@kungfu-tech/buildchain 4.0.1-alpha.4 → 4.0.1-alpha.6

package/architecture/v4-adopter-delivery-parity.json

@@ -3,14 +3,16 @@
   "contract": "kungfu-buildchain-v4-adopter-delivery-parity-plan",
   "sourceAuthority": {
     "branch": "dev/v3/v3.0",
-    "commit": "c3f58d76391c1c6ceddfc900a68e91c7ab82a575",
-    "vectorSuiteRoot": "sha256:cf329805d928a9883cbafbdfdf21ef66c6a0889ed8dfe14356b4e0d25d6738f9",
-    "kfdPackage": "@kungfu-tech/kfd@1.0.0-alpha.62"
+    "commit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
+    "vectorSuiteRoot": "sha256:c978707556406ffda4ef4192032332c01c2da1cebb6ad8c4f0edfc65d5cef0c7",
+    "kfdPackage": "@kungfu-tech/kfd@1.0.0-alpha.65"
   },
   "target": {
     "branch": "dev/v4/v4.0",
-    "baseline": "3079091f770ce9fdca950e106259e34e5171f763",
+    "initialBaseline": "e5611377efc03178f8687d99968cfdfa3ce2825b",
+    "baseline": "e0342713c7447960c13bd73377282b2e93f4853d",
     "mode": "effect-disabled",
+    "surface": "public-protocol-neutral-adopter-delivery",
     "productionWriterAuthority": false
   },
   "vectors": [
@@ -37,11 +39,36 @@
     {
       "id": "fault-driver-throw",
       "mode": "gate-core-parity"
+    },
+    {
+      "id": "positive-n-minus-one-bootstrap",
+      "mode": "public-bootstrap-lineage"
+    },
+    {
+      "id": "positive-published-archive",
+      "mode": "public-archive-authority"
+    },
+    {
+      "id": "negative-archive-identity",
+      "mode": "public-archive-authority"
+    },
+    {
+      "id": "negative-bootstrap-lineage",
+      "mode": "public-bootstrap-lineage"
+    },
+    {
+      "id": "negative-protocol-version",
+      "mode": "public-driver-selection"
+    },
+    {
+      "id": "tamper-readback",
+      "mode": "public-exact-readback"
     }
   ],
   "nonClaims": [
     "The Rust projection has no provider, credential, release, signing or production-writer authority.",
     "KFD semantics are evaluated only by exact published KFD bytes before the effect-disabled carrier projection.",
-    "Release Passport evidence substitution remains on the protected v3 boundary and is not reimplemented as a v4 writer."
+    "Release Passport evidence substitution remains on the protected v3 boundary and is not reimplemented as a v4 writer.",
+    "The public CLI, Node API, schema, configuration and reusable workflow retain provider, signing, publication and release authority as explicit non-claims."
   ]
 }

