@kungfu-tech/buildchain 4.0.1-alpha.6 → 4.0.1-alpha.9

package/dist/site/public-surface-audit.json

@@ -4,7 +4,7 @@
   "status": "passed",
   "summary": {
     "cliCommandCount": 117,
-    "workflowCount": 75,
+    "workflowCount": 76,
     "actionCount": 7,
     "sitePageCount": 82,
     "docCommandRefCount": 1049,
@@ -1838,6 +1838,17 @@
         ],
         "outputCount": 5
       },
+      {
+        "id": "buildchain-ref-promotion-recovery",
+        "path": ".github/workflows/buildchain-ref-promotion-recovery.yml",
+        "reusable": false,
+        "inputs": [],
+        "inputCount": 0,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
       {
         "id": "buildchain-ref-promotion",
         "path": ".github/workflows/buildchain-ref-promotion.yml",
@@ -8835,8 +8846,8 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "ea47a31ce7ef3577f23e22055ab7be7715c3af494bcef63f76b426f2883086aa",
-    "workflowRegistryDigest": "2cdcfbc918836acb525f7d7cc84fcae983a4efcc77e81c786eb8b60ebe753b7c",
-    "pageRegistryDigest": "5b124e74cf384db9c91e0a1738e2cf3f7673ced3ca5020933069dead54858c71"
+    "workflowRegistryDigest": "9a3b8d35b9cd3bc8b89f5fd8f95d056be8016d2f8397b75bb44500882dc4decd",
+    "pageRegistryDigest": "9d9d0590c8d3110fc5a95978852ee25337567f93980b2562cc1159f0d5219ade"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-authority-registry.json

@@ -336,6 +336,19 @@
       "runnerPolicy": "unqualified",
       "notes": ""
     },
+    {
+      "workflowPath": ".github/workflows/buildchain-ref-promotion-recovery.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/buildchain-ref-promotion-recovery.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
     {
       "workflowPath": ".github/workflows/buildchain-ref-promotion.yml",
       "authorityClass": "governance-write",
@@ -882,10 +895,7 @@
     },
     {
       "path": ".github/workflows/build-surface-fixture.yml",
-      "signals": [
-        "write-permission",
-        "oidc"
-      ],
+      "signals": [],
       "classified": true
     },
     {
@@ -944,6 +954,14 @@
       ],
       "classified": true
     },
+    {
+      "path": ".github/workflows/buildchain-ref-promotion-recovery.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
     {
       "path": ".github/workflows/buildchain-ref-promotion.yml",
       "signals": [
@@ -1215,5 +1233,5 @@
       "classified": false
     }
   ],
-  "registryDigest": "2a7f4639a659489a0ef229983fff39d1c7880fb464411761f9debcbbd93bd336"
+  "registryDigest": "9c930540ed2366db36802ce03cac597657e45ff402c14ef13099c788ed4e2501"
 }

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-08-16T16:19:04.257Z",
-  "publishedAt": "2026-08-16T16:19:04.257Z",
+  "generatedAt": "2026-08-22T10:02:06.978Z",
+  "publishedAt": "2026-08-22T10:02:06.978Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "71350662d0ab74d154a80fe1384b6ff6c82fc7c2",
+  "sourceRevision": "5906a5dced70b95309dd76bfea28b0be1f3ce978",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.6",
+    "version": "4.0.1-alpha.9",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/release-provenance.json

@@ -22,6 +22,7 @@
       "./buildchain-contract": "./packages/core/buildchain-contract.js",
       "./compatibility-fact-authority": "./packages/core/buildchain-compatibility-proof.js",
       "./candidate-timeline": "./packages/core/candidate-timeline.js",
+      "./ci-lane-change-budget": "./packages/core/ci-lane-change-budget.js",
       "./channel-candidate": "./packages/core/channel-candidate.js",
       "./cache-evidence": "./packages/core/cache-evidence.js",
       "./controller-evidence": "./packages/core/controller-evidence.js",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-08-16T16:19:04.257Z",
-  "publishedAt": "2026-08-16T16:19:04.257Z",
+  "generatedAt": "2026-08-22T10:02:06.978Z",
+  "publishedAt": "2026-08-22T10:02:06.978Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "71350662d0ab74d154a80fe1384b6ff6c82fc7c2",
+  "sourceRevision": "5906a5dced70b95309dd76bfea28b0be1f3ce978",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.6",
+    "version": "4.0.1-alpha.9",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -253,7 +253,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:0732a6888896f492f6543c4c9b32a1aef58f0fe691977b961745e151178188e5"
+      "digest": "sha256:da744d2071ab7871eccbf6b3049a4d8a44b21daa477598fa9327a28b7d89ae67"
     },
     {
       "id": "build-facts",

package/dist/site/workflow-registry.json

@@ -1572,6 +1572,27 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
     },
+    {
+      "id": "buildchain-ref-promotion-recovery",
+      "path": ".github/workflows/buildchain-ref-promotion-recovery.yml",
+      "reusable": false,
+      "inputs": [],
+      "inputCount": 0,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [],
+      "outputCount": 0,
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "pre-3.0.2-alpha.4",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
+    },
     {
       "id": "buildchain-ref-promotion",
       "path": ".github/workflows/buildchain-ref-promotion.yml",
@@ -2006,7 +2027,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.6",
+      "introducedVersion": "4.0.1-alpha.9",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2027,7 +2048,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.6",
+      "introducedVersion": "4.0.1-alpha.9",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2048,7 +2069,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.6",
+      "introducedVersion": "4.0.1-alpha.9",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2098,7 +2119,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.1-alpha.6",
+      "introducedVersion": "4.0.1-alpha.9",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",

package/docs/dev-delivery-warrant.md

@@ -8,7 +8,7 @@ confidence: high
 sensitivity: public
 evidence_grade: A
 review_state: self-reviewed
-last_reviewed: 2026-08-13
+last_reviewed: 2026-08-17
 ai_provenance:
   model_family: GPT-5
   product: Codex
@@ -75,6 +75,27 @@ The queue does not infer an emergency: callers must choose it explicitly under
 their reviewed policy. Delivery classes are `non-native-fast`,
 `native-proof-required`, `cross-platform`, and `release`.
 
+## CI lane change budget
+
+`architecture/ci-lane-change-budget.json` pins the exact protected-Dev cut
+that predates lane-budget enforcement. `scripts/check-ci-lane-change-budget.mjs`
+compares the current workflow job set with that cut on every repository check.
+Legacy jobs remain readable without invented metadata, while every newly added
+job fails closed until its exact `<workflow>#<job>` lane declares:
+
+- merge or non-merge authority class;
+- trigger class;
+- concurrency scope and `cancel-in-progress` behavior;
+- expected runner-minutes per run;
+- cancellation/settlement behavior; and
+- merge-critical SLO impact, expected contribution, metric, and rationale.
+
+The guard is repository policy only. It does not become another required
+GitHub status, acquire merge-queue authority, or relax Delivery Warrant,
+exact-head, approval, required-check, and protected-ref enforcement. A removed
+lane must also remove its declaration, so stale budget records cannot conceal
+workflow drift.
+
 A release-blocker candidate may additionally carry a rooted priority claim
 created from a settled Release Train dual landing. The claim binds the exact
 Assignment, Initiative, repair, prior and successor cuts, candidate generation,