@kungfu-tech/buildchain 4.0.10-alpha.0 → 4.1.0-alpha.1

package/dist/site/publication-authority-registry.json

@@ -3,34 +3,6 @@
   "contract": "kungfu-buildchain-publication-authority-registry",
   "defaultDecision": "deny",
   "entries": [
-    {
-      "workflowPath": ".github/workflows/.auditable-demo.yml",
-      "authorityClass": "non-publication-oidc",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.auditable-demo.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/.binary-release-assets.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "github-release"
-      ],
-      "credentialMode": "github-token",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.binary-release-assets.yml",
-      "environment": "buildchain-release-assets",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
     {
       "workflowPath": ".github/workflows/.build-demo-adapter.yml",
       "authorityClass": "non-publication-oidc",
@@ -44,19 +16,6 @@
       "runnerPolicy": "unqualified",
       "notes": ""
     },
-    {
-      "workflowPath": ".github/workflows/.build-engine.yml",
-      "authorityClass": "non-publication-oidc",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.build-engine.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
     {
       "workflowPath": ".github/workflows/.build-release-verify-compat.yml",
       "authorityClass": "governance-write",
@@ -109,19 +68,6 @@
       "runnerPolicy": "unqualified",
       "notes": ""
     },
-    {
-      "workflowPath": ".github/workflows/.declarative-auditable-demo.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.declarative-auditable-demo.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
     {
       "workflowPath": ".github/workflows/.ops-git-sync.yml",
       "authorityClass": "governance-write",
@@ -135,19 +81,6 @@
       "runnerPolicy": "unqualified",
       "notes": ""
     },
-    {
-      "workflowPath": ".github/workflows/.publication-authority.yml",
-      "authorityClass": "evidence-publication",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.publication-authority.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
     {
       "workflowPath": ".github/workflows/.release-authority.yml",
       "authorityClass": "evidence-publication",
@@ -177,7 +110,7 @@
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.release-candidate-promote.yml",
+      "workflowPath": ".github/workflows/.release-promote.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
@@ -187,230 +120,226 @@
       ],
       "credentialMode": "trusted-publishing",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/.release-candidate-promote.yml",
+      "publisherWorkflowPath": ".github/workflows/.release-promote.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.release-promote.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "channel-ref",
-        "github-release",
-        "npm-publish"
-      ],
-      "credentialMode": "trusted-publishing",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/.release-promote.yml",
-      "environment": "none",
+      "workflowPath": ".github/workflows/build.yml",
+      "authorityClass": "non-publication-oidc",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/build.yml",
+      "environment": "",
       "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
+      "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.release-verify.yml",
+      "workflowPath": ".github/workflows/public-build-demo.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.release-verify.yml",
+      "publisherWorkflowPath": ".github/workflows/public-build-demo.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.sam-verify.yml",
-      "authorityClass": "retired-deny",
+      "workflowPath": ".github/workflows/public-build-publication.yml",
+      "authorityClass": "evidence-publication",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.sam-verify.yml",
+      "publisherWorkflowPath": ".github/workflows/public-build-publication.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.sync-remote-git.yml",
+      "workflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.sync-remote-git.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.web-surface.yml",
+      "workflowPath": ".github/workflows/public-ops-bootstrap.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
-        "web-production"
+        "universal-candidate-execution"
       ],
-      "credentialMode": "oidc",
+      "credentialMode": "caller-secrets",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/.web-surface.yml",
-      "environment": "consumer-defined",
-      "environmentMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-ops-bootstrap.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.wheel-verify.yml",
-      "authorityClass": "retired-deny",
+      "workflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
+      "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.wheel-verify.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/artifact-signing-authority.yml",
-      "authorityClass": "evidence-publication",
+      "workflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
+      "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/artifact-signing-authority.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/bootstrap.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "universal-candidate-execution"
-      ],
-      "credentialMode": "caller-secrets",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/bootstrap.yml",
-      "environment": "none",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/build.yml",
-      "authorityClass": "non-publication-oidc",
+      "workflowPath": ".github/workflows/public-ops-housekeeping.yml",
+      "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/build.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-housekeeping.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-patrol.yml",
