@kungfu-tech/buildchain 4.0.1-alpha.5 → 4.0.1-alpha.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (108) hide show
  1. package/actions/release-tail/README.md +8 -0
  2. package/architecture/ci-lane-change-budget.json +187 -0
  3. package/architecture/internal-capabilities.json +65 -5
  4. package/architecture/maintainability-policy.json +27 -21
  5. package/architecture/release-tail-contract-inventory.json +5 -2
  6. package/architecture/v4-adopter-delivery-parity.json +32 -5
  7. package/architecture/v4-floating-consumer-policy.json +6 -0
  8. package/architecture/v4-publication-rehearsal-parity.json +84 -0
  9. package/bin/buildchain.mjs +7 -1
  10. package/bin/internal/adopter-delivery-cli.mjs +70 -0
  11. package/bin/internal/command-registry.mjs +1 -0
  12. package/contracts/fixtures/v4-adopter-delivery-v1/archive-template.json +19 -0
  13. package/contracts/fixtures/v4-adopter-delivery-v1/bootstrap-positive.json +93 -0
  14. package/contracts/fixtures/v4-adopter-delivery-v1/gate-positive.json +29 -0
  15. package/contracts/fixtures/v4-adopter-delivery-v1/gate-unknown-selector.json +26 -0
  16. package/contracts/fixtures/v4-adopter-delivery-v1/offline-vectors.json +50 -0
  17. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/artifacts/product.bin +1 -0
  18. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/config/buildchain.toml +5 -0
  19. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/release-activation.json +1 -0
  20. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/documents/signed-channel.json +1 -0
  21. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/evidence/qualification.json +1 -0
  22. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/candidate.json +5 -0
  23. package/contracts/fixtures/v4-publication-rehearsal-v1/candidate/manifests/release-passport.json +1 -0
  24. package/contracts/fixtures/v4-publication-rehearsal-v1/capsule.json +707 -0
  25. package/contracts/fixtures/v4-publication-rehearsal-v1/offline-vectors.json +27 -0
  26. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  27. package/contracts/v4-adopter-delivery-v1.schema.json +81 -0
  28. package/contracts/v4-floating-consumer-policy-receipt-v1.schema.json +4 -2
  29. package/contracts/v4-publication-rehearsal-capsule-v1.schema.json +233 -0
  30. package/dist/site/agent-index.json +3 -0
  31. package/dist/site/artifact-schemas.json +6 -0
  32. package/dist/site/buildchain-contract.json +14 -14
  33. package/dist/site/buildchain-site.json +231 -24
  34. package/dist/site/capability-registry.json +11 -10
  35. package/dist/site/cli-registry.json +53 -1
  36. package/dist/site/kfd-claims.json +279 -14
  37. package/dist/site/kfd-upstream-aggregate.json +1 -1
  38. package/dist/site/manual-registry.json +20 -5
  39. package/dist/site/node-api-registry.json +11569 -9299
  40. package/dist/site/page-registry.json +214 -15
  41. package/dist/site/public-surface-audit.json +206 -11
  42. package/dist/site/publication-authority-registry.json +39 -8
  43. package/dist/site/publication-registry.json +4 -4
  44. package/dist/site/release-provenance.json +15 -0
  45. package/dist/site/schemas/release-tail-capabilities-v1.schema.json +199 -0
  46. package/dist/site/schemas/v4-adopter-delivery-v1.schema.json +81 -0
  47. package/dist/site/schemas/v4-publication-rehearsal-capsule-v1.schema.json +233 -0
