@kungfu-tech/buildchain 4.0.10-alpha.0 → 4.1.0-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1527) hide show
  1. package/AGENTS.md +55 -36
  2. package/CONTRIBUTING.md +22 -34
  3. package/README.md +55 -29
  4. package/actions/build/artifact/prepare-attestation/README.md +26 -0
  5. package/actions/build/artifact/seal-attestation/README.md +26 -0
  6. package/actions/build/lifecycle/run/README.md +71 -0
  7. package/actions/build/lifecycle/validate/README.md +52 -0
  8. package/actions/governance/incident/report/README.md +107 -0
  9. package/actions/release/promotion/ref/README.md +92 -0
  10. package/architecture/action-taxonomy.json +527 -0
  11. package/architecture/agent-change-map.md +2128 -481
  12. package/architecture/build-environments.json +1 -2
  13. package/architecture/build-orchestration.json +65 -9
  14. package/architecture/capability-state-machine-manifest.json +15 -16
  15. package/architecture/capability-state-machine-manifest.schema.json +2 -2
  16. package/architecture/ci-lane-change-budget.json +2213 -223
  17. package/architecture/code-layout.json +55 -0
  18. package/architecture/core-mechanisms.json +1160 -0
  19. package/architecture/cross-platform-adopter-qualification.json +4 -14
  20. package/architecture/delivery-authority-parity.json +46 -46
  21. package/architecture/delivery-warrant-shadow-bootstrap-plan.json +4 -4
  22. package/architecture/delivery-warrant-shadow-bootstrap-plan.md +3 -3
  23. package/architecture/dev-delivery-orchestration.json +175 -0
  24. package/architecture/floating-consumer-policy.json +9 -15
  25. package/architecture/history/warrant-shadow-observations.json +900 -0
  26. package/architecture/internal-capabilities.json +2335 -375
  27. package/architecture/layered-transition.json +32 -0
  28. package/architecture/maintainability-debt.json +963 -1835
  29. package/architecture/maintainability-policy.json +64 -1448
  30. package/architecture/partial-mutation-recovery-qualification.json +4 -4
  31. package/architecture/platform-stage-checkpoints.json +1 -1
  32. package/architecture/promotion-job-topology.json +104 -0
  33. package/architecture/provider-operation-journal-contract.json +5 -5
  34. package/architecture/publication-facade-patches.json +5 -5
  35. package/architecture/release-activation-shadow-domain.json +4 -4
  36. package/architecture/release-invocation-fixtures.json +31 -16
  37. package/architecture/release-tail-contract-inventory.json +1 -9
  38. package/architecture/release-tail-contract.json +273 -0
  39. package/architecture/release-topology.json +233 -214
  40. package/architecture/runtime-entry.json +26 -0
  41. package/architecture/runtime-resume-lineage.json +23 -0
  42. package/architecture/runtime-semantic-closure.json +27 -17
  43. package/architecture/rust-libnode-bridge-evaluation.json +1 -1
  44. package/architecture/rust-wasm-production-authority.json +7 -7
  45. package/architecture/stable-publication-fence.json +4 -4
  46. package/architecture/stage-capsule-qualification.json +6 -6
  47. package/architecture/stage-capsule-resume-planner.json +1 -1
  48. package/architecture/stage-capsule-store-contract.json +2 -2
  49. package/architecture/tail-reseal-parity.json +22 -17
  50. package/architecture/universal-workflow-bootstrap.json +115 -111
  51. package/architecture/universal-workflow-capability-policy.json +61 -0
  52. package/architecture/universal-workflow-fault-campaign.json +25 -31
  53. package/architecture/workflow-taxonomy.json +80 -808
  54. package/bin/buildchain.mjs +2 -1820
  55. package/contracts/buildchain-v2-residuals-v1.json +2 -138
  56. package/contracts/dev-delivery-authority-v2.schema.json +509 -231
  57. package/contracts/fixtures/runtime-resume-lineage-v2/scenario.json +14 -0
  58. package/contracts/fixtures/v4-floating-consumer-policy-v1/cases.json +2 -2
  59. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  60. package/contracts/promotion-invocation-v1.schema.json +503 -0
  61. package/contracts/promotion-request-v1.schema.json +433 -0
  62. package/contracts/runtime-resume-lineage-v2.schema.json +182 -0
  63. package/contracts/v4-adopter-delivery-v1.schema.json +1 -1
  64. package/contracts/v4-compatibility-facts-v1.schema.json +4 -4
  65. package/contracts/v4-floating-consumer-policy-receipt-v1.schema.json +124 -21
  66. package/contracts/v4-release-invocation-v1.schema.json +1 -1
  67. package/crates/buildchain-host-bridge/src/main.rs +1 -1
  68. package/dist/site/buildchain-contract.json +1028 -2978
  69. package/dist/site/buildchain-site.json +387 -363
  70. package/dist/site/capability-registry.json +17 -17
  71. package/dist/site/cli-registry.json +358 -369
  72. package/dist/site/controller-registry.json +129 -686
  73. package/dist/site/kfd-claims.json +5841 -3227
  74. package/dist/site/kfd-upstream-aggregate.json +1 -1
  75. package/dist/site/manual-registry.json +29 -29
  76. package/dist/site/node-api-registry.json +12561 -16178
  77. package/dist/site/page-registry.json +346 -326
  78. package/dist/site/public-surface-audit.json +3833 -3641
  79. package/dist/site/publication-authority-registry.json +276 -1121
  80. package/dist/site/publication-registry.json +5 -5
  81. package/dist/site/release-provenance.json +80 -90
  82. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +509 -231
  83. package/dist/site/schemas/v4-adopter-delivery-v1.schema.json +1 -1
  84. package/dist/site/schemas/v4-compatibility-facts-v1.schema.json +4 -4
  85. package/dist/site/site-manifest.json +34 -34
  86. package/dist/site/workflow-registry.json +7136 -5343
  87. package/docs/MAP.md +10 -8
  88. package/docs/auditable-demo.md +6 -6
  89. package/docs/aws-us-elastic-runner-burst-plane.md +5 -5
  90. package/docs/binary-distribution.md +2 -2
  91. package/docs/bootstrap-recovery.md +50 -0
  92. package/docs/cli-reference.md +4 -37
  93. package/docs/cli.md +6 -6
  94. package/docs/code-organization.md +132 -0
  95. package/docs/consumer-issue-reporting.md +1 -1
  96. package/docs/controller-evidence.md +2 -2
  97. package/docs/dev-alpha-candidate-patrol.md +6 -6
  98. package/docs/dev-delivery-orchestration.md +116 -0
  99. package/docs/dev-delivery-qualification-landing-adr.md +1 -1
  100. package/docs/dev-delivery-warrant.md +19 -26
  101. package/docs/dev-qualification-patrol.md +1 -1
  102. package/docs/engineering-housekeeper.md +6 -6
  103. package/docs/github-artifact-attestation.md +10 -13
  104. package/docs/github-governance-authority.md +4 -4
  105. package/docs/kfd-support.md +1 -1
  106. package/docs/lifecycle-protocol.md +8 -8
  107. package/docs/migration-inventory.md +6 -6
  108. package/docs/next-development-transition.md +4 -4
  109. package/docs/node-api-reference.md +2260 -2645
  110. package/docs/ownership.md +3 -3
  111. package/docs/publication-artifacts.md +7 -8
  112. package/docs/publication-authority.md +6 -6
  113. package/docs/publish-transaction.md +10 -10
  114. package/docs/release-activation-transaction.md +1 -1
  115. package/docs/release-candidate.md +24 -30
  116. package/docs/release-governance.md +33 -33
  117. package/docs/release-passport.md +2 -2
  118. package/docs/release-promotion-request.md +57 -0
  119. package/docs/release-propagation.md +24 -24
  120. package/docs/release-tail-contract.md +40 -76
  121. package/docs/release-tail-provider-plane.md +18 -28
  122. package/docs/reusable-build-surface.md +34 -22
  123. package/docs/runtime-entry.md +111 -0
  124. package/docs/runtime-train-validation.md +30 -41
  125. package/docs/shifu-gate-profiles.md +4 -4
  126. package/docs/site-bundle-contract.md +1 -1
  127. package/docs/stable-candidate-patrol.md +1 -1
  128. package/docs/v4-adopter-delivery.md +50 -121
  129. package/docs/v4-canonical-contracts.md +3 -3
  130. package/docs/v4-compatibility-facts.md +1 -1
  131. package/docs/v4-declarative-release-tail-migration.md +24 -29
  132. package/docs/v4-publication-rehearsal.md +6 -6
  133. package/docs/v4-rust-wasm-production-authority.md +2 -2
  134. package/docs/v4-stage-capsule.md +10 -11
  135. package/docs/web-surface-deployments.md +32 -42
  136. package/docs/workflow-catalog.md +81 -127
  137. package/docs/workflow-path-migration.md +1 -5
  138. package/package.json +100 -103
  139. package/packages/core/README.md +41 -164
  140. package/packages/core/adoption/adopter-delivery-parity.js +219 -0
  141. package/packages/core/adoption/adopter-delivery.js +210 -0
  142. package/packages/core/adoption/buildchain-kfd-claims.js +733 -0
  143. package/packages/core/adoption/cli/delivery.mjs +39 -0
  144. package/packages/core/adoption/cli/dispatch.mjs +5 -0
  145. package/packages/core/adoption/cli/kfd-aggregate.mjs +20 -0
  146. package/packages/core/adoption/cli/kfd-hub.mjs +53 -0
  147. package/packages/core/adoption/cli/kfd-migrate-layout.mjs +27 -0
  148. package/packages/core/adoption/cli/kfd-schema.mjs +55 -0
  149. package/packages/core/adoption/cli/kfd-status.mjs +21 -0
  150. package/packages/core/adoption/cli/kfd-upstream.mjs +69 -0
  151. package/packages/core/adoption/cli/kfd.mjs +63 -0
  152. package/packages/core/adoption/cli/output.mjs +18 -0
  153. package/packages/core/adoption/cli/product-gate.mjs +110 -0
  154. package/packages/core/adoption/cli/project.mjs +38 -0
  155. package/packages/core/adoption/cli/standards.mjs +282 -0
  156. package/packages/core/adoption/cli/support.mjs +101 -0
  157. package/packages/core/adoption/cli/surface-register.mjs +172 -0
  158. package/packages/core/adoption/commands/cross-platform-adopter-qualification.mjs +28 -0
  159. package/packages/core/adoption/commands/init-repo.mjs +518 -0
  160. package/packages/core/adoption/cross-platform-adopter-qualification.js +206 -0
  161. package/packages/core/adoption/kfd-agent-hub.js +496 -0
  162. package/packages/core/adoption/kfd.js +966 -0
  163. package/packages/core/adoption/kfd2-product-claims.js +454 -0
  164. package/packages/core/adoption/kfd3-surface-register.js +924 -0
  165. package/packages/core/adoption/qualification/actions.js +104 -0
  166. package/packages/core/adoption/qualification/admission.js +95 -0
  167. package/packages/core/adoption/qualification/aggregate.js +10 -0
  168. package/packages/core/adoption/qualification/io.js +51 -0
  169. package/packages/core/adoption/qualification/platform.js +120 -0
  170. package/packages/core/build/anchored-version-material.js +281 -0
  171. package/packages/core/build/artifact/actions.js +47 -0
  172. package/packages/core/build/artifact/attestation.js +165 -0
  173. package/packages/core/build/artifact/contracts.js +165 -0
  174. package/packages/core/build/artifact/coordinates.js +113 -0
  175. package/packages/core/build/artifact/credential-transport.js +68 -0
  176. package/packages/core/build/artifact/expectations.js +94 -0
  177. package/packages/core/build/artifact/files.js +14 -0
  178. package/packages/core/build/artifact/naming.js +65 -0
  179. package/packages/core/build/artifact/services.js +17 -0
  180. package/packages/core/build/artifact/store.js +120 -0
  181. package/packages/core/build/artifact/summary.js +20 -0
  182. package/packages/core/build/artifact/transfer-policy.js +34 -0
  183. package/packages/core/build/artifact/transport.js +112 -0
  184. package/packages/core/build/artifact/upload.js +178 -0
  185. package/packages/core/build/artifact-coordinate-action.js +46 -0
  186. package/packages/core/build/artifact-coordinate.js +58 -0
  187. package/packages/core/build/artifact-integrity.js +10 -0
  188. package/packages/core/build/artifact-passport.js +842 -0
  189. package/packages/core/build/artifact-signing.js +468 -0
  190. package/packages/core/build/artifact-verification-envelope.js +500 -0
  191. package/packages/core/build/binary/actions.js +83 -0
  192. package/packages/core/build/binary/checksums.js +33 -0
  193. package/packages/core/build/binary/distribution.js +271 -0
  194. package/packages/core/build/binary-publication-dispatch.js +45 -0
  195. package/packages/core/build/build-facts.js +518 -0
  196. package/packages/core/build/cache/compiler-evidence.js +287 -0
  197. package/packages/core/build/cli/cache.mjs +77 -0
  198. package/packages/core/build/cli/facts.mjs +120 -0
  199. package/packages/core/build/cli/homebrew.mjs +101 -0
  200. package/packages/core/build/cli/lifecycle.mjs +66 -0
