@kungfu-tech/buildchain 4.0.1-alpha.2 → 4.0.1-alpha.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (203) hide show
  1. package/actions/release-tail/README.md +8 -0
  2. package/architecture/ci-lane-change-budget.json +187 -0
  3. package/architecture/decisions/0002-next-development-transition.md +101 -0
  4. package/architecture/decisions/0003-two-phase-delivery-warrant.md +152 -0
  5. package/architecture/internal-capabilities.json +211 -8
  6. package/architecture/maintainability-policy.json +113 -28
  7. package/architecture/release-tail-contract-inventory.json +5 -2
  8. package/architecture/v3-core-mechanism-inventory.json +91 -0
  9. package/architecture/v4-adopter-delivery-parity.json +32 -5
  10. package/architecture/v4-capability-state-machine-manifest.json +73 -0
  11. package/architecture/v4-compatibility-facts-parity.json +77 -0
  12. package/architecture/v4-delivery-authority-parity.json +250 -0
  13. package/architecture/v4-delivery-warrant-shadow-fixtures.json +41 -9
  14. package/architecture/v4-floating-consumer-policy.json +6 -0
  15. package/architecture/v4-next-development-parity.json +192 -0
  16. package/architecture/v4-publication-rehearsal-parity.json +84 -0
  17. package/architecture/v4-release-train-parity.json +1 -0
  18. package/architecture/v4-tail-reseal-parity.json +150 -0
  19. package/bin/buildchain.mjs +32 -3
  20. package/bin/internal/adopter-delivery-cli.mjs +70 -0
  21. package/bin/internal/command-registry.mjs +3 -0
  22. package/bin/internal/compatibility-facts-cli.mjs +101 -0
  23. package/contracts/dev-delivery-authority-v2.schema.json +662 -0
  24. package/contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json +47 -0
  25. package/contracts/fixtures/next-development-transition-v1/semver-auto-planned.json +47 -0
  26. package/contracts/fixtures/next-development-transition-v1/version-model-cases.json +40 -0
  27. package/contracts/fixtures/v4-adopter-delivery-v1/archive-template.json +19 -0
  28. package/contracts/fixtures/v4-adopter-delivery-v1/bootstrap-positive.json +93 -0
  29. package/contracts/fixtures/v4-adopter-delivery-v1/gate-positive.json +29 -0
  30. package/contracts/fixtures/v4-adopter-delivery-v1/gate-unknown-selector.json +26 -0
  31. package/contracts/fixtures/v4-adopter-delivery-v1/offline-vectors.json +50 -0
  32. package/contracts/fixtures/v4-compatibility-facts-v1/shared.json +1129 -0
  33. package/contracts/fixtures/v4-floating-consumer-policy-v1/cases.json +7 -1
  34. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/artifacts/product.bin +1 -0
  35. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/config/buildchain.toml +5 -0
  36. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/release-activation.json +1 -0
  37. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/signed-channel.json +1 -0
  38. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/evidence/qualification.json +1 -0
  39. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/candidate.json +5 -0
  40. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/release-passport.json +1 -0
  41. package/contracts/fixtures/v4-publication-rehearsal-v1/capsule.json +707 -0
  42. package/contracts/fixtures/v4-publication-rehearsal-v1/offline-vectors.json +27 -0
  43. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +229 -0
  44. package/contracts/next-development-request-v1.schema.json +66 -0
  45. package/contracts/next-development-transition-v1.schema.json +292 -0
  46. package/contracts/v4-adopter-delivery-v1.schema.json +81 -0
  47. package/contracts/v4-compatibility-facts-v1.schema.json +230 -0
  48. package/contracts/v4-floating-consumer-policy-receipt-v1.schema.json +4 -2
  49. package/contracts/v4-publication-rehearsal-capsule-v1.schema.json +233 -0
  50. package/contracts/v4-tail-reseal-v1.schema.json +276 -0
  51. package/dist/site/agent-index.json +5 -0
  52. package/dist/site/artifact-schemas.json +10 -0
  53. package/dist/site/buildchain-contract.json +1475 -27
  54. package/dist/site/buildchain-site.json +627 -31
  55. package/dist/site/capability-registry.json +17 -14
  56. package/dist/site/cli-registry.json +205 -3
  57. package/dist/site/kfd-claims.json +490 -16
  58. package/dist/site/kfd-upstream-aggregate.json +1 -1
  59. package/dist/site/manual-registry.json +52 -6
  60. package/dist/site/node-api-registry.json +14736 -8851
  61. package/dist/site/page-registry.json +593 -21
  62. package/dist/site/public-surface-audit.json +837 -48
  63. package/dist/site/publication-authority-registry.json +44 -8
  64. package/dist/site/publication-registry.json +4 -4
  65. package/dist/site/release-provenance.json +24 -0
