@kungfu-tech/buildchain 4.0.1-alpha.26 → 4.0.1-alpha.28

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.26",
+    "version": "4.0.1-alpha.28",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v4",
@@ -5308,5 +5308,5 @@
   "compatibilityFactCutRoot": "sha256:f61b975d4a96c921cc4bd37fb3ed9a0596b47004fe34dc7219979d697e3707f9",
   "compatibilityProofRegistryRoot": "sha256:b7194b811e4d3af2df4390bc4d1731e16a86215bd64ee18cb630dd5492f4fb63",
   "compatibilityDigest": "sha256:5de1c69386510b74b17eb70141b8bdd07063d62c504f91db5e84b67c6d4b64a2",
-  "contractDigest": "sha256:ecf05ec927ee957d85b860d199a04843714a4928da62a912b73e3e30d67b47a6"
+  "contractDigest": "sha256:62e5a481e28ba6397b3a08ea610eea9a5777a162cade57b491b4273ab96ef561"
 }

package/dist/site/buildchain-site.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-bundle",
-  "generatedAt": "2026-08-23T11:07:14.638Z",
-  "publishedAt": "2026-08-23T11:07:14.638Z",
+  "generatedAt": "2026-08-23T13:40:22.242Z",
+  "publishedAt": "2026-08-23T13:40:22.242Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "029d464cac57f1c44d2a9bf4fd5ada9385813655",
+  "sourceRevision": "3c83a3212470ef967cda326752d11a2c608ad473",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.26",
+    "version": "4.0.1-alpha.28",
     "versionSource": "package.json#version"
   },
   "source": {

package/dist/site/kfd-claims.json

@@ -21,7 +21,7 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "1ae96af472762442fa4bab02abec983a27d1bba47def64270a10ae3b2963e823",
+    "sha256": "755a10787512d04ca0c065414c3c9c3bbb0f33dc40a3b12debbcfd1b191fa35b",
     "summary": {
       "cliCommandCount": 117,
       "workflowCount": 76,
@@ -246,7 +246,7 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "1ae96af472762442fa4bab02abec983a27d1bba47def64270a10ae3b2963e823",
+      "sha256": "755a10787512d04ca0c065414c3c9c3bbb0f33dc40a3b12debbcfd1b191fa35b",
       "summary": {
         "cliCommandCount": 117,
         "workflowCount": 76,

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.26",
+    "version": "4.0.1-alpha.28",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/public-surface-audit.json

@@ -8846,7 +8846,7 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "ea47a31ce7ef3577f23e22055ab7be7715c3af494bcef63f76b426f2883086aa",
-    "workflowRegistryDigest": "1df243c57f9a6f8f779ada8d66b4245f87c4d74a374d1af937797bc9cc0bdb3a",
+    "workflowRegistryDigest": "5d343bb985329c655bab27298c7a9f0be50c296b6a764337428a45a3a6442647",
     "pageRegistryDigest": "9d9d0590c8d3110fc5a95978852ee25337567f93980b2562cc1159f0d5219ade"
   },
   "comparison": {

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-08-23T11:07:14.638Z",
-  "publishedAt": "2026-08-23T11:07:14.638Z",
+  "generatedAt": "2026-08-23T13:40:22.242Z",
+  "publishedAt": "2026-08-23T13:40:22.242Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "029d464cac57f1c44d2a9bf4fd5ada9385813655",
+  "sourceRevision": "3c83a3212470ef967cda326752d11a2c608ad473",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.26",
+    "version": "4.0.1-alpha.28",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-08-23T11:07:14.638Z",
-  "publishedAt": "2026-08-23T11:07:14.638Z",
+  "generatedAt": "2026-08-23T13:40:22.242Z",
+  "publishedAt": "2026-08-23T13:40:22.242Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "029d464cac57f1c44d2a9bf4fd5ada9385813655",
+  "sourceRevision": "3c83a3212470ef967cda326752d11a2c608ad473",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.26",
+    "version": "4.0.1-alpha.28",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",

package/dist/site/workflow-registry.json

@@ -2027,7 +2027,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.26",
+      "introducedVersion": "4.0.1-alpha.28",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2048,7 +2048,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.26",
+      "introducedVersion": "4.0.1-alpha.28",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2069,7 +2069,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.26",
+      "introducedVersion": "4.0.1-alpha.28",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2119,7 +2119,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.26",
+      "introducedVersion": "4.0.1-alpha.28",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "4.0.1-alpha.26",
+  "version": "4.0.1-alpha.28",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",

package/packages/core/v4-floating-consumer-release-passport.js

@@ -78,14 +78,15 @@ export function resolveV4ConsumerPolicyCertificationIdentity({
   runtimeResume = undefined,
   sourceSha = "",
 } = {}) {
-  const certifiedSourceSha =
-    (release?.certification?.certification || release?.certification)?.caller
-      ?.sourceSha || "";
+  const certification =
+    release?.certification?.certification || release?.certification;
+  const certifiedSourceSha = certification?.caller?.sourceSha || "";
   const treeEquivalentSources = [
     release?.builtSourceSha || release?.built_source_sha,
     release?.promotionChannelSha || release?.promotion_channel_sha,
   ];
-  const buildRuntimeSha = runtimeResume?.lineage?.attempts?.build?.runtimeSha;
+  const buildSha = runtimeResume?.lineage?.attempts?.build?.runtimeSha;
+  const certifiedSha = certification?.invocation?.resolvedRuntimeSha || "";
   return {
     sourceSha:
       certifiedSourceSha === sourceSha ||
@@ -93,7 +94,7 @@ export function resolveV4ConsumerPolicyCertificationIdentity({
         treeEquivalentSources.includes(certifiedSourceSha))
         ? certifiedSourceSha
         : sourceSha,
-    runtimeSha: buildRuntimeSha || routing?.runtime?.resolvedSha || "",
+    runtimeSha: buildSha || certifiedSha || routing?.runtime?.resolvedSha || "",
   };
 }
 export function requireV4ConsumerPolicyCertification({

package/scripts/dev-pr-prequeue-guard.mjs

@@ -164,15 +164,6 @@ async function qualifyProjectCut({
 
   let reuseDecision = null;
   if (currentBaseSha !== previousBaseSha) {
-    const observedPullRequestBase = String(
-      observedPullRequest.base?.sha || "",
-    ).toLowerCase();
-    if (observedPullRequestBase !== currentBaseSha) {
-      mismatch("pre-enqueue-project-cut-base-stale", {
-        observedPullRequestBase,
-        currentBaseSha,
-      });
-    }
     const proof = readOptionalJson(options.sourceProofPath);
     if (!proof) mismatch("pre-enqueue-base-attribution-unknown");
     if (
@@ -342,15 +333,6 @@ export async function qualifyPreEnqueueReadback({
   ) {
     mismatch("head-sha-drift-after-project-cut");
   }
-  const casPullRequestBase = String(
-    casPullRequest.base?.sha || "",
-  ).toLowerCase();
-  if (casPullRequestBase && casPullRequestBase !== casBaseSha) {
-    mismatch("pre-enqueue-project-cut-base-stale", {
-      observedPullRequestBase: casPullRequestBase,
-      currentBaseSha: casBaseSha,
-    });
-  }
   if (casPullRequest.mergeable === false) {
     mismatch("pre-enqueue-merge-conflict-after-project-cut");
   }