@kungfu-tech/buildchain 4.0.1-alpha.8 → 4.0.1

package/dist/site/public-surface-audit.json

@@ -4,9 +4,9 @@
   "status": "passed",
   "summary": {
     "cliCommandCount": 117,
-    "workflowCount": 76,
-    "actionCount": 7,
-    "sitePageCount": 82,
+    "workflowCount": 77,
+    "actionCount": 8,
+    "sitePageCount": 84,
     "docCommandRefCount": 1049,
     "failureCount": 0
   },
@@ -690,6 +690,8 @@
           "build-command",
           "buildchain-contract-compatibility-policy",
           "buildchain-contract-drift-issue-mode",
+          "buildchain-contract-expected-channel",
+          "buildchain-contract-expected-major",
           "buildchain-contract-lock-path",
           "buildchain-expected-channel",
           "buildchain-expected-major",
@@ -760,7 +762,7 @@
           "verify-substage-evidence-path",
           "working-directory"
         ],
-        "inputCount": 91,
+        "inputCount": 93,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -932,6 +934,7 @@
         "reusable": true,
         "inputs": [
           "admission-json",
+          "authority-job-id",
           "authority-workflow-path",
           "auto-admission",
           "auto-admission-kind",
@@ -969,7 +972,7 @@
           "target-ref",
           "used-nonces-json"
         ],
-        "inputCount": 37,
+        "inputCount": 38,
         "secrets": [
           "BUILDCHAIN_GOVERNANCE_READ_TOKEN",
           "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
@@ -1029,6 +1032,7 @@
           "promotion-shell-ref",
           "promotion-shell-sha",
           "promotion-target-ref",
+          "provider-failure-after-capability",
           "publication-admission-json",
           "publication-authority-workflow-path",
           "publication-auto-admission",
@@ -1070,6 +1074,7 @@
           "release-candidate-workflow-file",
           "release-candidate-workflow-name",
           "release-passport",
+          "release-passport-adopter-delivery-json",
           "release-passport-attachment-command",
           "release-passport-buildchain-self-kfd",
           "release-passport-evidence-command",
@@ -1083,6 +1088,7 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-adopter-manifest-gate-json",
           "release-passport-kfd-adopter-manifest-json",
           "release-passport-kfd-product-gate-jsons",
           "release-passport-kfd-support-matrix-json",
@@ -1108,7 +1114,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 118,
+        "inputCount": 121,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -1397,6 +1403,8 @@
           "build-command",
           "buildchain-contract-compatibility-policy",
           "buildchain-contract-drift-issue-mode",
+          "buildchain-contract-expected-channel",
+          "buildchain-contract-expected-major",
           "buildchain-contract-lock-path",
           "buildchain-ref",
           "buildchain-repository",
@@ -1434,7 +1442,7 @@
           "verify-command",
           "working-directory"
         ],
-        "inputCount": 41,
+        "inputCount": 43,
         "secrets": [
           "production-release-app-private-key"
         ],
@@ -1600,6 +1608,8 @@
           "buildchain-channel",
           "buildchain-contract-compatibility-policy",
           "buildchain-contract-drift-issue-mode",
+          "buildchain-contract-expected-channel",
+          "buildchain-contract-expected-major",
           "buildchain-contract-lock-path",
           "buildchain-expected-channel",
           "buildchain-expected-major",
@@ -1671,7 +1681,7 @@
           "verify-substage-evidence-path",
           "working-directory"
         ],
-        "inputCount": 94,
+        "inputCount": 96,
         "secrets": [
           "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
           "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -2034,9 +2044,10 @@
         "outputs": [
           "close-receipt-root",
           "final-state-root",
-          "integration-proof-root"
+          "integration-proof-root",
+          "successor-wake-json"
         ],
-        "outputCount": 3
+        "outputCount": 4
       },
       {
         "id": "dev-merge-queue-governance",
@@ -2062,6 +2073,7 @@
           "buildchain-ref",
           "buildchain-repository",
           "closure-root",
+          "defer-landing",
           "delivery-class",
           "delivery-priority",
           "delivery-warrant-mode",
@@ -2098,7 +2110,7 @@
           "toolchain-root",
           "warrant-lease-seconds"
         ],
-        "inputCount": 43,
+        "inputCount": 44,
         "secrets": [
           "github-token"
         ],
@@ -2589,6 +2601,7 @@
           "github-release-payload-patterns",
           "github-release-title",
           "package-manager",
+          "provider-failure-after-capability",
           "publication-admission-json",
           "publication-auto-admission",
           "publication-auto-no-gate",
@@ -2629,6 +2642,7 @@
           "release-candidate-workflow-file",
           "release-candidate-workflow-name",
           "release-passport",
+          "release-passport-adopter-delivery-json",
           "release-passport-attachment-command",
           "release-passport-buildchain-self-kfd",
           "release-passport-evidence-command",
@@ -2642,6 +2656,7 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-adopter-manifest-gate-json",
           "release-passport-kfd-adopter-manifest-json",
           "release-passport-kfd-product-gate-jsons",
           "release-passport-kfd-support-matrix-json",
@@ -2667,7 +2682,7 @@
