@kungfu-tech/buildchain 4.0.10-alpha.0 → 4.1.0-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1535) hide show
  1. package/AGENTS.md +35 -5
  2. package/CONTRIBUTING.md +18 -29
  3. package/README.md +55 -29
  4. package/actions/build/artifact/prepare-attestation/README.md +26 -0
  5. package/actions/build/artifact/seal-attestation/README.md +26 -0
  6. package/actions/build/lifecycle/run/README.md +71 -0
  7. package/actions/build/lifecycle/validate/README.md +52 -0
  8. package/actions/governance/incident/report/README.md +107 -0
  9. package/actions/release/promotion/ref/README.md +92 -0
  10. package/architecture/action-taxonomy.json +543 -0
  11. package/architecture/agent-change-map.md +2061 -432
  12. package/architecture/build-environments.json +1 -2
  13. package/architecture/build-orchestration.json +58 -9
  14. package/architecture/capability-state-machine-manifest.json +15 -16
  15. package/architecture/capability-state-machine-manifest.schema.json +2 -2
  16. package/architecture/ci-lane-change-budget.json +2105 -225
  17. package/architecture/code-layout.json +55 -0
  18. package/architecture/core-mechanisms.json +1160 -0
  19. package/architecture/cross-platform-adopter-qualification.json +4 -14
  20. package/architecture/delivery-authority-parity.json +46 -46
  21. package/architecture/delivery-warrant-shadow-bootstrap-plan.json +4 -4
  22. package/architecture/delivery-warrant-shadow-bootstrap-plan.md +3 -3
  23. package/architecture/dev-delivery-orchestration.json +175 -0
  24. package/architecture/floating-consumer-policy.json +15 -11
  25. package/architecture/history/warrant-shadow-observations.json +900 -0
  26. package/architecture/internal-capabilities.json +2332 -358
  27. package/architecture/layered-transition.json +32 -0
  28. package/architecture/maintainability-debt.json +883 -1841
  29. package/architecture/maintainability-policy.json +63 -1438
  30. package/architecture/partial-mutation-recovery-qualification.json +4 -4
  31. package/architecture/platform-stage-checkpoints.json +1 -1
  32. package/architecture/promotion-job-topology.json +85 -0
  33. package/architecture/provider-operation-journal-contract.json +5 -5
  34. package/architecture/publication-facade-patches.json +5 -5
  35. package/architecture/release-activation-shadow-domain.json +4 -4
  36. package/architecture/release-invocation-fixtures.json +31 -16
  37. package/architecture/release-tail-contract-inventory.json +1 -9
  38. package/architecture/release-tail-contract.json +273 -0
  39. package/architecture/release-topology.json +245 -215
  40. package/architecture/runtime-ref-resume-authority.json +1 -1
  41. package/architecture/runtime-semantic-closure.json +27 -17
  42. package/architecture/rust-libnode-bridge-evaluation.json +1 -1
  43. package/architecture/rust-wasm-production-authority.json +7 -7
  44. package/architecture/stable-publication-fence.json +4 -4
  45. package/architecture/stage-capsule-qualification.json +4 -4
  46. package/architecture/stage-capsule-resume-planner.json +1 -1
  47. package/architecture/stage-capsule-store-contract.json +2 -2
  48. package/architecture/tail-reseal-parity.json +22 -17
  49. package/architecture/universal-workflow-bootstrap.json +121 -102
  50. package/architecture/universal-workflow-fault-campaign.json +11 -11
  51. package/architecture/universal-workflow-train-admission.json +44 -8
  52. package/architecture/workflow-taxonomy.json +81 -798
  53. package/bin/buildchain.mjs +2 -1820
  54. package/contracts/buildchain-v2-residuals-v1.json +2 -138
  55. package/contracts/dev-delivery-authority-v2.schema.json +509 -231
  56. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  57. package/contracts/promotion-invocation-v1.schema.json +547 -0
  58. package/contracts/promotion-request-v1.schema.json +472 -0
  59. package/contracts/v4-adopter-delivery-v1.schema.json +1 -1
  60. package/contracts/v4-compatibility-facts-v1.schema.json +4 -4
  61. package/contracts/v4-floating-consumer-policy-receipt-v1.schema.json +124 -21
  62. package/contracts/v4-release-invocation-v1.schema.json +1 -1
  63. package/crates/buildchain-host-bridge/src/main.rs +1 -1
  64. package/dist/site/buildchain-contract.json +145 -2206
  65. package/dist/site/buildchain-site.json +348 -324
  66. package/dist/site/capability-registry.json +17 -17
  67. package/dist/site/cli-registry.json +354 -365
  68. package/dist/site/controller-registry.json +142 -715
  69. package/dist/site/kfd-claims.json +5871 -3138
  70. package/dist/site/kfd-upstream-aggregate.json +1 -1
  71. package/dist/site/manual-registry.json +26 -26
  72. package/dist/site/node-api-registry.json +12561 -16063
  73. package/dist/site/page-registry.json +310 -290
  74. package/dist/site/public-surface-audit.json +3844 -3601
  75. package/dist/site/publication-authority-registry.json +295 -1117
  76. package/dist/site/publication-registry.json +5 -5
  77. package/dist/site/release-provenance.json +80 -90
  78. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +509 -231
  79. package/dist/site/schemas/v4-adopter-delivery-v1.schema.json +1 -1
  80. package/dist/site/schemas/v4-compatibility-facts-v1.schema.json +4 -4
  81. package/dist/site/site-manifest.json +31 -31
  82. package/dist/site/workflow-registry.json +7274 -5321
  83. package/docs/MAP.md +8 -6
  84. package/docs/auditable-demo.md +4 -4
  85. package/docs/aws-us-elastic-runner-burst-plane.md +5 -5
  86. package/docs/binary-distribution.md +2 -2
  87. package/docs/bootstrap-recovery.md +50 -0
  88. package/docs/cli-reference.md +2 -35
  89. package/docs/cli.md +6 -6
  90. package/docs/code-organization.md +131 -0
  91. package/docs/consumer-issue-reporting.md +1 -1
  92. package/docs/dev-alpha-candidate-patrol.md +1 -1
  93. package/docs/dev-delivery-orchestration.md +116 -0
  94. package/docs/dev-delivery-qualification-landing-adr.md +1 -1
  95. package/docs/dev-delivery-warrant.md +5 -2
  96. package/docs/dev-qualification-patrol.md +1 -1
  97. package/docs/engineering-housekeeper.md +3 -3
  98. package/docs/github-artifact-attestation.md +3 -3
  99. package/docs/kfd-support.md +1 -1
  100. package/docs/lifecycle-protocol.md +8 -8
  101. package/docs/migration-inventory.md +6 -6
  102. package/docs/next-development-transition.md +4 -4
  103. package/docs/node-api-reference.md +2273 -2644
  104. package/docs/ownership.md +3 -3
  105. package/docs/publication-artifacts.md +5 -5
  106. package/docs/publication-authority.md +4 -4
  107. package/docs/publish-transaction.md +10 -10
  108. package/docs/release-activation-transaction.md +1 -1
  109. package/docs/release-candidate.md +4 -4
  110. package/docs/release-governance.md +25 -25
  111. package/docs/release-passport.md +2 -2
  112. package/docs/release-promotion-request.md +64 -0
  113. package/docs/release-propagation.md +19 -18
  114. package/docs/release-tail-contract.md +40 -76
  115. package/docs/release-tail-provider-plane.md +17 -26
  116. package/docs/reusable-build-surface.md +22 -16
  117. package/docs/shifu-gate-profiles.md +4 -4
  118. package/docs/site-bundle-contract.md +1 -1
  119. package/docs/stable-candidate-patrol.md +1 -1
  120. package/docs/v4-adopter-delivery.md +50 -121
  121. package/docs/v4-canonical-contracts.md +3 -3
  122. package/docs/v4-compatibility-facts.md +1 -1
  123. package/docs/v4-declarative-release-tail-migration.md +24 -29
  124. package/docs/v4-publication-rehearsal.md +1 -1
  125. package/docs/v4-runtime-ref-resume-authority.md +2 -2
  126. package/docs/v4-rust-wasm-production-authority.md +2 -2
  127. package/docs/v4-stage-capsule.md +1 -1
  128. package/docs/web-surface-deployments.md +22 -28
  129. package/docs/workflow-catalog.md +82 -127
  130. package/docs/workflow-path-migration.md +1 -5
  131. package/package.json +99 -102
  132. package/packages/core/README.md +41 -164
  133. package/packages/core/adoption/adopter-delivery-parity.js +219 -0
  134. package/packages/core/adoption/adopter-delivery.js +210 -0
  135. package/packages/core/adoption/buildchain-kfd-claims.js +733 -0
  136. package/packages/core/adoption/cli/delivery.mjs +39 -0
  137. package/packages/core/adoption/cli/dispatch.mjs +5 -0
  138. package/packages/core/adoption/cli/kfd-aggregate.mjs +20 -0
  139. package/packages/core/adoption/cli/kfd-hub.mjs +53 -0
  140. package/packages/core/adoption/cli/kfd-migrate-layout.mjs +27 -0
  141. package/packages/core/adoption/cli/kfd-schema.mjs +55 -0
  142. package/packages/core/adoption/cli/kfd-status.mjs +21 -0
  143. package/packages/core/adoption/cli/kfd-upstream.mjs +69 -0
  144. package/packages/core/adoption/cli/kfd.mjs +63 -0
  145. package/packages/core/adoption/cli/output.mjs +18 -0
  146. package/packages/core/adoption/cli/product-gate.mjs +110 -0
  147. package/packages/core/adoption/cli/project.mjs +38 -0
  148. package/packages/core/adoption/cli/standards.mjs +282 -0
  149. package/packages/core/adoption/cli/support.mjs +101 -0
  150. package/packages/core/adoption/cli/surface-register.mjs +172 -0
  151. package/packages/core/adoption/commands/cross-platform-adopter-qualification.mjs +28 -0
  152. package/packages/core/adoption/commands/init-repo.mjs +518 -0
  153. package/packages/core/adoption/cross-platform-adopter-qualification.js +217 -0
  154. package/packages/core/adoption/kfd-agent-hub.js +496 -0
  155. package/packages/core/adoption/kfd.js +966 -0
  156. package/packages/core/adoption/kfd2-product-claims.js +454 -0
  157. package/packages/core/adoption/kfd3-surface-register.js +924 -0
  158. package/packages/core/adoption/qualification/actions.js +106 -0
  159. package/packages/core/adoption/qualification/admission.js +96 -0
  160. package/packages/core/adoption/qualification/aggregate.js +10 -0
  161. package/packages/core/adoption/qualification/io.js +51 -0
  162. package/packages/core/adoption/qualification/platform.js +120 -0
  163. package/packages/core/build/anchored-version-material.js +281 -0
  164. package/packages/core/build/artifact/actions.js +47 -0
  165. package/packages/core/build/artifact/attestation.js +166 -0
  166. package/packages/core/build/artifact/contracts.js +168 -0
  167. package/packages/core/build/artifact/coordinates.js +113 -0
  168. package/packages/core/build/artifact/credential-transport.js +68 -0
  169. package/packages/core/build/artifact/expectations.js +94 -0
  170. package/packages/core/build/artifact/files.js +14 -0
  171. package/packages/core/build/artifact/naming.js +65 -0
  172. package/packages/core/build/artifact/services.js +17 -0
  173. package/packages/core/build/artifact/store.js +119 -0
  174. package/packages/core/build/artifact/summary.js +20 -0
  175. package/packages/core/build/artifact/transfer-policy.js +34 -0
  176. package/packages/core/build/artifact/transport.js +112 -0
  177. package/packages/core/build/artifact/upload.js +178 -0
  178. package/packages/core/build/artifact-coordinate-action.js +46 -0
  179. package/packages/core/build/artifact-coordinate.js +58 -0
  180. package/packages/core/build/artifact-integrity.js +10 -0
  181. package/packages/core/build/artifact-passport.js +842 -0
  182. package/packages/core/build/artifact-verification-envelope.js +500 -0
  183. package/packages/core/build/binary/actions.js +77 -0
  184. package/packages/core/build/binary/checksums.js +33 -0
  185. package/packages/core/build/binary/distribution.js +271 -0
  186. package/packages/core/build/binary-publication-dispatch.js +49 -0
  187. package/packages/core/build/build-facts.js +518 -0
  188. package/packages/core/build/cache/compiler-evidence.js +287 -0
  189. package/packages/core/build/cli/cache.mjs +77 -0
  190. package/packages/core/build/cli/facts.mjs +120 -0
  191. package/packages/core/build/cli/homebrew.mjs +101 -0
  192. package/packages/core/build/cli/lifecycle.mjs +66 -0
  193. package/packages/core/build/commands/aggregate-build-summary.mjs +75 -0
  194. package/packages/core/build/commands/anchored-version-material.mjs +42 -0
  195. package/packages/core/build/commands/artifact-signing-controller.mjs +112 -0
  196. package/packages/core/build/commands/artifact-signing-delegation.mjs +34 -0
  197. package/packages/core/build/commands/auditable-demo-platform.mjs +77 -0
  198. package/packages/core/build/commands/auditable-demo-transport-smoke.mjs +24 -0
  199. package/packages/core/build/commands/auditable-demo.mjs +63 -0
  200. package/packages/core/build/commands/compiler-cache-evidence.mjs +39 -0
  201. package/packages/core/build/commands/dispatch-artifact-signing-authority.mjs +19 -0
  202. package/packages/core/build/commands/import-artifact-signing-results.mjs +10 -0
  203. package/packages/core/build/commands/lifecycle-substage-evidence.mjs +42 -0
  204. package/packages/core/build/commands/resolve-artifact-coordinates.mjs +58 -0
  205. package/packages/core/build/commands/resolve-artifact-transfer-mode.mjs +54 -0
  206. package/packages/core/build/commands/resolve-build-configuration.mjs +23 -0
  207. package/packages/core/build/commands/resolve-build-contract.mjs +94 -0
  208. package/packages/core/build/commands/run-candidate-body-prefix-renderer.mjs +24 -0
  209. package/packages/core/build/commands/run-lifecycle.mjs +56 -0
  210. package/packages/core/build/commands/seal-artifact-signing-requests.mjs +10 -0
  211. package/packages/core/build/commands/seal-macos-credential-input.mjs +4 -0
  212. package/packages/core/build/commands/shifu-gate-profile.mjs +43 -0
  213. package/packages/core/build/commands/source-verification-evidence.mjs +14 -0
  214. package/packages/core/build/commands/stage-capsule-qualification.mjs +79 -0
  215. package/packages/core/build/commands/validate-package-manager-contract.mjs +24 -0
  216. package/packages/core/build/credential/seal-input.js +109 -0
  217. package/packages/core/build/demo/action-context.js +25 -0
  218. package/packages/core/build/demo/adapter-actions.js +35 -0
  219. package/packages/core/build/demo/adapter-transactions.js +66 -0
  220. package/packages/core/build/demo/adapter.js +272 -0
  221. package/packages/core/build/demo/binary-action.js +29 -0
  222. package/packages/core/build/demo/bundle-verification.js +211 -0
  223. package/packages/core/build/demo/capture-adaptation.js +37 -0
  224. package/packages/core/build/demo/capture.js +377 -0
  225. package/packages/core/build/demo/collection-actions.js +62 -0
  226. package/packages/core/build/demo/collection-containers.js +136 -0
  227. package/packages/core/build/demo/collection-context.js +40 -0
  228. package/packages/core/build/demo/collection.js +129 -0
  229. package/packages/core/build/demo/composition.js +319 -0
  230. package/packages/core/build/demo/container.js +113 -0
  231. package/packages/core/build/demo/gate.js +297 -0
  232. package/packages/core/build/demo/inspection-worker.js +4 -0
  233. package/packages/core/build/demo/io.js +220 -0
  234. package/packages/core/build/demo/materialization.js +350 -0
  235. package/packages/core/build/demo/media-bundle.js +112 -0
  236. package/packages/core/build/demo/media-inspection.js +332 -0
  237. package/packages/core/build/demo/media-profile.js +399 -0
  238. package/packages/core/build/demo/media-qualification-action.js +37 -0
  239. package/packages/core/build/demo/media-qualification.js +117 -0
  240. package/packages/core/build/demo/presentation.js +222 -0
  241. package/packages/core/build/demo/publication.js +118 -0
  242. package/packages/core/build/demo/renderer-evidence.js +193 -0
  243. package/packages/core/build/demo/renditions.js +398 -0
  244. package/packages/core/build/demo/scenario.js +493 -0
  245. package/packages/core/build/demo/schema.js +278 -0
  246. package/packages/core/build/demo/transport-smoke.js +149 -0
  247. package/packages/core/build/demo/values.js +137 -0
  248. package/packages/core/build/environment/action.js +17 -0
  249. package/packages/core/build/environment/provision.js +121 -0
  250. package/packages/core/build/gate/actions.js +99 -0
  251. package/packages/core/build/gate/aggregate.js +21 -0
  252. package/packages/core/build/gate/commands.js +66 -0
  253. package/packages/core/build/gate/controller.js +43 -0
  254. package/packages/core/build/gate/environment.js +18 -0
  255. package/packages/core/build/gate/execution.js +88 -0
  256. package/packages/core/build/gate/files.js +46 -0
  257. package/packages/core/build/gate/outputs.js +31 -0
  258. package/packages/core/build/gate/plan.js +61 -0
  259. package/packages/core/build/github-artifact-attestation.js +642 -0
  260. package/packages/core/build/github-attestation/action.js +26 -0
  261. package/packages/core/build/github-attestation/admission.js +34 -0
  262. package/packages/core/build/github-attestation/transaction.js +83 -0
  263. package/packages/core/build/homebrew.js +416 -0
  264. package/packages/core/build/lifecycle/action.js +65 -0
  265. package/packages/core/build/lifecycle/artifacts.js +123 -0
  266. package/packages/core/build/lifecycle/context.js +202 -0
  267. package/packages/core/build/lifecycle/diagnostics.js +254 -0
  268. package/packages/core/build/lifecycle/errors.js +44 -0
  269. package/packages/core/build/lifecycle/execution.js +221 -0
  270. package/packages/core/build/lifecycle/files.js +61 -0
  271. package/packages/core/build/lifecycle/manifest.js +107 -0
  272. package/packages/core/build/lifecycle/sampling.js +209 -0
  273. package/packages/core/build/lifecycle/stage-action.js +18 -0
  274. package/packages/core/build/lifecycle/stage.js +143 -0
  275. package/packages/core/build/lifecycle/substage-evidence.js +232 -0
  276. package/packages/core/build/lifecycle/transaction.js +13 -0
  277. package/packages/core/build/macos-credential-island/action.js +704 -0
  278. package/packages/core/build/macos-credential-island/cleanup.js +48 -0
  279. package/packages/core/build/macos-credential-island/dmg-assembly.js +443 -0
  280. package/packages/core/build/macos-credential-island/lib.js +816 -0
  281. package/packages/core/build/package-manager.js +315 -0
  282. package/packages/core/build/plan/action-context.js +30 -0
  283. package/packages/core/build/plan/action.js +79 -0
  284. package/packages/core/build/plan/admission.js +93 -0
  285. package/packages/core/build/plan/configuration.js +196 -0
  286. package/packages/core/build/plan/environment.js +18 -0
  287. package/packages/core/build/plan/identity.js +49 -0
  288. package/packages/core/build/plan/lifecycle.js +38 -0
  289. package/packages/core/build/plan/matrices.js +58 -0
  290. package/packages/core/build/plan/resolve.js +76 -0
  291. package/packages/core/build/plan/runners.js +48 -0
  292. package/packages/core/build/plan/source.js +58 -0
  293. package/packages/core/build/plan/stage-order.js +10 -0
  294. package/packages/core/build/plan/values.js +10 -0
  295. package/packages/core/build/platform-stage-checkpoints.js +471 -0
  296. package/packages/core/build/release-evidence-bundle.js +156 -0
  297. package/packages/core/build/runner/matrix.js +266 -0
  298. package/packages/core/build/runner/presets.js +115 -0
  299. package/packages/core/build/signing/actions.js +54 -0
  300. package/packages/core/build/signing/authority-actions.js +147 -0
  301. package/packages/core/build/signing/authority-transaction.js +82 -0
  302. package/packages/core/build/signing/control.js +223 -0
  303. package/packages/core/build/signing/controller-transaction.js +110 -0
  304. package/packages/core/build/signing/credential-transaction.js +66 -0
  305. package/packages/core/build/signing/delegation.js +281 -0
  306. package/packages/core/build/signing/detached.js +170 -0
  307. package/packages/core/build/signing/dispatch.js +307 -0
  308. package/packages/core/build/signing/environment.js +13 -0
  309. package/packages/core/build/signing/files.js +53 -0
  310. package/packages/core/build/signing/import-results.js +151 -0
  311. package/packages/core/build/signing/intake.js +113 -0
  312. package/packages/core/build/signing/materialize.js +54 -0
  313. package/packages/core/build/signing/merge-results.js +82 -0
  314. package/packages/core/build/signing/native-result.js +244 -0
  315. package/packages/core/build/signing/prepare.js +44 -0
  316. package/packages/core/build/signing/request.js +519 -0
  317. package/packages/core/build/signing/seal-requests.js +402 -0
  318. package/packages/core/build/signing/transaction.js +158 -0
  319. package/packages/core/build/signing/verify-results.js +118 -0
  320. package/packages/core/build/source/checkout-action.js +16 -0
  321. package/packages/core/build/source/controller-actions.js +52 -0
  322. package/packages/core/build/source/controller.js +182 -0
  323. package/packages/core/build/source/lifecycle-action.js +32 -0
  324. package/packages/core/build/source/lifecycle.js +134 -0
  325. package/packages/core/build/source/proof-actions.js +57 -0
  326. package/packages/core/build/source/proof-lookup.js +82 -0
  327. package/packages/core/build/source/proof.js +134 -0
  328. package/packages/core/build/source-admission.js +35 -0
  329. package/packages/core/build/stage-capsule/actions.js +53 -0
  330. package/packages/core/build/stage-capsule/campaign/aggregate.js +51 -0
  331. package/packages/core/build/stage-capsule/campaign/context.js +51 -0
  332. package/packages/core/build/stage-capsule/campaign/resume.js +240 -0
  333. package/packages/core/build/stage-capsule/campaign/run.js +47 -0
  334. package/packages/core/build/stage-capsule/campaign/seed.js +124 -0
  335. package/packages/core/build/stage-capsule/campaign/worker.js +17 -0
  336. package/packages/core/build/stage-capsule/canary.js +62 -0
  337. package/packages/core/build/stage-capsule/rehearsal/checkpoint.js +110 -0
  338. package/packages/core/build/stage-capsule/rehearsal/files.js +36 -0
  339. package/packages/core/build/stage-capsule/rehearsal/macos-tail.js +104 -0
  340. package/packages/core/build/stage-capsule/rehearsal/resume.js +38 -0
  341. package/packages/core/build/stage-capsule/rehearsal/run.js +46 -0
  342. package/packages/core/build/stage-capsule/rehearsal/verify.js +56 -0
  343. package/packages/core/build/stage-capsule/rehearsal/worker.js +11 -0
  344. package/packages/core/build/stage-capsule-local-store.js +428 -0
  345. package/packages/core/build/stage-capsule-qualification-campaign.js +511 -0
  346. package/packages/core/build/stage-capsule-qualification.js +455 -0
  347. package/packages/core/build/stage-capsule-resume-planner.js +397 -0
  348. package/packages/core/build/stage-capsule-store.js +404 -0
  349. package/packages/core/build/stage-capsule.js +319 -0
  350. package/packages/core/build/standalone/build.js +266 -0
  351. package/packages/core/build/standalone/bundle.js +69 -0
  352. package/packages/core/build/standalone/identity.js +47 -0
  353. package/packages/core/build/standalone/logging.js +72 -0
  354. package/packages/core/build/standalone/process.js +50 -0
  355. package/packages/core/build/summary/action.js +33 -0
  356. package/packages/core/build/summary/aggregation.js +120 -0
  357. package/packages/core/build/summary/artifacts.js +165 -0
  358. package/packages/core/build/summary/controller-receipt.js +50 -0
  359. package/packages/core/build/summary/execution.js +39 -0
  360. package/packages/core/build/summary/finalization.js +133 -0
  361. package/packages/core/build/summary/payloads.js +80 -0
  362. package/packages/core/build/validate-config/action.js +58 -0
  363. package/packages/core/build/validate-config/lib.js +42 -0
  364. package/packages/core/build/verification/actions.js +54 -0
  365. package/packages/core/build/verification/discovery.js +115 -0
  366. package/packages/core/build/verification/identity.js +123 -0
  367. package/packages/core/build/verification/proof.js +8 -0
  368. package/packages/core/build/verification/repository.js +4 -0
  369. package/packages/core/build/verification/runner.js +69 -0
  370. package/packages/core/build/verification/source.js +169 -0
  371. package/packages/core/consumer/buildchain-config.js +1825 -0
  372. package/packages/core/consumer/channel-selection.js +211 -0
  373. package/packages/core/consumer/cli/infrastructure.mjs +6 -0
  374. package/packages/core/consumer/commands/buildchain-channel-router.mjs +81 -0
  375. package/packages/core/consumer/commands/consumer-policy.mjs +229 -0
  376. package/packages/core/consumer/floating-consumer-evidence.js +341 -0
  377. package/packages/core/consumer/floating-consumer-policy.js +596 -0
  378. package/packages/core/consumer/invocation-selector.js +4 -0
  379. package/packages/core/consumer/policy-admission.js +103 -0
  380. package/packages/core/consumer/policy-scan.js +33 -0
  381. package/packages/core/consumer/runtime-selector-persistence.js +291 -0
  382. package/packages/core/consumer/workflow-definition-authority.js +64 -0
  383. package/packages/core/contracts/action-inventory.js +78 -0
  384. package/packages/core/contracts/action-taxonomy.js +46 -0
  385. package/packages/core/contracts/buildchain-contract.js +1038 -0
  386. package/packages/core/contracts/canonical-contracts.js +239 -0
  387. package/packages/core/contracts/cli/context.mjs +28 -0
  388. package/packages/core/contracts/cli/introspection.mjs +47 -0
  389. package/packages/core/contracts/cli/options.mjs +85 -0
  390. package/packages/core/contracts/cli-reference.js +192 -0
  391. package/packages/core/contracts/commands/buildchain-contract-lock.mjs +120 -0
  392. package/packages/core/contracts/commands/workflow-call-contract.mjs +133 -0
  393. package/packages/core/contracts/public-surface-audit.js +274 -0
  394. package/packages/core/contracts/public-surface-cli.js +134 -0
  395. package/packages/core/contracts/runtime-contract-action.js +48 -0
  396. package/packages/core/contracts/runtime-contract-inspection.js +115 -0
  397. package/packages/core/contracts/structured-values.js +29 -0
  398. package/packages/core/contracts/workflow-yaml-contract.js +373 -0
  399. package/packages/core/dev-delivery/admission/gh-cli-client.js +110 -0
  400. package/packages/core/dev-delivery/admission/github-client.js +274 -0
  401. package/packages/core/dev-delivery/admission/policy.js +177 -0
  402. package/packages/core/dev-delivery/admission/queue.js +554 -0
  403. package/packages/core/dev-delivery/admission/readiness.js +222 -0
  404. package/packages/core/dev-delivery/admission/report.js +27 -0
  405. package/packages/core/dev-delivery/admission/request.js +34 -0
  406. package/packages/core/dev-delivery/admission/targeted.js +375 -0
  407. package/packages/core/dev-delivery/admission/transaction.js +47 -0
  408. package/packages/core/dev-delivery/buildchain-delivery-bootstrap.js +240 -0
  409. package/packages/core/dev-delivery/buildchain-delivery-infrastructure.js +164 -0
  410. package/packages/core/dev-delivery/buildchain-delivery-self-dogfood.js +395 -0
  411. package/packages/core/dev-delivery/candidate/admission-actions.js +34 -0
  412. package/packages/core/dev-delivery/candidate/admission.js +172 -0
  413. package/packages/core/dev-delivery/candidate/coordinates.js +46 -0
  414. package/packages/core/dev-delivery/candidate/evidence.js +20 -0
  415. package/packages/core/dev-delivery/candidate/request.js +39 -0
  416. package/packages/core/dev-delivery/candidate/reservation-action.js +21 -0
  417. package/packages/core/dev-delivery/candidate/reservation.js +98 -0
  418. package/packages/core/dev-delivery/candidate/source-paths.js +102 -0
  419. package/packages/core/dev-delivery/candidate/submission.js +41 -0
  420. package/packages/core/dev-delivery/cli/dispatch.mjs +54 -0