package/architecture/v4-capability-state-machine-manifest.json

@@ -83,6 +83,18 @@
     }
   },
   "capabilities": [
+    {
+      "id": "next-development-controller",
+      "owner": "Buildchain protected development version plane",
+      "sourceInventoryId": "next-development-controller",
+      "surfaces": [
+        "cli:next-development",
+        "export:./next-development-transition",
+        "export:./next-development-controller",
+        "export:./next-development-projection"
+      ],
+      "migrationPhase": "legacy-retired"
+    },
     {
       "id": "dev-delivery-warrant",
       "owner": "Buildchain Dev delivery control plane",
@@ -198,6 +210,67 @@
     }
   ],
   "stateMachines": [
+    {
+      "id": "next-development-controller",
+      "capabilityId": "next-development-controller",
+      "owner": "Buildchain protected development version plane",
+      "writer": {
+        "runtime": "typescript-v4",
+        "authoritative": true,
+        "secondWriterBudget": 0
+      },
+      "schemas": [
+        "kungfu-buildchain-next-development-transition/v1",
+        "kungfu-buildchain-next-development-controller/v1"
+      ],
+      "store": "atomic child store with compare-and-swap rooted checkpoints",
+      "states": [
+        "planned",
+        "waiting-anchor",
+        "materialized",
+        "pr-pending",
+        "merged",
+        "verified"
+      ],
+      "events": [
+        "schedule",
+        "bind-reviewed-anchor",
+        "materialize-current-dev",
+        "open-protected-version-pr",
+        "record-merge",
+        "verify-protected-dev-readback"
+      ],
+      "invariants": [
+        "completed Alpha remains terminal and immutable",
+        "one deterministic child exists per completed-Alpha root",
+        "verified requires exact protected Dev version and root readback"
+      ],
+      "effects": [
+        "write declared version source and derived material",
+        "request one protected Dev version pull request"
+      ],
+      "adapters": [
+        "atomic durable child store",
+        "version-state materialization adapter",
+        "protected Dev pull-request and readback adapter"
+      ],
+      "tests": [
+        "tests/next-development-transition.test.mjs",
+        "tests/next-development-controller.test.mjs",
+        "tests/next-development-self-dogfood.test.mjs",
+        "tests/dev-alpha-candidate-patrol.test.mjs"
+      ],
+      "recovery": [
+        "fresh runners resume the last rooted checkpoint and reuse idempotent materialization operations",
+        "moved protected Dev supersedes only stale preparation and readback mismatch retries observation"
+      ],
+      "migrationPhase": "legacy-retired",
+      "budgets": {
+        "undeclaredStates": 0,
+        "undeclaredEvents": 0,
+        "unboundedRetries": 0
+      }
+    },
     {
       "id": "dev-delivery-warrant",
       "capabilityId": "dev-delivery-warrant",

package/architecture/v4-compatibility-facts-parity.json

@@ -0,0 +1,77 @@
+{
+  "schema": "buildchain.v4.compatibility-facts-parity/v1",
+  "source": {
+    "branch": "dev/v3/v3.0",
+    "commit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
+    "factRegistry": "packages/core/buildchain-compatibility-facts.json"
+  },
+  "target": {
+    "branch": "dev/v4/v4.0",
+    "commit": "60e61d0a17bdf41262454a3499aae430248036fc",
+    "schema": "contracts/v4-compatibility-facts-v1.schema.json"
+  },
+  "rootProtocol": "kungfu.fact-root.canonical/v2",
+  "matrixRoot": "sha256:be099fcb4ecc5ec0bf24e86853246d12210b2f6d082e928ce90a40b00345f262",
+  "matrix": [
+    {
+      "invariant": "immutable-directional-relation",
+      "v3": "source-to-target Fact",
+      "v4": "source-to-target Fact",
+      "parity": "exact"
+    },
+    {
+      "invariant": "operation-scope",
+      "v3": "accept-contract-lock",
+      "v4": "accept-contract-lock",
+      "parity": "exact"
+    },
+    {
+      "invariant": "time-awareness",
+      "v3": "validFromCutRoot plus Cut ancestry",
+      "v4": "validFromCutRoot plus Cut ancestry",
+      "parity": "exact"
+    },
+    {
+      "invariant": "append-only-current-truth",
+      "v3": "supersede and revoke records",
+      "v4": "supersede and revoke records",
+      "parity": "exact"
+    },
+    {
+      "invariant": "explicit-path",
+      "v3": "direct default and explicit bounded composition",
+      "v4": "direct default and explicit bounded composition",
+      "parity": "exact"
+    },
+    {
+      "invariant": "negative-receipts",
+      "v3": "rooted accepted or rejected path receipt",
+      "v4": "byte-identical Rust and TypeScript receipt",
+      "parity": "safety-equivalent"
+    },
+    {
+      "invariant": "legacy-digest-projection",
+      "v3": "compatibleBreakingDigests derived from proofs and Facts",
+      "v4": "exact-target current Facts derive digest arrays",
+      "parity": "safety-equivalent"
+    },
+    {
+      "invariant": "legacy-proof-projection",
+      "v3": "v1 proof roots retained",
+      "v4": "v1 proof roots retained as non-authoritative lineage",
+      "parity": "exact"
+    },
+    {
+      "invariant": "release-passport",
+      "v3": "Fact lineage available to verification receipt",
+      "v4": "Fact, Cut, proof and path roots attach as non-release-authority evidence",
+      "parity": "safety-equivalent"
+    },
+    {
+      "invariant": "unknown-state",
+      "v3": "fail closed",
+      "v4": "missing ambiguous expired revoked wrong-direction wrong-Cut disconnected and corrupt fail closed",
+      "parity": "exact"
+    }
+  ]
+}