+      "workflowPath": ".github/workflows/public-ops-observed-evidence.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "observed-evidence-publication"
+      ],
+      "credentialMode": "oidc",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-ops-observed-evidence.yml",
+      "environment": "consumer-defined",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-patrol-daily.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-daily.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/dev-alpha-candidate-patrol.yml",
+      "workflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-alpha-candidate-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/dev-delivery-warrant-cancel.yml",
+      "workflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-delivery-warrant-cancel.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/dev-delivery-warrant-close.yml",
+      "workflowPath": ".github/workflows/public-ops-patrol.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-delivery-warrant-close.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/dev-pr-auto-merge.yml",
+      "workflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-pr-auto-merge.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/dev-qualification-patrol.yml",
+      "workflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-qualification-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/engineering-housekeeper.yml",
+      "workflowPath": ".github/workflows/public-ops-warrant-close.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-close.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/github-artifact-attestation.yml",
+      "workflowPath": ".github/workflows/public-release-artifact-attestation.yml",
       "authorityClass": "evidence-publication",
       "publicationCapable": true,
       "capabilityIds": [
@@ -418,14 +347,29 @@
       ],
       "credentialMode": "oidc",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/github-artifact-attestation.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-artifact-attestation.yml",
       "environment": "consumer-defined",
       "environmentMode": "caller-bound",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/paper-release-sealed.yml",
+      "workflowPath": ".github/workflows/public-release-oci-compose-preview.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "oci-compose-preview"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-release-oci-compose-preview.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-release-paper.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
@@ -434,151 +378,168 @@
       ],
       "credentialMode": "trusted-publishing",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/paper-release-sealed.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-paper.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/paper-release.yml",
+      "workflowPath": ".github/workflows/public-release-promote.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
+        "channel-ref",
         "github-release",
         "npm-publish"
       ],
       "credentialMode": "trusted-publishing",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/paper-release.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-promote.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/patrol-daily.yml",
+      "workflowPath": ".github/workflows/public-release-propagation.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/patrol-daily.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-propagation.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/patrol-monthly.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/public-release-signing-authority.yml",
+      "authorityClass": "evidence-publication",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/patrol-monthly.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-signing-authority.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/patrol-observed-evidence.yml",
+      "workflowPath": ".github/workflows/public-release-tail.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
-        "observed-evidence-publication"
+        "artifact.publish",
+        "release.activate",
+        "released-evidence.synthesize",
+        "signed-channel.commit"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-release-tail.yml",
+      "environment": "caller-bound",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-release-web.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "web-production"
       ],
       "credentialMode": "oidc",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/patrol-observed-evidence.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-web.yml",
       "environment": "consumer-defined",
       "environmentMode": "caller-bound",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/patrol-weekly.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
+      "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/patrol-weekly.yml",
+      "publisherWorkflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/public-build-candidate.yml",
-      "authorityClass": "non-publication-oidc",
+      "workflowPath": ".github/workflows/self-build-binary-distribution.yml",
+      "authorityClass": "evidence-publication",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-build-candidate.yml",
+      "publisherWorkflowPath": ".github/workflows/self-build-binary-distribution.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/public-build-demo.yml",
+      "workflowPath": ".github/workflows/self-build-demo-dogfood.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-build-demo.yml",
+      "publisherWorkflowPath": ".github/workflows/self-build-demo-dogfood.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/public-build-publication.yml",
-      "authorityClass": "evidence-publication",
+      "workflowPath": ".github/workflows/self-build-fixture.yml",