  66. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +662 -0
  67. package/dist/site/schemas/release-tail-capabilities-v1.schema.json +199 -0
  68. package/dist/site/schemas/v4-adopter-delivery-v1.schema.json +81 -0
  69. package/dist/site/schemas/v4-compatibility-facts-v1.schema.json +230 -0
  70. package/dist/site/schemas/v4-publication-rehearsal-capsule-v1.schema.json +233 -0
  71. package/dist/site/site-manifest.json +34 -10
  72. package/dist/site/workflow-registry.json +160 -10
  73. package/docs/MAP.md +8 -2
  74. package/docs/cli-reference.md +404 -13
  75. package/docs/cli.md +8 -0
  76. package/docs/dev-alpha-candidate-patrol.md +8 -0
  77. package/docs/dev-delivery-qualification-landing-adr.md +251 -0
  78. package/docs/dev-delivery-warrant.md +351 -38
  79. package/docs/next-development-transition.md +118 -0
  80. package/docs/node-api-reference.md +646 -293
  81. package/docs/release-tail-provider-plane.md +30 -0
  82. package/docs/v4-adopter-delivery.md +133 -0
  83. package/docs/v4-compatibility-facts.md +91 -0
  84. package/docs/v4-publication-rehearsal.md +130 -0
  85. package/docs/v4-tail-reseal.md +73 -0
  86. package/docs/versioning.md +4 -3
  87. package/package.json +34 -6
  88. package/packages/core/adopter-delivery-passport.js +259 -0
  89. package/packages/core/adopter-delivery-vectors.js +158 -0
  90. package/packages/core/adopter-delivery-vectors.json +77 -0
  91. package/packages/core/buildchain-agent-manuals.js +3 -0
  92. package/packages/core/buildchain-compatibility-authority.js +336 -0
  93. package/packages/core/buildchain-compatibility-fact.js +394 -0
  94. package/packages/core/buildchain-compatibility-facts.json +217 -0
  95. package/packages/core/buildchain-compatibility-proof.js +566 -0
  96. package/packages/core/buildchain-config.js +84 -0
  97. package/packages/core/buildchain-contract.js +96 -143
  98. package/packages/core/buildchain-delivery-bootstrap.js +240 -0
  99. package/packages/core/buildchain-delivery-infrastructure.js +164 -0
  100. package/packages/core/buildchain-delivery-self-dogfood.js +395 -0
  101. package/packages/core/buildchain-publication-authority.js +1 -0
  102. package/packages/core/channel-candidate.js +8 -0
  103. package/packages/core/channel-promotion-baseline.js +55 -0
  104. package/packages/core/ci-lane-change-budget.js +247 -0
  105. package/packages/core/dev-alpha-candidate-selection.js +10 -2
  106. package/packages/core/dev-delivery-authority-candidate.js +270 -0
  107. package/packages/core/dev-delivery-authority-evidence.js +146 -0
  108. package/packages/core/dev-delivery-authority-landing.js +461 -0
  109. package/packages/core/dev-delivery-authority-observation.js +48 -0
  110. package/packages/core/dev-delivery-authority-qualification.js +591 -0
  111. package/packages/core/dev-delivery-authority-settlement.js +213 -0
  112. package/packages/core/dev-delivery-authority-state.js +583 -0
  113. package/packages/core/dev-delivery-candidate-identity.js +13 -0
  114. package/packages/core/dev-delivery-contract-surface.js +76 -0
  115. package/packages/core/dev-delivery-execution-failure.js +133 -0
  116. package/packages/core/dev-delivery-execution-transfer.js +592 -0
  117. package/packages/core/dev-delivery-landing-admission-core.js +119 -0
  118. package/packages/core/dev-delivery-landing-readback.js +598 -0
  119. package/packages/core/dev-delivery-landing-terminal-evidence.js +271 -0
  120. package/packages/core/dev-delivery-landing-testing-port.js +6 -0
  121. package/packages/core/dev-delivery-native-execution.js +110 -0
  122. package/packages/core/dev-delivery-native-proof.js +562 -0
  123. package/packages/core/dev-delivery-process-boundary.js +563 -0
  124. package/packages/core/dev-delivery-provider-attempt.js +127 -0
  125. package/packages/core/dev-delivery-provider-heartbeat.js +382 -0
  126. package/packages/core/dev-delivery-warrant-cancellation.js +1 -0
  127. package/packages/core/dev-delivery-warrant-qualification.js +145 -0
  128. package/packages/core/dev-delivery-warrant-settlement.js +237 -36
  129. package/packages/core/dev-delivery-warrant-state.js +587 -0
  130. package/packages/core/dev-delivery-warrant.js +328 -370
  131. package/packages/core/github-governance-authority.js +1 -0
  132. package/packages/core/index.js +5 -0
  133. package/packages/core/kungfu-temporal-fact.js +557 -0
  134. package/packages/core/legacy-kfd-adopter-driver.js +167 -0
  135. package/packages/core/next-development-candidate-reservation.js +186 -0
  136. package/packages/core/next-development-controller.js +728 -0
  137. package/packages/core/next-development-projection.js +287 -0