  48. package/dist/site/site-manifest.json +17 -9
  49. package/dist/site/workflow-registry.json +110 -8
  50. package/docs/MAP.md +3 -1
  51. package/docs/cli-reference.md +68 -0
  52. package/docs/cli.md +8 -0
  53. package/docs/dev-delivery-warrant.md +22 -1
  54. package/docs/node-api-reference.md +332 -172
  55. package/docs/release-tail-provider-plane.md +30 -0
  56. package/docs/v4-adopter-delivery.md +133 -0
  57. package/docs/v4-publication-rehearsal.md +130 -0
  58. package/package.json +18 -3
  59. package/packages/core/adopter-delivery-passport.js +259 -0
  60. package/packages/core/adopter-delivery-vectors.js +158 -0
  61. package/packages/core/adopter-delivery-vectors.json +77 -0
  62. package/packages/core/buildchain-agent-manuals.js +1 -0
  63. package/packages/core/buildchain-config.js +84 -0
  64. package/packages/core/buildchain-delivery-bootstrap.js +240 -0
  65. package/packages/core/buildchain-delivery-infrastructure.js +164 -0
  66. package/packages/core/buildchain-delivery-self-dogfood.js +395 -0
  67. package/packages/core/buildchain-publication-authority.js +1 -0
  68. package/packages/core/ci-lane-change-budget.js +247 -0
  69. package/packages/core/dev-delivery-native-proof.js +43 -27
  70. package/packages/core/dev-delivery-warrant-state.js +31 -8
  71. package/packages/core/dev-delivery-warrant.js +8 -3
  72. package/packages/core/github-governance-authority.js +1 -0
  73. package/packages/core/index.js +5 -0
  74. package/packages/core/legacy-kfd-adopter-driver.js +167 -0
  75. package/packages/core/published-delivery-authority.js +266 -0
  76. package/packages/core/release-candidate-recovery.js +66 -11
  77. package/packages/core/release-candidate.js +2 -2
  78. package/packages/core/release-passport.js +36 -9
  79. package/packages/core/v4-adopter-delivery-parity.js +3 -3
  80. package/packages/core/v4-adopter-delivery.js +359 -0
  81. package/packages/core/v4-delivery-warrant-read-candidate.js +10 -3
  82. package/packages/core/v4-floating-consumer-evidence.js +18 -4
  83. package/packages/core/v4-floating-consumer-policy.js +138 -35
  84. package/packages/core/v4-floating-consumer-release-passport.js +30 -3
  85. package/packages/core/v4-publication-rehearsal-capsule.js +468 -0
  86. package/packages/core/v4-publication-rehearsal-provider-bindings.js +212 -0
  87. package/packages/core/v4-publication-rehearsal.js +481 -0
  88. package/packages/core/workflow-yaml-contract.js +24 -2
  89. package/scripts/buildchain-cli-help.mjs +10 -0
  90. package/scripts/check-ci-lane-change-budget.mjs +100 -0
  91. package/scripts/check-inventory.mjs +3 -3
  92. package/scripts/check-v4-floating-consumer-policy-contract.mjs +23 -4
  93. package/scripts/dev-delivery-source-proof-replay.mjs +153 -0
  94. package/scripts/dev-delivery-source-proof-reuse.mjs +13 -97
  95. package/scripts/dev-delivery-warrant-store.mjs +10 -6
  96. package/scripts/dev-delivery-warrant.mjs +5 -1
  97. package/scripts/dev-pr-delivery-warrant.mjs +1 -0
  98. package/scripts/dev-qualification-patrol.mjs +9 -9
  99. package/scripts/generate-channel-promotion-workflow.mjs +2 -2
  100. package/scripts/generate-release-candidate-passport.mjs +152 -0
  101. package/scripts/generate-site-bundle.mjs +30 -0
  102. package/scripts/promotion-channel-router.mjs +4 -4
