@kungfu-tech/buildchain 4.0.1 → 4.0.2-alpha.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (65) hide show
  1. package/architecture/agent-change-map.md +15 -6
  2. package/architecture/ci-lane-change-budget.json +76 -8
  3. package/architecture/internal-capabilities.json +9 -2
  4. package/architecture/maintainability-debt.json +66 -136
  5. package/architecture/maintainability-policy.json +17 -12
  6. package/architecture/release-tail-contract-inventory.json +4 -4
  7. package/architecture/v3-core-mechanism-inventory.json +3 -0
  8. package/architecture/v3-v4-live-capability-inventory.json +17 -17
  9. package/architecture/v4-delivery-warrant-shadow-fixtures.json +5 -5
  10. package/architecture/v4-release-invocation-fixtures.json +139 -0
  11. package/architecture/v4-release-topology.json +316 -0
  12. package/architecture/v4-runtime-semantic-closure.json +4 -1
  13. package/contracts/buildchain-v2-residuals-v1.json +0 -9
  14. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  15. package/contracts/v4-release-invocation-v1.schema.json +134 -0
  16. package/dist/site/buildchain-contract.json +9 -9
  17. package/dist/site/buildchain-site.json +9 -9
  18. package/dist/site/kfd-claims.json +28 -7
  19. package/dist/site/kfd-upstream-aggregate.json +1 -1
  20. package/dist/site/manual-registry.json +1 -1
  21. package/dist/site/node-api-registry.json +92 -17
  22. package/dist/site/page-registry.json +4 -4
  23. package/dist/site/public-surface-audit.json +42 -10
  24. package/dist/site/publication-authority-registry.json +2 -3
  25. package/dist/site/publication-registry.json +4 -4
  26. package/dist/site/site-manifest.json +5 -5
  27. package/dist/site/workflow-registry.json +38 -11
  28. package/docs/dev-delivery-warrant.md +21 -0
  29. package/docs/node-api-reference.md +19 -16
  30. package/package.json +2 -2
  31. package/packages/core/dev-delivery-candidate-identity.js +45 -17
  32. package/packages/core/dev-delivery-execution-transfer.js +6 -7
  33. package/packages/core/dev-delivery-provider-heartbeat.js +22 -6
  34. package/packages/core/dev-delivery-warrant-legacy-recovery.js +248 -0
  35. package/packages/core/dev-delivery-warrant-native-compatibility.js +33 -0
  36. package/packages/core/dev-delivery-warrant-state.js +54 -54
  37. package/packages/core/dev-delivery-warrant.js +8 -0
  38. package/packages/core/dev-delivery-writer-protocol-transition.js +72 -0
  39. package/packages/core/release-tail-product-capabilities.js +29 -0
  40. package/packages/core/release-tail-provider-plane.js +2 -2
  41. package/packages/core/v4-canonical-contracts.js +14 -0
  42. package/packages/core/v4-floating-consumer-policy.js +4 -1
  43. package/packages/core/v4-product-publication.js +387 -0
  44. package/packages/core/v4-protected-publication-source.js +93 -0
  45. package/packages/core/v4-publication-qualification.js +1 -0
  46. package/packages/core/v4-release-invocation.js +425 -0
  47. package/scripts/audit-publication-control-plane.mjs +0 -1
  48. package/scripts/check-inventory.mjs +27 -59
  49. package/scripts/check-maintainability.mjs +13 -5
  50. package/scripts/check-v3-v4-capability-inventory.mjs +3 -61
  51. package/scripts/check-v4-floating-consumer-policy-contract.mjs +10 -20
  52. package/scripts/check-v4-release-topology.mjs +490 -0
  53. package/scripts/dev-delivery-warrant-options.mjs +15 -4
  54. package/scripts/dev-delivery-warrant.mjs +41 -7
  55. package/scripts/generate-channel-promotion-workflow.mjs +14 -55
  56. package/scripts/release-candidate-resolver.mjs +23 -24
  57. package/scripts/resume-from-candidate-run.mjs +16 -17
  58. package/scripts/v3-v4-capability-catalog.mjs +107 -0
  59. package/scripts/v4-declarative-promotion-admission.mjs +4 -1
  60. package/scripts/v4-product-publication-intent.mjs +114 -0
  61. package/scripts/v4-release-candidate-adapter.mjs +41 -0