  421. package/packages/core/dev-delivery/commands/dev-delivery-authority-command-adapters.mjs +193 -0
  422. package/packages/core/dev-delivery/commands/dev-delivery-authority-provider.mjs +28 -0
  423. package/packages/core/dev-delivery/commands/dev-delivery-authority.mjs +454 -0
  424. package/packages/core/dev-delivery/commands/dev-delivery-process-boundary.mjs +93 -0
  425. package/packages/core/dev-delivery/commands/dev-delivery-proof.mjs +258 -0
  426. package/packages/core/dev-delivery/commands/dev-delivery-provider-heartbeat.mjs +76 -0
  427. package/packages/core/dev-delivery/commands/dev-delivery-request.sh +160 -0
  428. package/packages/core/dev-delivery/commands/dev-delivery-source-proof-reuse.mjs +128 -0
  429. package/packages/core/dev-delivery/commands/dev-delivery-two-phase.mjs +180 -0
  430. package/packages/core/dev-delivery/commands/dev-delivery-warrant-options.mjs +283 -0
  431. package/packages/core/dev-delivery/commands/dev-delivery-warrant.mjs +65 -0
  432. package/packages/core/dev-delivery/commands/dev-merge-queue.mjs +98 -0
  433. package/packages/core/dev-delivery/commands/dev-pr-auto-merge.mjs +111 -0
  434. package/packages/core/dev-delivery/commands/dev-pr-delivery-warrant.mjs +467 -0
  435. package/packages/core/dev-delivery/commands/dev-pr-prequeue-guard.mjs +381 -0
  436. package/packages/core/dev-delivery/commands/dev-qualification-patrol.mjs +21 -0
  437. package/packages/core/dev-delivery/delivery-warrant-fixture-runner.js +375 -0
  438. package/packages/core/dev-delivery/delivery-warrant-read-candidate.js +281 -0
  439. package/packages/core/dev-delivery/delivery-warrant-semantic-diff-gate.js +351 -0
  440. package/packages/core/dev-delivery/delivery-warrant-shadow-adapter.js +444 -0
  441. package/packages/core/dev-delivery/dev-delivery-authority-candidate.js +197 -0
  442. package/packages/core/dev-delivery/dev-delivery-authority-landing.js +459 -0
  443. package/packages/core/dev-delivery/dev-delivery-authority-state.js +424 -0
  444. package/packages/core/dev-delivery/dev-delivery-candidate-identity.js +152 -0
  445. package/packages/core/dev-delivery/dev-delivery-contract-surface.js +74 -0
  446. package/packages/core/dev-delivery/dev-delivery-native-proof.js +509 -0
  447. package/packages/core/dev-delivery/dev-delivery-proof.js +282 -0
  448. package/packages/core/dev-delivery/dev-delivery-warrant-native-requirements.js +7 -0
  449. package/packages/core/dev-delivery/dev-delivery-warrant-state.js +580 -0
  450. package/packages/core/dev-delivery/dev-delivery-warrant.js +588 -0
  451. package/packages/core/dev-delivery/merge-queue-policy.js +543 -0
  452. package/packages/core/dev-delivery/native/action-context.js +59 -0
  453. package/packages/core/dev-delivery/native/actions.js +74 -0
  454. package/packages/core/dev-delivery/native/attempt.js +93 -0
  455. package/packages/core/dev-delivery/native/candidate.js +101 -0
  456. package/packages/core/dev-delivery/native/context-record.js +26 -0
  457. package/packages/core/dev-delivery/native/execution.js +176 -0
  458. package/packages/core/dev-delivery/native/failure.js +105 -0
  459. package/packages/core/dev-delivery/native/files.js +11 -0
  460. package/packages/core/dev-delivery/native/finalizer-admission.js +93 -0
  461. package/packages/core/dev-delivery/native/heartbeat-action.js +29 -0
  462. package/packages/core/dev-delivery/native/heartbeat.js +137 -0
  463. package/packages/core/dev-delivery/native/provider-boundary.js +71 -0
  464. package/packages/core/dev-delivery/native/qualification.js +228 -0
  465. package/packages/core/dev-delivery/native/readback.js +32 -0
  466. package/packages/core/dev-delivery/native/reuse.js +60 -0
  467. package/packages/core/dev-delivery/native/seal-action.js +19 -0
  468. package/packages/core/dev-delivery/native/transactions.js +156 -0
  469. package/packages/core/dev-delivery/native/transfer.js +122 -0
  470. package/packages/core/dev-delivery/published-delivery-authority.js +266 -0
  471. package/packages/core/dev-delivery/qualification/action.js +60 -0
  472. package/packages/core/dev-delivery/qualification/controller.js +218 -0
  473. package/packages/core/dev-delivery/qualification/github-client.js +108 -0
  474. package/packages/core/dev-delivery/qualification/model.js +186 -0
  475. package/packages/core/dev-delivery/qualification/report.js +25 -0
  476. package/packages/core/dev-delivery/queue/completion.js +52 -0
  477. package/packages/core/dev-delivery/queue/landing-action.js +60 -0
  478. package/packages/core/dev-delivery/queue/reconciliation-action.js +45 -0
  479. package/packages/core/dev-delivery/source-proof/evidence.js +92 -0
  480. package/packages/core/dev-delivery/source-proof/io.js +97 -0
  481. package/packages/core/dev-delivery/source-proof/predicates.js +88 -0
  482. package/packages/core/dev-delivery/source-proof/replay.js +143 -0
  483. package/packages/core/dev-delivery/source-proof/reuse.js +116 -0
  484. package/packages/core/dev-delivery/source-proof/seal.js +32 -0
  485. package/packages/core/dev-delivery/warrant/actions.js +78 -0
  486. package/packages/core/dev-delivery/warrant/cancellation.js +49 -0
  487. package/packages/core/dev-delivery/warrant/failure-settlement.js +93 -0
  488. package/packages/core/dev-delivery/warrant/handoff.js +107 -0
  489. package/packages/core/dev-delivery/warrant/observation.js +59 -0
  490. package/packages/core/dev-delivery/warrant/persistence.js +109 -0
  491. package/packages/core/dev-delivery/warrant/reservation-readback.js +72 -0
  492. package/packages/core/dev-delivery/warrant/service.js +134 -0
  493. package/packages/core/dev-delivery/warrant/terminal-policy.js +53 -0
  494. package/packages/core/dev-delivery/warrant/terminal.js +89 -0
  495. package/packages/core/dev-delivery/warrant/transitions.js +222 -0
  496. package/packages/core/dev-delivery/warrant/values.js +102 -0
  497. package/packages/core/governance/alpha-candidate/action.js +96 -0
  498. package/packages/core/governance/alpha-candidate/controller.js +490 -0
  499. package/packages/core/governance/alpha-candidate/lifecycle.js +121 -0
  500. package/packages/core/governance/alpha-candidate/options.js +60 -0
  501. package/packages/core/governance/alpha-candidate/outputs.js +23 -0
  502. package/packages/core/governance/alpha-candidate/provider.js +192 -0
  503. package/packages/core/governance/alpha-candidate/report.js +56 -0
  504. package/packages/core/governance/alpha-candidate/state.js +184 -0
  505. package/packages/core/governance/alpha-candidate/values.js +90 -0
  506. package/packages/core/governance/architecture-graph.js +24 -0
  507. package/packages/core/governance/audit/actions.js +57 -0
  508. package/packages/core/governance/audit/collection.js +259 -0
  509. package/packages/core/governance/audit/github-reader.js +204 -0
  510. package/packages/core/governance/audit/identity.js +86 -0
  511. package/packages/core/governance/audit/incident.mjs +39 -0
  512. package/packages/core/governance/audit/transactions.js +75 -0
  513. package/packages/core/governance/buildchain-compatibility-authority.js +335 -0
  514. package/packages/core/governance/buildchain-compatibility-fact.js +386 -0
  515. package/packages/core/governance/buildchain-compatibility-facts.json +18 -0
  516. package/packages/core/governance/buildchain-compatibility-proof.js +523 -0
  517. package/packages/core/governance/buildchain-publication-authority.js +117 -0
  518. package/packages/core/governance/candidate/body-action.js +18 -0
  519. package/packages/core/governance/candidate/body-renderer.js +160 -0
  520. package/packages/core/governance/ci-lane-change-budget.js +260 -0
  521. package/packages/core/governance/cli/compatibility-facts.mjs +101 -0
  522. package/packages/core/governance/cli/dispatch.mjs +19 -0
  523. package/packages/core/governance/cli/doctor.mjs +144 -0
  524. package/packages/core/governance/commands/architecture.mjs +594 -0
  525. package/packages/core/governance/commands/audit-github-governance.mjs +43 -0
  526. package/packages/core/governance/commands/audit-publication-control-plane.mjs +26 -0
  527. package/packages/core/governance/commands/buildchain-patrol.mjs +32 -0
  528. package/packages/core/governance/commands/create-github-artifact-attestation-policy.mjs +62 -0
  529. package/packages/core/governance/commands/engineering-housekeeper-workflow.mjs +23 -0
  530. package/packages/core/governance/commands/reconcile-github-governance.mjs +689 -0
  531. package/packages/core/governance/commands/reconcile-release-governance.mjs +77 -0
  532. package/packages/core/governance/commands/workflow-friction-report.mjs +375 -0
  533. package/packages/core/governance/github-governance-authority.js +1367 -0
  534. package/packages/core/governance/housekeeping/action.js +45 -0
  535. package/packages/core/governance/housekeeping/execution.js +75 -0
  536. package/packages/core/governance/housekeeping/options.js +103 -0
  537. package/packages/core/governance/housekeeping/report.js +53 -0
  538. package/packages/core/governance/housekeeping/transactions.js +96 -0
  539. package/packages/core/governance/patrol/action.js +41 -0
  540. package/packages/core/governance/patrol/controller.js +125 -0
  541. package/packages/core/governance/patrol/options.js +121 -0
  542. package/packages/core/governance/patrol/report.js +53 -0
  543. package/packages/core/governance/patrol/transaction.js +30 -0
  544. package/packages/core/governance/publication/audit.js +26 -0
  545. package/packages/core/governance/publication/collection.js +396 -0
  546. package/packages/core/governance/publication/policy-values.js +227 -0
  547. package/packages/core/governance/publication/source-authorization.js +293 -0
  548. package/packages/core/governance/receipt-admission-action.js +12 -0
  549. package/packages/core/governance/receipt-admission.js +34 -0
  550. package/packages/core/governance/release-check-policy.js +179 -0
  551. package/packages/core/governance/release-reconciliation-action.js +25 -0
  552. package/packages/core/governance/release-reconciliation.js +122 -0
  553. package/packages/core/governance/report-issue/action.js +201 -0
  554. package/packages/core/index.js +85 -117
  555. package/packages/core/observability/cli/candidate.mjs +42 -0
  556. package/packages/core/observability/cli/context.mjs +47 -0
  557. package/packages/core/observability/cli/diagnostics.mjs +88 -0
  558. package/packages/core/observability/cli/events.mjs +126 -0
  559. package/packages/core/observability/cli/process-sample.mjs +71 -0
  560. package/packages/core/observability/commands/aggregate-diagnostics-summary.mjs +45 -0
  561. package/packages/core/observability/commands/controller-evidence.mjs +109 -0
  562. package/packages/core/observability/commands/observed-evidence.mjs +27 -0
  563. package/packages/core/observability/controller/identity-action.js +11 -0
  564. package/packages/core/observability/controller/identity.js +32 -0
  565. package/packages/core/observability/controller-actions.js +63 -0
  566. package/packages/core/observability/controller-evidence-io.js +112 -0
  567. package/packages/core/observability/controller-evidence.js +555 -0
  568. package/packages/core/observability/controller-input-boundary.js +47 -0
  569. package/packages/core/observability/diagnostics/aggregate.js +25 -0
  570. package/packages/core/observability/diagnostics.js +1904 -0
  571. package/packages/core/observability/evidence/actions.js +20 -0
  572. package/packages/core/observability/evidence/bundle.js +163 -0
  573. package/packages/core/observability/evidence/publication.js +360 -0
  574. package/packages/core/observability/evidence/transactions.js +62 -0
  575. package/packages/core/observability/process/sampling.js +128 -0
  576. package/packages/core/observability/publisher-admission.js +26 -0
  577. package/packages/core/observability/transaction-journal.js +40 -0
  578. package/packages/core/paper/cli/dispatch.mjs +17 -0
  579. package/packages/core/paper/commands/paper-agent-cli.mjs +35 -0
  580. package/packages/core/paper/commands/paper-work-fleet-cli.mjs +577 -0
  581. package/packages/core/paper/commands/paper.mjs +632 -0
  582. package/packages/core/paper/operations/bootstrap.js +73 -0
  583. package/packages/core/paper/operations/files.js +48 -0
  584. package/packages/core/paper/operations/github-observation.js +136 -0
  585. package/packages/core/paper/operations/identity.js +59 -0
  586. package/packages/core/paper/operations/npm-observation.js +118 -0
  587. package/packages/core/paper/operations/plans.js +213 -0
  588. package/packages/core/paper/operations/preflight-checks.js +269 -0
  589. package/packages/core/paper/operations/provisioning-validation.js +155 -0
  590. package/packages/core/paper/operations/provisioning.js +113 -0
  591. package/packages/core/paper/operations/runtime-observation.js +25 -0
  592. package/packages/core/paper/operations/runtime.js +84 -0
  593. package/packages/core/paper/operations/scaffold-config.js +77 -0
  594. package/packages/core/paper/operations/scaffold-workflows.js +99 -0
  595. package/packages/core/paper/operations/scaffold.js +370 -0
  596. package/packages/core/paper/operations/status-facts.js +264 -0
  597. package/packages/core/paper/operations/status.js +353 -0
  598. package/packages/core/paper/operations/toolchain-observation.js +49 -0
  599. package/packages/core/paper/operations/workspace.js +60 -0
  600. package/packages/core/paper/paper-agent-entry.js +396 -0
  601. package/packages/core/paper/paper-fleet.js +310 -0
  602. package/packages/core/paper/paper-npm-bootstrap.js +492 -0
  603. package/packages/core/paper/paper-repository.js +214 -0
  604. package/packages/core/paper/paper-runtime-channels.js +344 -0
  605. package/packages/core/paper/paper-scaffold-content.js +574 -0
  606. package/packages/core/paper/paper.js +308 -0
  607. package/packages/core/paper/publication/actions.js +109 -0
  608. package/packages/core/paper/publication/candidate.js +140 -0
  609. package/packages/core/paper/publication/controller.js +117 -0
  610. package/packages/core/paper/publication/envelope.js +118 -0
  611. package/packages/core/paper/publication/propagation.js +135 -0
  612. package/packages/core/paper/publication/readback.js +89 -0
  613. package/packages/core/paper/publication/target.js +54 -0
  614. package/packages/core/paper/publication-controller.js +144 -0
  615. package/packages/core/providers/artifact-relay/files.js +71 -0
  616. package/packages/core/providers/artifact-relay/s3-client.js +259 -0
  617. package/packages/core/providers/artifact-relay/transactions.js +258 -0
  618. package/packages/core/providers/commands/artifact-relay-s3.mjs +62 -0
  619. package/packages/core/providers/commands/aws-codebuild-toolchain.mjs +15 -0
  620. package/packages/core/providers/commands/aws-macos-jit-controller-runtime.mjs +82 -0
  621. package/packages/core/providers/commands/aws-runner-burst-core.mjs +249 -0
  622. package/packages/core/providers/commands/aws-runner-burst.mjs +80 -0
  623. package/packages/core/providers/commands/aws-windows-jit-campaign.mjs +202 -0
  624. package/packages/core/providers/commands/aws-windows-jit-controller.mjs +578 -0
  625. package/packages/core/providers/commands/aws-windows-jit-operator.sh +506 -0
  626. package/packages/core/providers/commands/infra-contract-core.mjs +1032 -0
  627. package/packages/core/providers/commands/infra-contract.mjs +345 -0
  628. package/packages/core/providers/commands/locked-source-checkout.mjs +9 -0
  629. package/packages/core/providers/commands/route-offline-runners.mjs +30 -0
  630. package/packages/core/providers/demo/capture-worker.py +541 -0
  631. package/packages/core/providers/dev-delivery/candidate.js +112 -0
  632. package/packages/core/providers/dev-delivery/protection.js +29 -0
  633. package/packages/core/providers/dev-delivery/store.js +292 -0
  634. package/packages/core/providers/git/fetch-process.js +27 -0
  635. package/packages/core/providers/git/fetch-worker.js +146 -0
  636. package/packages/core/providers/git/patch-root.js +54 -0
  637. package/packages/core/providers/git-ref-readback.mjs +22 -0
  638. package/packages/core/providers/github/artifact-attestation.js +32 -0
  639. package/packages/core/providers/github/commits.js +32 -0
  640. package/packages/core/providers/github/json-client.js +65 -0
  641. package/packages/core/providers/github/product-publication.js +44 -0
  642. package/packages/core/providers/github/publication-control-plane.js +116 -0
  643. package/packages/core/providers/github/pull-requests.js +24 -0
  644. package/packages/core/providers/github/qualification.js +181 -0
  645. package/packages/core/providers/github/release-assets.js +91 -0
  646. package/packages/core/providers/github/signing-request.js +81 -0
  647. package/packages/core/providers/github/source-lock.js +98 -0
  648. package/packages/core/providers/github-cli-api.js +35 -0
  649. package/packages/core/providers/github-issue-comment.js +83 -0
  650. package/packages/core/providers/github-permission.js +11 -0
  651. package/packages/core/providers/github-token.js +121 -0
  652. package/packages/core/providers/process/sample-worker.mjs +14 -0
  653. package/packages/core/providers/runner/observation.js +30 -0
  654. package/packages/core/providers/runner/offline-routing.js +205 -0
  655. package/packages/core/providers/signing/detached-key.js +20 -0
  656. package/packages/core/providers/signing/macos/compound-archive.py +434 -0
  657. package/packages/core/providers/signing/macos/sign-request.sh +145 -0
  658. package/packages/core/providers/signing/native.js +77 -0
  659. package/packages/core/providers/signing/windows/sign-request.ps1 +48 -0
  660. package/packages/core/providers/source-checkout/action.js +31 -0
  661. package/packages/core/providers/source-checkout/auth.js +32 -0
  662. package/packages/core/providers/source-checkout/fetch.js +135 -0
  663. package/packages/core/providers/source-checkout/git.js +220 -0
  664. package/packages/core/providers/source-checkout/transaction.js +360 -0
  665. package/packages/core/providers/source-checkout/values.js +115 -0
  666. package/packages/core/providers/source-checkout/workspace.js +50 -0
  667. package/packages/core/providers/sync-git/action.mjs +16 -0
  668. package/packages/core/providers/sync-git/transfer.mjs +86 -0
  669. package/packages/core/providers/toolchain/codebuild-policy.js +36 -0
  670. package/packages/core/providers/toolchain/codebuild.js +220 -0
  671. package/packages/core/publication/authority/actions.js +156 -0
  672. package/packages/core/publication/authority/admission.js +113 -0
  673. package/packages/core/publication/authority/assembly.js +77 -0
  674. package/packages/core/publication/authority/binary-evidence.js +77 -0
  675. package/packages/core/publication/authority/candidate-evidence.js +42 -0
  676. package/packages/core/publication/authority/consumer-gate.js +80 -0
  677. package/packages/core/publication/authority/control-plane.js +38 -0
  678. package/packages/core/publication/authority/evidence.js +113 -0
  679. package/packages/core/publication/authority/gate.js +39 -0
  680. package/packages/core/publication/authority/governance.js +61 -0
  681. package/packages/core/publication/authority/paper-evidence.js +24 -0
  682. package/packages/core/publication/authority/request.js +13 -0
  683. package/packages/core/publication/authority/result.js +37 -0
  684. package/packages/core/publication/authority/runner.js +26 -0
  685. package/packages/core/publication/authority/seal.js +97 -0
  686. package/packages/core/publication/authority/verification-evidence.js +80 -0
  687. package/packages/core/publication/authority/verification.js +94 -0
  688. package/packages/core/publication/binary/action.js +33 -0
  689. package/packages/core/publication/binary/capability.js +55 -0
  690. package/packages/core/publication/binary/evidence.js +109 -0
  691. package/packages/core/publication/binary/transaction.js +38 -0
  692. package/packages/core/publication/candidate/artifact.js +71 -0
  693. package/packages/core/publication/candidate/collection-action.js +24 -0
  694. package/packages/core/publication/candidate/collection.js +70 -0
  695. package/packages/core/publication/candidate/kind.js +93 -0
  696. package/packages/core/publication/candidate/manifest.js +35 -0
  697. package/packages/core/publication/candidate/package-binding.js +42 -0
  698. package/packages/core/publication/candidate/package.js +50 -0
  699. package/packages/core/publication/candidate/paper-package.js +120 -0
  700. package/packages/core/publication/candidate/passport.js +36 -0
  701. package/packages/core/publication/candidate/qualification-action.js +41 -0
  702. package/packages/core/publication/candidate/qualification.js +56 -0
  703. package/packages/core/publication/candidate/registry-hydration.js +204 -0
  704. package/packages/core/publication/candidate/reproducibility.js +29 -0
  705. package/packages/core/publication/candidate/sealing.js +184 -0
  706. package/packages/core/publication/candidate/stage-capsules.js +205 -0
  707. package/packages/core/publication/candidate/toolchain.js +80 -0
  708. package/packages/core/publication/cli/dispatch.mjs +107 -0
  709. package/packages/core/publication/commands/create-release-bundle.mjs +32 -0
  710. package/packages/core/publication/commands/generate-release-candidate-passport.mjs +80 -0
  711. package/packages/core/publication/commands/installer-publication.mjs +45 -0
  712. package/packages/core/publication/commands/npm-publish-dry-run.mjs +48 -0
  713. package/packages/core/publication/commands/npm-publish-transaction.mjs +55 -0
  714. package/packages/core/publication/commands/publication-artifact-candidate.mjs +48 -0
  715. package/packages/core/publication/commands/publication-artifact.mjs +67 -0
  716. package/packages/core/publication/commands/publication-package.mjs +38 -0
  717. package/packages/core/publication/commands/publication-registry-hydrate.mjs +19 -0
  718. package/packages/core/publication/commands/publication-reproducibility.mjs +62 -0
  719. package/packages/core/publication/installer/evidence.js +319 -0
  720. package/packages/core/publication/npm/environment.js +18 -0
  721. package/packages/core/publication/npm/evidence.js +57 -0
  722. package/packages/core/publication/npm/pack-preview.js +22 -0
  723. package/packages/core/publication/npm/package-plan.js +82 -0
  724. package/packages/core/publication/npm/package.js +120 -0
  725. package/packages/core/publication/npm/preview-action.js +30 -0
  726. package/packages/core/publication/npm/preview.js +92 -0
  727. package/packages/core/publication/npm/registry.js +61 -0
  728. package/packages/core/publication/npm/transaction.js +115 -0
  729. package/packages/core/publication/oci/preview-actions.js +48 -0
  730. package/packages/core/publication/oci/preview-admission.js +93 -0
  731. package/packages/core/publication/oci/preview-promotion.js +64 -0
  732. package/packages/core/publication/oci/preview-registry.js +36 -0
  733. package/packages/core/publication/oci/preview-transaction.js +42 -0
  734. package/packages/core/publication/oci/preview-values.js +8 -0
  735. package/packages/core/publication/oci-compose-qualification.js +143 -0
  736. package/packages/core/publication/oci-publication-bundle.js +281 -0
  737. package/packages/core/publication/publication-artifact-candidate.js +128 -0
  738. package/packages/core/publication/publication-artifact.js +641 -0
  739. package/packages/core/publication/publication-authority.js +1163 -0
  740. package/packages/core/publication/publication-development.js +72 -0
  741. package/packages/core/publication/publication-package.js +252 -0
  742. package/packages/core/publication/publication-rehearsal-capsule.js +468 -0
  743. package/packages/core/publication/publication-rehearsal-projection.js +104 -0
  744. package/packages/core/publication/publication-rehearsal-runtime.js +190 -0
  745. package/packages/core/publication/publication-rehearsal.js +481 -0
  746. package/packages/core/publication/publication-reproducibility.js +947 -0
  747. package/packages/core/publication/settlement/actions.js +63 -0
  748. package/packages/core/publication/settlement/transaction.js +197 -0
  749. package/packages/core/release/binary/coordinates-action.js +25 -0
  750. package/packages/core/release/binary/coordinates.js +76 -0
  751. package/packages/core/release/candidate/download.js +64 -0
  752. package/packages/core/release/candidate/lineage.js +72 -0
  753. package/packages/core/release/candidate/materialize.js +155 -0
  754. package/packages/core/release/candidate/payloads.js +330 -0
  755. package/packages/core/release/candidate/publication-intent.js +89 -0
  756. package/packages/core/release/candidate/resolve.js +132 -0
  757. package/packages/core/release/candidate/run-selection.js +88 -0
  758. package/packages/core/release/candidate/selection.js +181 -0
  759. package/packages/core/release/candidate/transport.js +143 -0
  760. package/packages/core/release/cli/command-handlers.mjs +14 -0
  761. package/packages/core/release/cli/dispatch.mjs +39 -0
  762. package/packages/core/release/cli/inspection-handlers.mjs +178 -0
  763. package/packages/core/release/cli/release-handlers.mjs +332 -0
  764. package/packages/core/release/cli/trust-release.mjs +19 -0
  765. package/packages/core/release/cli/verification-handlers.mjs +303 -0
  766. package/packages/core/release/commands/dev-alpha-candidate-patrol.mjs +42 -0
  767. package/packages/core/release/commands/ensure-github-release.mjs +199 -0
  768. package/packages/core/release/commands/next-development-review.mjs +77 -0
  769. package/packages/core/release/commands/next-development-transition.mjs +47 -0
  770. package/packages/core/release/commands/promotion-channel-router.mjs +62 -0
  771. package/packages/core/release/commands/promotion-identity-resolver.mjs +77 -0
  772. package/packages/core/release/commands/publish-source-ref-resolver.mjs +113 -0
  773. package/packages/core/release/commands/release-candidate-resolver.mjs +122 -0
  774. package/packages/core/release/commands/release-line-dry-run.mjs +53 -0
  775. package/packages/core/release/commands/release-propagation.mjs +411 -0
  776. package/packages/core/release/commands/release-tail.mjs +169 -0
  777. package/packages/core/release/commands/release-transaction.mjs +212 -0
  778. package/packages/core/release/commands/resolve-publish-gate.mjs +34 -0
  779. package/packages/core/release/commands/resolve-publish-source.mjs +96 -0
  780. package/packages/core/release/commands/resume-from-candidate-run.mjs +107 -0
  781. package/packages/core/release/commands/stable-candidate-patrol.mjs +31 -0
  782. package/packages/core/release/commands/stable-candidate-qualification.mjs +24 -0
  783. package/packages/core/release/commands/stable-release-gate.mjs +351 -0
  784. package/packages/core/release/commands/tail-reseal.mjs +148 -0
  785. package/packages/core/release/commands/verify-promotion-router-binding.sh +36 -0
  786. package/packages/core/release/commands/verify-publish-channel-ref.mjs +83 -0
  787. package/packages/core/release/commands/verify-publish-source-lock.mjs +37 -0
  788. package/packages/core/release/commands/verify-release-pr.mjs +6 -0
  789. package/packages/core/release/commands/verify-version-state-delta.mjs +21 -0
  790. package/packages/core/release/github-provider-plane.js +319 -0
  791. package/packages/core/release/github-release.js +385 -0
  792. package/packages/core/release/line/action.js +49 -0