+      "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-build-publication.yml",
+      "publisherWorkflowPath": ".github/workflows/self-build-fixture.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
+      "workflowPath": ".github/workflows/self-build-release-verify-compat.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/self-build-release-verify-compat.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/public-ops-bootstrap-recovery.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "universal-candidate-execution"
-      ],
-      "credentialMode": "caller-secrets",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/public-ops-bootstrap-recovery.yml",
-      "environment": "none",
+      "workflowPath": ".github/workflows/self-build-stable-dogfood.yml",
+      "authorityClass": "non-publication-oidc",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-build-stable-dogfood.yml",
+      "environment": "",
       "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
+      "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/public-ops-bootstrap.yml",
+      "workflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
@@ -586,940 +547,239 @@
       ],
       "credentialMode": "caller-secrets",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/public-ops-bootstrap.yml",
+      "publisherWorkflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
+      "workflowPath": ".github/workflows/self-ops-dev-delivery.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
+      "publisherWorkflowPath": ".github/workflows/self-ops-dev-delivery.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
+      "workflowPath": ".github/workflows/self-ops-governance-audit.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-ops-housekeeping.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-ops-housekeeping.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-ops-observed-evidence.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "observed-evidence-publication"
-      ],
-      "credentialMode": "oidc",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/public-ops-observed-evidence.yml",
-      "environment": "consumer-defined",
-      "environmentMode": "caller-bound",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-ops-patrol-daily.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-daily.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-ops-patrol.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-ops-patrol.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-ops-warrant-close.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-close.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-release-artifact-attestation.yml",
-      "authorityClass": "evidence-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "github-artifact-attestation"
-      ],
-      "credentialMode": "oidc",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/public-release-artifact-attestation.yml",
-      "environment": "consumer-defined",
-      "environmentMode": "caller-bound",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-release-oci-compose-preview.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "oci-compose-preview"
-      ],
-      "credentialMode": "caller-secrets",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/public-release-oci-compose-preview.yml",
-      "environment": "none",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-release-paper-sealed.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "github-release",
-        "npm-publish"
-      ],
-      "credentialMode": "trusted-publishing",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/public-release-paper-sealed.yml",
-      "environment": "none",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-release-paper.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "github-release",
-        "npm-publish"
-      ],
-      "credentialMode": "trusted-publishing",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/public-release-paper.yml",
-      "environment": "none",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-release-promote.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "channel-ref",
-        "github-release",
-        "npm-publish"
-      ],
-      "credentialMode": "trusted-publishing",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/public-release-promote.yml",
-      "environment": "none",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-release-propagation.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-release-propagation.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-release-signing-authority.yml",
-      "authorityClass": "evidence-publication",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-release-signing-authority.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-release-tail.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "artifact.publish",
-        "release.activate",
-        "released-evidence.synthesize",
-        "signed-channel.commit"
-      ],
-      "credentialMode": "caller-secrets",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/public-release-tail.yml",
-      "environment": "caller-bound",
-      "environmentMode": "caller-bound",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/public-release-web.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "web-production"
-      ],
-      "credentialMode": "oidc",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/public-release-web.yml",
-      "environment": "consumer-defined",
-      "environmentMode": "caller-bound",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/publication-artifact.yml",
-      "authorityClass": "evidence-publication",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/publication-artifact.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/release-candidate-promote.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "channel-ref",