package/architecture/v4-next-development-parity.json

@@ -0,0 +1,192 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-next-development-parity",
+  "sourceAuthority": {
+    "branch": "dev/v3/v3.0",
+    "capturedCommit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
+    "transitionCommit": "d165c2f733859dd2e46a2d1fdb25b242e2fc2567",
+    "controllerCommit": "63f494d4b92c0bd01ffb454c6fce23d0692148fb",
+    "selfDogfoodCommit": "518bb4cb4706db1854e5a5b39bf7198f2aaa1d1d"
+  },
+  "target": {
+    "branch": "dev/v4/v4.0",
+    "implementationBaseline": "36ad1dc03a9d2785aca938a7a369e4b96707fa32",
+    "publicConsumerCaller": ".github/workflows/v4-public-consumer-dogfood.yml",
+    "publicConsumerReusable": "kungfu-systems/buildchain/.github/workflows/v4-stage-capsule-canary.yml@v4-alpha"
+  },
+  "earlierContinuityDelta": {
+    "assignment": "2026-08-11-buildchain-next-development-version-continuity",
+    "disposition": "no-current-reusable-implementation-evidence",
+    "requiredDelta": "implement and re-prove the exact v3 semantics against the live protected v4 head"
+  },
+  "allowedDispositions": [
+    "implemented",
+    "superseded-equivalent",
+    "missing-before-closeout"
+  ],
+  "invariants": [
+    {
+      "id": "ND-01",
+      "claim": "The exact v3 planner, controller, projection and recovery authorities are mapped to current v4 files rather than inferred from the earlier continuity family.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "architecture/decisions/0002-next-development-transition.md",
+        "packages/core/next-development-transition.js",
+        "packages/core/next-development-controller.js",
+        "packages/core/next-development-projection.js"
+      ],
+      "verificationEvidence": ["tests/v4-next-development-parity.test.mjs"]
+    },
+    {
+      "id": "ND-02",
+      "claim": "Semver automatic planning deterministically advances only the Alpha sequence on the same patch and rejects operator-selected targets.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-transition.js",
+        "contracts/next-development-transition-v1.schema.json"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "contracts/fixtures/next-development-transition-v1/semver-auto-planned.json"
+      ]
+    },
+    {
+      "id": "ND-03",
+      "claim": "Anchored manual planning remains waiting until reviewed target and exact read-only manifest digest authority are both supplied.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-transition.js",
+        "scripts/next-development-transition.mjs"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "tests/next-development-controller.test.mjs",
+        "contracts/fixtures/next-development-transition-v1/anchored-manual-waiting.json"
+      ]
+    },
+    {
+      "id": "ND-04",
+      "claim": "Atomic create-if-absent and compare-and-swap checkpoints create one child per completed Alpha and recover idempotent materialization after runner loss.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-controller.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-controller.test.mjs",
+        "tests/next-development-self-dogfood.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-05",
+      "claim": "Protected Dev movement supersedes only stale preparation, retries from current readback and preserves completed Alpha identity without rebuilding it.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-controller.js",
+        "actions/promote-buildchain-ref/internal/promote-alpha-channel.js",
+        "actions/promote-buildchain-ref/lib.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-controller.test.mjs",
+        "tests/promote-buildchain-ref-governance.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-06",
+      "claim": "A protected version pull request and exact source, derived, ancestry and target-version readback are mandatory before verified state.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-controller.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-controller.test.mjs",
