@kungfu-tech/buildchain 4.0.1-alpha.0 → 4.0.1-alpha.3

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.0",
+    "version": "4.0.1-alpha.3",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v4",
@@ -52,7 +52,7 @@
         "retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
       ],
       "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
-      "auditDigest": "sha256:61494dcde9c16d102b582371ee5ba2336c7fc2f43dfd253a2d427ccbb25e00ef"
+      "auditDigest": "sha256:b3cad87356b28e5d78fe8663f63354fada735cf8ad32c93884bb804ef73be76c"
     },
     {
       "contractVersion": 1,
@@ -91,7 +91,90 @@
         "alpha and stable channel selections use separate consumer contract locks by default"
       ],
       "breakingDigest": "sha256:c4597dfa89e1a58f1023905092b849644f5c080abf150aeba9c7e1cd5ed43962",
-      "auditDigest": "sha256:8cf016da272ea41214f3b17fa6f3bb406130659c4f86c4f6dd84e15d2bd0e9fe"
+      "auditDigest": "sha256:97fa61f0e97641edd3b1b435ace06c621e702f0b8b406c4f3998c148a337c74a"
+    },
+    {
+      "contractVersion": 1,
+      "stability": "stable",
+      "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
+      "id": "dev-pr-auto-merge",
+      "kind": "workflow",
+      "path": ".github/workflows/dev-pr-auto-merge.yml",
+      "publicRef": "kungfu-systems/buildchain/.github/workflows/dev-pr-auto-merge.yml@v4-alpha",
+      "requiredInputs": [
+        "target-branch",
+        "expected-pr-number",
+        "expected-head-sha"
+      ],
+      "requiredOutputs": [
+        "admission-receipt-root",
+        "warrant-state-root",
+        "provider-heartbeat-receipt-root",
+        "provider-finalizer-boundary-root"
+      ],
+      "breakingDefaults": {
+        "runtimeSelectorDefault": "v4",
+        "authorityMode": "two-phase-delivery-warrant",
+        "boundedAuthorityWorkflowIntegration": "not-advertised",
+        "boundedAuthoritySupportedSurfaces": [
+          "cli",
+          "node-api",
+          "schema"
+        ],
+        "publicFloatingCaller": "v4-alpha",
+        "durableSelfDeliveryRef": "v4-alpha",
+        "independentHeartbeatRunner": "macos-15",
+        "candidateCredentialAccess": "forbidden"
+      },
+      "optionalInputs": [
+        "buildchain-repository",
+        "buildchain-ref",
+        "source-workflow-run-id",
+        "legacy-active-owner-binding-json",
+        "delivery-warrant-mode",
+        "handoff-workflow-id",
+        "source-workflow-id",
+        "assignment-root",
+        "initiative-root",
+        "source-identity-root",
+        "source-patch-root",
+        "plan-root",
+        "closure-root",
+        "dependency-root",
+        "toolchain-root",
+        "environment-root",
+        "affected-paths-json",
+        "shard-evidence-roots-json",
+        "release-blocker-priority-json",
+        "native-proof-json",
+        "native-command",
+        "native-command-root",
+        "native-heartbeat-seconds",
+        "delivery-class",
+        "delivery-priority",
+        "required-status-checks",
+        "queue-admission-context",
+        "active-lease-context",
+        "ready-label",
+        "block-labels",
+        "allowed-head-prefixes",
+        "require-approval",
+        "same-repository-only",
+        "max-merges",
+        "merge-method",
+        "landing-mode",
+        "dry-run"
+      ],
+      "guarantees": [
+        "this reusable workflow executes the single-flight v1 Delivery Warrant and does not advertise bounded v2 Landing integration",
+        "bounded v2 authority is a separate opt-in CLI, Node API, and schema surface whose controller deployment must be explicit",
+        "candidate execution and evidence sealing receive no provider write credentials",
+        "a separate credentialed hosted runner durably heartbeats the exact fence through provider-confirmed native and seal completion",
+        "the finalizer validates rooted heartbeat continuity and latest durable state before qualification, failure settlement, or landing",
+        "durable consumers call the public floating workflow and may route a train or exact runtime only through trusted non-persistent dispatch input"
+      ],