  103. package/scripts/release-candidate-anchor-provenance.mjs +99 -0
  104. package/scripts/release-tail.mjs +51 -3
  105. package/scripts/resume-from-candidate-run.mjs +556 -29
  106. package/scripts/site-capability-metadata.mjs +17 -0
  107. package/scripts/v4-consumer-policy.mjs +4 -0
  108. package/scripts/v4-publication-rehearsal-fixture.mjs +144 -0
@@ -0,0 +1,27 @@
1
+ {
2
+ "schema": "buildchain-v4-publication-rehearsal-offline-vectors/v1",
3
+ "vectors": [
4
+ {
5
+ "platform": "linux",
6
+ "capsuleRoot": "sha256:29a870ce850c7d6bde848fd77d7f382acf1f743d627c6265a913be51a8c05edf",
7
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
8
+ "stateRoot": "sha256:8e138381ff578bce96ea3934c74b927287a9d53c8b29b4a2e7b2d92cf5ab272d",
9
+ "evidenceRoot": "sha256:0c20fcb7aac8c420e98e63d1968ee8321b9938227e3ae77cfaf194db9588010e"
10
+ },
11
+ {
12
+ "platform": "macos",
13
+ "capsuleRoot": "sha256:29a870ce850c7d6bde848fd77d7f382acf1f743d627c6265a913be51a8c05edf",
14
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
15
+ "stateRoot": "sha256:8e138381ff578bce96ea3934c74b927287a9d53c8b29b4a2e7b2d92cf5ab272d",
16
+ "evidenceRoot": "sha256:0c20fcb7aac8c420e98e63d1968ee8321b9938227e3ae77cfaf194db9588010e"
17
+ },
18
+ {
19
+ "platform": "windows",
20
+ "capsuleRoot": "sha256:29a870ce850c7d6bde848fd77d7f382acf1f743d627c6265a913be51a8c05edf",
21
+ "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
22
+ "stateRoot": "sha256:8e138381ff578bce96ea3934c74b927287a9d53c8b29b4a2e7b2d92cf5ab272d",
23
+ "evidenceRoot": "sha256:0c20fcb7aac8c420e98e63d1968ee8321b9938227e3ae77cfaf194db9588010e"
24
+ }
25
+ ],
26
+ "vectorRoot": "sha256:3e968de4060d0fea4cbff82409541f9b6fa903212e18921f2606390eb24993ed"
27
+ }
@@ -22,7 +22,7 @@
22
22
  "ref": "v4-alpha",
23
23
  "sha": "dddddddddddddddddddddddddddddddddddddddd",
24
24
  "contractRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
25
- "consumerPolicyReceiptRoot": "sha256:2c4a55af9d551eb5116894f2b28e38542fa9d45c904147c374784c8eabc70275"
25
+ "consumerPolicyReceiptRoot": "sha256:83e75f961e61f5a6ed3648898836076afa5561a0b25bfc07ff6d3f2d4b7405d6"
26
26
  },
27
27
  "warrant": {
28
28
  "candidateId": "candidate-alpha-2",
@@ -0,0 +1,81 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://buildchain.kungfu-tech.com/schemas/v4-adopter-delivery-v1.schema.json",
4
+ "title": "Buildchain v4 adopter delivery gate input",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schemaVersion",
9
+ "contract",
10
+ "driverSelector",
11
+ "artifactProfileSelector",
12
+ "request",
13
+ "context"
14
+ ],
15
+ "properties": {
16
+ "schemaVersion": { "const": 1 },
17
+ "contract": { "const": "kungfu-buildchain-v4-adopter-delivery/v1" },
18
+ "driverSelector": {
19
+ "enum": ["json-assertion", "kfd-category", "legacy-kfd"]
20
+ },
21
+ "artifactProfileSelector": { "enum": ["git-commit", "package"] },
22
+ "request": { "$ref": "#/$defs/request" },
23
+ "context": { "type": "object" }
24
+ },
25
+ "$defs": {
26
+ "reference": {
27
+ "type": "object",
28
+ "additionalProperties": false,
29
+ "required": ["id", "version"],
30
+ "properties": {
31
+ "id": {
32
+ "type": "string",
33
+ "pattern": "^[a-z][a-z0-9.-]*(/[a-z][a-z0-9.-]*)*$"
34
+ },
35
+ "version": {
36
+ "type": "string",
37
+ "pattern": "^[1-9][0-9]*\\.[0-9]+\\.[0-9]+$"
38
+ }
