@kungfu-tech/buildchain 4.0.1-alpha.41 → 4.0.1-alpha.42

package/dist/site/public-surface-audit.json

@@ -4,9 +4,9 @@
   "status": "passed",
   "summary": {
     "cliCommandCount": 117,
-    "workflowCount": 76,
-    "actionCount": 7,
-    "sitePageCount": 82,
+    "workflowCount": 77,
+    "actionCount": 8,
+    "sitePageCount": 84,
     "docCommandRefCount": 1049,
     "failureCount": 0
   },
@@ -1029,6 +1029,7 @@
           "promotion-shell-ref",
           "promotion-shell-sha",
           "promotion-target-ref",
+          "provider-failure-after-capability",
           "publication-admission-json",
           "publication-authority-workflow-path",
           "publication-auto-admission",
@@ -1108,7 +1109,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 118,
+        "inputCount": 119,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2589,6 +2590,7 @@
           "github-release-payload-patterns",
           "github-release-title",
           "package-manager",
+          "provider-failure-after-capability",
           "publication-admission-json",
           "publication-auto-admission",
           "publication-auto-no-gate",
@@ -2667,7 +2669,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 103,
+        "inputCount": 104,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2941,6 +2943,17 @@
         "outputs": [],
         "outputCount": 0
       },
+      {
+        "id": "v4-declarative-release-tail-dogfood",
+        "path": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+        "reusable": false,
+        "inputs": [],
+        "inputCount": 0,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
       {
         "id": "v4-public-consumer-dogfood",
         "path": ".github/workflows/v4-public-consumer-dogfood.yml",
@@ -3252,6 +3265,21 @@
         ],
         "inputCount": 22
       },
+      {
+        "id": "v4-release-candidate-promote",
+        "path": "actions/v4-release-candidate-promote/action.yml",
+        "inputs": [
+          "artifact-paths",
+          "candidate-passport-path",
+          "failure-after-capability",
+          "publication-qualification-path",
+          "repository",
+          "stage-capsules-path",
+          "state-path",
+          "token"
+        ],
+        "inputCount": 8
+      },
       {
         "id": "validate-config",
         "path": "actions/validate-config/action.yml",
@@ -3288,6 +3316,10 @@
         "id": "action:run-lifecycle",
         "category": "action"
       },
+      {
+        "id": "action:v4-release-candidate-promote",
+        "category": "action"
+      },
       {
         "id": "action:validate-config",
         "category": "action"
@@ -3552,6 +3584,10 @@
         "id": "manual:v4-compatibility-facts",
         "category": "manual"
       },
+      {
+        "id": "manual:v4-declarative-release-tail-migration",
+        "category": "manual"
+      },
       {
         "id": "manual:v4-delivery-warrant-read-candidate",
         "category": "manual"
@@ -8846,8 +8882,8 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "ea47a31ce7ef3577f23e22055ab7be7715c3af494bcef63f76b426f2883086aa",
-    "workflowRegistryDigest": "76b22aa244aaa08948ee9f8372cf8ef9fe2b7d8387a0808042cca3041894a490",
-    "pageRegistryDigest": "1c6ec0e488e5c2e36df00ab65984c067240dc24b84f57a0e1cd9e8681e52c076"
+    "workflowRegistryDigest": "2bc93e783ac08024f0db69f0c702906cf29542fe16609be22f73e905ba7e9560",
+    "pageRegistryDigest": "5b2382c05cbd6438509dfea4547a933d205f310de3a3354caab88528da8b6c33"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-authority-registry.json

@@ -731,6 +731,24 @@
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "artifact.publish",
+        "release.activate",
+        "released-evidence.synthesize",
+        "signed-channel.commit"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
     }
   ],
   "workflowFacts": [
@@ -1207,6 +1225,15 @@
       "signals": [],
       "classified": false
     },
+    {
+      "path": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "npm-publish"
+      ],
+      "classified": true
+    },
     {
       "path": ".github/workflows/v4-public-consumer-dogfood.yml",
       "signals": [],
@@ -1233,5 +1260,5 @@
       "classified": false
     }
   ],
-  "registryDigest": "9c930540ed2366db36802ce03cac597657e45ff402c14ef13099c788ed4e2501"
+  "registryDigest": "4f60d125496eb73e47dc21ceafa340e5cd7c5fd840eabfa17044dbacedd97f5a"
 }

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-08-26T11:31:40.226Z",
-  "publishedAt": "2026-08-26T11:31:40.226Z",
+  "generatedAt": "2026-08-26T18:28:16.451Z",
+  "publishedAt": "2026-08-26T18:28:16.451Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "49b85f77b01788ea48f78b39dd59f9f9b208f144",
+  "sourceRevision": "397157d56c21a06578d1d91cee89fdf1e683b821",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.41",
+    "version": "4.0.1-alpha.42",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/release-provenance.json