  138. package/packages/core/next-development-transition.js +738 -0
  139. package/packages/core/paper-agent-entry.js +11 -5
  140. package/packages/core/paper.js +16 -5
  141. package/packages/core/published-delivery-authority.js +266 -0
  142. package/packages/core/release-candidate-recovery.js +70 -15
  143. package/packages/core/release-candidate.js +2 -2
  144. package/packages/core/release-passport.js +36 -9
  145. package/packages/core/v4-adopter-delivery-parity.js +3 -3
  146. package/packages/core/v4-adopter-delivery.js +359 -0
  147. package/packages/core/v4-canonical-contracts.js +5 -0
  148. package/packages/core/v4-delivery-warrant-read-candidate.js +10 -3
  149. package/packages/core/v4-floating-consumer-evidence.js +18 -4
  150. package/packages/core/v4-floating-consumer-policy.js +143 -20
  151. package/packages/core/v4-floating-consumer-release-passport.js +32 -5
  152. package/packages/core/v4-publication-rehearsal-capsule.js +468 -0
  153. package/packages/core/v4-publication-rehearsal-provider-bindings.js +212 -0
  154. package/packages/core/v4-publication-rehearsal.js +481 -0
  155. package/packages/core/v4-tail-reseal-contract.js +26 -0
  156. package/packages/core/v4-tail-reseal-github.js +178 -0
  157. package/packages/core/v4-tail-reseal-receipt.js +225 -0
  158. package/packages/core/v4-tail-reseal.js +594 -0
  159. package/packages/core/workflow-yaml-contract.js +24 -2
  160. package/scripts/buildchain-cli-help.mjs +41 -2
  161. package/scripts/check-ci-lane-change-budget.mjs +100 -0
  162. package/scripts/check-inventory.mjs +14 -3
  163. package/scripts/check-v4-floating-consumer-policy-contract.mjs +23 -4
  164. package/scripts/dev-alpha-candidate-patrol.mjs +22 -1
  165. package/scripts/dev-delivery-authority-command-adapters.mjs +206 -0
  166. package/scripts/dev-delivery-authority-provider.mjs +28 -0
  167. package/scripts/dev-delivery-authority.mjs +490 -0
  168. package/scripts/dev-delivery-native-run.mjs +177 -0
  169. package/scripts/dev-delivery-process-boundary.mjs +260 -0
  170. package/scripts/dev-delivery-proof.mjs +67 -2
  171. package/scripts/dev-delivery-provider-heartbeat.mjs +215 -0
  172. package/scripts/dev-delivery-source-proof-replay.mjs +153 -0
  173. package/scripts/dev-delivery-source-proof-reuse.mjs +13 -97
  174. package/scripts/dev-delivery-two-phase-resume.mjs +345 -0
  175. package/scripts/dev-delivery-two-phase.mjs +573 -0
  176. package/scripts/dev-delivery-warrant-options.mjs +266 -0
  177. package/scripts/dev-delivery-warrant-store.mjs +231 -0
  178. package/scripts/dev-delivery-warrant.mjs +232 -194
  179. package/scripts/dev-pr-auto-merge.mjs +1 -1
  180. package/scripts/dev-pr-delivery-warrant.mjs +11 -0
  181. package/scripts/dev-qualification-patrol.mjs +9 -9
  182. package/scripts/dispatch-artifact-signing-authority.mjs +1 -1
  183. package/scripts/generate-channel-promotion-workflow.mjs +2 -2
  184. package/scripts/generate-next-development-guidance.mjs +49 -0
  185. package/scripts/generate-release-candidate-passport.mjs +152 -0
  186. package/scripts/generate-site-bundle.mjs +69 -4
  187. package/scripts/init-repo.mjs +22 -4
  188. package/scripts/next-development-self-dogfood-harness.mjs +460 -0
  189. package/scripts/next-development-self-dogfood.mjs +597 -0
  190. package/scripts/next-development-transition.mjs +47 -0
  191. package/scripts/npm-publish-transaction.mjs +2 -2
  192. package/scripts/promotion-channel-router.mjs +4 -4
  193. package/scripts/release-candidate-anchor-provenance.mjs +99 -0
  194. package/scripts/release-tail.mjs +51 -3
  195. package/scripts/release-train-self-dogfood.mjs +94 -92
  196. package/scripts/resume-from-candidate-run.mjs +557 -30
  197. package/scripts/site-capability-metadata.mjs +41 -0
  198. package/scripts/stable-candidate-qualification.mjs +9 -10
  199. package/scripts/v4-consumer-policy.mjs +5 -5
  200. package/scripts/v4-publication-rehearsal-fixture.mjs +144 -0
  201. package/scripts/v4-tail-reseal-macos-rehearsal.mjs +134 -0
  202. package/scripts/v4-tail-reseal.mjs +416 -0
  203. package/templates/native-dev-delivery.yml +143 -0
@@ -0,0 +1,707 @@
1
+ {
2
+ "schema": "buildchain-v4-publication-rehearsal-capsule/v1",
3
+ "coreVersion": "buildchain.release-tail/v1",
4
+ "source": {
5
+ "repository": "kungfu-systems/buildchain",
6
+ "revision": "bc12cd0ff18a7e1d918777ea093c169349952d34",
7
+ "root": "sha256:916540cacbbaf2c64f1464260d96b39146ec22b5f680ea3ff230e7327f64fc6f"
8
+ },
9
+ "candidate": {
10
+ "root": "sha256:b5d9af07bf35c6391588cdf827db389f48639139025762de075a4fb7507dbeb9"
11
+ },
12
+ "manifest": {
13
+ "path": "manifests/candidate.json",
14