  62. package/scripts/capture-package-release-propagation.mjs +0 -263
  63. package/scripts/publication-commit-evidence.mjs +0 -444
  64. package/scripts/publish-github-artifact-attestation-evidence.mjs +0 -201
  65. package/scripts/stage-github-artifact-attestation-inputs.mjs +0 -65
@@ -16518,7 +16518,7 @@
16518
16518
  "evidence": {
16519
16519
  "path": ".buildchain/release-impact.json",
16520
16520
  "selector": "$",
16521
- "valueRoot": "sha256:86635418114935d03650376b734aeb2e081648ba519d1f2ae9eece184934a7a3"
16521
+ "valueRoot": "sha256:8411804d1efba911b09a0e83494c68affe7cfede5bc5134f12cbede12be1f655"
16522
16522
  }
16523
16523
  }
16524
16524
  },
@@ -17266,7 +17266,7 @@
17266
17266
  "evidence": {
17267
17267
  "path": "dist/site/node-api-registry.json",
17268
17268
  "selector": "exports[export=\"./github-governance-authority\"]",
17269
- "valueRoot": "sha256:e8fd60fb66ceef4dc83a727c98eec0df00824a2bb5b3cb151b659c022b0acbee"
17269
+ "valueRoot": "sha256:c840ddeacf5eb8da14aee3e6879f0827aa965aa0187aecc36ca776d07bb6cdab"
17270
17270
  }
17271
17271
  }
17272
17272
  },
@@ -17596,7 +17596,7 @@
17596
17596
  "evidence": {
17597
17597
  "path": "dist/site/node-api-registry.json",
17598
17598
  "selector": "exports[export=\"./paper\"]",
17599
- "valueRoot": "sha256:cfcd0b854e3301c651106bb9e1a85980d8d1fdc143b52f197d6cb4722682585e"
17599
+ "valueRoot": "sha256:e86f76742a70d77039c39d9fb106de20c99458ccc07b65fc674328d2a952f819"
17600
17600
  }
17601
17601
  }
17602
17602
  },
@@ -17706,7 +17706,7 @@
17706
17706
  "evidence": {
17707
17707
  "path": "dist/site/node-api-registry.json",
17708
17708
  "selector": "exports[export=\"./publication-control-plane-audit\"]",
17709
- "valueRoot": "sha256:cf82832e74c4e7ae5e5d5ae1c0ec867e6eedefbeebd0a60d803dcd2df68e8813"
17709
+ "valueRoot": "sha256:1bb25a02f8d3ef0148c3e2a4ad9b6a94a841adc1ff1daf94f98d5e34c195fd56"
17710
17710
  }
17711
17711
  }
17712
17712
  },
@@ -17926,7 +17926,7 @@
17926
17926
  "evidence": {
17927
17927
  "path": "dist/site/node-api-registry.json",
17928
17928
  "selector": "exports[export=\"./release-candidate-recovery\"]",
17929
- "valueRoot": "sha256:01261a72dc7d43e61d5a9ec649ce4d7dfee1ab1c0148bd6cff0edad40aba008b"
17929
+ "valueRoot": "sha256:131e9c0f108a311b8246d8dfc55ff9d347cb9255162452f392874d6b01acf203"
17930
17930
  }
17931
17931
  }
17932
17932
  },
@@ -17970,7 +17970,7 @@
17970
17970
  "evidence": {
17971
17971
  "path": "dist/site/node-api-registry.json",
17972
17972
  "selector": "exports[export=\"./release-passport\"]",
17973
- "valueRoot": "sha256:252874ae31215dc568e4184ec199c985b6a7cb8e887c5a89dcb3d73bfe960f02"
17973
+ "valueRoot": "sha256:6a7403eb6020c6af989a721021aa6b9715df7db70c9f5da89f2b689c3ba767ae"
17974
17974
  }
17975
17975
  }
17976
17976
  },
@@ -18168,7 +18168,7 @@
18168
18168
  "evidence": {
18169
18169
  "path": "dist/site/buildchain-contract.json",
18170
18170
  "selector": "$",
18171
- "valueRoot": "sha256:9b6a3e20dc4e4170c22306b8ac4a7ee67aabd2be51646872a1bfdfecb83fff64"
18171
+ "valueRoot": "sha256:5373a6b746a389305d55d58d93b9aebf1ca61e2b13e32aab309e98f41a89b13c"
18172
18172
  }
18173
18173
  }
18174
18174
  },
@@ -18256,7 +18256,7 @@
18256
18256
  "evidence": {
18257
18257
  "path": "dist/site/kfd-claims.json",
18258
18258
  "selector": "$",
18259
- "valueRoot": "sha256:f80363cd21046e7aff9ac3893ece8d8b1684de96ff5119fb0ca9fe8dd4e342bb"
18259
+ "valueRoot": "sha256:94d546cec054e24f53841af5a46808cd452d0005f5bfcf8f7d370711ae446f0b"
18260
18260
  }
18261
18261
  }
18262
18262
  },
@@ -18278,7 +18278,7 @@
18278
18278
  "evidence": {
18279
18279
  "path": "dist/site/manual-registry.json",
18280
18280
  "selector": "$",
18281
- "valueRoot": "sha256:b59b28864798f61c0c893afd23c9a234ef9bafae98fe579bc7a3d160dd89c46b"
18281
+ "valueRoot": "sha256:b446b41f1342623ad5189850985553a9044dd14f3c4a24aa44cfc54db95ce876"