@@ -45,6 +45,7 @@
       "./v4-tail-reseal": "./packages/core/v4-tail-reseal.js",
       "./v4-tail-reseal-receipt": "./packages/core/v4-tail-reseal-receipt.js",
       "./v4-publication-rehearsal": "./packages/core/v4-publication-rehearsal.js",
+      "./v4-publication-qualification": "./packages/core/v4-publication-qualification.js",
       "./adopter-delivery-gate": "./packages/core/adopter-delivery-gate.js",
       "./kfd-adopter-category-driver": "./packages/core/kfd-adopter-category-driver.js",
       "./buildchain-delivery-infrastructure": "./packages/core/buildchain-delivery-infrastructure.js",
@@ -111,6 +112,7 @@
       "./site/schemas/v4-publication-rehearsal-capsule-v1.schema.json": "./dist/site/schemas/v4-publication-rehearsal-capsule-v1.schema.json",
       "./site/schemas/v4-adopter-delivery-v1.schema.json": "./dist/site/schemas/v4-adopter-delivery-v1.schema.json",
       "./site/schemas/release-tail-capabilities-v1.schema.json": "./dist/site/schemas/release-tail-capabilities-v1.schema.json",
+      "./site/schemas/v4-publication-qualification-v1.schema.json": "./dist/site/schemas/v4-publication-qualification-v1.schema.json",
       "./site/buildchain-contract.json": "./dist/site/buildchain-contract.json",
       "./site/product-mechanism.json": "./dist/site/product-mechanism.json",
       "./site/release-provenance.json": "./dist/site/release-provenance.json",

package/dist/site/schemas/v4-publication-qualification-v1.schema.json

@@ -0,0 +1,51 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://kungfu.link/schemas/buildchain/v4-publication-qualification-v1.schema.json",
+  "title": "Buildchain v4 Publication Qualification Receipt",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "repository",
+    "candidateRoot",
+    "sourceSha",
+    "sourceRoot",
+    "policyDigest",
+    "artifacts",
+    "issuedAt",
+    "expiresAt",
+    "artifactRoot",
+    "receiptRoot"
+  ],
+  "properties": {
+    "schema": { "const": "kungfu.buildchain.v4-publication-qualification/v1" },
+    "repository": { "type": "string", "pattern": "^[^/\\s]+/[^/\\s]+$" },
+    "candidateRoot": { "$ref": "#/$defs/root" },
+    "sourceSha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+    "sourceRoot": { "$ref": "#/$defs/root" },
+    "policyDigest": { "$ref": "#/$defs/root" },
+    "artifacts": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/artifact" }
+    },
+    "issuedAt": { "type": "string", "format": "date-time" },
+    "expiresAt": { "type": "string", "format": "date-time" },
+    "artifactRoot": { "$ref": "#/$defs/root" },
+    "receiptRoot": { "$ref": "#/$defs/root" }
+  },
+  "$defs": {
+    "root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "artifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["role", "platform", "artifactRoot", "manifestRoot"],
+      "properties": {
+        "role": { "type": "string", "minLength": 1 },
+        "platform": { "type": "string", "minLength": 1 },
+        "artifactRoot": { "$ref": "#/$defs/root" },
+        "manifestRoot": { "$ref": "#/$defs/root" }
+      }
+    }
+  }
+}

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-08-26T11:31:40.226Z",
-  "publishedAt": "2026-08-26T11:31:40.226Z",
+  "generatedAt": "2026-08-26T18:28:16.451Z",
+  "publishedAt": "2026-08-26T18:28:16.451Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "49b85f77b01788ea48f78b39dd59f9f9b208f144",
+  "sourceRevision": "397157d56c21a06578d1d91cee89fdf1e683b821",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.41",
+    "version": "4.0.1-alpha.42",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -53,7 +53,7 @@
       "path": "docs/MAP.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:a04d321dbec562807cb29b748039839d097a97d2c9d2f0e76d6d22f2845055ba"
+      "digest": "sha256:cbbc69f9f88b6f7fe8c065de495aa15c30bae46208a81e757b254d43bc6d8ebe"
     },
     {
       "id": "getting-started",
@@ -253,7 +253,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:e8a597dae50b7907221d6ae8ed21eccee94001c3463e8671b49ec010f12d2b68"
+      "digest": "sha256:750df1c7346b119f1654ef151e1814401d0f768b65a27051df12d33fa831981d"
     },
     {
       "id": "build-facts",