           "target-sha",
           "trusted-publishing"
         ],
-        "inputCount": 103,
+        "inputCount": 106,
         "secrets": [
           "BUILDCHAIN_ISSUE_APP_ID",
           "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2820,7 +2835,11 @@
         "inputs": [
           "buildchain-ref",
           "candidate-root",
+          "capsule-contract",
+          "capsule-path",
+          "capsule-root",
           "declaration-path",
+          "evidence-path",
           "execute",
           "provider-bindings-path",
           "rehearsal-authority-path",
@@ -2829,18 +2848,20 @@
           "rehearsal-mode",
           "state-path"
         ],
-        "inputCount": 10,
+        "inputCount": 14,
         "secrets": [
           "http-token"
         ],
         "secretCount": 1,
         "outputs": [
+          "binding-root",
+          "evidence-root",
           "rehearsal-evidence-root",
           "state-root",
           "transaction-root",
           "transaction-state"
         ],
-        "outputCount": 4
+        "outputCount": 6
       },
       {
         "id": "release-verify",
@@ -2932,10 +2953,24 @@
           "archive-path",
           "bootstrap-path",
           "consumer",
+          "consumer-ref",
+          "consumer-repository",
           "input-path",
+          "invocation-source-path",
           "node-version"
         ],
-        "inputCount": 5,
+        "inputCount": 8,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
+      {
+        "id": "v4-declarative-release-tail-dogfood",
+        "path": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+        "reusable": false,
+        "inputs": [],
+        "inputCount": 0,
         "secrets": [],
         "secretCount": 0,
         "outputs": [],
@@ -3082,6 +3117,7 @@
           "github-release-artifact-paths",
           "github-release-notes",
           "github-release-title",
+          "plan-before-target-advance",
           "promote-only-release-candidate",
           "publication-capability-json",
           "publication-gate-aggregate-json",
@@ -3115,6 +3151,7 @@
           "release-candidate-version",
           "release-material-sha",
           "release-passport",
+          "release-passport-adopter-delivery-json",
           "release-passport-attachment-command",
           "release-passport-build-summary-path",
           "release-passport-buildchain-self-kfd",
@@ -3129,6 +3166,7 @@
           "release-passport-kfd-3-artifact-verify-command",
           "release-passport-kfd-3-artifact-witness-jsons",
           "release-passport-kfd-3-prebuild-witness-jsons",
+          "release-passport-kfd-adopter-manifest-gate-json",
           "release-passport-kfd-adopter-manifest-json",
           "release-passport-kfd-product-gate-jsons",
           "release-passport-kfd-support-matrix-json",
@@ -3153,14 +3191,18 @@
           "transaction-state-path",
           "verification-command"
         ],
-        "inputCount": 84
+        "inputCount": 87
       },
       {
         "id": "release-tail",
         "path": "actions/release-tail/action.yml",
         "inputs": [
           "candidate-root",
+          "capsule",
+          "capsule-contract",
+          "capsule-root",
           "declaration",
+          "evidence-path",
           "execute",
           "github-token",
           "http-token",
@@ -3171,7 +3213,7 @@
           "rehearsal-mode",
           "state-path"
         ],
-        "inputCount": 11
+        "inputCount": 15
       },
       {
         "id": "report-buildchain-issue",
@@ -3252,6 +3294,21 @@
         ],
         "inputCount": 22
       },
+      {
+        "id": "v4-release-candidate-promote",
+        "path": "actions/v4-release-candidate-promote/action.yml",
+        "inputs": [
+          "artifact-paths",
+          "candidate-passport-path",
+          "failure-after-capability",
+          "publication-qualification-path",
+          "repository",
+          "stage-capsules-path",
+          "state-path",
+          "token"
+        ],
+        "inputCount": 8
+      },
       {
         "id": "validate-config",
         "path": "actions/validate-config/action.yml",
@@ -3288,6 +3345,10 @@
         "id": "action:run-lifecycle",
         "category": "action"
       },
+      {
+        "id": "action:v4-release-candidate-promote",
+        "category": "action"
+      },
       {
         "id": "action:validate-config",
         "category": "action"
@@ -3552,6 +3613,10 @@
         "id": "manual:v4-compatibility-facts",
         "category": "manual"
       },
+      {
+        "id": "manual:v4-declarative-release-tail-migration",
+        "category": "manual"
+      },
       {
         "id": "manual:v4-delivery-warrant-read-candidate",
         "category": "manual"
@@ -8845,9 +8910,9 @@
     "cliRegistryPath": "dist/site/cli-registry.json",
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
-    "cliRegistryDigest": "ea47a31ce7ef3577f23e22055ab7be7715c3af494bcef63f76b426f2883086aa",
-    "workflowRegistryDigest": "784b4c05237bc35ec8069be1ff85bb4fb40a5aa298ffd9495b5e5aa94bec3277",
-    "pageRegistryDigest": "9d9d0590c8d3110fc5a95978852ee25337567f93980b2562cc1159f0d5219ade"
+    "cliRegistryDigest": "fbc23073bbae240489a2f826b2c26daadc58e704050c5f8df366509f5c5a1c3e",
+    "workflowRegistryDigest": "90bcf16d6aef5528c10a7e78f21a89ab265ae2d4f8aedc15da9f6c4c2f0b3083",
+    "pageRegistryDigest": "82bd43842f419ff14cb2d1931a194647cf427fe3b18b6388efd5b50552c13351"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-authority-registry.json