-        "github-release",
-        "npm-publish"
-      ],
-      "credentialMode": "trusted-publishing",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/release-candidate-promote.yml",
-      "environment": "none",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/release-propagation.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/release-propagation.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/release-tail.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "artifact.publish",
-        "release.activate",
-        "released-evidence.synthesize",
-        "signed-channel.commit"
-      ],
-      "credentialMode": "caller-secrets",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/release-tail.yml",
-      "environment": "caller-bound",
-      "environmentMode": "caller-bound",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
-      "authorityClass": "non-publication-oidc",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-build-binary-distribution.yml",
-      "authorityClass": "evidence-publication",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-build-binary-distribution.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-build-demo-dogfood.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-build-demo-dogfood.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-build-fixture.yml",
-      "authorityClass": "non-publication-oidc",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-build-fixture.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-build-release-verify-compat.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-build-release-verify-compat.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-build-stable-dogfood.yml",
-      "authorityClass": "non-publication-oidc",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-build-stable-dogfood.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "universal-candidate-execution"
-      ],
-      "credentialMode": "caller-secrets",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
-      "environment": "none",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-ops-dev-delivery.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-ops-dev-delivery.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-ops-governance-audit.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-ops-governance-audit.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-ops-merge-queue.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-ops-merge-queue.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-ops-patrol-daily.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-daily.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
+      "publisherWorkflowPath": ".github/workflows/self-ops-governance-audit.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
+      "workflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
+      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
+      "workflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/self-release-binary-assets.yml",
+      "workflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-release-binary-assets.yml",
+      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/self-release-line-open.yml",
+      "workflowPath": ".github/workflows/self-ops-merge-queue.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-release-line-open.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/self-release-npm-dry-run.yml",
-      "authorityClass": "dry-run-only",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-release-npm-dry-run.yml",
+      "publisherWorkflowPath": ".github/workflows/self-ops-merge-queue.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/self-release-promote.yml",
+      "workflowPath": ".github/workflows/self-ops-patrol-daily.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-release-promote.yml",
+      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-daily.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/self-release-tail-dogfood.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "artifact.publish",
-        "release.activate",
-        "released-evidence.synthesize",
-        "signed-channel.commit"
-      ],
-      "credentialMode": "caller-secrets",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/self-release-tail-dogfood.yml",
-      "environment": "none",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "workflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
       "environment": "",
       "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/universal-bootstrap-recovery.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "universal-candidate-execution"
-      ],
-      "credentialMode": "caller-secrets",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/universal-bootstrap-recovery.yml",
-      "environment": "none",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    }
-  ],
-  "workflowFacts": [
-    {
-      "path": ".github/workflows/.auditable-demo.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.binary-release-assets.yml",
-      "signals": [
-        "write-permission",
-        "environment",
-        "github-release"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.build-demo-adapter.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.build-engine.yml",
-      "signals": [
-        "write-permission",
-        "oidc",
-        "environment",
-        "cloud-credential"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.build-gate-profile.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/.build-release-verify-compat.yml",
-      "signals": [
-        "write-permission",
-        "cloud-credential"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.build-sam-verify-compat.yml",
-      "signals": [
-        "cloud-credential"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.build-wheel-verify-compat.yml",
-      "signals": [