18282
18282
  }
18283
18283
  }
18284
18284
  },
@@ -18300,7 +18300,7 @@
18300
18300
  "evidence": {
18301
18301
  "path": "dist/site/node-api-registry.json",
18302
18302
  "selector": "$",
18303
- "valueRoot": "sha256:872cc8fb9f34546c2f031c2adc04c164196895c4fa039b110546116b826405b8"
18303
+ "valueRoot": "sha256:9b173aa7390cc94d24b9a2b5711a367b15771b73773cd8f0a78f5c71ed054701"
18304
18304
  }
18305
18305
  }
18306
18306
  },
@@ -18322,7 +18322,7 @@
18322
18322
  "evidence": {
18323
18323
  "path": "dist/site/page-registry.json",
18324
18324
  "selector": "$",
18325
- "valueRoot": "sha256:21b32f318518e79b75f1097128c582a27db32934cc0a7d6d625d2bc3c5b9696c"
18325
+ "valueRoot": "sha256:e01f49540ad858f2289ed212bdae9dab01be495f6c57d7d14ab07d3639201d3f"
18326
18326
  }
18327
18327
  }
18328
18328
  },
@@ -18344,7 +18344,7 @@
18344
18344
  "evidence": {
18345
18345
  "path": "dist/site/public-surface-audit.json",
18346
18346
  "selector": "$",
18347
- "valueRoot": "sha256:de1e9d5d7272dab92d5c9190859095facb34493ece6f37a1955aba2c6d7d1aed"
18347
+ "valueRoot": "sha256:dfdf7e6d38ea9b2cfec280831472ba61a825b88578437bc3b4965b61c656e0b1"
18348
18348
  }
18349
18349
  }
18350
18350
  },
@@ -18564,7 +18564,7 @@
18564
18564
  "evidence": {
18565
18565
  "path": "dist/site/site-manifest.json",
18566
18566
  "selector": "$",
18567
- "valueRoot": "sha256:82fa02f7b83f5edcaf93288122d0e653795ed3301b0b6c2ca8ebcd23eddbdeec"
18567
+ "valueRoot": "sha256:52413ce389353ea7fd83598a6f5c2ebbb5a88f163cff60ec4227324384d96fd8"
18568
18568
  }
18569
18569
  }
18570
18570
  },
@@ -18586,7 +18586,7 @@
18586
18586
  "evidence": {
18587
18587
  "path": "dist/site/workflow-registry.json",
18588
18588
  "selector": "$",
18589
- "valueRoot": "sha256:09480a4485d410fb1a073178eea6448258b6c9e22200d22ac1f0519c78beecc7"
18589
+ "valueRoot": "sha256:590efe0d07ae20987f36056835f21e2a17fe40c242eb55032776b9bc4c0c7735"
18590
18590
  }
18591
18591
  }
18592
18592
  },
@@ -68879,7 +68879,7 @@
68879
68879
  "evidence": {
68880
68880
  "path": "architecture/v4-runtime-semantic-closure.json",
68881
68881
  "selector": "capability[id=\"publish-transaction\"]",
68882
- "valueRoot": "sha256:6917cce13c939d813f2ddcf099cf22fbbc2a601ed94bcc3ac56b7e495fc0610a"
68882
+ "valueRoot": "sha256:4e24bcc1f070542ed22f3892d6f75f0d437e3242bfdee770c08788eca4407900"
68883
68883
  }
68884
68884
  }
68885
68885
  },
@@ -102360,9 +102360,9 @@
102360
102360
  },
102361
102361
  "liveV4": {
102362
102362
  "branch": "origin/dev/v4/v4.0",
102363
- "commit": "11b4ab21405cdffcc9d6dc10cd947618d9d1bf9c",
102363
+ "commit": "97edd5b93eb67e5bf36ad55726e08231b47b70c0",
102364
102364
  "role": "execution-time-protected-target",
102365
- "tree": "e427a70d932d1bf9575841c0e89974e70a8f6e23"
102365
+ "tree": "05b14410fd3350bc6a621fe2c1bef575fef9b5fd"
102366
102366
  },
102367
102367
  "priorFamilyV3": {
102368
102368
  "branch": "origin/dev/v3/v3.0",
@@ -66,7 +66,7 @@
66
66
  "now": "2026-08-07T00:02:00Z"
67
67
  }
68
68
  ],
69
- "expectedLegacyProjectionRoot": "sha256:d43159c2ea0d0ea97fb81eb9a2cf262411954d1ce81514c590587e858e95f275"
69
+ "expectedLegacyProjectionRoot": "sha256:eb860ad33e3abb6a93c0635b0f06b4f433bc9b76deaa8e7b648e0ef2e296679b"
70
70
  },
71
71
  {
72
72
  "id": "lease-expiry-and-stale-fence",
@@ -134,7 +134,7 @@
134
134
  "now": "2026-08-07T01:02:03Z"
135
135
  }
136
136
  ],
137
- "expectedLegacyProjectionRoot": "sha256:7798efdf136e97afbc65f5e41c8be918a7d00da566716c861c7b1dedb2092f97"
137
+ "expectedLegacyProjectionRoot": "sha256:3f734b04ac8baaf84a95d9f8746db5fd41dbfd73f147de2f884c09e373157aa9"
138
138
  },
139
139
  {
140
140
  "id": "settlement-idempotence",
@@ -183,7 +183,7 @@
183
183
  "now": "2026-08-07T02:02:00Z"
184
184
  }
185
185
  ],
186
- "expectedLegacyProjectionRoot": "sha256:f1ec1dcd97eb65cc8258bdcf4e17f08311cc23a20acd05f9112a2cef7c685685"