  201. package/packages/core/build/commands/aggregate-build-summary.mjs +75 -0
  202. package/packages/core/build/commands/anchored-version-material.mjs +42 -0
  203. package/packages/core/build/commands/artifact-signing-controller.mjs +112 -0
  204. package/packages/core/build/commands/artifact-signing-delegation.mjs +34 -0
  205. package/packages/core/build/commands/auditable-demo-platform.mjs +77 -0
  206. package/packages/core/build/commands/auditable-demo-transport-smoke.mjs +24 -0
  207. package/packages/core/build/commands/auditable-demo.mjs +63 -0
  208. package/packages/core/build/commands/compiler-cache-evidence.mjs +39 -0
  209. package/packages/core/build/commands/dispatch-artifact-signing-authority.mjs +19 -0
  210. package/packages/core/build/commands/import-artifact-signing-results.mjs +10 -0
  211. package/packages/core/build/commands/lifecycle-substage-evidence.mjs +42 -0
  212. package/packages/core/build/commands/resolve-artifact-coordinates.mjs +58 -0
  213. package/packages/core/build/commands/resolve-artifact-transfer-mode.mjs +54 -0
  214. package/packages/core/build/commands/resolve-build-configuration.mjs +23 -0
  215. package/packages/core/build/commands/resolve-build-contract.mjs +94 -0
  216. package/packages/core/build/commands/run-candidate-body-prefix-renderer.mjs +24 -0
  217. package/packages/core/build/commands/run-lifecycle.mjs +56 -0
  218. package/packages/core/build/commands/seal-artifact-signing-requests.mjs +10 -0
  219. package/packages/core/build/commands/seal-macos-credential-input.mjs +4 -0
  220. package/packages/core/build/commands/shifu-gate-profile.mjs +43 -0
  221. package/packages/core/build/commands/source-verification-evidence.mjs +14 -0
  222. package/packages/core/build/commands/stage-capsule-qualification.mjs +79 -0
  223. package/packages/core/build/commands/validate-package-manager-contract.mjs +24 -0
  224. package/packages/core/build/credential/seal-input.js +109 -0
  225. package/packages/core/build/demo/action-context.js +16 -0
  226. package/packages/core/build/demo/adapter-actions.js +35 -0
  227. package/packages/core/build/demo/adapter-transactions.js +66 -0
  228. package/packages/core/build/demo/adapter.js +272 -0
  229. package/packages/core/build/demo/binary-action.js +27 -0
  230. package/packages/core/build/demo/bundle-verification.js +211 -0
  231. package/packages/core/build/demo/capture-adaptation.js +37 -0
  232. package/packages/core/build/demo/capture.js +377 -0
  233. package/packages/core/build/demo/collection-actions.js +62 -0
  234. package/packages/core/build/demo/collection-containers.js +136 -0
  235. package/packages/core/build/demo/collection-context.js +40 -0
  236. package/packages/core/build/demo/collection.js +129 -0
  237. package/packages/core/build/demo/composition.js +319 -0
  238. package/packages/core/build/demo/container.js +113 -0
  239. package/packages/core/build/demo/gate.js +297 -0
  240. package/packages/core/build/demo/inspection-worker.js +4 -0
  241. package/packages/core/build/demo/io.js +220 -0
  242. package/packages/core/build/demo/materialization.js +350 -0
  243. package/packages/core/build/demo/media-bundle.js +112 -0
  244. package/packages/core/build/demo/media-inspection.js +332 -0
  245. package/packages/core/build/demo/media-profile.js +399 -0
  246. package/packages/core/build/demo/media-qualification-action.js +37 -0
  247. package/packages/core/build/demo/media-qualification.js +117 -0
  248. package/packages/core/build/demo/presentation.js +222 -0
  249. package/packages/core/build/demo/publication.js +118 -0
  250. package/packages/core/build/demo/renderer-evidence.js +193 -0
  251. package/packages/core/build/demo/renditions.js +398 -0
  252. package/packages/core/build/demo/scenario.js +493 -0
  253. package/packages/core/build/demo/schema.js +278 -0
  254. package/packages/core/build/demo/transport-smoke.js +149 -0
  255. package/packages/core/build/demo/values.js +137 -0
  256. package/packages/core/build/environment/action.js +17 -0
  257. package/packages/core/build/environment/provision.js +121 -0
  258. package/packages/core/build/gate/actions.js +99 -0
  259. package/packages/core/build/gate/aggregate.js +21 -0
  260. package/packages/core/build/gate/commands.js +66 -0
  261. package/packages/core/build/gate/controller.js +41 -0
  262. package/packages/core/build/gate/environment.js +18 -0
  263. package/packages/core/build/gate/execution.js +88 -0
  264. package/packages/core/build/gate/files.js +46 -0
  265. package/packages/core/build/gate/outputs.js +31 -0
  266. package/packages/core/build/gate/plan.js +61 -0
  267. package/packages/core/build/github-artifact-attestation.js +642 -0
  268. package/packages/core/build/github-attestation/action.js +21 -0
  269. package/packages/core/build/github-attestation/admission.js +26 -0
  270. package/packages/core/build/github-attestation/transaction.js +82 -0
  271. package/packages/core/build/homebrew.js +416 -0
  272. package/packages/core/build/lifecycle/action.js +65 -0
  273. package/packages/core/build/lifecycle/artifacts.js +123 -0
  274. package/packages/core/build/lifecycle/context.js +202 -0
  275. package/packages/core/build/lifecycle/diagnostics.js +254 -0
  276. package/packages/core/build/lifecycle/errors.js +44 -0
  277. package/packages/core/build/lifecycle/execution.js +221 -0
  278. package/packages/core/build/lifecycle/files.js +61 -0
  279. package/packages/core/build/lifecycle/manifest.js +107 -0
  280. package/packages/core/build/lifecycle/sampling.js +209 -0
  281. package/packages/core/build/lifecycle/stage-action.js +20 -0
  282. package/packages/core/build/lifecycle/stage.js +146 -0
  283. package/packages/core/build/lifecycle/substage-evidence.js +232 -0
  284. package/packages/core/build/lifecycle/transaction.js +13 -0
  285. package/packages/core/build/macos-credential-island/action.js +704 -0
  286. package/packages/core/build/macos-credential-island/cleanup.js +48 -0
  287. package/packages/core/build/macos-credential-island/dmg-assembly.js +441 -0
  288. package/packages/core/build/macos-credential-island/lib.js +812 -0
  289. package/packages/core/build/package-manager.js +315 -0
  290. package/packages/core/build/plan/action-context.js +23 -0
  291. package/packages/core/build/plan/action.js +75 -0
  292. package/packages/core/build/plan/admission.js +26 -0
  293. package/packages/core/build/plan/configuration.js +196 -0
  294. package/packages/core/build/plan/environment.js +18 -0
  295. package/packages/core/build/plan/identity.js +45 -0
  296. package/packages/core/build/plan/lifecycle.js +38 -0
  297. package/packages/core/build/plan/matrices.js +58 -0
  298. package/packages/core/build/plan/resolve.js +82 -0
  299. package/packages/core/build/plan/runners.js +48 -0
  300. package/packages/core/build/plan/source.js +58 -0
  301. package/packages/core/build/plan/stage-order.js +10 -0
  302. package/packages/core/build/plan/values.js +10 -0
  303. package/packages/core/build/platform-stage-checkpoints.js +471 -0
  304. package/packages/core/build/recovery/checkpoint.js +158 -0
  305. package/packages/core/build/recovery/transaction.js +51 -0
  306. package/packages/core/build/release-evidence-bundle.js +156 -0
  307. package/packages/core/build/runner/matrix.js +266 -0
  308. package/packages/core/build/runner/presets.js +115 -0
  309. package/packages/core/build/signing/actions.js +54 -0
  310. package/packages/core/build/signing/authority-actions.js +138 -0
  311. package/packages/core/build/signing/authority-transaction.js +82 -0
  312. package/packages/core/build/signing/control.js +218 -0
  313. package/packages/core/build/signing/controller-transaction.js +109 -0
  314. package/packages/core/build/signing/credential-transaction.js +66 -0
  315. package/packages/core/build/signing/delegation.js +279 -0
  316. package/packages/core/build/signing/detached.js +170 -0
  317. package/packages/core/build/signing/dispatch.js +261 -0
  318. package/packages/core/build/signing/environment.js +13 -0
  319. package/packages/core/build/signing/files.js +53 -0
  320. package/packages/core/build/signing/import-results.js +151 -0
  321. package/packages/core/build/signing/intake.js +109 -0
  322. package/packages/core/build/signing/materialize.js +54 -0
  323. package/packages/core/build/signing/merge-results.js +82 -0
  324. package/packages/core/build/signing/native-result.js +244 -0
  325. package/packages/core/build/signing/prepare.js +44 -0
  326. package/packages/core/build/signing/request.js +514 -0
  327. package/packages/core/build/signing/seal-requests.js +402 -0
  328. package/packages/core/build/signing/transaction.js +158 -0
  329. package/packages/core/build/signing/verify-results.js +118 -0
  330. package/packages/core/build/source/checkout-action.js +12 -0
  331. package/packages/core/build/source/controller-actions.js +52 -0
  332. package/packages/core/build/source/controller.js +179 -0
  333. package/packages/core/build/source/lifecycle-action.js +32 -0
  334. package/packages/core/build/source/lifecycle.js +124 -0
  335. package/packages/core/build/source/proof-actions.js +57 -0
  336. package/packages/core/build/source/proof-lookup.js +82 -0
  337. package/packages/core/build/source/proof.js +134 -0
  338. package/packages/core/build/source-admission.js +35 -0
  339. package/packages/core/build/stage-capsule/actions.js +43 -0
  340. package/packages/core/build/stage-capsule/campaign/aggregate.js +51 -0
  341. package/packages/core/build/stage-capsule/campaign/context.js +51 -0
  342. package/packages/core/build/stage-capsule/campaign/resume.js +245 -0
  343. package/packages/core/build/stage-capsule/campaign/run.js +47 -0
  344. package/packages/core/build/stage-capsule/campaign/seed.js +124 -0
  345. package/packages/core/build/stage-capsule/campaign/worker.js +17 -0
  346. package/packages/core/build/stage-capsule/canary.js +62 -0
  347. package/packages/core/build/stage-capsule/rehearsal/checkpoint.js +110 -0
  348. package/packages/core/build/stage-capsule/rehearsal/files.js +36 -0
  349. package/packages/core/build/stage-capsule/rehearsal/macos-tail.js +104 -0
  350. package/packages/core/build/stage-capsule/rehearsal/resume.js +38 -0
  351. package/packages/core/build/stage-capsule/rehearsal/run.js +46 -0
  352. package/packages/core/build/stage-capsule/rehearsal/verify.js +55 -0
  353. package/packages/core/build/stage-capsule/rehearsal/worker.js +11 -0
  354. package/packages/core/build/stage-capsule-local-store.js +428 -0
  355. package/packages/core/build/stage-capsule-qualification-campaign.js +511 -0
  356. package/packages/core/build/stage-capsule-qualification.js +455 -0
  357. package/packages/core/build/stage-capsule-resume-planner.js +396 -0
  358. package/packages/core/build/stage-capsule-store.js +404 -0
  359. package/packages/core/build/stage-capsule.js +319 -0
  360. package/packages/core/build/standalone/build.js +266 -0
  361. package/packages/core/build/standalone/bundle.js +69 -0
  362. package/packages/core/build/standalone/identity.js +47 -0
  363. package/packages/core/build/standalone/logging.js +72 -0
  364. package/packages/core/build/standalone/process.js +50 -0
  365. package/packages/core/build/summary/action.js +33 -0
  366. package/packages/core/build/summary/aggregation.js +120 -0
  367. package/packages/core/build/summary/artifacts.js +165 -0
  368. package/packages/core/build/summary/controller-receipt.js +50 -0
  369. package/packages/core/build/summary/execution.js +39 -0
  370. package/packages/core/build/summary/finalization.js +133 -0
  371. package/packages/core/build/summary/payloads.js +80 -0
  372. package/packages/core/build/validate-config/action.js +58 -0
  373. package/packages/core/build/validate-config/lib.js +42 -0
  374. package/packages/core/build/verification/actions.js +45 -0
  375. package/packages/core/build/verification/discovery.js +115 -0
  376. package/packages/core/build/verification/identity.js +123 -0
  377. package/packages/core/build/verification/proof.js +8 -0
  378. package/packages/core/build/verification/repository.js +4 -0
  379. package/packages/core/build/verification/runner.js +71 -0
  380. package/packages/core/build/verification/source.js +169 -0
  381. package/packages/core/consumer/buildchain-config.js +1825 -0
  382. package/packages/core/consumer/cli/infrastructure.mjs +6 -0