+ "root": "sha256:618af174435c6e7b3d3e18558bee516f6e765eb2c45451ec4a634bcc41eca485"
15
+ },
16
+ "config": {
17
+ "path": "config/buildchain.toml",
18
+ "root": "sha256:8690b31fc5e57dca6bc2ac6d7e5505a330d797e9ac5be7d5d85f621011e232b7"
19
+ },
20
+ "providerBindings": {
21
+ "schema": "kungfu.buildchain.release-tail.provider-bindings/v1",
22
+ "artifacts": {
23
+ "installable-product": {
24
+ "path": "artifacts/product.bin",
25
+ "name": "product.bin"
26
+ },
27
+ "release-passport": {
28
+ "path": "manifests/release-passport.json",
29
+ "name": "release-passport.json"
30
+ }
31
+ },
32
+ "documents": {
33
+ "release.activate": {
34
+ "path": "documents/release-activation.json",
35
+ "method": "PUT"
36
+ },
37
+ "signed-channel.commit": {
38
+ "path": "documents/signed-channel.json",
39
+ "method": "PUT"
40
+ }
41
+ },
42
+ "evidence": {
43
+ "inputs": [
44
+ "evidence/qualification.json"
45
+ ],
46
+ "output": "generated/released-evidence.json"
47
+ }
48
+ },
49
+ "providerBindingsRoot": "sha256:fdea09a8d06372a3a74b7e7ebc87d948f03157aa941629a9bc63a2b012d88c6a",
50
+ "providerPolicy": {
51
+ "schema": "buildchain-v4-publication-rehearsal-provider-policy/v1",
52
+ "effectDefault": "disabled",
53
+ "allowedCapabilityIds": [
54
+ "artifact.publish",
55
+ "release.activate",
56
+ "released-evidence.synthesize",
57
+ "signed-channel.commit"
58
+ ],
59
+ "allowedAdapters": [
60
+ "activation-receipt-projector",
61
+ "github-release-assets",
62
+ "signed-static-channel",
63
+ "site-release-activation"
64
+ ],
65
+ "root": "sha256:1fc344d41faffc17c1877fee2c6b735ea1fb905e586f9146ca1ea23fbb0058c3"
66
+ },
67
+ "expectedObservations": {
68
+ "entries": [],
69
+ "root": "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945"
70
+ },
71
+ "declaration": {
72
+ "contract": "kungfu-buildchain-release-tail-capabilities",
73
+ "schemaVersion": 1,
74
+ "transactionPolicy": "buildchain.release-tail/v1",
75
+ "subject": {
76
+ "repository": "kungfu-systems/kungfu",
77
+ "sourceSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
78
+ "version": "4.0.0-alpha.1",
79
+ "tag": "v4.0.0-alpha.1",
80
+ "channel": "alpha"
81
+ },
82
+ "capabilities": [
83
+ {
84
+ "id": "artifact.publish",
85
+ "executor": "provider-adapter",
86
+ "adapter": "github-release-assets",
87
+ "artifactRoles": [
88
+ {
89
+ "role": "installable-product",
90
+ "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111"
91
+ },
92
+ {
93
+ "role": "release-passport",
94
+ "root": "sha256:2222222222222222222222222222222222222222222222222222222222222222"
95
+ }
96
+ ],
97
+ "destination": {
98
+ "kind": "github-release",
99
+ "locator": "github-release:kungfu-systems/kungfu@v4.0.0-alpha.1"
100
+ },
101
+ "channelPolicy": {
102
+ "channel": "alpha",
103
+ "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
104
+ "authorityMove": "verified-ref"
105
+ },
106
+ "activationPolicy": {
107
+ "mode": "none",
108
+ "environment": "none"
109
+ },
110
+ "readbackPredicates": [
111
+ {
112
+ "id": "release-assets-match-roots",
113
+ "kind": "provider-assets",
114
+ "expected": "all declared artifact roots are publicly readable"
115
+ }
116
+ ],
117
+ "effect": {
118
+ "kind": "artifact-publication",
119
+ "schema": "kungfu.buildchain.release-tail.effect/v1"
120
+ },
121
+ "observation": {
122
+ "kind": "artifact-publication-readback",
123
+ "schema": "kungfu.buildchain.release-tail.observation/v1"
124
+ },
125
+ "receipt": {
126
+ "kind": "artifact-publication",
127
+ "schema": "kungfu.buildchain.release-tail.receipt/v1"
128
+ },
129
+ "operationIdentity": {
130
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
131
+ "capabilityId": "artifact.publish",
132
+ "subjectRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
133
+ "targetRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
134
+ "attemptKey": "artifact.publish/1"
135
+ },
136
+ "idempotency": {
137
+ "scope": "subject-target",
138
+ "duplicate": "readback-before-retry"
139
+ },
140
+ "retry": {
141
+ "class": "provider-transient",
142
+ "localAttempts": 2,
143
+ "exhausted": "repair-required"
144
+ },
145
+ "evidenceRequirements": [
146
+ "kungfu-buildchain-publish-evidence",
147
+ "kungfu-buildchain-release-passport"
148
+ ]
149
+ },
150
+ {
151
+ "id": "signed-channel.commit",
152
+ "executor": "provider-adapter",
153
+ "adapter": "signed-static-channel",
154
+ "artifactRoles": [
155
+ {
156
+ "role": "signed-channel-index",
157
+ "root": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
158
+ },
159
+ {
160
+ "role": "installer-publication-bundle",
161
+ "root": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
162
+ }
163
+ ],
164
+ "destination": {
165
+ "kind": "well-known-signed-channel",