186
+ "expectedLegacyProjectionRoot": "sha256:b71de84b0483fcce3f0ba1f45ac20dead3227fc24a62769192eb16abca7f3a2f"
187
187
  },
188
188
  {
189
189
  "id": "queued-cancellation-idempotence",
@@ -218,7 +218,7 @@
218
218
  "now": "2026-08-07T03:00:03Z"
219
219
  }
220
220
  ],
221
- "expectedLegacyProjectionRoot": "sha256:7000f721d975b379c0f321d935ab70e38589229a691517a3c41d2b1330fd3796"
221
+ "expectedLegacyProjectionRoot": "sha256:a9ce9cad968234febd2ef74c2e6fab77f45899bc5dd74ee7128cadd02a997b8c"
222
222
  },
223
223
  {
224
224
  "id": "cas-response-loss-provider-conflict",
@@ -253,7 +253,7 @@
253
253
  },
254
254
  { "id": "provider-stop", "operation": "provider-conflict" }
255
255
  ],
256
- "expectedLegacyProjectionRoot": "sha256:c616a8278ace8ece6933987cf9559ca53d4e2fba0e937664c2770464800cff04"
256
+ "expectedLegacyProjectionRoot": "sha256:be002515ae6304c3cd325ee4bb6d07e6229922d620389285474325eb20aa27e9"
257
257
  }
258
258
  ]
259
259
  }
@@ -0,0 +1,139 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "contract": "kungfu-buildchain-v4-release-invocation-fixtures/v1",
4
+ "invocations": {
5
+ "alpha": {
6
+ "schema": "kungfu-buildchain-v4-release-invocation/v1",
7
+ "publisher": {
8
+ "repository": "kungfu-systems/buildchain",
9
+ "workflow": ".github/workflows/.release-candidate-promote.yml",
10
+ "workflowSha": "30cbbc46870871a0eacbe952935ea753e473ff25",
11
+ "job": "apply"
12
+ },
13
+ "runtime": {
14
+ "repository": "kungfu-systems/buildchain",
15
+ "commit": "30cbbc46870871a0eacbe952935ea753e473ff25",
16
+ "tree": "b86fea30cb92a32215206f159708a8ea1d10d462"
17
+ },
18
+ "candidate": {
19
+ "repository": "kungfu-systems/kungfu",
20
+ "commit": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
21
+ "tree": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
22
+ "version": "4.0.0-alpha.9"
23
+ },
24
+ "target": {
25
+ "channel": "alpha",
26
+ "tag": "v4.0.0-alpha.9",
27
+ "expectedOldSha": "cccccccccccccccccccccccccccccccccccccccc"
28
+ },
29
+ "authority": {
30
+ "policyRoot": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
31
+ "qualificationRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
32
+ "warrantRoot": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
33
+ },
34
+ "provider": {
35
+ "adapter": "built-in-provider-plane",
36
+ "contract": "kungfu-buildchain-release-tail-provider/v1",
37
+ "repository": "kungfu-systems/kungfu"
38
+ },
39
+ "parent": {
40
+ "invocationRoot": null,
41
+ "transactionRoot": null,
42
+ "receiptRoot": null
43
+ }
44
+ },
45
+ "stable": {
46
+ "schema": "kungfu-buildchain-v4-release-invocation/v1",
47
+ "publisher": {
48
+ "repository": "kungfu-systems/buildchain",
49
+ "workflow": ".github/workflows/.release-candidate-promote.yml",
50
+ "workflowSha": "30cbbc46870871a0eacbe952935ea753e473ff25",
51
+ "job": "apply"
52
+ },
53
+ "runtime": {
54
+ "repository": "kungfu-systems/buildchain",
55
+ "commit": "30cbbc46870871a0eacbe952935ea753e473ff25",
56
+ "tree": "b86fea30cb92a32215206f159708a8ea1d10d462"
57
+ },
58
+ "candidate": {
59
+ "repository": "kungfu-systems/kungfu",
60
+ "commit": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
61
+ "tree": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
62
+ "version": "4.0.0"
63
+ },
64
+ "target": {
65
+ "channel": "stable",
66
+ "tag": "v4.0.0",
67
+ "expectedOldSha": "cccccccccccccccccccccccccccccccccccccccc"
68
+ },
69
+ "authority": {
70
+ "policyRoot": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
71
+ "qualificationRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
72
+ "warrantRoot": "sha256:ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"
73
+ },
74
+ "provider": {
75
+ "adapter": "built-in-provider-plane",
76
+ "contract": "kungfu-buildchain-release-tail-provider/v1",
77
+ "repository": "kungfu-systems/kungfu"
78
+ },
79
+ "parent": {
80