  383. package/packages/core/consumer/commands/consumer-policy.mjs +229 -0
  384. package/packages/core/consumer/floating-consumer-evidence.js +323 -0
  385. package/packages/core/consumer/floating-consumer-policy.js +505 -0
  386. package/packages/core/consumer/floating-consumer-release-passport.js +239 -0
  387. package/packages/core/consumer/policy-admission.js +101 -0
  388. package/packages/core/consumer/policy-scan.js +33 -0
  389. package/packages/core/consumer/runtime-selector-persistence.js +291 -0
  390. package/packages/core/contracts/action-inventory.js +78 -0
  391. package/packages/core/contracts/action-taxonomy.js +46 -0
  392. package/packages/core/contracts/buildchain-contract.js +904 -0
  393. package/packages/core/contracts/canonical-contracts.js +239 -0
  394. package/packages/core/contracts/cli/context.mjs +28 -0
  395. package/packages/core/contracts/cli/introspection.mjs +47 -0
  396. package/packages/core/contracts/cli/options.mjs +85 -0
  397. package/packages/core/contracts/cli-reference.js +192 -0
  398. package/packages/core/contracts/commands/buildchain-contract-lock.mjs +120 -0
  399. package/packages/core/contracts/commands/workflow-call-contract.mjs +133 -0
  400. package/packages/core/contracts/public-surface-audit.js +274 -0
  401. package/packages/core/contracts/public-surface-cli.js +134 -0
  402. package/packages/core/contracts/runtime-contract-inspection.js +115 -0
  403. package/packages/core/contracts/structured-values.js +29 -0
  404. package/packages/core/contracts/workflow-yaml-contract.js +383 -0
  405. package/packages/core/dev-delivery/admission/gh-cli-client.js +110 -0
  406. package/packages/core/dev-delivery/admission/github-client.js +274 -0
  407. package/packages/core/dev-delivery/admission/policy.js +177 -0
  408. package/packages/core/dev-delivery/admission/queue.js +554 -0
  409. package/packages/core/dev-delivery/admission/readiness.js +222 -0
  410. package/packages/core/dev-delivery/admission/report.js +27 -0
  411. package/packages/core/dev-delivery/admission/request.js +34 -0
  412. package/packages/core/dev-delivery/admission/targeted.js +375 -0
  413. package/packages/core/dev-delivery/admission/transaction.js +47 -0
  414. package/packages/core/dev-delivery/buildchain-delivery-bootstrap.js +240 -0
  415. package/packages/core/dev-delivery/buildchain-delivery-infrastructure.js +164 -0
  416. package/packages/core/dev-delivery/buildchain-delivery-self-dogfood.js +395 -0
  417. package/packages/core/dev-delivery/candidate/admission-actions.js +34 -0
  418. package/packages/core/dev-delivery/candidate/admission.js +171 -0
  419. package/packages/core/dev-delivery/candidate/coordinates.js +38 -0
  420. package/packages/core/dev-delivery/candidate/evidence.js +20 -0
  421. package/packages/core/dev-delivery/candidate/request.js +39 -0
  422. package/packages/core/dev-delivery/candidate/reservation-action.js +21 -0
  423. package/packages/core/dev-delivery/candidate/reservation.js +98 -0
  424. package/packages/core/dev-delivery/candidate/source-paths.js +102 -0
  425. package/packages/core/dev-delivery/candidate/submission.js +41 -0
  426. package/packages/core/dev-delivery/cli/dispatch.mjs +54 -0
  427. package/packages/core/dev-delivery/commands/dev-delivery-authority-command-adapters.mjs +193 -0
  428. package/packages/core/dev-delivery/commands/dev-delivery-authority-provider.mjs +28 -0
  429. package/packages/core/dev-delivery/commands/dev-delivery-authority.mjs +454 -0
  430. package/packages/core/dev-delivery/commands/dev-delivery-process-boundary.mjs +93 -0
  431. package/packages/core/dev-delivery/commands/dev-delivery-proof.mjs +258 -0
  432. package/packages/core/dev-delivery/commands/dev-delivery-provider-heartbeat.mjs +76 -0
  433. package/packages/core/dev-delivery/commands/dev-delivery-request.sh +152 -0
  434. package/packages/core/dev-delivery/commands/dev-delivery-source-proof-reuse.mjs +125 -0
  435. package/packages/core/dev-delivery/commands/dev-delivery-two-phase.mjs +180 -0
  436. package/packages/core/dev-delivery/commands/dev-delivery-warrant-options.mjs +283 -0
  437. package/packages/core/dev-delivery/commands/dev-delivery-warrant.mjs +65 -0
  438. package/packages/core/dev-delivery/commands/dev-merge-queue.mjs +98 -0
  439. package/packages/core/dev-delivery/commands/dev-pr-auto-merge.mjs +111 -0
  440. package/packages/core/dev-delivery/commands/dev-pr-delivery-warrant.mjs +467 -0
  441. package/packages/core/dev-delivery/commands/dev-pr-prequeue-guard.mjs +381 -0
  442. package/packages/core/dev-delivery/commands/dev-qualification-patrol.mjs +21 -0
  443. package/packages/core/dev-delivery/delivery-warrant-fixture-runner.js +375 -0
  444. package/packages/core/dev-delivery/delivery-warrant-read-candidate.js +281 -0
  445. package/packages/core/dev-delivery/delivery-warrant-semantic-diff-gate.js +351 -0
  446. package/packages/core/dev-delivery/delivery-warrant-shadow-adapter.js +444 -0
  447. package/packages/core/dev-delivery/dev-delivery-authority-candidate.js +197 -0
  448. package/packages/core/dev-delivery/dev-delivery-authority-landing.js +459 -0
  449. package/packages/core/dev-delivery/dev-delivery-authority-state.js +424 -0
  450. package/packages/core/dev-delivery/dev-delivery-candidate-identity.js +152 -0
  451. package/packages/core/dev-delivery/dev-delivery-contract-surface.js +26 -0
  452. package/packages/core/dev-delivery/dev-delivery-execution-transfer.js +578 -0
  453. package/packages/core/dev-delivery/dev-delivery-native-proof.js +509 -0
  454. package/packages/core/dev-delivery/dev-delivery-proof.js +282 -0
  455. package/packages/core/dev-delivery/dev-delivery-warrant-native-requirements.js +7 -0
  456. package/packages/core/dev-delivery/dev-delivery-warrant-state.js +580 -0
  457. package/packages/core/dev-delivery/dev-delivery-warrant.js +588 -0
  458. package/packages/core/dev-delivery/merge-queue-policy.js +543 -0
  459. package/packages/core/dev-delivery/native/action-context.js +31 -0
  460. package/packages/core/dev-delivery/native/actions.js +74 -0
  461. package/packages/core/dev-delivery/native/attempt.js +93 -0
  462. package/packages/core/dev-delivery/native/candidate.js +101 -0
  463. package/packages/core/dev-delivery/native/context-record.js +26 -0
  464. package/packages/core/dev-delivery/native/execution.js +176 -0
  465. package/packages/core/dev-delivery/native/failure.js +105 -0
  466. package/packages/core/dev-delivery/native/files.js +11 -0
  467. package/packages/core/dev-delivery/native/finalizer-admission.js +93 -0
  468. package/packages/core/dev-delivery/native/heartbeat-action.js +29 -0
  469. package/packages/core/dev-delivery/native/heartbeat.js +137 -0
  470. package/packages/core/dev-delivery/native/provider-boundary.js +69 -0
  471. package/packages/core/dev-delivery/native/qualification.js +228 -0
  472. package/packages/core/dev-delivery/native/readback.js +32 -0
  473. package/packages/core/dev-delivery/native/reuse.js +60 -0
  474. package/packages/core/dev-delivery/native/seal-action.js +19 -0
  475. package/packages/core/dev-delivery/native/transactions.js +155 -0
  476. package/packages/core/dev-delivery/native/transfer.js +122 -0
  477. package/packages/core/dev-delivery/published-delivery-authority.js +266 -0
  478. package/packages/core/dev-delivery/qualification/action.js +60 -0
  479. package/packages/core/dev-delivery/qualification/controller.js +218 -0
  480. package/packages/core/dev-delivery/qualification/github-client.js +108 -0
  481. package/packages/core/dev-delivery/qualification/model.js +186 -0
  482. package/packages/core/dev-delivery/qualification/report.js +25 -0
  483. package/packages/core/dev-delivery/queue/completion.js +52 -0
  484. package/packages/core/dev-delivery/queue/landing-action.js +60 -0
  485. package/packages/core/dev-delivery/queue/reconciliation-action.js +41 -0
  486. package/packages/core/dev-delivery/source-proof/evidence.js +92 -0
  487. package/packages/core/dev-delivery/source-proof/io.js +97 -0
  488. package/packages/core/dev-delivery/source-proof/predicates.js +82 -0
  489. package/packages/core/dev-delivery/source-proof/replay.js +143 -0
  490. package/packages/core/dev-delivery/source-proof/reuse.js +114 -0
  491. package/packages/core/dev-delivery/source-proof/seal.js +30 -0
  492. package/packages/core/dev-delivery/warrant/actions.js +78 -0
  493. package/packages/core/dev-delivery/warrant/cancellation.js +49 -0
  494. package/packages/core/dev-delivery/warrant/failure-settlement.js +93 -0
  495. package/packages/core/dev-delivery/warrant/handoff.js +107 -0
  496. package/packages/core/dev-delivery/warrant/observation.js +59 -0
  497. package/packages/core/dev-delivery/warrant/persistence.js +109 -0
  498. package/packages/core/dev-delivery/warrant/reservation-readback.js +72 -0
  499. package/packages/core/dev-delivery/warrant/service.js +134 -0
  500. package/packages/core/dev-delivery/warrant/terminal-policy.js +53 -0
  501. package/packages/core/dev-delivery/warrant/terminal.js +89 -0
  502. package/packages/core/dev-delivery/warrant/transitions.js +222 -0
  503. package/packages/core/dev-delivery/warrant/values.js +102 -0
  504. package/packages/core/governance/alpha-candidate/action.js +87 -0
  505. package/packages/core/governance/alpha-candidate/controller.js +490 -0
  506. package/packages/core/governance/alpha-candidate/lifecycle.js +121 -0
  507. package/packages/core/governance/alpha-candidate/options.js +60 -0
  508. package/packages/core/governance/alpha-candidate/outputs.js +23 -0
  509. package/packages/core/governance/alpha-candidate/provider.js +192 -0
  510. package/packages/core/governance/alpha-candidate/report.js +56 -0
  511. package/packages/core/governance/alpha-candidate/state.js +184 -0
  512. package/packages/core/governance/alpha-candidate/values.js +90 -0
  513. package/packages/core/governance/architecture-graph.js +24 -0
  514. package/packages/core/governance/audit/actions.js +55 -0
  515. package/packages/core/governance/audit/collection.js +257 -0
  516. package/packages/core/governance/audit/github-reader.js +204 -0
  517. package/packages/core/governance/audit/identity.js +58 -0
  518. package/packages/core/governance/audit/incident.mjs +39 -0
  519. package/packages/core/governance/audit/transactions.js +73 -0
  520. package/packages/core/governance/buildchain-compatibility-authority.js +335 -0
  521. package/packages/core/governance/buildchain-compatibility-fact.js +386 -0
  522. package/packages/core/governance/buildchain-compatibility-facts.json +18 -0
  523. package/packages/core/governance/buildchain-compatibility-proof.js +523 -0
  524. package/packages/core/governance/buildchain-publication-authority.js +116 -0
  525. package/packages/core/governance/candidate/body-action.js +18 -0
  526. package/packages/core/governance/candidate/body-renderer.js +160 -0
  527. package/packages/core/governance/ci-lane-change-budget.js +260 -0
  528. package/packages/core/governance/cli/compatibility-facts.mjs +101 -0
  529. package/packages/core/governance/cli/dispatch.mjs +19 -0
  530. package/packages/core/governance/cli/doctor.mjs +144 -0
  531. package/packages/core/governance/commands/architecture.mjs +594 -0
  532. package/packages/core/governance/commands/audit-github-governance.mjs +44 -0
  533. package/packages/core/governance/commands/audit-publication-control-plane.mjs +26 -0
  534. package/packages/core/governance/commands/buildchain-patrol.mjs +32 -0
  535. package/packages/core/governance/commands/create-github-artifact-attestation-policy.mjs +62 -0
  536. package/packages/core/governance/commands/engineering-housekeeper-workflow.mjs +23 -0
  537. package/packages/core/governance/commands/reconcile-github-governance.mjs +689 -0
  538. package/packages/core/governance/commands/reconcile-release-governance.mjs +77 -0
  539. package/packages/core/governance/commands/workflow-friction-report.mjs +375 -0
  540. package/packages/core/governance/github-governance-authority.js +1362 -0
  541. package/packages/core/governance/housekeeping/action.js +45 -0
  542. package/packages/core/governance/housekeeping/execution.js +75 -0
  543. package/packages/core/governance/housekeeping/options.js +103 -0
  544. package/packages/core/governance/housekeeping/report.js +53 -0