@@ -731,6 +731,24 @@
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "artifact.publish",
+        "release.activate",
+        "released-evidence.synthesize",
+        "signed-channel.commit"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
     }
   ],
   "workflowFacts": [
@@ -1207,6 +1225,15 @@
       "signals": [],
       "classified": false
     },
+    {
+      "path": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "npm-publish"
+      ],
+      "classified": true
+    },
     {
       "path": ".github/workflows/v4-public-consumer-dogfood.yml",
       "signals": [],
@@ -1233,5 +1260,5 @@
       "classified": false
     }
   ],
-  "registryDigest": "9c930540ed2366db36802ce03cac597657e45ff402c14ef13099c788ed4e2501"
+  "registryDigest": "4f60d125496eb73e47dc21ceafa340e5cd7c5fd840eabfa17044dbacedd97f5a"
 }

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-08-22T08:48:35.017Z",
-  "publishedAt": "2026-08-22T08:48:35.017Z",
+  "generatedAt": "2026-08-28T20:22:42.731Z",
+  "publishedAt": "2026-08-28T20:22:42.731Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "62b29172d459584f3d7a89616d6c4d3b5e577d8b",
+  "sourceRevision": "9df599a42bebd6595ed92a598a569c40651d8c12",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.8",
+    "version": "4.0.1",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/release-provenance.json

@@ -45,6 +45,9 @@
       "./v4-tail-reseal": "./packages/core/v4-tail-reseal.js",
       "./v4-tail-reseal-receipt": "./packages/core/v4-tail-reseal-receipt.js",
       "./v4-publication-rehearsal": "./packages/core/v4-publication-rehearsal.js",
+      "./publication-rehearsal-runtime": "./packages/core/publication-rehearsal-runtime.js",
+      "./publication-rehearsal-projection": "./packages/core/publication-rehearsal-projection.js",
+      "./v4-publication-qualification": "./packages/core/v4-publication-qualification.js",
       "./adopter-delivery-gate": "./packages/core/adopter-delivery-gate.js",
       "./kfd-adopter-category-driver": "./packages/core/kfd-adopter-category-driver.js",
       "./buildchain-delivery-infrastructure": "./packages/core/buildchain-delivery-infrastructure.js",
@@ -55,6 +58,7 @@
       "./adopter-delivery-passport": "./packages/core/adopter-delivery-passport.js",
       "./adopter-delivery-vectors": "./packages/core/adopter-delivery-vectors.js",
       "./v4-adopter-delivery": "./packages/core/v4-adopter-delivery.js",
+      "./v4-cross-platform-adopter-qualification": "./packages/core/v4-cross-platform-adopter-qualification.js",
       "./logging": "./packages/core/logging.js",
       "./portable-dev-cache": "./packages/core/portable-dev-cache.js",
       "./publication-artifact": "./packages/core/publication-artifact.js",
@@ -111,6 +115,7 @@
       "./site/schemas/v4-publication-rehearsal-capsule-v1.schema.json": "./dist/site/schemas/v4-publication-rehearsal-capsule-v1.schema.json",
       "./site/schemas/v4-adopter-delivery-v1.schema.json": "./dist/site/schemas/v4-adopter-delivery-v1.schema.json",
       "./site/schemas/release-tail-capabilities-v1.schema.json": "./dist/site/schemas/release-tail-capabilities-v1.schema.json",
+      "./site/schemas/v4-publication-qualification-v1.schema.json": "./dist/site/schemas/v4-publication-qualification-v1.schema.json",
       "./site/buildchain-contract.json": "./dist/site/buildchain-contract.json",
       "./site/product-mechanism.json": "./dist/site/product-mechanism.json",
       "./site/release-provenance.json": "./dist/site/release-provenance.json",