+ "invocationRoot": null,
81
+ "transactionRoot": null,
82
+ "receiptRoot": null
83
+ }
84
+ }
85
+ },
86
+ "cases": [
87
+ {
88
+ "id": "alpha-fresh",
89
+ "invocation": "alpha",
90
+ "route": { "surface": "alpha", "execution": "fresh" }
91
+ },
92
+ {
93
+ "id": "alpha-resume",
94
+ "invocation": "alpha",
95
+ "route": { "surface": "alpha", "execution": "resume" }
96
+ },
97
+ {
98
+ "id": "public-alpha",
99
+ "invocation": "alpha",
100
+ "route": { "surface": "public", "execution": "fresh" }
101
+ },
102
+ {
103
+ "id": "private-alpha",
104
+ "invocation": "alpha",
105
+ "route": { "surface": "private", "execution": "resume" }
106
+ },
107
+ {
108
+ "id": "declarative-alpha",
109
+ "invocation": "alpha",
110
+ "route": { "surface": "declarative", "execution": "fresh" }
111
+ },
112
+ {
113
+ "id": "legacy-alpha",
114
+ "invocation": "alpha",
115
+ "route": { "surface": "legacy-compatible", "execution": "resume" }
116
+ },
117
+ {
118
+ "id": "stable-fresh",
119
+ "invocation": "stable",
120
+ "route": { "surface": "stable", "execution": "fresh" }
121
+ },
122
+ {
123
+ "id": "stable-resume",
124
+ "invocation": "stable",
125
+ "route": { "surface": "stable", "execution": "resume" }
126
+ }
127
+ ],
128
+ "equivalenceGroups": [
129
+ [
130
+ "alpha-fresh",
131
+ "alpha-resume",
132
+ "public-alpha",
133
+ "private-alpha",
134
+ "declarative-alpha",
135
+ "legacy-alpha"
136
+ ],
137
+ ["stable-fresh", "stable-resume"]
138
+ ]
139
+ }
@@ -0,0 +1,316 @@
1
+ {
2
+ "schemaVersion": 1,
3
+ "contract": "kungfu-buildchain-v4-release-topology/v1",
4
+ "sourceCut": {
5
+ "branch": "dev/v4/v4.0",
6
+ "commit": "c3a50c941d018fcc3bec624e19a1298357b7f84a",
7
+ "tree": "213cdcaded8d90c823ecdafdd9968bceceed9057"
8
+ },
9
+ "enforcement": "converged",
10
+ "closedWorld": {
11
+ "workflowPaths": [
12
+ ".github/workflows/.binary-release-assets.yml",
13
+ ".github/workflows/.build.yml",
14
+ ".github/workflows/.declarative-auditable-demo.yml",
15
+ ".github/workflows/.publication-authority.yml",
16
+ ".github/workflows/.release-candidate-promote.yml",
17
+ ".github/workflows/.release-elastic-beanstalk.yml",
18
+ ".github/workflows/.release-new-version.yml",
19
+ ".github/workflows/.sam-release.yml",
20
+ ".github/workflows/.web-surface.yml",
21
+ ".github/workflows/.wheel-release.yml",
22
+ ".github/workflows/auditable-demo.yml",
23
+ ".github/workflows/binary-release-assets.yml",
24
+ ".github/workflows/build-surface-fixture.yml",
25
+ ".github/workflows/build.yml",
26
+ ".github/workflows/buildchain-alpha-self-dogfood.yml",
27
+ ".github/workflows/buildchain-dev-delivery.yml",
28
+ ".github/workflows/buildchain-ref-promotion-recovery.yml",
29
+ ".github/workflows/buildchain-ref-promotion.yml",
30
+ ".github/workflows/buildchain-patrol-daily.yml",
31
+ ".github/workflows/buildchain-patrol-monthly.yml",
32
+ ".github/workflows/buildchain-patrol-weekly.yml",
33
+ ".github/workflows/buildchain-stable-candidate-patrol.yml",
34
+ ".github/workflows/dev-alpha-candidate-patrol.yml",
35
+ ".github/workflows/dev-pr-auto-merge.yml",
36
+ ".github/workflows/github-artifact-attestation.yml",
37
+ ".github/workflows/npm-publish.yml",
38
+ ".github/workflows/paper-release-sealed.yml",
39
+ ".github/workflows/paper-release.yml",
40
+ ".github/workflows/patrol-observed-evidence.yml",
41
+ ".github/workflows/release-candidate-promote.yml",
42
+ ".github/workflows/release-line-bootstrap.yml",
43
+ ".github/workflows/release-new-version.yml",
44
+ ".github/workflows/release-propagation.yml",
45
+ ".github/workflows/release-tail.yml",
46
+ ".github/workflows/stable-candidate-patrol.yml",
47
+ ".github/workflows/v4-publication-rehearsal-dogfood.yml",
48
+ ".github/workflows/v4-declarative-release-tail-dogfood.yml"
49
+ ],
50
+ "unknownTopologyPolicy": "fail-closed"
51
+ },
52
+ "semanticScope": {
53
+ "workflowPaths": [
54
