@kungfu-tech/buildchain 4.0.1-alpha.0 → 4.0.1-alpha.3

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-08-13T13:36:37.303Z",
-  "publishedAt": "2026-08-13T13:36:37.303Z",
+  "generatedAt": "2026-08-15T19:57:44.433Z",
+  "publishedAt": "2026-08-15T19:57:44.433Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "45a49dcaa0fcef59bc66481a85c39514d08972cc",
+  "sourceRevision": "cfc0256de1826e0e0ec4a4e55644c869f3286f91",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.0",
+    "version": "4.0.1-alpha.3",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -53,7 +53,7 @@
       "path": "docs/MAP.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:94a4866f5a44f97ab10ad460c4d9ff39c58aa28e231311425af2fcb857aa8c72"
+      "digest": "sha256:16120e34c1a178b00309887d7903c2c8acb95815326091cf46a608d375435b99"
     },
     {
       "id": "getting-started",
@@ -237,7 +237,7 @@
       "path": "docs/cli-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:0aa0c937ca4f3f239f67c10a3e656ca0934cd3618bf84639525ea1fbd685c055"
+      "digest": "sha256:82b5d7afa63fc4cfa29ffb813f1830b30eeee3d9b0da821f77240a9ddb25584e"
     },
     {
       "id": "node-api-reference",
@@ -245,7 +245,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:f8200ba1fbe5779408b4a1e82a0e28a5e8f696b05f97efd2d286d3008755fdbb"
+      "digest": "sha256:8f0c42d4453003d9bff861392c890f557a54608662e1cc380ed9aaa6635df016"
     },
     {
       "id": "build-facts",
@@ -277,7 +277,7 @@
       "path": "docs/lifecycle-protocol.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:4b7a8efe1d22751ded069f46a23490db70cda9e9e14641acab600ab781245b19"
+      "digest": "sha256:edff8787985801d060efe9c924d80ac1689f5f2305d853f645fe877bab34c207"
     },
     {
       "id": "reusable-build-surface",
@@ -285,7 +285,7 @@
       "path": "docs/reusable-build-surface.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:54cadd6e2f168ca40d9ed66d2f9848d5d56c9d05759bf0454f5027b1df274796"
+      "digest": "sha256:fc2649d0ae4dc6a08275bc1f2509efd3e9730227eaa8157ef64daf4b9c850264"
     },
     {
       "id": "publish-transaction",
@@ -333,7 +333,7 @@
       "path": "docs/runtime-train-validation.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:f0a1cdb7fe5f72fc2ed921f1aeadbd16184dda16be3727e4193fa2af250325db"
+      "digest": "sha256:7df1e85785a1bd8d87c22359d63bcd1caf3fc6c4924d04b6802584b189f75a08"
     },
     {
       "id": "versioning",
@@ -341,7 +341,7 @@
       "path": "docs/versioning.md",
       "plane": "why",
       "exists": true,
-      "digest": "sha256:7f6e377abf976e9eb9c5f0fd2baec96922ca44d9ab7dd08178608657fa858978"
+      "digest": "sha256:fa094ca11fe51b2f23b2154523414676d6f8c8fa50493c5027a469da9115a414"
     },
     {
       "id": "web-surface-deployments",

