3860,5 @@
|
|
|
3790
3860
|
}
|
|
3791
3861
|
],
|
|
3792
3862
|
"compatibilityDigest": "sha256:7234ed200c568b1fea0e469de61ec7a67da48ede0af6290fb49b93a9e62e0b65",
|
|
3793
|
-
"contractDigest": "sha256:
|
|
3863
|
+
"contractDigest": "sha256:969638b160fb3df24759937f155b07ea5316a3d35f40b80563f50f7bf2b92ae7"
|
|
3794
3864
|
}
|