  793. package/packages/core/release/line/governance.js +96 -0
  794. package/packages/core/release/line/plan.js +56 -0
  795. package/packages/core/release/line/policy.js +320 -0
  796. package/packages/core/release/line/protection.js +35 -0
  797. package/packages/core/release/line/request.js +22 -0
  798. package/packages/core/release/line/source.js +79 -0
  799. package/packages/core/release/line/transaction.js +33 -0
  800. package/packages/core/release/line/verification-action.js +13 -0
  801. package/packages/core/release/line/verification.js +13 -0
  802. package/packages/core/release/next-development/actions.js +122 -0
  803. package/packages/core/release/next-development/approval.js +59 -0
  804. package/packages/core/release/next-development/enqueue.js +51 -0
  805. package/packages/core/release/next-development/finalization.js +127 -0
  806. package/packages/core/release/next-development/observation.js +41 -0
  807. package/packages/core/release/next-development/review-policy.js +56 -0
  808. package/packages/core/release/next-development/verification.js +89 -0
  809. package/packages/core/release/next-development-projection.js +310 -0
  810. package/packages/core/release/next-development-transition.js +737 -0
  811. package/packages/core/release/partial-mutation-recovery-qualification.js +18 -0
  812. package/packages/core/release/passport/artifact-index.js +65 -0
  813. package/packages/core/release/passport/assembly-artifacts.js +43 -0
  814. package/packages/core/release/passport/assembly-inputs.js +107 -0
  815. package/packages/core/release/passport/assembly-material.js +261 -0
  816. package/packages/core/release/passport/assembly-render.js +320 -0
  817. package/packages/core/release/passport/assembly.js +12 -0
  818. package/packages/core/release/passport/assets.js +46 -0
  819. package/packages/core/release/passport/attachments.js +88 -0
  820. package/packages/core/release/passport/authoritative-base.js +123 -0
  821. package/packages/core/release/passport/build.js +39 -0
  822. package/packages/core/release/passport/collection-inputs.js +383 -0
  823. package/packages/core/release/passport/collection-material.js +199 -0
  824. package/packages/core/release/passport/collection-options.js +97 -0
  825. package/packages/core/release/passport/collection-output.js +303 -0
  826. package/packages/core/release/passport/collection.js +10 -0
  827. package/packages/core/release/passport/commands.js +44 -0
  828. package/packages/core/release/passport/consumer-input.js +18 -0
  829. package/packages/core/release/passport/consumer-validation.js +83 -0
  830. package/packages/core/release/passport/discovery.js +36 -0
  831. package/packages/core/release/passport/documents.js +116 -0
  832. package/packages/core/release/passport/evidence-validation.js +280 -0
  833. package/packages/core/release/passport/files.js +43 -0
  834. package/packages/core/release/passport/fixture.js +19 -0
  835. package/packages/core/release/passport/identity.js +46 -0
  836. package/packages/core/release/passport/impact-validation.js +230 -0
  837. package/packages/core/release/passport/impact.js +149 -0
  838. package/packages/core/release/passport/inputs.js +55 -0
  839. package/packages/core/release/passport/invariants.js +93 -0
  840. package/packages/core/release/passport/issues.js +29 -0
  841. package/packages/core/release/passport/json.js +16 -0
  842. package/packages/core/release/passport/locations.js +82 -0
  843. package/packages/core/release/passport/packages.js +123 -0
  844. package/packages/core/release/passport/publish-validation.js +279 -0
  845. package/packages/core/release/passport/publish.js +58 -0
  846. package/packages/core/release/passport/report.js +154 -0
  847. package/packages/core/release/passport/state-validation.js +163 -0
  848. package/packages/core/release/passport/transaction.js +69 -0
  849. package/packages/core/release/passport/trust-claims.js +365 -0
  850. package/packages/core/release/passport/trust-validation.js +528 -0
  851. package/packages/core/release/product-publication.js +59 -0
  852. package/packages/core/release/promote-candidate/action.js +9 -0
  853. package/packages/core/release/promote-candidate/development-source.js +39 -0
  854. package/packages/core/release/promote-candidate/evidence-binding.js +142 -0
  855. package/packages/core/release/promote-candidate/evidence-inputs.js +99 -0
  856. package/packages/core/release/promote-candidate/files.js +10 -0
  857. package/packages/core/release/promote-candidate/next-development-provider.js +300 -0
  858. package/packages/core/release/promote-candidate/next-development-queue.js +63 -0
  859. package/packages/core/release/promote-candidate/oci-provider.js +241 -0
  860. package/packages/core/release/promote-candidate/oci-registry-client.js +67 -0
  861. package/packages/core/release/promote-candidate/outputs.js +29 -0
  862. package/packages/core/release/promote-candidate/product-finalization-wait.js +52 -0
  863. package/packages/core/release/promote-candidate/product-provider-adapters.js +462 -0
  864. package/packages/core/release/promote-candidate/product-provider-github-adapters.js +595 -0
  865. package/packages/core/release/promote-candidate/product-provider.js +188 -0
  866. package/packages/core/release/promote-candidate/provider-request.js +51 -0
  867. package/packages/core/release/promote-candidate/provider-settlement.js +83 -0
  868. package/packages/core/release/promote-candidate/publication-completion.js +56 -0
  869. package/packages/core/release/promote-candidate/release-documents.js +156 -0
  870. package/packages/core/release/promote-candidate/transaction.js +130 -0
  871. package/packages/core/release/promote-ref/action-environment.js +2 -0
  872. package/packages/core/release/promote-ref/action-inputs.js +285 -0
  873. package/packages/core/release/promote-ref/action-outputs.js +140 -0
  874. package/packages/core/release/promote-ref/action-request.js +205 -0
  875. package/packages/core/release/promote-ref/action.js +92 -0
  876. package/packages/core/release/promote-ref/internal/branch-protection.js +218 -0
  877. package/packages/core/release/promote-ref/internal/candidate-admission.js +149 -0
  878. package/packages/core/release/promote-ref/internal/channel-governance.js +297 -0
  879. package/packages/core/release/promote-ref/internal/channel-resume.js +198 -0
  880. package/packages/core/release/promote-ref/internal/channel-tags.js +207 -0
  881. package/packages/core/release/promote-ref/internal/contained-published-version-state.js +80 -0
  882. package/packages/core/release/promote-ref/internal/durable-transaction-operations.js +463 -0
  883. package/packages/core/release/promote-ref/internal/durable-transaction-store.js +395 -0
  884. package/packages/core/release/promote-ref/internal/generated-branch.js +16 -0
  885. package/packages/core/release/promote-ref/internal/generated-identity.js +12 -0
  886. package/packages/core/release/promote-ref/internal/generated-ref.js +93 -0
  887. package/packages/core/release/promote-ref/internal/github-adapter.js +312 -0
  888. package/packages/core/release/promote-ref/internal/npm-distribution.js +185 -0
  889. package/packages/core/release/promote-ref/internal/npm-existing-evidence.js +61 -0
  890. package/packages/core/release/promote-ref/internal/passport-files.js +116 -0
  891. package/packages/core/release/promote-ref/internal/passport-generation.js +567 -0
  892. package/packages/core/release/promote-ref/internal/promote-alpha-channel.js +588 -0
  893. package/packages/core/release/promote-ref/internal/promote-major-channel.js +476 -0
  894. package/packages/core/release/promote-ref/internal/promote-release-channel.js +573 -0
  895. package/packages/core/release/promote-ref/internal/promotion-operations.js +1170 -0
  896. package/packages/core/release/promote-ref/internal/promotion-options.js +101 -0
  897. package/packages/core/release/promote-ref/internal/promotion-policy.js +218 -0
  898. package/packages/core/release/promote-ref/internal/publish-command.js +211 -0
  899. package/packages/core/release/promote-ref/internal/publish-contract.js +181 -0
  900. package/packages/core/release/promote-ref/internal/publish-transaction.js +510 -0
  901. package/packages/core/release/promote-ref/internal/tag-selection.js +159 -0
  902. package/packages/core/release/promote-ref/internal/transaction-context.js +506 -0
  903. package/packages/core/release/promote-ref/internal/transaction-recovery.js +379 -0
  904. package/packages/core/release/promote-ref/internal/version-state-operations.js +545 -0
  905. package/packages/core/release/promote-ref/lib.js +600 -0
  906. package/packages/core/release/promote-ref/release-tail.js +102 -0
  907. package/packages/core/release/promote-ref/source-lock.js +91 -0
  908. package/packages/core/release/promotion/actions.js +133 -0
  909. package/packages/core/release/promotion/admission.js +52 -0
  910. package/packages/core/release/promotion/candidate.js +71 -0
  911. package/packages/core/release/promotion/channel.js +104 -0
  912. package/packages/core/release/promotion/identities.js +56 -0
  913. package/packages/core/release/promotion/product-state.js +68 -0
  914. package/packages/core/release/promotion/publish-gate.js +128 -0
  915. package/packages/core/release/promotion/qualification-action.js +72 -0
  916. package/packages/core/release/promotion/qualification.js +95 -0
  917. package/packages/core/release/promotion/routing.js +94 -0
  918. package/packages/core/release/promotion/selection.js +55 -0
  919. package/packages/core/release/promotion/source-intent.js +35 -0
  920. package/packages/core/release/promotion-request.js +148 -0
  921. package/packages/core/release/propagation/actions.js +75 -0
  922. package/packages/core/release/propagation/delivery.js +202 -0
  923. package/packages/core/release/propagation/planning.js +197 -0
  924. package/packages/core/release/propagation/report.js +97 -0
  925. package/packages/core/release/propagation/store.js +26 -0
  926. package/packages/core/release/propagation/transactions.js +213 -0
  927. package/packages/core/release/propagation/work.js +146 -0
  928. package/packages/core/release/protected-publication-source.js +91 -0
  929. package/packages/core/release/provider-operation-journal.js +62 -0
  930. package/packages/core/release/provider-readback-idempotency.js +309 -0
  931. package/packages/core/release/qualification/actions.js +51 -0
  932. package/packages/core/release/qualification/campaign.js +154 -0
  933. package/packages/core/release/qualification/options.js +102 -0
  934. package/packages/core/release/qualification/public-build.js +109 -0
  935. package/packages/core/release/recovery/artifacts.js +161 -0
  936. package/packages/core/release/recovery/candidate.js +529 -0
  937. package/packages/core/release/recovery/capsules.js +102 -0
  938. package/packages/core/release/recovery/download.js +191 -0
  939. package/packages/core/release/recovery/files.js +39 -0
  940. package/packages/core/release/recovery/provenance.js +199 -0
  941. package/packages/core/release/recovery/publication.js +193 -0
  942. package/packages/core/release/recovery/readback.js +169 -0
  943. package/packages/core/release/recovery/runtime.js +224 -0
  944. package/packages/core/release/recovery/transactions.js +139 -0
  945. package/packages/core/release/release-activation-shadow.js +32 -0
  946. package/packages/core/release/release-blocker-priority.js +183 -0
  947. package/packages/core/release/release-candidate-recovery.js +595 -0
  948. package/packages/core/release/release-candidate.js +591 -0
  949. package/packages/core/release/release-invocation.js +64 -0
  950. package/packages/core/release/release-line-bootstrap.js +292 -0
  951. package/packages/core/release/release-line-dry-run.js +302 -0
  952. package/packages/core/release/release-passport-contract.js +479 -0
  953. package/packages/core/release/release-passport.js +74 -0
  954. package/packages/core/release/release-tail-provider-adapters.js +460 -0
  955. package/packages/core/release/release-tail-provider-plane.js +248 -0
  956. package/packages/core/release/reseal/actions.js +84 -0
  957. package/packages/core/release/reseal/admission.js +75 -0
  958. package/packages/core/release/reseal/files.js +39 -0
  959. package/packages/core/release/reseal/finalize-platform.js +65 -0
  960. package/packages/core/release/reseal/outputs.js +21 -0
  961. package/packages/core/release/reseal/plan.js +24 -0
  962. package/packages/core/release/reseal/platform.js +135 -0
  963. package/packages/core/release/reseal/readbacks.js +36 -0
  964. package/packages/core/release/reseal/seal.js +125 -0
  965. package/packages/core/release/reuse-complete-release.js +240 -0
  966. package/packages/core/release/runtime-override-authorization.js +242 -0
  967. package/packages/core/release/settle/action.js +412 -0
  968. package/packages/core/release/source/channel.js +45 -0
  969. package/packages/core/release/source/coordinates.js +160 -0
  970. package/packages/core/release/source/lineage.js +144 -0
  971. package/packages/core/release/source/manifest.js +114 -0
  972. package/packages/core/release/stable-patrol/action.js +87 -0
  973. package/packages/core/release/stable-patrol/controller.js +346 -0
  974. package/packages/core/release/stable-patrol/coordinates.js +16 -0
  975. package/packages/core/release/stable-patrol/github-client.js +181 -0
  976. package/packages/core/release/stable-patrol/options.js +87 -0
  977. package/packages/core/release/stable-patrol/report.js +28 -0
  978. package/packages/core/release/stable-publication-fence.js +28 -0
  979. package/packages/core/release/tail-reseal-github.js +175 -0
  980. package/packages/core/release/tail-reseal-receipt.js +228 -0
  981. package/packages/core/release/tail-reseal.js +594 -0
  982. package/packages/core/release/version-state/verification.js +164 -0
  983. package/packages/core/release/version-state.js +458 -0
  984. package/packages/core/runtime/action-host.js +19 -0
  985. package/packages/core/runtime/action-process.mjs +23 -0
  986. package/packages/core/runtime/buildchain-domain.wasm +0 -0
  987. package/packages/core/runtime/checkout-identity.js +27 -0
  988. package/packages/core/runtime/commands/bridge-bootstrap.mjs +147 -0
  989. package/packages/core/runtime/commands/host-adapter.mjs +185 -0
  990. package/packages/core/runtime/commands/runtime-ref-core.mjs +171 -0
  991. package/packages/core/runtime/consumer-shell.js +174 -0
  992. package/packages/core/runtime/domain-wasm-artifact.js +7 -0
  993. package/packages/core/runtime/installation-root.js +29 -0
  994. package/packages/core/runtime/locked-dependencies.js +74 -0
  995. package/packages/core/runtime/provider-closure.js +60 -0
  996. package/packages/core/runtime/runtime-selection-action.js +34 -0
  997. package/packages/core/runtime/runtime-selection.js +136 -0
  998. package/packages/core/runtime/toolchain/actions.js +14 -0
  999. package/packages/core/runtime/toolchain/user-paths.js +9 -0
  1000. package/packages/core/runtime/toolchain/windows-rust.js +67 -0
  1001. package/packages/core/runtime/workflow-runtime.js +11 -0
  1002. package/packages/core/web/apply-admission-action.js +20 -0
  1003. package/packages/core/web/apply-admission.js +44 -0
  1004. package/packages/core/web/cli/badges.mjs +100 -0
  1005. package/packages/core/web/cli/surface.mjs +6 -0
  1006. package/packages/core/web/commands/web-surface-core.mjs +2603 -0
  1007. package/packages/core/web/commands/web-surface-production-release-pr.mjs +126 -0
  1008. package/packages/core/web/commands/web-surface.mjs +294 -0
  1009. package/packages/core/web/controller-actions.js +45 -0
  1010. package/packages/core/web/controller.js +145 -0
  1011. package/packages/core/web/deployment/apply-action.js +31 -0
  1012. package/packages/core/web/deployment/apply-evidence.js +134 -0
  1013. package/packages/core/web/deployment/apply.js +118 -0
  1014. package/packages/core/web/deployment/cloudfront-wait.js +88 -0
  1015. package/packages/core/web/deployment/plan-files.js +41 -0
  1016. package/packages/core/web/deployment/planning-action.js +28 -0
  1017. package/packages/core/web/deployment/planning.js +126 -0
  1018. package/packages/core/web/deployment/report-action.js +74 -0
  1019. package/packages/core/web/deployment/summary.js +44 -0
  1020. package/packages/core/web/preview-feedback-action.js +26 -0
  1021. package/packages/core/web/preview-feedback.js +40 -0
  1022. package/packages/core/web/production-decision-action.js +42 -0
  1023. package/packages/core/web/production-decision.js +85 -0
  1024. package/packages/core/web/production-intent-action.js +14 -0
  1025. package/packages/core/web/production-intent.js +167 -0
  1026. package/packages/core/web/publication-admission-action.js +92 -0
  1027. package/packages/core/web/publication-admission.js +183 -0
  1028. package/packages/core/web/publication-capability-action.js +22 -0
  1029. package/packages/core/web/publication-capability.js +73 -0
  1030. package/packages/core/web/readme-badges.js +891 -0
  1031. package/packages/core/web/release-feedback.js +414 -0
  1032. package/packages/core/web/release-pr-action.js +47 -0
  1033. package/packages/core/web/release-pr-handoff.js +176 -0
  1034. package/packages/core/web/release-pr-provider.js +295 -0
  1035. package/packages/core/web/release-pr-summary.js +42 -0
  1036. package/packages/core/web/release-pr-transaction.js +158 -0
  1037. package/packages/core/web/release-review-action.js +21 -0
  1038. package/packages/core/web/release-review.js +130 -0
  1039. package/packages/core/web/web-surface-publication-candidate.js +162 -0
  1040. package/packages/core/workflow/admission/actions.js +56 -0
  1041. package/packages/core/workflow/admission/recovery.js +47 -0
  1042. package/packages/core/workflow/admission/review.js +188 -0
  1043. package/packages/core/workflow/admission/transactions.js +60 -0
  1044. package/packages/core/workflow/cli/main.mjs +131 -0
  1045. package/packages/core/workflow/cli/process.mjs +16 -0
  1046. package/packages/core/workflow/commands/buildchain-cli-help.mjs +318 -0
  1047. package/packages/core/workflow/commands/universal-workflow-backflow.mjs +26 -0
  1048. package/packages/core/workflow/commands/universal-workflow-engine.mjs +73 -0
  1049. package/packages/core/workflow/dogfood/actions.js +62 -0
  1050. package/packages/core/workflow/dogfood/readiness.js +74 -0
  1051. package/packages/core/workflow/dogfood/transactions.js +90 -0
  1052. package/packages/core/workflow/engine/action.js +42 -0
  1053. package/packages/core/workflow/engine/conformance.js +93 -0
  1054. package/packages/core/workflow/engine/execution.js +77 -0
  1055. package/packages/core/workflow/engine/identity.js +34 -0
  1056. package/packages/core/workflow/engine/provider-context.js +16 -0
  1057. package/packages/core/workflow/engine/release-environment.js +57 -0
  1058. package/packages/core/workflow/engine/release-evidence.js +39 -0
  1059. package/packages/core/workflow/engine/release-observation.js +97 -0
  1060. package/packages/core/workflow/engine/release-promotion.js +227 -0
  1061. package/packages/core/workflow/event-trust.js +25 -0
  1062. package/packages/core/workflow/installation.js +33 -0
  1063. package/packages/core/workflow/request-rejection.js +3 -0
  1064. package/packages/core/workflow/settlement/actions.js +34 -0
  1065. package/packages/core/workflow/settlement/backflow.js +187 -0
  1066. package/packages/core/workflow/universal-self-dogfood.js +163 -0
  1067. package/packages/core/workflow/universal-workflow-bootstrap.js +586 -0
  1068. package/packages/core/workflow/workflow-taxonomy.mjs +351 -0
  1069. package/scripts/bridge-evidence.mjs +9 -2
  1070. package/scripts/build-domain-wasm.mjs +15 -3
  1071. package/scripts/build-standalone-binary.mjs +1 -375
  1072. package/scripts/check-action-bundles.mjs +14 -25
  1073. package/scripts/check-ci-lane-change-budget.mjs +3 -3
  1074. package/scripts/check-code-layout.mjs +386 -0
  1075. package/scripts/check-core-mechanism-inventory.mjs +17 -16
  1076. package/scripts/check-dev-delivery-actions.mjs +35 -0
  1077. package/scripts/check-floating-consumer-policy-contract.mjs +33 -59
  1078. package/scripts/check-implementation-naming.mjs +2 -23
  1079. package/scripts/check-internal-architecture.mjs +3 -3
  1080. package/scripts/check-inventory.mjs +160 -318
  1081. package/scripts/check-javascript-syntax.mjs +1 -1
  1082. package/scripts/check-maintainability.mjs +25 -21
  1083. package/scripts/check-project-cut-merge-queue-admission.mjs +1 -1
  1084. package/scripts/check-public-dogfood-contract.mjs +166 -43
  1085. package/scripts/check-release-tail-contract.mjs +62 -71
  1086. package/scripts/check-release-topology.mjs +101 -77
  1087. package/scripts/check-runtime-semantic-closure.mjs +5 -8
  1088. package/scripts/check-source-bindings.mjs +54 -0
  1089. package/scripts/check-universal-workflow-bootstrap.mjs +136 -124
  1090. package/scripts/check-workflow-taxonomy.mjs +1 -1
  1091. package/scripts/check-workflows.sh +11 -0
  1092. package/scripts/generate-bootstrap-admission.mjs +32 -0
  1093. package/scripts/generate-bootstrap-recovery.mjs +94 -0
  1094. package/scripts/generate-buildchain-kfd-witnesses.mjs +3 -3
  1095. package/scripts/generate-channel-promotion-workflow.mjs +39 -518
  1096. package/scripts/generate-next-development-guidance.mjs +1 -1
  1097. package/scripts/generate-public-reference.mjs +2 -2
  1098. package/scripts/generate-site-bundle.mjs +42 -43
  1099. package/scripts/generate-tail-reseal-fixture.mjs +108 -0
  1100. package/scripts/generate-workflow-taxonomy.mjs +2 -2
  1101. package/scripts/inventory/binary.mjs +36 -0
  1102. package/scripts/inventory/promotion.mjs +72 -0
  1103. package/scripts/maintainability-domain-metrics.mjs +1 -1
  1104. package/scripts/maintainability-metrics.mjs +37 -37
  1105. package/scripts/maintainability-public-surface.mjs +19 -95
  1106. package/scripts/next-development-self-dogfood-harness.mjs +2 -2
  1107. package/scripts/next-development-self-dogfood.mjs +2 -2
  1108. package/scripts/platform-stage-checkpoint-rehearsal.mjs +33 -201
  1109. package/scripts/public-reference.mjs +0 -187
  1110. package/scripts/publication-rehearsal-fixture.mjs +1 -1
  1111. package/scripts/release-train-self-dogfood.mjs +9 -14
  1112. package/scripts/site-action-audit.mjs +16 -0
  1113. package/scripts/site-capability-metadata.mjs +3 -7
  1114. package/scripts/source-metric-lineage.mjs +17 -0
  1115. package/scripts/stage-capsule-resume-rehearsal.mjs +19 -55
  1116. package/scripts/tail-reseal-macos-rehearsal.mjs +1 -109
  1117. package/scripts/tsup-action.config.mjs +21 -0
  1118. package/scripts/verify-golden-path.mjs +1 -1
  1119. package/scripts/warrant-shadow-plan.mjs +49 -243
  1120. package/scripts/workflow-action-graph.mjs +149 -0
  1121. package/templates/bootstrap-recovery/actions/build/source/admit/action.yml +17 -0
  1122. package/templates/bootstrap-recovery/actions/build/source/admit/dist/index.js +63 -0
  1123. package/templates/bootstrap-recovery/actions/runtime/dependencies/install/action.yml +18 -0
  1124. package/templates/bootstrap-recovery/actions/runtime/dependencies/install/dist/index.js +63 -0
  1125. package/templates/bootstrap-recovery/actions/runtime/environment/prepare/action.yml +21 -0
  1126. package/templates/bootstrap-recovery/actions/workflow/admission/inspect/action.yml +27 -0
  1127. package/templates/bootstrap-recovery/actions/workflow/admission/inspect/dist/index.js +64 -0
  1128. package/templates/bootstrap-recovery/actions/workflow/admission/review/action.yml +15 -0
  1129. package/templates/bootstrap-recovery/actions/workflow/admission/review/dist/index.js +65 -0
  1130. package/templates/bootstrap-recovery/actions/workflow/recovery/admit/action.yml +47 -0
  1131. package/templates/bootstrap-recovery/actions/workflow/recovery/execute/action.yml +48 -0
  1132. package/templates/bootstrap-recovery/actions/workflow/recovery/settle/action.yml +54 -0
  1133. package/templates/bootstrap-recovery/actions/workflow/settlement/seal/action.yml +17 -0
  1134. package/templates/bootstrap-recovery/actions/workflow/settlement/seal/dist/index.js +65 -0
  1135. package/templates/bootstrap-recovery/manifest.json +68 -0
  1136. package/templates/bootstrap-recovery/package.json +9 -0
  1137. package/templates/native-dev-delivery.yml +28 -41
  1138. package/templates/universal-buildchain-bootstrap-recovery.yml +46 -213
  1139. package/templates/universal-buildchain-bootstrap.yml +1 -1
  1140. package/actions/github-artifact-attestation/README.md +0 -10
  1141. package/actions/promote-buildchain-ref/README.md +0 -549
  1142. package/actions/report-buildchain-issue/README.md +0 -107
  1143. package/actions/run-lifecycle/README.md +0 -71
  1144. package/actions/validate-config/README.md +0 -52
  1145. package/architecture/implementation-naming.json +0 -1273
  1146. package/bin/internal/adopter-delivery-cli.mjs +0 -70
  1147. package/bin/internal/cli-options.mjs +0 -79
  1148. package/bin/internal/compatibility-facts-cli.mjs +0 -101
  1149. package/bin/internal/trust-release-cli.mjs +0 -19
  1150. package/bin/internal/trust-release-command-handlers.mjs +0 -14
  1151. package/bin/internal/trust-release-inspection-handlers.mjs +0 -175
  1152. package/bin/internal/trust-release-release-handlers.mjs +0 -332
  1153. package/bin/internal/trust-release-verification-handlers.mjs +0 -306
  1154. package/contracts/fixtures/v4-adopter-delivery-v1/archive-template.json +0 -19
  1155. package/contracts/fixtures/v4-adopter-delivery-v1/bootstrap-positive.json +0 -93
  1156. package/packages/compatibility/adopter-delivery.js +0 -16
  1157. package/packages/compatibility/cross-platform-adopter-qualification.js +0 -12
  1158. package/packages/compatibility/floating-consumer-policy.js +0 -14
  1159. package/packages/compatibility/publication-qualification.js +0 -11
  1160. package/packages/compatibility/publication-rehearsal.js +0 -18
  1161. package/packages/compatibility/runtime-ref-resume-authority.js +0 -13
  1162. package/packages/compatibility/tail-reseal-receipt.js +0 -7
  1163. package/packages/compatibility/tail-reseal.js +0 -11
  1164. package/packages/core/adopter-delivery-parity.js +0 -219
  1165. package/packages/core/adopter-delivery.js +0 -359
  1166. package/packages/core/anchored-version-material.js +0 -281
  1167. package/packages/core/artifact-passport.js +0 -847
  1168. package/packages/core/artifact-verification-envelope.js +0 -500
  1169. package/packages/core/build-facts.js +0 -575
  1170. package/packages/core/buildchain-compatibility-authority.js +0 -336
  1171. package/packages/core/buildchain-compatibility-fact.js +0 -394
  1172. package/packages/core/buildchain-compatibility-facts.json +0 -217
  1173. package/packages/core/buildchain-compatibility-proof.js +0 -566
  1174. package/packages/core/buildchain-config.js +0 -1887
  1175. package/packages/core/buildchain-contract.js +0 -1048
  1176. package/packages/core/buildchain-delivery-bootstrap.js +0 -240
  1177. package/packages/core/buildchain-delivery-infrastructure.js +0 -164
  1178. package/packages/core/buildchain-delivery-self-dogfood.js +0 -395
  1179. package/packages/core/buildchain-domain.wasm +0 -0
  1180. package/packages/core/buildchain-kfd-claims.js +0 -733
  1181. package/packages/core/buildchain-publication-authority.js +0 -118
  1182. package/packages/core/canonical-contracts.js +0 -239