-        "cloud-credential"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.build.yml",
-      "signals": [
-        "write-permission",
-        "oidc",
-        "environment",
-        "cloud-credential"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.bump-minor-version.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/.declarative-auditable-demo.yml",
-      "signals": [
-        "write-permission",
-        "git-push"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.gate-profile.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/.ops-git-sync.yml",
-      "signals": [
-        "git-push"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.publication-authority.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.release-authority.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.release-binary-assets.yml",
-      "signals": [
-        "write-permission",
-        "environment",
-        "github-release"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.release-candidate-promote.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.release-minor-bump-compat.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/.release-page-sync-retired.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/.release-promote.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.release-verify.yml",
-      "signals": [
-        "write-permission",
-        "cloud-credential"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.sam-verify.yml",
-      "signals": [
-        "cloud-credential"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.sync-release-page.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/.sync-remote-git.yml",
-      "signals": [
-        "git-push"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.web-surface.yml",
-      "signals": [
-        "write-permission",
-        "oidc",
-        "environment",
-        "cloud-credential"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.wheel-verify.yml",
-      "signals": [
-        "cloud-credential"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/artifact-signing-authority.yml",
-      "signals": [
-        "environment"
-      ],
-      "classified": true
+      "runnerPolicy": "unqualified",
+      "notes": ""
     },
     {
-      "path": ".github/workflows/bootstrap.yml",
-      "signals": [],
-      "classified": true
+      "workflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
     },
     {
-      "path": ".github/workflows/build.yml",
-      "signals": [
-        "write-permission",
-        "oidc"
-      ],
-      "classified": true
+      "workflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
     },
     {
-      "path": ".github/workflows/buildchain-patrol.yml",
-      "signals": [
-        "write-permission"
-      ],
-      "classified": true
+      "workflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
     },
     {
-      "path": ".github/workflows/check.yml",
-      "signals": [],
-      "classified": false
+      "workflowPath": ".github/workflows/self-release-binary-assets.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-binary-assets.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
     },
     {
-      "path": ".github/workflows/dev-alpha-candidate-patrol.yml",
-      "signals": [
-        "write-permission"
-      ],
-      "classified": true
+      "workflowPath": ".github/workflows/self-release-line-open.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-line-open.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
     },
     {
-      "path": ".github/workflows/dev-delivery-warrant-cancel.yml",
-      "signals": [
-        "write-permission"
-      ],
-      "classified": true
+      "workflowPath": ".github/workflows/self-release-npm-dry-run.yml",
+      "authorityClass": "dry-run-only",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-npm-dry-run.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
     },
     {
-      "path": ".github/workflows/dev-delivery-warrant-close.yml",
-      "signals": [
-        "write-permission"
-      ],
-      "classified": true
+      "workflowPath": ".github/workflows/self-release-promote.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-promote.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
     },
     {
-      "path": ".github/workflows/dev-pr-auto-merge.yml",
-      "signals": [
-        "write-permission"
+      "workflowPath": ".github/workflows/self-release-tail-dogfood.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "artifact.publish",
+        "release.activate",
+        "released-evidence.synthesize",
+        "signed-channel.commit"
       ],
-      "classified": true
-    },
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-tail-dogfood.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    }
+  ],
+  "workflowFacts": [
     {
-      "path": ".github/workflows/dev-qualification-patrol.yml",
-      "signals": [
-        "write-permission"
-      ],
+      "path": ".github/workflows/.build-demo-adapter.yml",
+      "signals": [],
       "classified": true
     },
     {
-      "path": ".github/workflows/engineering-housekeeper.yml",
+      "path": ".github/workflows/.build-gate-profile.yml",
       "signals": [],
-      "classified": true
+      "classified": false
     },
     {
-      "path": ".github/workflows/github-artifact-attestation.yml",
+      "path": ".github/workflows/.build.yml",
       "signals": [
         "write-permission",
         "oidc",
@@ -1528,48 +788,33 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/paper-release-sealed.yml",
-      "signals": [
-        "write-permission",
-        "oidc"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/paper-release.yml",
-      "signals": [
-        "write-permission",
-        "oidc"
-      ],
+      "path": ".github/workflows/.ops-git-sync.yml",
+      "signals": [],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-daily.yml",
