@kungfu-tech/buildchain 4.0.1 → 4.0.2-alpha.10

package/architecture/agent-change-map.md

@@ -77,7 +77,6 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
 - sources: `scripts/locked-source-checkout.mjs`
 - sources: `scripts/maintainability-domain-metrics.mjs`
 - sources: `scripts/paper.mjs`
-- sources: `scripts/publication-commit-evidence.mjs`
 - sources: `scripts/reconcile-github-governance.mjs`
 - sources: `scripts/release-candidate-resolver.mjs`
 - sources: `scripts/release-line-policy.mjs`
@@ -124,7 +123,6 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
 - tests: `tests/release-passport.test.mjs`
 - tests: `tests/release-propagation.test.mjs`
 - tests: `tests/v4-delivery-authority-parity.test.mjs`
-- tests: `tests/v4-floating-consumer-policy-contract.test.mjs`
 - tests: `tests/v4-floating-consumer-policy.test.mjs`
 - tests: `tests/v4-publication-rehearsal.test.mjs`
 - tests: `tests/web-surface.test.mjs`
@@ -154,6 +152,7 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
 
 - `tests/v3-v4-capability-inventory.test.mjs`
 - `tests/v4-floating-consumer-policy-contract.test.mjs`
+- `tests/v4-publication-qualification.test.mjs`
 - `.github/workflows/v4-adopter-delivery.yml`
 - `.github/workflows/buildchain-ref-promotion.yml`
 - `tests/release-candidate-recovery.test.mjs`
@@ -166,21 +165,26 @@ Safe change route: Reduce one owned responsibility behind the stable facade, run
 - `scripts/check-v3-v4-capability-inventory.mjs`
 - `.github/workflows/release-candidate-promote.yml`
 - `actions/promote-buildchain-ref/lib.js`
+- `actions/v4-release-candidate-promote/index.js`
+- `actions/v4-release-candidate-promote/product-provider.js`
 - `scripts/check-inventory.mjs`
 - `tests/promote-buildchain-ref.test.mjs`
 - `tests/promotion-channel-router.test.mjs`
+- `tests/v4-release-topology.test.mjs`
 - `scripts/site-capability-metadata.mjs`
 - `tests/v4-floating-consumer-policy.test.mjs`
+- `tests/v4-declarative-promotion-mode.test.mjs`
 - `scripts/buildchain-cli-help.mjs`
 - `scripts/check-v4-floating-consumer-policy-contract.mjs`
 - `tests/dev-delivery-warrant.test.mjs`
+- `packages/core/dev-delivery-warrant-state.js`
 - `actions/promote-buildchain-ref/internal/version-state.js`
-- `packages/core/v4-floating-consumer-policy.js`
 - `packages/core/v4-floating-consumer-release-passport.js`
 - `packages/core/release-passport.js`
 - `tests/promote-buildchain-ref-governance.test.mjs`
-- `tests/v4-declarative-promotion-mode.test.mjs`
 - `scripts/buildchain-cli-help.mjs`
+- `scripts/check-maintainability.mjs`
+- `tests/maintainability.test.mjs`
 
 ## cli-command-registry
 
@@ -381,6 +385,7 @@ Owner: Buildchain action maintainers
 
 ### Implementation
 
+- `actions/promote-buildchain-ref/internal/contained-published-version-state.js`
 - `actions/promote-buildchain-ref/internal/promote-alpha-channel.js`
 - `actions/promote-buildchain-ref/internal/promote-major-channel.js`
 - `actions/promote-buildchain-ref/internal/promote-release-channel.js`
@@ -392,6 +397,7 @@ Owner: Buildchain action maintainers
 
 ### Tests
 
+- `tests/promote-buildchain-ref-contained-published-version-state.test.mjs`
 - `tests/promote-buildchain-ref.test.mjs`
 - `tests/promote-buildchain-ref-recovery.test.mjs`
 - `tests/promote-buildchain-ref-governance.test.mjs`
@@ -403,7 +409,7 @@ Owner: Buildchain action maintainers
 
 ### Minimal validation
 
-- `node --test tests/promote-buildchain-ref.test.mjs tests/promote-buildchain-ref-recovery.test.mjs tests/promote-buildchain-ref-governance.test.mjs tests/promotion-responsibilities.test.mjs`
+- `node --test tests/promote-buildchain-ref-contained-published-version-state.test.mjs tests/promote-buildchain-ref.test.mjs tests/promote-buildchain-ref-recovery.test.mjs tests/promote-buildchain-ref-governance.test.mjs tests/promotion-responsibilities.test.mjs`
 
