@kungfu-tech/buildchain 4.0.1-alpha.6 → 4.0.1-alpha.9

package/docs/node-api-reference.md

@@ -24,19 +24,19 @@ Signatures and source locations are mechanical. JavaScript return types remain c
 
 ## `@kungfu-tech/buildchain`
 
-Target: `./packages/core/index.js`. Public symbols: 627.
+Target: `./packages/core/index.js`. Public symbols: 629.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
 | `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from "@kungfu-tech/buildchain";` | `packages/core/release-activation-transaction.js:277` |
-| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:50` |
+| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:51` |
 | `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = "", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = "", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from "@kungfu-tech/buildchain";` | `packages/core/build-facts.js:466` |
 | `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from "@kungfu-tech/buildchain";` | `packages/core/controller-evidence.js:449` |
 | `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/anchored-version-material.js:15` |
 | `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from "@kungfu-tech/buildchain";` | `packages/core/logging.js:67` |
 | `applyGitHubHousekeeperPlan` | function: async function applyGitHubHousekeeperPlan({ client, plan, dryRun = true, priorReceipt, appliedAt = new Date().toISOString(), staleDays = DEFAULT_STALE_DAYS, maxActions = DEFAULT_MAX_ACTIONS, }) | { client, plan, dryRun = true, priorReceipt, appliedAt = new Date().toISOString(), staleDays = DEFAULT_STALE_DAYS, maxActions = DEFAULT_MAX_ACTIONS, } | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { applyGitHubHousekeeperPlan } from "@kungfu-tech/buildchain";` | `packages/core/engineering-housekeeper-github.js:615` |
 | `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from "@kungfu-tech/buildchain";` | `packages/core/surface-manifest.js:79` |
-| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:48` |
+| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:49` |
 | `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/artifact-passport.js:11` |
 | `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/artifact-passport.js:10` |
 | `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/artifact-signing.js:7` |
@@ -80,8 +80,8 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:35` |
 | `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-layout.js:4` |
 | `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-layout.js:36` |
-| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1365` |
-| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1367` |
+| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1366` |
+| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1368` |
 | `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from "@kungfu-tech/buildchain";` | `packages/core/kfd-gate.js:14` |
 | `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-kfd-claims.js:14` |
 | `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-kfd-claims.js:15` |
@@ -115,32 +115,33 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-layout.js:5` |
 | `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/issue-reporting.js:5` |
 | `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from "@kungfu-tech/buildchain";` | `packages/core/kfd.js:896` |
-| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-publication-authority.js:62` |
+| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-publication-authority.js:63` |
 | `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from "@kungfu-tech/buildchain";` | `packages/core/issue-reporting.js:104` |
 | `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from "@kungfu-tech/buildchain";` | `packages/core/build-facts.js:45` |
 | `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from "@kungfu-tech/buildchain";` | `packages/core/issue-reporting.js:199` |
 | `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from "@kungfu-tech/buildchain";` | `packages/core/cache-evidence.js:48` |
-| `certifyV4FloatingConsumerPolicyReceipt` | function: function certifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { certifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-evidence.js:188` |
+| `certifyV4FloatingConsumerPolicyReceipt` | function: function certifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { certifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-evidence.js:202` |
 | `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from "@kungfu-tech/buildchain";` | `packages/core/channel-candidate.js:6` |
 | `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from "@kungfu-tech/buildchain";` | `packages/core/channel-candidate.js:85` |
 | `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from "@kungfu-tech/buildchain";` | `packages/core/readme-badges.js:867` |
 | `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {}) | { cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from "@kungfu-tech/buildchain";` | `packages/core/homebrew.js:335` |
 | `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from "@kungfu-tech/buildchain";` | `packages/core/kfd2-product-claims.js:415` |
 | `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from "@kungfu-tech/buildchain";` | `packages/core/readme-badges.js:848` |
+| `CI_LANE_CHANGE_BUDGET_CONTRACT` | constant: const CI_LANE_CHANGE_BUDGET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CI_LANE_CHANGE_BUDGET_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/ci-lane-change-budget.js:4` |
 | `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-work-transitions.js:17` |
 | `classifyHousekeeperBranch` | function: function classifyHousekeeperBranch(branch, policyInput = {}) | branch, policyInput = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyHousekeeperBranch } from "@kungfu-tech/buildchain";` | `packages/core/engineering-housekeeper.js:105` |
 | `classifyHousekeeperPullRequest` | function: function classifyHousekeeperPullRequest(pullRequest, policyInput = {}) | pullRequest, policyInput = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyHousekeeperPullRequest } from "@kungfu-tech/buildchain";` | `packages/core/engineering-housekeeper.js:144` |
 | `classifyHousekeeperReplay` | function: function classifyHousekeeperReplay(plan, priorReceipt) | plan, priorReceipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyHousekeeperReplay } from "@kungfu-tech/buildchain";` | `packages/core/engineering-housekeeper.js:265` |
 | `classifyProcessCommand` | function: function classifyProcessCommand(command = "") | command = "" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:1085` |
 | `classifyReleasePropagationCondition` | function: function classifyReleasePropagationCondition(condition) | condition | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { classifyReleasePropagationCondition } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-agent-entry.js:171` |
-| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:419` |
+| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:420` |
 | `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from "@kungfu-tech/buildchain";` | `packages/core/readme-badges.js:790` |
 | `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:248` |
 | `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:922` |
 | `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:573` |
 | `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:944` |
 | `collectGitHubHousekeeperInventory` | function: async function collectGitHubHousekeeperInventory({ client, repository, targetBranch, observedAt, staleDays = DEFAULT_STALE_DAYS, policy = {}, }) | { client, repository, targetBranch, observedAt, staleDays = DEFAULT_STALE_DAYS, policy = {}, } | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectGitHubHousekeeperInventory } from "@kungfu-tech/buildchain";` | `packages/core/engineering-housekeeper-github.js:246` |
-| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:1575` |
+| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:1584` |
 | `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = "." } = {}) | { cwd = process.cwd(), root = "." } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from "@kungfu-tech/buildchain";` | `packages/core/build-facts.js:154` |
 | `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {}) | { cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from "@kungfu-tech/buildchain";` | `packages/core/homebrew.js:223` |
 | `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from "@kungfu-tech/buildchain";` | `packages/core/kfd.js:902` |
@@ -160,7 +161,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = "@kungfu-trader") | manager, scope = "@kungfu-trader" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from "@kungfu-tech/buildchain";` | `packages/core/package-manager.js:121` |
 | `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from "@kungfu-tech/buildchain";` | `packages/core/package-manager.js:89` |
 | `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from "@kungfu-tech/buildchain";` | `packages/core/package-manager.js:100` |
-| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:313` |
+| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:314` |
 | `compileReleaseTailDeclaration` | function: function compileReleaseTailDeclaration(input) | input | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileReleaseTailDeclaration } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-plane.js:584` |
 | `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-work-transitions.js:110` |
 | `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from "@kungfu-tech/buildchain";` | `packages/core/issue-reporting.js:64` |
@@ -170,13 +171,13 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from "@kungfu-tech/buildchain";` | `packages/core/controller-evidence.js:151` |
 | `createActivationReceiptProjectorAdapter` | function: function createActivationReceiptProjectorAdapter(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createActivationReceiptProjectorAdapter } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-adapters.js:181` |
 | `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = "", targetRef = "", alphaRef = "", releaseRef = "HEAD", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = "", targetRef = "", alphaRef = "", releaseRef = "HEAD", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from "@kungfu-tech/buildchain";` | `packages/core/anchored-version-material.js:118` |
-| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {}) | { assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:1240` |
+| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {}) | { assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:1249` |
 | `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = "passed", authority = {}, result = {}, signatures = [], reason = "", } = {}) | { request, status = "passed", authority = {}, result = {}, signatures = [], reason = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from "@kungfu-tech/buildchain";` | `packages/core/artifact-signing.js:374` |
 | `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from "@kungfu-tech/buildchain";` | `packages/core/artifact-signing.js:226` |
 | `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = "receipt.json", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = "receipt.json", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from "@kungfu-tech/buildchain";` | `packages/core/artifact-signing-result.js:68` |
 | `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = "v3", resolvedSha = "", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = "v3", resolvedSha = "", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-contract.js:910` |
 | `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-contract.js:169` |
-| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:452` |
+| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:453` |
 | `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = "" } = {}) | { root = process.cwd(), sourceSha = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-kfd-claims.js:530` |
 | `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-kfd-claims.js:687` |
 | `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = "" } = {}) | { root = process.cwd(), sourceSha = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-kfd-claims.js:647` |
@@ -185,7 +186,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-kfd-claims.js:411` |
 | `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = "", } = {}) | { cwd = process.cwd(), buildchainVersion = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-layout.js:99` |
 | `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from "@kungfu-tech/buildchain";` | `packages/core/logging.js:300` |
-| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-publication-authority.js:86` |
+| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-publication-authority.js:87` |
 | `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-kfd-claims.js:226` |
 | `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = "", runtimeCommit = "", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = "", runtimeCommit = "", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from "@kungfu-tech/buildchain";` | `packages/core/cache-evidence.js:244` |
 | `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from "@kungfu-tech/buildchain";` | `packages/core/cache-evidence.js:169` |
@@ -201,11 +202,11 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from "@kungfu-tech/buildchain";` | `packages/core/github-artifact-attestation.js:474` |
 | `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from "@kungfu-tech/buildchain";` | `packages/core/github-artifact-attestation.js:204` |
 | `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from "@kungfu-tech/buildchain";` | `packages/core/github-artifact-attestation.js:524` |
-| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:934` |
+| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:935` |
 | `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \|\| "https://api.github.com", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \|\| "https://api.github.com", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from "@kungfu-tech/buildchain";` | `packages/core/issue-reporting.js:393` |
 | `createGitHubReleaseAssetsAdapter` | function: function createGitHubReleaseAssetsAdapter({ octokit, resolveArtifact, } = {}) | { octokit, resolveArtifact, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubReleaseAssetsAdapter } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-adapters.js:310` |
-| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1112` |
-| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1191` |
+| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1113` |
+| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1192` |
 | `createHttpJsonReadback` | function: function createHttpJsonReadback({ fetchImpl = globalThis.fetch } = {}) | { fetchImpl = globalThis.fetch } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createHttpJsonReadback } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-adapters.js:191` |
 | `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = "", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = "", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from "@kungfu-tech/buildchain";` | `packages/core/kfd-gate.js:977` |
 | `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from "@kungfu-tech/buildchain";` | `packages/core/kfd-gate.js:1132` |
@@ -236,8 +237,8 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from "@kungfu-tech/buildchain";` | `packages/core/release-activation-transaction.js:311` |
 | `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = "shadow", bindings, owners, } = {}) | { transactionId, mode = "shadow", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from "@kungfu-tech/buildchain";` | `packages/core/release-activation-transaction.js:103` |
 | `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = "", pullRequest = {}, targetChannel = "", version = "", sourceHeadSha = "", baseSha = "", mergeRefSha = "", sourceTreeHash = "", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, consumerPolicyReceipt = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = "", pullRequest = {}, targetChannel = "", version = "", sourceHeadSha = "", baseSha = "", mergeRefSha = "", sourceTreeHash = "", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, consumerPolicyReceipt = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate.js:369` |
-| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2777` |
-| `createReleasePassport` | function: function createReleasePassport(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { createReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:1275` |
+| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2786` |
+| `createReleasePassport` | function: function createReleasePassport(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { createReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:1284` |
 | `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from "@kungfu-tech/buildchain";` | `packages/core/release-passport-contract.js:159` |
 | `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation.js:199` |
 | `createReleasePropagationPushPlan` | function: function createReleasePropagationPushPlan({ work: workInput, expectedWorkRoot, repositoryState: stateInput, } = {}) | { work: workInput, expectedWorkRoot, repositoryState: stateInput, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReleasePropagationPushPlan } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-push.js:77` |
@@ -284,8 +285,9 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from "@kungfu-tech/buildchain";` | `packages/core/public-surface-audit.js:106` |
 | `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from "@kungfu-tech/buildchain";` | `packages/core/public-surface-audit.js:74` |
 | `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-contract.js:977` |
-| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:427` |
-| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:696` |
+| `evaluateCiLaneChangeBudget` | function: function evaluateCiLaneChangeBudget({ policy, workflows, baselineWorkflows = null, } = {}) | { policy, workflows, baselineWorkflows = null, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateCiLaneChangeBudget } from "@kungfu-tech/buildchain";` | `packages/core/ci-lane-change-budget.js:180` |
+| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:428` |
+| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:697` |
 | `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from "@kungfu-tech/buildchain";` | `packages/core/kfd-product-gates.js:419` |
 | `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = "npm-trusted-publisher", requiredStatusCheck = "check", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = "npm-trusted-publisher", requiredStatusCheck = "check", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from "@kungfu-tech/buildchain";` | `packages/core/publication-control-plane-audit.js:75` |
 | `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from "@kungfu-tech/buildchain";` | `packages/core/paper.js:2852` |
@@ -296,7 +298,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from "@kungfu-tech/buildchain";` | `packages/core/artifact-passport.js:827` |
 | `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from "@kungfu-tech/buildchain";` | `packages/core/kfd-agent-hub.js:470` |
 | `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = "", sourceRef = "", tags, publishTransaction = false, publishCommand = "", } = {}) | { cwd = process.cwd(), targetRef, sha = "", sourceRef = "", tags, publishTransaction = false, publishCommand = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from "@kungfu-tech/buildchain";` | `packages/core/release-line-dry-run.js:127` |
-| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2933` |
+| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2942` |
 | `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate.js:6` |
 | `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-contract.js:851` |
 | `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from "@kungfu-tech/buildchain";` | `packages/core/candidate-timeline.js:438` |
@@ -323,7 +325,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from "@kungfu-tech/buildchain";` | `packages/core/github-artifact-attestation.js:91` |
 | `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from "@kungfu-tech/buildchain";` | `packages/core/github-artifact-attestation.js:83` |
 | `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from "@kungfu-tech/buildchain";` | `packages/core/github-artifact-attestation.js:87` |
-| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:165` |
+| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:166` |
 | `GitHubHousekeeperClient` | class: class GitHubHousekeeperClient | none | GitHubHousekeeperClient | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubHousekeeperClient } from "@kungfu-tech/buildchain";` | `packages/core/engineering-housekeeper-github-client.js:54` |
 | `GitHubHousekeeperProviderError` | class: class GitHubHousekeeperProviderError | none | GitHubHousekeeperProviderError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubHousekeeperProviderError } from "@kungfu-tech/buildchain";` | `packages/core/engineering-housekeeper-github-client.js:37` |
 | `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from "@kungfu-tech/buildchain";` | `packages/core/issue-reporting.js:23` |
@@ -332,7 +334,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/homebrew.js:5` |
 | `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/homebrew.js:7` |
 | `HOUSEKEEPER_REASON_CODES` | constant: const HOUSEKEEPER_REASON_CODES | none | value | Import does not declare a throw contract. | none-on-import | `import { HOUSEKEEPER_REASON_CODES } from "@kungfu-tech/buildchain";` | `packages/core/engineering-housekeeper.js:7` |
-| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:49` |
+| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:50` |
 | `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from "@kungfu-tech/buildchain";` | `packages/core/kfd-agent-hub.js:363` |
 | `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from "@kungfu-tech/buildchain";` | `packages/core/kfd-agent-hub.js:384` |
 | `inspectReleasePropagationPushState` | function: function inspectReleasePropagationPushState({ work: workInput, cwd = process.cwd(), remote = "origin", } = {}) | { work: workInput, cwd = process.cwd(), remote = "origin", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { inspectReleasePropagationPushState } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-push.js:174` |