39
+ }
40
+ },
41
+ "request": {
42
+ "type": "object",
43
+ "additionalProperties": false,
44
+ "required": [
45
+ "schemaVersion",
46
+ "contract",
47
+ "protocol",
48
+ "artifactProfile",
49
+ "project",
50
+ "artifact",
51
+ "declaration"
52
+ ],
53
+ "properties": {
54
+ "schemaVersion": { "const": 1 },
55
+ "contract": { "const": "kungfu-buildchain-adopter-delivery-request" },
56
+ "protocol": { "$ref": "#/$defs/reference" },
57
+ "artifactProfile": { "$ref": "#/$defs/reference" },
58
+ "project": {
59
+ "type": "object",
60
+ "additionalProperties": false,
61
+ "required": ["instanceId", "adopterId"],
62
+ "properties": {
63
+ "instanceId": { "type": "string", "minLength": 1 },
64
+ "adopterId": { "type": "string", "minLength": 1 }
65
+ }
66
+ },
67
+ "artifact": {
68
+ "type": "object",
69
+ "additionalProperties": false,
70
+ "required": ["kind", "coordinate", "root"],
71
+ "properties": {
72
+ "kind": { "type": "string", "minLength": 1 },
73
+ "coordinate": { "type": "string", "minLength": 1 },
74
+ "root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }
75
+ }
76
+ },
77
+ "declaration": { "type": "object" }
78
+ }
79
+ }
80
+ }
81
+ }
@@ -47,8 +47,10 @@
47
47
  },
48
48
  "sourcePath": { "type": "string" },
49
49
  "sourceLine": { "type": "integer", "minimum": 0 },
50
- "visibleSelector": { "enum": ["", "v4", "v4-alpha"] },
51
- "selectorClass": { "enum": ["", "floating", "rejected"] },
50
+ "visibleSelector": { "enum": ["", "v4", "v4-alpha", "alpha/v4/v4.0"] },
51
+ "selectorClass": {
52
+ "enum": ["", "floating", "protected-bootstrap", "rejected"]
53
+ },
52
54
  "channel": { "enum": ["", "stable", "alpha"] },
53
55
  "resolvedWorkflowSha": {
54
56
  "type": "string",
@@ -0,0 +1,233 @@
1
+ {
2
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
3
+ "$id": "https://buildchain.kungfu.ai/contracts/v4-publication-rehearsal-capsule-v1.schema.json",
4
+ "title": "Buildchain v4 Publication Rehearsal Capsule",
5
+ "type": "object",
6
+ "additionalProperties": false,
7
+ "required": [
8
+ "schema",
9
+ "coreVersion",
10
+ "source",
11
+ "candidate",
12
+ "manifest",
13
+ "config",
14
+ "providerBindings",
15
+ "providerBindingsRoot",
16
+ "providerPolicy",
17
+ "expectedObservations",
18
+ "declaration",
19
+ "transaction",
20
+ "files",
21
+ "capsuleRoot"
22
+ ],
23
+ "properties": {
24
+ "schema": { "const": "buildchain-v4-publication-rehearsal-capsule/v1" },
25
+ "coreVersion": { "const": "buildchain.release-tail/v1" },
26
+ "source": {
27
+ "type": "object",
28
+ "additionalProperties": false,
29
+ "required": ["repository", "revision", "root"],
30
+ "properties": {
31
+ "repository": { "type": "string", "minLength": 1 },
32
+ "revision": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
33
+ "root": { "$ref": "#/$defs/root" }
34
+ }
35
+ },
36
+ "candidate": {
37
+ "type": "object",
38
+ "additionalProperties": false,
39
+ "required": ["root"],
40
+ "properties": { "root": { "$ref": "#/$defs/root" } }
41
+ },
42
+ "manifest": { "$ref": "#/$defs/fileBinding" },
43
+ "config": { "$ref": "#/$defs/fileBinding" },
44
+ "providerBindings": { "$ref": "#/$defs/providerBindings" },
45
+ "providerBindingsRoot": { "$ref": "#/$defs/root" },
46
+ "providerPolicy": {
47
+ "type": "object",
48
+ "additionalProperties": false,
49
+ "required": [
50
+ "schema",