166
+ "locator": "https://kungfu.tech/.well-known/kungfu/alpha.json"
167
+ },
168
+ "channelPolicy": {
169
+ "channel": "alpha",
170
+ "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
171
+ "authorityMove": "signed-cas"
172
+ },
173
+ "activationPolicy": {
174
+ "mode": "none",
175
+ "environment": "none"
176
+ },
177
+ "readbackPredicates": [
178
+ {
179
+ "id": "signed-channel-root",
180
+ "kind": "public-signed-document",
181
+ "expected": "signature, payload root, source SHA, tag, and previous authority match"
182
+ }
183
+ ],
184
+ "effect": {
185
+ "kind": "signed-channel-commit",
186
+ "schema": "kungfu.buildchain.release-tail.effect/v1"
187
+ },
188
+ "observation": {
189
+ "kind": "signed-channel-readback",
190
+ "schema": "kungfu.buildchain.release-tail.observation/v1"
191
+ },
192
+ "receipt": {
193
+ "kind": "publication-commit",
194
+ "schema": "kungfu.buildchain.release-tail.receipt/v1"
195
+ },
196
+ "operationIdentity": {
197
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
198
+ "capabilityId": "signed-channel.commit",
199
+ "subjectRoot": "sha256:7777777777777777777777777777777777777777777777777777777777777777",
200
+ "targetRoot": "sha256:8888888888888888888888888888888888888888888888888888888888888888",
201
+ "attemptKey": "signed-channel.commit/1"
202
+ },
203
+ "idempotency": {
204
+ "scope": "subject-target",
205
+ "duplicate": "return-observed-receipt"
206
+ },
207
+ "retry": {
208
+ "class": "readback",
209
+ "localAttempts": 2,
210
+ "exhausted": "repair-required"
211
+ },
212
+ "evidenceRequirements": [
213
+ "kungfu-buildchain-publication-commit-evidence/v1"
214
+ ]
215
+ },
216
+ {
217
+ "id": "release.activate",
218
+ "executor": "provider-adapter",
219
+ "adapter": "site-release-activation",
220
+ "artifactRoles": [
221
+ {
222
+ "role": "activation-receipt-set",
223
+ "root": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
224
+ }
225
+ ],
226
+ "destination": {
227
+ "kind": "production-site",
228
+ "locator": "https://kungfu.tech/.well-known/kungfu-release-status.json"
229
+ },
230
+ "channelPolicy": {
231
+ "channel": "alpha",
232
+ "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
233
+ "authorityMove": "verified-ref"
234
+ },
235
+ "activationPolicy": {
236
+ "mode": "receipt-set",
237
+ "environment": "production"
238
+ },
239
+ "readbackPredicates": [
240
+ {
241
+ "id": "release-status-current",
242
+ "kind": "public-json",
243
+ "expected": "source, site source, version, tag, channel, and Passport roots match"
244
+ },
245
+ {
246
+ "id": "installable-product-qualified",
247
+ "kind": "public-product-qualification",
248
+ "expected": "a public qualification asset matches an admitted artifact root"
249
+ }
250
+ ],
251
+ "effect": {
252
+ "kind": "release-activation",
253
+ "schema": "kungfu.buildchain.release-tail.effect/v1"
254
+ },
255
+ "observation": {
256
+ "kind": "production-readback",
257
+ "schema": "kungfu.buildchain.release-tail.observation/v1"
258
+ },
259
+ "receipt": {
260
+ "kind": "activation-receipt-set",
261
+ "schema": "kungfu.buildchain.release-tail.receipt/v1"
262
+ },
263
+ "operationIdentity": {
264
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
265
+ "capabilityId": "release.activate",
266
+ "subjectRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
267
+ "targetRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
268
+ "attemptKey": "release.activate/1"
269
+ },
270
+ "idempotency": {
271
+ "scope": "operation",
272
+ "duplicate": "readback-before-retry"
273
+ },
274
+ "retry": {
275
+ "class": "provider-transient",
276
+ "localAttempts": 2,
277
+ "exhausted": "blocked"
278
+ },
279
+ "evidenceRequirements": [
280
+ "kungfu-buildchain-release-activation-receipt-set/v1",
281
+ "kungfu.release-public-readback/v1",
282
+ "kungfu.cli-installed-product-qualification/v1"
283
+ ]
284
+ },
285
+ {
286
+ "id": "released-evidence.synthesize",
287
+ "executor": "buildchain-core",
288
+ "adapter": "activation-receipt-projector",
289
+ "artifactRoles": [
290
+ {
291
+ "role": "activation-receipt-set",
292
+ "root": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
293
+ }
294
+ ],
295
+ "destination": {
296
+ "kind": "release-passport-attachment",
297
+ "locator": ".buildchain/release-evidence/ungfu-public-use.json"
298
+ },
299
+ "channelPolicy": {
300
+ "channel": "alpha",
301
+ "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
302
+ "authorityMove": "none"
303
+ },
304
+ "activationPolicy": {
305
+ "mode": "receipt-only",
306
+ "environment": "production"
307
+ },
308
+ "readbackPredicates": [
309
+ {
310
+ "id": "five-canonical-receipts",
311
+ "kind": "rooted-receipt-set",