  1183. package/packages/core/ci-lane-change-budget.js +0 -260
  1184. package/packages/core/controller-evidence.js +0 -553
  1185. package/packages/core/cross-platform-adopter-qualification.js +0 -343
  1186. package/packages/core/delivery-warrant-fixture-runner.js +0 -375
  1187. package/packages/core/delivery-warrant-read-candidate.js +0 -286
  1188. package/packages/core/delivery-warrant-semantic-diff-gate.js +0 -351
  1189. package/packages/core/delivery-warrant-shadow-adapter.js +0 -447
  1190. package/packages/core/dev-delivery-authority-candidate.js +0 -270
  1191. package/packages/core/dev-delivery-authority-landing.js +0 -461
  1192. package/packages/core/dev-delivery-authority-state.js +0 -583
  1193. package/packages/core/dev-delivery-candidate-identity.js +0 -169
  1194. package/packages/core/dev-delivery-contract-surface.js +0 -76
  1195. package/packages/core/dev-delivery-native-proof.js +0 -566
  1196. package/packages/core/dev-delivery-proof.js +0 -286
  1197. package/packages/core/dev-delivery-warrant-legacy-recovery.js +0 -248
  1198. package/packages/core/dev-delivery-warrant-native-compatibility.js +0 -33
  1199. package/packages/core/dev-delivery-warrant-state.js +0 -599
  1200. package/packages/core/dev-delivery-warrant.js +0 -598
  1201. package/packages/core/diagnostics.js +0 -1904
  1202. package/packages/core/domain-wasm-artifact.js +0 -7
  1203. package/packages/core/floating-consumer-evidence.js +0 -338
  1204. package/packages/core/floating-consumer-policy.js +0 -571
  1205. package/packages/core/github-artifact-attestation.js +0 -642
  1206. package/packages/core/github-governance-authority.js +0 -1369
  1207. package/packages/core/homebrew.js +0 -414
  1208. package/packages/core/kfd-agent-hub.js +0 -496
  1209. package/packages/core/kfd.js +0 -966
  1210. package/packages/core/kfd2-product-claims.js +0 -454
  1211. package/packages/core/kfd3-surface-register.js +0 -924
  1212. package/packages/core/legacy-kfd-adopter-driver.js +0 -167
  1213. package/packages/core/next-development-projection.js +0 -310
  1214. package/packages/core/next-development-transition.js +0 -737
  1215. package/packages/core/oci-compose-qualification.js +0 -143
  1216. package/packages/core/oci-publication-bundle.js +0 -281
  1217. package/packages/core/package-manager.js +0 -323
  1218. package/packages/core/paper-agent-entry.js +0 -396
  1219. package/packages/core/paper-fleet.js +0 -313
  1220. package/packages/core/paper-npm-bootstrap.js +0 -492
  1221. package/packages/core/paper-repository.js +0 -214
  1222. package/packages/core/paper-runtime-channels.js +0 -348
  1223. package/packages/core/paper-scaffold-content.js +0 -574
  1224. package/packages/core/paper.js +0 -2478
  1225. package/packages/core/partial-mutation-recovery-qualification.js +0 -18
  1226. package/packages/core/platform-stage-checkpoints.js +0 -471
  1227. package/packages/core/product-publication.js +0 -59
  1228. package/packages/core/protected-publication-source.js +0 -91
  1229. package/packages/core/provider-operation-journal.js +0 -62
  1230. package/packages/core/provider-readback-idempotency.js +0 -309
  1231. package/packages/core/public-export-compatibility.js +0 -33
  1232. package/packages/core/public-surface-audit.js +0 -273
  1233. package/packages/core/public-surface-cli.js +0 -128
  1234. package/packages/core/publication-artifact-candidate.js +0 -128
  1235. package/packages/core/publication-artifact.js +0 -641
  1236. package/packages/core/publication-authority.js +0 -1163
  1237. package/packages/core/publication-development.js +0 -72
  1238. package/packages/core/publication-package.js +0 -252
  1239. package/packages/core/publication-rehearsal-capsule.js +0 -468
  1240. package/packages/core/publication-rehearsal-projection.js +0 -104
  1241. package/packages/core/publication-rehearsal-runtime.js +0 -190
  1242. package/packages/core/publication-rehearsal.js +0 -481
  1243. package/packages/core/publication-reproducibility.js +0 -947
  1244. package/packages/core/published-delivery-authority.js +0 -266
  1245. package/packages/core/readme-badges.js +0 -893
  1246. package/packages/core/release-activation-shadow.js +0 -32
  1247. package/packages/core/release-blocker-priority.js +0 -192
  1248. package/packages/core/release-candidate-recovery.js +0 -595
  1249. package/packages/core/release-candidate.js +0 -591
  1250. package/packages/core/release-invocation.js +0 -64
  1251. package/packages/core/release-line-bootstrap.js +0 -297
  1252. package/packages/core/release-line-dry-run.js +0 -303
  1253. package/packages/core/release-passport-contract.js +0 -479
  1254. package/packages/core/release-passport.js +0 -2884
  1255. package/packages/core/release-tail-compatibility.js +0 -60
  1256. package/packages/core/release-tail-provider-adapters.js +0 -461
  1257. package/packages/core/release-tail-provider-plane.js +0 -248
  1258. package/packages/core/runtime-selector-persistence.js +0 -228
  1259. package/packages/core/stable-publication-fence.js +0 -28
  1260. package/packages/core/stage-capsule-local-store.js +0 -428
  1261. package/packages/core/stage-capsule-qualification-campaign.js +0 -511
  1262. package/packages/core/stage-capsule-qualification.js +0 -455
  1263. package/packages/core/stage-capsule-resume-planner.js +0 -397
  1264. package/packages/core/stage-capsule-store.js +0 -404
  1265. package/packages/core/stage-capsule.js +0 -319
  1266. package/packages/core/tail-reseal-github.js +0 -178
  1267. package/packages/core/tail-reseal-receipt.js +0 -225
  1268. package/packages/core/tail-reseal.js +0 -594
  1269. package/packages/core/universal-workflow-bootstrap.js +0 -586
  1270. package/packages/core/web-surface-publication-candidate.js +0 -162
  1271. package/packages/core/workflow-yaml-contract.js +0 -342
  1272. package/scripts/aggregate-build-summary.mjs +0 -187
  1273. package/scripts/aggregate-diagnostics-summary.mjs +0 -54
  1274. package/scripts/anchored-version-material.mjs +0 -42
  1275. package/scripts/architecture.mjs +0 -610
  1276. package/scripts/artifact-relay-s3.mjs +0 -539
  1277. package/scripts/artifact-signing-controller-core.mjs +0 -525
  1278. package/scripts/artifact-signing-controller.mjs +0 -302
  1279. package/scripts/artifact-signing-delegation.mjs +0 -316
  1280. package/scripts/assemble-binary-release-admission.mjs +0 -213
  1281. package/scripts/assemble-publication-artifact-admission.mjs +0 -200
  1282. package/scripts/assemble-self-publication-admission.mjs +0 -201
  1283. package/scripts/assemble-web-surface-publication-admission.mjs +0 -204
  1284. package/scripts/audit-github-governance.mjs +0 -493
  1285. package/scripts/audit-publication-control-plane.mjs +0 -527
  1286. package/scripts/auditable-demo-bundle-verification.mjs +0 -148
  1287. package/scripts/auditable-demo-platform.mjs +0 -600
  1288. package/scripts/auditable-demo-presentation.mjs +0 -83
  1289. package/scripts/auditable-demo-renditions.mjs +0 -399
  1290. package/scripts/auditable-demo-transport-smoke.mjs +0 -176
  1291. package/scripts/auditable-demo.mjs +0 -1324
  1292. package/scripts/aws-codebuild-toolchain.mjs +0 -285
  1293. package/scripts/aws-macos-jit-controller-runtime.mjs +0 -82
  1294. package/scripts/aws-runner-burst-core.mjs +0 -248
  1295. package/scripts/aws-runner-burst.mjs +0 -79
  1296. package/scripts/aws-windows-jit-campaign.mjs +0 -202
  1297. package/scripts/aws-windows-jit-controller.mjs +0 -578
  1298. package/scripts/binary-publication-evidence.mjs +0 -133
  1299. package/scripts/bridge-bootstrap.mjs +0 -137
  1300. package/scripts/build-contract-core.mjs +0 -1216
  1301. package/scripts/buildchain-channel-router.mjs +0 -249
  1302. package/scripts/buildchain-cli-help.mjs +0 -321
  1303. package/scripts/buildchain-contract-lock.mjs +0 -184
  1304. package/scripts/buildchain-patrol.mjs +0 -280
  1305. package/scripts/compiler-cache-evidence.mjs +0 -304
  1306. package/scripts/consumer-policy.mjs +0 -231
  1307. package/scripts/controller-evidence.mjs +0 -208
  1308. package/scripts/copy-domain-wasm.mjs +0 -14
  1309. package/scripts/create-github-artifact-attestation-policy.mjs +0 -62
  1310. package/scripts/create-release-bundle.mjs +0 -167
  1311. package/scripts/cross-platform-adopter-qualification.mjs +0 -228
  1312. package/scripts/declarative-promotion-admission.mjs +0 -45
  1313. package/scripts/dev-alpha-candidate-patrol.mjs +0 -1197
  1314. package/scripts/dev-delivery-authority-command-adapters.mjs +0 -206
  1315. package/scripts/dev-delivery-authority-provider.mjs +0 -28
  1316. package/scripts/dev-delivery-authority.mjs +0 -490
  1317. package/scripts/dev-delivery-native-run.mjs +0 -177
  1318. package/scripts/dev-delivery-process-boundary.mjs +0 -260
  1319. package/scripts/dev-delivery-proof.mjs +0 -258
  1320. package/scripts/dev-delivery-provider-heartbeat.mjs +0 -215
  1321. package/scripts/dev-delivery-source-proof-replay.mjs +0 -153
  1322. package/scripts/dev-delivery-source-proof-reuse.mjs +0 -548
  1323. package/scripts/dev-delivery-two-phase-resume.mjs +0 -345
  1324. package/scripts/dev-delivery-two-phase.mjs +0 -573
  1325. package/scripts/dev-delivery-warrant-options.mjs +0 -298
  1326. package/scripts/dev-delivery-warrant-store.mjs +0 -316
  1327. package/scripts/dev-delivery-warrant-transition.mjs +0 -109
  1328. package/scripts/dev-delivery-warrant.mjs +0 -559
  1329. package/scripts/dev-merge-queue.mjs +0 -536
  1330. package/scripts/dev-pr-auto-merge.mjs +0 -1222
  1331. package/scripts/dev-pr-delivery-warrant.mjs +0 -467
  1332. package/scripts/dev-pr-prequeue-guard.mjs +0 -381
  1333. package/scripts/dev-qualification-patrol.mjs +0 -594
  1334. package/scripts/dispatch-artifact-signing-authority.mjs +0 -407
  1335. package/scripts/engineering-housekeeper-workflow.mjs +0 -401
  1336. package/scripts/ensure-github-release.mjs +0 -199
  1337. package/scripts/finalize-native-artifact-signing-result.mjs +0 -272
  1338. package/scripts/generate-channel-build-workflow.mjs +0 -69
  1339. package/scripts/generate-release-candidate-passport.mjs +0 -285
  1340. package/scripts/generate-universal-workflow-facades.mjs +0 -499
  1341. package/scripts/git-fetch-process-tree.mjs +0 -175
  1342. package/scripts/host-adapter.mjs +0 -182
  1343. package/scripts/implementation-references.mjs +0 -25
  1344. package/scripts/import-artifact-signing-results.mjs +0 -135
  1345. package/scripts/infra-contract-core.mjs +0 -1032
  1346. package/scripts/infra-contract.mjs +0 -345
  1347. package/scripts/init-repo.mjs +0 -518
  1348. package/scripts/inspect-artifact-signing-requests.mjs +0 -157
  1349. package/scripts/installer-publication.mjs +0 -361
  1350. package/scripts/lifecycle-substage-evidence.mjs +0 -274
  1351. package/scripts/locked-source-checkout.mjs +0 -595
  1352. package/scripts/materialize-artifact-signing-request.mjs +0 -66
  1353. package/scripts/merge-artifact-signing-results.mjs +0 -76
  1354. package/scripts/next-development-review.mjs +0 -331
  1355. package/scripts/next-development-transition.mjs +0 -47
  1356. package/scripts/npm-publish-dry-run.mjs +0 -182
  1357. package/scripts/npm-publish-transaction.mjs +0 -331
  1358. package/scripts/observed-evidence.mjs +0 -311
  1359. package/scripts/oci-compose-preview.mjs +0 -261
  1360. package/scripts/paper-agent-cli.mjs +0 -35
  1361. package/scripts/paper-work-fleet-cli.mjs +0 -594
  1362. package/scripts/paper.mjs +0 -644
  1363. package/scripts/product-publication-intent.mjs +0 -129
  1364. package/scripts/promotion-channel-router.mjs +0 -139
  1365. package/scripts/promotion-identity-resolver.mjs +0 -129
  1366. package/scripts/publication-artifact-candidate.mjs +0 -122
  1367. package/scripts/publication-artifact.mjs +0 -67
  1368. package/scripts/publication-candidate-kind.mjs +0 -93
  1369. package/scripts/publication-candidate-sealer.mjs +0 -119
  1370. package/scripts/publication-package.mjs +0 -38
  1371. package/scripts/publication-registry-hydrate.mjs +0 -216
  1372. package/scripts/publication-reproducibility.mjs +0 -62
  1373. package/scripts/publication-settlement.mjs +0 -217
  1374. package/scripts/publish-source-ref-resolver.mjs +0 -113
  1375. package/scripts/reconcile-github-governance.mjs +0 -689
  1376. package/scripts/reconcile-release-governance.mjs +0 -368
  1377. package/scripts/release-asset-client.mjs +0 -91
  1378. package/scripts/release-candidate-adapter.mjs +0 -41
  1379. package/scripts/release-candidate-anchor-provenance.mjs +0 -99
  1380. package/scripts/release-candidate-resolver.mjs +0 -842
  1381. package/scripts/release-finalization-review.mjs +0 -53
  1382. package/scripts/release-line-dry-run.mjs +0 -53
  1383. package/scripts/release-line-policy.mjs +0 -231
  1384. package/scripts/release-propagation.mjs +0 -411
  1385. package/scripts/release-tail.mjs +0 -178
  1386. package/scripts/release-transaction.mjs +0 -212
  1387. package/scripts/resolve-artifact-coordinates.mjs +0 -174
  1388. package/scripts/resolve-artifact-transfer-mode.mjs +0 -126
  1389. package/scripts/resolve-build-configuration.mjs +0 -105
  1390. package/scripts/resolve-build-contract.mjs +0 -96
  1391. package/scripts/resolve-publish-gate.mjs +0 -33
  1392. package/scripts/resolve-publish-source.mjs +0 -99
  1393. package/scripts/resume-from-candidate-run.mjs +0 -1117
  1394. package/scripts/route-offline-runners.mjs +0 -237
  1395. package/scripts/run-candidate-body-prefix-renderer.mjs +0 -187
  1396. package/scripts/run-lifecycle-core.mjs +0 -850
  1397. package/scripts/run-lifecycle.mjs +0 -56
  1398. package/scripts/runtime-ref-core.mjs +0 -171
  1399. package/scripts/seal-artifact-signing-requests.mjs +0 -431
  1400. package/scripts/seal-macos-credential-input.mjs +0 -135
  1401. package/scripts/shifu-gate-profile.mjs +0 -374
  1402. package/scripts/sign-detached-artifact-requests.mjs +0 -237
  1403. package/scripts/source-verification-evidence.mjs +0 -344
  1404. package/scripts/stable-candidate-patrol.mjs +0 -527
  1405. package/scripts/stable-candidate-policy.mjs +0 -25
  1406. package/scripts/stable-candidate-qualification.mjs +0 -358
  1407. package/scripts/stable-release-gate.mjs +0 -351
  1408. package/scripts/stage-capsule-qualification.mjs +0 -528
  1409. package/scripts/tail-reseal.mjs +0 -416
  1410. package/scripts/universal-facade-maintainability.mjs +0 -91
  1411. package/scripts/universal-workflow-backflow.mjs +0 -212
  1412. package/scripts/universal-workflow-engine.mjs +0 -620
  1413. package/scripts/universal-workflow-self-dogfood.mjs +0 -212
  1414. package/scripts/validate-package-manager-contract.mjs +0 -24
  1415. package/scripts/verify-artifact-signing-results.mjs +0 -124
  1416. package/scripts/verify-publish-channel-ref.mjs +0 -125
  1417. package/scripts/verify-publish-source-lock.mjs +0 -37
  1418. package/scripts/verify-release-pr.mjs +0 -34
  1419. package/scripts/verify-version-state-delta.mjs +0 -175
  1420. package/scripts/verify-web-surface-publication-capability.mjs +0 -78
  1421. package/scripts/web-surface-core.mjs +0 -2603
  1422. package/scripts/web-surface-production-decision.mjs +0 -158
  1423. package/scripts/web-surface-production-release-pr.mjs +0 -712
  1424. package/scripts/web-surface-release-feedback.mjs +0 -358
  1425. package/scripts/web-surface-release-pr-review.mjs +0 -187
  1426. package/scripts/web-surface.mjs +0 -460
  1427. package/scripts/workflow-call-contract.mjs +0 -133
  1428. package/scripts/workflow-friction-report.mjs +0 -375
  1429. package/scripts/workflow-taxonomy.mjs +0 -507
  1430. /package/actions/{macos-credential-island → build/credential/macos-island}/README.md +0 -0
  1431. /package/actions/{release-candidate-promote → release/promotion/candidate}/README.md +0 -0
  1432. /package/actions/{release-tail → release/tail/settle}/README.md +0 -0
  1433. /package/packages/core/{adopter-delivery-gate.js → adoption/adopter-delivery-gate.js} +0 -0
  1434. /package/packages/core/{adopter-delivery-json.js → adoption/adopter-delivery-json.js} +0 -0
  1435. /package/packages/core/{adopter-delivery-passport.js → adoption/adopter-delivery-passport.js} +0 -0
  1436. /package/packages/core/{adopter-delivery-vectors.js → adoption/adopter-delivery-vectors.js} +0 -0
  1437. /package/packages/core/{adopter-delivery-vectors.json → adoption/adopter-delivery-vectors.json} +0 -0
  1438. /package/packages/core/{buildchain-agent-manuals.js → adoption/buildchain-agent-manuals.js} +0 -0
  1439. /package/packages/core/{kfd-adopter-category-driver.js → adoption/kfd-adopter-category-driver.js} +0 -0
  1440. /package/packages/core/{kfd-adopter-manifest.js → adoption/kfd-adopter-manifest.js} +0 -0
  1441. /package/packages/core/{kfd-gate.js → adoption/kfd-gate.js} +0 -0
  1442. /package/packages/core/{kfd-product-gates.js → adoption/kfd-product-gates.js} +0 -0
  1443. /package/packages/core/{artifact-signing-result.js → build/artifact-signing-result.js} +0 -0
  1444. /package/packages/core/{artifact-signing.js → build/artifact-signing.js} +0 -0
  1445. /package/packages/core/{build-configuration.js → build/build-configuration.js} +0 -0
  1446. /package/{scripts → packages/core/build/commands}/resolve-artifact-signing-upload-route.mjs +0 -0
  1447. /package/packages/core/{detached-artifact-signature.js → build/detached-artifact-signature.js} +0 -0
  1448. /package/{scripts/gate-profile-core.mjs → packages/core/build/gate/contracts.js} +0 -0
  1449. /package/packages/core/{portable-dev-cache.js → build/portable-dev-cache.js} +0 -0
  1450. /package/packages/core/{buildchain-channel-identity.js → consumer/buildchain-channel-identity.js} +0 -0
  1451. /package/packages/core/{floating-consumer-release-passport.js → consumer/floating-consumer-release-passport.js} +0 -0
  1452. /package/packages/core/{runtime-ref-resume-authority.js → consumer/runtime-ref-resume-authority.js} +0 -0
  1453. /package/packages/core/{buildchain-layout.js → contracts/buildchain-layout.js} +0 -0
  1454. /package/{bin/internal → packages/core/contracts}/command-registry.mjs +0 -0
  1455. /package/packages/core/{kungfu-temporal-fact.js → contracts/kungfu-temporal-fact.js} +0 -0
  1456. /package/packages/core/{surface-manifest.js → contracts/surface-manifest.js} +0 -0
  1457. /package/packages/core/{workflow-call-contract.js → contracts/workflow-call-contract.js} +0 -0
  1458. /package/{scripts → packages/core/dev-delivery/commands}/project-cut-merge-queue-admission.mjs +0 -0
  1459. /package/packages/core/{dev-delivery-authority-evidence.js → dev-delivery/dev-delivery-authority-evidence.js} +0 -0
  1460. /package/packages/core/{dev-delivery-authority-observation.js → dev-delivery/dev-delivery-authority-observation.js} +0 -0
  1461. /package/packages/core/{dev-delivery-authority-qualification.js → dev-delivery/dev-delivery-authority-qualification.js} +0 -0
  1462. /package/packages/core/{dev-delivery-authority-settlement.js → dev-delivery/dev-delivery-authority-settlement.js} +0 -0
  1463. /package/packages/core/{dev-delivery-common.js → dev-delivery/dev-delivery-common.js} +0 -0
  1464. /package/packages/core/{dev-delivery-execution-failure.js → dev-delivery/dev-delivery-execution-failure.js} +0 -0
  1465. /package/packages/core/{dev-delivery-execution-transfer.js → dev-delivery/dev-delivery-execution-transfer.js} +0 -0
  1466. /package/packages/core/{dev-delivery-landing-admission-core.js → dev-delivery/dev-delivery-landing-admission-core.js} +0 -0
  1467. /package/packages/core/{dev-delivery-landing-readback.js → dev-delivery/dev-delivery-landing-readback.js} +0 -0
  1468. /package/packages/core/{dev-delivery-landing-terminal-evidence.js → dev-delivery/dev-delivery-landing-terminal-evidence.js} +0 -0
  1469. /package/packages/core/{dev-delivery-landing-testing-port.js → dev-delivery/dev-delivery-landing-testing-port.js} +0 -0
  1470. /package/packages/core/{dev-delivery-native-execution.js → dev-delivery/dev-delivery-native-execution.js} +0 -0
  1471. /package/packages/core/{dev-delivery-process-boundary.js → dev-delivery/dev-delivery-process-boundary.js} +0 -0
  1472. /package/packages/core/{dev-delivery-provider-attempt.js → dev-delivery/dev-delivery-provider-attempt.js} +0 -0
  1473. /package/packages/core/{dev-delivery-provider-heartbeat.js → dev-delivery/dev-delivery-provider-heartbeat.js} +0 -0
  1474. /package/packages/core/{dev-delivery-warrant-cancellation.js → dev-delivery/dev-delivery-warrant-cancellation.js} +0 -0
  1475. /package/packages/core/{dev-delivery-warrant-qualification.js → dev-delivery/dev-delivery-warrant-qualification.js} +0 -0
  1476. /package/packages/core/{dev-delivery-warrant-settlement.js → dev-delivery/dev-delivery-warrant-settlement.js} +0 -0
  1477. /package/packages/core/{dev-delivery-writer-protocol-transition.js → dev-delivery/dev-delivery-writer-protocol-transition.js} +0 -0
  1478. /package/packages/core/{engineering-housekeeper-github-client.js → governance/engineering-housekeeper-github-client.js} +0 -0
  1479. /package/packages/core/{engineering-housekeeper-github.js → governance/engineering-housekeeper-github.js} +0 -0
  1480. /package/packages/core/{engineering-housekeeper.js → governance/engineering-housekeeper.js} +0 -0
  1481. /package/packages/core/{issue-reporting.js → governance/issue-reporting.js} +0 -0
  1482. /package/packages/core/{cache-evidence.js → observability/cache-evidence.js} +0 -0
  1483. /package/packages/core/{candidate-timeline.js → observability/candidate-timeline.js} +0 -0
  1484. /package/packages/core/{logging.js → observability/logging.js} +0 -0
  1485. /package/packages/core/{paper-work.js → paper/paper-work.js} +0 -0
  1486. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-controller-core.mjs +0 -0
  1487. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-controller.mjs +0 -0
  1488. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-core.mjs +0 -0
  1489. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-job-controller.mjs +0 -0
  1490. /package/{scripts → packages/core/providers/commands}/aws-macos-jit.mjs +0 -0
  1491. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-campaign-core.mjs +0 -0
  1492. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-controller-core.mjs +0 -0
  1493. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-core.mjs +0 -0
  1494. /package/{scripts → packages/core/providers/commands}/aws-windows-jit.mjs +0 -0
  1495. /package/{scripts → packages/core/providers/commands}/github-output.mjs +0 -0
  1496. /package/packages/core/{oci-publication-graph.js → publication/oci-publication-graph.js} +0 -0
  1497. /package/packages/core/{publication-control-plane-audit.js → publication/publication-control-plane-audit.js} +0 -0
  1498. /package/packages/core/{publication-qualification.js → publication/publication-qualification.js} +0 -0
  1499. /package/packages/core/{publication-rehearsal-provider-bindings.js → publication/publication-rehearsal-provider-bindings.js} +0 -0
  1500. /package/packages/core/{publication-sealed-bundle.js → publication/publication-sealed-bundle.js} +0 -0
  1501. /package/packages/core/{channel-candidate.js → release/channel-candidate.js} +0 -0
  1502. /package/packages/core/{channel-promotion-baseline.js → release/channel-promotion-baseline.js} +0 -0
  1503. /package/{scripts → packages/core/release/commands}/promotion-routing-evidence.mjs +0 -0
  1504. /package/packages/core/{dev-alpha-active-release-train.js → release/dev-alpha-active-release-train.js} +0 -0
  1505. /package/packages/core/{dev-alpha-candidate-selection.js → release/dev-alpha-candidate-selection.js} +0 -0
  1506. /package/packages/core/{next-development-candidate-reservation.js → release/next-development-candidate-reservation.js} +0 -0
  1507. /package/packages/core/{next-development-controller.js → release/next-development-controller.js} +0 -0
  1508. /package/packages/core/{publish-transaction.js → release/publish-transaction.js} +0 -0
  1509. /package/packages/core/{release-activation-transaction.js → release/release-activation-transaction.js} +0 -0
  1510. /package/packages/core/{release-propagation-agent-entry.js → release/release-propagation-agent-entry.js} +0 -0
  1511. /package/packages/core/{release-propagation-capture.js → release/release-propagation-capture.js} +0 -0
  1512. /package/packages/core/{release-propagation-common.js → release/release-propagation-common.js} +0 -0
  1513. /package/packages/core/{release-propagation-execution-profile.js → release/release-propagation-execution-profile.js} +0 -0
  1514. /package/packages/core/{release-propagation-pickup.js → release/release-propagation-pickup.js} +0 -0
  1515. /package/packages/core/{release-propagation-push.js → release/release-propagation-push.js} +0 -0
  1516. /package/packages/core/{release-propagation-release.js → release/release-propagation-release.js} +0 -0
  1517. /package/packages/core/{release-propagation-stage-evidence.js → release/release-propagation-stage-evidence.js} +0 -0
  1518. /package/packages/core/{release-propagation-work-capture.js → release/release-propagation-work-capture.js} +0 -0
  1519. /package/packages/core/{release-propagation-work-constants.js → release/release-propagation-work-constants.js} +0 -0
  1520. /package/packages/core/{release-propagation-work-control.js → release/release-propagation-work-control.js} +0 -0
  1521. /package/packages/core/{release-propagation-work-transitions.js → release/release-propagation-work-transitions.js} +0 -0
  1522. /package/packages/core/{release-propagation-work.js → release/release-propagation-work.js} +0 -0
  1523. /package/packages/core/{release-propagation.js → release/release-propagation.js} +0 -0
  1524. /package/packages/core/{release-tail-product-capabilities.js → release/release-tail-product-capabilities.js} +0 -0
  1525. /package/packages/core/{release-train.js → release/release-train.js} +0 -0
  1526. /package/packages/core/{self-dogfood-version.js → release/self-dogfood-version.js} +0 -0
  1527. /package/packages/core/{stable-candidate-ledger.js → release/stable-candidate-ledger.js} +0 -0
  1528. /package/packages/core/{stable-release-gate.js → release/stable-release-gate.js} +0 -0
  1529. /package/packages/core/{tail-reseal-contract.js → release/tail-reseal-contract.js} +0 -0
  1530. /package/packages/core/{domain-wasm.js → runtime/domain-wasm.js} +0 -0
  1531. /package/packages/core/{spawn-command.js → runtime/spawn-command.js} +0 -0
  1532. /package/packages/core/{badges.js → web/badges.js} +0 -0
  1533. /package/{scripts → packages/core/web/commands}/web-surface-cloudfront-rewrite.mjs +0 -0
  1534. /package/{scripts → packages/core/web/commands}/web-surface-immutable-object.mjs +0 -0
  1535. /package/{scripts → packages/core/web/commands}/web-surface-routing.mjs +0 -0
@@ -185,557 +185,553 @@
185
185
  },
186
186
  "declarations": [
187
187
  {
188
- "laneId": ".github/workflows/.release-candidate-promote.yml#qualify",
188
+ "laneId": ".github/workflows/.build-demo-adapter.yml#gate",
189
189
  "authorityClass": "evidence",
190
190
  "triggerClass": "reusable",
191
191
  "concurrencyPolicy": {
192
- "mode": "serialized",
192
+ "mode": "ref-scoped",
193
193
  "cancelInProgress": false
194
194
  },
195
- "expectedRunnerMinutes": 30,
195
+ "expectedRunnerMinutes": 20,
196
196
  "cancellationBehavior": "finish-started",
197
197
  "sloImpact": {
198
198
  "mergeCritical": false,
199
- "metric": "protected release qualification latency",
199
+ "metric": "capability execution budget",
200
200
  "expectedContributionSeconds": 0,
201
- "rationale": "QUALIFY is the read-only exact-runtime and sealed-candidate admission boundary."