+        "tests/next-development-self-dogfood.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-07",
+      "claim": "Completed candidates and Alpha publication remain immutable and terminal; next-development exposes no tag, release, package, candidate or ref-update effect.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-transition.js",
+        "packages/core/next-development-controller.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "tests/next-development-self-dogfood.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-08",
+      "claim": "Candidate Patrol ignores pure version preparation and requires current exact blob reservation readback before later product candidate settlement.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/next-development-candidate-reservation.js",
+        "packages/core/channel-promotion-baseline.js",
+        "scripts/dev-alpha-candidate-patrol.mjs"
+      ],
+      "verificationEvidence": ["tests/dev-alpha-candidate-patrol.test.mjs"]
+    },
+    {
+      "id": "ND-09",
+      "claim": "The public CLI, Node exports, schemas, init and Paper templates, generated Agent guidance and manual all project one contract source.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "bin/buildchain.mjs",
+        "bin/internal/command-registry.mjs",
+        "scripts/next-development-transition.mjs",
+        "package.json",
+        "contracts/next-development-request-v1.schema.json",
+        "contracts/next-development-transition-v1.schema.json",
+        "scripts/init-repo.mjs",
+        "packages/core/paper.js",
+        "packages/core/paper-agent-entry.js",
+        "packages/core/next-development-projection.js"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-transition.test.mjs",
+        "tests/v4-next-development-parity.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-10",
+      "claim": "V4 recovery proof runs as pure tests through the standard lifecycle.verify reached by the exact thin public consumer caller, while existing hosted dual-channel evidence keeps public v4-alpha and v4 routes.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        ".github/workflows/v4-public-consumer-dogfood.yml",
+        ".github/workflows/buildchain-alpha-self-dogfood.yml",
+        ".buildchain/buildchain.toml",
+        "scripts/next-development-self-dogfood.mjs",
+        "scripts/next-development-self-dogfood-harness.mjs"
+      ],
+      "verificationEvidence": [
+        "tests/next-development-self-dogfood.test.mjs",
+        "tests/v4-public-dogfood-contract.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-11",
+      "claim": "Architecture inventory, capability metadata, generated references and site facts expose the current v4 next-development contract without stale generated output.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "architecture/v3-core-mechanism-inventory.json",
+        "architecture/v4-capability-state-machine-manifest.json",
+        "scripts/check-inventory.mjs",
+        "scripts/site-capability-metadata.mjs",
+        "scripts/generate-site-bundle.mjs"
+      ],
+      "verificationEvidence": [
+        "tests/core-mechanism-inventory.test.mjs",
+        "tests/v4-architecture.test.mjs",
+        "tests/v4-next-development-parity.test.mjs"
+      ]
+    },
+    {
+      "id": "ND-12",
+      "claim": "Independent review, protected merge into dev/v4/v4.0 and exact post-merge containment and readback are required external closeout evidence and cannot be inferred from local green tests.",
+      "disposition": "missing-before-closeout",
+      "implementationEvidence": [],
+      "verificationEvidence": []
+    }
+  ],
+  "matrixRoot": "sha256:0f0d69dd338cad33dc61870675cbedb8664e019e403f73a1ddcf8471d69df405"
+}