51
+ "effectDefault",
52
+ "allowedCapabilityIds",
53
+ "allowedAdapters",
54
+ "root"
55
+ ],
56
+ "properties": {
57
+ "schema": {
58
+ "const": "buildchain-v4-publication-rehearsal-provider-policy/v1"
59
+ },
60
+ "effectDefault": { "const": "disabled" },
61
+ "allowedCapabilityIds": {
62
+ "type": "array",
63
+ "minItems": 1,
64
+ "uniqueItems": true,
65
+ "items": { "type": "string", "minLength": 1 }
66
+ },
67
+ "allowedAdapters": {
68
+ "type": "array",
69
+ "minItems": 1,
70
+ "uniqueItems": true,
71
+ "items": {
72
+ "type": "string",
73
+ "pattern": "^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$"
74
+ }
75
+ },
76
+ "root": { "$ref": "#/$defs/root" }
77
+ }
78
+ },
79
+ "expectedObservations": {
80
+ "type": "object",
81
+ "additionalProperties": false,
82
+ "required": ["entries", "root"],
83
+ "properties": {
84
+ "entries": {
85
+ "type": "array",
86
+ "items": { "$ref": "#/$defs/observationSequence" }
87
+ },
88
+ "root": { "$ref": "#/$defs/root" }
89
+ }
90
+ },
91
+ "declaration": { "$ref": "release-tail-capabilities-v1.schema.json" },
92
+ "transaction": { "type": "object" },
93
+ "files": {
94
+ "type": "array",
95
+ "minItems": 1,
96
+ "items": {
97
+ "type": "object",
98
+ "additionalProperties": false,
99
+ "required": ["role", "path", "size", "root"],
100
+ "properties": {
101
+ "role": {
102
+ "type": "string",
103
+ "pattern": "^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$"
104
+ },
105
+ "path": { "$ref": "#/$defs/path" },
106
+ "size": { "type": "integer", "minimum": 0 },
107
+ "root": { "$ref": "#/$defs/root" }
108
+ }
109
+ }
110
+ },
111
+ "capsuleRoot": { "$ref": "#/$defs/root" }
112
+ },
113
+ "$defs": {
114
+ "root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
115
+ "path": {
116
+ "type": "string",
117
+ "minLength": 1,
118
+ "pattern": "^(?!/)(?!.*(?:^|/)\\.(?:/|$))(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*//)(?!.*\\\\)(?!.*\/$).+$"
119
+ },
120
+ "providerBindings": {
121
+ "type": "object",
122
+ "additionalProperties": false,
123
+ "required": ["schema", "artifacts", "documents", "evidence"],
124
+ "properties": {
125
+ "schema": {
126
+ "const": "kungfu.buildchain.release-tail.provider-bindings/v1"
127
+ },
128
+ "artifacts": {
129
+ "type": "object",
130
+ "propertyNames": {
131
+ "pattern": "^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$"
132
+ },
133
+ "additionalProperties": {
134
+ "type": "object",
135
+ "additionalProperties": false,
136
+ "required": ["path", "name"],
137
+ "properties": {
138
+ "path": { "$ref": "#/$defs/path" },
139
+ "name": { "type": "string", "minLength": 1 }
140
+ }
141
+ }
142
+ },
143
+ "documents": {
144
+ "type": "object",
145
+ "propertyNames": {
146
+ "pattern": "^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$"
147
+ },
148
+ "additionalProperties": { "$ref": "#/$defs/providerDocument" }
149
+ },
150
+ "evidence": {
151
+ "type": "object",
152
+ "additionalProperties": false,
153
+ "required": ["inputs", "output"],
154
+ "properties": {
155
+ "inputs": {
156
+ "type": "array",
157
+ "uniqueItems": true,
158
+ "items": { "$ref": "#/$defs/path" }
159
+ },
160
+ "output": { "$ref": "#/$defs/path" }
161
+ }
162
+ }
163
+ }
164
+ },
165
+ "providerDocument": {
166
+ "type": "object",
167
+ "additionalProperties": false,
168
+ "required": ["path", "method"],