 ## promotion-github-transaction-store
 
@@ -893,7 +899,9 @@ Owner: Buildchain protected delivery maintainers
 
 - `packages/core/dev-delivery-warrant.js`
 - `packages/core/dev-delivery-warrant-state.js`
+- `packages/core/dev-delivery-warrant-native-compatibility.js`
 - `packages/core/dev-delivery-warrant-qualification.js`
+- `packages/core/dev-delivery-warrant-legacy-recovery.js`
 - `packages/core/dev-delivery-native-proof.js`
 - `packages/core/dev-delivery-native-execution.js`
 - `packages/core/dev-delivery-execution-failure.js`
@@ -940,6 +948,7 @@ Owner: Buildchain protected delivery maintainers
 
 - `tests/dev-delivery-warrant.test.mjs`
 - `tests/dev-delivery-warrant-command.test.mjs`
+- `tests/dev-delivery-warrant-legacy-recovery.test.mjs`
 - `tests/dev-delivery-two-phase.test.mjs`
 - `tests/dev-delivery-two-phase-run.test.mjs`
 - `tests/dev-delivery-native-run.test.mjs`
@@ -956,7 +965,7 @@ Owner: Buildchain protected delivery maintainers
 
 ### Minimal validation
 
-- `node --test tests/dev-delivery-warrant.test.mjs tests/dev-delivery-warrant-command.test.mjs tests/dev-delivery-two-phase.test.mjs tests/dev-delivery-two-phase-run.test.mjs tests/dev-delivery-native-run.test.mjs tests/dev-delivery-process-boundary.test.mjs tests/dev-delivery-process-boundary-negative.test.mjs tests/dev-delivery-provider-heartbeat.test.mjs tests/dev-delivery-authority.test.mjs tests/build-surface.test.mjs tests/v4-delivery-authority-parity.test.mjs`
+- `node --test tests/dev-delivery-warrant.test.mjs tests/dev-delivery-warrant-command.test.mjs tests/dev-delivery-warrant-legacy-recovery.test.mjs tests/dev-delivery-two-phase.test.mjs tests/dev-delivery-two-phase-run.test.mjs tests/dev-delivery-native-run.test.mjs tests/dev-delivery-process-boundary.test.mjs tests/dev-delivery-process-boundary-negative.test.mjs tests/dev-delivery-provider-heartbeat.test.mjs tests/dev-delivery-authority.test.mjs tests/build-surface.test.mjs tests/v4-delivery-authority-parity.test.mjs`
 
 ## v4-publication-rehearsal
 

package/architecture/ci-lane-change-budget.json

@@ -185,37 +185,105 @@
   },
   "declarations": [
     {
-      "laneId": ".github/workflows/.release-candidate-promote.yml#legacy-promote",
+      "laneId": ".github/workflows/.release-candidate-promote.yml#qualify",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "serialized",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 30,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "protected release qualification latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "QUALIFY is the read-only exact-runtime and sealed-candidate admission boundary."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.release-candidate-promote.yml#apply",
       "authorityClass": "release",
       "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "serialized",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 30,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "protected release APPLY latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "APPLY is the sole contents-write and provider-mutation OIDC authority boundary."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.release-candidate-promote.yml#settle",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "serialized",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 10,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "terminal receipt projection latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "SETTLE verifies and projects the already durable terminal ReleaseReceipt without mutation authority."
+      }
+    },
+    {
+      "laneId": ".github/workflows/buildchain-ref-promotion-recovery.yml#resume",
+      "authorityClass": "release",
+      "triggerClass": "manual",
       "concurrencyPolicy": {
         "mode": "none",
         "cancelInProgress": false
       },
-      "expectedRunnerMinutes": 45,
+      "expectedRunnerMinutes": 35,
       "cancellationBehavior": "finish-started",
       "sloImpact": {
         "mergeCritical": false,
-        "metric": "protected release completion latency",
+        "metric": "manual recovery adapter latency",
         "expectedContributionSeconds": 0,
-        "rationale": "This is the existing v3 promotion lane under an explicit legacy identity, not an added execution path."
+        "rationale": "The recovery surface is a one-way adapter into the same canonical publisher."
       }
     },
     {
-      "laneId": ".github/workflows/.release-candidate-promote.yml#v4-declarative-promote",
+      "laneId": ".github/workflows/buildchain-ref-promotion.yml#promote",
+      "authorityClass": "release",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 35,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "Buildchain alpha promotion adapter latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The Buildchain-owned alpha entry delegates to the single v4 publisher."
+      }
+    },
+    {
+      "laneId": ".github/workflows/release-candidate-promote.yml#invoke",
       "authorityClass": "release",
       "triggerClass": "reusable",
       "concurrencyPolicy": {
         "mode": "none",
         "cancelInProgress": false
       },
-      "expectedRunnerMinutes": 30,
+      "expectedRunnerMinutes": 35,
       "cancellationBehavior": "finish-started",
       "sloImpact": {
         "mergeCritical": false,
-        "metric": "protected release completion latency",
+        "metric": "public promotion adapter latency",
         "expectedContributionSeconds": 0,
-        "rationale": "The v4 provider lane replaces consumer tail execution only for release invocations and is outside merge-critical CI."
+        "rationale": "The public compatibility surface resolves discovery facts and invokes one fixed v4 publisher."
       }
     },
     {