package/dist/site/workflow-registry.json

@@ -119,6 +119,7 @@
         "buildchain-expected-major",
         "buildchain-ref",
         "buildchain-repository",
+        "buildchain-visible-workflow",
         "cache-dependency-lock-root",
         "cache-policy-root",
         "cache-toolchain-root",
@@ -183,7 +184,7 @@
         "verify-substage-evidence-path",
         "working-directory"
       ],
-      "inputCount": 90,
+      "inputCount": 91,
       "secrets": [
         "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
         "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -239,9 +240,11 @@
         "release-manifest-json",
         "runner-preset",
         "runner-routing-json",
-        "trusted-event"
+        "trusted-event",
+        "v4-consumer-policy-receipt-json",
+        "v4-consumer-policy-receipt-root"
       ],
-      "outputCount": 43,
+      "outputCount": 45,
       "surface": "reusable-build",
       "capabilityGroup": "api-cli-reference",
       "status": "active",
@@ -466,6 +469,7 @@
         "branch-protection-bypass-apps",
         "branch-protection-bypass-teams",
         "branch-protection-bypass-users",
+        "buildchain-alpha-contract-lock-path",
         "buildchain-contract-compatibility-policy",
         "buildchain-contract-drift-issue-mode",
         "buildchain-contract-lock-path",
@@ -473,6 +477,7 @@
         "buildchain-expected-major",
         "buildchain-ref",
         "buildchain-repository",
+        "buildchain-stable-contract-lock-path",
         "channel",
         "declarative-release-tail",
         "dry-run",
@@ -491,6 +496,8 @@
         "promotion-publication-channel",
         "promotion-router-ref",
         "promotion-router-sha",
+        "promotion-runtime-authorization-json",
+        "promotion-runtime-authorization-root",
         "promotion-runtime-ref",
         "promotion-runtime-sha",
         "promotion-shell-ref",
@@ -556,6 +563,7 @@
         "release-passport-output-dir",
         "release-passport-platform-manifest-paths",
         "release-passport-product-name",
+        "release-passport-v4-runtime-resume-evidence-json",
         "release-propagation-config-path",
         "required-artifact-count",
         "required-status-check",
@@ -574,7 +582,7 @@
         "target-sha",
         "trusted-publishing"
       ],
-      "inputCount": 113,
+      "inputCount": 118,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -1252,6 +1260,7 @@
         "buildchain-ref",
         "buildchain-repository",
         "buildchain-stable-contract-lock-path",
+        "buildchain-visible-workflow",
         "cache-dependency-lock-root",
         "cache-policy-root",
         "cache-toolchain-root",
@@ -1316,7 +1325,7 @@
         "verify-substage-evidence-path",
         "working-directory"
       ],
-      "inputCount": 93,
+      "inputCount": 94,
       "secrets": [
         "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
         "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -1375,9 +1384,11 @@
         "release-manifest-json",
         "runner-preset",
         "runner-routing-json",
-        "trusted-event"
+        "trusted-event",
+        "v4-consumer-policy-receipt-json",
+        "v4-consumer-policy-receipt-root"
       ],
-      "outputCount": 46,
+      "outputCount": 48,
       "surface": "channel-build-router",
       "capabilityGroup": "reusable-build",
       "status": "active",
@@ -1655,10 +1666,15 @@
         "mode",
         "node-version",
         "require-version-state",
+        "source-proof-closure-paths-json",
+        "source-proof-dependency-paths-json",
+        "source-proof-policy-paths-json",
+        "source-proof-required-contexts-json",
+        "source-proof-reuse",
         "upload-artifacts",
         "working-directory"
       ],
-      "inputCount": 7,
+      "inputCount": 12,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -1668,9 +1684,14 @@
         "controller-receipt-artifact",
         "controller-receipt-digest",
         "controller-receipt-json",
-        "controller-receipt-status"
+        "controller-receipt-status",
+        "source-proof-decision-root",
+        "source-proof-producer-run-id",
+        "source-proof-reuse-reason",
+        "source-proof-reused",
+        "source-proof-root"
       ],
-      "outputCount": 7,
+      "outputCount": 12,
       "surface": "repository-workflow",
       "capabilityGroup": "api-cli-reference",
       "status": "active",
@@ -1846,6 +1867,7 @@
       "path": ".github/workflows/dev-pr-auto-merge.yml",
       "reusable": true,
       "inputs": [
+        "active-lease-context",
         "affected-paths-json",
         "allowed-head-prefixes",
         "assignment-root",
@@ -1859,27 +1881,37 @@
         "dependency-root",
         "diagnostic-context",
         "dry-run",
+        "environment-root",
         "expected-head-sha",
         "expected-pr-number",
+        "handoff-workflow-id",
         "initiative-root",
         "landing-mode",
+        "legacy-active-owner-binding-json",
         "max-merges",
         "merge-method",
+        "native-command",
+        "native-command-root",
+        "native-heartbeat-seconds",
+        "native-proof-json",
         "plan-root",
         "project-cut-proof-json",
         "queue-admission-context",
         "ready-label",
+        "release-blocker-priority-json",
         "require-approval",
         "required-status-checks",
         "same-repository-only",
         "shard-evidence-roots-json",
         "source-identity-root",
         "source-patch-root",
+        "source-workflow-id",
+        "source-workflow-run-id",
         "target-branch",
         "toolchain-root",
         "warrant-lease-seconds"
       ],
-      "inputCount": 32,
+      "inputCount": 43,
       "secrets": [
         "github-token"
       ],
@@ -1892,14 +1924,20 @@
         "evaluated-count",
         "final-base-sha",
         "merged-count",
+        "native-execution-transfer-root",
+        "native-proof-root",
+        "native-reuse-decision-root",
         "project-cut-proof-root",
+        "provider-finalizer-boundary-root",
+        "provider-heartbeat-receipt-root",
+        "qualified-warrant-receipt-root",
         "skipped-count",
         "source-proof-root",
         "warrant-receipt-root",
         "warrant-state-commit",
         "warrant-state-root"
       ],
-      "outputCount": 13,
+      "outputCount": 19,
       "surface": "dev-governance",
       "capabilityGroup": "governance-versioning",
       "status": "active",
@@ -1968,7 +2006,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.0",
+      "introducedVersion": "4.0.1-alpha.3",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -1989,7 +2027,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.0",
+      "introducedVersion": "4.0.1-alpha.3",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2010,7 +2048,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.0",
+      "introducedVersion": "4.0.1-alpha.3",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2060,7 +2098,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.0",
+      "introducedVersion": "4.0.1-alpha.3",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2440,11 +2478,13 @@
         "artifact-paths",
         "artifact-retention-days",
         "build-command",
+        "buildchain-alpha-contract-lock-path",
         "buildchain-contract-compatibility-policy",
         "buildchain-contract-drift-issue-mode",
         "buildchain-contract-lock-path",
         "buildchain-ref",
         "buildchain-repository",
+        "buildchain-stable-contract-lock-path",
         "node-version",
         "package-name",
         "prepare-paper-package",
@@ -2458,7 +2498,7 @@
         "verify-command",
         "working-directory"
       ],
-      "inputCount": 21,
+      "inputCount": 23,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -2581,6 +2621,7 @@
         "release-passport-output-dir",
         "release-passport-platform-manifest-paths",
         "release-passport-product-name",
+        "release-passport-v4-runtime-resume-evidence-json",
         "release-propagation-config-path",
         "required-artifact-count",
         "required-status-check",
@@ -2599,7 +2640,7 @@
         "target-sha",
         "trusted-publishing"
       ],
-      "inputCount": 102,
+      "inputCount": 103,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -3150,6 +3191,9 @@
         "release-passport-platform-manifest-paths",
         "release-passport-product-name",
         "release-passport-promotion-routing-json",
+        "release-passport-v4-consumer-policy-certification-json",
+        "release-passport-v4-consumer-policy-certification-root",
+        "release-passport-v4-runtime-resume-evidence-json",
         "release-tail-state-path",
         "require-governance",
         "require-publication-qualification",
@@ -3163,7 +3207,7 @@
         "transaction-state-path",
         "verification-command"
       ],
-      "inputCount": 80,
+      "inputCount": 83,
       "capabilityGroup": "release-passport-trust",
       "status": "active",
       "owner": "buildchain-actions",