@@ -355,8 +357,8 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/kfd2-product-claims.js:23` |
 | `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/kfd2-product-claims.js:19` |
 | `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/kfd2-product-claims.js:21` |
-| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:53` |
-| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:54` |
+| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:54` |
+| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:55` |
 | `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from "@kungfu-tech/buildchain";` | `packages/core/kfd.js:663` |
 | `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/kfd-gate.js:13` |
 | `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/kfd3-surface-register.js:9` |
@@ -380,7 +382,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `listKfdSchemas` | function: function listKfdSchemas({ standard = "" } = {}) | { standard = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from "@kungfu-tech/buildchain";` | `packages/core/kfd.js:492` |
 | `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-config.js:183` |
 | `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-config.js:1653` |
-| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2962` |
+| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2971` |
 | `MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-pickup.js:16` |
 | `MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-pickup.js:18` |
 | `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = "", stableSha = "", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = "", stableSha = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from "@kungfu-tech/buildchain";` | `packages/core/stable-candidate-ledger.js:229` |
@@ -390,8 +392,8 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from "@kungfu-tech/buildchain";` | `packages/core/candidate-timeline.js:74` |
 | `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = "", acceptedSourceShas = [], expectedRuntimeSha = "", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = "", acceptedSourceShas = [], expectedRuntimeSha = "", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from "@kungfu-tech/buildchain";` | `packages/core/controller-evidence.js:532` |
 | `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from "@kungfu-tech/buildchain";` | `packages/core/github-artifact-attestation.js:158` |
-| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1027` |
-| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1097` |
+| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1028` |
+| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:1098` |
 | `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from "@kungfu-tech/buildchain";` | `packages/core/issue-reporting.js:33` |
 | `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from "@kungfu-tech/buildchain";` | `packages/core/kfd-gate.js:897` |
 | `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from "@kungfu-tech/buildchain";` | `packages/core/kfd-gate.js:738` |
@@ -421,7 +423,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/paper-work.js:17` |
 | `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/paper-work.js:19` |
 | `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from "@kungfu-tech/buildchain";` | `packages/core/paper-fleet.js:290` |
-| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:403` |
+| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:404` |
 | `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from "@kungfu-tech/buildchain";` | `packages/core/issue-reporting.js:41` |
 | `parseReleaseTailDeclaration` | function: function parseReleaseTailDeclaration(input) | input | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseReleaseTailDeclaration } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-plane.js:491` |
 | `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-layout.js:265` |
@@ -434,7 +436,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from "@kungfu-tech/buildchain";` | `packages/core/publish-transaction.js:769` |
 | `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = "", expectedCallerRepository = "", expectedSourceSha = "", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = "", expectedCallerRepository = "", expectedSourceSha = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from "@kungfu-tech/buildchain";` | `packages/core/github-artifact-attestation.js:250` |
 | `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = ".buildchain/publication/npm-package", packageName = "", } = {}) | { cwd = process.cwd(), outputDir = ".buildchain/publication/npm-package", packageName = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from "@kungfu-tech/buildchain";` | `packages/core/publication-package.js:120` |
-| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:51` |
+| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:52` |
 | `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = "", expectedIssuer = "", expectedPublisher = "", expectedContractVersion = "", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = "", expectedIssuer = "", expectedPublisher = "", expectedContractVersion = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from "@kungfu-tech/buildchain";` | `packages/core/artifact-verification-envelope.js:368` |
 | `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/publication-authority.js:10` |
 | `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/publication-artifact.js:9` |
@@ -461,7 +463,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-contract.js:946` |
 | `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from "@kungfu-tech/buildchain";` | `packages/core/logging.js:75` |
 | `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:1468` |
-| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2849` |
+| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2858` |
 | `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from "@kungfu-tech/buildchain";` | `packages/core/kfd2-product-claims.js:137` |
 | `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = "" } = {}) | { cwd = process.cwd(), registryPath = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from "@kungfu-tech/buildchain";` | `packages/core/kfd3-surface-register.js:455` |
 | `readKfdSchema` | function: function readKfdSchema({ standard, schema = "" } = {}) | { standard, schema = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from "@kungfu-tech/buildchain";` | `packages/core/kfd.js:520` |
@@ -477,7 +479,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from "@kungfu-tech/buildchain";` | `packages/core/publish-transaction.js:367` |
 | `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = "" } = {}) | transaction, phaseId, { receiptRoots = [], failure = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from "@kungfu-tech/buildchain";` | `packages/core/release-activation-transaction.js:217` |
 | `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-work-transitions.js:45` |
-| `recoveryFailure` | function: function recoveryFailure(error) | error | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoveryFailure } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate-recovery.js:529` |
+| `recoveryFailure` | function: function recoveryFailure(error) | error | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoveryFailure } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate-recovery.js:584` |
 | `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from "@kungfu-tech/buildchain";` | `packages/core/logging.js:33` |
 | `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:953` |
 | `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from "@kungfu-tech/buildchain";` | `packages/core/issue-reporting.js:51` |
@@ -489,7 +491,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate.js:5` |
 | `RELEASE_CANDIDATE_RECOVERY_CONTRACT` | constant: const RELEASE_CANDIDATE_RECOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_RECOVERY_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate-recovery.js:15` |
 | `RELEASE_CHECK_REPORT_CONTRACT` | value: RELEASE_CHECK_REPORT_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_CHECK_REPORT_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:1` |
-| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:52` |
+| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:53` |
 | `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport-contract.js:19` |
 | `RELEASE_PASSPORT_CONTRACT` | value: RELEASE_PASSPORT_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:1` |
 | `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from "@kungfu-tech/buildchain";` | `packages/core/release-passport-contract.js:26` |
@@ -533,7 +535,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = "", subjectKind = "", npmRegistryBaseUrl = "", } = {}) | subject, { cwd = process.cwd(), subjectDigest = "", subjectKind = "", npmRegistryBaseUrl = "", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from "@kungfu-tech/buildchain";` | `packages/core/artifact-passport.js:368` |
 | `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-layout.js:67` |
 | `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-layout.js:74` |
-| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:609` |
+| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:610` |
 | `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from "@kungfu-tech/buildchain";` | `packages/core/kfd-gate.js:89` |
 | `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-layout.js:81` |
 | `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from "@kungfu-tech/buildchain";` | `packages/core/kfd-gate.js:128` |
@@ -543,7 +545,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation.js:190` |
 | `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from "@kungfu-tech/buildchain";` | `packages/core/publication-artifact-candidate.js:23` |
 | `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-layout.js:92` |
-| `resolveV4FloatingConsumerPolicyAuthority` | function: function resolveV4FloatingConsumerPolicyAuthority({ runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {}) | { runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveV4FloatingConsumerPolicyAuthority } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-policy.js:84` |
+| `resolveV4FloatingConsumerPolicyAuthority` | function: function resolveV4FloatingConsumerPolicyAuthority({ runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {}) | { runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveV4FloatingConsumerPolicyAuthority } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-policy.js:89` |
 | `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-work.js:518` |
 | `revalidateHousekeeperBranchAction` | function: function revalidateHousekeeperBranchAction(action, current, policy = {}) | action, current, policy = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { revalidateHousekeeperBranchAction } from "@kungfu-tech/buildchain";` | `packages/core/engineering-housekeeper.js:223` |
 | `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = "", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from "@kungfu-tech/buildchain";` | `packages/core/stable-candidate-ledger.js:185` |
@@ -552,17 +554,17 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { runLifecycleStage } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-config.js:1524` |
 | `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from "@kungfu-tech/buildchain";` | `packages/core/publication-authority.js:36` |
 | `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/publication-authority.js:14` |
-| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-policy.js:323` |
+| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-policy.js:428` |
 | `scanV4RuntimeSelectorPersistence` | value: scanV4RuntimeSelectorPersistence | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { scanV4RuntimeSelectorPersistence } from "@kungfu-tech/buildchain";` | `packages/core/v4-runtime-ref-resume-authority.js:1` |
 | `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from "@kungfu-tech/buildchain";` | `packages/core/kfd.js:495` |
 | `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from "@kungfu-tech/buildchain";` | `packages/core/artifact-verification-envelope.js:323` |
 | `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = "", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = "", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from "@kungfu-tech/buildchain";` | `packages/core/stable-candidate-ledger.js:206` |
 | `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = "", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from "@kungfu-tech/buildchain";` | `packages/core/stable-candidate-ledger.js:198` |
 | `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-contract.js:89` |
-| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:234` |
+| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:235` |
 | `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate.js:91` |
 | `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from "@kungfu-tech/buildchain";` | `packages/core/kfd-gate.js:50` |
-| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:156` |
+| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:157` |
 | `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from "@kungfu-tech/buildchain";` | `packages/core/artifact-passport.js:34` |
 | `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from "@kungfu-tech/buildchain";` | `packages/core/artifact-passport.js:38` |
 | `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from "@kungfu-tech/buildchain";` | `packages/core/package-manager.js:114` |
@@ -590,8 +592,8 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `V4_RUNTIME_AUTHORIZATION_CONTRACT` | constant: const V4_RUNTIME_AUTHORIZATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { V4_RUNTIME_AUTHORIZATION_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/v4-runtime-ref-resume-authority.js:12` |
 | `V4_RUNTIME_PERSISTENCE_SCAN_CONTRACT` | value: V4_RUNTIME_PERSISTENCE_SCAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { V4_RUNTIME_PERSISTENCE_SCAN_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/v4-runtime-ref-resume-authority.js:1` |
 | `V4_RUNTIME_RESUME_LINEAGE_CONTRACT` | constant: const V4_RUNTIME_RESUME_LINEAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { V4_RUNTIME_RESUME_LINEAGE_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/v4-runtime-ref-resume-authority.js:14` |
-| `v4ConsumerPolicyScannerRoot` | function: function v4ConsumerPolicyScannerRoot(runtimeRoot = defaultRuntimeRoot()) | runtimeRoot = defaultRuntimeRoot() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4ConsumerPolicyScannerRoot } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-policy.js:71` |
-| `v4FloatingConsumerDocumentRoot` | function: function v4FloatingConsumerDocumentRoot(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4FloatingConsumerDocumentRoot } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-evidence.js:124` |
+| `v4ConsumerPolicyScannerRoot` | function: function v4ConsumerPolicyScannerRoot(runtimeRoot = defaultRuntimeRoot()) | runtimeRoot = defaultRuntimeRoot() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4ConsumerPolicyScannerRoot } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-policy.js:76` |
+| `v4FloatingConsumerDocumentRoot` | function: function v4FloatingConsumerDocumentRoot(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4FloatingConsumerDocumentRoot } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-evidence.js:138` |
 | `v4RuntimeResumeDocumentRoot` | function: function v4RuntimeResumeDocumentRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { v4RuntimeResumeDocumentRoot } from "@kungfu-tech/buildchain";` | `packages/core/v4-runtime-ref-resume-authority.js:34` |
 | `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = "platforms-first-main-last", requireTrustedPublishing = true, requireLifecycleStages = ["install", "build", "verify", "publish"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = "platforms-first-main-last", requireTrustedPublishing = true, requireLifecycleStages = ["install", "build", "verify", "publish"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from "@kungfu-tech/buildchain";` | `packages/core/diagnostics.js:325` |
 | `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from "@kungfu-tech/buildchain";` | `packages/core/artifact-signing.js:435` |
@@ -606,7 +608,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from "@kungfu-tech/buildchain";` | `packages/core/kfd-gate.js:1470` |
 | `validateKfdAdopterReleaseBinding` | function: function validateKfdAdopterReleaseBinding(binding, { manifest, manifestGate, legacyProjection, expectedSourceSha = "", } = {}) | binding, { manifest, manifestGate, legacyProjection, expectedSourceSha = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdAdopterReleaseBinding } from "@kungfu-tech/buildchain";` | `packages/core/artifact-verification-envelope.js:467` |
 | `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from "@kungfu-tech/buildchain";` | `packages/core/kfd-product-gates.js:519` |
-| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2974` |
+| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2983` |
 | `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = "" } = {}) | { cwd = process.cwd(), expectedManager = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from "@kungfu-tech/buildchain";` | `packages/core/package-manager.js:18` |
 | `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = "", releaseMaterialSha = releaseSha, publishToolingSha = "", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = "", releaseMaterialSha = releaseSha, publishToolingSha = "", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from "@kungfu-tech/buildchain";` | `packages/core/publish-transaction.js:674` |
 | `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from "@kungfu-tech/buildchain";` | `packages/core/release-activation-transaction.js:376` |
@@ -624,18 +626,18 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from "@kungfu-tech/buildchain";` | `packages/core/cache-evidence.js:226` |
 | `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from "@kungfu-tech/buildchain";` | `packages/core/detached-artifact-signature.js:82` |
 | `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from "@kungfu-tech/buildchain";` | `packages/core/github-artifact-attestation.js:563` |
-| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:886` |
+| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from "@kungfu-tech/buildchain";` | `packages/core/github-governance-authority.js:887` |
 | `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from "@kungfu-tech/buildchain";` | `packages/core/kfd-product-gates.js:262` |
 | `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from "@kungfu-tech/buildchain";` | `packages/core/portable-dev-cache.js:211` |
 | `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from "@kungfu-tech/buildchain";` | `packages/core/publication-authority.js:791` |
 | `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from "@kungfu-tech/buildchain";` | `packages/core/publication-authority.js:1096` |
 | `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = "", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = "", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = "", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = "", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from "@kungfu-tech/buildchain";` | `packages/core/publication-reproducibility.js:869` |
 | `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from "@kungfu-tech/buildchain";` | `packages/core/publication-sealed-bundle.js:133` |
-| `verifyReleaseCandidateRecovery` | function: function verifyReleaseCandidateRecovery({ candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {}) | { candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleaseCandidateRecovery } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate-recovery.js:398` |
-| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2898` |
+| `verifyReleaseCandidateRecovery` | function: function verifyReleaseCandidateRecovery({ candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, anchorProvenance = undefined, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {}) | { candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, anchorProvenance = undefined, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleaseCandidateRecovery } from "@kungfu-tech/buildchain";` | `packages/core/release-candidate-recovery.js:443` |
+| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain";` | `packages/core/release-passport.js:2907` |
 | `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-work.js:486` |
-| `verifyV4FloatingConsumerPolicyCertification` | function: function verifyV4FloatingConsumerPolicyCertification(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyCertification } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-evidence.js:273` |
-| `verifyV4FloatingConsumerPolicyReceipt` | function: function verifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-evidence.js:128` |
+| `verifyV4FloatingConsumerPolicyCertification` | function: function verifyV4FloatingConsumerPolicyCertification(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyCertification } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-evidence.js:287` |
+| `verifyV4FloatingConsumerPolicyReceipt` | function: function verifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-evidence.js:142` |
 | `verifyV4RuntimeAuthorizationReceipt` | function: function verifyV4RuntimeAuthorizationReceipt({ receipt, receiptRoot, repository = "", sourceSha = "", runtimeSha = "", consumerPolicyReceiptRoot = "", } = {}) | { receipt, receiptRoot, repository = "", sourceSha = "", runtimeSha = "", consumerPolicyReceiptRoot = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4RuntimeAuthorizationReceipt } from "@kungfu-tech/buildchain";` | `packages/core/v4-runtime-ref-resume-authority.js:271` |
 | `verifyV4RuntimeResumeLineage` | function: function verifyV4RuntimeResumeLineage({ lineage, lineageRoot, repository = "", sourceSha = "", buildRuntimeSha = "", resumeRuntimeSha = "", consumerPolicyReceiptRoot = "", } = {}) | { lineage, lineageRoot, repository = "", sourceSha = "", buildRuntimeSha = "", resumeRuntimeSha = "", consumerPolicyReceiptRoot = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4RuntimeResumeLineage } from "@kungfu-tech/buildchain";` | `packages/core/v4-runtime-ref-resume-authority.js:551` |
 | `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/web-surface-publication-candidate.js:7` |
@@ -704,19 +706,19 @@ Target: `./packages/core/build-facts.js`. Public symbols: 15.
 