+      "breakingDigest": "sha256:21b65d0746d2e8b3e8a7df4c6fab295a85c8fd42cc405ec3bc5df5cdab0421f0",
+      "auditDigest": "sha256:65dd95900973fec345043d1ce92fc7625719fc9b7312f319a03a75a4c3705b0c"
     },
     {
       "contractVersion": 1,
@@ -193,7 +276,7 @@
         "sha256:acd401cfc46450115a3763fd4b679d85f185e8757ebd52510d6262e1533df4cf"
       ],
       "breakingDigest": "sha256:5f10c81d3f80cb417960be682921884639c40b6d875f1a3b1ffae7e652c3f468",
-      "auditDigest": "sha256:13e000bc36e25a972e5c76bafb138cf84361237650ed28529ebd7daf7f2c3025"
+      "auditDigest": "sha256:2d8eaa093d31391c56a7c672a8ba1fbb756b66f5d05dc4f04909fceb077ea376"
     },
     {
       "contractVersion": 1,
@@ -251,7 +334,7 @@
         "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
       ],
       "breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
-      "auditDigest": "sha256:adb76e2a8ddd7b8323beb6f2da775aee394c5be6992262ff053a5bc745b2a033"
+      "auditDigest": "sha256:b7532257bb94b8cf5ed401a49caa14a7beda404efa201a89bee928b0fb52a7c9"
     },
     {
       "contractVersion": 1,
@@ -478,7 +561,7 @@
         "sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874"
       ],
       "breakingDigest": "sha256:6147c0a8d5c36bfaa6021871574e1fc28192a3f1b8cfdae4d24ef3059ac1ebda",
-      "auditDigest": "sha256:8e89dd8296e68d52872ca78ba9d97c4493702eb3c33ab5315faeadbdf10d8c00"
+      "auditDigest": "sha256:c84da8a7e2bf428288e24c7a105dd718a8cc2db1d08d9e8fd0fa374430653fa7"
     },
     {
       "contractVersion": 1,
@@ -593,7 +676,7 @@
         "release-state SHA is recorded as a durable audit entrance"
       ],
       "breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
-      "auditDigest": "sha256:34f8048ea82b0696bfb7fa7d2eba2b09a5e51eaf5ab9a9857e278c7d005427dc"
+      "auditDigest": "sha256:8276788ccdcfb55fab5a0343ecf9474273e91c99fc5e1630e19ccf6b920cbd90"
     },
     {
       "contractVersion": 1,
@@ -642,7 +725,7 @@
         "prose-only public claims downgrade the release trust passport audit"
       ],
       "breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
-      "auditDigest": "sha256:34f8048ea82b0696bfb7fa7d2eba2b09a5e51eaf5ab9a9857e278c7d005427dc"
+      "auditDigest": "sha256:8276788ccdcfb55fab5a0343ecf9474273e91c99fc5e1630e19ccf6b920cbd90"
     },
     {
       "contractVersion": 1,
@@ -702,7 +785,7 @@
         "README badge block checks and writes are generated from machine-readable repository facts"
       ],
       "breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
-      "auditDigest": "sha256:377a975d16ffd1e36f5abd60538107380c3bd9e60337482af6aa5b1384742a1b"
+      "auditDigest": "sha256:35f1f62be899e4c0ddf0f7c830f6a081496d16c016278fdef35b1c2b92cc8216"
     },
     {
       "contractVersion": 1,
@@ -792,7 +875,7 @@
         "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
       ],
       "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
-      "auditDigest": "sha256:85c040a0ee2e9e65839221e0c7682fefb544e9290a213d57e76baa54ef2add54"
+      "auditDigest": "sha256:e1c02b90fdc73130294dcbf6719cc8b24d43a197b34200177a120cd7f3e6c15e"
     },
     {
       "contractVersion": 1,
@@ -814,7 +897,7 @@
         "agents can discover supported Node APIs without importing internal file paths"
       ],
       "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
-      "auditDigest": "sha256:d905e94317be3fccf0f4f627041ba91b68623993ed896d535fda475b69b9b88d"
+      "auditDigest": "sha256:971498b4f91c2361ab7eb8ce7a9c32ce20b310509e56cd8b4a517a47062f6589"
     },
     {
       "contractVersion": 1,
@@ -859,13 +942,18 @@
         "mode",
         "node-version",
         "require-version-state",
+        "source-proof-closure-paths-json",
+        "source-proof-dependency-paths-json",
+        "source-proof-policy-paths-json",
+        "source-proof-required-contexts-json",
+        "source-proof-reuse",
         "upload-artifacts",
         "working-directory"
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:373723a73d188194d389dee04c394d3b79cb0c016a370f2f5d0f60979a02ed48",
-        "registryDigest": "sha256:34776744f57db27b04eec061ea5ff01043b72119475a2bf623c87834cb30bb3d",
+        "digest": "sha256:91aeff9ffcc598918626c24850a00063a79ddf26aa48702fa22e7dce8c761968",