package/architecture/v4-publication-rehearsal-parity.json

@@ -0,0 +1,84 @@
+{
+  "schema": "buildchain.v4.publication-rehearsal-parity/v1",
+  "source": {
+    "branch": "dev/v3/v3.0",
+    "commit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
+    "runtime": "packages/core/publication-rehearsal-runtime.js"
+  },
+  "target": {
+    "branch": "dev/v4/v4.0",
+    "commit": "bc12cd0ff18a7e1d918777ea093c169349952d34",
+    "capsuleContract": "packages/core/v4-publication-rehearsal-capsule.js",
+    "runtime": "packages/core/v4-publication-rehearsal.js",
+    "providerBindings": "packages/core/v4-publication-rehearsal-provider-bindings.js"
+  },
+  "sharedProductionCore": {
+    "planner": "compileReleaseTailDeclaration",
+    "initializer": "createReleaseTailTransaction",
+    "executor": "executeReleaseTailTransaction",
+    "version": "buildchain.release-tail/v1"
+  },
+  "stageCapsuleBoundary": {
+    "contract": "buildchain-v4-stage-capsule/v1",
+    "purpose": "pure platform-stage build checkpoint reuse",
+    "publicationEffects": false,
+    "publicationAuthority": false
+  },
+  "matrix": [
+    {
+      "invariant": "capsule-purpose",
+      "v3": "publication rehearsal",
+      "v4": "publication rehearsal distinct from Stage Capsule",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "content-addressed-inputs",
+      "v3": "capsule, declaration, transaction, files, data-only provider bindings, policy and observations",
+      "v4": "capsule, source, candidate, manifest, config, provider bindings, provider policy, expected observations and core version",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "provider-request-binding",
+      "v3": "provider binding payload is capsule-rooted and every input path is in files",
+      "v4": "providerBindingsRoot covers canonical bindings and every request byte is inventory-rooted before adapters",
+      "parity": "exact"
+    },
+    {
+      "invariant": "shared-release-tail-core",
+      "v3": "shared planner and executor",
+      "v4": "same production planner, initializer and executor",
+      "parity": "exact"
+    },
+    {
+      "invariant": "effect-default",
+      "v3": "simulate and replay local defaults",
+      "v4": "provider policy is rooted and effect-disabled by default",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "authorized-provider-rehearsal",
+      "v3": "provider observations are recorded without authority",
+      "v4": "exact capsule-bound rehearsal-only authority plus request and readback transcript",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "release-authority",
+      "v3": "externalPublicationClaimed false",
+      "v4": "productionAuthority false and releasePassport null",
+      "parity": "exact"
+    },
+    {
+      "invariant": "tamper-response",
+      "v3": "capsule and file mismatch fail closed",
+      "v4": "every named identity root and core version mismatch fails closed",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "portability",
+      "v3": "platform-independent local capsule root",
+      "v4": "byte-identical offline linux, macos and windows vector",
+      "parity": "exact"
+    }
+  ],
+  "matrixRoot": "sha256:521694ce2cc1d5b383eaa6b84f1b6926ef8ce8f33085e02507e611e9f9b6e784"
+}

package/architecture/v4-release-train-parity.json

@@ -26,6 +26,7 @@
     {
       "path": "tests/dev-alpha-candidate-patrol.test.mjs",
       "count": 37,
+      "targetAdditionalCount": 4,
       "result": "exact"
     },
     {