 ## `@kungfu-tech/buildchain/core`
 
-Target: `./packages/core/index.js`. Public symbols: 627.
+Target: `./packages/core/index.js`. Public symbols: 629.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
 | `abortReleaseActivationTransaction` | function: function abortReleaseActivationTransaction(transaction, reason) | transaction, reason | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { abortReleaseActivationTransaction } from "@kungfu-tech/buildchain/core";` | `packages/core/release-activation-transaction.js:277` |
-| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:50` |
+| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:51` |
 | `aggregateBuildFacts` | function: function aggregateBuildFacts({ cwd = process.cwd(), productId = "", moduleFacts = [], artifacts = [], now = nowIso(), } = {}) | { cwd = process.cwd(), productId = "", moduleFacts = [], artifacts = [], now = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | subprocess | `import { aggregateBuildFacts } from "@kungfu-tech/buildchain/core";` | `packages/core/build-facts.js:466` |
 | `aggregateControllerReceipts` | function: function aggregateControllerReceipts({ plans = [], receipts = [] } = {}) | { plans = [], receipts = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { aggregateControllerReceipts } from "@kungfu-tech/buildchain/core";` | `packages/core/controller-evidence.js:449` |
 | `ANCHORED_VERSION_MATERIAL_CONTRACT` | constant: const ANCHORED_VERSION_MATERIAL_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ANCHORED_VERSION_MATERIAL_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/anchored-version-material.js:15` |
 | `appendBuildchainLogEvent` | function: function appendBuildchainLogEvent(filePath, event) | filePath, event | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { appendBuildchainLogEvent } from "@kungfu-tech/buildchain/core";` | `packages/core/logging.js:67` |
 | `applyGitHubHousekeeperPlan` | function: async function applyGitHubHousekeeperPlan({ client, plan, dryRun = true, priorReceipt, appliedAt = new Date().toISOString(), staleDays = DEFAULT_STALE_DAYS, maxActions = DEFAULT_MAX_ACTIONS, }) | { client, plan, dryRun = true, priorReceipt, appliedAt = new Date().toISOString(), staleDays = DEFAULT_STALE_DAYS, maxActions = DEFAULT_MAX_ACTIONS, } | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { applyGitHubHousekeeperPlan } from "@kungfu-tech/buildchain/core";` | `packages/core/engineering-housekeeper-github.js:615` |
 | `applySurfaceTimestampPolicy` | function: function applySurfaceTimestampPolicy(manifest, options = {}) | manifest, options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { applySurfaceTimestampPolicy } from "@kungfu-tech/buildchain/core";` | `packages/core/surface-manifest.js:79` |
-| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:48` |
+| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:49` |
 | `ARTIFACT_PASSPORT_LOCATOR_CONTRACT` | constant: const ARTIFACT_PASSPORT_LOCATOR_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_LOCATOR_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-passport.js:11` |
 | `ARTIFACT_PASSPORT_POINTER_CONTRACT` | constant: const ARTIFACT_PASSPORT_POINTER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_PASSPORT_POINTER_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-passport.js:10` |
 | `ARTIFACT_SIGNING_AUTHORITY_CONTRACT` | constant: const ARTIFACT_SIGNING_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_SIGNING_AUTHORITY_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-signing.js:7` |
@@ -760,8 +762,8 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT` | constant: const BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIAGNOSTICS_SUMMARY_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:35` |
 | `BUILDCHAIN_DIR` | constant: const BUILDCHAIN_DIR | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_DIR } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-layout.js:4` |
 | `BUILDCHAIN_GENERATED_DIRS` | constant: const BUILDCHAIN_GENERATED_DIRS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GENERATED_DIRS } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-layout.js:36` |
-| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1365` |
-| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1367` |
+| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1366` |
+| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1368` |
 | `BUILDCHAIN_JSON_FORMATTING_POLICY` | constant: const BUILDCHAIN_JSON_FORMATTING_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_JSON_FORMATTING_POLICY } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-gate.js:14` |
 | `BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT` | constant: const BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_CLAIM_REGISTRY_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-kfd-claims.js:14` |
 | `BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT` | constant: const BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_KFD_COLLABORATION_INTERFACE_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-kfd-claims.js:15` |
@@ -795,32 +797,33 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `BUILDCHAIN_VERSION_PIN_PATH` | constant: const BUILDCHAIN_VERSION_PIN_PATH | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_VERSION_PIN_PATH } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-layout.js:5` |
 | `BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT` | constant: const BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_WORKFLOW_FRICTION_ISSUE_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/issue-reporting.js:5` |
 | `buildchainKfdClaims` | constant: const buildchainKfdClaims | none | value | Import does not declare a throw contract. | none-on-import | `import { buildchainKfdClaims } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd.js:896` |
-| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-publication-authority.js:62` |
+| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-publication-authority.js:63` |
 | `buildConsumerIssueReport` | function: function buildConsumerIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildConsumerIssueReport } from "@kungfu-tech/buildchain/core";` | `packages/core/issue-reporting.js:104` |
 | `buildFactsDigest` | function: function buildFactsDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write, subprocess | `import { buildFactsDigest } from "@kungfu-tech/buildchain/core";` | `packages/core/build-facts.js:45` |
 | `buildWorkflowFrictionIssueReport` | function: function buildWorkflowFrictionIssueReport(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildWorkflowFrictionIssueReport } from "@kungfu-tech/buildchain/core";` | `packages/core/issue-reporting.js:199` |
 | `cacheEvidenceDigest` | function: function cacheEvidenceDigest(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cacheEvidenceDigest } from "@kungfu-tech/buildchain/core";` | `packages/core/cache-evidence.js:48` |
-| `certifyV4FloatingConsumerPolicyReceipt` | function: function certifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { certifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-evidence.js:188` |
+| `certifyV4FloatingConsumerPolicyReceipt` | function: function certifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { certifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-evidence.js:202` |
 | `CHANNEL_CANDIDATE_DECISION_SCHEMA` | constant: const CHANNEL_CANDIDATE_DECISION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { CHANNEL_CANDIDATE_DECISION_SCHEMA } from "@kungfu-tech/buildchain/core";` | `packages/core/channel-candidate.js:6` |
 | `channelCandidateSourceLockRef` | function: function channelCandidateSourceLockRef(targetBranch, sourceSha) | targetBranch, sourceSha | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { channelCandidateSourceLockRef } from "@kungfu-tech/buildchain/core";` | `packages/core/channel-candidate.js:85` |
 | `checkBadgeBundleBlock` | function: function checkBadgeBundleBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkBadgeBundleBlock } from "@kungfu-tech/buildchain/core";` | `packages/core/readme-badges.js:867` |
 | `checkHomebrewTap` | function: async function checkHomebrewTap({ cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {}) | { cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkHomebrewTap } from "@kungfu-tech/buildchain/core";` | `packages/core/homebrew.js:335` |
 | `checkKfd2ProductClaimOutputs` | function: function checkKfd2ProductClaimOutputs(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkKfd2ProductClaimOutputs } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd2-product-claims.js:415` |
 | `checkReadmeBadgeBlock` | function: function checkReadmeBadgeBlock({ readmeText, facts } = {}) | { readmeText, facts } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { checkReadmeBadgeBlock } from "@kungfu-tech/buildchain/core";` | `packages/core/readme-badges.js:848` |
+| `CI_LANE_CHANGE_BUDGET_CONTRACT` | constant: const CI_LANE_CHANGE_BUDGET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CI_LANE_CHANGE_BUDGET_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/ci-lane-change-budget.js:4` |
 | `claimReleasePropagationWork` | function: function claimReleasePropagationWork({ work, expectedWorkRoot, authority, familyState, } = {}) | { work, expectedWorkRoot, authority, familyState, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { claimReleasePropagationWork } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-work-transitions.js:17` |
 | `classifyHousekeeperBranch` | function: function classifyHousekeeperBranch(branch, policyInput = {}) | branch, policyInput = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyHousekeeperBranch } from "@kungfu-tech/buildchain/core";` | `packages/core/engineering-housekeeper.js:105` |
 | `classifyHousekeeperPullRequest` | function: function classifyHousekeeperPullRequest(pullRequest, policyInput = {}) | pullRequest, policyInput = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyHousekeeperPullRequest } from "@kungfu-tech/buildchain/core";` | `packages/core/engineering-housekeeper.js:144` |
 | `classifyHousekeeperReplay` | function: function classifyHousekeeperReplay(plan, priorReceipt) | plan, priorReceipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyHousekeeperReplay } from "@kungfu-tech/buildchain/core";` | `packages/core/engineering-housekeeper.js:265` |
 | `classifyProcessCommand` | function: function classifyProcessCommand(command = "") | command = "" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyProcessCommand } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:1085` |
 | `classifyReleasePropagationCondition` | function: function classifyReleasePropagationCondition(condition) | condition | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { classifyReleasePropagationCondition } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-agent-entry.js:171` |
-| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:419` |
+| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:420` |
 | `collectBadgeBundleFacts` | function: async function collectBadgeBundleFacts({ cwd = process.cwd(), claims = undefined } = {}) | { cwd = process.cwd(), claims = undefined } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBadgeBundleFacts } from "@kungfu-tech/buildchain/core";` | `packages/core/readme-badges.js:790` |
 | `collectBuildchainDiagnostics` | function: function collectBuildchainDiagnostics({ cwd = process.cwd(), artifactPaths = [] } = {}) | { cwd = process.cwd(), artifactPaths = [] } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectBuildchainDiagnostics } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:248` |
 | `collectCacheDiagnostics` | function: function collectCacheDiagnostics({ cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {}) | { cwd = process.cwd(), cacheDirs = [], runCommand = defaultDiagnosticCommandRunner } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCacheDiagnostics } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:922` |
 | `collectCompilerCacheDiagnostics` | function: function collectCompilerCacheDiagnostics({ cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {}) | { cwd = process.cwd(), runCommand = defaultDiagnosticCommandRunner, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectCompilerCacheDiagnostics } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:573` |
 | `collectGitDiagnostics` | function: function collectGitDiagnostics({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitDiagnostics } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:944` |
 | `collectGitHubHousekeeperInventory` | function: async function collectGitHubHousekeeperInventory({ client, repository, targetBranch, observedAt, staleDays = DEFAULT_STALE_DAYS, policy = {}, }) | { client, repository, targetBranch, observedAt, staleDays = DEFAULT_STALE_DAYS, policy = {}, } | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { collectGitHubHousekeeperInventory } from "@kungfu-tech/buildchain/core";` | `packages/core/engineering-housekeeper-github.js:246` |
-| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:1575` |
+| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:1584` |
 | `collectGitSourceFacts` | function: function collectGitSourceFacts({ cwd = process.cwd(), root = "." } = {}) | { cwd = process.cwd(), root = "." } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitSourceFacts } from "@kungfu-tech/buildchain/core";` | `packages/core/build-facts.js:154` |
 | `collectHomebrewTapFacts` | function: async function collectHomebrewTapFacts({ cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {}) | { cwd = process.cwd(), packageName = "buildchain", releasePassport = "", manifestPath = DEFAULT_MANIFEST_PATH, formulaPath = "", } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectHomebrewTapFacts } from "@kungfu-tech/buildchain/core";` | `packages/core/homebrew.js:223` |
 | `collectKfdStatus` | function: function collectKfdStatus({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectKfdStatus } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd.js:902` |
@@ -840,7 +843,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `commandForKungfuUpgrade` | function: function commandForKungfuUpgrade(manager, scope = "@kungfu-trader") | manager, scope = "@kungfu-trader" | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForKungfuUpgrade } from "@kungfu-tech/buildchain/core";` | `packages/core/package-manager.js:121` |
 | `commandForRunScript` | function: function commandForRunScript(manager, script) | manager, script | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForRunScript } from "@kungfu-tech/buildchain/core";` | `packages/core/package-manager.js:89` |
 | `commandForVersion` | function: function commandForVersion(manager, keyword, options = {}) | manager, keyword, options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { commandForVersion } from "@kungfu-tech/buildchain/core";` | `packages/core/package-manager.js:100` |
-| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:313` |
+| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:314` |
 | `compileReleaseTailDeclaration` | function: function compileReleaseTailDeclaration(input) | input | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileReleaseTailDeclaration } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-plane.js:584` |
 | `completeReleasePropagationWork` | function: function completeReleasePropagationWork({ work, expectedWorkRoot, receipt, completionDecision, } = {}) | { work, expectedWorkRoot, receipt, completionDecision, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { completeReleasePropagationWork } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-work-transitions.js:110` |
 | `computeConsumerIssueFingerprint` | function: function computeConsumerIssueFingerprint(fields = {}) | fields = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { computeConsumerIssueFingerprint } from "@kungfu-tech/buildchain/core";` | `packages/core/issue-reporting.js:64` |
@@ -850,13 +853,13 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `controllerEvidenceDigest` | function: function controllerEvidenceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { controllerEvidenceDigest } from "@kungfu-tech/buildchain/core";` | `packages/core/controller-evidence.js:151` |
 | `createActivationReceiptProjectorAdapter` | function: function createActivationReceiptProjectorAdapter(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createActivationReceiptProjectorAdapter } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-adapters.js:181` |
 | `createAnchoredVersionMaterialEvidence` | function: function createAnchoredVersionMaterialEvidence({ cwd = process.cwd(), targetChannel = "", targetRef = "", alphaRef = "", releaseRef = "HEAD", runLifecycle = true, } = {}) | { cwd = process.cwd(), targetChannel = "", targetRef = "", alphaRef = "", releaseRef = "HEAD", runLifecycle = true, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createAnchoredVersionMaterialEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/anchored-version-material.js:118` |
-| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {}) | { assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:1240` |
+| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {}) | { assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:1249` |
 | `createArtifactSigningReceipt` | function: function createArtifactSigningReceipt({ request, status = "passed", authority = {}, result = {}, signatures = [], reason = "", } = {}) | { request, status = "passed", authority = {}, result = {}, signatures = [], reason = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-signing.js:374` |
 | `createArtifactSigningRequest` | function: function createArtifactSigningRequest({ source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {}) | { source = {}, runtime = {}, artifact = {}, signature = {}, delivery = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningRequest } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-signing.js:226` |