+        "registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
         "inputClassifications": {
           "buildchain-ref": {
             "classification": "included",
@@ -887,6 +975,26 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
+          "source-proof-closure-paths-json": {
+            "classification": "digest-only",
+            "source": "workflow-call-input"
+          },
+          "source-proof-dependency-paths-json": {
+            "classification": "digest-only",
+            "source": "workflow-call-input"
+          },
+          "source-proof-policy-paths-json": {
+            "classification": "digest-only",
+            "source": "workflow-call-input"
+          },
+          "source-proof-required-contexts-json": {
+            "classification": "digest-only",
+            "source": "workflow-call-input"
+          },
+          "source-proof-reuse": {
+            "classification": "included",
+            "source": "workflow-call-input"
+          },
           "upload-artifacts": {
             "classification": "included",
             "source": "workflow-call-input"
@@ -904,7 +1012,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:d4bd0f2a1921bfed71a4d9104d45934555bde74a5c189f93ad79f37074c02b87",
-      "auditDigest": "sha256:3687beefbc336c6b6d3ca2d71fe8668e13832382ac4b6fc8847ed39bb9737ec8"
+      "auditDigest": "sha256:d85f695dd506fba489dab99d7c37f3ebf6ac7efed32d887288286b9496108209"
     },
     {
       "contractVersion": 1,
@@ -985,6 +1093,7 @@
         "buildchain-expected-major",
         "buildchain-ref",
         "buildchain-repository",
+        "buildchain-visible-workflow",
         "cache-dependency-lock-root",
         "cache-policy-root",
         "cache-toolchain-root",
@@ -1051,8 +1160,8 @@
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:18bd484d8425b54ad533adde64f874c151a0a90de878c5498cfb99709cb53ea3",
-        "registryDigest": "sha256:34776744f57db27b04eec061ea5ff01043b72119475a2bf623c87834cb30bb3d",
+        "digest": "sha256:03677ba50080b3813a20004c41802e340368e4d225782fae194e3722c763bd01",
+        "registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
         "inputClassifications": {
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
             "classification": "redacted",
@@ -1198,6 +1307,10 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
+          "buildchain-visible-workflow": {
+            "classification": "included",
+            "source": "workflow-call-input"
+          },
           "cache-dependency-lock-root": {
             "classification": "included",
             "source": "workflow-call-input"
@@ -1463,7 +1576,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
-      "auditDigest": "sha256:61494dcde9c16d102b582371ee5ba2336c7fc2f43dfd253a2d427ccbb25e00ef"
+      "auditDigest": "sha256:b3cad87356b28e5d78fe8663f63354fada735cf8ad32c93884bb804ef73be76c"
     },
     {
       "contractVersion": 1,
@@ -1539,6 +1652,7 @@
         "buildchain-ref",
         "buildchain-repository",
         "buildchain-stable-contract-lock-path",
+        "buildchain-visible-workflow",
         "cache-dependency-lock-root",
         "cache-policy-root",
         "cache-toolchain-root",
@@ -1605,8 +1719,8 @@
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:47b73fb19d61c06911278ce99f8433596a8539097fdc18fe11f05b0d3c2109c0",
-        "registryDigest": "sha256:34776744f57db27b04eec061ea5ff01043b72119475a2bf623c87834cb30bb3d",
+        "digest": "sha256:45978a572cf3ce57b48e5c3190761ad4fbeedc8e75ea0dae2e66ea5a980282df",
+        "registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
         "inputClassifications": {
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
             "classification": "redacted",
@@ -1764,6 +1878,10 @@
             "classification": "digest-only",
             "source": "workflow-call-input"
           },
+          "buildchain-visible-workflow": {
+            "classification": "included",
+            "source": "workflow-call-input"
+          },
           "cache-dependency-lock-root": {
             "classification": "included",
             "source": "workflow-call-input"
@@ -2025,7 +2143,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df",