+ ".github/workflows/.release-candidate-promote.yml",
55
+ ".github/workflows/buildchain-ref-promotion-recovery.yml",
56
+ ".github/workflows/buildchain-ref-promotion.yml",
57
+ ".github/workflows/release-candidate-promote.yml",
58
+ ".github/workflows/v4-declarative-release-tail-dogfood.yml"
59
+ ],
60
+ "excludedMechanisms": [
61
+ "Paper product release",
62
+ "npm dry-run",
63
+ "v3 rollback workflows",
64
+ "retired compatibility workflows"
65
+ ]
66
+ },
67
+ "authorityClosure": {
68
+ "providerAdapters": [
69
+ "actions/promote-buildchain-ref/github-release.js",
70
+ "actions/promote-buildchain-ref/v4-provider-plane.js",
71
+ "actions/release-tail/index.js",
72
+ "actions/v4-release-candidate-promote/index.js",
73
+ "actions/v4-release-candidate-promote/product-provider-adapters.js",
74
+ "actions/v4-release-candidate-promote/product-provider-github-adapters.js",
75
+ "actions/v4-release-candidate-promote/product-provider.js",
76
+ "packages/core/buildchain-agent-manuals.js",
77
+ "packages/core/index.js",
78
+ "packages/core/publication-rehearsal-runtime.js",
79
+ "packages/core/release-tail-provider-adapters.js",
80
+ "packages/core/release-tail-provider-plane.js",
81
+ "packages/core/v4-product-publication.js",
82
+ "packages/core/v4-publication-rehearsal-capsule.js",
83
+ "packages/core/v4-publication-rehearsal.js"
84
+ ],
85
+ "runtimeSelectors": [
86
+ ".github/workflows/.build.yml",
87
+ ".github/workflows/.release-candidate-promote.yml",
88
+ ".github/workflows/.web-surface.yml",
89
+ ".github/workflows/buildchain-ref-promotion-recovery.yml",
90
+ ".github/workflows/buildchain-ref-promotion.yml",
91
+ ".github/workflows/paper-release.yml",
92
+ ".github/workflows/publication-artifact.yml",
93
+ ".github/workflows/release-candidate-promote.yml",
94
+ ".github/workflows/v4-tail-reseal.yml",
95
+ "packages/core/buildchain-contract.js",
96
+ "packages/core/v4-runtime-ref-resume-authority.js",
97
+ "packages/core/v4-runtime-selector-persistence.js",
98
+ "scripts/aggregate-build-summary.mjs",
99
+ "scripts/artifact-signing-controller-core.mjs",
100
+ "scripts/authorize-promotion-runtime-override.cjs",
101
+ "scripts/buildchain-contract-lock.mjs",
102
+ "scripts/check-inventory.mjs",
103
+ "scripts/generate-channel-promotion-workflow.mjs",
104
+ "scripts/generate-release-candidate-passport.mjs",
105
+ "scripts/release-candidate-resolver.mjs",
106
+ "scripts/resume-from-candidate-run.mjs",
107
+ "scripts/v4-declarative-promotion-admission.mjs",
108
+ "scripts/v4-release-candidate-adapter.mjs"
109
+ ],
110
+ "runtimeEngines": ["actions/v4-release-candidate-promote/index.js"],
111
+ "terminalProjections": [
112
+ ".github/workflows/.release-candidate-promote.yml",
113
+ "actions/v4-release-candidate-promote/index.js",
114
+ "packages/core/v4-release-invocation.js"
115
+ ],
116
+ "privilegedExecutableClosure": {
117
+ "entrypoints": ["actions/v4-release-candidate-promote/index.js"],
118
+ "modules": [
119
+ "actions/promote-buildchain-ref/github-release.js",
120
+ "actions/promote-buildchain-ref/internal/version-state.js",
121
+ "actions/promote-buildchain-ref/reuse-complete-release.js",
122
+ "actions/promote-buildchain-ref/v4-provider-plane.js",
123
+ "actions/v4-release-candidate-promote/index.js",
124
+ "actions/v4-release-candidate-promote/product-provider-adapters.js",
125
+ "actions/v4-release-candidate-promote/product-provider-github-adapters.js",
126
+ "actions/v4-release-candidate-promote/product-provider.js",
127
+ "packages/core/adopter-delivery-gate.js",
128
+ "packages/core/adopter-delivery-json.js",
129
+ "packages/core/adopter-delivery-passport.js",
130
+ "packages/core/artifact-verification-envelope.js",
131
+ "packages/core/buildchain-channel-identity.js",
132
+ "packages/core/buildchain-compatibility-authority.js",
133
+ "packages/core/buildchain-compatibility-fact.js",