 | `createArtifactSigningResult` | function: function createArtifactSigningResult({ request, receipt, receiptPath = "receipt.json", payload = {}, evidence = [], verification = {}, } = {}) | { request, receipt, receiptPath = "receipt.json", payload = {}, evidence = [], verification = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createArtifactSigningResult } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-signing-result.js:68` |
 | `createBuildchainContractLock` | function: function createBuildchainContractLock({ buildchainRef = "v3", resolvedSha = "", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {}) | { buildchainRef = "v3", resolvedSha = "", contractWorld, compatibilityPolicy = DEFAULT_POLICY, acceptedAt = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createBuildchainContractLock } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-contract.js:910` |
 | `createBuildchainContractWorld` | function: function createBuildchainContractWorld({ root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {}) | { root = process.cwd(), packageJson = undefined, controllerRegistry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainContractWorld } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-contract.js:169` |
-| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:452` |
+| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:453` |
 | `createBuildchainKfd1Witness` | function: function createBuildchainKfd1Witness({ root = process.cwd(), sourceSha = "" } = {}) | { root = process.cwd(), sourceSha = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd1Witness } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-kfd-claims.js:530` |
 | `createBuildchainKfd2Claims` | function: function createBuildchainKfd2Claims({ root = process.cwd(), witnessFiles = {} } = {}) | { root = process.cwd(), witnessFiles = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd2Claims } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-kfd-claims.js:687` |
 | `createBuildchainKfd3ArtifactWitness` | function: function createBuildchainKfd3ArtifactWitness({ root = process.cwd(), sourceSha = "" } = {}) | { root = process.cwd(), sourceSha = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfd3ArtifactWitness } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-kfd-claims.js:647` |
@@ -865,7 +868,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `createBuildchainKfdSurfaceRegistry` | function: function createBuildchainKfdSurfaceRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainKfdSurfaceRegistry } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-kfd-claims.js:411` |
 | `createBuildchainLayoutDiscovery` | function: function createBuildchainLayoutDiscovery({ cwd = process.cwd(), buildchainVersion = "", } = {}) | { cwd = process.cwd(), buildchainVersion = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainLayoutDiscovery } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-layout.js:99` |
 | `createBuildchainLogger` | function: function createBuildchainLogger(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createBuildchainLogger } from "@kungfu-tech/buildchain/core";` | `packages/core/logging.js:300` |
-| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-publication-authority.js:86` |
+| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-publication-authority.js:87` |
 | `createBuildchainPublicClaimDefinitions` | function: function createBuildchainPublicClaimDefinitions() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicClaimDefinitions } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-kfd-claims.js:226` |
 | `createCacheEvidenceSet` | function: function createCacheEvidenceSet({ repository, sourceCommit, sourceTree = "", runtimeCommit = "", platform, operations = [], } = {}) | { repository, sourceCommit, sourceTree = "", runtimeCommit = "", platform, operations = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheEvidenceSet } from "@kungfu-tech/buildchain/core";` | `packages/core/cache-evidence.js:244` |
 | `createCacheOperationReceipt` | function: function createCacheOperationReceipt({ operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {}) | { operationId, operation, provider, producer, platform, cacheKey, cacheRoot, outcome, bindings = {}, metrics, evidence, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createCacheOperationReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/cache-evidence.js:169` |
@@ -881,11 +884,11 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `createGitHubArtifactAttestationEvidence` | function: function createGitHubArtifactAttestationEvidence({ preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {}) | { preparation, attestationId, attestationUrl, bundlePath, workflow = {}, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/github-artifact-attestation.js:474` |
 | `createGitHubArtifactAttestationPolicy` | function: function createGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationPolicy } from "@kungfu-tech/buildchain/core";` | `packages/core/github-artifact-attestation.js:204` |
 | `createGitHubArtifactAttestationVerificationPlan` | function: function createGitHubArtifactAttestationVerificationPlan({ artifactPath, bundlePath, evidence, } = {}) | { artifactPath, bundlePath, evidence, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubArtifactAttestationVerificationPlan } from "@kungfu-tech/buildchain/core";` | `packages/core/github-artifact-attestation.js:524` |
-| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:934` |
+| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:935` |
 | `createGitHubIssueRequest` | function: function createGitHubIssueRequest({ token, apiUrl = process.env.GITHUB_API_URL \|\| "https://api.github.com", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {}) | { token, apiUrl = process.env.GITHUB_API_URL \|\| "https://api.github.com", fetchImpl = globalThis.fetch, retryDelaysMs = DEFAULT_RETRY_DELAYS_MS, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubIssueRequest } from "@kungfu-tech/buildchain/core";` | `packages/core/issue-reporting.js:393` |
 | `createGitHubReleaseAssetsAdapter` | function: function createGitHubReleaseAssetsAdapter({ octokit, resolveArtifact, } = {}) | { octokit, resolveArtifact, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGitHubReleaseAssetsAdapter } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-adapters.js:310` |
-| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1112` |
-| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1191` |
+| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1113` |
+| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1192` |
 | `createHttpJsonReadback` | function: function createHttpJsonReadback({ fetchImpl = globalThis.fetch } = {}) | { fetchImpl = globalThis.fetch } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createHttpJsonReadback } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-adapters.js:191` |
 | `createKfd1ReleaseGateEvidence` | function: function createKfd1ReleaseGateEvidence({ cwd = process.cwd(), artifactRoot = "", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {}) | { cwd = process.cwd(), artifactRoot = "", artifacts = [], witnesses = [], verifiedAt = new Date().toISOString(), metadata = resolveKfd1Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd1ReleaseGateEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-gate.js:977` |
 | `createKfd3CollaborationInterfaceReleaseGateEvidence` | function: function createKfd3CollaborationInterfaceReleaseGateEvidence({ prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {}) | { prebuildWitnesses = [], artifactWitnesses = [], prebuildWitnessMetas = [], artifactWitnessMetas = [], artifactCommandMeta = undefined, verifiedAt = new Date().toISOString(), metadata = resolveKfd3Metadata(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createKfd3CollaborationInterfaceReleaseGateEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-gate.js:1132` |
@@ -916,8 +919,8 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `createReleaseActivationReceiptSet` | function: function createReleaseActivationReceiptSet({ transaction, receipts = [], } = {}) | { transaction, receipts = [], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationReceiptSet } from "@kungfu-tech/buildchain/core";` | `packages/core/release-activation-transaction.js:311` |
 | `createReleaseActivationTransaction` | function: function createReleaseActivationTransaction({ transactionId, mode = "shadow", bindings, owners, } = {}) | { transactionId, mode = "shadow", bindings, owners, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseActivationTransaction } from "@kungfu-tech/buildchain/core";` | `packages/core/release-activation-transaction.js:103` |
 | `createReleaseCandidatePassport` | function: function createReleaseCandidatePassport({ repository = "", pullRequest = {}, targetChannel = "", version = "", sourceHeadSha = "", baseSha = "", mergeRefSha = "", sourceTreeHash = "", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, consumerPolicyReceipt = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {}) | { repository = "", pullRequest = {}, targetChannel = "", version = "", sourceHeadSha = "", baseSha = "", mergeRefSha = "", sourceTreeHash = "", buildSummary = {}, buildchain = {}, gateAggregate = undefined, familyEvidence = undefined, consumerPolicyReceipt = undefined, controllerReceipts = [], controllerReceiptReferences = [], workflow = {}, createdAt = nowIso(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseCandidatePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate.js:369` |
-| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2777` |
-| `createReleasePassport` | function: function createReleasePassport(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { createReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:1275` |
+| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2786` |
+| `createReleasePassport` | function: function createReleasePassport(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { createReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:1284` |
 | `createReleasePassportCheckManifest` | function: function createReleasePassportCheckManifest({ standards = kfdStandards } = {}) | { standards = kfdStandards } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePassportCheckManifest } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport-contract.js:159` |
 | `createReleasePropagationLock` | function: function createReleasePropagationLock({ graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {}) | { graph, edge, sourceNode, targetNode, upstreamRelease, downstreamChannel, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleasePropagationLock } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation.js:199` |
 | `createReleasePropagationPushPlan` | function: function createReleasePropagationPushPlan({ work: workInput, expectedWorkRoot, repositoryState: stateInput, } = {}) | { work: workInput, expectedWorkRoot, repositoryState: stateInput, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { createReleasePropagationPushPlan } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-push.js:77` |
@@ -964,8 +967,9 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `enumerateSitePages` | function: function enumerateSitePages({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateSitePages } from "@kungfu-tech/buildchain/core";` | `packages/core/public-surface-audit.js:106` |
 | `enumerateWorkflowInputs` | function: function enumerateWorkflowInputs({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { enumerateWorkflowInputs } from "@kungfu-tech/buildchain/core";` | `packages/core/public-surface-audit.js:74` |
 | `evaluateBuildchainContractLock` | function: function evaluateBuildchainContractLock(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateBuildchainContractLock } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-contract.js:977` |
-| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:427` |
-| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:696` |
+| `evaluateCiLaneChangeBudget` | function: function evaluateCiLaneChangeBudget({ policy, workflows, baselineWorkflows = null, } = {}) | { policy, workflows, baselineWorkflows = null, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateCiLaneChangeBudget } from "@kungfu-tech/buildchain/core";` | `packages/core/ci-lane-change-budget.js:180` |
+| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:428` |
+| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:697` |
 | `evaluateKfdProductGate` | function: async function evaluateKfdProductGate({ cwd = process.cwd(), input, expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {}) | { cwd = process.cwd(), input, expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateKfdProductGate } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-product-gates.js:419` |
 | `evaluatePublicationControlPlaneSnapshot` | function: function evaluatePublicationControlPlaneSnapshot({ repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = "npm-trusted-publisher", requiredStatusCheck = "check", snapshot, observedAt, expiresAt, } = {}) | { repository, workflowPath, publisherWorkflowPath = workflowPath, environment, branch, packageName, publisherMode = "npm-trusted-publisher", requiredStatusCheck = "check", snapshot, observedAt, expiresAt, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluatePublicationControlPlaneSnapshot } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-control-plane-audit.js:75` |
 | `executePaperNpmBootstrap` | function: function executePaperNpmBootstrap(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { executePaperNpmBootstrap } from "@kungfu-tech/buildchain/core";` | `packages/core/paper.js:2852` |
@@ -976,7 +980,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `explainArtifactPassport` | function: async function explainArtifactPassport(options = {}) | options = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainArtifactPassport } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-passport.js:827` |
 | `explainKfdAgentHub` | function: function explainKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainKfdAgentHub } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-agent-hub.js:470` |
 | `explainReleaseLineDryRun` | function: function explainReleaseLineDryRun({ cwd = process.cwd(), targetRef, sha = "", sourceRef = "", tags, publishTransaction = false, publishCommand = "", } = {}) | { cwd = process.cwd(), targetRef, sha = "", sourceRef = "", tags, publishTransaction = false, publishCommand = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { explainReleaseLineDryRun } from "@kungfu-tech/buildchain/core";` | `packages/core/release-line-dry-run.js:127` |
-| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2933` |
+| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2942` |
 | `FAMILY_RELEASE_EVIDENCE_CONTRACT` | constant: const FAMILY_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { FAMILY_RELEASE_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate.js:6` |
 | `finalizeBuildchainContractWorld` | function: function finalizeBuildchainContractWorld(contractWorld) | contractWorld | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { finalizeBuildchainContractWorld } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-contract.js:851` |
 | `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from "@kungfu-tech/buildchain/core";` | `packages/core/candidate-timeline.js:438` |
@@ -1003,7 +1007,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `githubArtifactAttestationSemanticRoot` | function: function githubArtifactAttestationSemanticRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSemanticRoot } from "@kungfu-tech/buildchain/core";` | `packages/core/github-artifact-attestation.js:91` |
 | `githubArtifactAttestationSha256Buffer` | function: function githubArtifactAttestationSha256Buffer(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256Buffer } from "@kungfu-tech/buildchain/core";` | `packages/core/github-artifact-attestation.js:83` |
 | `githubArtifactAttestationSha256File` | function: function githubArtifactAttestationSha256File(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubArtifactAttestationSha256File } from "@kungfu-tech/buildchain/core";` | `packages/core/github-artifact-attestation.js:87` |
-| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:165` |
+| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:166` |
 | `GitHubHousekeeperClient` | class: class GitHubHousekeeperClient | none | GitHubHousekeeperClient | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubHousekeeperClient } from "@kungfu-tech/buildchain/core";` | `packages/core/engineering-housekeeper-github-client.js:54` |
 | `GitHubHousekeeperProviderError` | class: class GitHubHousekeeperProviderError | none | GitHubHousekeeperProviderError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubHousekeeperProviderError } from "@kungfu-tech/buildchain/core";` | `packages/core/engineering-housekeeper-github-client.js:37` |
 | `GitHubIssueRequestError` | class: class GitHubIssueRequestError | none | GitHubIssueRequestError | Construction and method errors follow the linked source implementation. | class-dependent | `import { GitHubIssueRequestError } from "@kungfu-tech/buildchain/core";` | `packages/core/issue-reporting.js:23` |
@@ -1012,7 +1016,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `HOMEBREW_TAP_FACTS_CONTRACT` | constant: const HOMEBREW_TAP_FACTS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_FACTS_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/homebrew.js:5` |
 | `HOMEBREW_TAP_MANIFEST_CONTRACT` | constant: const HOMEBREW_TAP_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { HOMEBREW_TAP_MANIFEST_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/homebrew.js:7` |
 | `HOUSEKEEPER_REASON_CODES` | constant: const HOUSEKEEPER_REASON_CODES | none | value | Import does not declare a throw contract. | none-on-import | `import { HOUSEKEEPER_REASON_CODES } from "@kungfu-tech/buildchain/core";` | `packages/core/engineering-housekeeper.js:7` |
-| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:49` |
+| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:50` |
 | `initKfdAgentHub` | function: function initKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, write = false, force = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { initKfdAgentHub } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-agent-hub.js:363` |