-      "auditDigest": "sha256:8cf016da272ea41214f3b17fa6f3bb406130659c4f86c4f6dd84e15d2bd0e9fe"
+      "auditDigest": "sha256:97fa61f0e97641edd3b1b435ace06c621e702f0b8b406c4f3998c148a337c74a"
     },
     {
       "contractVersion": 1,
@@ -2095,7 +2213,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:8e42956a2c10fa109500e72b97994f06b3d22a19cc63a46f66410b2e81706e9d",
-        "registryDigest": "sha256:34776744f57db27b04eec061ea5ff01043b72119475a2bf623c87834cb30bb3d",
+        "registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -2312,7 +2430,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:c5274b37f04d0054559fdc8698c51bd0f0d8ae470baf163e9caa7699aa970575",
-        "registryDigest": "sha256:34776744f57db27b04eec061ea5ff01043b72119475a2bf623c87834cb30bb3d",
+        "registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
         "inputClassifications": {
           "artifact-path": {
             "classification": "digest-only",
@@ -2535,11 +2653,13 @@
         "artifact-paths",
         "artifact-retention-days",
         "build-command",
+        "buildchain-alpha-contract-lock-path",
         "buildchain-contract-compatibility-policy",
         "buildchain-contract-drift-issue-mode",
         "buildchain-contract-lock-path",
         "buildchain-ref",
         "buildchain-repository",
+        "buildchain-stable-contract-lock-path",
         "node-version",
         "package-name",
         "prepare-paper-package",
@@ -2555,8 +2675,8 @@
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:6b132790b9798e8a5dfbe095701d8e024c160a08bc7c4bd477ee79feef7a9cfd",
-        "registryDigest": "sha256:34776744f57db27b04eec061ea5ff01043b72119475a2bf623c87834cb30bb3d",
+        "digest": "sha256:e48bb7719886d3949d63ec69d638264b20c7de8a70ee2db3cca78d4369f5a41e",
+        "registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -2574,6 +2694,10 @@
             "classification": "digest-only",
             "source": "workflow-call-input"
           },
+          "buildchain-alpha-contract-lock-path": {
+            "classification": "digest-only",
+            "source": "workflow-call-input"
+          },
           "buildchain-contract-compatibility-policy": {
             "classification": "included",
             "source": "workflow-call-input"
@@ -2594,6 +2718,10 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
+          "buildchain-stable-contract-lock-path": {
+            "classification": "digest-only",
+            "source": "workflow-call-input"
+          },
           "node-version": {
             "classification": "included",
             "source": "workflow-call-input"
@@ -2651,7 +2779,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:3f76502666069c2727d23efcfdb08fb80f89ced1955a69e29f11525ae88aca1d",
-      "auditDigest": "sha256:6132e68620355e2a4d491172bc5eab58121369265baab0dee72a99218efa559a"
+      "auditDigest": "sha256:eddb584c84c0ee26ce90388d17de9f16645c8f585d5f092c46f70cb5ae384104"
     },
     {
       "contractVersion": 1,
@@ -2738,7 +2866,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:6d71409659fbf8543c7e520b0c493d8afe86bdf60286b860bb917f0041ebc173",
-        "registryDigest": "sha256:34776744f57db27b04eec061ea5ff01043b72119475a2bf623c87834cb30bb3d",
+        "registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -2959,6 +3087,7 @@
         "branch-protection-bypass-apps",
         "branch-protection-bypass-teams",
         "branch-protection-bypass-users",
+        "buildchain-alpha-contract-lock-path",
         "buildchain-contract-compatibility-policy",
         "buildchain-contract-drift-issue-mode",
         "buildchain-contract-lock-path",
@@ -2969,6 +3098,7 @@
         "buildchain-issue-token",
         "buildchain-ref",
         "buildchain-repository",
+        "buildchain-stable-contract-lock-path",
         "channel",
         "declarative-release-tail",
         "dry-run",
@@ -2987,6 +3117,8 @@
         "promotion-publication-channel",
         "promotion-router-ref",
         "promotion-router-sha",
+        "promotion-runtime-authorization-json",
+        "promotion-runtime-authorization-root",
         "promotion-runtime-ref",
         "promotion-runtime-sha",