  545. package/packages/core/governance/housekeeping/transactions.js +96 -0
  546. package/packages/core/governance/patrol/action.js +41 -0
  547. package/packages/core/governance/patrol/controller.js +125 -0
  548. package/packages/core/governance/patrol/options.js +121 -0
  549. package/packages/core/governance/patrol/report.js +53 -0
  550. package/packages/core/governance/patrol/transaction.js +30 -0
  551. package/packages/core/governance/publication/audit.js +26 -0
  552. package/packages/core/governance/publication/collection.js +396 -0
  553. package/packages/core/governance/publication/policy-values.js +227 -0
  554. package/packages/core/governance/publication/source-authorization.js +293 -0
  555. package/packages/core/governance/receipt-admission-action.js +12 -0
  556. package/packages/core/governance/receipt-admission.js +19 -0
  557. package/packages/core/governance/release-check-policy.js +179 -0
  558. package/packages/core/governance/release-reconciliation-action.js +25 -0
  559. package/packages/core/governance/release-reconciliation.js +122 -0
  560. package/packages/core/governance/report-issue/action.js +201 -0
  561. package/packages/core/index.js +85 -117
  562. package/packages/core/observability/cli/candidate.mjs +42 -0
  563. package/packages/core/observability/cli/context.mjs +47 -0
  564. package/packages/core/observability/cli/diagnostics.mjs +88 -0
  565. package/packages/core/observability/cli/events.mjs +126 -0
  566. package/packages/core/observability/cli/process-sample.mjs +71 -0
  567. package/packages/core/observability/commands/aggregate-diagnostics-summary.mjs +45 -0
  568. package/packages/core/observability/commands/controller-evidence.mjs +109 -0
  569. package/packages/core/observability/commands/observed-evidence.mjs +27 -0
  570. package/packages/core/observability/controller/identity-action.js +11 -0
  571. package/packages/core/observability/controller/identity.js +31 -0
  572. package/packages/core/observability/controller-actions.js +63 -0
  573. package/packages/core/observability/controller-evidence-io.js +112 -0
  574. package/packages/core/observability/controller-evidence.js +550 -0
  575. package/packages/core/observability/controller-input-boundary.js +47 -0
  576. package/packages/core/observability/diagnostics/aggregate.js +25 -0
  577. package/packages/core/observability/diagnostics.js +1904 -0
  578. package/packages/core/observability/evidence/actions.js +20 -0
  579. package/packages/core/observability/evidence/bundle.js +163 -0
  580. package/packages/core/observability/evidence/publication.js +360 -0
  581. package/packages/core/observability/evidence/transactions.js +62 -0
  582. package/packages/core/observability/process/sampling.js +128 -0
  583. package/packages/core/observability/publisher-admission.js +26 -0
  584. package/packages/core/observability/transaction-journal.js +40 -0
  585. package/packages/core/paper/cli/dispatch.mjs +17 -0
  586. package/packages/core/paper/commands/paper-agent-cli.mjs +35 -0
  587. package/packages/core/paper/commands/paper-work-fleet-cli.mjs +577 -0
  588. package/packages/core/paper/commands/paper.mjs +632 -0
  589. package/packages/core/paper/operations/bootstrap.js +73 -0
  590. package/packages/core/paper/operations/files.js +48 -0
  591. package/packages/core/paper/operations/github-observation.js +136 -0
  592. package/packages/core/paper/operations/identity.js +59 -0
  593. package/packages/core/paper/operations/npm-observation.js +118 -0
  594. package/packages/core/paper/operations/plans.js +213 -0
  595. package/packages/core/paper/operations/preflight-checks.js +269 -0
  596. package/packages/core/paper/operations/provisioning-validation.js +155 -0
  597. package/packages/core/paper/operations/provisioning.js +113 -0
  598. package/packages/core/paper/operations/runtime-observation.js +25 -0
  599. package/packages/core/paper/operations/runtime.js +84 -0
  600. package/packages/core/paper/operations/scaffold-config.js +77 -0
  601. package/packages/core/paper/operations/scaffold-workflows.js +116 -0
  602. package/packages/core/paper/operations/scaffold.js +398 -0
  603. package/packages/core/paper/operations/status-facts.js +264 -0
  604. package/packages/core/paper/operations/status.js +353 -0
  605. package/packages/core/paper/operations/toolchain-observation.js +49 -0
  606. package/packages/core/paper/operations/workspace.js +60 -0
  607. package/packages/core/paper/paper-agent-entry.js +385 -0
  608. package/packages/core/paper/paper-fleet.js +310 -0
  609. package/packages/core/paper/paper-npm-bootstrap.js +492 -0
  610. package/packages/core/paper/paper-repository.js +214 -0
  611. package/packages/core/paper/paper-runtime-channels.js +299 -0
  612. package/packages/core/paper/paper-scaffold-content.js +574 -0
  613. package/packages/core/paper/paper.js +312 -0
  614. package/packages/core/paper/publication/actions.js +109 -0
  615. package/packages/core/paper/publication/candidate.js +131 -0
  616. package/packages/core/paper/publication/controller.js +117 -0
  617. package/packages/core/paper/publication/envelope.js +118 -0
  618. package/packages/core/paper/publication/propagation.js +135 -0
  619. package/packages/core/paper/publication/readback.js +89 -0
  620. package/packages/core/paper/publication/target.js +54 -0
  621. package/packages/core/paper/publication-controller.js +142 -0
  622. package/packages/core/providers/artifact-relay/files.js +71 -0
  623. package/packages/core/providers/artifact-relay/s3-client.js +259 -0
  624. package/packages/core/providers/artifact-relay/transactions.js +258 -0
  625. package/packages/core/providers/commands/artifact-relay-s3.mjs +62 -0
  626. package/packages/core/providers/commands/aws-codebuild-toolchain.mjs +15 -0
  627. package/packages/core/providers/commands/aws-macos-jit-controller-runtime.mjs +82 -0
  628. package/packages/core/providers/commands/aws-runner-burst-core.mjs +249 -0
  629. package/packages/core/providers/commands/aws-runner-burst.mjs +80 -0
  630. package/packages/core/providers/commands/aws-windows-jit-campaign.mjs +202 -0
  631. package/packages/core/providers/commands/aws-windows-jit-controller.mjs +578 -0
  632. package/packages/core/providers/commands/aws-windows-jit-operator.sh +506 -0
  633. package/packages/core/providers/commands/infra-contract-core.mjs +1032 -0
  634. package/packages/core/providers/commands/infra-contract.mjs +345 -0
  635. package/packages/core/providers/commands/locked-source-checkout.mjs +9 -0
  636. package/packages/core/providers/commands/route-offline-runners.mjs +30 -0
  637. package/packages/core/providers/demo/capture-worker.py +541 -0
  638. package/packages/core/providers/dev-delivery/candidate.js +112 -0
  639. package/packages/core/providers/dev-delivery/protection.js +29 -0
  640. package/packages/core/providers/dev-delivery/store.js +292 -0
  641. package/packages/core/providers/git/fetch-process.js +27 -0
  642. package/packages/core/providers/git/fetch-worker.js +146 -0
  643. package/packages/core/providers/git/patch-root.js +54 -0
  644. package/packages/core/providers/git-ref-readback.mjs +22 -0
  645. package/packages/core/providers/github/artifact-attestation.js +32 -0
  646. package/packages/core/providers/github/commits.js +32 -0
  647. package/packages/core/providers/github/json-client.js +65 -0
  648. package/packages/core/providers/github/product-publication.js +44 -0
  649. package/packages/core/providers/github/publication-control-plane.js +116 -0
  650. package/packages/core/providers/github/pull-requests.js +24 -0
  651. package/packages/core/providers/github/qualification.js +181 -0
  652. package/packages/core/providers/github/release-assets.js +91 -0
  653. package/packages/core/providers/github/signing-request.js +81 -0
  654. package/packages/core/providers/github/source-lock.js +98 -0
  655. package/packages/core/providers/github-cli-api.js +35 -0
  656. package/packages/core/providers/github-issue-comment.js +83 -0
  657. package/packages/core/providers/github-permission.js +11 -0
  658. package/packages/core/providers/github-token.js +121 -0
  659. package/packages/core/providers/process/sample-worker.mjs +14 -0
  660. package/packages/core/providers/runner/observation.js +30 -0
  661. package/packages/core/providers/runner/offline-routing.js +205 -0
  662. package/packages/core/providers/signing/detached-key.js +20 -0
  663. package/packages/core/providers/signing/macos/compound-archive.py +434 -0
  664. package/packages/core/providers/signing/macos/sign-request.sh +145 -0
  665. package/packages/core/providers/signing/native.js +77 -0
  666. package/packages/core/providers/signing/windows/sign-request.ps1 +48 -0
  667. package/packages/core/providers/source-checkout/action.js +31 -0
  668. package/packages/core/providers/source-checkout/auth.js +32 -0
  669. package/packages/core/providers/source-checkout/fetch.js +135 -0
  670. package/packages/core/providers/source-checkout/git.js +220 -0
  671. package/packages/core/providers/source-checkout/transaction.js +360 -0
  672. package/packages/core/providers/source-checkout/values.js +115 -0
  673. package/packages/core/providers/source-checkout/workspace.js +50 -0
  674. package/packages/core/providers/sync-git/action.mjs +16 -0
  675. package/packages/core/providers/sync-git/transfer.mjs +86 -0
  676. package/packages/core/providers/toolchain/codebuild-policy.js +36 -0
  677. package/packages/core/providers/toolchain/codebuild.js +220 -0
  678. package/packages/core/publication/authority/actions.js +152 -0
  679. package/packages/core/publication/authority/admission.js +113 -0
  680. package/packages/core/publication/authority/assembly.js +72 -0
  681. package/packages/core/publication/authority/binary-evidence.js +77 -0
  682. package/packages/core/publication/authority/candidate-evidence.js +42 -0
  683. package/packages/core/publication/authority/consumer-gate.js +80 -0
  684. package/packages/core/publication/authority/control-plane.js +38 -0
  685. package/packages/core/publication/authority/evidence.js +113 -0
  686. package/packages/core/publication/authority/gate.js +39 -0
  687. package/packages/core/publication/authority/governance.js +54 -0
  688. package/packages/core/publication/authority/paper-evidence.js +24 -0
  689. package/packages/core/publication/authority/request.js +13 -0
  690. package/packages/core/publication/authority/result.js +37 -0
  691. package/packages/core/publication/authority/runner.js +26 -0
  692. package/packages/core/publication/authority/seal.js +97 -0
  693. package/packages/core/publication/authority/verification-evidence.js +80 -0
  694. package/packages/core/publication/authority/verification.js +79 -0
  695. package/packages/core/publication/binary/action.js +31 -0
  696. package/packages/core/publication/binary/capability.js +55 -0
  697. package/packages/core/publication/binary/evidence.js +109 -0
  698. package/packages/core/publication/binary/transaction.js +38 -0
  699. package/packages/core/publication/candidate/artifact.js +71 -0
  700. package/packages/core/publication/candidate/collection-action.js +24 -0
  701. package/packages/core/publication/candidate/collection.js +70 -0
  702. package/packages/core/publication/candidate/kind.js +93 -0
  703. package/packages/core/publication/candidate/manifest.js +35 -0
  704. package/packages/core/publication/candidate/package-binding.js +42 -0
  705. package/packages/core/publication/candidate/package.js +50 -0
  706. package/packages/core/publication/candidate/paper-package.js +120 -0
  707. package/packages/core/publication/candidate/passport.js +36 -0
  708. package/packages/core/publication/candidate/qualification-action.js +36 -0
  709. package/packages/core/publication/candidate/qualification.js +56 -0
  710. package/packages/core/publication/candidate/registry-hydration.js +204 -0
  711. package/packages/core/publication/candidate/reproducibility.js +29 -0
  712. package/packages/core/publication/candidate/sealing.js +184 -0
  713. package/packages/core/publication/candidate/stage-capsules.js +205 -0
  714. package/packages/core/publication/candidate/toolchain.js +80 -0
  715. package/packages/core/publication/cli/dispatch.mjs +107 -0
  716. package/packages/core/publication/commands/create-release-bundle.mjs +32 -0