201
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
202
202
  }
203
203
  },
204
204
  {
205
- "laneId": ".github/workflows/.release-candidate-promote.yml#apply",
206
- "authorityClass": "release",
205
+ "laneId": ".github/workflows/.build-demo-adapter.yml#render",
206
+ "authorityClass": "evidence",
207
207
  "triggerClass": "reusable",
208
208
  "concurrencyPolicy": {
209
- "mode": "serialized",
209
+ "mode": "ref-scoped",
210
210
  "cancelInProgress": false
211
211
  },
212
- "expectedRunnerMinutes": 30,
212
+ "expectedRunnerMinutes": 40,
213
213
  "cancellationBehavior": "finish-started",
214
214
  "sloImpact": {
215
215
  "mergeCritical": false,
216
- "metric": "protected release APPLY latency",
216
+ "metric": "capability execution budget",
217
217
  "expectedContributionSeconds": 0,
218
- "rationale": "APPLY is the sole contents-write and provider-mutation OIDC authority boundary."
218
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
219
219
  }
220
220
  },
221
221
  {
222
- "laneId": ".github/workflows/.release-candidate-promote.yml#settle",
222
+ "laneId": ".github/workflows/.build-gate-profile.yml#aggregate",
223
223
  "authorityClass": "evidence",
224
224
  "triggerClass": "reusable",
225
225
  "concurrencyPolicy": {
226
- "mode": "serialized",
226
+ "mode": "none",
227
227
  "cancelInProgress": false
228
228
  },
229
- "expectedRunnerMinutes": 10,
230
- "cancellationBehavior": "finish-started",
229
+ "expectedRunnerMinutes": 360,
230
+ "cancellationBehavior": "provider-default",
231
231
  "sloImpact": {
232
232
  "mergeCritical": false,
233
- "metric": "terminal receipt projection latency",
233
+ "metric": "capability execution budget",
234
234
  "expectedContributionSeconds": 0,
235
- "rationale": "SETTLE verifies and projects the already durable terminal ReleaseReceipt without mutation authority."
235
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
236
236
  }
237
237
  },
238
238
  {
239
- "laneId": ".github/workflows/buildchain-ref-promotion-recovery.yml#resume",
240
- "authorityClass": "release",
241
- "triggerClass": "manual",
239
+ "laneId": ".github/workflows/.build-gate-profile.yml#plan",
240
+ "authorityClass": "evidence",
241
+ "triggerClass": "reusable",
242
242
  "concurrencyPolicy": {
243
243
  "mode": "none",
244
244
  "cancelInProgress": false
245
245
  },
246
- "expectedRunnerMinutes": 35,
247
- "cancellationBehavior": "finish-started",
246
+ "expectedRunnerMinutes": 360,
247
+ "cancellationBehavior": "provider-default",
248
248
  "sloImpact": {
249
249
  "mergeCritical": false,
250
- "metric": "manual recovery adapter latency",
250
+ "metric": "capability execution budget",
251
251
  "expectedContributionSeconds": 0,
252
- "rationale": "The recovery surface is a one-way adapter into the same canonical publisher."
252
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
253
253
  }
254
254
  },
255
255
  {
256
- "laneId": ".github/workflows/buildchain-ref-promotion.yml#classify-workflow-run",
256
+ "laneId": ".github/workflows/.build-gate-profile.yml#run-gates",
257
257
  "authorityClass": "evidence",
258
- "triggerClass": "mixed",
258
+ "triggerClass": "reusable",
259
259
  "concurrencyPolicy": {
260
260
  "mode": "none",
261
261
  "cancelInProgress": false
262
262
  },
263
- "expectedRunnerMinutes": 2,
264
- "cancellationBehavior": "finish-started",
263
+ "expectedRunnerMinutes": 360,
264
+ "cancellationBehavior": "provider-default",
265
265
  "sloImpact": {
266
266
  "mergeCritical": false,
267
- "metric": "Alpha finalization classification latency",
267
+ "metric": "capability execution budget",
268
268
  "expectedContributionSeconds": 0,
269
- "rationale": "The read-only classifier binds the verified head to exact product state before suppressing a duplicate publication transaction."
269
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
270
270
  }
271
271
  },
272
272
  {
273
- "laneId": ".github/workflows/buildchain-ref-promotion.yml#promote",
274
- "authorityClass": "release",
275
- "triggerClass": "mixed",
273
+ "laneId": ".github/workflows/.build.yml#attest",
274
+ "authorityClass": "evidence",
275
+ "triggerClass": "reusable",
276
276
  "concurrencyPolicy": {
277
277
  "mode": "none",
278
278
  "cancelInProgress": false
279
279
  },
280
- "expectedRunnerMinutes": 35,
280
+ "expectedRunnerMinutes": 15,
281
281
  "cancellationBehavior": "finish-started",
282
282
  "sloImpact": {
283
283
  "mergeCritical": false,
284
- "metric": "Buildchain alpha promotion adapter latency",
284
+ "metric": "build orchestration latency",
285
285
  "expectedContributionSeconds": 0,
286
- "rationale": "The Buildchain-owned alpha entry delegates to the single v4 publisher."
286
+ "rationale": "Attest only the verified final artifact identity."
287
287
  }
288
288
  },
289
289
  {
290
- "laneId": ".github/workflows/buildchain-ref-promotion.yml#universal-bootstrap",
291
- "authorityClass": "governed-delegation",
292
- "triggerClass": "mixed",
290
+ "laneId": ".github/workflows/.build.yml#build-container",
291
+ "authorityClass": "evidence",
292
+ "triggerClass": "reusable",
293
293
  "concurrencyPolicy": {
294
294
  "mode": "none",
295
295
  "cancelInProgress": false
296
296
  },
297
- "expectedRunnerMinutes": 60,
297
+ "expectedRunnerMinutes": 180,
298
298
  "cancellationBehavior": "finish-started",
299
299
  "sloImpact": {
300
300
  "mergeCritical": false,
301
- "metric": "canonical exact-candidate self-promotion latency",
301
+ "metric": "build orchestration latency",
302
302
  "expectedContributionSeconds": 0,
303
- "rationale": "The canonical publisher delegates one closed request to the exact reviewed candidate and keeps the compatibility path mutually exclusive."
303
+ "rationale": "Run ordered project stages on the governed Linux container."
304
304
  }
305
305
  },
306
306
  {
307
- "laneId": ".github/workflows/release-candidate-promote.yml#invoke",
308
- "authorityClass": "release",
307
+ "laneId": ".github/workflows/.build.yml#deliver",
308
+ "authorityClass": "evidence",
309
309
  "triggerClass": "reusable",
310
310
  "concurrencyPolicy": {
311
311
  "mode": "none",
312
312
  "cancelInProgress": false
313
313
  },
314
- "expectedRunnerMinutes": 35,
314
+ "expectedRunnerMinutes": 15,
315
315
  "cancellationBehavior": "finish-started",
316
316
  "sloImpact": {
317
317
  "mergeCritical": false,
318
- "metric": "public promotion adapter latency",
318
+ "metric": "build orchestration latency",
319
319
  "expectedContributionSeconds": 0,
320
- "rationale": "The public compatibility surface resolves discovery facts and invokes one fixed v4 publisher."
320
+ "rationale": "Verify every required producer and publish rooted final references."
321
321
  }
322
322
  },
323
323
  {
324
- "laneId": ".github/workflows/v4-declarative-release-tail-dogfood.yml#publish",
325
- "authorityClass": "release",
326
- "triggerClass": "manual",
324
+ "laneId": ".github/workflows/.build.yml#plan",
325
+ "authorityClass": "evidence",
326
+ "triggerClass": "reusable",
327
327
  "concurrencyPolicy": {
328
328
  "mode": "none",
329
329
  "cancelInProgress": false
330
330
  },
331
- "expectedRunnerMinutes": 35,
331
+ "expectedRunnerMinutes": 10,
332
332
  "cancellationBehavior": "finish-started",
333
333
  "sloImpact": {
334
334
  "mergeCritical": false,
335
- "metric": "manual dogfood release completion latency",
335
+ "metric": "build orchestration latency",
336
336
  "expectedContributionSeconds": 0,
337
- "rationale": "The explicit dogfood run proves hosted provider publication and checkpoint resume without joining pull-request checks."
337
+ "rationale": "Admit the source and runtime and resolve the read-only project plan."
338
338
  }
339
339
  },
340
340
  {
341
- "laneId": ".github/workflows/v4-adopter-delivery.yml#qualification",
342
- "authorityClass": "evidence",
343
- "triggerClass": "mixed",
341
+ "laneId": ".github/workflows/.build.yml#sign",
342
+ "authorityClass": "governed-delegation",
343
+ "triggerClass": "reusable",
344
344
  "concurrencyPolicy": {
345
345
  "mode": "none",
346
346
  "cancelInProgress": false
347
347
  },
348
- "expectedRunnerMinutes": 5,
348
+ "expectedRunnerMinutes": 180,
349
349
  "cancellationBehavior": "finish-started",
350
350
  "sloImpact": {
351
351
  "mergeCritical": false,
352
- "metric": "public adopter qualification completion latency",
352
+ "metric": "build orchestration latency",
353
353
  "expectedContributionSeconds": 0,
354
- "rationale": "The lane only reconciles already-produced rooted platform reports and grants no provider, release, or stable publication authority."
354
+ "rationale": "Keep detached signing and certificate instances separate from source execution."
355
355
  }
356
356
  },
357
357
  {
358
- "laneId": ".github/workflows/bootstrap.yml#admit",
358
+ "laneId": ".github/workflows/.ops-git-sync.yml#sync",
359
359
  "authorityClass": "evidence",
360
360
  "triggerClass": "reusable",
361
361
  "concurrencyPolicy": {
362
362
  "mode": "none",
363
363
  "cancelInProgress": false
364
364
  },
365
- "expectedRunnerMinutes": 10,
366
- "cancellationBehavior": "finish-started",
365
+ "expectedRunnerMinutes": 360,
366
+ "cancellationBehavior": "provider-default",
367
367
  "sloImpact": {
368
368
  "mergeCritical": false,
369
- "metric": "exact-candidate admission latency",
369
+ "metric": "capability execution budget",
370
370
  "expectedContributionSeconds": 0,
371
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
371
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
372
372
  }
373
373
  },
374
374
  {
375
- "laneId": ".github/workflows/bootstrap.yml#execute",
376
- "authorityClass": "governed-delegation",
375
+ "laneId": ".github/workflows/.release-authority.yml#verify",
376
+ "authorityClass": "release",
377
377
  "triggerClass": "reusable",
378
378
  "concurrencyPolicy": {
379
379
  "mode": "none",
380
380
  "cancelInProgress": false
381
381
  },
382
- "expectedRunnerMinutes": 60,
383
- "cancellationBehavior": "finish-started",
382
+ "expectedRunnerMinutes": 360,
383
+ "cancellationBehavior": "provider-default",
384
384
  "sloImpact": {
385
385
  "mergeCritical": false,
386
- "metric": "exact-candidate execution latency",
386
+ "metric": "capability execution budget",
387
387
  "expectedContributionSeconds": 0,
388
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
388
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
389
389
  }
390
390
  },
391
391
  {
392
- "laneId": ".github/workflows/bootstrap.yml#settle",
393
- "authorityClass": "evidence",
392
+ "laneId": ".github/workflows/.release-binary-assets.yml#publication-authority",
393
+ "authorityClass": "governed-delegation",
394
394
  "triggerClass": "reusable",
395
395
  "concurrencyPolicy": {
396
396
  "mode": "none",
397
397
  "cancelInProgress": false
398
398
  },
399
- "expectedRunnerMinutes": 10,
400
- "cancellationBehavior": "finish-started",
399
+ "expectedRunnerMinutes": 360,
400
+ "cancellationBehavior": "provider-default",
401
401
  "sloImpact": {
402
402
  "mergeCritical": false,
403
- "metric": "universal terminal settlement latency",
403
+ "metric": "capability execution budget",
404
404
  "expectedContributionSeconds": 0,
405
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
405
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
406
406
  }
407
407
  },
408
408
  {
409
- "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-admit",
410
- "authorityClass": "evidence",
409
+ "laneId": ".github/workflows/.release-binary-assets.yml#publish",
410
+ "authorityClass": "release",
411
411
  "triggerClass": "reusable",
412
412
  "concurrencyPolicy": {
413
413
  "mode": "none",
414
414
  "cancelInProgress": false
415
415
  },
416
- "expectedRunnerMinutes": 10,
417
- "cancellationBehavior": "finish-started",
416
+ "expectedRunnerMinutes": 360,
417
+ "cancellationBehavior": "provider-default",
418
418
  "sloImpact": {
419
419
  "mergeCritical": false,
420
- "metric": "consumer-owned exact-candidate admission latency",
420
+ "metric": "capability execution budget",
421
421
  "expectedContributionSeconds": 0,
422
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
422
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
423
423
  }
424
424
  },
425
425
  {
426
- "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-execute",
427
- "authorityClass": "governed-delegation",
426
+ "laneId": ".github/workflows/.release-promote.yml#apply",
427
+ "authorityClass": "release",
428
428
  "triggerClass": "reusable",
429
429
  "concurrencyPolicy": {
430
- "mode": "none",
430
+ "mode": "serialized",
431
431
  "cancelInProgress": false
432
432
  },
433
- "expectedRunnerMinutes": 60,
433
+ "expectedRunnerMinutes": 30,
434
434
  "cancellationBehavior": "finish-started",
435
435
  "sloImpact": {
436
436
  "mergeCritical": false,
437
- "metric": "consumer-owned exact-candidate execution latency",
437
+ "metric": "protected release APPLY latency",
438
438
  "expectedContributionSeconds": 0,
439
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
439
+ "rationale": "APPLY is the sole contents-write and provider-mutation OIDC authority boundary."
440
440
  }
441
441
  },
442
442
  {
443
- "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-settle",
443
+ "laneId": ".github/workflows/.release-promote.yml#qualify",
444
444
  "authorityClass": "evidence",
445
445
  "triggerClass": "reusable",
446
446
  "concurrencyPolicy": {
447
- "mode": "none",
447
+ "mode": "serialized",
448
448
  "cancelInProgress": false
449
449
  },
450
- "expectedRunnerMinutes": 10,
450
+ "expectedRunnerMinutes": 30,
451
451
  "cancellationBehavior": "finish-started",
452
452
  "sloImpact": {
453
453
  "mergeCritical": false,
454
- "metric": "consumer-owned terminal settlement latency",
454
+ "metric": "protected release qualification latency",
455
455
  "expectedContributionSeconds": 0,
456
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
456
+ "rationale": "QUALIFY is the read-only exact-runtime and sealed-candidate admission boundary."
457
457
  }
458
458
  },
459
459
  {
460
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#prepare",
460
+ "laneId": ".github/workflows/.release-promote.yml#settle",
461
461
  "authorityClass": "evidence",
462
- "triggerClass": "mixed",
462
+ "triggerClass": "reusable",
463
463
  "concurrencyPolicy": {
464
- "mode": "none",
464
+ "mode": "serialized",
465
465
  "cancelInProgress": false
466
466
  },
467
467
  "expectedRunnerMinutes": 10,
468
468
  "cancellationBehavior": "finish-started",
469
469
  "sloImpact": {
470
470
  "mergeCritical": false,
471
- "metric": "Train-first self-dogfood admission latency",
471
+ "metric": "terminal receipt projection latency",
472
472
  "expectedContributionSeconds": 0,
473
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
473
+ "rationale": "SETTLE verifies and projects the already durable terminal ReleaseReceipt without mutation authority."
474
474
  }
475
475
  },
476
476
  {
477
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-conformance",
477
+ "laneId": ".github/workflows/build.yml#build",
478
478
  "authorityClass": "governed-delegation",
479
- "triggerClass": "mixed",
479
+ "triggerClass": "reusable",
480
480
  "concurrencyPolicy": {
481
481
  "mode": "none",
482
482
  "cancelInProgress": false
483
483
  },
484
- "expectedRunnerMinutes": 60,
484
+ "expectedRunnerMinutes": 120,
485
485
  "cancellationBehavior": "finish-started",
486
486
  "sloImpact": {
487
487
  "mergeCritical": false,
488
- "metric": "Train-first exact-candidate self-dogfood latency",
488
+ "metric": "configured build planning and execution latency",
489
489
  "expectedContributionSeconds": 0,
490
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
490
+ "rationale": "The public facade delegates once to the backbone; no additional build or controller runs."
491
491
  }
492
492
  },
493
493
  {
494
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-conformance",
495
- "authorityClass": "governed-delegation",
494
+ "laneId": ".github/workflows/public-build-adopter-qualification.yml#conformance",
495
+ "authorityClass": "evidence",
496
496
  "triggerClass": "mixed",
497
497
  "concurrencyPolicy": {
498
498
  "mode": "none",
499
499
  "cancelInProgress": false
500
500
  },
501
- "expectedRunnerMinutes": 60,
502
- "cancellationBehavior": "finish-started",
501
+ "expectedRunnerMinutes": 360,
502
+ "cancellationBehavior": "provider-default",
503
503
  "sloImpact": {
504
504
  "mergeCritical": false,
505
- "metric": "Train-first exact-candidate self-dogfood latency",
505
+ "metric": "capability execution budget",
506
506
  "expectedContributionSeconds": 0,
507
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
507
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
508
508
  }
509
509
  },
510
510
  {
511
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-alpha",
512
- "authorityClass": "governed-delegation",
511
+ "laneId": ".github/workflows/public-build-adopter-qualification.yml#consumer-admission",
512
+ "authorityClass": "evidence",
513
513
  "triggerClass": "mixed",
514
514
  "concurrencyPolicy": {
515
515
  "mode": "none",
516
516
  "cancelInProgress": false
517
517
  },
518
- "expectedRunnerMinutes": 60,
519
- "cancellationBehavior": "finish-started",
518
+ "expectedRunnerMinutes": 360,
519
+ "cancellationBehavior": "provider-default",
520
520
  "sloImpact": {
521
521
  "mergeCritical": false,
522
- "metric": "Train-first exact-candidate self-dogfood latency",
522
+ "metric": "capability execution budget",
523
523
  "expectedContributionSeconds": 0,
524
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
524
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
525
525
  }
526
526
  },
527
527
  {
528
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-alpha",
529
- "authorityClass": "governed-delegation",
528
+ "laneId": ".github/workflows/public-build-adopter-qualification.yml#qualification",
529
+ "authorityClass": "evidence",
530
530
  "triggerClass": "mixed",
531
531
  "concurrencyPolicy": {
532
532
  "mode": "none",
533
533
  "cancelInProgress": false
534
534
  },
535
- "expectedRunnerMinutes": 60,
535
+ "expectedRunnerMinutes": 5,
536
536
  "cancellationBehavior": "finish-started",
537
537
  "sloImpact": {
538
538
  "mergeCritical": false,
539
- "metric": "Train-first exact-candidate self-dogfood latency",
539
+ "metric": "public adopter qualification completion latency",
540
540
  "expectedContributionSeconds": 0,
541
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
541
+ "rationale": "The lane only reconciles already-produced rooted platform reports and grants no provider, release, or stable publication authority."
542
542
  }
543
543
  },
544
544
  {
545
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-stable",
546
- "authorityClass": "governed-delegation",
547
- "triggerClass": "mixed",
545
+ "laneId": ".github/workflows/public-build-check.yml#check",
546
+ "authorityClass": "evidence",
547
+ "triggerClass": "reusable",
548
548
  "concurrencyPolicy": {
549
549
  "mode": "none",
550
550
  "cancelInProgress": false
551
551
  },
552
- "expectedRunnerMinutes": 60,
553
- "cancellationBehavior": "finish-started",
552
+ "expectedRunnerMinutes": 360,
553
+ "cancellationBehavior": "provider-default",
554
554
  "sloImpact": {
555
555
  "mergeCritical": false,
556
- "metric": "Train-first exact-candidate self-dogfood latency",
556
+ "metric": "capability execution budget",
557
557
  "expectedContributionSeconds": 0,
558
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
558
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
559
559
  }
560
560
  },
561
561
  {
562
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-stable",
563
- "authorityClass": "governed-delegation",
564
- "triggerClass": "mixed",
562
+ "laneId": ".github/workflows/public-build-demo.yml#capture",
563
+ "authorityClass": "evidence",
564
+ "triggerClass": "reusable",
565
565
  "concurrencyPolicy": {
566
- "mode": "none",
566
+ "mode": "ref-scoped",
567
567
  "cancelInProgress": false
568
568
  },
569
- "expectedRunnerMinutes": 60,
569
+ "expectedRunnerMinutes": 20,
570
570
  "cancellationBehavior": "finish-started",
571
571
  "sloImpact": {
572
572
  "mergeCritical": false,
573
- "metric": "Train-first exact-candidate self-dogfood latency",
573
+ "metric": "capability execution budget",
574
574
  "expectedContributionSeconds": 0,
575
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
575
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
576
576
  }
577
577
  },
578
578
  {
579
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#reconcile",
579
+ "laneId": ".github/workflows/public-build-demo.yml#publish",
580
580
  "authorityClass": "evidence",
581
- "triggerClass": "mixed",
581
+ "triggerClass": "reusable",
582
582
  "concurrencyPolicy": {
583
- "mode": "none",
583
+ "mode": "ref-scoped",
584
584
  "cancelInProgress": false
585
585
  },
586
- "expectedRunnerMinutes": 10,
586
+ "expectedRunnerMinutes": 15,
587
587
  "cancellationBehavior": "finish-started",
588
588
  "sloImpact": {
589
589
  "mergeCritical": false,
590
- "metric": "primary and recovery equivalence latency",
590
+ "metric": "capability execution budget",
591
591
  "expectedContributionSeconds": 0,
592
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
592
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
593
593
  }
594
594
  },
595
595
  {
596
- "laneId": ".github/workflows/self-release-next-development.yml#review",
597
- "authorityClass": "merge-critical-admission",
598
- "triggerClass": "mixed",
596
+ "laneId": ".github/workflows/public-build-demo.yml#qualify",
597
+ "authorityClass": "evidence",
598
+ "triggerClass": "reusable",
599
599
  "concurrencyPolicy": {
600
600
  "mode": "ref-scoped",
601
601
  "cancelInProgress": false
602
602
  },
603
- "expectedRunnerMinutes": 3,
603
+ "expectedRunnerMinutes": 120,
604
604
  "cancellationBehavior": "finish-started",
605
605
  "sloImpact": {
606
- "mergeCritical": true,
607
- "metric": "generated next-development independent review latency",
608
- "expectedContributionSeconds": 180,
609
- "rationale": "Only successful same-repository version PRs regenerate from the protected base and read completed publication evidence; ordinary source PRs skip the lane. Native queue checks remain final merge authority."