package/architecture/internal-capabilities.json

@@ -75,7 +75,9 @@
     "scripts/v4-stage-capsule-qualification.mjs",
     "packages/core/dev-delivery-warrant.js",
     "packages/core/dev-delivery-warrant-state.js",
+    "packages/core/dev-delivery-warrant-native-compatibility.js",
     "packages/core/dev-delivery-warrant-qualification.js",
+    "packages/core/dev-delivery-warrant-legacy-recovery.js",
     "packages/core/dev-delivery-native-proof.js",
     "packages/core/dev-delivery-native-execution.js",
     "packages/core/dev-delivery-execution-failure.js",
@@ -269,11 +271,13 @@
       "id": "promotion-channel-orchestration",
       "owner": "Buildchain action maintainers",
       "implementation": [
+        "actions/promote-buildchain-ref/internal/contained-published-version-state.js",
         "actions/promote-buildchain-ref/internal/promote-alpha-channel.js",
         "actions/promote-buildchain-ref/internal/promote-major-channel.js",
         "actions/promote-buildchain-ref/internal/promote-release-channel.js"
       ],
       "tests": [
+        "tests/promote-buildchain-ref-contained-published-version-state.test.mjs",
         "tests/promote-buildchain-ref.test.mjs",
         "tests/promote-buildchain-ref-recovery.test.mjs",
         "tests/promote-buildchain-ref-governance.test.mjs",
@@ -285,7 +289,7 @@
       ],
       "generatedOutputs": ["actions/promote-buildchain-ref/dist/index.js"],
       "validationCommands": [
-        "node --test tests/promote-buildchain-ref.test.mjs tests/promote-buildchain-ref-recovery.test.mjs tests/promote-buildchain-ref-governance.test.mjs tests/promotion-responsibilities.test.mjs"
+        "node --test tests/promote-buildchain-ref-contained-published-version-state.test.mjs tests/promote-buildchain-ref.test.mjs tests/promote-buildchain-ref-recovery.test.mjs tests/promote-buildchain-ref-governance.test.mjs tests/promotion-responsibilities.test.mjs"
       ]
     },
     {
@@ -590,7 +594,9 @@
       "implementation": [
         "packages/core/dev-delivery-warrant.js",
         "packages/core/dev-delivery-warrant-state.js",
+        "packages/core/dev-delivery-warrant-native-compatibility.js",
         "packages/core/dev-delivery-warrant-qualification.js",
+        "packages/core/dev-delivery-warrant-legacy-recovery.js",
         "packages/core/dev-delivery-native-proof.js",
         "packages/core/dev-delivery-native-execution.js",
         "packages/core/dev-delivery-execution-failure.js",
@@ -624,6 +630,7 @@
       "tests": [
         "tests/dev-delivery-warrant.test.mjs",
         "tests/dev-delivery-warrant-command.test.mjs",
+        "tests/dev-delivery-warrant-legacy-recovery.test.mjs",
         "tests/dev-delivery-two-phase.test.mjs",
         "tests/dev-delivery-two-phase-run.test.mjs",
         "tests/dev-delivery-native-run.test.mjs",
@@ -649,7 +656,7 @@
         "dist/site/schemas/dev-delivery-authority-v2.schema.json"
       ],
       "validationCommands": [
-        "node --test tests/dev-delivery-warrant.test.mjs tests/dev-delivery-warrant-command.test.mjs tests/dev-delivery-two-phase.test.mjs tests/dev-delivery-two-phase-run.test.mjs tests/dev-delivery-native-run.test.mjs tests/dev-delivery-process-boundary.test.mjs tests/dev-delivery-process-boundary-negative.test.mjs tests/dev-delivery-provider-heartbeat.test.mjs tests/dev-delivery-authority.test.mjs tests/build-surface.test.mjs tests/v4-delivery-authority-parity.test.mjs"
+        "node --test tests/dev-delivery-warrant.test.mjs tests/dev-delivery-warrant-command.test.mjs tests/dev-delivery-warrant-legacy-recovery.test.mjs tests/dev-delivery-two-phase.test.mjs tests/dev-delivery-two-phase-run.test.mjs tests/dev-delivery-native-run.test.mjs tests/dev-delivery-process-boundary.test.mjs tests/dev-delivery-process-boundary-negative.test.mjs tests/dev-delivery-provider-heartbeat.test.mjs tests/dev-delivery-authority.test.mjs tests/build-surface.test.mjs tests/v4-delivery-authority-parity.test.mjs"
       ]
     },
     {