134
+ "packages/core/buildchain-compatibility-facts.json",
135
+ "packages/core/buildchain-compatibility-proof.js",
136
+ "packages/core/buildchain-config.js",
137
+ "packages/core/buildchain-contract.js",
138
+ "packages/core/buildchain-layout.js",
139
+ "packages/core/controller-evidence.js",
140
+ "packages/core/dev-delivery-common.js",
141
+ "packages/core/dev-delivery-contract-surface.js",
142
+ "packages/core/github-artifact-attestation.js",
143
+ "packages/core/kfd-adopter-manifest.js",
144
+ "packages/core/kfd-gate.js",
145
+ "packages/core/kfd-product-gates.js",
146
+ "packages/core/kungfu-temporal-fact.js",
147
+ "packages/core/package-manager.js",
148
+ "packages/core/public-surface-audit.js",
149
+ "packages/core/public-surface-cli.js",
150
+ "packages/core/publication-artifact-candidate.js",
151
+ "packages/core/publication-authority.js",
152
+ "packages/core/publication-sealed-bundle.js",
153
+ "packages/core/publish-transaction.js",
154
+ "packages/core/release-candidate-recovery.js",
155
+ "packages/core/release-candidate.js",
156
+ "packages/core/release-passport-contract.js",
157
+ "packages/core/release-passport.js",
158
+ "packages/core/release-tail-product-capabilities.js",
159
+ "packages/core/release-tail-provider-adapters.js",
160
+ "packages/core/release-tail-provider-plane.js",
161
+ "packages/core/spawn-command.js",
162
+ "packages/core/surface-manifest.js",
163
+ "packages/core/v4-canonical-contracts.js",
164
+ "packages/core/v4-floating-consumer-evidence.js",
165
+ "packages/core/v4-floating-consumer-policy.js",
166
+ "packages/core/v4-floating-consumer-release-passport.js",
167
+ "packages/core/v4-product-publication.js",
168
+ "packages/core/v4-protected-publication-source.js",
169
+ "packages/core/v4-publication-qualification.js",
170
+ "packages/core/v4-release-invocation.js",
171
+ "packages/core/v4-runtime-ref-resume-authority.js",
172
+ "packages/core/v4-runtime-selector-persistence.js",
173
+ "packages/core/web-surface-publication-candidate.js",
174
+ "packages/core/workflow-yaml-contract.js",
175
+ "scripts/ensure-github-release.mjs"
176
+ ],
177
+ "root": "sha256:31d13d74b8b3dadbfe4b5061c99f6f6711be6c3b06449114f2708427374f9c85"
178
+ },
179
+ "legacyEngineModules": [
180
+ "actions/promote-buildchain-ref/internal/durable-transaction-operations.js",
181
+ "actions/promote-buildchain-ref/internal/promote-alpha-channel.js",
182
+ "actions/promote-buildchain-ref/internal/promote-major-channel.js",
183
+ "actions/promote-buildchain-ref/internal/promote-release-channel.js",
184
+ "actions/promote-buildchain-ref/lib.js"
185
+ ],
186
+ "freshEntry": ".github/workflows/release-candidate-promote.yml",
187
+ "recoveryEntry": ".github/workflows/buildchain-ref-promotion-recovery.yml",
188
+ "forbiddenLegacyEnginePatterns": [
189
+ "legacy-promote",
190
+ "v4-declarative-promote",
191
+ "BUILDCHAIN_DECLARATIVE_PROMOTION",
192
+ "Select declarative or legacy promotion result"
193
+ ]
194
+ },
195
+ "baselineMetrics": {
196
+ "workflowCount": 15,
197
+ "jobCount": 38,
198
+ "reusableEdgeCount": 11,
199
+ "mutationRelevantNodeCount": 25,
200
+ "contentsWriteJobCount": 10,
201
+ "oidcWriteJobCount": 9,
202
+ "semanticMutationRelevantNodeCount": 17
203
+ },
204
+ "targetBudgets": {
205
+ "semanticBoundaries": ["QUALIFY", "APPLY", "SETTLE"],
206
+ "maximumMutationRelevantNodeCount": 8,
207
+ "contentsWriteJobCount": 1,
208
+ "oidcWriteJobCount": 1,
209
+ "publisherIdentityCount": 1,
210
+ "runtimeIdentityCount": 1,
211
+ "terminalReceiptAuthorityCount": 1
212
+ },
213
+ "authorityClassification": {
214
+ "publisher": {
215
+ "current": [
216
+ ".github/workflows/.release-candidate-promote.yml#legacy-promote",
217
+ ".github/workflows/.release-candidate-promote.yml#v4-declarative-promote"
218
+ ],
219
+ "target": ".github/workflows/.release-candidate-promote.yml#apply"