  717. package/packages/core/publication/commands/generate-release-candidate-passport.mjs +80 -0
  718. package/packages/core/publication/commands/installer-publication.mjs +45 -0
  719. package/packages/core/publication/commands/npm-publish-dry-run.mjs +48 -0
  720. package/packages/core/publication/commands/npm-publish-transaction.mjs +55 -0
  721. package/packages/core/publication/commands/publication-artifact-candidate.mjs +48 -0
  722. package/packages/core/publication/commands/publication-artifact.mjs +67 -0
  723. package/packages/core/publication/commands/publication-package.mjs +38 -0
  724. package/packages/core/publication/commands/publication-registry-hydrate.mjs +19 -0
  725. package/packages/core/publication/commands/publication-reproducibility.mjs +62 -0
  726. package/packages/core/publication/installer/evidence.js +319 -0
  727. package/packages/core/publication/npm/environment.js +18 -0
  728. package/packages/core/publication/npm/evidence.js +57 -0
  729. package/packages/core/publication/npm/pack-preview.js +22 -0
  730. package/packages/core/publication/npm/package-plan.js +82 -0
  731. package/packages/core/publication/npm/package.js +120 -0
  732. package/packages/core/publication/npm/preview-action.js +24 -0
  733. package/packages/core/publication/npm/preview.js +92 -0
  734. package/packages/core/publication/npm/registry.js +61 -0
  735. package/packages/core/publication/npm/transaction.js +115 -0
  736. package/packages/core/publication/oci/preview-actions.js +39 -0
  737. package/packages/core/publication/oci/preview-admission.js +93 -0
  738. package/packages/core/publication/oci/preview-promotion.js +64 -0
  739. package/packages/core/publication/oci/preview-registry.js +36 -0
  740. package/packages/core/publication/oci/preview-transaction.js +42 -0
  741. package/packages/core/publication/oci/preview-values.js +8 -0
  742. package/packages/core/publication/oci-compose-qualification.js +143 -0
  743. package/packages/core/publication/oci-publication-bundle.js +281 -0
  744. package/packages/core/publication/publication-artifact-candidate.js +128 -0
  745. package/packages/core/publication/publication-artifact.js +641 -0
  746. package/packages/core/publication/publication-authority.js +1163 -0
  747. package/packages/core/publication/publication-development.js +72 -0
  748. package/packages/core/publication/publication-package.js +252 -0
  749. package/packages/core/publication/publication-rehearsal-capsule.js +468 -0
  750. package/packages/core/publication/publication-rehearsal-projection.js +104 -0
  751. package/packages/core/publication/publication-rehearsal-runtime.js +190 -0
  752. package/packages/core/publication/publication-rehearsal.js +481 -0
  753. package/packages/core/publication/publication-reproducibility.js +947 -0
  754. package/packages/core/publication/settlement/actions.js +54 -0
  755. package/packages/core/publication/settlement/transaction.js +197 -0
  756. package/packages/core/release/binary/coordinates-action.js +12 -0
  757. package/packages/core/release/binary/coordinates.js +59 -0
  758. package/packages/core/release/candidate/download.js +64 -0
  759. package/packages/core/release/candidate/lineage.js +72 -0
  760. package/packages/core/release/candidate/materialize.js +155 -0
  761. package/packages/core/release/candidate/payloads.js +330 -0
  762. package/packages/core/release/candidate/publication-intent.js +89 -0
  763. package/packages/core/release/candidate/resolve.js +132 -0
  764. package/packages/core/release/candidate/run-selection.js +88 -0
  765. package/packages/core/release/candidate/selection.js +181 -0
  766. package/packages/core/release/candidate/transport.js +143 -0
  767. package/packages/core/release/cli/command-handlers.mjs +14 -0
  768. package/packages/core/release/cli/dispatch.mjs +39 -0
  769. package/packages/core/release/cli/inspection-handlers.mjs +178 -0
  770. package/packages/core/release/cli/release-handlers.mjs +332 -0
  771. package/packages/core/release/cli/trust-release.mjs +19 -0
  772. package/packages/core/release/cli/verification-handlers.mjs +303 -0
  773. package/packages/core/release/commands/dev-alpha-candidate-patrol.mjs +42 -0
  774. package/packages/core/release/commands/ensure-github-release.mjs +199 -0
  775. package/packages/core/release/commands/next-development-review.mjs +77 -0
  776. package/packages/core/release/commands/next-development-transition.mjs +47 -0
  777. package/packages/core/release/commands/promotion-channel-router.mjs +18 -0
  778. package/packages/core/release/commands/publish-source-ref-resolver.mjs +113 -0
  779. package/packages/core/release/commands/release-candidate-resolver.mjs +122 -0
  780. package/packages/core/release/commands/release-line-dry-run.mjs +53 -0
  781. package/packages/core/release/commands/release-propagation.mjs +411 -0
  782. package/packages/core/release/commands/release-tail.mjs +169 -0
  783. package/packages/core/release/commands/release-transaction.mjs +212 -0
  784. package/packages/core/release/commands/resolve-publish-gate.mjs +34 -0
  785. package/packages/core/release/commands/resolve-publish-source.mjs +96 -0
  786. package/packages/core/release/commands/resume-from-candidate-run.mjs +106 -0
  787. package/packages/core/release/commands/stable-candidate-patrol.mjs +31 -0
  788. package/packages/core/release/commands/stable-candidate-qualification.mjs +24 -0
  789. package/packages/core/release/commands/stable-release-gate.mjs +351 -0
  790. package/packages/core/release/commands/tail-reseal.mjs +148 -0
  791. package/packages/core/release/commands/verify-publish-channel-ref.mjs +83 -0
  792. package/packages/core/release/commands/verify-publish-source-lock.mjs +37 -0
  793. package/packages/core/release/commands/verify-release-pr.mjs +6 -0
  794. package/packages/core/release/commands/verify-version-state-delta.mjs +21 -0
  795. package/packages/core/release/dev-alpha-active-release-train.js +455 -0
  796. package/packages/core/release/github-provider-plane.js +319 -0
  797. package/packages/core/release/github-release.js +385 -0
  798. package/packages/core/release/line/action.js +38 -0
  799. package/packages/core/release/line/governance.js +96 -0
  800. package/packages/core/release/line/plan.js +56 -0
  801. package/packages/core/release/line/policy.js +320 -0
  802. package/packages/core/release/line/protection.js +35 -0
  803. package/packages/core/release/line/request.js +22 -0
  804. package/packages/core/release/line/source.js +79 -0
  805. package/packages/core/release/line/transaction.js +33 -0
  806. package/packages/core/release/line/verification-action.js +13 -0
  807. package/packages/core/release/line/verification.js +13 -0
  808. package/packages/core/release/next-development/actions.js +119 -0
  809. package/packages/core/release/next-development/approval.js +59 -0
  810. package/packages/core/release/next-development/enqueue.js +51 -0
  811. package/packages/core/release/next-development/finalization.js +127 -0
  812. package/packages/core/release/next-development/observation.js +41 -0
  813. package/packages/core/release/next-development/review-policy.js +56 -0
  814. package/packages/core/release/next-development/verification.js +89 -0
  815. package/packages/core/release/next-development-projection.js +310 -0
  816. package/packages/core/release/next-development-transition.js +737 -0
  817. package/packages/core/release/partial-mutation-recovery-qualification.js +18 -0
  818. package/packages/core/release/passport/artifact-index.js +65 -0
  819. package/packages/core/release/passport/assembly-artifacts.js +43 -0
  820. package/packages/core/release/passport/assembly-inputs.js +107 -0
  821. package/packages/core/release/passport/assembly-material.js +261 -0
  822. package/packages/core/release/passport/assembly-render.js +320 -0
  823. package/packages/core/release/passport/assembly.js +12 -0
  824. package/packages/core/release/passport/assets.js +46 -0
  825. package/packages/core/release/passport/attachments.js +88 -0
  826. package/packages/core/release/passport/authoritative-base.js +123 -0
  827. package/packages/core/release/passport/build.js +39 -0
  828. package/packages/core/release/passport/collection-inputs.js +383 -0
  829. package/packages/core/release/passport/collection-material.js +199 -0
  830. package/packages/core/release/passport/collection-options.js +97 -0
  831. package/packages/core/release/passport/collection-output.js +303 -0
  832. package/packages/core/release/passport/collection.js +10 -0
  833. package/packages/core/release/passport/commands.js +44 -0
  834. package/packages/core/release/passport/consumer-input.js +18 -0
  835. package/packages/core/release/passport/consumer-validation.js +56 -0
  836. package/packages/core/release/passport/discovery.js +36 -0
  837. package/packages/core/release/passport/documents.js +116 -0
  838. package/packages/core/release/passport/evidence-validation.js +280 -0
  839. package/packages/core/release/passport/files.js +43 -0
  840. package/packages/core/release/passport/fixture.js +19 -0
  841. package/packages/core/release/passport/identity.js +46 -0
  842. package/packages/core/release/passport/impact-validation.js +230 -0
  843. package/packages/core/release/passport/impact.js +149 -0
  844. package/packages/core/release/passport/inputs.js +55 -0
  845. package/packages/core/release/passport/invariants.js +93 -0
  846. package/packages/core/release/passport/issues.js +29 -0
  847. package/packages/core/release/passport/json.js +16 -0
  848. package/packages/core/release/passport/locations.js +82 -0
  849. package/packages/core/release/passport/packages.js +123 -0
  850. package/packages/core/release/passport/publish-validation.js +279 -0
  851. package/packages/core/release/passport/publish.js +58 -0
  852. package/packages/core/release/passport/report.js +154 -0
  853. package/packages/core/release/passport/state-validation.js +163 -0
  854. package/packages/core/release/passport/transaction.js +69 -0
  855. package/packages/core/release/passport/trust-claims.js +365 -0
  856. package/packages/core/release/passport/trust-validation.js +528 -0
  857. package/packages/core/release/product-publication.js +59 -0
  858. package/packages/core/release/promote-candidate/action.js +9 -0
  859. package/packages/core/release/promote-candidate/development-source.js +38 -0
  860. package/packages/core/release/promote-candidate/evidence-binding.js +142 -0
  861. package/packages/core/release/promote-candidate/evidence-inputs.js +99 -0
  862. package/packages/core/release/promote-candidate/files.js +10 -0
  863. package/packages/core/release/promote-candidate/next-development-provider.js +300 -0
  864. package/packages/core/release/promote-candidate/next-development-queue.js +63 -0
  865. package/packages/core/release/promote-candidate/oci-provider.js +241 -0
  866. package/packages/core/release/promote-candidate/oci-registry-client.js +67 -0
  867. package/packages/core/release/promote-candidate/outputs.js +29 -0
  868. package/packages/core/release/promote-candidate/product-finalization-wait.js +52 -0
  869. package/packages/core/release/promote-candidate/product-provider-adapters.js +462 -0
  870. package/packages/core/release/promote-candidate/product-provider-github-adapters.js +595 -0
  871. package/packages/core/release/promote-candidate/product-provider.js +188 -0
  872. package/packages/core/release/promote-candidate/provider-request.js +51 -0
  873. package/packages/core/release/promote-candidate/provider-settlement.js +83 -0
  874. package/packages/core/release/promote-candidate/publication-completion.js +56 -0
  875. package/packages/core/release/promote-candidate/release-documents.js +156 -0
  876. package/packages/core/release/promote-candidate/transaction.js +130 -0
  877. package/packages/core/release/promote-ref/action-environment.js +2 -0
  878. package/packages/core/release/promote-ref/action-inputs.js +285 -0
  879. package/packages/core/release/promote-ref/action-outputs.js +140 -0
  880. package/packages/core/release/promote-ref/action-request.js +205 -0
  881. package/packages/core/release/promote-ref/action.js +92 -0
  882. package/packages/core/release/promote-ref/internal/branch-protection.js +218 -0
  883. package/packages/core/release/promote-ref/internal/candidate-admission.js +149 -0