169
+ "properties": {
170
+ "path": { "$ref": "#/$defs/path" },
171
+ "method": { "enum": ["PUT", "POST"] }
172
+ }
173
+ },
174
+ "fileBinding": {
175
+ "type": "object",
176
+ "additionalProperties": false,
177
+ "required": ["path", "root"],
178
+ "properties": {
179
+ "path": { "$ref": "#/$defs/path" },
180
+ "root": { "$ref": "#/$defs/root" }
181
+ }
182
+ },
183
+ "readback": {
184
+ "type": "object",
185
+ "additionalProperties": false,
186
+ "required": [
187
+ "outcome",
188
+ "subjectRoot",
189
+ "targetRoot",
190
+ "evidenceRoots",
191
+ "providerCode"
192
+ ],
193
+ "properties": {
194
+ "outcome": { "enum": ["observed", "absent", "transient", "conflict"] },
195
+ "subjectRoot": {
196
+ "oneOf": [{ "$ref": "#/$defs/root" }, { "const": "" }]
197
+ },
198
+ "targetRoot": {
199
+ "oneOf": [{ "$ref": "#/$defs/root" }, { "const": "" }]
200
+ },
201
+ "evidenceRoots": {
202
+ "type": "array",
203
+ "uniqueItems": true,
204
+ "items": { "$ref": "#/$defs/root" }
205
+ },
206
+ "providerCode": { "type": "string", "minLength": 1 }
207
+ }
208
+ },
209
+ "observationSequence": {
210
+ "type": "object",
211
+ "additionalProperties": false,
212
+ "required": ["operationId", "readbacks", "apply"],
213
+ "properties": {
214
+ "operationId": { "$ref": "#/$defs/root" },
215
+ "readbacks": {
216
+ "type": "array",
217
+ "minItems": 1,
218
+ "items": { "$ref": "#/$defs/readback" }
219
+ },
220
+ "apply": {
221
+ "type": "object",
222
+ "additionalProperties": false,
223
+ "required": ["outcome", "code", "classification"],
224
+ "properties": {
225
+ "outcome": { "enum": ["applied", "transient", "conflict"] },
226
+ "code": { "type": "string", "minLength": 1 },
227
+ "classification": { "type": "string", "minLength": 1 }
228
+ }
229
+ }
230
+ }
231
+ }
232
+ }
233
+ }
@@ -21,6 +21,9 @@
21
21
  "schemas/kfd-product-gate-input-v1.schema.json",
22
22
  "schemas/dev-delivery-authority-v2.schema.json",
23
23
  "schemas/v4-compatibility-facts-v1.schema.json",
24
+ "schemas/v4-publication-rehearsal-capsule-v1.schema.json",
25
+ "schemas/v4-adopter-delivery-v1.schema.json",
26
+ "schemas/release-tail-capabilities-v1.schema.json",
24
27
  "buildchain-contract.json",
25
28
  "kfd-upstream-aggregate.json",
26
29
  "kfd-claims.json",
@@ -9,6 +9,9 @@
9
9
  "schemas/kfd-product-gate-input-v1.schema.json",
10
10
  "schemas/dev-delivery-authority-v2.schema.json",
11
11
  "schemas/v4-compatibility-facts-v1.schema.json",
12
+ "schemas/v4-publication-rehearsal-capsule-v1.schema.json",
13
+ "schemas/v4-adopter-delivery-v1.schema.json",
14
+ "schemas/release-tail-capabilities-v1.schema.json",
12
15
  "kfd-support.json",
13
16
  "artifact-evidence.json",
14
17
  "product-mechanism.json",
@@ -45,6 +48,9 @@
45
48
  "schemas/kfd-product-gate-input-v1.schema.json",
46
49
  "schemas/dev-delivery-authority-v2.schema.json",
47
50
  "schemas/v4-compatibility-facts-v1.schema.json",
51
+ "schemas/v4-publication-rehearsal-capsule-v1.schema.json",
52
+ "schemas/v4-adopter-delivery-v1.schema.json",
53
+ "schemas/release-tail-capabilities-v1.schema.json",
48
54
  "buildchain-contract.json",
49
55
  "kfd-claims.json",
50
56
  "product-mechanism.json",
@@ -4,7 +4,7 @@
4
4
  "product": {
5
5
  "name": "Buildchain",
6
6
  "package": "@kungfu-tech/buildchain",
7
- "version": "4.0.1-alpha.5",
7
