@kungfu-tech/buildchain 4.0.1-alpha.5 → 4.0.1-alpha.55

package/architecture/v4-adopter-delivery-parity.json

@@ -3,14 +3,16 @@
   "contract": "kungfu-buildchain-v4-adopter-delivery-parity-plan",
   "sourceAuthority": {
     "branch": "dev/v3/v3.0",
-    "commit": "c3f58d76391c1c6ceddfc900a68e91c7ab82a575",
-    "vectorSuiteRoot": "sha256:cf329805d928a9883cbafbdfdf21ef66c6a0889ed8dfe14356b4e0d25d6738f9",
-    "kfdPackage": "@kungfu-tech/kfd@1.0.0-alpha.62"
+    "commit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
+    "vectorSuiteRoot": "sha256:c978707556406ffda4ef4192032332c01c2da1cebb6ad8c4f0edfc65d5cef0c7",
+    "kfdPackage": "@kungfu-tech/kfd@1.0.0-alpha.65"
   },
   "target": {
     "branch": "dev/v4/v4.0",
-    "baseline": "3079091f770ce9fdca950e106259e34e5171f763",
+    "initialBaseline": "e5611377efc03178f8687d99968cfdfa3ce2825b",
+    "baseline": "e0342713c7447960c13bd73377282b2e93f4853d",
     "mode": "effect-disabled",
+    "surface": "public-protocol-neutral-adopter-delivery",
     "productionWriterAuthority": false
   },
   "vectors": [
@@ -37,11 +39,36 @@
     {
       "id": "fault-driver-throw",
       "mode": "gate-core-parity"
+    },
+    {
+      "id": "positive-n-minus-one-bootstrap",
+      "mode": "public-bootstrap-lineage"
+    },
+    {
+      "id": "positive-published-archive",
+      "mode": "public-archive-authority"
+    },
+    {
+      "id": "negative-archive-identity",
+      "mode": "public-archive-authority"
+    },
+    {
+      "id": "negative-bootstrap-lineage",
+      "mode": "public-bootstrap-lineage"
+    },
+    {
+      "id": "negative-protocol-version",
+      "mode": "public-driver-selection"
+    },
+    {
+      "id": "tamper-readback",
+      "mode": "public-exact-readback"
     }
   ],
   "nonClaims": [
     "The Rust projection has no provider, credential, release, signing or production-writer authority.",
     "KFD semantics are evaluated only by exact published KFD bytes before the effect-disabled carrier projection.",
-    "Release Passport evidence substitution remains on the protected v3 boundary and is not reimplemented as a v4 writer."
+    "Release Passport evidence substitution remains on the protected v3 boundary and is not reimplemented as a v4 writer.",
+    "The public CLI, Node API, schema, configuration and reusable workflow retain provider, signing, publication and release authority as explicit non-claims."
   ]
 }

package/architecture/v4-cross-platform-adopter-qualification.json

@@ -0,0 +1,52 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-v4-cross-platform-adopter-qualification",
+  "inventoryAuthority": "architecture/v3-v4-live-capability-inventory.json",
+  "implementation": "packages/core/v4-cross-platform-adopter-qualification.js",
+  "runner": "scripts/v4-cross-platform-adopter-qualification.mjs",
+  "publicWorkflow": ".github/workflows/v4-adopter-delivery.yml",
+  "sourceBinding": {
+    "runtime": "job.workflow_sha",
+    "consumer": "exact checked-out consumer commit",
+    "sameRuntimeAcrossMatrix": true,
+    "sameConsumerAcrossMatrix": true,
+    "sameInventoryAcrossMatrix": true
+  },
+  "candidateDispatch": {
+    "externalRepositoryRequiresExactCommit": true,
+    "externalRepositoryRequiresPublicFloatingCaller": true,
+    "persistentSelectorsRemain": ["v4", "v4-alpha"],
+    "providerEffects": false
+  },
+  "platforms": ["linux-x64", "macos-arm64", "windows-x64"],
+  "requiredConsumers": ["buildchain", "agent-hub-demo"],
+  "protocolNeutralDriver": {
+    "id": "ledger-specification-driver",
+    "fixture": "fixtures/ledger-specification-driver",
+    "test": "tests/non-kfd-specification-driver-clean-room.test.mjs",
+    "platformCoverage": ["linux-x64", "macos-arm64", "windows-x64"],
+    "kfdDependencyAllowed": false
+  },
+  "capabilityMatrix": {
+    "rawRowsRequired": true,
+    "everyCategoryRequired": true,
+    "sourceOnlyApplicability": "exact-source-route",
+    "residualMaximum": 0,
+    "unknownMaximum": 0,
+    "unownedMaximum": 0
+  },
+  "executedScenarios": [
+    "public-run",
+    "tampered-readback-failure",
+    "public-run-retry",
+    "terminal-exact-verify",
+    "n-minus-one-bootstrap",
+    "protocol-neutral-clean-room"
+  ],
+  "authority": {
+    "productionWrites": false,
+    "providerEffects": false,
+    "releaseEffects": false,
+    "stablePublication": false
+  }
+}