  884. package/packages/core/release/promote-ref/internal/channel-governance.js +297 -0
  885. package/packages/core/release/promote-ref/internal/channel-resume.js +198 -0
  886. package/packages/core/release/promote-ref/internal/channel-tags.js +207 -0
  887. package/packages/core/release/promote-ref/internal/contained-published-version-state.js +80 -0
  888. package/packages/core/release/promote-ref/internal/durable-transaction-operations.js +463 -0
  889. package/packages/core/release/promote-ref/internal/durable-transaction-store.js +395 -0
  890. package/packages/core/release/promote-ref/internal/generated-branch.js +16 -0
  891. package/packages/core/release/promote-ref/internal/generated-identity.js +12 -0
  892. package/packages/core/release/promote-ref/internal/generated-ref.js +93 -0
  893. package/packages/core/release/promote-ref/internal/github-adapter.js +312 -0
  894. package/packages/core/release/promote-ref/internal/npm-distribution.js +185 -0
  895. package/packages/core/release/promote-ref/internal/npm-existing-evidence.js +61 -0
  896. package/packages/core/release/promote-ref/internal/passport-files.js +116 -0
  897. package/packages/core/release/promote-ref/internal/passport-generation.js +567 -0
  898. package/packages/core/release/promote-ref/internal/promote-alpha-channel.js +588 -0
  899. package/packages/core/release/promote-ref/internal/promote-major-channel.js +476 -0
  900. package/packages/core/release/promote-ref/internal/promote-release-channel.js +573 -0
  901. package/packages/core/release/promote-ref/internal/promotion-operations.js +1170 -0
  902. package/packages/core/release/promote-ref/internal/promotion-options.js +101 -0
  903. package/packages/core/release/promote-ref/internal/promotion-policy.js +218 -0
  904. package/packages/core/release/promote-ref/internal/publish-command.js +211 -0
  905. package/packages/core/release/promote-ref/internal/publish-contract.js +181 -0
  906. package/packages/core/release/promote-ref/internal/publish-transaction.js +510 -0
  907. package/packages/core/release/promote-ref/internal/tag-selection.js +159 -0
  908. package/packages/core/release/promote-ref/internal/transaction-context.js +506 -0
  909. package/packages/core/release/promote-ref/internal/transaction-recovery.js +379 -0
  910. package/packages/core/release/promote-ref/internal/version-state-operations.js +545 -0
  911. package/packages/core/release/promote-ref/lib.js +600 -0
  912. package/packages/core/release/promote-ref/release-tail.js +102 -0
  913. package/packages/core/release/promote-ref/source-lock.js +91 -0
  914. package/packages/core/release/promotion/actions.js +102 -0
  915. package/packages/core/release/promotion/admission.js +5 -0
  916. package/packages/core/release/promotion/candidate.js +69 -0
  917. package/packages/core/release/promotion/channel.js +16 -0
  918. package/packages/core/release/promotion/product-state.js +68 -0
  919. package/packages/core/release/promotion/publish-gate.js +128 -0
  920. package/packages/core/release/promotion/qualification-action.js +61 -0
  921. package/packages/core/release/promotion/qualification.js +95 -0
  922. package/packages/core/release/promotion/routing.js +29 -0
  923. package/packages/core/release/promotion/selection.js +47 -0
  924. package/packages/core/release/promotion/source-intent.js +35 -0
  925. package/packages/core/release/promotion-request.js +109 -0
  926. package/packages/core/release/propagation/actions.js +75 -0
  927. package/packages/core/release/propagation/delivery.js +202 -0
  928. package/packages/core/release/propagation/planning.js +197 -0
  929. package/packages/core/release/propagation/report.js +97 -0
  930. package/packages/core/release/propagation/store.js +26 -0
  931. package/packages/core/release/propagation/transactions.js +213 -0
  932. package/packages/core/release/propagation/work.js +146 -0
  933. package/packages/core/release/protected-publication-source.js +91 -0
  934. package/packages/core/release/provider-operation-journal.js +62 -0
  935. package/packages/core/release/provider-readback-idempotency.js +309 -0
  936. package/packages/core/release/qualification/actions.js +43 -0
  937. package/packages/core/release/qualification/campaign.js +154 -0
  938. package/packages/core/release/qualification/options.js +102 -0
  939. package/packages/core/release/qualification/public-build.js +109 -0
  940. package/packages/core/release/recovery/artifacts.js +161 -0
  941. package/packages/core/release/recovery/candidate.js +523 -0
  942. package/packages/core/release/recovery/capsules.js +94 -0
  943. package/packages/core/release/recovery/download.js +191 -0
  944. package/packages/core/release/recovery/files.js +39 -0
  945. package/packages/core/release/recovery/lineage.js +305 -0
  946. package/packages/core/release/recovery/provenance.js +198 -0
  947. package/packages/core/release/recovery/publication.js +183 -0
  948. package/packages/core/release/recovery/readback.js +156 -0
  949. package/packages/core/release/recovery/runtime.js +133 -0
  950. package/packages/core/release/recovery/transactions.js +139 -0
  951. package/packages/core/release/release-activation-shadow.js +32 -0
  952. package/packages/core/release/release-blocker-priority.js +183 -0
  953. package/packages/core/release/release-candidate-recovery.js +590 -0
  954. package/packages/core/release/release-candidate.js +588 -0
  955. package/packages/core/release/release-invocation.js +64 -0
  956. package/packages/core/release/release-line-bootstrap.js +292 -0
  957. package/packages/core/release/release-line-dry-run.js +302 -0
  958. package/packages/core/release/release-passport-contract.js +479 -0
  959. package/packages/core/release/release-passport.js +74 -0
  960. package/packages/core/release/release-tail-provider-adapters.js +460 -0
  961. package/packages/core/release/release-tail-provider-plane.js +248 -0
  962. package/packages/core/release/reseal/actions.js +65 -0
  963. package/packages/core/release/reseal/admission.js +73 -0
  964. package/packages/core/release/reseal/files.js +39 -0
  965. package/packages/core/release/reseal/finalize-platform.js +63 -0
  966. package/packages/core/release/reseal/outputs.js +21 -0
  967. package/packages/core/release/reseal/plan.js +24 -0
  968. package/packages/core/release/reseal/platform.js +135 -0
  969. package/packages/core/release/reseal/readbacks.js +36 -0
  970. package/packages/core/release/reseal/seal.js +125 -0
  971. package/packages/core/release/reuse-complete-release.js +240 -0
  972. package/packages/core/release/settle/action.js +412 -0
  973. package/packages/core/release/source/channel.js +45 -0
  974. package/packages/core/release/source/coordinates.js +160 -0
  975. package/packages/core/release/source/lineage.js +144 -0
  976. package/packages/core/release/source/manifest.js +114 -0
  977. package/packages/core/release/stable-patrol/action.js +87 -0
  978. package/packages/core/release/stable-patrol/controller.js +346 -0
  979. package/packages/core/release/stable-patrol/coordinates.js +16 -0
  980. package/packages/core/release/stable-patrol/github-client.js +181 -0
  981. package/packages/core/release/stable-patrol/options.js +87 -0
  982. package/packages/core/release/stable-patrol/report.js +28 -0
  983. package/packages/core/release/stable-publication-fence.js +28 -0
  984. package/packages/core/release/tail-reseal-github.js +174 -0
  985. package/packages/core/release/tail-reseal-receipt.js +227 -0
  986. package/packages/core/release/tail-reseal.js +576 -0
  987. package/packages/core/release/version-state/verification.js +164 -0
  988. package/packages/core/release/version-state.js +449 -0
  989. package/packages/core/runtime/action-host.js +19 -0
  990. package/packages/core/runtime/action-process.mjs +23 -0
  991. package/packages/core/runtime/buildchain-domain.wasm +0 -0
  992. package/packages/core/runtime/checkout-identity.js +14 -0
  993. package/packages/core/runtime/commands/bridge-bootstrap.mjs +147 -0
  994. package/packages/core/runtime/commands/host-adapter.mjs +185 -0
  995. package/packages/core/runtime/consumer-shell.js +174 -0
  996. package/packages/core/runtime/domain-wasm-artifact.js +7 -0
  997. package/packages/core/runtime/entry/actions.js +121 -0
  998. package/packages/core/runtime/entry/activation.js +86 -0
  999. package/packages/core/runtime/entry/github.js +52 -0
  1000. package/packages/core/runtime/entry/recovery.js +37 -0
  1001. package/packages/core/runtime/entry/selection.js +110 -0
  1002. package/packages/core/runtime/installation-root.js +29 -0
  1003. package/packages/core/runtime/locked-dependencies.js +74 -0
  1004. package/packages/core/runtime/toolchain/actions.js +14 -0
  1005. package/packages/core/runtime/toolchain/user-paths.js +9 -0
  1006. package/packages/core/runtime/toolchain/windows-rust.js +67 -0
  1007. package/packages/core/web/apply-admission-action.js +20 -0
  1008. package/packages/core/web/apply-admission.js +44 -0
  1009. package/packages/core/web/cli/badges.mjs +100 -0
  1010. package/packages/core/web/cli/surface.mjs +6 -0
  1011. package/packages/core/web/commands/web-surface-core.mjs +2603 -0
  1012. package/packages/core/web/commands/web-surface-production-release-pr.mjs +126 -0
  1013. package/packages/core/web/commands/web-surface.mjs +294 -0
  1014. package/packages/core/web/controller-actions.js +45 -0
  1015. package/packages/core/web/controller.js +145 -0
  1016. package/packages/core/web/deployment/apply-action.js +31 -0
  1017. package/packages/core/web/deployment/apply-evidence.js +134 -0
  1018. package/packages/core/web/deployment/apply.js +118 -0
  1019. package/packages/core/web/deployment/cloudfront-wait.js +88 -0
  1020. package/packages/core/web/deployment/plan-files.js +41 -0
  1021. package/packages/core/web/deployment/planning-action.js +28 -0
  1022. package/packages/core/web/deployment/planning.js +126 -0
  1023. package/packages/core/web/deployment/report-action.js +74 -0
  1024. package/packages/core/web/deployment/summary.js +44 -0
  1025. package/packages/core/web/preview-feedback-action.js +26 -0
  1026. package/packages/core/web/preview-feedback.js +40 -0
  1027. package/packages/core/web/production-decision-action.js +42 -0
  1028. package/packages/core/web/production-decision.js +85 -0
  1029. package/packages/core/web/production-intent-action.js +14 -0
  1030. package/packages/core/web/production-intent.js +167 -0
  1031. package/packages/core/web/publication-admission-action.js +85 -0
  1032. package/packages/core/web/publication-admission.js +183 -0
  1033. package/packages/core/web/publication-capability-action.js +22 -0
  1034. package/packages/core/web/publication-capability.js +73 -0
  1035. package/packages/core/web/readme-badges.js +891 -0
  1036. package/packages/core/web/release-feedback.js +414 -0
  1037. package/packages/core/web/release-pr-action.js +47 -0
  1038. package/packages/core/web/release-pr-handoff.js +176 -0
  1039. package/packages/core/web/release-pr-provider.js +295 -0
  1040. package/packages/core/web/release-pr-summary.js +42 -0
  1041. package/packages/core/web/release-pr-transaction.js +158 -0
  1042. package/packages/core/web/release-review-action.js +21 -0
  1043. package/packages/core/web/release-review.js +130 -0
  1044. package/packages/core/web/web-surface-publication-candidate.js +159 -0
  1045. package/packages/core/workflow/admission/actions.js +36 -0
  1046. package/packages/core/workflow/admission/recovery.js +7 -0
  1047. package/packages/core/workflow/admission/transactions.js +44 -0
  1048. package/packages/core/workflow/cli/main.mjs +131 -0
  1049. package/packages/core/workflow/cli/process.mjs +16 -0
  1050. package/packages/core/workflow/commands/buildchain-cli-help.mjs +318 -0
  1051. package/packages/core/workflow/commands/universal-workflow-engine.mjs +68 -0
  1052. package/packages/core/workflow/dogfood/actions.js +45 -0
  1053. package/packages/core/workflow/dogfood/readiness.js +74 -0
  1054. package/packages/core/workflow/dogfood/transactions.js +90 -0
  1055. package/packages/core/workflow/engine/action.js +37 -0
  1056. package/packages/core/workflow/engine/conformance.js +93 -0
  1057. package/packages/core/workflow/engine/execution.js +73 -0
  1058. package/packages/core/workflow/engine/identity.js +29 -0