package/architecture/v4-tail-reseal-parity.json

@@ -0,0 +1,150 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-tail-reseal-parity",
+  "sourceAuthority": {
+    "branch": "dev/v3/v3.0",
+    "capturedCommit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
+    "implementation": "scripts/release-candidate-tail-reseal.mjs",
+    "workflow": ".github/workflows/.build.yml",
+    "tests": "tests/release-candidate-tail-reseal.test.mjs"
+  },
+  "target": {
+    "branch": "dev/v4/v4.0",
+    "publicReusableWorkflow": "kungfu-systems/buildchain/.github/workflows/v4-tail-reseal.yml@v4-alpha",
+    "requestSchema": "contracts/v4-tail-reseal-v1.schema.json",
+    "planner": "packages/core/v4-tail-reseal.js",
+    "admission": "packages/core/v4-tail-reseal-github.js",
+    "receipt": "packages/core/v4-tail-reseal-receipt.js",
+    "cli": "buildchain tail-reseal"
+  },
+  "authority": {
+    "productionAuthority": "v4",
+    "stageCapsuleEffectAuthority": "none",
+    "signingAuthority": "explicit-live-release-tail",
+    "credentialAuthority": "lease-bound-secret-island",
+    "runtimePersistence": "floating-only",
+    "v3BehaviorChange": false
+  },
+  "allowedDispositions": [
+    "implemented",
+    "superseded-equivalent",
+    "missing-before-closeout"
+  ],
+  "invariants": [
+    {
+      "id": "TR-01",
+      "claim": "The exact captured v3 retained-candidate script, workflow and tests are rooted as parity authority.",
+      "disposition": "implemented",
+      "implementationEvidence": ["architecture/v4-tail-reseal-parity.json"],
+      "verificationEvidence": ["tests/v4-tail-reseal-parity.test.mjs"]
+    },
+    {
+      "id": "TR-02",
+      "claim": "One exact failed run binds four byte-addressed platform payloads, manifests, archives and Stage Capsules.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "contracts/v4-tail-reseal-v1.schema.json",
+        "packages/core/v4-tail-reseal-github.js"
+      ],
+      "verificationEvidence": [
+        "contracts/fixtures/v4-tail-reseal-v1/valid.json",
+        "tests/v4-tail-reseal.test.mjs"
+      ]
+    },
+    {
+      "id": "TR-03",
+      "claim": "A fresh runner downloads retained archives and verifies every manifest and payload byte before any tail effect.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "scripts/v4-tail-reseal.mjs",
+        ".github/workflows/v4-tail-reseal.yml"
+      ],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-04",
+      "claim": "Install, build, verify, package and platform-matrix remain explicitly skipped under effect-free Stage Capsule reuse.",
+      "disposition": "implemented",
+      "implementationEvidence": ["packages/core/v4-tail-reseal.js"],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-05",
+      "claim": "Only macOS signing-finalization may change bytes; every other platform stays byte-identical and provider-effect-free.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/v4-tail-reseal-receipt.js",
+        "scripts/v4-tail-reseal.mjs"
+      ],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-06",
+      "claim": "The macOS effect is fenced by exact Warrant lineage, credential authority, release-tail transaction and idempotency key.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/v4-tail-reseal.js",
+        ".github/workflows/v4-tail-reseal.yml"
+      ],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-07",
+      "claim": "Source, platform, archive, manifest, signer, Warrant, credential, retention and prior-failure drift fails closed.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/v4-tail-reseal.js",
+        "packages/core/v4-tail-reseal-github.js"
+      ],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-08",
+      "claim": "Expired retention or credential leases invalidate reuse and require a normal candidate rebuild.",
+      "disposition": "implemented",
+      "implementationEvidence": ["packages/core/v4-tail-reseal.js"],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-09",
+      "claim": "Successful reseal emits the ordinary v4 Release Candidate Passport with its original floating-consumer policy receipt.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "packages/core/v4-tail-reseal-receipt.js",
+        ".github/workflows/v4-tail-reseal.yml"
+      ],
+      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+    },
+    {
+      "id": "TR-10",
+      "claim": "The reusable workflow resolves job.workflow_sha as runtime evidence and exposes no persisted SHA, variable indirection or private self-dogfood path.",
+      "disposition": "implemented",
+      "implementationEvidence": [".github/workflows/v4-tail-reseal.yml"],
+      "verificationEvidence": ["tests/v4-tail-reseal-parity.test.mjs"]
+    },
+    {
+      "id": "TR-11",
+      "claim": "Node API, CLI, schema, deterministic fixture, generated references and macOS bounded qualification project one contract.",
+      "disposition": "implemented",
+      "implementationEvidence": [
+        "package.json",
+        "bin/buildchain.mjs",
+        "scripts/v4-tail-reseal.mjs",
+        "docs/v4-tail-reseal.md"
+      ],
+      "verificationEvidence": [
+        "tests/command-registry.test.mjs",
+        "tests/v4-tail-reseal.test.mjs",
+        "tests/v4-tail-reseal-parity.test.mjs"
+      ]
+    },
+    {
+      "id": "TR-12",
+      "claim": "Independent review, protected merge and exact post-merge public readback remain external closeout evidence.",
+      "disposition": "missing-before-closeout",
+      "implementationEvidence": [],
+      "verificationEvidence": []
+    }
+  ],
+  "matrixRoot": "sha256:126ec51c12a9dedeb9b9e187202781e3895856af1927b399ba3902f3940750ad"
+}