 | `inspectKfdAgentHub` | function: function inspectKfdAgentHub({ cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {}) | { cwd = process.cwd(), declarationPath = KFD_AGENT_HUB_DECLARATION, kfdRoot = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { inspectKfdAgentHub } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-agent-hub.js:384` |
 | `inspectReleasePropagationPushState` | function: function inspectReleasePropagationPushState({ work: workInput, cwd = process.cwd(), remote = "origin", } = {}) | { work: workInput, cwd = process.cwd(), remote = "origin", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | subprocess | `import { inspectReleasePropagationPushState } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-push.js:174` |
@@ -1035,8 +1039,8 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_OUTPUT_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd2-product-claims.js:23` |
 | `KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_REGISTRY_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd2-product-claims.js:19` |
 | `KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT` | constant: const KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_PRODUCT_CLAIMS_VALIDATION_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd2-product-claims.js:21` |
-| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:53` |
-| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:54` |
+| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:54` |
+| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:55` |
 | `kfd3` | constant: const kfd3 | none | value | Import does not declare a throw contract. | none-on-import | `import { kfd3 } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd.js:663` |
 | `KFD3_ARTIFACT_WITNESS_CONTRACT` | constant: const KFD3_ARTIFACT_WITNESS_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_ARTIFACT_WITNESS_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-gate.js:13` |
 | `KFD3_CAPABILITY_QUERY_CONTRACT` | constant: const KFD3_CAPABILITY_QUERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD3_CAPABILITY_QUERY_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd3-surface-register.js:9` |
@@ -1060,7 +1064,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `listKfdSchemas` | function: function listKfdSchemas({ standard = "" } = {}) | { standard = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { listKfdSchemas } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd.js:492` |
 | `loadBuildchainConfig` | function: function loadBuildchainConfig(cwd = process.cwd()) | cwd = process.cwd() | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadBuildchainConfig } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-config.js:183` |
 | `loadConfiguredAnchorManifest` | function: function loadConfiguredAnchorManifest(cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd)) | cwd = process.cwd(), loadedConfig = loadBuildchainConfig(cwd) | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { loadConfiguredAnchorManifest } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-config.js:1653` |
-| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2962` |
+| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2971` |
 | `MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_CONFIG_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-pickup.js:16` |
 | `MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT` | constant: const MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { MANUAL_UPSTREAM_PICKUP_PLAN_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-pickup.js:18` |
 | `markStableCandidatePromoted` | function: function markStableCandidatePromoted(ledgerInput, versionInput, { stableTag = "", stableSha = "", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { stableTag = "", stableSha = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { markStableCandidatePromoted } from "@kungfu-tech/buildchain/core";` | `packages/core/stable-candidate-ledger.js:229` |
@@ -1070,8 +1074,8 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from "@kungfu-tech/buildchain/core";` | `packages/core/candidate-timeline.js:74` |
 | `normalizeControllerReceiptReferences` | function: function normalizeControllerReceiptReferences({ receipts = [], references = [], expectedSourceSha = "", acceptedSourceShas = [], expectedRuntimeSha = "", requirePassed = false, } = {}) | { receipts = [], references = [], expectedSourceSha = "", acceptedSourceShas = [], expectedRuntimeSha = "", requirePassed = false, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeControllerReceiptReferences } from "@kungfu-tech/buildchain/core";` | `packages/core/controller-evidence.js:532` |
 | `normalizeGitHubArtifactAttestationPolicy` | function: function normalizeGitHubArtifactAttestationPolicy(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeGitHubArtifactAttestationPolicy } from "@kungfu-tech/buildchain/core";` | `packages/core/github-artifact-attestation.js:158` |
-| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1027` |
-| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1097` |
+| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1028` |
+| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:1098` |
 | `normalizeIssueRepository` | function: function normalizeIssueRepository(repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY) | repository = DEFAULT_BUILDCHAIN_ISSUE_REPOSITORY | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeIssueRepository } from "@kungfu-tech/buildchain/core";` | `packages/core/issue-reporting.js:33` |
 | `normalizeKfd1ContractWorldWitness` | function: function normalizeKfd1ContractWorldWitness(witness, { metadata = resolveKfd1Metadata() } = {}) | witness, { metadata = resolveKfd1Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd1ContractWorldWitness } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-gate.js:897` |
 | `normalizeKfd3CollaborationInterfaceArtifactWitness` | function: function normalizeKfd3CollaborationInterfaceArtifactWitness(witness, { metadata = resolveKfd3Metadata() } = {}) | witness, { metadata = resolveKfd3Metadata() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeKfd3CollaborationInterfaceArtifactWitness } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-gate.js:738` |
@@ -1101,7 +1105,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `PAPER_WORK_START_PLAN_CONTRACT` | constant: const PAPER_WORK_START_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_START_PLAN_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/paper-work.js:17` |
 | `PAPER_WORK_SUBMIT_PLAN_CONTRACT` | constant: const PAPER_WORK_SUBMIT_PLAN_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PAPER_WORK_SUBMIT_PLAN_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/paper-work.js:19` |
 | `paperFleetTransitionWorkspace` | function: function paperFleetTransitionWorkspace(workspaceText, lockText) | workspaceText, lockText | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { paperFleetTransitionWorkspace } from "@kungfu-tech/buildchain/core";` | `packages/core/paper-fleet.js:290` |
-| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:403` |
+| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:404` |
 | `parseIssueLabels` | function: function parseIssueLabels(input = DEFAULT_LABELS) | input = DEFAULT_LABELS | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseIssueLabels } from "@kungfu-tech/buildchain/core";` | `packages/core/issue-reporting.js:41` |
 | `parseReleaseTailDeclaration` | function: function parseReleaseTailDeclaration(input) | input | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseReleaseTailDeclaration } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-plane.js:491` |
 | `planBuildchainLayoutMigration` | function: function planBuildchainLayoutMigration({ cwd = process.cwd() } = {}) | { cwd = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planBuildchainLayoutMigration } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-layout.js:265` |
@@ -1114,7 +1118,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `planTransactionRecovery` | function: function planTransactionRecovery({ transaction, evidence, validation, explicitOverride = false, } = {}) | { transaction, evidence, validation, explicitOverride = false, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { planTransactionRecovery } from "@kungfu-tech/buildchain/core";` | `packages/core/publish-transaction.js:769` |
 | `prepareGitHubArtifactAttestation` | function: function prepareGitHubArtifactAttestation({ subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = "", expectedCallerRepository = "", expectedSourceSha = "", } = {}) | { subjectPath, platformManifestPath, releasePassportPath, policy, expectedBuildchainRef = "", expectedCallerRepository = "", expectedSourceSha = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { prepareGitHubArtifactAttestation } from "@kungfu-tech/buildchain/core";` | `packages/core/github-artifact-attestation.js:250` |
 | `preparePublicationNpmPackage` | function: function preparePublicationNpmPackage({ cwd = process.cwd(), outputDir = ".buildchain/publication/npm-package", packageName = "", } = {}) | { cwd = process.cwd(), outputDir = ".buildchain/publication/npm-package", packageName = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { preparePublicationNpmPackage } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-package.js:120` |
-| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:51` |
+| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:52` |
 | `projectArtifactVerificationEnvelopeToKfx` | function: function projectArtifactVerificationEnvelopeToKfx({ envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = "", expectedIssuer = "", expectedPublisher = "", expectedContractVersion = "", } = {}) | { envelope, assessmentTime = Math.floor(Date.now() / 1000), expectedEnvelopeRoot = "", expectedIssuer = "", expectedPublisher = "", expectedContractVersion = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { projectArtifactVerificationEnvelopeToKfx } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-verification-envelope.js:368` |
 | `PUBLICATION_ADMISSION_CONTRACT` | constant: const PUBLICATION_ADMISSION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ADMISSION_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-authority.js:10` |
 | `PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT` | constant: const PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PUBLICATION_ARTIFACT_ARCHIVE_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-artifact.js:9` |
@@ -1141,7 +1145,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `readBuildchainContractWorld` | function: function readBuildchainContractWorld(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readBuildchainContractWorld } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-contract.js:946` |
 | `readBuildchainLogEvents` | function: function readBuildchainLogEvents(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readBuildchainLogEvents } from "@kungfu-tech/buildchain/core";` | `packages/core/logging.js:75` |
 | `readDiagnosticsArtifact` | function: function readDiagnosticsArtifact(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readDiagnosticsArtifact } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:1468` |
-| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2849` |
+| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2858` |
 | `readKfd2ProductClaimsRegistry` | function: function readKfd2ProductClaimsRegistry({ cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {}) | { cwd = process.cwd(), registryPath = BUILDCHAIN_KFD2_REGISTRY_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfd2ProductClaimsRegistry } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd2-product-claims.js:137` |
 | `readKfd3SurfaceRegistry` | function: function readKfd3SurfaceRegistry({ cwd = process.cwd(), registryPath = "" } = {}) | { cwd = process.cwd(), registryPath = "" } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readKfd3SurfaceRegistry } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd3-surface-register.js:455` |
 | `readKfdSchema` | function: function readKfdSchema({ standard, schema = "" } = {}) | { standard, schema = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readKfdSchema } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd.js:520` |
@@ -1157,7 +1161,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `readReleaseTransaction` | function: function readReleaseTransaction(filePath) | filePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { readReleaseTransaction } from "@kungfu-tech/buildchain/core";` | `packages/core/publish-transaction.js:367` |
 | `recordReleaseActivationPhase` | function: function recordReleaseActivationPhase(transaction, phaseId, { receiptRoots = [], failure = "" } = {}) | transaction, phaseId, { receiptRoots = [], failure = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleaseActivationPhase } from "@kungfu-tech/buildchain/core";` | `packages/core/release-activation-transaction.js:217` |
 | `recordReleasePropagationStage` | function: function recordReleasePropagationStage({ work, expectedWorkRoot, receipt } = {}) | { work, expectedWorkRoot, receipt } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { recordReleasePropagationStage } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-work-transitions.js:45` |
-| `recoveryFailure` | function: function recoveryFailure(error) | error | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoveryFailure } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate-recovery.js:529` |
+| `recoveryFailure` | function: function recoveryFailure(error) | error | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoveryFailure } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate-recovery.js:584` |
 | `redactBuildchainLogAttributes` | function: function redactBuildchainLogAttributes(attributes = {}) | attributes = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactBuildchainLogAttributes } from "@kungfu-tech/buildchain/core";` | `packages/core/logging.js:33` |
 | `redactDiagnosticsValue` | function: function redactDiagnosticsValue(key, value, pattern = DEFAULT_SECRET_KEY_PATTERN) | key, value, pattern = DEFAULT_SECRET_KEY_PATTERN | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { redactDiagnosticsValue } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:953` |
 | `redactIssueText` | function: function redactIssueText(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { redactIssueText } from "@kungfu-tech/buildchain/core";` | `packages/core/issue-reporting.js:51` |
@@ -1169,7 +1173,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `RELEASE_CANDIDATE_PASSPORT_CONTRACT` | constant: const RELEASE_CANDIDATE_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate.js:5` |
 | `RELEASE_CANDIDATE_RECOVERY_CONTRACT` | constant: const RELEASE_CANDIDATE_RECOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_RECOVERY_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate-recovery.js:15` |
 | `RELEASE_CHECK_REPORT_CONTRACT` | value: RELEASE_CHECK_REPORT_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_CHECK_REPORT_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:1` |
-| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:52` |
+| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:53` |
 | `RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT` | constant: const RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_CHECK_MANIFEST_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport-contract.js:19` |
 | `RELEASE_PASSPORT_CONTRACT` | value: RELEASE_PASSPORT_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:1` |
 | `RELEASE_PASSPORT_SCHEMA` | constant: const RELEASE_PASSPORT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PASSPORT_SCHEMA } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport-contract.js:26` |
@@ -1213,7 +1217,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `resolveArtifactSubject` | function: async function resolveArtifactSubject(subject, { cwd = process.cwd(), subjectDigest = "", subjectKind = "", npmRegistryBaseUrl = "", } = {}) | subject, { cwd = process.cwd(), subjectDigest = "", subjectKind = "", npmRegistryBaseUrl = "", } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveArtifactSubject } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-passport.js:368` |
 | `resolveBuildchainConfigPath` | function: function resolveBuildchainConfigPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainConfigPath } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-layout.js:67` |
 | `resolveBuildchainContractLockPath` | function: function resolveBuildchainContractLockPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveBuildchainContractLockPath } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-layout.js:74` |
-| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:609` |
+| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:610` |
 | `resolveKfd1Metadata` | function: function resolveKfd1Metadata() | none | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd1Metadata } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-gate.js:89` |
 | `resolveKfd2ProductClaimsRegistryPath` | function: function resolveKfd2ProductClaimsRegistryPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveKfd2ProductClaimsRegistryPath } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-layout.js:81` |
 | `resolveKfd3Metadata` | function: function resolveKfd3Metadata({ requireSchemas = false } = {}) | { requireSchemas = false } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveKfd3Metadata } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-gate.js:128` |
@@ -1223,7 +1227,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `resolvePropagationChannel` | function: function resolvePropagationChannel(edge, upstreamChannel) | edge, upstreamChannel | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolvePropagationChannel } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation.js:190` |
 | `resolvePublicationCandidateFile` | function: function resolvePublicationCandidateFile(files = [], candidatePath) | files = [], candidatePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolvePublicationCandidateFile } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-artifact-candidate.js:23` |