package/dist/site/schemas/v4-publication-qualification-v1.schema.json

@@ -0,0 +1,51 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://kungfu.link/schemas/buildchain/v4-publication-qualification-v1.schema.json",
+  "title": "Buildchain v4 Publication Qualification Receipt",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "repository",
+    "candidateRoot",
+    "sourceSha",
+    "sourceRoot",
+    "policyDigest",
+    "artifacts",
+    "issuedAt",
+    "expiresAt",
+    "artifactRoot",
+    "receiptRoot"
+  ],
+  "properties": {
+    "schema": { "const": "kungfu.buildchain.v4-publication-qualification/v1" },
+    "repository": { "type": "string", "pattern": "^[^/\\s]+/[^/\\s]+$" },
+    "candidateRoot": { "$ref": "#/$defs/root" },
+    "sourceSha": { "type": "string", "pattern": "^[0-9a-f]{40}$" },
+    "sourceRoot": { "$ref": "#/$defs/root" },
+    "policyDigest": { "$ref": "#/$defs/root" },
+    "artifacts": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "$ref": "#/$defs/artifact" }
+    },
+    "issuedAt": { "type": "string", "format": "date-time" },
+    "expiresAt": { "type": "string", "format": "date-time" },
+    "artifactRoot": { "$ref": "#/$defs/root" },
+    "receiptRoot": { "$ref": "#/$defs/root" }
+  },
+  "$defs": {
+    "root": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+    "artifact": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["role", "platform", "artifactRoot", "manifestRoot"],
+      "properties": {
+        "role": { "type": "string", "minLength": 1 },
+        "platform": { "type": "string", "minLength": 1 },
+        "artifactRoot": { "$ref": "#/$defs/root" },
+        "manifestRoot": { "$ref": "#/$defs/root" }
+      }
+    }
+  }
+}

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-08-22T08:48:35.017Z",
-  "publishedAt": "2026-08-22T08:48:35.017Z",
+  "generatedAt": "2026-08-28T20:22:42.731Z",
+  "publishedAt": "2026-08-28T20:22:42.731Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "62b29172d459584f3d7a89616d6c4d3b5e577d8b",
+  "sourceRevision": "9df599a42bebd6595ed92a598a569c40651d8c12",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.1-alpha.8",
+    "version": "4.0.1",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -53,7 +53,7 @@
       "path": "docs/MAP.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:a04d321dbec562807cb29b748039839d097a97d2c9d2f0e76d6d22f2845055ba"
+      "digest": "sha256:cbbc69f9f88b6f7fe8c065de495aa15c30bae46208a81e757b254d43bc6d8ebe"
     },
     {
       "id": "getting-started",
@@ -125,7 +125,7 @@
       "path": "docs/release-candidate.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:d76bbd75aab3c4dd94756c1c64562a125e74369c7c8b97342dbcacc5d7561602"
+      "digest": "sha256:4e79bc9094c929e43c819045e2a2d4132430cd9b307db62e5e21573b7d0a6f53"
     },
     {
       "id": "release-train",
@@ -245,7 +245,7 @@
       "path": "docs/cli-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:ec16f350596692989cf5eade945e7bbeee157a661c6d8faa55c8249b14ef5632"
+      "digest": "sha256:1be0e552967733d9d6e5bf460c84b866fdfb60966ac16177b43370c1367de321"
     },
     {
       "id": "node-api-reference",
@@ -253,7 +253,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:da744d2071ab7871eccbf6b3049a4d8a44b21daa477598fa9327a28b7d89ae67"
+      "digest": "sha256:e9683e04409d60ee1a4e60f89766c158586cf1eb91fc890f0b2660814f05dbdb"
     },
     {
       "id": "build-facts",
@@ -301,7 +301,7 @@
       "path": "docs/v4-adopter-delivery.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:c74a004657f64d29ba2a47f599223e5ab132daf2881cf0564c85c04b22a69e6e"
+      "digest": "sha256:aa8881cb2c9529aefd33147b5bd6f94e8f1ab567a4550bdbd01253252353465e"
     },
     {
       "id": "publish-transaction",
@@ -309,7 +309,7 @@
       "path": "docs/publish-transaction.md",
       "plane": "verify",
       "exists": true,
-      "digest": "sha256:72466943bb459f6857f23ac6f92bcf4714dcd2f535c38a9f0e34864b36404e06"
+      "digest": "sha256:635de0da30769e4e6f956748ec9758338a1ae7921bce73268c2d914ae240693d"
     },
     {
       "id": "release-tail-contract",