606
+ "mergeCritical": false,
607
+ "metric": "capability execution budget",
608
+ "expectedContributionSeconds": 0,
609
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
610
610
  }
611
611
  },
612
612
  {
613
- "laneId": ".github/workflows/public-release-oci-compose-preview.yml#promote",
614
- "authorityClass": "release",
613
+ "laneId": ".github/workflows/public-build-publication.yml#publication",
614
+ "authorityClass": "evidence",
615
615
  "triggerClass": "reusable",
616
616
  "concurrencyPolicy": {
617
- "mode": "serialized",
617
+ "mode": "none",
618
618
  "cancelInProgress": false
619
619
  },
620
- "expectedRunnerMinutes": 8,
621
- "cancellationBehavior": "finish-started",
620
+ "expectedRunnerMinutes": 360,
621
+ "cancellationBehavior": "provider-default",
622
622
  "sloImpact": {
623
623
  "mergeCritical": false,
624
- "metric": "qualified Compose preview promotion",
624
+ "metric": "capability execution budget",
625
625
  "expectedContributionSeconds": 0,
626
- "rationale": "Runs only after completed exact-source public installation qualification; no merge-critical runner lane is added."
626
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
627
627
  }
628
628
  },
629
629
  {
630
- "laneId": ".github/workflows/.build.yml#configure",
630
+ "laneId": ".github/workflows/public-build-stage-capsule-canary.yml#consumer-admission",
631
631
  "authorityClass": "evidence",
632
632
  "triggerClass": "reusable",
633
633
  "concurrencyPolicy": {
634
634
  "mode": "none",
635
635
  "cancelInProgress": false
636
636
  },
637
- "expectedRunnerMinutes": 5,
638
- "cancellationBehavior": "finish-started",
637
+ "expectedRunnerMinutes": 360,
638
+ "cancellationBehavior": "provider-default",
639
639
  "sloImpact": {
640
640
  "mergeCritical": false,
641
- "metric": "configured build planning and execution latency",
642
- "expectedContributionSeconds": 20,
643
- "rationale": "Resolve exact source TOML and runtime-owned environment before admission or matrix scheduling."
641
+ "metric": "capability execution budget",
642
+ "expectedContributionSeconds": 0,
643
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
644
644
  }
645
645
  },
646
646
  {
647
- "laneId": ".github/workflows/build.yml#build",
648
- "authorityClass": "governed-delegation",
647
+ "laneId": ".github/workflows/public-build-stage-capsule-canary.yml#qualify",
648
+ "authorityClass": "evidence",
649
649
  "triggerClass": "reusable",
650
650
  "concurrencyPolicy": {
651
651
  "mode": "none",
652
652
  "cancelInProgress": false
653
653
  },
654
- "expectedRunnerMinutes": 120,
654
+ "expectedRunnerMinutes": 360,
655
+ "cancellationBehavior": "provider-default",
656
+ "sloImpact": {
657
+ "mergeCritical": false,
658
+ "metric": "capability execution budget",
659
+ "expectedContributionSeconds": 0,
660
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
661
+ }
662
+ },
663
+ {
664
+ "laneId": ".github/workflows/public-build-stage-capsule-canary.yml#reconcile",
665
+ "authorityClass": "evidence",
666
+ "triggerClass": "reusable",
667
+ "concurrencyPolicy": {
668
+ "mode": "none",
669
+ "cancelInProgress": false
670
+ },
671
+ "expectedRunnerMinutes": 360,
672
+ "cancellationBehavior": "provider-default",
673
+ "sloImpact": {
674
+ "mergeCritical": false,
675
+ "metric": "capability execution budget",
676
+ "expectedContributionSeconds": 0,
677
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
678
+ }
679
+ },
680
+ {
681
+ "laneId": ".github/workflows/public-ops-alpha-candidate-patrol.yml#observe",
682
+ "authorityClass": "evidence",
683
+ "triggerClass": "reusable",
684
+ "concurrencyPolicy": {
685
+ "mode": "ref-scoped",
686
+ "cancelInProgress": false
687
+ },
688
+ "expectedRunnerMinutes": 360,
655
689
  "cancellationBehavior": "finish-started",
656
690
  "sloImpact": {
657
691
  "mergeCritical": false,
658
- "metric": "configured build planning and execution latency",
692
+ "metric": "capability execution budget",
659
693
  "expectedContributionSeconds": 0,
660
- "rationale": "The public facade delegates once to the backbone; no additional build or controller runs."
694
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
661
695
  }
662
696
  },
663
697
  {
664
- "laneId": ".github/workflows/self-build-stable-dogfood.yml#stable-consumer",
665
- "authorityClass": "governed-delegation",
666
- "triggerClass": "mixed",
698
+ "laneId": ".github/workflows/public-ops-alpha-candidate-patrol.yml#settle",
699
+ "authorityClass": "evidence",
700
+ "triggerClass": "reusable",
667
701
  "concurrencyPolicy": {
668
702
  "mode": "ref-scoped",
669
703
  "cancelInProgress": false
670
704
  },
671
- "expectedRunnerMinutes": 20,
705
+ "expectedRunnerMinutes": 360,
672
706
  "cancellationBehavior": "finish-started",
673
707
  "sloImpact": {
674
708
  "mergeCritical": false,
675
- "metric": "Published stable TOML build qualification latency",
709
+ "metric": "capability execution budget",
676
710
  "expectedContributionSeconds": 0,
677
- "rationale": "Independent thin public stable fixture caller permits producer-first channel upgrades without duplicating build orchestration."
711
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
678
712
  }
679
- }
680
- ],
681
- "declarationFamilies": [
713
+ },
682
714
  {
683
- "authorityClass": "governed-delegation",
715
+ "laneId": ".github/workflows/public-ops-bootstrap-recovery.yml#recovery-admit",
716
+ "authorityClass": "evidence",
684
717
  "triggerClass": "reusable",
685
718
  "concurrencyPolicy": {
686
719
  "mode": "none",
687
720
  "cancelInProgress": false
688
721
  },
689
- "expectedRunnerMinutes": 60,
722
+ "expectedRunnerMinutes": 10,
690
723
  "cancellationBehavior": "finish-started",
691
724
  "sloImpact": {
692
725
  "mergeCritical": false,
693
- "metric": "opt-in exact-candidate execution latency",
726
+ "metric": "consumer-owned exact-candidate admission latency",
694
727
  "expectedContributionSeconds": 0,
695
728
  "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
696
- },
697
- "laneIds": [
698
- ".github/workflows/.auditable-demo.yml#universal-bootstrap",
699
- ".github/workflows/.binary-release-assets.yml#universal-bootstrap",
700
- ".github/workflows/.bump-minor-version.yml#universal-bootstrap",
701
- ".github/workflows/.declarative-auditable-demo.yml#universal-bootstrap",
702
- ".github/workflows/.gate-profile.yml#universal-bootstrap",
703
- ".github/workflows/.publication-authority.yml#universal-bootstrap",
704
- ".github/workflows/.release-candidate-promote.yml#universal-bootstrap",
705
- ".github/workflows/.release-verify.yml#universal-bootstrap",
706
- ".github/workflows/.sam-verify.yml#universal-bootstrap",
707
- ".github/workflows/.sync-release-page.yml#universal-bootstrap",
708
- ".github/workflows/.sync-remote-git.yml#universal-bootstrap",
709
- ".github/workflows/.web-surface.yml#universal-bootstrap",
710
- ".github/workflows/.wheel-verify.yml#universal-bootstrap",
711
- ".github/workflows/buildchain-patrol.yml#universal-bootstrap",
712
- ".github/workflows/check.yml#universal-bootstrap",
713
- ".github/workflows/dev-alpha-candidate-patrol.yml#universal-bootstrap",
714
- ".github/workflows/dev-delivery-warrant-cancel.yml#universal-bootstrap",
715
- ".github/workflows/dev-delivery-warrant-close.yml#universal-bootstrap",
716
- ".github/workflows/dev-pr-auto-merge.yml#universal-bootstrap",
717
- ".github/workflows/dev-qualification-patrol.yml#universal-bootstrap",
718
- ".github/workflows/engineering-housekeeper.yml#universal-bootstrap",
719
- ".github/workflows/github-artifact-attestation.yml#universal-bootstrap",
720
- ".github/workflows/paper-release-sealed.yml#universal-bootstrap",
721
- ".github/workflows/paper-release.yml#universal-bootstrap",
722
- ".github/workflows/patrol-daily.yml#universal-bootstrap",
723
- ".github/workflows/patrol-monthly.yml#universal-bootstrap",
724
- ".github/workflows/patrol-observed-evidence.yml#universal-bootstrap",
725
- ".github/workflows/patrol-weekly.yml#universal-bootstrap",
726
- ".github/workflows/public-release-oci-compose-preview.yml#universal-bootstrap",
727
- ".github/workflows/publication-artifact.yml#universal-bootstrap",
728
- ".github/workflows/release-candidate-promote.yml#universal-bootstrap",
729
- ".github/workflows/release-propagation.yml#universal-bootstrap",
730
- ".github/workflows/release-tail.yml#universal-bootstrap",
731
- ".github/workflows/stable-candidate-patrol.yml#universal-bootstrap",
732
- ".github/workflows/v4-stage-capsule-canary.yml#universal-bootstrap",
733
- ".github/workflows/v4-tail-reseal.yml#universal-bootstrap"
734
- ]
729
+ }
735
730
  },
736
731
  {
732
+ "laneId": ".github/workflows/public-ops-bootstrap-recovery.yml#recovery-execute",
737
733
  "authorityClass": "governed-delegation",
738
- "triggerClass": "mixed",
734
+ "triggerClass": "reusable",
739
735
  "concurrencyPolicy": {
740
736
  "mode": "none",
741
737
  "cancelInProgress": false
@@ -744,14 +740,1898 @@
744
740
  "cancellationBehavior": "finish-started",
745
741
  "sloImpact": {
746
742
  "mergeCritical": false,
747
- "metric": "mixed-trigger exact-candidate execution latency",
743
+ "metric": "consumer-owned exact-candidate execution latency",
748
744
  "expectedContributionSeconds": 0,
749
745
  "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
746
+ }
747
+ },
748
+ {
749
+ "laneId": ".github/workflows/public-ops-bootstrap-recovery.yml#recovery-settle",
750
+ "authorityClass": "evidence",
751
+ "triggerClass": "reusable",
752
+ "concurrencyPolicy": {
753
+ "mode": "none",
754
+ "cancelInProgress": false
750
755
  },
751
- "laneIds": [
752
- ".github/workflows/release-governance-reconcile.yml#universal-bootstrap",
753
- ".github/workflows/v4-adopter-delivery.yml#universal-bootstrap"
754
- ]
755
- }
756
- ]
756
+ "expectedRunnerMinutes": 10,
757
+ "cancellationBehavior": "finish-started",
758
+ "sloImpact": {
759
+ "mergeCritical": false,
760
+ "metric": "consumer-owned terminal settlement latency",
761
+ "expectedContributionSeconds": 0,
762
+ "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
763
+ }
764
+ },
765
+ {
766
+ "laneId": ".github/workflows/public-ops-bootstrap.yml#admit",
767
+ "authorityClass": "evidence",
768
+ "triggerClass": "reusable",
769
+ "concurrencyPolicy": {
770
+ "mode": "none",
771
+ "cancelInProgress": false
772
+ },
773
+ "expectedRunnerMinutes": 10,
774
+ "cancellationBehavior": "finish-started",
775
+ "sloImpact": {
776
+ "mergeCritical": false,
777
+ "metric": "exact-candidate admission latency",
778
+ "expectedContributionSeconds": 0,
779
+ "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
780
+ }
781
+ },
782
+ {
783
+ "laneId": ".github/workflows/public-ops-bootstrap.yml#execute",
784
+ "authorityClass": "governed-delegation",
785
+ "triggerClass": "reusable",
786
+ "concurrencyPolicy": {
787
+ "mode": "none",
788
+ "cancelInProgress": false
789
+ },
790
+ "expectedRunnerMinutes": 60,
791
+ "cancellationBehavior": "finish-started",
792
+ "sloImpact": {
793
+ "mergeCritical": false,
794
+ "metric": "exact-candidate execution latency",
795
+ "expectedContributionSeconds": 0,
796
+ "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
797
+ }
798
+ },
799
+ {
800
+ "laneId": ".github/workflows/public-ops-bootstrap.yml#settle",
801
+ "authorityClass": "evidence",
802
+ "triggerClass": "reusable",
803
+ "concurrencyPolicy": {
804
+ "mode": "none",
805
+ "cancelInProgress": false
806
+ },
807
+ "expectedRunnerMinutes": 10,
808
+ "cancellationBehavior": "finish-started",
809
+ "sloImpact": {
810
+ "mergeCritical": false,
811
+ "metric": "universal terminal settlement latency",
812
+ "expectedContributionSeconds": 0,
813
+ "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
814
+ }
815
+ },
816
+ {
817
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#admission",
818
+ "authorityClass": "evidence",
819
+ "triggerClass": "reusable",
820
+ "concurrencyPolicy": {
821
+ "mode": "ref-scoped",
822
+ "cancelInProgress": false
823
+ },
824
+ "expectedRunnerMinutes": 360,
825
+ "cancellationBehavior": "finish-started",
826
+ "sloImpact": {
827
+ "mergeCritical": false,
828
+ "metric": "capability execution budget",
829
+ "expectedContributionSeconds": 0,
830
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
831
+ }
832
+ },
833
+ {
834
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#delivery-heartbeat",
835
+ "authorityClass": "evidence",
836
+ "triggerClass": "reusable",
837
+ "concurrencyPolicy": {
838
+ "mode": "ref-scoped",
839
+ "cancelInProgress": false
840
+ },
841
+ "expectedRunnerMinutes": 360,
842
+ "cancellationBehavior": "finish-started",
843
+ "sloImpact": {
844
+ "mergeCritical": false,
845
+ "metric": "capability execution budget",
846
+ "expectedContributionSeconds": 0,
847
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
848
+ }
849
+ },
850
+ {
851
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#merge-dev-prs",
852
+ "authorityClass": "evidence",
853
+ "triggerClass": "reusable",
854
+ "concurrencyPolicy": {
855
+ "mode": "ref-scoped",
856
+ "cancelInProgress": false
857
+ },
858
+ "expectedRunnerMinutes": 360,
859
+ "cancellationBehavior": "finish-started",
860
+ "sloImpact": {
861
+ "mergeCritical": false,
862
+ "metric": "capability execution budget",
863
+ "expectedContributionSeconds": 0,
864
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
865
+ }
866
+ },
867
+ {
868
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#native-execution",
869
+ "authorityClass": "evidence",
870
+ "triggerClass": "reusable",
871
+ "concurrencyPolicy": {
872
+ "mode": "ref-scoped",
873
+ "cancelInProgress": false
874
+ },
875
+ "expectedRunnerMinutes": 360,
876
+ "cancellationBehavior": "finish-started",
877
+ "sloImpact": {
878
+ "mergeCritical": false,
879
+ "metric": "capability execution budget",
880
+ "expectedContributionSeconds": 0,
881
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
882
+ }
883
+ },
884
+ {
885
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#seal-native-execution",
886
+ "authorityClass": "evidence",
887
+ "triggerClass": "reusable",
888
+ "concurrencyPolicy": {
889
+ "mode": "ref-scoped",
890
+ "cancelInProgress": false
891
+ },
892
+ "expectedRunnerMinutes": 360,
893
+ "cancellationBehavior": "finish-started",
894
+ "sloImpact": {
895
+ "mergeCritical": false,
896
+ "metric": "capability execution budget",
897
+ "expectedContributionSeconds": 0,
898
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
899
+ }
900
+ },
901
+ {
902
+ "laneId": ".github/workflows/public-ops-dev-qualification-patrol.yml#mutate",
903
+ "authorityClass": "evidence",
904
+ "triggerClass": "reusable",
905
+ "concurrencyPolicy": {
906
+ "mode": "ref-scoped",
907
+ "cancelInProgress": false
908
+ },
909
+ "expectedRunnerMinutes": 360,
910
+ "cancellationBehavior": "finish-started",
911
+ "sloImpact": {
912
+ "mergeCritical": false,
913
+ "metric": "capability execution budget",
914
+ "expectedContributionSeconds": 0,
915
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
916
+ }
917
+ },
918
+ {
919
+ "laneId": ".github/workflows/public-ops-dev-qualification-patrol.yml#observe",
920
+ "authorityClass": "evidence",
921
+ "triggerClass": "reusable",
922
+ "concurrencyPolicy": {
923
+ "mode": "ref-scoped",
924
+ "cancelInProgress": false
925
+ },
926
+ "expectedRunnerMinutes": 360,
927
+ "cancellationBehavior": "finish-started",
928
+ "sloImpact": {
929
+ "mergeCritical": false,
930
+ "metric": "capability execution budget",
931
+ "expectedContributionSeconds": 0,
932
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
933
+ }
934
+ },
935
+ {
936
+ "laneId": ".github/workflows/public-ops-housekeeping.yml#delete-branches",
937
+ "authorityClass": "evidence",
938
+ "triggerClass": "reusable",
939
+ "concurrencyPolicy": {
940
+ "mode": "ref-scoped",
941
+ "cancelInProgress": false
942
+ },
943
+ "expectedRunnerMinutes": 360,
944
+ "cancellationBehavior": "finish-started",
945
+ "sloImpact": {
946
+ "mergeCritical": false,
947
+ "metric": "capability execution budget",
948
+ "expectedContributionSeconds": 0,
949
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
950
+ }
951
+ },
952
+ {
953
+ "laneId": ".github/workflows/public-ops-housekeeping.yml#label-pull-requests",
954
+ "authorityClass": "evidence",
955
+ "triggerClass": "reusable",
956
+ "concurrencyPolicy": {
957
+ "mode": "ref-scoped",
958
+ "cancelInProgress": false
959
+ },
960
+ "expectedRunnerMinutes": 360,
961
+ "cancellationBehavior": "finish-started",
962
+ "sloImpact": {
963
+ "mergeCritical": false,
964
+ "metric": "capability execution budget",
965
+ "expectedContributionSeconds": 0,
966
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
967
+ }
968
+ },
969
+ {
970
+ "laneId": ".github/workflows/public-ops-housekeeping.yml#plan",
971
+ "authorityClass": "evidence",
972
+ "triggerClass": "reusable",
973
+ "concurrencyPolicy": {
974
+ "mode": "ref-scoped",
975
+ "cancelInProgress": false
976
+ },
977
+ "expectedRunnerMinutes": 360,
978
+ "cancellationBehavior": "finish-started",
979
+ "sloImpact": {
980
+ "mergeCritical": false,
981
+ "metric": "capability execution budget",
982
+ "expectedContributionSeconds": 0,
983
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
984
+ }
985
+ },
986
+ {
987
+ "laneId": ".github/workflows/public-ops-observed-evidence.yml#publish",
988
+ "authorityClass": "evidence",
989
+ "triggerClass": "reusable",
990
+ "concurrencyPolicy": {
991
+ "mode": "ref-scoped",
992
+ "cancelInProgress": false
993
+ },
994
+ "expectedRunnerMinutes": 360,
995
+ "cancellationBehavior": "finish-started",
996
+ "sloImpact": {
997
+ "mergeCritical": false,
998
+ "metric": "capability execution budget",
999
+ "expectedContributionSeconds": 0,
1000
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1001
+ }
1002
+ },
1003
+ {
1004
+ "laneId": ".github/workflows/public-ops-patrol-daily.yml#patrol",
1005
+ "authorityClass": "governed-delegation",
1006
+ "triggerClass": "reusable",
1007
+ "concurrencyPolicy": {
1008
+ "mode": "none",
1009
+ "cancelInProgress": false
1010
+ },
1011
+ "expectedRunnerMinutes": 360,
1012
+ "cancellationBehavior": "provider-default",
1013
+ "sloImpact": {
1014
+ "mergeCritical": false,
1015
+ "metric": "capability execution budget",
1016
+ "expectedContributionSeconds": 0,
1017
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1018
+ }
1019
+ },
1020
+ {
1021
+ "laneId": ".github/workflows/public-ops-patrol-monthly.yml#patrol",
1022
+ "authorityClass": "governed-delegation",
1023
+ "triggerClass": "reusable",
1024
+ "concurrencyPolicy": {
1025
+ "mode": "none",
1026
+ "cancelInProgress": false
1027
+ },
1028
+ "expectedRunnerMinutes": 360,
1029
+ "cancellationBehavior": "provider-default",
1030
+ "sloImpact": {
1031
+ "mergeCritical": false,
1032
+ "metric": "capability execution budget",
1033
+ "expectedContributionSeconds": 0,
1034
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1035
+ }
1036
+ },
1037
+ {
1038
+ "laneId": ".github/workflows/public-ops-patrol-weekly.yml#patrol",
1039
+ "authorityClass": "governed-delegation",
1040
+ "triggerClass": "reusable",
1041
+ "concurrencyPolicy": {
1042
+ "mode": "none",
1043
+ "cancelInProgress": false
1044
+ },
1045
+ "expectedRunnerMinutes": 360,
1046
+ "cancellationBehavior": "provider-default",
1047
+ "sloImpact": {
1048
+ "mergeCritical": false,
1049
+ "metric": "capability execution budget",
1050
+ "expectedContributionSeconds": 0,
1051
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1052
+ }
1053
+ },
1054
+ {
1055
+ "laneId": ".github/workflows/public-ops-patrol.yml#patrol",
1056
+ "authorityClass": "evidence",
1057
+ "triggerClass": "reusable",
1058
+ "concurrencyPolicy": {
1059
+ "mode": "ref-scoped",
1060
+ "cancelInProgress": false
1061
+ },
1062
+ "expectedRunnerMinutes": 360,
1063
+ "cancellationBehavior": "finish-started",
1064
+ "sloImpact": {
1065
+ "mergeCritical": false,
1066
+ "metric": "capability execution budget",
1067
+ "expectedContributionSeconds": 0,
1068
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1069
+ }
1070
+ },
1071
+ {
1072
+ "laneId": ".github/workflows/public-ops-release-governance.yml#reconcile",
1073
+ "authorityClass": "release",
1074
+ "triggerClass": "mixed",
1075
+ "concurrencyPolicy": {
1076
+ "mode": "none",
1077
+ "cancelInProgress": false
1078
+ },
1079
+ "expectedRunnerMinutes": 360,
1080
+ "cancellationBehavior": "provider-default",
1081
+ "sloImpact": {
1082
+ "mergeCritical": false,
1083
+ "metric": "capability execution budget",
1084
+ "expectedContributionSeconds": 0,
1085
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1086
+ }
1087
+ },
1088
+ {
1089
+ "laneId": ".github/workflows/public-ops-stable-candidate-patrol.yml#patrol",
1090
+ "authorityClass": "evidence",
1091
+ "triggerClass": "reusable",
1092
+ "concurrencyPolicy": {
1093
+ "mode": "ref-scoped",
1094
+ "cancelInProgress": false
1095
+ },
1096
+ "expectedRunnerMinutes": 360,
1097
+ "cancellationBehavior": "finish-started",
1098
+ "sloImpact": {
1099
+ "mergeCritical": false,
1100
+ "metric": "capability execution budget",
1101
+ "expectedContributionSeconds": 0,
1102
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1103
+ }
1104
+ },
1105
+ {
1106
+ "laneId": ".github/workflows/public-ops-tail-reseal.yml#plan",
1107
+ "authorityClass": "evidence",
1108
+ "triggerClass": "reusable",
1109
+ "concurrencyPolicy": {
1110
+ "mode": "none",
1111
+ "cancelInProgress": false
1112
+ },
1113
+ "expectedRunnerMinutes": 360,
1114
+ "cancellationBehavior": "provider-default",
1115
+ "sloImpact": {
1116
+ "mergeCritical": false,
1117
+ "metric": "capability execution budget",
1118
+ "expectedContributionSeconds": 0,
1119
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1120
+ }
1121
+ },
1122
+ {
1123
+ "laneId": ".github/workflows/public-ops-tail-reseal.yml#platforms",
1124
+ "authorityClass": "evidence",
1125
+ "triggerClass": "reusable",
1126
+ "concurrencyPolicy": {
1127
+ "mode": "none",
1128
+ "cancelInProgress": false
1129
+ },
1130
+ "expectedRunnerMinutes": 360,
1131
+ "cancellationBehavior": "provider-default",
1132
+ "sloImpact": {
1133
+ "mergeCritical": false,
1134
+ "metric": "capability execution budget",
1135
+ "expectedContributionSeconds": 0,
1136
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1137
+ }
1138
+ },
1139
+ {
1140
+ "laneId": ".github/workflows/public-ops-tail-reseal.yml#seal",
1141
+ "authorityClass": "evidence",
1142
+ "triggerClass": "reusable",
1143
+ "concurrencyPolicy": {
1144
+ "mode": "none",
1145
+ "cancelInProgress": false
1146
+ },
1147
+ "expectedRunnerMinutes": 360,
1148
+ "cancellationBehavior": "provider-default",
1149
+ "sloImpact": {
1150
+ "mergeCritical": false,
1151
+ "metric": "capability execution budget",
1152
+ "expectedContributionSeconds": 0,
1153
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1154
+ }
1155
+ },
1156
+ {
1157
+ "laneId": ".github/workflows/public-ops-warrant-cancel.yml#cancel",
1158
+ "authorityClass": "evidence",
1159
+ "triggerClass": "reusable",
1160
+ "concurrencyPolicy": {
1161
+ "mode": "none",
1162
+ "cancelInProgress": false
1163
+ },
1164
+ "expectedRunnerMinutes": 360,
1165
+ "cancellationBehavior": "provider-default",
1166
+ "sloImpact": {
1167
+ "mergeCritical": false,
1168
+ "metric": "capability execution budget",
1169
+ "expectedContributionSeconds": 0,
1170
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1171
+ }
1172
+ },
1173
+ {
1174
+ "laneId": ".github/workflows/public-ops-warrant-close.yml#close",
1175
+ "authorityClass": "evidence",
1176
+ "triggerClass": "reusable",
1177
+ "concurrencyPolicy": {
1178
+ "mode": "none",
1179
+ "cancelInProgress": false
1180
+ },
1181
+ "expectedRunnerMinutes": 360,
1182
+ "cancellationBehavior": "provider-default",
1183
+ "sloImpact": {
1184
+ "mergeCritical": false,
1185
+ "metric": "capability execution budget",
1186
+ "expectedContributionSeconds": 0,
1187
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1188
+ }
1189
+ },
1190
+ {
1191
+ "laneId": ".github/workflows/public-release-artifact-attestation.yml#attest",
1192
+ "authorityClass": "release",
1193
+ "triggerClass": "reusable",
1194
+ "concurrencyPolicy": {
1195
+ "mode": "none",
1196
+ "cancelInProgress": false
1197
+ },
1198
+ "expectedRunnerMinutes": 360,
1199
+ "cancellationBehavior": "provider-default",
1200
+ "sloImpact": {
1201
+ "mergeCritical": false,
1202
+ "metric": "capability execution budget",
1203
+ "expectedContributionSeconds": 0,
1204
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1205
+ }
1206
+ },
1207
+ {
1208
+ "laneId": ".github/workflows/public-release-oci-compose-preview.yml#promote",
1209
+ "authorityClass": "release",
1210
+ "triggerClass": "reusable",
1211
+ "concurrencyPolicy": {
1212
+ "mode": "serialized",
1213
+ "cancelInProgress": false
1214
+ },
1215
+ "expectedRunnerMinutes": 8,
1216
+ "cancellationBehavior": "finish-started",
1217
+ "sloImpact": {
1218
+ "mergeCritical": false,
1219
+ "metric": "qualified Compose preview promotion",
1220
+ "expectedContributionSeconds": 0,
1221
+ "rationale": "Runs only after completed exact-source public installation qualification; no merge-critical runner lane is added."