 | `resolveReleasePassportPath` | function: function resolveReleasePassportPath(cwd = process.cwd()) | cwd = process.cwd() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveReleasePassportPath } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-layout.js:92` |
-| `resolveV4FloatingConsumerPolicyAuthority` | function: function resolveV4FloatingConsumerPolicyAuthority({ runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {}) | { runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveV4FloatingConsumerPolicyAuthority } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-policy.js:84` |
+| `resolveV4FloatingConsumerPolicyAuthority` | function: function resolveV4FloatingConsumerPolicyAuthority({ runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {}) | { runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveV4FloatingConsumerPolicyAuthority } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-policy.js:89` |
 | `resumeReleasePropagationWork` | function: function resumeReleasePropagationWork(work) | work | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resumeReleasePropagationWork } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-work.js:518` |
 | `revalidateHousekeeperBranchAction` | function: function revalidateHousekeeperBranchAction(action, current, policy = {}) | action, current, policy = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { revalidateHousekeeperBranchAction } from "@kungfu-tech/buildchain/core";` | `packages/core/engineering-housekeeper.js:223` |
 | `revokeStableCandidate` | function: function revokeStableCandidate(ledgerInput, versionInput, { reason, actor = "", now = new Date().toISOString() } = {}) | ledgerInput, versionInput, { reason, actor = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { revokeStableCandidate } from "@kungfu-tech/buildchain/core";` | `packages/core/stable-candidate-ledger.js:185` |
@@ -1232,17 +1236,17 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { runLifecycleStage } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-config.js:1524` |
 | `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-authority.js:36` |
 | `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-authority.js:14` |
-| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-policy.js:323` |
+| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-policy.js:428` |
 | `scanV4RuntimeSelectorPersistence` | value: scanV4RuntimeSelectorPersistence | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { scanV4RuntimeSelectorPersistence } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-runtime-ref-resume-authority.js:1` |
 | `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd.js:495` |
 | `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-verification-envelope.js:323` |
 | `selectStableCandidate` | function: function selectStableCandidate(ledgerInput, { releaseNow = "", now = new Date().toISOString() } = {}) | ledgerInput, { releaseNow = "", now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { selectStableCandidate } from "@kungfu-tech/buildchain/core";` | `packages/core/stable-candidate-ledger.js:206` |
 | `setStableCandidateHold` | function: function setStableCandidateHold(ledgerInput, enabled, { reason = "", now = new Date().toISOString() } = {}) | ledgerInput, enabled, { reason = "", now = new Date().toISOString() } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { setStableCandidateHold } from "@kungfu-tech/buildchain/core";` | `packages/core/stable-candidate-ledger.js:198` |
 | `sha256BuildchainContractJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256BuildchainContractJson } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-contract.js:89` |
-| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:234` |
+| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:235` |
 | `sha256Json` | function: function sha256Json(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Json } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate.js:91` |
 | `sha256KfdJson` | function: function sha256Json(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha256KfdJson } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-gate.js:50` |
-| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:156` |
+| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:157` |
 | `sha512IntegrityBuffer` | function: function sha512IntegrityBuffer(buffer) | buffer | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { sha512IntegrityBuffer } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-passport.js:34` |
 | `sha512IntegrityFile` | function: function sha512IntegrityFile(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha512IntegrityFile } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-passport.js:38` |
 | `shellJoin` | function: function shellJoin(command) | command | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { shellJoin } from "@kungfu-tech/buildchain/core";` | `packages/core/package-manager.js:114` |
@@ -1270,8 +1274,8 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `V4_RUNTIME_AUTHORIZATION_CONTRACT` | constant: const V4_RUNTIME_AUTHORIZATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { V4_RUNTIME_AUTHORIZATION_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-runtime-ref-resume-authority.js:12` |
 | `V4_RUNTIME_PERSISTENCE_SCAN_CONTRACT` | value: V4_RUNTIME_PERSISTENCE_SCAN_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { V4_RUNTIME_PERSISTENCE_SCAN_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-runtime-ref-resume-authority.js:1` |
 | `V4_RUNTIME_RESUME_LINEAGE_CONTRACT` | constant: const V4_RUNTIME_RESUME_LINEAGE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { V4_RUNTIME_RESUME_LINEAGE_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-runtime-ref-resume-authority.js:14` |
-| `v4ConsumerPolicyScannerRoot` | function: function v4ConsumerPolicyScannerRoot(runtimeRoot = defaultRuntimeRoot()) | runtimeRoot = defaultRuntimeRoot() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4ConsumerPolicyScannerRoot } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-policy.js:71` |
-| `v4FloatingConsumerDocumentRoot` | function: function v4FloatingConsumerDocumentRoot(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4FloatingConsumerDocumentRoot } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-evidence.js:124` |
+| `v4ConsumerPolicyScannerRoot` | function: function v4ConsumerPolicyScannerRoot(runtimeRoot = defaultRuntimeRoot()) | runtimeRoot = defaultRuntimeRoot() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4ConsumerPolicyScannerRoot } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-policy.js:76` |
+| `v4FloatingConsumerDocumentRoot` | function: function v4FloatingConsumerDocumentRoot(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4FloatingConsumerDocumentRoot } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-evidence.js:138` |
 | `v4RuntimeResumeDocumentRoot` | function: function v4RuntimeResumeDocumentRoot(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { v4RuntimeResumeDocumentRoot } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-runtime-ref-resume-authority.js:34` |
 | `validateAnchoredPackageRelease` | function: function validateAnchoredPackageRelease({ cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = "platforms-first-main-last", requireTrustedPublishing = true, requireLifecycleStages = ["install", "build", "verify", "publish"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {}) | { cwd = process.cwd(), requireManifest = true, requirePackageSetOrder = "platforms-first-main-last", requireTrustedPublishing = true, requireLifecycleStages = ["install", "build", "verify", "publish"], requirePublishGateSourceLock = false, publishSource = undefined, env = process.env, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateAnchoredPackageRelease } from "@kungfu-tech/buildchain/core";` | `packages/core/diagnostics.js:325` |
 | `validateArtifactSigningReceipt` | function: function validateArtifactSigningReceipt(receipt, { request } = {}) | receipt, { request } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validateArtifactSigningReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-signing.js:435` |
@@ -1286,7 +1290,7 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `validateKfd3CollaborationInterfaceReleaseGateEvidence` | function: function validateKfd3CollaborationInterfaceReleaseGateEvidence(section, { metadata = resolveKfd3Metadata() } = {}) | section, { metadata = resolveKfd3Metadata() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfd3CollaborationInterfaceReleaseGateEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-gate.js:1470` |
 | `validateKfdAdopterReleaseBinding` | function: function validateKfdAdopterReleaseBinding(binding, { manifest, manifestGate, legacyProjection, expectedSourceSha = "", } = {}) | binding, { manifest, manifestGate, legacyProjection, expectedSourceSha = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdAdopterReleaseBinding } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-verification-envelope.js:467` |
 | `validateKfdProductGateResult` | function: function validateKfdProductGateResult(result, { expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {}) | result, { expectedSourceSha = "", checkedAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKfdProductGateResult } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-product-gates.js:519` |
-| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2974` |
+| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2983` |
 | `validatePackageManagerContract` | function: function validatePackageManagerContract({ cwd = process.cwd(), expectedManager = "" } = {}) | { cwd = process.cwd(), expectedManager = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { validatePackageManagerContract } from "@kungfu-tech/buildchain/core";` | `packages/core/package-manager.js:18` |
 | `validatePublishEvidence` | function: function validatePublishEvidence({ evidence, version, channel, sourceSha, releaseSha, targetRef = "", releaseMaterialSha = releaseSha, publishToolingSha = "", requiredArtifacts = [], } = {}) | { evidence, version, channel, sourceSha, releaseSha, targetRef = "", releaseMaterialSha = releaseSha, publishToolingSha = "", requiredArtifacts = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validatePublishEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/publish-transaction.js:674` |
 | `validateReleaseActivationReceiptSet` | function: function validateReleaseActivationReceiptSet(receiptSet, { allowShadow = true } = {}) | receiptSet, { allowShadow = true } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseActivationReceiptSet } from "@kungfu-tech/buildchain/core";` | `packages/core/release-activation-transaction.js:376` |
@@ -1304,18 +1308,18 @@ Target: `./packages/core/index.js`. Public symbols: 627.
 | `verifyCacheOperationReceipt` | function: function verifyCacheOperationReceipt(receipt) | receipt | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyCacheOperationReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/cache-evidence.js:226` |
 | `verifyDetachedArtifactSignature` | function: function verifyDetachedArtifactSignature({ request, envelope, publicKey, } = {}) | { request, envelope, publicKey, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyDetachedArtifactSignature } from "@kungfu-tech/buildchain/core";` | `packages/core/detached-artifact-signature.js:82` |
 | `verifyGitHubArtifactAttestationEvidence` | function: function verifyGitHubArtifactAttestationEvidence({ artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {}) | { artifactPath, platformManifestPath, releasePassportPath, bundlePath, evidence, verificationResults, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGitHubArtifactAttestationEvidence } from "@kungfu-tech/buildchain/core";` | `packages/core/github-artifact-attestation.js:563` |
-| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:886` |
+| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/github-governance-authority.js:887` |
 | `verifyKfdRecord` | function: async function verifyKfdRecord(record) | record | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyKfdRecord } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd-product-gates.js:262` |
 | `verifyPortableDevCachePlan` | function: function verifyPortableDevCachePlan(plan) | plan | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyPortableDevCachePlan } from "@kungfu-tech/buildchain/core";` | `packages/core/portable-dev-cache.js:211` |
 | `verifyPublicationAdmission` | function: function verifyPublicationAdmission({ admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {}) | { admission, registry, runnerProvenance, controlPlaneAudit, publicationEvidence, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationAdmission } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-authority.js:791` |
 | `verifyPublicationQualificationReceipt` | function: function verifyPublicationQualificationReceipt({ receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {}) | { receipt, capability, gateAggregate, expected = {}, usedNonces = [], now = new Date(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationQualificationReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-authority.js:1096` |
 | `verifyPublicationReproducibility` | function: function verifyPublicationReproducibility({ cwd = process.cwd(), sourceSha = "", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = "", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {}) | { cwd = process.cwd(), sourceSha = "", output = DEFAULT_OUTPUT, promote = false, keepWorkspaces = false, pullToolchain = true, packageName = "", allowUnpinnedToolchain = false, overlayPaths = [DEFAULT_REGISTRY_INPUT_DIR, DEFAULT_REGISTRY_HYDRATION], } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { verifyPublicationReproducibility } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-reproducibility.js:869` |
 | `verifyPublicationSealedBundle` | function: function verifyPublicationSealedBundle({ bundleRoot, manifest } = {}) | { bundleRoot, manifest } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyPublicationSealedBundle } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-sealed-bundle.js:133` |
-| `verifyReleaseCandidateRecovery` | function: function verifyReleaseCandidateRecovery({ candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {}) | { candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleaseCandidateRecovery } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate-recovery.js:398` |
-| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2898` |
+| `verifyReleaseCandidateRecovery` | function: function verifyReleaseCandidateRecovery({ candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, anchorProvenance = undefined, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {}) | { candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, anchorProvenance = undefined, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleaseCandidateRecovery } from "@kungfu-tech/buildchain/core";` | `packages/core/release-candidate-recovery.js:443` |
+| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain/core";` | `packages/core/release-passport.js:2907` |
 | `verifyReleasePropagationWork` | function: function verifyReleasePropagationWork(input) | input | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyReleasePropagationWork } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-work.js:486` |
-| `verifyV4FloatingConsumerPolicyCertification` | function: function verifyV4FloatingConsumerPolicyCertification(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyCertification } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-evidence.js:273` |
-| `verifyV4FloatingConsumerPolicyReceipt` | function: function verifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-evidence.js:128` |
+| `verifyV4FloatingConsumerPolicyCertification` | function: function verifyV4FloatingConsumerPolicyCertification(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyCertification } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-evidence.js:287` |
+| `verifyV4FloatingConsumerPolicyReceipt` | function: function verifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-evidence.js:142` |
 | `verifyV4RuntimeAuthorizationReceipt` | function: function verifyV4RuntimeAuthorizationReceipt({ receipt, receiptRoot, repository = "", sourceSha = "", runtimeSha = "", consumerPolicyReceiptRoot = "", } = {}) | { receipt, receiptRoot, repository = "", sourceSha = "", runtimeSha = "", consumerPolicyReceiptRoot = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4RuntimeAuthorizationReceipt } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-runtime-ref-resume-authority.js:271` |
 | `verifyV4RuntimeResumeLineage` | function: function verifyV4RuntimeResumeLineage({ lineage, lineageRoot, repository = "", sourceSha = "", buildRuntimeSha = "", resumeRuntimeSha = "", consumerPolicyReceiptRoot = "", } = {}) | { lineage, lineageRoot, repository = "", sourceSha = "", buildRuntimeSha = "", resumeRuntimeSha = "", consumerPolicyReceiptRoot = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4RuntimeResumeLineage } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-runtime-ref-resume-authority.js:551` |
 | `WEB_SURFACE_PRODUCTION_DECISION_CONTRACT` | constant: const WEB_SURFACE_PRODUCTION_DECISION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { WEB_SURFACE_PRODUCTION_DECISION_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/web-surface-publication-candidate.js:7` |
@@ -1535,6 +1539,15 @@ Target: `./packages/core/candidate-timeline.js`. Public symbols: 5.
 | `formatCandidateTimelineReport` | function: function formatCandidateTimelineReport(timeline) | timeline | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { formatCandidateTimelineReport } from "@kungfu-tech/buildchain/candidate-timeline";` | `packages/core/candidate-timeline.js:438` |
 | `normalizeCandidateTimelineEvent` | function: function normalizeCandidateTimelineEvent(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { normalizeCandidateTimelineEvent } from "@kungfu-tech/buildchain/candidate-timeline";` | `packages/core/candidate-timeline.js:74` |
 