  1059. package/packages/core/workflow/engine/provider-context.js +16 -0
  1060. package/packages/core/workflow/engine/release-environment.js +33 -0
  1061. package/packages/core/workflow/engine/release-evidence.js +39 -0
  1062. package/packages/core/workflow/engine/release-observation.js +97 -0
  1063. package/packages/core/workflow/engine/release-promotion.js +227 -0
  1064. package/packages/core/workflow/event-trust.js +25 -0
  1065. package/packages/core/workflow/request-rejection.js +3 -0
  1066. package/packages/core/workflow/settlement/actions.js +22 -0
  1067. package/packages/core/workflow/universal-self-dogfood.js +149 -0
  1068. package/packages/core/workflow/universal-workflow-bootstrap.js +361 -0
  1069. package/packages/core/workflow/workflow-taxonomy.mjs +351 -0
  1070. package/scripts/bridge-evidence.mjs +9 -2
  1071. package/scripts/build-domain-wasm.mjs +15 -3
  1072. package/scripts/build-standalone-binary.mjs +1 -375
  1073. package/scripts/check-action-bundles.mjs +14 -25
  1074. package/scripts/check-ci-lane-change-budget.mjs +3 -3
  1075. package/scripts/check-code-layout.mjs +386 -0
  1076. package/scripts/check-core-mechanism-inventory.mjs +17 -16
  1077. package/scripts/check-dev-delivery-actions.mjs +44 -0
  1078. package/scripts/check-floating-consumer-policy-contract.mjs +36 -62
  1079. package/scripts/check-implementation-naming.mjs +2 -23
  1080. package/scripts/check-internal-architecture.mjs +3 -3
  1081. package/scripts/check-inventory.mjs +158 -325
  1082. package/scripts/check-javascript-syntax.mjs +1 -1
  1083. package/scripts/check-maintainability.mjs +25 -21
  1084. package/scripts/check-project-cut-merge-queue-admission.mjs +1 -1
  1085. package/scripts/check-public-dogfood-contract.mjs +187 -51
  1086. package/scripts/check-release-tail-contract.mjs +62 -71
  1087. package/scripts/check-release-topology.mjs +103 -83
  1088. package/scripts/check-runtime-entry.mjs +133 -0
  1089. package/scripts/check-runtime-semantic-closure.mjs +5 -8
  1090. package/scripts/check-source-bindings.mjs +54 -0
  1091. package/scripts/check-universal-workflow-bootstrap.mjs +46 -270
  1092. package/scripts/check-workflow-taxonomy.mjs +1 -1
  1093. package/scripts/check-workflows.sh +4 -0
  1094. package/scripts/generate-bootstrap-admission.mjs +32 -0
  1095. package/scripts/generate-buildchain-kfd-witnesses.mjs +3 -3
  1096. package/scripts/generate-channel-promotion-workflow.mjs +39 -518
  1097. package/scripts/generate-next-development-guidance.mjs +1 -1
  1098. package/scripts/generate-public-reference.mjs +2 -2
  1099. package/scripts/generate-site-bundle.mjs +42 -43
  1100. package/scripts/generate-tail-reseal-fixture.mjs +108 -0
  1101. package/scripts/generate-workflow-taxonomy.mjs +2 -2
  1102. package/scripts/inventory/binary.mjs +36 -0
  1103. package/scripts/inventory/promotion.mjs +74 -0
  1104. package/scripts/maintainability-domain-metrics.mjs +1 -1
  1105. package/scripts/maintainability-metrics.mjs +37 -37
  1106. package/scripts/maintainability-public-surface.mjs +19 -95
  1107. package/scripts/next-development-self-dogfood-harness.mjs +2 -2
  1108. package/scripts/next-development-self-dogfood.mjs +2 -2
  1109. package/scripts/platform-stage-checkpoint-rehearsal.mjs +33 -201
  1110. package/scripts/public-reference.mjs +0 -187
  1111. package/scripts/publication-rehearsal-fixture.mjs +1 -1
  1112. package/scripts/release-train-self-dogfood.mjs +9 -14
  1113. package/scripts/runtime-source-boundaries.mjs +70 -0
  1114. package/scripts/site-action-audit.mjs +16 -0
  1115. package/scripts/site-capability-metadata.mjs +5 -9
  1116. package/scripts/source-metric-lineage.mjs +17 -0
  1117. package/scripts/stage-capsule-resume-rehearsal.mjs +19 -55
  1118. package/scripts/tail-reseal-macos-rehearsal.mjs +1 -109
  1119. package/scripts/tsup-action.config.mjs +21 -0
  1120. package/scripts/verify-golden-path.mjs +1 -1
  1121. package/scripts/warrant-shadow-plan.mjs +49 -243
  1122. package/scripts/workflow-action-graph.mjs +136 -0
  1123. package/scripts/workflow-self-reference.mjs +20 -0
  1124. package/templates/native-dev-delivery.yml +31 -44
  1125. package/templates/universal-buildchain-bootstrap.yml +13 -3
  1126. package/actions/github-artifact-attestation/README.md +0 -10
  1127. package/actions/promote-buildchain-ref/README.md +0 -549
  1128. package/actions/report-buildchain-issue/README.md +0 -107
  1129. package/actions/run-lifecycle/README.md +0 -71
  1130. package/actions/validate-config/README.md +0 -52
  1131. package/architecture/implementation-naming.json +0 -1273
  1132. package/architecture/runtime-ref-resume-authority.json +0 -64
  1133. package/architecture/universal-workflow-train-admission.json +0 -40
  1134. package/bin/internal/adopter-delivery-cli.mjs +0 -70
  1135. package/bin/internal/cli-options.mjs +0 -79
  1136. package/bin/internal/compatibility-facts-cli.mjs +0 -101
  1137. package/bin/internal/trust-release-cli.mjs +0 -19
  1138. package/bin/internal/trust-release-command-handlers.mjs +0 -14
  1139. package/bin/internal/trust-release-inspection-handlers.mjs +0 -175
  1140. package/bin/internal/trust-release-release-handlers.mjs +0 -332
  1141. package/bin/internal/trust-release-verification-handlers.mjs +0 -306
  1142. package/contracts/fixtures/v4-adopter-delivery-v1/archive-template.json +0 -19
  1143. package/contracts/fixtures/v4-adopter-delivery-v1/bootstrap-positive.json +0 -93
  1144. package/contracts/fixtures/v4-runtime-ref-resume-authority-v1/scenario.json +0 -15
  1145. package/contracts/v4-runtime-ref-resume-authority-v1.schema.json +0 -235
  1146. package/docs/v4-runtime-ref-resume-authority.md +0 -69
  1147. package/packages/compatibility/adopter-delivery.js +0 -16
  1148. package/packages/compatibility/cross-platform-adopter-qualification.js +0 -12
  1149. package/packages/compatibility/floating-consumer-policy.js +0 -14
  1150. package/packages/compatibility/publication-qualification.js +0 -11
  1151. package/packages/compatibility/publication-rehearsal.js +0 -18
  1152. package/packages/compatibility/runtime-ref-resume-authority.js +0 -13
  1153. package/packages/compatibility/tail-reseal-receipt.js +0 -7
  1154. package/packages/compatibility/tail-reseal.js +0 -11
  1155. package/packages/core/adopter-delivery-parity.js +0 -219
  1156. package/packages/core/adopter-delivery.js +0 -359
  1157. package/packages/core/anchored-version-material.js +0 -281
  1158. package/packages/core/artifact-passport.js +0 -847
  1159. package/packages/core/artifact-signing.js +0 -474
  1160. package/packages/core/artifact-verification-envelope.js +0 -500
  1161. package/packages/core/build-facts.js +0 -575
  1162. package/packages/core/buildchain-compatibility-authority.js +0 -336
  1163. package/packages/core/buildchain-compatibility-fact.js +0 -394
  1164. package/packages/core/buildchain-compatibility-facts.json +0 -217
  1165. package/packages/core/buildchain-compatibility-proof.js +0 -566
  1166. package/packages/core/buildchain-config.js +0 -1887
  1167. package/packages/core/buildchain-contract.js +0 -1048
  1168. package/packages/core/buildchain-delivery-bootstrap.js +0 -240
  1169. package/packages/core/buildchain-delivery-infrastructure.js +0 -164
  1170. package/packages/core/buildchain-delivery-self-dogfood.js +0 -395
  1171. package/packages/core/buildchain-domain.wasm +0 -0
  1172. package/packages/core/buildchain-kfd-claims.js +0 -733
  1173. package/packages/core/buildchain-publication-authority.js +0 -118
  1174. package/packages/core/canonical-contracts.js +0 -239
  1175. package/packages/core/ci-lane-change-budget.js +0 -260
  1176. package/packages/core/controller-evidence.js +0 -553
  1177. package/packages/core/cross-platform-adopter-qualification.js +0 -343
  1178. package/packages/core/delivery-warrant-fixture-runner.js +0 -375
  1179. package/packages/core/delivery-warrant-read-candidate.js +0 -286
  1180. package/packages/core/delivery-warrant-semantic-diff-gate.js +0 -351
  1181. package/packages/core/delivery-warrant-shadow-adapter.js +0 -447
  1182. package/packages/core/dev-alpha-active-release-train.js +0 -460
  1183. package/packages/core/dev-delivery-authority-candidate.js +0 -270
  1184. package/packages/core/dev-delivery-authority-landing.js +0 -461
  1185. package/packages/core/dev-delivery-authority-state.js +0 -583
  1186. package/packages/core/dev-delivery-candidate-identity.js +0 -169
  1187. package/packages/core/dev-delivery-contract-surface.js +0 -76
  1188. package/packages/core/dev-delivery-execution-transfer.js +0 -591
  1189. package/packages/core/dev-delivery-native-proof.js +0 -566
  1190. package/packages/core/dev-delivery-proof.js +0 -286
  1191. package/packages/core/dev-delivery-warrant-legacy-recovery.js +0 -248
  1192. package/packages/core/dev-delivery-warrant-native-compatibility.js +0 -33
  1193. package/packages/core/dev-delivery-warrant-state.js +0 -599
  1194. package/packages/core/dev-delivery-warrant.js +0 -598
  1195. package/packages/core/diagnostics.js +0 -1904
  1196. package/packages/core/domain-wasm-artifact.js +0 -7
  1197. package/packages/core/floating-consumer-evidence.js +0 -338
  1198. package/packages/core/floating-consumer-policy.js +0 -571
  1199. package/packages/core/floating-consumer-release-passport.js +0 -272
  1200. package/packages/core/github-artifact-attestation.js +0 -642
  1201. package/packages/core/github-governance-authority.js +0 -1369
  1202. package/packages/core/homebrew.js +0 -414
  1203. package/packages/core/kfd-agent-hub.js +0 -496
  1204. package/packages/core/kfd.js +0 -966
  1205. package/packages/core/kfd2-product-claims.js +0 -454
  1206. package/packages/core/kfd3-surface-register.js +0 -924
  1207. package/packages/core/legacy-kfd-adopter-driver.js +0 -167
  1208. package/packages/core/next-development-projection.js +0 -310
  1209. package/packages/core/next-development-transition.js +0 -737
  1210. package/packages/core/oci-compose-qualification.js +0 -143
  1211. package/packages/core/oci-publication-bundle.js +0 -281
  1212. package/packages/core/package-manager.js +0 -323
  1213. package/packages/core/paper-agent-entry.js +0 -396
  1214. package/packages/core/paper-fleet.js +0 -313
  1215. package/packages/core/paper-npm-bootstrap.js +0 -492
  1216. package/packages/core/paper-repository.js +0 -214
  1217. package/packages/core/paper-runtime-channels.js +0 -348
  1218. package/packages/core/paper-scaffold-content.js +0 -574
  1219. package/packages/core/paper.js +0 -2478
  1220. package/packages/core/partial-mutation-recovery-qualification.js +0 -18
  1221. package/packages/core/platform-stage-checkpoints.js +0 -471
  1222. package/packages/core/product-publication.js +0 -59
  1223. package/packages/core/protected-publication-source.js +0 -91
  1224. package/packages/core/provider-operation-journal.js +0 -62
  1225. package/packages/core/provider-readback-idempotency.js +0 -309
  1226. package/packages/core/public-export-compatibility.js +0 -33
  1227. package/packages/core/public-surface-audit.js +0 -273
  1228. package/packages/core/public-surface-cli.js +0 -128
  1229. package/packages/core/publication-artifact-candidate.js +0 -128
  1230. package/packages/core/publication-artifact.js +0 -641
  1231. package/packages/core/publication-authority.js +0 -1163
  1232. package/packages/core/publication-development.js +0 -72
  1233. package/packages/core/publication-package.js +0 -252
  1234. package/packages/core/publication-rehearsal-capsule.js +0 -468
  1235. package/packages/core/publication-rehearsal-projection.js +0 -104
  1236. package/packages/core/publication-rehearsal-runtime.js +0 -190
  1237. package/packages/core/publication-rehearsal.js +0 -481
  1238. package/packages/core/publication-reproducibility.js +0 -947
  1239. package/packages/core/published-delivery-authority.js +0 -266
  1240. package/packages/core/readme-badges.js +0 -893
  1241. package/packages/core/release-activation-shadow.js +0 -32
  1242. package/packages/core/release-blocker-priority.js +0 -192
  1243. package/packages/core/release-candidate-recovery.js +0 -595
  1244. package/packages/core/release-candidate.js +0 -591
  1245. package/packages/core/release-invocation.js +0 -64
  1246. package/packages/core/release-line-bootstrap.js +0 -297