-      "signals": [
-        "write-permission"
-      ],
+      "path": ".github/workflows/.release-authority.yml",
+      "signals": [],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-monthly.yml",
+      "path": ".github/workflows/.release-binary-assets.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "environment"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-observed-evidence.yml",
-      "signals": [
-        "oidc",
-        "environment",
-        "cloud-credential"
-      ],
+      "path": ".github/workflows/.release-promote.yml",
+      "signals": [],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-weekly.yml",
+      "path": ".github/workflows/build.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "oidc"
       ],
       "classified": true
     },
@@ -1578,14 +823,6 @@
       "signals": [],
       "classified": false
     },
-    {
-      "path": ".github/workflows/public-build-candidate.yml",
-      "signals": [
-        "write-permission",
-        "oidc"
-      ],
-      "classified": true
-    },
     {
       "path": ".github/workflows/public-build-check.yml",
       "signals": [],
@@ -1594,8 +831,7 @@
     {
       "path": ".github/workflows/public-build-demo.yml",
       "signals": [
-        "write-permission",
-        "git-push"
+        "write-permission"
       ],
       "classified": true
     },
@@ -1618,14 +854,6 @@
       ],
       "classified": true
     },
-    {
-      "path": ".github/workflows/public-ops-bootstrap-recovery.yml",
-      "signals": [
-        "write-permission",
-        "oidc"
-      ],
-      "classified": true
-    },
     {
       "path": ".github/workflows/public-ops-bootstrap.yml",
       "signals": [],
@@ -1654,8 +882,7 @@
       "path": ".github/workflows/public-ops-observed-evidence.yml",
       "signals": [
         "oidc",
-        "environment",
-        "cloud-credential"
+        "environment"
       ],
       "classified": true
     },
@@ -1734,14 +961,6 @@
       ],
       "classified": true
     },
-    {
-      "path": ".github/workflows/public-release-paper-sealed.yml",
-      "signals": [
-        "write-permission",
-        "oidc"
-      ],
-      "classified": true
-    },
     {
       "path": ".github/workflows/public-release-paper.yml",
       "signals": [
@@ -1758,8 +977,7 @@
     {
       "path": ".github/workflows/public-release-propagation.yml",
       "signals": [
-        "write-permission",
-        "git-push"
+        "write-permission"
       ],
       "classified": true
     },
@@ -1780,41 +998,10 @@
       "signals": [
         "write-permission",
         "oidc",
-        "environment",
-        "cloud-credential"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/publication-artifact.yml",
-      "signals": [
-        "write-permission"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/release-candidate-promote.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/release-governance-reconcile.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/release-propagation.yml",
-      "signals": [
-        "write-permission",
-        "git-push"
+        "environment"
       ],
       "classified": true
     },
-    {
-      "path": ".github/workflows/release-tail.yml",
-      "signals": [],
-      "classified": true
-    },
     {
       "path": ".github/workflows/self-build-adopter-dogfood.yml",
       "signals": [],
@@ -1836,7 +1023,7 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/self-build-candidate-lab.yml",
+      "path": ".github/workflows/self-build-channel-verify.yml",
       "signals": [],
       "classified": false
     },
@@ -1854,7 +1041,10 @@
     },
     {
       "path": ".github/workflows/self-build-fixture.yml",
-      "signals": [],
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
       "classified": true
     },
     {
@@ -1862,13 +1052,6 @@
       "signals": [],
       "classified": false
     },
-    {
-      "path": ".github/workflows/self-build-release-verify-compat.yml",
-      "signals": [
-        "write-permission"
-      ],
-      "classified": true
-    },
     {
       "path": ".github/workflows/self-build-stable-candidate-qualification.yml",
       "signals": [],
@@ -1964,11 +1147,6 @@
       ],
       "classified": true
     },
-    {
-      "path": ".github/workflows/self-ops-recovery-failure-dogfood.yml",
-      "signals": [],
-      "classified": false
-    },
     {
       "path": ".github/workflows/self-ops-runner-smoke.yml",
       "signals": [],
@@ -1984,24 +1162,17 @@
     {
       "path": ".github/workflows/self-release-binary-assets.yml",
       "signals": [
-        "write-permission",
-        "github-release"
+        "write-permission"
       ],
       "classified": true
     },
     {
       "path": ".github/workflows/self-release-line-open.yml",
       "signals": [
-        "write-permission",
-        "git-push"
+        "write-permission"
       ],
       "classified": true
     },
-    {
-      "path": ".github/workflows/self-release-new-version-compat.yml",
-      "signals": [],
-      "classified": false
-    },
     {
       "path": ".github/workflows/self-release-next-development.yml",
       "signals": [],
@@ -2029,22 +1200,6 @@
     },
     {
       "path": ".github/workflows/self-release-tail-dogfood.yml",
-      "signals": [
-        "write-permission",
-        "oidc",
-        "npm-publish"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/stable-candidate-patrol.yml",
-      "signals": [
-        "write-permission"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/universal-bootstrap-recovery.yml",
       "signals": [
         "write-permission",
         "oidc"
@@ -2052,5 +1207,5 @@
       "classified": true
     }
   ],
-  "registryDigest": "40ae53e5bf87b44395bd7bf04b19effb2cae1ada5f9864c02dbef4220fc92106"
+  "registryDigest": "536dca8dab8dd8e28018a6fd9ac023d0d116e0fdb612ecda870a0a2225a3f77b"
 }