1222
+ }
1223
+ },
1224
+ {
1225
+ "laneId": ".github/workflows/public-release-paper.yml#publication-authority",
1226
+ "authorityClass": "governed-delegation",
1227
+ "triggerClass": "reusable",
1228
+ "concurrencyPolicy": {
1229
+ "mode": "none",
1230
+ "cancelInProgress": false
1231
+ },
1232
+ "expectedRunnerMinutes": 360,
1233
+ "cancellationBehavior": "provider-default",
1234
+ "sloImpact": {
1235
+ "mergeCritical": false,
1236
+ "metric": "capability execution budget",
1237
+ "expectedContributionSeconds": 0,
1238
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1239
+ }
1240
+ },
1241
+ {
1242
+ "laneId": ".github/workflows/public-release-paper.yml#publication-candidate",
1243
+ "authorityClass": "governed-delegation",
1244
+ "triggerClass": "reusable",
1245
+ "concurrencyPolicy": {
1246
+ "mode": "none",
1247
+ "cancelInProgress": false
1248
+ },
1249
+ "expectedRunnerMinutes": 360,
1250
+ "cancellationBehavior": "provider-default",
1251
+ "sloImpact": {
1252
+ "mergeCritical": false,
1253
+ "metric": "capability execution budget",
1254
+ "expectedContributionSeconds": 0,
1255
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1256
+ }
1257
+ },
1258
+ {
1259
+ "laneId": ".github/workflows/public-release-paper.yml#publish",
1260
+ "authorityClass": "release",
1261
+ "triggerClass": "reusable",
1262
+ "concurrencyPolicy": {
1263
+ "mode": "none",
1264
+ "cancelInProgress": false
1265
+ },
1266
+ "expectedRunnerMinutes": 360,
1267
+ "cancellationBehavior": "provider-default",
1268
+ "sloImpact": {
1269
+ "mergeCritical": false,
1270
+ "metric": "capability execution budget",
1271
+ "expectedContributionSeconds": 0,
1272
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1273
+ }
1274
+ },
1275
+ {
1276
+ "laneId": ".github/workflows/public-release-promote.yml#consumer-admission",
1277
+ "authorityClass": "release",
1278
+ "triggerClass": "reusable",
1279
+ "concurrencyPolicy": {
1280
+ "mode": "none",
1281
+ "cancelInProgress": false
1282
+ },
1283
+ "expectedRunnerMinutes": 360,
1284
+ "cancellationBehavior": "provider-default",
1285
+ "sloImpact": {
1286
+ "mergeCritical": false,
1287
+ "metric": "capability execution budget",
1288
+ "expectedContributionSeconds": 0,
1289
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1290
+ }
1291
+ },
1292
+ {
1293
+ "laneId": ".github/workflows/public-release-promote.yml#invoke",
1294
+ "authorityClass": "release",
1295
+ "triggerClass": "reusable",
1296
+ "concurrencyPolicy": {
1297
+ "mode": "none",
1298
+ "cancelInProgress": false
1299
+ },
1300
+ "expectedRunnerMinutes": 35,
1301
+ "cancellationBehavior": "finish-started",
1302
+ "sloImpact": {
1303
+ "mergeCritical": false,
1304
+ "metric": "public promotion adapter latency",
1305
+ "expectedContributionSeconds": 0,
1306
+ "rationale": "The public compatibility surface resolves discovery facts and invokes one fixed v4 publisher."
1307
+ }
1308
+ },
1309
+ {
1310
+ "laneId": ".github/workflows/public-release-promote.yml#resolve-promotion",
1311
+ "authorityClass": "release",
1312
+ "triggerClass": "reusable",
1313
+ "concurrencyPolicy": {
1314
+ "mode": "none",
1315
+ "cancelInProgress": false
1316
+ },
1317
+ "expectedRunnerMinutes": 360,
1318
+ "cancellationBehavior": "provider-default",
1319
+ "sloImpact": {
1320
+ "mergeCritical": false,
1321
+ "metric": "capability execution budget",
1322
+ "expectedContributionSeconds": 0,
1323
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1324
+ }
1325
+ },
1326
+ {
1327
+ "laneId": ".github/workflows/public-release-propagation.yml#propagate",
1328
+ "authorityClass": "release",
1329
+ "triggerClass": "reusable",
1330
+ "concurrencyPolicy": {
1331
+ "mode": "ref-scoped",
1332
+ "cancelInProgress": false
1333
+ },
1334
+ "expectedRunnerMinutes": 360,
1335
+ "cancellationBehavior": "finish-started",
1336
+ "sloImpact": {
1337
+ "mergeCritical": false,
1338
+ "metric": "capability execution budget",
1339
+ "expectedContributionSeconds": 0,
1340
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1341
+ }
1342
+ },
1343
+ {
1344
+ "laneId": ".github/workflows/public-release-signing-authority.yml#deliver",
1345
+ "authorityClass": "release",
1346
+ "triggerClass": "manual",
1347
+ "concurrencyPolicy": {
1348
+ "mode": "ref-scoped",
1349
+ "cancelInProgress": false
1350
+ },
1351
+ "expectedRunnerMinutes": 360,
1352
+ "cancellationBehavior": "finish-started",
1353
+ "sloImpact": {
1354
+ "mergeCritical": false,
1355
+ "metric": "capability execution budget",
1356
+ "expectedContributionSeconds": 0,
1357
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1358
+ }
1359
+ },
1360
+ {
1361
+ "laneId": ".github/workflows/public-release-signing-authority.yml#detached",
1362
+ "authorityClass": "release",
1363
+ "triggerClass": "manual",
1364
+ "concurrencyPolicy": {
1365
+ "mode": "ref-scoped",
1366
+ "cancelInProgress": false
1367
+ },
1368
+ "expectedRunnerMinutes": 360,
1369
+ "cancellationBehavior": "finish-started",
1370
+ "sloImpact": {
1371
+ "mergeCritical": false,
1372
+ "metric": "capability execution budget",
1373
+ "expectedContributionSeconds": 0,
1374
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1375
+ }
1376
+ },
1377
+ {
1378
+ "laneId": ".github/workflows/public-release-signing-authority.yml#intake",
1379
+ "authorityClass": "release",
1380
+ "triggerClass": "manual",
1381
+ "concurrencyPolicy": {
1382
+ "mode": "ref-scoped",
1383
+ "cancelInProgress": false
1384
+ },
1385
+ "expectedRunnerMinutes": 360,
1386
+ "cancellationBehavior": "finish-started",
1387
+ "sloImpact": {
1388
+ "mergeCritical": false,
1389
+ "metric": "capability execution budget",
1390
+ "expectedContributionSeconds": 0,
1391
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1392
+ }
1393
+ },
1394
+ {
1395
+ "laneId": ".github/workflows/public-release-signing-authority.yml#macos",
1396
+ "authorityClass": "release",
1397
+ "triggerClass": "manual",
1398
+ "concurrencyPolicy": {
1399
+ "mode": "ref-scoped",
1400
+ "cancelInProgress": false
1401
+ },
1402
+ "expectedRunnerMinutes": 360,
1403
+ "cancellationBehavior": "finish-started",
1404
+ "sloImpact": {
1405
+ "mergeCritical": false,
1406
+ "metric": "capability execution budget",
1407
+ "expectedContributionSeconds": 0,
1408
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1409
+ }
1410
+ },
1411
+ {
1412
+ "laneId": ".github/workflows/public-release-signing-authority.yml#windows",
1413
+ "authorityClass": "release",
1414
+ "triggerClass": "manual",
1415
+ "concurrencyPolicy": {
1416
+ "mode": "ref-scoped",
1417
+ "cancelInProgress": false
1418
+ },
1419
+ "expectedRunnerMinutes": 360,
1420
+ "cancellationBehavior": "finish-started",
1421
+ "sloImpact": {
1422
+ "mergeCritical": false,
1423
+ "metric": "capability execution budget",
1424
+ "expectedContributionSeconds": 0,
1425
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1426
+ }
1427
+ },
1428
+ {
1429
+ "laneId": ".github/workflows/public-release-tail.yml#release-tail",
1430
+ "authorityClass": "release",
1431
+ "triggerClass": "reusable",
1432
+ "concurrencyPolicy": {
1433
+ "mode": "none",
1434
+ "cancelInProgress": false
1435
+ },
1436
+ "expectedRunnerMinutes": 360,
1437
+ "cancellationBehavior": "provider-default",
1438
+ "sloImpact": {
1439
+ "mergeCritical": false,
1440
+ "metric": "capability execution budget",
1441
+ "expectedContributionSeconds": 0,
1442
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1443
+ }
1444
+ },
1445
+ {
1446
+ "laneId": ".github/workflows/public-release-web.yml#apply-input-gate",
1447
+ "authorityClass": "release",
1448
+ "triggerClass": "reusable",
1449
+ "concurrencyPolicy": {
1450
+ "mode": "none",
1451
+ "cancelInProgress": false
1452
+ },
1453
+ "expectedRunnerMinutes": 360,
1454
+ "cancellationBehavior": "provider-default",
1455
+ "sloImpact": {
1456
+ "mergeCritical": false,
1457
+ "metric": "capability execution budget",
1458
+ "expectedContributionSeconds": 0,
1459
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1460
+ }
1461
+ },
1462
+ {
1463
+ "laneId": ".github/workflows/public-release-web.yml#controller-plan",
1464
+ "authorityClass": "release",
1465
+ "triggerClass": "reusable",
1466
+ "concurrencyPolicy": {
1467
+ "mode": "none",
1468
+ "cancelInProgress": false
1469
+ },
1470
+ "expectedRunnerMinutes": 360,
1471
+ "cancellationBehavior": "provider-default",
1472
+ "sloImpact": {
1473
+ "mergeCritical": false,
1474
+ "metric": "capability execution budget",
1475
+ "expectedContributionSeconds": 0,
1476
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1477
+ }
1478
+ },
1479
+ {
1480
+ "laneId": ".github/workflows/public-release-web.yml#controller-receipt",
1481
+ "authorityClass": "release",
1482
+ "triggerClass": "reusable",
1483
+ "concurrencyPolicy": {
1484
+ "mode": "none",
1485
+ "cancelInProgress": false
1486
+ },
1487
+ "expectedRunnerMinutes": 360,
1488
+ "cancellationBehavior": "provider-default",
1489
+ "sloImpact": {
1490
+ "mergeCritical": false,
1491
+ "metric": "capability execution budget",
1492
+ "expectedContributionSeconds": 0,
1493
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1494
+ }
1495
+ },
1496
+ {
1497
+ "laneId": ".github/workflows/public-release-web.yml#external-publication-authority",
1498
+ "authorityClass": "governed-delegation",
1499
+ "triggerClass": "reusable",
1500
+ "concurrencyPolicy": {
1501
+ "mode": "none",
1502
+ "cancelInProgress": false
1503
+ },
1504
+ "expectedRunnerMinutes": 360,
1505
+ "cancellationBehavior": "provider-default",
1506
+ "sloImpact": {
1507
+ "mergeCritical": false,
1508
+ "metric": "capability execution budget",
1509
+ "expectedContributionSeconds": 0,
1510
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1511
+ }
1512
+ },
1513
+ {
1514
+ "laneId": ".github/workflows/public-release-web.yml#open-production-release-pr",
1515
+ "authorityClass": "release",
1516
+ "triggerClass": "reusable",
1517
+ "concurrencyPolicy": {
1518
+ "mode": "none",
1519
+ "cancelInProgress": false
1520
+ },
1521
+ "expectedRunnerMinutes": 360,
1522
+ "cancellationBehavior": "provider-default",
1523
+ "sloImpact": {
1524
+ "mergeCritical": false,
1525
+ "metric": "capability execution budget",
1526
+ "expectedContributionSeconds": 0,
1527
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1528
+ }
1529
+ },
1530
+ {
1531
+ "laneId": ".github/workflows/public-release-web.yml#plan",
1532
+ "authorityClass": "release",
1533
+ "triggerClass": "reusable",
1534
+ "concurrencyPolicy": {
1535
+ "mode": "none",
1536
+ "cancelInProgress": false
1537
+ },
1538
+ "expectedRunnerMinutes": 360,
1539
+ "cancellationBehavior": "provider-default",
1540
+ "sloImpact": {
1541
+ "mergeCritical": false,
1542
+ "metric": "capability execution budget",
1543
+ "expectedContributionSeconds": 0,
1544
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1545
+ }
1546
+ },
1547
+ {
1548
+ "laneId": ".github/workflows/public-release-web.yml#preview-apply",
1549
+ "authorityClass": "release",
1550
+ "triggerClass": "reusable",
1551
+ "concurrencyPolicy": {
1552
+ "mode": "none",
1553
+ "cancelInProgress": false
1554
+ },
1555
+ "expectedRunnerMinutes": 360,
1556
+ "cancellationBehavior": "provider-default",
1557
+ "sloImpact": {
1558
+ "mergeCritical": false,
1559
+ "metric": "capability execution budget",
1560
+ "expectedContributionSeconds": 0,
1561
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1562
+ }
1563
+ },
1564
+ {
1565
+ "laneId": ".github/workflows/public-release-web.yml#preview-cleanup",
1566
+ "authorityClass": "release",
1567
+ "triggerClass": "reusable",
1568
+ "concurrencyPolicy": {
1569
+ "mode": "none",
1570
+ "cancelInProgress": false
1571
+ },
1572
+ "expectedRunnerMinutes": 360,
1573
+ "cancellationBehavior": "provider-default",
1574
+ "sloImpact": {
1575
+ "mergeCritical": false,
1576
+ "metric": "capability execution budget",
1577
+ "expectedContributionSeconds": 0,
1578
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1579
+ }
1580
+ },
1581
+ {
1582
+ "laneId": ".github/workflows/public-release-web.yml#production-apply",
1583
+ "authorityClass": "release",
1584
+ "triggerClass": "reusable",
1585
+ "concurrencyPolicy": {
1586
+ "mode": "none",
1587
+ "cancelInProgress": false
1588
+ },
1589
+ "expectedRunnerMinutes": 360,
1590
+ "cancellationBehavior": "provider-default",
1591
+ "sloImpact": {
1592
+ "mergeCritical": false,
1593
+ "metric": "capability execution budget",
1594
+ "expectedContributionSeconds": 0,
1595
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1596
+ }
1597
+ },
1598
+ {
1599
+ "laneId": ".github/workflows/public-release-web.yml#publication-authority",
1600
+ "authorityClass": "release",
1601
+ "triggerClass": "reusable",
1602
+ "concurrencyPolicy": {
1603
+ "mode": "none",
1604
+ "cancelInProgress": false
1605
+ },
1606
+ "expectedRunnerMinutes": 360,
1607
+ "cancellationBehavior": "provider-default",
1608
+ "sloImpact": {
1609
+ "mergeCritical": false,
1610
+ "metric": "capability execution budget",
1611
+ "expectedContributionSeconds": 0,
1612
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1613
+ }
1614
+ },
1615
+ {
1616
+ "laneId": ".github/workflows/public-release-web.yml#publication-decision",
1617
+ "authorityClass": "release",
1618
+ "triggerClass": "reusable",
1619
+ "concurrencyPolicy": {
1620
+ "mode": "none",
1621
+ "cancelInProgress": false
1622
+ },
1623
+ "expectedRunnerMinutes": 360,
1624
+ "cancellationBehavior": "provider-default",
1625
+ "sloImpact": {
1626
+ "mergeCritical": false,
1627
+ "metric": "capability execution budget",
1628
+ "expectedContributionSeconds": 0,
1629
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1630
+ }
1631
+ },
1632
+ {
1633
+ "laneId": ".github/workflows/public-release-web.yml#release-intent",
1634
+ "authorityClass": "release",
1635
+ "triggerClass": "reusable",
1636
+ "concurrencyPolicy": {
1637
+ "mode": "none",
1638
+ "cancelInProgress": false
1639
+ },
1640
+ "expectedRunnerMinutes": 360,
1641
+ "cancellationBehavior": "provider-default",
1642
+ "sloImpact": {
1643
+ "mergeCritical": false,
1644
+ "metric": "capability execution budget",
1645
+ "expectedContributionSeconds": 0,
1646
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1647
+ }
1648
+ },
1649
+ {
1650
+ "laneId": ".github/workflows/public-release-web.yml#runtime",
1651
+ "authorityClass": "release",
1652
+ "triggerClass": "reusable",
1653
+ "concurrencyPolicy": {
1654
+ "mode": "none",
1655
+ "cancelInProgress": false
1656
+ },
1657
+ "expectedRunnerMinutes": 360,
1658
+ "cancellationBehavior": "provider-default",
1659
+ "sloImpact": {
1660
+ "mergeCritical": false,
1661
+ "metric": "capability execution budget",
1662
+ "expectedContributionSeconds": 0,
1663
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1664
+ }
1665
+ },
1666
+ {
1667
+ "laneId": ".github/workflows/public-release-web.yml#staging-apply",
1668
+ "authorityClass": "release",
1669
+ "triggerClass": "reusable",
1670
+ "concurrencyPolicy": {
1671
+ "mode": "none",
1672
+ "cancelInProgress": false
1673
+ },
1674
+ "expectedRunnerMinutes": 360,
1675
+ "cancellationBehavior": "provider-default",
1676
+ "sloImpact": {
1677
+ "mergeCritical": false,
1678
+ "metric": "capability execution budget",
1679
+ "expectedContributionSeconds": 0,
1680
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1681
+ }
1682
+ },
1683
+ {
1684
+ "laneId": ".github/workflows/self-build-adopter-dogfood.yml#dogfood",
1685
+ "authorityClass": "governed-delegation",
1686
+ "triggerClass": "manual",
1687
+ "concurrencyPolicy": {
1688
+ "mode": "none",
1689
+ "cancelInProgress": false
1690
+ },
1691
+ "expectedRunnerMinutes": 360,
1692
+ "cancellationBehavior": "provider-default",
1693
+ "sloImpact": {
1694
+ "mergeCritical": false,
1695
+ "metric": "capability execution budget",
1696
+ "expectedContributionSeconds": 0,
1697
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1698
+ }
1699
+ },
1700
+ {
1701
+ "laneId": ".github/workflows/self-build-alpha-dogfood.yml#alpha-consumer",
1702
+ "authorityClass": "governed-delegation",
1703
+ "triggerClass": "mixed",
1704
+ "concurrencyPolicy": {
1705
+ "mode": "ref-scoped",
1706
+ "cancelInProgress": false
1707
+ },
1708
+ "expectedRunnerMinutes": 360,
1709
+ "cancellationBehavior": "finish-started",
1710
+ "sloImpact": {
1711
+ "mergeCritical": false,
1712
+ "metric": "capability execution budget",
1713
+ "expectedContributionSeconds": 0,
1714
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1715
+ }
1716
+ },
1717
+ {
1718
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#binary",
1719
+ "authorityClass": "evidence",
1720
+ "triggerClass": "mixed",
1721
+ "concurrencyPolicy": {
1722
+ "mode": "none",
1723
+ "cancelInProgress": false
1724
+ },
1725
+ "expectedRunnerMinutes": 360,
1726
+ "cancellationBehavior": "provider-default",
1727
+ "sloImpact": {
1728
+ "mergeCritical": false,
1729
+ "metric": "capability execution budget",
1730
+ "expectedContributionSeconds": 0,
1731
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1732
+ }
1733
+ },
1734
+ {
1735
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#dispatch-publication",
1736
+ "authorityClass": "evidence",
1737
+ "triggerClass": "mixed",
1738
+ "concurrencyPolicy": {
1739
+ "mode": "none",
1740
+ "cancelInProgress": false
1741
+ },
1742
+ "expectedRunnerMinutes": 360,
1743
+ "cancellationBehavior": "provider-default",
1744
+ "sloImpact": {
1745
+ "mergeCritical": false,
1746
+ "metric": "capability execution budget",
1747
+ "expectedContributionSeconds": 0,
1748
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1749
+ }
1750
+ },
1751
+ {
1752
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#passport",
1753
+ "authorityClass": "evidence",
1754
+ "triggerClass": "mixed",
1755
+ "concurrencyPolicy": {
1756
+ "mode": "none",
1757
+ "cancelInProgress": false
1758
+ },
1759
+ "expectedRunnerMinutes": 45,
1760
+ "cancellationBehavior": "provider-default",
1761
+ "sloImpact": {
1762
+ "mergeCritical": false,
1763
+ "metric": "capability execution budget",
1764
+ "expectedContributionSeconds": 0,
1765
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1766
+ }
1767
+ },
1768
+ {
1769
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#preflight",
1770
+ "authorityClass": "evidence",
1771
+ "triggerClass": "mixed",
1772
+ "concurrencyPolicy": {
1773
+ "mode": "none",
1774
+ "cancelInProgress": false
1775
+ },
1776
+ "expectedRunnerMinutes": 360,
1777
+ "cancellationBehavior": "provider-default",
1778
+ "sloImpact": {
1779
+ "mergeCritical": false,
1780
+ "metric": "capability execution budget",
1781
+ "expectedContributionSeconds": 0,
1782
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1783
+ }
1784
+ },
1785
+ {
1786
+ "laneId": ".github/workflows/self-build-channel-verify.yml#verify",
1787
+ "authorityClass": "merge-critical-admission",
1788
+ "triggerClass": "pull-request",
1789
+ "concurrencyPolicy": {
1790
+ "mode": "none",
1791
+ "cancelInProgress": false
1792
+ },
1793
+ "expectedRunnerMinutes": 360,
1794
+ "cancellationBehavior": "provider-default",
1795
+ "sloImpact": {
1796
+ "mergeCritical": true,
1797
+ "metric": "protected delivery dependency budget",
1798
+ "expectedContributionSeconds": 21600,
1799
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1800
+ }
1801
+ },
1802
+ {
1803
+ "laneId": ".github/workflows/self-build-demo-dogfood.yml#dogfood",
1804
+ "authorityClass": "governed-delegation",
1805
+ "triggerClass": "mixed",
1806
+ "concurrencyPolicy": {
1807
+ "mode": "ref-scoped",
1808
+ "cancelInProgress": false
1809
+ },
1810
+ "expectedRunnerMinutes": 360,
1811
+ "cancellationBehavior": "finish-started",
1812
+ "sloImpact": {
1813
+ "mergeCritical": false,
1814
+ "metric": "capability execution budget",
1815
+ "expectedContributionSeconds": 0,
1816
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1817
+ }
1818
+ },
1819
+ {
1820
+ "laneId": ".github/workflows/self-build-demo-dogfood.yml#exact-binary",
1821
+ "authorityClass": "evidence",
1822
+ "triggerClass": "mixed",
1823
+ "concurrencyPolicy": {
1824
+ "mode": "ref-scoped",
1825
+ "cancelInProgress": false
1826
+ },
1827
+ "expectedRunnerMinutes": 20,
1828
+ "cancellationBehavior": "finish-started",
1829
+ "sloImpact": {
1830
+ "mergeCritical": false,
1831
+ "metric": "capability execution budget",
1832
+ "expectedContributionSeconds": 0,
1833
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1834
+ }
1835
+ },
1836
+ {
1837
+ "laneId": ".github/workflows/self-build-demo-media-qualification.yml#qualify",
1838
+ "authorityClass": "merge-critical-admission",
1839
+ "triggerClass": "mixed",
1840
+ "concurrencyPolicy": {
1841
+ "mode": "none",
1842
+ "cancelInProgress": false
1843
+ },
1844
+ "expectedRunnerMinutes": 20,
1845
+ "cancellationBehavior": "provider-default",
1846
+ "sloImpact": {
1847
+ "mergeCritical": true,
1848
+ "metric": "protected delivery dependency budget",
1849
+ "expectedContributionSeconds": 1200,
1850
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1851
+ }
1852
+ },
1853
+ {
1854
+ "laneId": ".github/workflows/self-build-fixture.yml#buildchain-package-candidate",
1855
+ "authorityClass": "merge-critical-admission",
1856
+ "triggerClass": "mixed",
1857
+ "concurrencyPolicy": {
1858
+ "mode": "none",
1859
+ "cancelInProgress": false
1860
+ },
1861
+ "expectedRunnerMinutes": 360,
1862
+ "cancellationBehavior": "provider-default",
1863
+ "sloImpact": {
1864
+ "mergeCritical": true,
1865
+ "metric": "protected delivery dependency budget",
1866
+ "expectedContributionSeconds": 21600,
1867
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1868
+ }
1869
+ },
1870
+ {
1871
+ "laneId": ".github/workflows/self-build-fixture.yml#libnode-shaped",
1872
+ "authorityClass": "governed-delegation",
1873
+ "triggerClass": "mixed",
1874
+ "concurrencyPolicy": {
1875
+ "mode": "none",
1876
+ "cancelInProgress": false
1877
+ },
1878
+ "expectedRunnerMinutes": 360,
1879
+ "cancellationBehavior": "provider-default",
1880
+ "sloImpact": {
1881
+ "mergeCritical": true,
1882
+ "metric": "protected delivery dependency budget",
1883
+ "expectedContributionSeconds": 21600,
1884
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1885
+ }
1886
+ },
1887
+ {
1888
+ "laneId": ".github/workflows/self-build-public-consumer-dogfood.yml#dogfood",
1889
+ "authorityClass": "governed-delegation",
1890
+ "triggerClass": "mixed",
1891
+ "concurrencyPolicy": {
1892
+ "mode": "none",
1893
+ "cancelInProgress": false
1894
+ },
1895
+ "expectedRunnerMinutes": 360,
1896
+ "cancellationBehavior": "provider-default",
1897
+ "sloImpact": {
1898
+ "mergeCritical": true,
1899
+ "metric": "protected delivery dependency budget",
1900
+ "expectedContributionSeconds": 21600,
1901
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1902
+ }
1903
+ },
1904
+ {
1905
+ "laneId": ".github/workflows/self-build-stable-candidate-qualification.yml#qualify",
1906
+ "authorityClass": "evidence",
1907
+ "triggerClass": "mixed",
1908
+ "concurrencyPolicy": {
1909
+ "mode": "ref-scoped",
1910
+ "cancelInProgress": false
1911
+ },
1912
+ "expectedRunnerMinutes": 360,
1913
+ "cancellationBehavior": "finish-started",
1914
+ "sloImpact": {
1915
+ "mergeCritical": false,
1916
+ "metric": "capability execution budget",
1917
+ "expectedContributionSeconds": 0,
1918
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1919
+ }
1920
+ },
1921
+ {
1922
+ "laneId": ".github/workflows/self-build-stable-dogfood.yml#stable-consumer",
1923
+ "authorityClass": "governed-delegation",
1924
+ "triggerClass": "mixed",
1925
+ "concurrencyPolicy": {
1926
+ "mode": "ref-scoped",
1927
+ "cancelInProgress": false
1928
+ },
1929
+ "expectedRunnerMinutes": 20,
1930
+ "cancellationBehavior": "finish-started",
1931
+ "sloImpact": {
1932
+ "mergeCritical": false,
1933
+ "metric": "Published stable TOML build qualification latency",
1934
+ "expectedContributionSeconds": 0,
1935
+ "rationale": "Independent thin public stable fixture caller permits producer-first channel upgrades without duplicating build orchestration."