+## `@kungfu-tech/buildchain/ci-lane-change-budget`
+
+Target: `./packages/core/ci-lane-change-budget.js`. Public symbols: 2.
+
+| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `CI_LANE_CHANGE_BUDGET_CONTRACT` | constant: const CI_LANE_CHANGE_BUDGET_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { CI_LANE_CHANGE_BUDGET_CONTRACT } from "@kungfu-tech/buildchain/ci-lane-change-budget";` | `packages/core/ci-lane-change-budget.js:4` |
+| `evaluateCiLaneChangeBudget` | function: function evaluateCiLaneChangeBudget({ policy, workflows, baselineWorkflows = null, } = {}) | { policy, workflows, baselineWorkflows = null, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateCiLaneChangeBudget } from "@kungfu-tech/buildchain/ci-lane-change-budget";` | `packages/core/ci-lane-change-budget.js:180` |
+
 ## `@kungfu-tech/buildchain/channel-candidate`
 
 Target: `./packages/core/channel-candidate.js`. Public symbols: 3.
@@ -1673,9 +1686,9 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 54.
 | `createNativeCommandContract` | value: createNativeCommandContract | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { createNativeCommandContract } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:1` |
 | `createNativeExecutionBinding` | value: createNativeExecutionBinding | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { createNativeExecutionBinding } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:1` |
 | `createNativeExecutionReceipt` | value: createNativeExecutionReceipt | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { createNativeExecutionReceipt } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:1` |
-| `createNativeProofBaseDelta` | function: function createNativeProofBaseDelta(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofBaseDelta } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:183` |
-| `createNativeProofReuseDecision` | function: function createNativeProofReuseDecision({ proof, current = {} } = {}) | { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:516` |
-| `createNativeQualificationProof` | function: function createNativeQualificationProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:209` |
+| `createNativeProofBaseDelta` | function: function createNativeProofBaseDelta(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofBaseDelta } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:199` |
+| `createNativeProofReuseDecision` | function: function createNativeProofReuseDecision({ proof, current = {} } = {}) | { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:532` |
+| `createNativeQualificationProof` | function: function createNativeQualificationProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:225` |
 | `createProjectCutReplayPlan` | function: function createProjectCutReplayPlan(input = {}) | input = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createProjectCutReplayPlan } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:155` |
 | `createProjectCutReplayProof` | function: function createProjectCutReplayProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createProjectCutReplayProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:175` |
 | `createReleaseBlockerPriorityClaim` | function: function createReleaseBlockerPriorityClaim(repairInput, input = {}) | repairInput, input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createReleaseBlockerPriorityClaim } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/release-blocker-priority.js:32` |
@@ -1702,7 +1715,7 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 54.
 | `NATIVE_QUALIFICATION_PROOF_SCHEMA` | constant: const NATIVE_QUALIFICATION_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_QUALIFICATION_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:31` |
 | `normalizeDevDeliveryQueue` | value: normalizeDevDeliveryQueue | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { normalizeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `normalizeNativeCommandContract` | value: normalizeNativeCommandContract | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { normalizeNativeCommandContract } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:1` |
-| `observeDevDeliveryQueue` | function: function observeDevDeliveryQueue(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { observeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:517` |
+| `observeDevDeliveryQueue` | function: function observeDevDeliveryQueue(queueInput, { now = new Date().toISOString(), allowLegacyV3Readback = false } = {}) | queueInput, { now = new Date().toISOString(), allowLegacyV3Readback = false } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { observeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:517` |
 | `PROJECT_CUT_REPLAY_PROOF_SCHEMA` | constant: const PROJECT_CUT_REPLAY_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { PROJECT_CUT_REPLAY_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:5` |
 | `qualifyDevDeliveryWarrant` | constant: const qualifyDevDeliveryWarrant | none | value | Import does not declare a throw contract. | none-on-import | `import { qualifyDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:380` |
 | `rankDevDeliveryCandidates` | value: rankDevDeliveryCandidates | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { rankDevDeliveryCandidates } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
@@ -1715,8 +1728,8 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 54.
 | `submitDevDeliveryCandidate` | value: submitDevDeliveryCandidate | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { submitDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `verifyIntegrationDeliveryProof` | function: function verifyIntegrationDeliveryProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyIntegrationDeliveryProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:262` |
 | `verifyNativeExecutionReceipt` | value: verifyNativeExecutionReceipt | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { verifyNativeExecutionReceipt } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:1` |
-| `verifyNativeProofReuseDecision` | function: function verifyNativeProofReuseDecision(decisionInput, { proof, current = {} } = {}) | decisionInput, { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:519` |
-| `verifyNativeQualificationProof` | function: function verifyNativeQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:269` |
+| `verifyNativeProofReuseDecision` | function: function verifyNativeProofReuseDecision(decisionInput, { proof, current = {} } = {}) | decisionInput, { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeProofReuseDecision } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:535` |
+| `verifyNativeQualificationProof` | function: function verifyNativeQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyNativeQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:285` |
 | `verifyProjectCutReplayProof` | function: function verifyProjectCutReplayProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyProjectCutReplayProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:221` |
 | `verifySourceQualificationProof` | function: function verifySourceQualificationProof(proofInput, expected = {}) | proofInput, expected = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifySourceQualificationProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:81` |
 
@@ -1948,16 +1961,16 @@ Target: `./packages/core/v4-floating-consumer-policy.js`. Public symbols: 10.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| `certifyV4FloatingConsumerPolicyReceipt` | function: function certifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { certifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:188` |
-| `resolveV4FloatingConsumerPolicyAuthority` | function: function resolveV4FloatingConsumerPolicyAuthority({ runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {}) | { runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveV4FloatingConsumerPolicyAuthority } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-policy.js:84` |
-| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-policy.js:323` |
+| `certifyV4FloatingConsumerPolicyReceipt` | function: function certifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { certifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:202` |
+| `resolveV4FloatingConsumerPolicyAuthority` | function: function resolveV4FloatingConsumerPolicyAuthority({ runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {}) | { runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveV4FloatingConsumerPolicyAuthority } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-policy.js:89` |
+| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-policy.js:428` |
 | `V4_FLOATING_CONSUMER_CERTIFICATION` | constant: const V4_FLOATING_CONSUMER_CERTIFICATION | none | value | Import does not declare a throw contract. | none-on-import | `import { V4_FLOATING_CONSUMER_CERTIFICATION } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:7` |
 | `V4_FLOATING_CONSUMER_POLICY` | constant: const V4_FLOATING_CONSUMER_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { V4_FLOATING_CONSUMER_POLICY } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:3` |
 | `V4_FLOATING_CONSUMER_RECEIPT` | constant: const V4_FLOATING_CONSUMER_RECEIPT | none | value | Import does not declare a throw contract. | none-on-import | `import { V4_FLOATING_CONSUMER_RECEIPT } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:5` |
-| `v4ConsumerPolicyScannerRoot` | function: function v4ConsumerPolicyScannerRoot(runtimeRoot = defaultRuntimeRoot()) | runtimeRoot = defaultRuntimeRoot() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4ConsumerPolicyScannerRoot } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-policy.js:71` |
-| `v4FloatingConsumerDocumentRoot` | function: function v4FloatingConsumerDocumentRoot(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4FloatingConsumerDocumentRoot } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:124` |
-| `verifyV4FloatingConsumerPolicyCertification` | function: function verifyV4FloatingConsumerPolicyCertification(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyCertification } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:273` |
-| `verifyV4FloatingConsumerPolicyReceipt` | function: function verifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:128` |
+| `v4ConsumerPolicyScannerRoot` | function: function v4ConsumerPolicyScannerRoot(runtimeRoot = defaultRuntimeRoot()) | runtimeRoot = defaultRuntimeRoot() | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4ConsumerPolicyScannerRoot } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-policy.js:76` |
+| `v4FloatingConsumerDocumentRoot` | function: function v4FloatingConsumerDocumentRoot(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { v4FloatingConsumerDocumentRoot } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:138` |
+| `verifyV4FloatingConsumerPolicyCertification` | function: function verifyV4FloatingConsumerPolicyCertification(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyCertification } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:287` |
+| `verifyV4FloatingConsumerPolicyReceipt` | function: function verifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:142` |
 
 ## `@kungfu-tech/buildchain/v4-runtime-ref-resume-authority`
 
@@ -2322,8 +2335,8 @@ Target: `./packages/core/buildchain-publication-authority.js`. Public symbols: 2
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from "@kungfu-tech/buildchain/buildchain-publication-authority";` | `packages/core/buildchain-publication-authority.js:62` |
-| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from "@kungfu-tech/buildchain/buildchain-publication-authority";` | `packages/core/buildchain-publication-authority.js:86` |
+| `buildchainPublicationAuthorityDescriptors` | function: function buildchainPublicationAuthorityDescriptors() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { buildchainPublicationAuthorityDescriptors } from "@kungfu-tech/buildchain/buildchain-publication-authority";` | `packages/core/buildchain-publication-authority.js:63` |
+| `createBuildchainPublicationAuthorityRegistry` | function: function createBuildchainPublicationAuthorityRegistry({ root = process.cwd() } = {}) | { root = process.cwd() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainPublicationAuthorityRegistry } from "@kungfu-tech/buildchain/buildchain-publication-authority";` | `packages/core/buildchain-publication-authority.js:87` |
 