package/docs/MAP.md

@@ -119,6 +119,7 @@ replace them.
 | How do protected dev branches and scheduled ready-PR merging work? | [`release-governance.md`](release-governance.md#protected-dev-branches) | use | stable |
 | How do slow required checks land reliably on a busy dev channel? | [`release-governance.md`](release-governance.md#protected-dev-branches) + [`cli.md`](cli.md#commands) | use | preview |
 | How does the durable fair Dev Delivery Warrant Queue prevent slow-candidate starvation?                                                       | [`dev-delivery-warrant.md`](dev-delivery-warrant.md)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | use/verify | preview |
+| How are bounded Qualification Leases separated from exclusive merge-group Landing authority? | [`dev-delivery-qualification-landing-adr.md`](dev-delivery-qualification-landing-adr.md) + [`dev-delivery-warrant.md`](dev-delivery-warrant.md) | use/verify | preview |
 | How do I coalesce rapid Dev changes, preserve release runner priority, and retry only transient failed jobs? | [`dev-qualification-patrol.md`](dev-qualification-patrol.md) | use/verify | preview |
 | How do I run daily, weekly, or monthly repository patrols? | [`release-governance.md`](release-governance.md#buildchain-patrol) | use | stable |
 | How do I report or safely apply branch and pull-request engineering hygiene? | [`engineering-housekeeper.md`](engineering-housekeeper.md) | use/verify | preview |
@@ -159,6 +160,8 @@ replace them.
 | How do self-hosted runners reuse local Git checkout caches without weakening source locks? | [`reusable-build-surface.md`](reusable-build-surface.md#locked-source-checkout-cache) | use | stable |
 | How do ephemeral GitHub-hosted runners share exact dependency or compiler caches without fixed-runner affinity? | [`cli.md`](cli.md#commands) | use/verify | preview |
 | How do I validate an unreleased Buildchain runtime train while keeping `@v3`? | [`runtime-train-validation.md`](runtime-train-validation.md) | use | stable |
+| How do v4 consumers keep floating selectors while proving exact runtime and lock identity? | [`reusable-build-surface.md`](reusable-build-surface.md#v4-floating-consumer-admission) | verify/use | preview |
+| How can a trusted v4 run use a transient exact runtime and resume sealed Stage Capsules after a floating ref moves? | [`v4-runtime-ref-resume-authority.md`](v4-runtime-ref-resume-authority.md) | use/verify | preview |
 | How do I automatically qualify alpha candidates and publish the newest non-revoked qualified candidate at a fixed window? | [`stable-candidate-patrol.md`](stable-candidate-patrol.md) | use | preview |
 | How do I deploy a site/app preview, staging, or production surface? | [`web-surface-deployments.md`](web-surface-deployments.md) | use | stable |
 | How do I publish observed infrastructure contracts for downstream consumers? | [`infra-contract.md`](infra-contract.md) | use | preview |