312
+ "expected": "artifact, Passport, site, public readback, and product qualification receipts share one binding root"
313
+ }
314
+ ],
315
+ "effect": {
316
+ "kind": "released-evidence-projection",
317
+ "schema": "kungfu.buildchain.release-tail.effect/v1"
318
+ },
319
+ "observation": {
320
+ "kind": "released-evidence-validation",
321
+ "schema": "kungfu.buildchain.release-tail.observation/v1"
322
+ },
323
+ "receipt": {
324
+ "kind": "released-evidence",
325
+ "schema": "kungfu.buildchain.release-tail.receipt/v1"
326
+ },
327
+ "operationIdentity": {
328
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
329
+ "capabilityId": "released-evidence.synthesize",
330
+ "subjectRoot": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
331
+ "targetRoot": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
332
+ "attemptKey": "released-evidence.synthesize/1"
333
+ },
334
+ "idempotency": {
335
+ "scope": "operation",
336
+ "duplicate": "return-observed-receipt"
337
+ },
338
+ "retry": {
339
+ "class": "never",
340
+ "localAttempts": 0,
341
+ "exhausted": "terminal-failure"
342
+ },
343
+ "evidenceRequirements": [
344
+ "kungfu-buildchain-release-activation-receipt-set/v1",
345
+ "kungfu-ungfu-release-evidence-index"
346
+ ]
347
+ }
348
+ ]
349
+ },
350
+ "transaction": {
351
+ "schema": "kungfu.buildchain.release-tail.transaction/v1",
352
+ "transactionPolicy": "buildchain.release-tail/v1",
353
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
354
+ "declarationRoot": "sha256:707c4075352a5eeef77a4391ed6788c8a008d2f9576151087c2bd7c16748b430",
355
+ "planRoot": "sha256:8969b89ea94cf392f5d1edb7b2a6424f43be8a97454b0fa59772de792d072dfd",
356
+ "subject": {
357
+ "repository": "kungfu-systems/kungfu",
358
+ "sourceSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
359
+ "version": "4.0.0-alpha.1",
360
+ "tag": "v4.0.0-alpha.1",
361
+ "channel": "alpha"
362
+ },
363
+ "state": "prepared",
364
+ "operationOrder": [
365
+ "sha256:c36c3f5fa3cb58ce4ec81cb925ca5c3e16eba26ccc8f209b2f06ec54ffd9063f",
366
+ "sha256:51d2486a54e400057f272b5d3968c9f10becf0a7a4d47e40e18967b510fb14aa",
367
+ "sha256:eb8be7d8e617126a3b02b89e8ee35b6801e382bab8edb20906084e5338231cfe",
368
+ "sha256:d62baaf2eb384bc7fcc50718d5d57db14579f595e463838ce145c208c306bab4"
369
+ ],
370
+ "operations": [
371
+ {
372
+ "operationId": "sha256:c36c3f5fa3cb58ce4ec81cb925ca5c3e16eba26ccc8f209b2f06ec54ffd9063f",
373
+ "capabilityId": "artifact.publish",
374
+ "effect": {
375
+ "schema": "kungfu.buildchain.release-tail.effect/v1",
376
+ "kind": "artifact-publication",
377
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
378
+ "operationId": "sha256:c36c3f5fa3cb58ce4ec81cb925ca5c3e16eba26ccc8f209b2f06ec54ffd9063f",
379
+ "capabilityId": "artifact.publish",
380
+ "executor": "provider-adapter",
381
+ "adapter": "github-release-assets",
382
+ "subjectRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
383
+ "targetRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
384
+ "attemptKey": "artifact.publish/1",
385
+ "subject": {
386
+ "repository": "kungfu-systems/kungfu",
387
+ "sourceSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
388
+ "version": "4.0.0-alpha.1",
389
+ "tag": "v4.0.0-alpha.1",
390
+ "channel": "alpha"
391
+ },
392
+ "artifactRoles": [
393
+ {
394
+ "role": "installable-product",
395
+ "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111"
396
+ },
397
+ {
398
+ "role": "release-passport",
399
+ "root": "sha256:2222222222222222222222222222222222222222222222222222222222222222"
400
+ }
401
+ ],
402
+ "destination": {
403
+ "kind": "github-release",
404
+ "locator": "github-release:kungfu-systems/kungfu@v4.0.0-alpha.1"
405
+ },
406
+ "channelPolicy": {
407
+ "channel": "alpha",
408
+ "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
409
+ "authorityMove": "verified-ref"
410
+ },
411
+ "activationPolicy": {
412
+ "mode": "none",
413
+ "environment": "none"
414
+ },
415
+ "readbackPredicates": [
416
+ {
417
+ "id": "release-assets-match-roots",
418
+ "kind": "provider-assets",
419
+ "expected": "all declared artifact roots are publicly readable"
420
+ }
421
+ ],
422
+ "idempotency": {
423
+ "scope": "subject-target",
424
+ "duplicate": "readback-before-retry"
425
+ },
426
+ "retry": {
427
+ "class": "provider-transient",
428
+ "localAttempts": 2,
429
+ "exhausted": "repair-required"
430
+ },
431
+ "evidenceRequirements": [
432
+ "kungfu-buildchain-publish-evidence",
433
+ "kungfu-buildchain-release-passport"
434
+ ],
435
+ "effectRoot": "sha256:a48ddf2ba64228ba29f5380103e5b5bb2eff8bb98b506c58cbf5cb67a422c72a"
436
+ },
437
+ "status": "pending",
438
+ "effectAttempts": 0,
439