package/architecture/v4-delivery-warrant-shadow-fixtures.json

@@ -66,7 +66,7 @@
           "now": "2026-08-07T00:02:00Z"
         }
       ],
-      "expectedLegacyProjectionRoot": "sha256:da58eec588414e16781ffad1b92d3733b207b43e2c7846f6b659c71b150d964d"
+      "expectedLegacyProjectionRoot": "sha256:d43159c2ea0d0ea97fb81eb9a2cf262411954d1ce81514c590587e858e95f275"
     },
     {
       "id": "lease-expiry-and-stale-fence",
@@ -134,7 +134,7 @@
           "now": "2026-08-07T01:02:03Z"
         }
       ],
-      "expectedLegacyProjectionRoot": "sha256:24cf52c9108393b268cb40943f540c0e9a000a782e59251e3a9b6d5a63c1eb06"
+      "expectedLegacyProjectionRoot": "sha256:7798efdf136e97afbc65f5e41c8be918a7d00da566716c861c7b1dedb2092f97"
     },
     {
       "id": "settlement-idempotence",
@@ -183,7 +183,7 @@
           "now": "2026-08-07T02:02:00Z"
         }
       ],
-      "expectedLegacyProjectionRoot": "sha256:60fead53ff605fcd81934e6d752ea5f2b4951c57addcec1c1df87fb6dec9b7ba"
+      "expectedLegacyProjectionRoot": "sha256:f1ec1dcd97eb65cc8258bdcf4e17f08311cc23a20acd05f9112a2cef7c685685"
     },
     {
       "id": "queued-cancellation-idempotence",

package/architecture/v4-floating-consumer-policy.json

@@ -36,6 +36,12 @@
   },
   "runtimeEscapeBoundary": {
     "persistedSelectorOverride": false,
+    "protectedAlphaRecoveryBootstrap": {
+      "selector": "alpha/v4/v4.0",
+      "sourcePath": ".github/workflows/buildchain-ref-promotion-recovery.yml",
+      "workflow": ".github/workflows/.release-candidate-promote.yml",
+      "repository": "kungfu-systems/buildchain"
+    },
     "trustedNonPersistentInput": true,
     "requiresSeparateAuthority": true,
     "requiresReadback": true,

package/architecture/v4-publication-rehearsal-parity.json

@@ -0,0 +1,84 @@
+{
+  "schema": "buildchain.v4.publication-rehearsal-parity/v1",
+  "source": {
+    "branch": "dev/v3/v3.0",
+    "commit": "6b96bdad8d9f8ccf9275f27d9370a226a9c78465",
+    "runtime": "packages/core/publication-rehearsal-runtime.js"
+  },
+  "target": {
+    "branch": "dev/v4/v4.0",
+    "commit": "bc12cd0ff18a7e1d918777ea093c169349952d34",
+    "capsuleContract": "packages/core/v4-publication-rehearsal-capsule.js",
+    "runtime": "packages/core/v4-publication-rehearsal.js",
+    "providerBindings": "packages/core/v4-publication-rehearsal-provider-bindings.js"
+  },
+  "sharedProductionCore": {
+    "planner": "compileReleaseTailDeclaration",
+    "initializer": "createReleaseTailTransaction",
+    "executor": "executeReleaseTailTransaction",
+    "version": "buildchain.release-tail/v1"
+  },
+  "stageCapsuleBoundary": {
+    "contract": "buildchain-v4-stage-capsule/v1",
+    "purpose": "pure platform-stage build checkpoint reuse",
+    "publicationEffects": false,
+    "publicationAuthority": false
+  },
+  "matrix": [
+    {
+      "invariant": "capsule-purpose",
+      "v3": "publication rehearsal",
+      "v4": "publication rehearsal distinct from Stage Capsule",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "content-addressed-inputs",
+      "v3": "capsule, declaration, transaction, files, data-only provider bindings, policy and observations",
+      "v4": "capsule, source, candidate, manifest, config, provider bindings, provider policy, expected observations and core version",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "provider-request-binding",
+      "v3": "provider binding payload is capsule-rooted and every input path is in files",
+      "v4": "providerBindingsRoot covers canonical bindings and every request byte is inventory-rooted before adapters",
+      "parity": "exact"
+    },
+    {
+      "invariant": "shared-release-tail-core",
+      "v3": "shared planner and executor",
+      "v4": "same production planner, initializer and executor",
+      "parity": "exact"
+    },
+    {
+      "invariant": "effect-default",
+      "v3": "simulate and replay local defaults",
+      "v4": "provider policy is rooted and effect-disabled by default",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "authorized-provider-rehearsal",
+      "v3": "provider observations are recorded without authority",
+      "v4": "exact capsule-bound rehearsal-only authority plus request and readback transcript",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "release-authority",
+      "v3": "externalPublicationClaimed false",
+      "v4": "productionAuthority false and releasePassport null",
+      "parity": "exact"
+    },
+    {
+      "invariant": "tamper-response",
+      "v3": "capsule and file mismatch fail closed",
+      "v4": "every named identity root and core version mismatch fails closed",
+      "parity": "safety-strengthened"
+    },
+    {
+      "invariant": "portability",
+      "v3": "platform-independent local capsule root",
+      "v4": "byte-identical offline linux, macos and windows vector",
+      "parity": "exact"
+    }
+  ],
+  "matrixRoot": "sha256:521694ce2cc1d5b383eaa6b84f1b6926ef8ce8f33085e02507e611e9f9b6e784"
+}