1936
+ }
1937
+ },
1938
+ {
1939
+ "laneId": ".github/workflows/self-build-verify.yml#build-backbone",
1940
+ "authorityClass": "merge-critical-admission",
1941
+ "triggerClass": "mixed",
1942
+ "concurrencyPolicy": {
1943
+ "mode": "none",
1944
+ "cancelInProgress": false
1945
+ },
1946
+ "expectedRunnerMinutes": 20,
1947
+ "cancellationBehavior": "provider-default",
1948
+ "sloImpact": {
1949
+ "mergeCritical": true,
1950
+ "metric": "protected delivery dependency budget",
1951
+ "expectedContributionSeconds": 1200,
1952
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1953
+ }
1954
+ },
1955
+ {
1956
+ "laneId": ".github/workflows/self-build-verify.yml#check",
1957
+ "authorityClass": "merge-critical-admission",
1958
+ "triggerClass": "mixed",
1959
+ "concurrencyPolicy": {
1960
+ "mode": "none",
1961
+ "cancelInProgress": false
1962
+ },
1963
+ "expectedRunnerMinutes": 360,
1964
+ "cancellationBehavior": "provider-default",
1965
+ "sloImpact": {
1966
+ "mergeCritical": true,
1967
+ "metric": "protected delivery dependency budget",
1968
+ "expectedContributionSeconds": 21600,
1969
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1970
+ }
1971
+ },
1972
+ {
1973
+ "laneId": ".github/workflows/self-build-verify.yml#stage-capsule-checkpoints",
1974
+ "authorityClass": "merge-critical-admission",
1975
+ "triggerClass": "mixed",
1976
+ "concurrencyPolicy": {
1977
+ "mode": "none",
1978
+ "cancelInProgress": false
1979
+ },
1980
+ "expectedRunnerMinutes": 360,
1981
+ "cancellationBehavior": "provider-default",
1982
+ "sloImpact": {
1983
+ "mergeCritical": true,
1984
+ "metric": "protected delivery dependency budget",
1985
+ "expectedContributionSeconds": 21600,
1986
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1987
+ }
1988
+ },
1989
+ {
1990
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#prepare",
1991
+ "authorityClass": "merge-critical-admission",
1992
+ "triggerClass": "mixed",
1993
+ "concurrencyPolicy": {
1994
+ "mode": "none",
1995
+ "cancelInProgress": false
1996
+ },
1997
+ "expectedRunnerMinutes": 360,
1998
+ "cancellationBehavior": "provider-default",
1999
+ "sloImpact": {
2000
+ "mergeCritical": true,
2001
+ "metric": "protected delivery dependency budget",
2002
+ "expectedContributionSeconds": 21600,
2003
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2004
+ }
2005
+ },
2006
+ {
2007
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-alpha",
2008
+ "authorityClass": "governed-delegation",
2009
+ "triggerClass": "mixed",
2010
+ "concurrencyPolicy": {
2011
+ "mode": "none",
2012
+ "cancelInProgress": false
2013
+ },
2014
+ "expectedRunnerMinutes": 360,
2015
+ "cancellationBehavior": "provider-default",
2016
+ "sloImpact": {
2017
+ "mergeCritical": true,
2018
+ "metric": "protected delivery dependency budget",
2019
+ "expectedContributionSeconds": 21600,
2020
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2021
+ }
2022
+ },
2023
+ {
2024
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-conformance",
2025
+ "authorityClass": "governed-delegation",
2026
+ "triggerClass": "mixed",
2027
+ "concurrencyPolicy": {
2028
+ "mode": "none",
2029
+ "cancelInProgress": false
2030
+ },
2031
+ "expectedRunnerMinutes": 360,
2032
+ "cancellationBehavior": "provider-default",
2033
+ "sloImpact": {
2034
+ "mergeCritical": true,
2035
+ "metric": "protected delivery dependency budget",
2036
+ "expectedContributionSeconds": 21600,
2037
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2038
+ }
2039
+ },
2040
+ {
2041
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-stable",
2042
+ "authorityClass": "governed-delegation",
2043
+ "triggerClass": "mixed",
2044
+ "concurrencyPolicy": {
2045
+ "mode": "none",
2046
+ "cancelInProgress": false
2047
+ },
2048
+ "expectedRunnerMinutes": 360,
2049
+ "cancellationBehavior": "provider-default",
2050
+ "sloImpact": {
2051
+ "mergeCritical": true,
2052
+ "metric": "protected delivery dependency budget",
2053
+ "expectedContributionSeconds": 21600,
2054
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2055
+ }
2056
+ },
2057
+ {
2058
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#reconcile",
2059
+ "authorityClass": "merge-critical-admission",
2060
+ "triggerClass": "mixed",
2061
+ "concurrencyPolicy": {
2062
+ "mode": "none",
2063
+ "cancelInProgress": false
2064
+ },
2065
+ "expectedRunnerMinutes": 360,
2066
+ "cancellationBehavior": "provider-default",
2067
+ "sloImpact": {
2068
+ "mergeCritical": true,
2069
+ "metric": "protected delivery dependency budget",
2070
+ "expectedContributionSeconds": 21600,
2071
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2072
+ }
2073
+ },
2074
+ {
2075
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-alpha",
2076
+ "authorityClass": "governed-delegation",
2077
+ "triggerClass": "mixed",
2078
+ "concurrencyPolicy": {
2079
+ "mode": "none",
2080
+ "cancelInProgress": false
2081
+ },
2082
+ "expectedRunnerMinutes": 360,
2083
+ "cancellationBehavior": "provider-default",
2084
+ "sloImpact": {
2085
+ "mergeCritical": true,
2086
+ "metric": "protected delivery dependency budget",
2087
+ "expectedContributionSeconds": 21600,
2088
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2089
+ }
2090
+ },
2091
+ {
2092
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-conformance",
2093
+ "authorityClass": "governed-delegation",
2094
+ "triggerClass": "mixed",
2095
+ "concurrencyPolicy": {
2096
+ "mode": "none",
2097
+ "cancelInProgress": false
2098
+ },
2099
+ "expectedRunnerMinutes": 360,
2100
+ "cancellationBehavior": "provider-default",
2101
+ "sloImpact": {
2102
+ "mergeCritical": true,
2103
+ "metric": "protected delivery dependency budget",
2104
+ "expectedContributionSeconds": 21600,
2105
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2106
+ }
2107
+ },
2108
+ {
2109
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-stable",
2110
+ "authorityClass": "governed-delegation",
2111
+ "triggerClass": "mixed",
2112
+ "concurrencyPolicy": {
2113
+ "mode": "none",
2114
+ "cancelInProgress": false
2115
+ },
2116
+ "expectedRunnerMinutes": 360,
2117
+ "cancellationBehavior": "provider-default",
2118
+ "sloImpact": {
2119
+ "mergeCritical": true,
2120
+ "metric": "protected delivery dependency budget",
2121
+ "expectedContributionSeconds": 21600,
2122
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2123
+ }
2124
+ },
2125
+ {
2126
+ "laneId": ".github/workflows/self-ops-dev-delivery.yml#deliver",
2127
+ "authorityClass": "governed-delegation",
2128
+ "triggerClass": "mixed",
2129
+ "concurrencyPolicy": {
2130
+ "mode": "none",
2131
+ "cancelInProgress": false
2132
+ },
2133
+ "expectedRunnerMinutes": 360,
2134
+ "cancellationBehavior": "provider-default",
2135
+ "sloImpact": {
2136
+ "mergeCritical": false,
2137
+ "metric": "capability execution budget",
2138
+ "expectedContributionSeconds": 0,
2139
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2140
+ }
2141
+ },
2142
+ {
2143
+ "laneId": ".github/workflows/self-ops-governance-audit.yml#audit",
2144
+ "authorityClass": "merge-critical-admission",
2145
+ "triggerClass": "mixed",
2146
+ "concurrencyPolicy": {
2147
+ "mode": "ref-scoped",
2148
+ "cancelInProgress": false
2149
+ },
2150
+ "expectedRunnerMinutes": 20,
2151
+ "cancellationBehavior": "finish-started",
2152
+ "sloImpact": {
2153
+ "mergeCritical": true,
2154
+ "metric": "protected delivery dependency budget",
2155
+ "expectedContributionSeconds": 1200,
2156
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2157
+ }
2158
+ },
2159
+ {
2160
+ "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#apply",
2161
+ "authorityClass": "governed-delegation",
2162
+ "triggerClass": "mixed",
2163
+ "concurrencyPolicy": {
2164
+ "mode": "none",
2165
+ "cancelInProgress": false
2166
+ },
2167
+ "expectedRunnerMinutes": 360,
2168
+ "cancellationBehavior": "provider-default",
2169
+ "sloImpact": {
2170
+ "mergeCritical": false,
2171
+ "metric": "capability execution budget",
2172
+ "expectedContributionSeconds": 0,
2173
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2174
+ }
2175
+ },
2176
+ {
2177
+ "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#invalid-apply-gate",
2178
+ "authorityClass": "post-merge-advisory",
2179
+ "triggerClass": "mixed",
2180
+ "concurrencyPolicy": {
2181
+ "mode": "none",
2182
+ "cancelInProgress": false
2183
+ },
2184
+ "expectedRunnerMinutes": 360,
2185
+ "cancellationBehavior": "provider-default",
2186
+ "sloImpact": {
2187
+ "mergeCritical": false,
2188
+ "metric": "capability execution budget",
2189
+ "expectedContributionSeconds": 0,
2190
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2191
+ }
2192
+ },
2193
+ {
2194
+ "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#report",
2195
+ "authorityClass": "governed-delegation",
2196
+ "triggerClass": "mixed",
2197
+ "concurrencyPolicy": {
2198
+ "mode": "none",
2199
+ "cancelInProgress": false
2200
+ },
2201
+ "expectedRunnerMinutes": 360,
2202
+ "cancellationBehavior": "provider-default",
2203
+ "sloImpact": {
2204
+ "mergeCritical": false,
2205
+ "metric": "capability execution budget",
2206
+ "expectedContributionSeconds": 0,
2207
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2208
+ }
2209
+ },
2210
+ {
2211
+ "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#apply",
2212
+ "authorityClass": "governed-delegation",
2213
+ "triggerClass": "mixed",
2214
+ "concurrencyPolicy": {
2215
+ "mode": "none",
2216
+ "cancelInProgress": false
2217
+ },
2218
+ "expectedRunnerMinutes": 360,
2219
+ "cancellationBehavior": "provider-default",
2220
+ "sloImpact": {
2221
+ "mergeCritical": false,
2222
+ "metric": "capability execution budget",
2223
+ "expectedContributionSeconds": 0,
2224
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2225
+ }
2226
+ },
2227
+ {
2228
+ "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#invalid-apply-gate",
2229
+ "authorityClass": "post-merge-advisory",
2230
+ "triggerClass": "mixed",
2231
+ "concurrencyPolicy": {
2232
+ "mode": "none",
2233
+ "cancelInProgress": false
2234
+ },
2235
+ "expectedRunnerMinutes": 360,
2236
+ "cancellationBehavior": "provider-default",
2237
+ "sloImpact": {
2238
+ "mergeCritical": false,
2239
+ "metric": "capability execution budget",
2240
+ "expectedContributionSeconds": 0,
2241
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2242
+ }
2243
+ },
2244
+ {
2245
+ "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#report",
2246
+ "authorityClass": "governed-delegation",
2247
+ "triggerClass": "mixed",
2248
+ "concurrencyPolicy": {
2249
+ "mode": "none",
2250
+ "cancelInProgress": false
2251
+ },
2252
+ "expectedRunnerMinutes": 360,
2253
+ "cancellationBehavior": "provider-default",
2254
+ "sloImpact": {
2255
+ "mergeCritical": false,
2256
+ "metric": "capability execution budget",
2257
+ "expectedContributionSeconds": 0,
2258
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2259
+ }
2260
+ },
2261
+ {
2262
+ "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#apply",
2263
+ "authorityClass": "governed-delegation",
2264
+ "triggerClass": "mixed",
2265
+ "concurrencyPolicy": {
2266
+ "mode": "none",
2267
+ "cancelInProgress": false
2268
+ },
2269
+ "expectedRunnerMinutes": 360,
2270
+ "cancellationBehavior": "provider-default",
2271
+ "sloImpact": {
2272
+ "mergeCritical": false,
2273
+ "metric": "capability execution budget",
2274
+ "expectedContributionSeconds": 0,
2275
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2276
+ }
2277
+ },
2278
+ {
2279
+ "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#invalid-apply-gate",
2280
+ "authorityClass": "post-merge-advisory",
2281
+ "triggerClass": "mixed",
2282
+ "concurrencyPolicy": {
2283
+ "mode": "none",
2284
+ "cancelInProgress": false
2285
+ },
2286
+ "expectedRunnerMinutes": 360,
2287
+ "cancellationBehavior": "provider-default",
2288
+ "sloImpact": {
2289
+ "mergeCritical": false,
2290
+ "metric": "capability execution budget",
2291
+ "expectedContributionSeconds": 0,
2292
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2293
+ }
2294
+ },
2295
+ {
2296
+ "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#report",
2297
+ "authorityClass": "governed-delegation",
2298
+ "triggerClass": "mixed",
2299
+ "concurrencyPolicy": {
2300
+ "mode": "none",
2301
+ "cancelInProgress": false
2302
+ },
2303
+ "expectedRunnerMinutes": 360,
2304
+ "cancellationBehavior": "provider-default",
2305
+ "sloImpact": {
2306
+ "mergeCritical": false,
2307
+ "metric": "capability execution budget",
2308
+ "expectedContributionSeconds": 0,
2309
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2310
+ }
2311
+ },
2312
+ {
2313
+ "laneId": ".github/workflows/self-ops-merge-queue.yml#reconcile",
2314
+ "authorityClass": "evidence",
2315
+ "triggerClass": "mixed",
2316
+ "concurrencyPolicy": {
2317
+ "mode": "none",
2318
+ "cancelInProgress": false
2319
+ },
2320
+ "expectedRunnerMinutes": 360,
2321
+ "cancellationBehavior": "provider-default",
2322
+ "sloImpact": {
2323
+ "mergeCritical": false,
2324
+ "metric": "capability execution budget",
2325
+ "expectedContributionSeconds": 0,
2326
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2327
+ }
2328
+ },
2329
+ {
2330
+ "laneId": ".github/workflows/self-ops-patrol-daily.yml#patrol",
2331
+ "authorityClass": "governed-delegation",
2332
+ "triggerClass": "mixed",
2333
+ "concurrencyPolicy": {
2334
+ "mode": "none",
2335
+ "cancelInProgress": false
2336
+ },
2337
+ "expectedRunnerMinutes": 360,
2338
+ "cancellationBehavior": "provider-default",
2339
+ "sloImpact": {
2340
+ "mergeCritical": false,
2341
+ "metric": "capability execution budget",
2342
+ "expectedContributionSeconds": 0,
2343
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2344
+ }
2345
+ },
2346
+ {
2347
+ "laneId": ".github/workflows/self-ops-patrol-monthly.yml#patrol",
2348
+ "authorityClass": "governed-delegation",
2349
+ "triggerClass": "mixed",
2350
+ "concurrencyPolicy": {
2351
+ "mode": "none",
2352
+ "cancelInProgress": false
2353
+ },
2354
+ "expectedRunnerMinutes": 360,
2355
+ "cancellationBehavior": "provider-default",
2356
+ "sloImpact": {
2357
+ "mergeCritical": false,
2358
+ "metric": "capability execution budget",
2359
+ "expectedContributionSeconds": 0,
2360
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2361
+ }
2362
+ },
2363
+ {
2364
+ "laneId": ".github/workflows/self-ops-patrol-weekly.yml#patrol",
2365
+ "authorityClass": "governed-delegation",
2366
+ "triggerClass": "mixed",
2367
+ "concurrencyPolicy": {
2368
+ "mode": "none",
2369
+ "cancelInProgress": false
2370
+ },
2371
+ "expectedRunnerMinutes": 360,
2372
+ "cancellationBehavior": "provider-default",
2373
+ "sloImpact": {
2374
+ "mergeCritical": false,
2375
+ "metric": "capability execution budget",
2376
+ "expectedContributionSeconds": 0,
2377
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2378
+ }
2379
+ },
2380
+ {
2381
+ "laneId": ".github/workflows/self-ops-promotion-recovery.yml#resume",
2382
+ "authorityClass": "governed-delegation",
2383
+ "triggerClass": "manual",
2384
+ "concurrencyPolicy": {
2385
+ "mode": "none",
2386
+ "cancelInProgress": false
2387
+ },
2388
+ "expectedRunnerMinutes": 360,
2389
+ "cancellationBehavior": "provider-default",
2390
+ "sloImpact": {
2391
+ "mergeCritical": false,
2392
+ "metric": "capability execution budget",
2393
+ "expectedContributionSeconds": 0,
2394
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2395
+ }
2396
+ },
2397
+ {
2398
+ "laneId": ".github/workflows/self-ops-runner-smoke.yml#smoke",
2399
+ "authorityClass": "evidence",
2400
+ "triggerClass": "manual",
2401
+ "concurrencyPolicy": {
2402
+ "mode": "none",
2403
+ "cancelInProgress": false
2404
+ },
2405
+ "expectedRunnerMinutes": 360,
2406
+ "cancellationBehavior": "provider-default",
2407
+ "sloImpact": {
2408
+ "mergeCritical": false,
2409
+ "metric": "capability execution budget",
2410
+ "expectedContributionSeconds": 0,
2411
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2412
+ }
2413
+ },
2414
+ {
2415
+ "laneId": ".github/workflows/self-ops-stable-candidate-patrol.yml#patrol",
2416
+ "authorityClass": "governed-delegation",
2417
+ "triggerClass": "mixed",
2418
+ "concurrencyPolicy": {
2419
+ "mode": "none",
2420
+ "cancelInProgress": false
2421
+ },
2422
+ "expectedRunnerMinutes": 360,
2423
+ "cancellationBehavior": "provider-default",
2424
+ "sloImpact": {
2425
+ "mergeCritical": false,
2426
+ "metric": "capability execution budget",
2427
+ "expectedContributionSeconds": 0,
2428
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2429
+ }
2430
+ },
2431
+ {
2432
+ "laneId": ".github/workflows/self-release-binary-assets.yml#publish",
2433
+ "authorityClass": "governed-delegation",
2434
+ "triggerClass": "manual",
2435
+ "concurrencyPolicy": {
2436
+ "mode": "none",
2437
+ "cancelInProgress": false
2438
+ },
2439
+ "expectedRunnerMinutes": 360,
2440
+ "cancellationBehavior": "provider-default",
2441
+ "sloImpact": {
2442
+ "mergeCritical": false,
2443
+ "metric": "capability execution budget",
2444
+ "expectedContributionSeconds": 0,
2445
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2446
+ }
2447
+ },
2448
+ {
2449
+ "laneId": ".github/workflows/self-release-binary-assets.yml#resolve",
2450
+ "authorityClass": "release",
2451
+ "triggerClass": "manual",
2452
+ "concurrencyPolicy": {
2453
+ "mode": "none",
2454
+ "cancelInProgress": false
2455
+ },
2456
+ "expectedRunnerMinutes": 360,
2457
+ "cancellationBehavior": "provider-default",
2458
+ "sloImpact": {
2459
+ "mergeCritical": false,
2460
+ "metric": "capability execution budget",
2461
+ "expectedContributionSeconds": 0,
2462
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2463
+ }
2464
+ },
2465
+ {
2466
+ "laneId": ".github/workflows/self-release-line-open.yml#bootstrap",
2467
+ "authorityClass": "release",
2468
+ "triggerClass": "manual",
2469
+ "concurrencyPolicy": {
2470
+ "mode": "none",
2471
+ "cancelInProgress": false
2472
+ },
2473
+ "expectedRunnerMinutes": 360,
2474
+ "cancellationBehavior": "provider-default",
2475
+ "sloImpact": {
2476
+ "mergeCritical": false,
2477
+ "metric": "capability execution budget",
2478
+ "expectedContributionSeconds": 0,
2479
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2480
+ }
2481
+ },
2482
+ {
2483
+ "laneId": ".github/workflows/self-release-next-development.yml#review",
2484
+ "authorityClass": "merge-critical-admission",
2485
+ "triggerClass": "mixed",
2486
+ "concurrencyPolicy": {
2487
+ "mode": "ref-scoped",
2488
+ "cancelInProgress": false
2489
+ },
2490
+ "expectedRunnerMinutes": 3,
2491
+ "cancellationBehavior": "finish-started",
2492
+ "sloImpact": {
2493
+ "mergeCritical": true,
2494
+ "metric": "generated next-development independent review latency",
2495
+ "expectedContributionSeconds": 180,
2496
+ "rationale": "Only successful same-repository version PRs regenerate from the protected base and read completed publication evidence; ordinary source PRs skip the lane. Native queue checks remain final merge authority."
2497
+ }
2498
+ },
2499
+ {
2500
+ "laneId": ".github/workflows/self-release-npm-dry-run.yml#dry-run",
2501
+ "authorityClass": "release",
2502
+ "triggerClass": "manual",
2503
+ "concurrencyPolicy": {
2504
+ "mode": "none",
2505
+ "cancelInProgress": false
2506
+ },
2507
+ "expectedRunnerMinutes": 360,
2508
+ "cancellationBehavior": "provider-default",
2509
+ "sloImpact": {
2510
+ "mergeCritical": false,
2511
+ "metric": "capability execution budget",
2512
+ "expectedContributionSeconds": 0,
2513
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2514
+ }
2515
+ },
2516
+ {
2517
+ "laneId": ".github/workflows/self-release-promote.yml#classify-workflow-run",
2518
+ "authorityClass": "release",
2519
+ "triggerClass": "mixed",
2520
+ "concurrencyPolicy": {
2521
+ "mode": "none",
2522
+ "cancelInProgress": false
2523
+ },
2524
+ "expectedRunnerMinutes": 360,
2525
+ "cancellationBehavior": "provider-default",
2526
+ "sloImpact": {
2527
+ "mergeCritical": false,
2528
+ "metric": "capability execution budget",
2529
+ "expectedContributionSeconds": 0,
2530
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2531
+ }
2532
+ },
2533
+ {
2534
+ "laneId": ".github/workflows/self-release-promote.yml#promote",
2535
+ "authorityClass": "governed-delegation",
2536
+ "triggerClass": "mixed",
2537
+ "concurrencyPolicy": {
2538
+ "mode": "none",
2539
+ "cancelInProgress": false
2540
+ },
2541
+ "expectedRunnerMinutes": 360,
2542
+ "cancellationBehavior": "provider-default",
2543
+ "sloImpact": {
2544
+ "mergeCritical": false,
2545
+ "metric": "capability execution budget",
2546
+ "expectedContributionSeconds": 0,
2547
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2548
+ }
2549
+ },
2550
+ {
2551
+ "laneId": ".github/workflows/self-release-promote.yml#reject-invalid-candidate-recovery",
2552
+ "authorityClass": "release",
2553
+ "triggerClass": "mixed",
2554
+ "concurrencyPolicy": {
2555
+ "mode": "none",
2556
+ "cancelInProgress": false
2557
+ },
2558
+ "expectedRunnerMinutes": 360,
2559
+ "cancellationBehavior": "provider-default",
2560
+ "sloImpact": {
2561
+ "mergeCritical": false,
2562
+ "metric": "capability execution budget",
2563
+ "expectedContributionSeconds": 0,
2564
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2565
+ }
2566
+ },
2567
+ {
2568
+ "laneId": ".github/workflows/self-release-promote.yml#reject-invalid-durable-recovery",
2569
+ "authorityClass": "release",
2570
+ "triggerClass": "mixed",
2571
+ "concurrencyPolicy": {
2572
+ "mode": "none",
2573
+ "cancelInProgress": false
2574
+ },
2575
+ "expectedRunnerMinutes": 360,
2576
+ "cancellationBehavior": "provider-default",
2577
+ "sloImpact": {
2578
+ "mergeCritical": false,
2579
+ "metric": "capability execution budget",
2580
+ "expectedContributionSeconds": 0,
2581
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2582
+ }
2583
+ },
2584
+ {
2585
+ "laneId": ".github/workflows/self-release-promote.yml#reject-manual-apply",
2586
+ "authorityClass": "release",
2587
+ "triggerClass": "mixed",
2588
+ "concurrencyPolicy": {
2589
+ "mode": "none",
2590
+ "cancelInProgress": false
2591
+ },
2592
+ "expectedRunnerMinutes": 360,
2593
+ "cancellationBehavior": "provider-default",
2594
+ "sloImpact": {
2595
+ "mergeCritical": false,
2596
+ "metric": "capability execution budget",
2597
+ "expectedContributionSeconds": 0,
2598
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2599
+ }
2600
+ },
2601
+ {
2602
+ "laneId": ".github/workflows/self-release-rehearsal-dogfood.yml#rehearsal",
2603
+ "authorityClass": "governed-delegation",
2604
+ "triggerClass": "mixed",
2605
+ "concurrencyPolicy": {
2606
+ "mode": "none",
2607
+ "cancelInProgress": false
2608
+ },
2609
+ "expectedRunnerMinutes": 360,
2610
+ "cancellationBehavior": "provider-default",
2611
+ "sloImpact": {
2612
+ "mergeCritical": true,
2613
+ "metric": "protected delivery dependency budget",
2614
+ "expectedContributionSeconds": 21600,
2615
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2616
+ }
2617
+ },
2618
+ {
2619
+ "laneId": ".github/workflows/self-release-tail-dogfood.yml#publish",
2620
+ "authorityClass": "governed-delegation",
2621
+ "triggerClass": "manual",
2622
+ "concurrencyPolicy": {
2623
+ "mode": "none",
2624
+ "cancelInProgress": false
2625
+ },
2626
+ "expectedRunnerMinutes": 360,
2627
+ "cancellationBehavior": "provider-default",
2628
+ "sloImpact": {
2629
+ "mergeCritical": false,
2630
+ "metric": "capability execution budget",
2631
+ "expectedContributionSeconds": 0,
2632
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2633
+ }
2634
+ }
2635
+ ],
2636
+ "declarationFamilies": []
757
2637
  }