+ "readbackAttempts": 0,
440
+ "observationRoots": [],
441
+ "receipt": null
442
+ },
443
+ {
444
+ "operationId": "sha256:51d2486a54e400057f272b5d3968c9f10becf0a7a4d47e40e18967b510fb14aa",
445
+ "capabilityId": "signed-channel.commit",
446
+ "effect": {
447
+ "schema": "kungfu.buildchain.release-tail.effect/v1",
448
+ "kind": "signed-channel-commit",
449
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
450
+ "operationId": "sha256:51d2486a54e400057f272b5d3968c9f10becf0a7a4d47e40e18967b510fb14aa",
451
+ "capabilityId": "signed-channel.commit",
452
+ "executor": "provider-adapter",
453
+ "adapter": "signed-static-channel",
454
+ "subjectRoot": "sha256:7777777777777777777777777777777777777777777777777777777777777777",
455
+ "targetRoot": "sha256:8888888888888888888888888888888888888888888888888888888888888888",
456
+ "attemptKey": "signed-channel.commit/1",
457
+ "subject": {
458
+ "repository": "kungfu-systems/kungfu",
459
+ "sourceSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
460
+ "version": "4.0.0-alpha.1",
461
+ "tag": "v4.0.0-alpha.1",
462
+ "channel": "alpha"
463
+ },
464
+ "artifactRoles": [
465
+ {
466
+ "role": "signed-channel-index",
467
+ "root": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
468
+ },
469
+ {
470
+ "role": "installer-publication-bundle",
471
+ "root": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
472
+ }
473
+ ],
474
+ "destination": {
475
+ "kind": "well-known-signed-channel",
476
+ "locator": "https://kungfu.tech/.well-known/kungfu/alpha.json"
477
+ },
478
+ "channelPolicy": {
479
+ "channel": "alpha",
480
+ "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
481
+ "authorityMove": "signed-cas"
482
+ },
483
+ "activationPolicy": {
484
+ "mode": "none",
485
+ "environment": "none"
486
+ },
487
+ "readbackPredicates": [
488
+ {
489
+ "id": "signed-channel-root",
490
+ "kind": "public-signed-document",
491
+ "expected": "signature, payload root, source SHA, tag, and previous authority match"
492
+ }
493
+ ],
494
+ "idempotency": {
495
+ "scope": "subject-target",
496
+ "duplicate": "return-observed-receipt"
497
+ },
498
+ "retry": {
499
+ "class": "readback",
500
+ "localAttempts": 2,
501
+ "exhausted": "repair-required"
502
+ },
503
+ "evidenceRequirements": [
504
+ "kungfu-buildchain-publication-commit-evidence/v1"
505
+ ],
506
+ "effectRoot": "sha256:1ae1fb7c4126f0a98409a0647d168c517098b7916e110aba9d3ec0cc902ed945"
507
+ },
508
+ "status": "pending",
509
+ "effectAttempts": 0,
510
+ "readbackAttempts": 0,
511
+ "observationRoots": [],
512
+ "receipt": null
513
+ },
514
+ {
515
+ "operationId": "sha256:eb8be7d8e617126a3b02b89e8ee35b6801e382bab8edb20906084e5338231cfe",
516
+ "capabilityId": "release.activate",
517
+ "effect": {
518
+ "schema": "kungfu.buildchain.release-tail.effect/v1",
519
+ "kind": "release-activation",
520
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
521
+ "operationId": "sha256:eb8be7d8e617126a3b02b89e8ee35b6801e382bab8edb20906084e5338231cfe",
522
+ "capabilityId": "release.activate",
523
+ "executor": "provider-adapter",
524
+ "adapter": "site-release-activation",
525
+ "subjectRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
526
+ "targetRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
527
+ "attemptKey": "release.activate/1",
528
+ "subject": {
529
+ "repository": "kungfu-systems/kungfu",
530
+ "sourceSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
531
+ "version": "4.0.0-alpha.1",
532
+ "tag": "v4.0.0-alpha.1",
533
+ "channel": "alpha"
534
+ },
535
+ "artifactRoles": [
536
+ {
537
+ "role": "activation-receipt-set",
538
+ "root": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
539
+ }
540
+ ],
541
+ "destination": {
542
+ "kind": "production-site",
543
+ "locator": "https://kungfu.tech/.well-known/kungfu-release-status.json"
544
+ },
545
+ "channelPolicy": {
546
+ "channel": "alpha",
547
+ "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
548
+ "authorityMove": "verified-ref"
549
+ },
550
+ "activationPolicy": {
551
+ "mode": "receipt-set",
552
+ "environment": "production"
553
+ },
554
+ "readbackPredicates": [
555
+ {
556
+ "id": "release-status-current",
557
+ "kind": "public-json",
558
+ "expected": "source, site source, version, tag, channel, and Passport roots match"
559
+ },
560
+ {
561
+ "id": "installable-product-qualified",
562
+ "kind": "public-product-qualification",
563
+ "expected": "a public qualification asset matches an admitted artifact root"
564
+ }
565
+ ],
566
+ "idempotency": {
567
+ "scope": "operation",
568
+ "duplicate": "readback-before-retry"
569
+ },
570
+ "retry": {
571
+ "class": "provider-transient",
572
+ "localAttempts": 2,