 ## `@kungfu-tech/buildchain/github-governance-authority`
 
@@ -2331,28 +2344,28 @@ Target: `./packages/core/github-governance-authority.js`. Public symbols: 22.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1365` |
-| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1367` |
-| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:419` |
-| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:313` |
-| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:452` |
-| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:934` |
-| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1112` |
-| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1191` |
-| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:427` |
-| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:696` |
+| `BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1366` |
+| `BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS` | constant: const BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS | none | value | Import does not declare a throw contract. | none-on-import | `import { BUILDCHAIN_GITHUB_GOVERNANCE_PROTECTED_PATHS } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1368` |
+| `codeownersForPath` | function: function codeownersForPath(source, candidatePath) | source, candidatePath | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { codeownersForPath } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:420` |
+| `compileEffectiveGithubGovernancePolicy` | function: function compileEffectiveGithubGovernancePolicy({ branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {}) | { branch, defaultBranch, protectedBranch = false, protection, rulesets = [], } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { compileEffectiveGithubGovernancePolicy } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:314` |
+| `createBuildchainGithubGovernanceAuthority` | function: function createBuildchainGithubGovernanceAuthority() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createBuildchainGithubGovernanceAuthority } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:453` |
+| `createGithubGovernanceRolloutPlan` | function: function createGithubGovernanceRolloutPlan({ repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {}) | { repository, targetRef, inventory, rollbackSnapshot, rollbackProtectionExists = true, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubGovernanceRolloutPlan } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:935` |
+| `createGithubRulesetBypassRolloutPlan` | function: function createGithubRulesetBypassRolloutPlan({ repository, rulesetId, inventory, rollbackSnapshot, } = {}) | { repository, rulesetId, inventory, rollbackSnapshot, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetBypassRolloutPlan } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1113` |
+| `createGithubRulesetGovernanceRolloutPlan` | function: function createGithubRulesetGovernanceRolloutPlan({ repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {}) | { repository, targetRef, rulesetId, rulesetName, inventory, rollbackSnapshot, desiredProtection, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createGithubRulesetGovernanceRolloutPlan } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1192` |
+| `evaluateCodeownersAuthority` | function: function evaluateCodeownersAuthority({ source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {}) | { source = "", sourcePath = "", reviewAuthority = "kungfu-origin", protectedPaths = PROTECTED_AUTHORITY_PATHS, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { evaluateCodeownersAuthority } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:428` |
+| `evaluateGithubGovernanceSnapshot` | function: function evaluateGithubGovernanceSnapshot({ descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {}) | { descriptor = createBuildchainGithubGovernanceAuthority(), repository, targetRef, organizationPlan, codeowners, effectivePolicy, memberships, apiEvidence = {}, observedAt, expiresAt, verifier = {}, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { evaluateGithubGovernanceSnapshot } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:697` |
 | `GITHUB_GOVERNANCE_AUTHORITY_CONTRACT` | constant: const GITHUB_GOVERNANCE_AUTHORITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_AUTHORITY_CONTRACT } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:3` |
 | `GITHUB_GOVERNANCE_RECEIPT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RECEIPT_CONTRACT } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:5` |
 | `GITHUB_GOVERNANCE_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_ROLLOUT_CONTRACT } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:7` |
 | `GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT` | constant: const GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { GITHUB_GOVERNANCE_RULESET_ROLLOUT_CONTRACT } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:9` |
-| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:165` |
-| `githubRepositoryIdentityRoot` | function: function githubRepositoryIdentityRoot({ provider = "github", providerRepositoryId, } = {}) | { provider = "github", providerRepositoryId, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubRepositoryIdentityRoot } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:542` |
-| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1027` |
-| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1097` |
-| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:403` |
-| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:609` |
-| `resolveGithubGovernanceTargetRefs` | function: function resolveGithubGovernanceTargetRefs({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = "", } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetRefs } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:632` |
-| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:886` |
+| `githubGovernanceDigest` | function: function githubGovernanceDigest(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { githubGovernanceDigest } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:166` |
+| `githubRepositoryIdentityRoot` | function: function githubRepositoryIdentityRoot({ provider = "github", providerRepositoryId, } = {}) | { provider = "github", providerRepositoryId, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { githubRepositoryIdentityRoot } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:543` |
+| `normalizeGithubBranchProtectionSnapshot` | function: function normalizeGithubBranchProtectionSnapshot(protection = {}) | protection = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubBranchProtectionSnapshot } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1028` |
+| `normalizeGithubRulesetSnapshot` | function: function normalizeGithubRulesetSnapshot(ruleset = {}) | ruleset = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { normalizeGithubRulesetSnapshot } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:1098` |
+| `parseCodeowners` | function: function parseCodeowners(source) | source | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseCodeowners } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:404` |
+| `resolveGithubGovernanceTargetPolicy` | function: function resolveGithubGovernanceTargetPolicy({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, targetRef, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetPolicy } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:610` |
+| `resolveGithubGovernanceTargetRefs` | function: function resolveGithubGovernanceTargetRefs({ descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = "", } = {}) | { descriptor = BUILDCHAIN_GITHUB_GOVERNANCE_AUTHORITY, repository, availableRefs = [], requestedTargetRef = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { resolveGithubGovernanceTargetRefs } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:633` |
+| `verifyGithubGovernanceReceipt` | function: function verifyGithubGovernanceReceipt(receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {}) | receipt, { expectedOrganization, expectedRepository, expectedRepositoryIdentityRoot, expectedTargetRef, expectedPolicyRoot, expectedVerifierSourceRevision, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { verifyGithubGovernanceReceipt } from "@kungfu-tech/buildchain/github-governance-authority";` | `packages/core/github-governance-authority.js:887` |
 
 ## `@kungfu-tech/buildchain/engineering-housekeeper`
 
@@ -2430,12 +2443,12 @@ Target: `./packages/core/release-candidate-recovery.js`. Public symbols: 7.
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
 | `rebindPublicationGateAggregateForEquivalentTree` | function: function rebindPublicationGateAggregateForEquivalentTree(gateAggregate, { evidenceSourceSha = "", targetSourceSha = "", targetSourceTreeSha = "", expectedSourceTreeSha = "" } = {}) | gateAggregate, { evidenceSourceSha = "", targetSourceSha = "", targetSourceTreeSha = "", expectedSourceTreeSha = "" } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { rebindPublicationGateAggregateForEquivalentTree } from "@kungfu-tech/buildchain/release-candidate-recovery";` | `packages/core/release-candidate-recovery.js:18` |
-| `recoveryFailure` | function: function recoveryFailure(error) | error | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoveryFailure } from "@kungfu-tech/buildchain/release-candidate-recovery";` | `packages/core/release-candidate-recovery.js:529` |
+| `recoveryFailure` | function: function recoveryFailure(error) | error | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoveryFailure } from "@kungfu-tech/buildchain/release-candidate-recovery";` | `packages/core/release-candidate-recovery.js:584` |
 | `RELEASE_CANDIDATE_RECOVERY_CONTRACT` | constant: const RELEASE_CANDIDATE_RECOVERY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_CANDIDATE_RECOVERY_CONTRACT } from "@kungfu-tech/buildchain/release-candidate-recovery";` | `packages/core/release-candidate-recovery.js:15` |
 | `ReleaseCandidateRecoveryError` | class: class ReleaseCandidateRecoveryError | none | ReleaseCandidateRecoveryError | Construction and method errors follow the linked source implementation. | class-dependent | `import { ReleaseCandidateRecoveryError } from "@kungfu-tech/buildchain/release-candidate-recovery";` | `packages/core/release-candidate-recovery.js:56` |
 | `validateRecoveryTargetRef` | function: function validateRecoveryTargetRef({ targetSha, observedTargetSha, expectedTransactionId = "", existingTransaction = undefined, ancestry = undefined, } = {}) | { targetSha, observedTargetSha, expectedTransactionId = "", existingTransaction = undefined, ancestry = undefined, } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateRecoveryTargetRef } from "@kungfu-tech/buildchain/release-candidate-recovery";` | `packages/core/release-candidate-recovery.js:134` |
 | `validateReleaseCandidateRecoveryReceipt` | function: function validateReleaseCandidateRecoveryReceipt({ receipt, passport, repository = "", targetChannel = "", targetRef = "", targetSha = "", targetTree = "", version = "", } = {}) | { receipt, passport, repository = "", targetChannel = "", targetRef = "", targetSha = "", targetTree = "", version = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateReleaseCandidateRecoveryReceipt } from "@kungfu-tech/buildchain/release-candidate-recovery";` | `packages/core/release-candidate-recovery.js:176` |
-| `verifyReleaseCandidateRecovery` | function: function verifyReleaseCandidateRecovery({ candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {}) | { candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleaseCandidateRecovery } from "@kungfu-tech/buildchain/release-candidate-recovery";` | `packages/core/release-candidate-recovery.js:398` |
+| `verifyReleaseCandidateRecovery` | function: function verifyReleaseCandidateRecovery({ candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, anchorProvenance = undefined, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {}) | { candidateRepository, targetRepository, expectedRunId, expectedWorkflowFile, expectedWorkflowName, channel, targetRef, targetSha, targetRefSha = targetSha, targetTree, expectedSourceTree = "", expectedCandidateRoot = "", expectedRuntimeSha, expectedTransactionId = "", existingTransaction = undefined, run, workflow, pullRequest, ancestry, anchorProvenance = undefined, passport, buildSummary, controllerReceipts = [], platformManifests = [], platformManifestEvidence = [], productPayloadManifests = [], artifacts = [], publicationVersion = "", currentToolingSha, recoveryRunId = "", createdAt = new Date().toISOString(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleaseCandidateRecovery } from "@kungfu-tech/buildchain/release-candidate-recovery";` | `packages/core/release-candidate-recovery.js:443` |
 
 ## `@kungfu-tech/buildchain/release-train`
 
@@ -2540,29 +2553,29 @@ Target: `./packages/core/release-passport.js`. Public symbols: 23.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:50` |
-| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:48` |
-| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1575` |
-| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {}) | { assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1240` |
-| `createInvariantPassportGate` | function: function createInvariantPassportGate(passportMetas = []) | passportMetas = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createInvariantPassportGate } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:219` |
-| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2777` |
-| `createReleasePassport` | function: function createReleasePassport(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { createReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1275` |
-| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2933` |
-| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:49` |
-| `INVARIANT_PASSPORT_GATE_CONTRACT` | constant: const INVARIANT_PASSPORT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { INVARIANT_PASSPORT_GATE_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:55` |
-| `KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT` | constant: const KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:56` |
-| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:53` |
-| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:54` |
-| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2962` |
-| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:51` |
-| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2849` |
+| `AGENT_INDEX_CONTRACT` | constant: const AGENT_INDEX_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { AGENT_INDEX_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:51` |
+| `ARTIFACT_EVIDENCE_CONTRACT` | constant: const ARTIFACT_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { ARTIFACT_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:49` |
+| `collectGitHubReleasePassport` | function: function collectGitHubReleasePassport({ cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {}) | { cwd = process.cwd(), tag = "", repository = process.env.GITHUB_REPOSITORY \|\| "", sourceSha = process.env.GITHUB_SHA \|\| "", line = "", outputDir = ".buildchain/release-passport", assetsJson = "", assetsDir = "", releaseJson = "", productName = "Buildchain", packageName = "@kungfu-tech/buildchain", packageVersion = "", packageSetJson = "", publishEvidenceJson = "", trustedPublishingJson = "", transactionJson = "", anchorManifestJson = "", versionMaterialJson = "", impactJson = "", buildSummaryJson = "", buildFactsJsons = [], platformManifestJsons = [], distTagEvidenceJson = "", kfd1WitnessJsons = [], kfd2ClaimJsons = [], kfd3PrebuildWitnessJsons = [], kfd3ArtifactWitnessJsons = [], kfd3ArtifactVerifyCommand = "", kfdAdopterManifestJson = "", kfdSupportMatrixJson = "", kfdProductGateJsons = [], invariantPassportJsons = [], invariantPassportCommand = "", releaseEvidenceJsons = [], v4ConsumerPolicyCertificationJson = "", v4ConsumerPolicyCertificationRoot = "", v4RuntimeResumeEvidenceJson = "", kfdAgentHubEvidenceJson = "", controllerReceiptReferences = [], githubArtifactAttestationPolicyJsons = [], basePassportJson = "", requireBaseKfd = false, releaseJsonExtra = "", publishJson = "", workflow = {}, checkedAt = "", } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { collectGitHubReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1584` |
+| `createArtifactEvidence` | function: function createArtifactEvidence({ assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {}) | { assets = [], repository = "", tag = "", sourceSha = "", workflow = {}, kfdAdopter = undefined } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createArtifactEvidence } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1249` |
+| `createInvariantPassportGate` | function: function createInvariantPassportGate(passportMetas = []) | passportMetas = [] | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createInvariantPassportGate } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:220` |
+| `createReleaseCheckReport` | function: function createReleaseCheckReport({ passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {}) | { passport, artifactEvidence, publishEvidence, impact, agentIndex, productMechanism, kfdAgentHubEvidence, kfdSupportEvidence, kfdAdopterManifest, kfdAdopterManifestGate, releaseEvidenceDocuments = [], checkedAt = nowIso(), } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { createReleaseCheckReport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2786` |
+| `createReleasePassport` | function: function createReleasePassport(options = {}) | options = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write | `import { createReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1284` |
+| `explainReleasePassport` | function: async function explainReleasePassport({ passportLocation, forAudience = "human" } = {}) | { passportLocation, forAudience = "human" } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { explainReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2942` |
+| `IMPACT_LEDGER_CONTRACT` | constant: const IMPACT_LEDGER_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { IMPACT_LEDGER_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:50` |
+| `INVARIANT_PASSPORT_GATE_CONTRACT` | constant: const INVARIANT_PASSPORT_GATE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { INVARIANT_PASSPORT_GATE_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:56` |
+| `KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT` | constant: const KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD_AGENT_HUB_RELEASE_EVIDENCE_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:57` |
+| `KFD2_RELEASE_TRUST_PASSPORT_CONTRACT` | constant: const KFD2_RELEASE_TRUST_PASSPORT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_RELEASE_TRUST_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:54` |
+| `KFD2_TRUST_PROOF_CONTRACT` | constant: const KFD2_TRUST_PROOF_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { KFD2_TRUST_PROOF_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:55` |
+| `makeReleasePassportFixtureAssets` | function: function makeReleasePassportFixtureAssets(dir) | dir | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | local-filesystem-write | `import { makeReleasePassportFixtureAssets } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2971` |
+| `PRODUCT_MECHANISM_CONTRACT` | constant: const PRODUCT_MECHANISM_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { PRODUCT_MECHANISM_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:52` |
+| `readJsonFromLocation` | function: async function readJsonFromLocation(location, redirectCount = 0, { timeoutMs = 15_000 } = {}) | location, redirectCount = 0, { timeoutMs = 15_000 } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readJsonFromLocation } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2858` |
 | `RELEASE_CHECK_REPORT_CONTRACT` | value: RELEASE_CHECK_REPORT_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_CHECK_REPORT_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1` |
-| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:52` |
+| `RELEASE_EVIDENCE_ATTACHMENT_CONTRACT` | constant: const RELEASE_EVIDENCE_ATTACHMENT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_EVIDENCE_ATTACHMENT_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:53` |
 | `RELEASE_PASSPORT_CONTRACT` | value: RELEASE_PASSPORT_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { RELEASE_PASSPORT_CONTRACT } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:1` |
-| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:234` |
-| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:156` |
-| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2974` |
-| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2898` |
+| `sha256File` | function: function sha256File(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | local-filesystem-write, subprocess | `import { sha256File } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:235` |
+| `sha256Text` | function: function sha256Text(value) | value | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sha256Text } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:157` |
+| `validateKnownReleasePassportContracts` | function: function validateKnownReleasePassportContracts() | none | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateKnownReleasePassportContracts } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2983` |
+| `verifyReleasePassport` | function: async function verifyReleasePassport({ passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {}) | { passportLocation, artifactEvidenceLocation = "", publishEvidenceLocation = "", impactLocation = "", agentIndexLocation = "", productMechanismLocation = "", kfdAgentHubEvidenceLocation = "", kfdAdopterManifestLocation = "", kfdAdopterManifestGateLocation = "", kfdSupportEvidenceLocation = "", checkedAt = nowIso(), } = {} | Promise<unknown> | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { verifyReleasePassport } from "@kungfu-tech/buildchain/release-passport";` | `packages/core/release-passport.js:2907` |
 
 ## `@kungfu-tech/buildchain/release-passport-contract`