+ "version": "4.0.1-alpha.8",
8
8
  "repository": "https://github.com/kungfu-systems/buildchain"
9
9
  },
10
10
  "majorLine": "v4",
@@ -1361,7 +1361,7 @@
1361
1361
  "retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
1362
1362
  ],
1363
1363
  "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
1364
- "auditDigest": "sha256:3ece8acdaf1586998a6afc7315115e732eed7b0ed98bfcefa347cd935bae2026",
1364
+ "auditDigest": "sha256:6cf134f8bc0c0ab488cb159ef2bb9f7a94b454c4f7adee134ce7dee00d84c5d3",
1365
1365
  "compatibleBreakingDigests": [
1366
1366
  "sha256:a6a35370d6b0d0f46e1b2712dcc01961fe53c2febde95409a27a485c10a36650"
1367
1367
  ],
@@ -1591,7 +1591,7 @@
1591
1591
  "GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
1592
1592
  ],
1593
1593
  "breakingDigest": "sha256:5f10c81d3f80cb417960be682921884639c40b6d875f1a3b1ffae7e652c3f468",
1594
- "auditDigest": "sha256:2d8eaa093d31391c56a7c672a8ba1fbb756b66f5d05dc4f04909fceb077ea376"
1594
+ "auditDigest": "sha256:0fc3f61d5a10b76dcc03aba4e1d4eea2a25b0de4921929d5c86d27db00d08da6"
1595
1595
  },
1596
1596
  {
1597
1597
  "contractVersion": 1,
@@ -1646,7 +1646,7 @@
1646
1646
  "resume-from-candidate-run is fail-closed and uses a fresh caller event instead of rerunning a frozen startup graph"
1647
1647
  ],
1648
1648
  "breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
1649
- "auditDigest": "sha256:b7532257bb94b8cf5ed401a49caa14a7beda404efa201a89bee928b0fb52a7c9",
1649
+ "auditDigest": "sha256:fc62e34e4fde50da0bf5bf2f9e0b455a8ff1ccea62f7348d1a132567e2c829e1",
1650
1650
  "compatibleBreakingDigests": [
1651
1651
  "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
1652
1652
  ],
@@ -1888,7 +1888,7 @@
1888
1888
  "semver GitHub Releases are created or updated only after transaction completion, with prerelease/latest metadata bound to the authoritative publication channel and tag syntax retained as the fallback for ordinary callers"
1889
1889
  ],
1890
1890
  "breakingDigest": "sha256:6147c0a8d5c36bfaa6021871574e1fc28192a3f1b8cfdae4d24ef3059ac1ebda",
1891
- "auditDigest": "sha256:c84da8a7e2bf428288e24c7a105dd718a8cc2db1d08d9e8fd0fa374430653fa7",
1891
+ "auditDigest": "sha256:3c34606573df2ff29c4bc9b959f0b842ca7653427139c4bf8d600f152d5fe1a4",
1892
1892
  "compatibleBreakingDigests": [
1893
1893
  "sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874"
1894
1894
  ],
@@ -2012,7 +2012,7 @@
2012
2012
  "release-state SHA is recorded as a durable audit entrance"
2013
2013
  ],
2014
2014
  "breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
2015
- "auditDigest": "sha256:8276788ccdcfb55fab5a0343ecf9474273e91c99fc5e1630e19ccf6b920cbd90"
2015
+ "auditDigest": "sha256:7b433d34f87651d8fb187d06b83113e93cbc0243a0f93ce33f375a4737f144f6"
2016
2016
  },
2017
2017
  {
2018
2018
  "contractVersion": 1,
@@ -2061,7 +2061,7 @@
2061
2061
  "prose-only public claims downgrade the release trust passport audit"
2062
2062
  ],
2063
2063
  "breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
2064
- "auditDigest": "sha256:8276788ccdcfb55fab5a0343ecf9474273e91c99fc5e1630e19ccf6b920cbd90"
2064
+ "auditDigest": "sha256:7b433d34f87651d8fb187d06b83113e93cbc0243a0f93ce33f375a4737f144f6"
2065
2065
  },
2066
2066
  {
2067
2067
  "contractVersion": 1,
@@ -2121,7 +2121,7 @@
2121
2121
  "README badge block checks and writes are generated from machine-readable repository facts"