220
+ },
221
+ "runtimeSelectors": {
222
+ "discoveryOnly": ["v4-alpha", "v4", "alpha/v4/v4.0"],
223
+ "postAdmissionPolicy": "exact-sha-only"
224
+ },
225
+ "engines": {
226
+ "current": ["legacy-promote", "v4-declarative-promote"],
227
+ "target": "release-transaction"
228
+ },
229
+ "terminalProjections": {
230
+ "current": ["promote", "controller-receipt", "release-tail receipt"],
231
+ "target": "ReleaseReceipt"
232
+ }
233
+ },
234
+ "observedTopology": {
235
+ "jobRecordFields": [
236
+ "id",
237
+ "kind",
238
+ "uses",
239
+ "contentsPermission",
240
+ "oidcPermission",
241
+ "carriers",
242
+ "mutationSignals"
243
+ ],
244
+ "workflows": [
245
+ {
246
+ "path": ".github/workflows/.release-candidate-promote.yml",
247
+ "triggers": ["workflow_call"],
248
+ "jobs": [
249
+ "apply|runner|-|write|write|artifactDownload,artifactUpload|contents-write,oidc-write,promotion-runtime",
250
+ "qualify|runner|-|read|-|artifactUpload,jobOutput|-",
251
+ "settle|runner|-|read|-|artifactDownload,artifactUpload,jobOutput|-"
252
+ ],
253
+ "reusableEdges": []
254
+ },
255
+ {
256
+ "path": ".github/workflows/buildchain-ref-promotion-recovery.yml",
257
+ "triggers": ["workflow_dispatch"],
258
+ "jobs": [
259
+ "resume|reusable-call|kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v4-alpha|write|write|-|contents-write,oidc-write"
260
+ ],
261
+ "reusableEdges": [
262
+ "kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v4-alpha"
263
+ ]
264
+ },
265
+ {
266
+ "path": ".github/workflows/buildchain-ref-promotion.yml",
267
+ "triggers": ["workflow_dispatch", "workflow_run:completed"],
268
+ "jobs": [
269
+ "promote|reusable-call|kungfu-systems/buildchain/.github/workflows/.release-candidate-promote.yml@v4-alpha|write|write|-|contents-write,oidc-write",
270
+ "reject-invalid-candidate-recovery|runner|-|read|-|-|-",
271
+ "reject-invalid-durable-recovery|runner|-|read|-|-|-",
272
+ "reject-manual-apply|runner|-|read|-|-|-"
273
+ ],
274
+ "reusableEdges": [
275
+ "kungfu-systems/buildchain/.github/workflows/.release-candidate-promote.yml@v4-alpha"
276
+ ]
277
+ },
278
+ {
279
+ "path": ".github/workflows/release-candidate-promote.yml",
280
+ "triggers": ["workflow_call"],
281
+ "jobs": [
282
+ "consumer-admission|runner|-|read|-|artifactUpload|-",
283
+ "invoke|reusable-call|kungfu-systems/buildchain/.github/workflows/.release-candidate-promote.yml@v4-alpha|write|write|-|contents-write,oidc-write",
284
+ "resolve-promotion|runner|-|read|-|jobOutput|-"
285
+ ],
286
+ "reusableEdges": [
287
+ "kungfu-systems/buildchain/.github/workflows/.release-candidate-promote.yml@v4-alpha"
288
+ ]
289
+ },
290
+ {
291
+ "path": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
292
+ "triggers": ["workflow_dispatch"],
293
+ "jobs": [
294
+ "publish|reusable-call|kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v4-alpha|-|-|-|-"
295
+ ],
296
+ "reusableEdges": [
297
+ "kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v4-alpha"
298
+ ]
299
+ }
300
+ ],
301
+ "metrics": {
302
+ "workflowCount": 37,
303
+ "jobCount": 92,
304
+ "reusableEdgeCount": 23,
305
+ "mutationRelevantNodeCount": 74,
306
+ "contentsWriteJobCount": 14,
307
+ "oidcWriteJobCount": 16
308
+ },
309
+ "semanticMetrics": {
310
+ "workflowCount": 5,
311
+ "mutationRelevantNodeCount": 8,
312
+ "contentsWriteJobCount": 1,
313
+ "oidcWriteJobCount": 1
314
+ }
315
+ }
316
+ }
@@ -73,7 +73,10 @@
73
73
  "stateAuthority": "single-writer-state-machine",
74
74
  "legacyFallbackAllowed": false,
75
75
  "providerDecisionAuthorityAllowed": false,
76
- "implementation": ["packages/core/dev-delivery-warrant.js"],
76
+ "implementation": [
77
+ "packages/core/dev-delivery-warrant-native-compatibility.js",
78
+ "packages/core/dev-delivery-warrant.js"
79
+ ],
77
80
  "invariants": {
78
81
  "exactHeadFence": true,
79
82
  "immutableRootFence": true,