573
+ "exhausted": "blocked"
574
+ },
575
+ "evidenceRequirements": [
576
+ "kungfu-buildchain-release-activation-receipt-set/v1",
577
+ "kungfu.release-public-readback/v1",
578
+ "kungfu.cli-installed-product-qualification/v1"
579
+ ],
580
+ "effectRoot": "sha256:9118ffb213038cc15af8051617fbd50d15e0658055bbc2515d9598dcbd3bb05a"
581
+ },
582
+ "status": "pending",
583
+ "effectAttempts": 0,
584
+ "readbackAttempts": 0,
585
+ "observationRoots": [],
586
+ "receipt": null
587
+ },
588
+ {
589
+ "operationId": "sha256:d62baaf2eb384bc7fcc50718d5d57db14579f595e463838ce145c208c306bab4",
590
+ "capabilityId": "released-evidence.synthesize",
591
+ "effect": {
592
+ "schema": "kungfu.buildchain.release-tail.effect/v1",
593
+ "kind": "released-evidence-projection",
594
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
595
+ "operationId": "sha256:d62baaf2eb384bc7fcc50718d5d57db14579f595e463838ce145c208c306bab4",
596
+ "capabilityId": "released-evidence.synthesize",
597
+ "executor": "buildchain-core",
598
+ "adapter": "activation-receipt-projector",
599
+ "subjectRoot": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
600
+ "targetRoot": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
601
+ "attemptKey": "released-evidence.synthesize/1",
602
+ "subject": {
603
+ "repository": "kungfu-systems/kungfu",
604
+ "sourceSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
605
+ "version": "4.0.0-alpha.1",
606
+ "tag": "v4.0.0-alpha.1",
607
+ "channel": "alpha"
608
+ },
609
+ "artifactRoles": [
610
+ {
611
+ "role": "activation-receipt-set",
612
+ "root": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
613
+ }
614
+ ],
615
+ "destination": {
616
+ "kind": "release-passport-attachment",
617
+ "locator": ".buildchain/release-evidence/ungfu-public-use.json"
618
+ },
619
+ "channelPolicy": {
620
+ "channel": "alpha",
621
+ "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
622
+ "authorityMove": "none"
623
+ },
624
+ "activationPolicy": {
625
+ "mode": "receipt-only",
626
+ "environment": "production"
627
+ },
628
+ "readbackPredicates": [
629
+ {
630
+ "id": "five-canonical-receipts",
631
+ "kind": "rooted-receipt-set",
632
+ "expected": "artifact, Passport, site, public readback, and product qualification receipts share one binding root"
633
+ }
634
+ ],
635
+ "idempotency": {
636
+ "scope": "operation",
637
+ "duplicate": "return-observed-receipt"
638
+ },
639
+ "retry": {
640
+ "class": "never",
641
+ "localAttempts": 0,
642
+ "exhausted": "terminal-failure"
643
+ },
644
+ "evidenceRequirements": [
645
+ "kungfu-buildchain-release-activation-receipt-set/v1",
646
+ "kungfu-ungfu-release-evidence-index"
647
+ ],
648
+ "effectRoot": "sha256:c08a2d6b075cf79f9f9f0b59e81025d84d2da662b401e0d576ab5f6e3198633d"
649
+ },
650
+ "status": "pending",
651
+ "effectAttempts": 0,
652
+ "readbackAttempts": 0,
653
+ "observationRoots": [],
654
+ "receipt": null
655
+ }
656
+ ],
657
+ "observations": [],
658
+ "receipts": [],
659
+ "failure": null,
660
+ "stateRoot": "sha256:cfd58119cb9b16cac05a9dbba5dfc5b4b9a5b628b0a2cd0a3b21a447182ef3aa"
661
+ },
662
+ "files": [
663
+ {
664
+ "role": "installable-product",
665
+ "path": "artifacts/product.bin",
666
+ "size": 29,
667
+ "root": "sha256:a945aa6ee73801aac40afb53420f364dd9f1a5eb2f1b7fe8890790d249ba123f"
668
+ },
669
+ {
670
+ "role": "buildchain-config",
671
+ "path": "config/buildchain.toml",
672
+ "size": 124,
673
+ "root": "sha256:8690b31fc5e57dca6bc2ac6d7e5505a330d797e9ac5be7d5d85f621011e232b7"
674
+ },
675
+ {
676
+ "role": "release-activation-document",
677
+ "path": "documents/release-activation.json",
678
+ "size": 64,
679
+ "root": "sha256:8a0b3c429fb7aed8be03d667e470d94a9b4bd6a1b0e3677b8a6d2ca36962bf67"
680
+ },
681
+ {
682
+ "role": "signed-channel-document",
683
+ "path": "documents/signed-channel.json",
684
+ "size": 57,
685
+ "root": "sha256:415b93e793ecdf9868edbc7487e1444c1e874c1746f9bd52a89a91fe2a909079"
686
+ },
687
+ {
688
+ "role": "qualification-evidence",
689
+ "path": "evidence/qualification.json",
690
+ "size": 55,
691
+ "root": "sha256:40b158e11aae82d11252b479140f5faede5c095cd6fbf4d92caae4aa546e22cc"
692
+ },
693
+ {
694
+ "role": "candidate-manifest",
695
+ "path": "manifests/candidate.json",
696
+ "size": 177,
697
+ "root": "sha256:618af174435c6e7b3d3e18558bee516f6e765eb2c45451ec4a634bcc41eca485"
698
+ },
699
+ {
700
+ "role": "release-passport",
701
+ "path": "manifests/release-passport.json",
702
+ "size": 69,
703
+ "root": "sha256:945d201c681c07b300b7b676954a14df4e669924bbcf450a0c9e1844fd6b3eb6"
704
+ }
705
+ ],
706
+ "capsuleRoot": "sha256:29a870ce850c7d6bde848fd77d7f382acf1f743d627c6265a913be51a8c05edf"
707
+ }