2122
2122
  ],
2123
2123
  "breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
2124
- "auditDigest": "sha256:9fde507760f431abcb6549c313566246a6aade0de2f0354afb0d6cfa320a17ac"
2124
+ "auditDigest": "sha256:b3ca92bdcfc8415867ebfd504883ac05982ee9116056141e0bdf10b400fe4d9a"
2125
2125
  },
2126
2126
  {
2127
2127
  "contractVersion": 1,
@@ -2211,7 +2211,7 @@
2211
2211
  "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
2212
2212
  ],
2213
2213
  "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
2214
- "auditDigest": "sha256:9100c7325aa64af980577a7780801491784c00014d492143e044cba2a4a958f8"
2214
+ "auditDigest": "sha256:9ac244b89ab685df5c1d43ebcb9195c9133261b77d2ce948e3d4083e8651f086"
2215
2215
  },
2216
2216
  {
2217
2217
  "contractVersion": 1,
@@ -2233,7 +2233,7 @@
2233
2233
  "agents can discover supported Node APIs without importing internal file paths"
2234
2234
  ],
2235
2235
  "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
2236
- "auditDigest": "sha256:626f5b9e4c642459a64cf15930b4ab0d52d9fbafa6bf7f6688532831d7da204d"
2236
+ "auditDigest": "sha256:14c116689f571b197fad4632683335bc13718abd17276f3da0ffbf1e85a74483"
2237
2237
  },
2238
2238
  {
2239
2239
  "contractVersion": 1,
@@ -2348,7 +2348,7 @@
2348
2348
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
2349
2349
  ],
2350
2350
  "breakingDigest": "sha256:d4bd0f2a1921bfed71a4d9104d45934555bde74a5c189f93ad79f37074c02b87",
2351
- "auditDigest": "sha256:d85f695dd506fba489dab99d7c37f3ebf6ac7efed32d887288286b9496108209"
2351
+ "auditDigest": "sha256:754b9b628d1906785c3882a5ec62c7f8a9f83140ce3741fecc40f3baa91bd0a2"
2352
2352
  },
2353
2353
  {
2354
2354
  "contractVersion": 1,
@@ -2908,7 +2908,7 @@
2908
2908
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
2909
2909
  ],
2910
2910
  "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
2911
- "auditDigest": "sha256:3ece8acdaf1586998a6afc7315115e732eed7b0ed98bfcefa347cd935bae2026",
2911
+ "auditDigest": "sha256:6cf134f8bc0c0ab488cb159ef2bb9f7a94b454c4f7adee134ce7dee00d84c5d3",
2912
2912
  "compatibleBreakingDigests": [
2913
2913
  "sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1",
2914
2914
  "sha256:e264a79f9f399038c2fcfd21e4168c68c2e1485ee5c651c02242a02b622ac2be"
@@ -5082,7 +5082,7 @@
5082
5082
  "missing receipts are non-qualifying and must not be represented as a successful controller run"
5083
5083
  ],
5084
5084
  "breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
5085
- "auditDigest": "sha256:b7532257bb94b8cf5ed401a49caa14a7beda404efa201a89bee928b0fb52a7c9"
5085
+ "auditDigest": "sha256:fc62e34e4fde50da0bf5bf2f9e0b455a8ff1ccea62f7348d1a132567e2c829e1"
5086
5086
  },
5087
5087
  {
5088
5088
  "contractVersion": 1,
@@ -5308,5 +5308,5 @@
5308
5308
  "compatibilityFactCutRoot": "sha256:f61b975d4a96c921cc4bd37fb3ed9a0596b47004fe34dc7219979d697e3707f9",
5309
5309
  "compatibilityProofRegistryRoot": "sha256:b7194b811e4d3af2df4390bc4d1731e16a86215bd64ee18cb630dd5492f4fb63",
5310
5310
  "compatibilityDigest": "sha256:5de1c69386510b74b17eb70141b8bdd07063d62c504f91db5e84b67c6d4b64a2",
5311
- "contractDigest": "sha256:7915ddbcf204534e2862eca9de8cc940ff100aaf65e3bb2fb4d4e84a842cb994"
5311
+ "contractDigest": "sha256:5174492f4e44f42e3e5b6869eb8a6226542ebb772b3928494efafc168b4fa5f5"
5312
5312
  }