         "promotion-shell-ref",
@@ -3052,6 +3184,7 @@
         "release-passport-output-dir",
         "release-passport-platform-manifest-paths",
         "release-passport-product-name",
+        "release-passport-v4-runtime-resume-evidence-json",
         "release-propagation-config-path",
         "required-artifact-count",
         "required-status-check",
@@ -3072,8 +3205,8 @@
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:1e812ddf411c9f4106e5ff88054e1fe6f0eb6bad76c3985d8adbc9ce5dfe345d",
-        "registryDigest": "sha256:34776744f57db27b04eec061ea5ff01043b72119475a2bf623c87834cb30bb3d",
+        "digest": "sha256:3c83524f650a4d04004400d3821dbbd081b8802035dc6004464cdcfd0b5cdfc3",
+        "registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
         "inputClassifications": {
           "BUILDCHAIN_ISSUE_APP_ID": {
             "classification": "redacted",
@@ -3127,6 +3260,10 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
+          "buildchain-alpha-contract-lock-path": {
+            "classification": "digest-only",
+            "source": "workflow-call-input"
+          },
           "buildchain-contract-compatibility-policy": {
             "classification": "included",
             "source": "workflow-call-input"
@@ -3167,6 +3304,10 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
+          "buildchain-stable-contract-lock-path": {
+            "classification": "digest-only",
+            "source": "workflow-call-input"
+          },
           "channel": {
             "classification": "included",
             "source": "workflow-call-input"
@@ -3239,6 +3380,14 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
+          "promotion-runtime-authorization-json": {
+            "classification": "digest-only",
+            "source": "workflow-call-input"
+          },
+          "promotion-runtime-authorization-root": {
+            "classification": "included",
+            "source": "workflow-call-input"
+          },
           "promotion-runtime-ref": {
             "classification": "included",
             "source": "workflow-call-input"
@@ -3499,6 +3648,10 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
+          "release-passport-v4-runtime-resume-evidence-json": {
+            "classification": "digest-only",
+            "source": "workflow-call-input"
+          },
           "release-propagation-config-path": {
             "classification": "digest-only",
             "source": "workflow-call-input"
@@ -3576,7 +3729,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
-      "auditDigest": "sha256:adb76e2a8ddd7b8323beb6f2da775aee394c5be6992262ff053a5bc745b2a033"
+      "auditDigest": "sha256:b7532257bb94b8cf5ed401a49caa14a7beda404efa201a89bee928b0fb52a7c9"
     },
     {
       "contractVersion": 1,
@@ -3641,7 +3794,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:660579b5561e8e33375a3f3b1fefbb8a5bd8241a55ba43374d786fb772c24a12",
-        "registryDigest": "sha256:34776744f57db27b04eec061ea5ff01043b72119475a2bf623c87834cb30bb3d",
+        "registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
         "inputClassifications": {
           "agent-work-context-json": {
             "classification": "digest-only",
@@ -3776,7 +3929,7 @@
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
         "digest": "sha256:b6f53563c0adc859bc586c05fce560a5094d7d9666438d63c5fd3e1fc4774555",
-        "registryDigest": "sha256:34776744f57db27b04eec061ea5ff01043b72119475a2bf623c87834cb30bb3d",
+        "registryDigest": "sha256:eb9eb918b763f303baf313e153076e9d3158ca28a2e6cc558834a06e49d9d9cf",
         "inputClassifications": {}
       },
       "guarantees": [
@@ -3789,6 +3942,6 @@
       "auditDigest": "sha256:d07482cd66413a2fb3781a3b76f960b8151b6231841799647fe237820de2fde6"
     }
   ],
-  "compatibilityDigest": "sha256:7234ed200c568b1fea0e469de61ec7a67da48ede0af6290fb49b93a9e62e0b65",
-  "contractDigest": "sha256:994e4ad86547e6b268a56d727ea4bc22b78c057f433e219cf25e5e3c65ee6cb7"
+  "compatibilityDigest": "sha256:c8407195cafe42cb62ac2a4f5ff5b2c3f9b8aa65c27cc678efd46240cb3f0ecc",
+  "contractDigest": "sha256:bd2c8f4ccf3cb9593aa5dcdd8b02f9ad12e4bc211915804585198df418e099bf"
 }