package/dist/site/workflow-registry.json

@@ -503,6 +503,7 @@
         "promotion-shell-ref",
         "promotion-shell-sha",
         "promotion-target-ref",
+        "provider-failure-after-capability",
         "publication-admission-json",
         "publication-authority-workflow-path",
         "publication-auto-admission",
@@ -582,7 +583,7 @@
         "target-sha",
         "trusted-publishing"
       ],
-      "inputCount": 118,
+      "inputCount": 119,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2027,7 +2028,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.41",
+      "introducedVersion": "4.0.1-alpha.42",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2048,7 +2049,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.41",
+      "introducedVersion": "4.0.1-alpha.42",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2069,7 +2070,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.41",
+      "introducedVersion": "4.0.1-alpha.42",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2119,7 +2120,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.41",
+      "introducedVersion": "4.0.1-alpha.42",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2583,6 +2584,7 @@
         "github-release-payload-patterns",
         "github-release-title",
         "package-manager",
+        "provider-failure-after-capability",
         "publication-admission-json",
         "publication-auto-admission",
         "publication-auto-no-gate",
@@ -2661,7 +2663,7 @@
         "target-sha",
         "trusted-publishing"
       ],
-      "inputCount": 103,
+      "inputCount": 104,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -3055,6 +3057,27 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
     },
+    {
+      "id": "v4-declarative-release-tail-dogfood",
+      "path": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "reusable": false,
+      "inputs": [],
+      "inputCount": 0,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [],
+      "outputCount": 0,
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "pre-3.0.2-alpha.4",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
+    },
     {
       "id": "v4-public-consumer-dogfood",
       "path": ".github/workflows/v4-public-consumer-dogfood.yml",
@@ -3471,6 +3494,30 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
     },
+    {
+      "id": "v4-release-candidate-promote",
+      "path": "actions/v4-release-candidate-promote/action.yml",
+      "inputs": [
+        "artifact-paths",
+        "candidate-passport-path",
+        "failure-after-capability",
+        "publication-qualification-path",
+        "repository",
+        "stage-capsules-path",
+        "state-path",
+        "token"
+      ],
+      "inputCount": 8,
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "pre-3.0.2-alpha.4",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
+    },
     {
       "id": "validate-config",
       "path": "actions/validate-config/action.yml",

package/docs/MAP.md

@@ -171,7 +171,7 @@ replace them.
 | How do I deploy a site/app preview, staging, or production surface? | [`web-surface-deployments.md`](web-surface-deployments.md) | use | stable |
 | How do I publish observed infrastructure contracts for downstream consumers? | [`infra-contract.md`](infra-contract.md) | use | preview |
 | How do I operate a repeatable, disabled-by-default, budget-fail-closed AWS Windows JIT campaign? | [`aws-us-elastic-runner-burst-plane.md`](aws-us-elastic-runner-burst-plane.md#phase-2-operator-workflow) | use/verify | preview |
-| How do I use the active actions directly? | [`../actions/validate-config/README.md`](../actions/validate-config/README.md), [`../actions/run-lifecycle/README.md`](../actions/run-lifecycle/README.md), [`../actions/promote-buildchain-ref/README.md`](../actions/promote-buildchain-ref/README.md), [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md), [`../actions/github-artifact-attestation/README.md`](../actions/github-artifact-attestation/README.md), [`../actions/macos-credential-island/README.md`](../actions/macos-credential-island/README.md), [`../actions/release-tail/README.md`](../actions/release-tail/README.md); `dist/site/workflow-registry.json#actions` is authoritative for the seven-entry inventory. | use | stable |
+| How do I use the active actions directly? | [`../actions/validate-config/README.md`](../actions/validate-config/README.md), [`../actions/run-lifecycle/README.md`](../actions/run-lifecycle/README.md), [`../actions/promote-buildchain-ref/README.md`](../actions/promote-buildchain-ref/README.md), [`../actions/v4-release-candidate-promote/README.md`](../actions/v4-release-candidate-promote/README.md), [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md), [`../actions/github-artifact-attestation/README.md`](../actions/github-artifact-attestation/README.md), [`../actions/macos-credential-island/README.md`](../actions/macos-credential-island/README.md), [`../actions/release-tail/README.md`](../actions/release-tail/README.md); `dist/site/workflow-registry.json#actions` is authoritative for the eight-entry inventory. | use | stable |
 | How can a consumer workflow report a Buildchain-owned failure back to Buildchain? | [`consumer-issue-reporting.md`](consumer-issue-reporting.md) + [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md) | use | stable |
 | What do the fixture repositories demonstrate? | [`../fixtures/libnode-shaped/README.md`](../fixtures/libnode-shaped/README.md), [`../fixtures/publish-transaction-shaped/README.md`](../fixtures/publish-transaction-shaped/README.md), [`../fixtures/web-surface-shaped/README.md`](../fixtures/web-surface-shaped/README.md), [`../fixtures/publication-artifact-shaped/README.md`](../fixtures/publication-artifact-shaped/README.md) | verify | stable |
 | What license and contribution terms apply? | [`../LICENSE`](../LICENSE) + [`../LICENSE-POLICY.md`](../LICENSE-POLICY.md) | use | stable |