  1247. package/packages/core/release-line-dry-run.js +0 -303
  1248. package/packages/core/release-passport-contract.js +0 -479
  1249. package/packages/core/release-passport.js +0 -2884
  1250. package/packages/core/release-tail-compatibility.js +0 -60
  1251. package/packages/core/release-tail-provider-adapters.js +0 -461
  1252. package/packages/core/release-tail-provider-plane.js +0 -248
  1253. package/packages/core/runtime-ref-resume-authority.js +0 -621
  1254. package/packages/core/runtime-selector-persistence.js +0 -228
  1255. package/packages/core/stable-publication-fence.js +0 -28
  1256. package/packages/core/stage-capsule-local-store.js +0 -428
  1257. package/packages/core/stage-capsule-qualification-campaign.js +0 -511
  1258. package/packages/core/stage-capsule-qualification.js +0 -455
  1259. package/packages/core/stage-capsule-resume-planner.js +0 -397
  1260. package/packages/core/stage-capsule-store.js +0 -404
  1261. package/packages/core/stage-capsule.js +0 -319
  1262. package/packages/core/tail-reseal-github.js +0 -178
  1263. package/packages/core/tail-reseal-receipt.js +0 -225
  1264. package/packages/core/tail-reseal.js +0 -594
  1265. package/packages/core/universal-workflow-bootstrap.js +0 -586
  1266. package/packages/core/web-surface-publication-candidate.js +0 -162
  1267. package/packages/core/workflow-yaml-contract.js +0 -342
  1268. package/scripts/aggregate-build-summary.mjs +0 -187
  1269. package/scripts/aggregate-diagnostics-summary.mjs +0 -54
  1270. package/scripts/anchored-version-material.mjs +0 -42
  1271. package/scripts/architecture.mjs +0 -610
  1272. package/scripts/artifact-relay-s3.mjs +0 -539
  1273. package/scripts/artifact-signing-controller-core.mjs +0 -525
  1274. package/scripts/artifact-signing-controller.mjs +0 -302
  1275. package/scripts/artifact-signing-delegation.mjs +0 -316
  1276. package/scripts/assemble-binary-release-admission.mjs +0 -213
  1277. package/scripts/assemble-publication-artifact-admission.mjs +0 -200
  1278. package/scripts/assemble-self-publication-admission.mjs +0 -201
  1279. package/scripts/assemble-web-surface-publication-admission.mjs +0 -204
  1280. package/scripts/audit-github-governance.mjs +0 -493
  1281. package/scripts/audit-publication-control-plane.mjs +0 -527
  1282. package/scripts/auditable-demo-bundle-verification.mjs +0 -148
  1283. package/scripts/auditable-demo-platform.mjs +0 -600
  1284. package/scripts/auditable-demo-presentation.mjs +0 -83
  1285. package/scripts/auditable-demo-renditions.mjs +0 -399
  1286. package/scripts/auditable-demo-transport-smoke.mjs +0 -176
  1287. package/scripts/auditable-demo.mjs +0 -1324
  1288. package/scripts/aws-codebuild-toolchain.mjs +0 -285
  1289. package/scripts/aws-macos-jit-controller-runtime.mjs +0 -82
  1290. package/scripts/aws-runner-burst-core.mjs +0 -248
  1291. package/scripts/aws-runner-burst.mjs +0 -79
  1292. package/scripts/aws-windows-jit-campaign.mjs +0 -202
  1293. package/scripts/aws-windows-jit-controller.mjs +0 -578
  1294. package/scripts/binary-publication-evidence.mjs +0 -133
  1295. package/scripts/bridge-bootstrap.mjs +0 -137
  1296. package/scripts/build-contract-core.mjs +0 -1216
  1297. package/scripts/buildchain-channel-router.mjs +0 -249
  1298. package/scripts/buildchain-cli-help.mjs +0 -321
  1299. package/scripts/buildchain-contract-lock.mjs +0 -184
  1300. package/scripts/buildchain-patrol.mjs +0 -280
  1301. package/scripts/compiler-cache-evidence.mjs +0 -304
  1302. package/scripts/consumer-policy.mjs +0 -231
  1303. package/scripts/controller-evidence.mjs +0 -208
  1304. package/scripts/copy-domain-wasm.mjs +0 -14
  1305. package/scripts/create-github-artifact-attestation-policy.mjs +0 -62
  1306. package/scripts/create-release-bundle.mjs +0 -167
  1307. package/scripts/cross-platform-adopter-qualification.mjs +0 -228
  1308. package/scripts/declarative-promotion-admission.mjs +0 -45
  1309. package/scripts/dev-alpha-candidate-patrol.mjs +0 -1197
  1310. package/scripts/dev-delivery-authority-command-adapters.mjs +0 -206
  1311. package/scripts/dev-delivery-authority-provider.mjs +0 -28
  1312. package/scripts/dev-delivery-authority.mjs +0 -490
  1313. package/scripts/dev-delivery-native-run.mjs +0 -177
  1314. package/scripts/dev-delivery-process-boundary.mjs +0 -260
  1315. package/scripts/dev-delivery-proof.mjs +0 -258
  1316. package/scripts/dev-delivery-provider-heartbeat.mjs +0 -215
  1317. package/scripts/dev-delivery-source-proof-replay.mjs +0 -153
  1318. package/scripts/dev-delivery-source-proof-reuse.mjs +0 -548
  1319. package/scripts/dev-delivery-two-phase-resume.mjs +0 -345
  1320. package/scripts/dev-delivery-two-phase.mjs +0 -573
  1321. package/scripts/dev-delivery-warrant-options.mjs +0 -298
  1322. package/scripts/dev-delivery-warrant-store.mjs +0 -316
  1323. package/scripts/dev-delivery-warrant-transition.mjs +0 -109
  1324. package/scripts/dev-delivery-warrant.mjs +0 -559
  1325. package/scripts/dev-merge-queue.mjs +0 -536
  1326. package/scripts/dev-pr-auto-merge.mjs +0 -1222
  1327. package/scripts/dev-pr-delivery-warrant.mjs +0 -467
  1328. package/scripts/dev-pr-prequeue-guard.mjs +0 -381
  1329. package/scripts/dev-qualification-patrol.mjs +0 -594
  1330. package/scripts/dispatch-artifact-signing-authority.mjs +0 -407
  1331. package/scripts/engineering-housekeeper-workflow.mjs +0 -401
  1332. package/scripts/ensure-github-release.mjs +0 -199
  1333. package/scripts/finalize-native-artifact-signing-result.mjs +0 -272
  1334. package/scripts/generate-channel-build-workflow.mjs +0 -69
  1335. package/scripts/generate-release-candidate-passport.mjs +0 -285
  1336. package/scripts/generate-universal-workflow-facades.mjs +0 -499
  1337. package/scripts/git-fetch-process-tree.mjs +0 -175
  1338. package/scripts/host-adapter.mjs +0 -182
  1339. package/scripts/implementation-references.mjs +0 -25
  1340. package/scripts/import-artifact-signing-results.mjs +0 -135
  1341. package/scripts/infra-contract-core.mjs +0 -1032
  1342. package/scripts/infra-contract.mjs +0 -345
  1343. package/scripts/init-repo.mjs +0 -518
  1344. package/scripts/inspect-artifact-signing-requests.mjs +0 -157
  1345. package/scripts/installer-publication.mjs +0 -361
  1346. package/scripts/lifecycle-substage-evidence.mjs +0 -274
  1347. package/scripts/locked-source-checkout.mjs +0 -595
  1348. package/scripts/materialize-artifact-signing-request.mjs +0 -66
  1349. package/scripts/merge-artifact-signing-results.mjs +0 -76
  1350. package/scripts/next-development-review.mjs +0 -331
  1351. package/scripts/next-development-transition.mjs +0 -47
  1352. package/scripts/npm-publish-dry-run.mjs +0 -182
  1353. package/scripts/npm-publish-transaction.mjs +0 -331
  1354. package/scripts/observed-evidence.mjs +0 -311
  1355. package/scripts/oci-compose-preview.mjs +0 -261
  1356. package/scripts/paper-agent-cli.mjs +0 -35
  1357. package/scripts/paper-work-fleet-cli.mjs +0 -594
  1358. package/scripts/paper.mjs +0 -644
  1359. package/scripts/product-publication-intent.mjs +0 -129
  1360. package/scripts/promotion-channel-router.mjs +0 -139
  1361. package/scripts/promotion-identity-resolver.mjs +0 -129
  1362. package/scripts/publication-artifact-candidate.mjs +0 -122
  1363. package/scripts/publication-artifact.mjs +0 -67
  1364. package/scripts/publication-candidate-kind.mjs +0 -93
  1365. package/scripts/publication-candidate-sealer.mjs +0 -119
  1366. package/scripts/publication-package.mjs +0 -38
  1367. package/scripts/publication-registry-hydrate.mjs +0 -216
  1368. package/scripts/publication-reproducibility.mjs +0 -62
  1369. package/scripts/publication-settlement.mjs +0 -217
  1370. package/scripts/publish-source-ref-resolver.mjs +0 -113
  1371. package/scripts/reconcile-github-governance.mjs +0 -689
  1372. package/scripts/reconcile-release-governance.mjs +0 -368
  1373. package/scripts/release-asset-client.mjs +0 -91
  1374. package/scripts/release-candidate-adapter.mjs +0 -41
  1375. package/scripts/release-candidate-anchor-provenance.mjs +0 -99
  1376. package/scripts/release-candidate-resolver.mjs +0 -842
  1377. package/scripts/release-finalization-review.mjs +0 -53
  1378. package/scripts/release-line-dry-run.mjs +0 -53
  1379. package/scripts/release-line-policy.mjs +0 -231
  1380. package/scripts/release-propagation.mjs +0 -411
  1381. package/scripts/release-tail.mjs +0 -178
  1382. package/scripts/release-transaction.mjs +0 -212
  1383. package/scripts/resolve-artifact-coordinates.mjs +0 -174
  1384. package/scripts/resolve-artifact-transfer-mode.mjs +0 -126
  1385. package/scripts/resolve-build-configuration.mjs +0 -105
  1386. package/scripts/resolve-build-contract.mjs +0 -96
  1387. package/scripts/resolve-publish-gate.mjs +0 -33
  1388. package/scripts/resolve-publish-source.mjs +0 -99
  1389. package/scripts/resume-from-candidate-run.mjs +0 -1117
  1390. package/scripts/route-offline-runners.mjs +0 -237
  1391. package/scripts/run-candidate-body-prefix-renderer.mjs +0 -187
  1392. package/scripts/run-lifecycle-core.mjs +0 -850
  1393. package/scripts/run-lifecycle.mjs +0 -56
  1394. package/scripts/runtime-ref-core.mjs +0 -171
  1395. package/scripts/seal-artifact-signing-requests.mjs +0 -431
  1396. package/scripts/seal-macos-credential-input.mjs +0 -135
  1397. package/scripts/shifu-gate-profile.mjs +0 -374
  1398. package/scripts/sign-detached-artifact-requests.mjs +0 -237
  1399. package/scripts/source-verification-evidence.mjs +0 -344
  1400. package/scripts/stable-candidate-patrol.mjs +0 -527
  1401. package/scripts/stable-candidate-policy.mjs +0 -25
  1402. package/scripts/stable-candidate-qualification.mjs +0 -358
  1403. package/scripts/stable-release-gate.mjs +0 -351
  1404. package/scripts/stage-capsule-qualification.mjs +0 -528
  1405. package/scripts/tail-reseal.mjs +0 -416
  1406. package/scripts/universal-facade-maintainability.mjs +0 -91
  1407. package/scripts/universal-workflow-backflow.mjs +0 -212
  1408. package/scripts/universal-workflow-engine.mjs +0 -620
  1409. package/scripts/universal-workflow-self-dogfood.mjs +0 -212
  1410. package/scripts/validate-package-manager-contract.mjs +0 -24
  1411. package/scripts/verify-artifact-signing-results.mjs +0 -124
  1412. package/scripts/verify-publish-channel-ref.mjs +0 -125
  1413. package/scripts/verify-publish-source-lock.mjs +0 -37
  1414. package/scripts/verify-release-pr.mjs +0 -34
  1415. package/scripts/verify-version-state-delta.mjs +0 -175
  1416. package/scripts/verify-web-surface-publication-capability.mjs +0 -78
  1417. package/scripts/web-surface-core.mjs +0 -2603
  1418. package/scripts/web-surface-production-decision.mjs +0 -158
  1419. package/scripts/web-surface-production-release-pr.mjs +0 -712
  1420. package/scripts/web-surface-release-feedback.mjs +0 -358
  1421. package/scripts/web-surface-release-pr-review.mjs +0 -187
  1422. package/scripts/web-surface.mjs +0 -460
  1423. package/scripts/workflow-call-contract.mjs +0 -133
  1424. package/scripts/workflow-friction-report.mjs +0 -375
  1425. package/scripts/workflow-taxonomy.mjs +0 -507
  1426. package/templates/universal-buildchain-bootstrap-recovery.yml +0 -282
  1427. /package/actions/{macos-credential-island → build/credential/macos-island}/README.md +0 -0
  1428. /package/actions/{release-candidate-promote → release/promotion/candidate}/README.md +0 -0
  1429. /package/actions/{release-tail → release/tail/settle}/README.md +0 -0
  1430. /package/packages/core/{adopter-delivery-gate.js → adoption/adopter-delivery-gate.js} +0 -0
  1431. /package/packages/core/{adopter-delivery-json.js → adoption/adopter-delivery-json.js} +0 -0
  1432. /package/packages/core/{adopter-delivery-passport.js → adoption/adopter-delivery-passport.js} +0 -0
  1433. /package/packages/core/{adopter-delivery-vectors.js → adoption/adopter-delivery-vectors.js} +0 -0
  1434. /package/packages/core/{adopter-delivery-vectors.json → adoption/adopter-delivery-vectors.json} +0 -0
  1435. /package/packages/core/{buildchain-agent-manuals.js → adoption/buildchain-agent-manuals.js} +0 -0
  1436. /package/packages/core/{kfd-adopter-category-driver.js → adoption/kfd-adopter-category-driver.js} +0 -0
  1437. /package/packages/core/{kfd-adopter-manifest.js → adoption/kfd-adopter-manifest.js} +0 -0
  1438. /package/packages/core/{kfd-gate.js → adoption/kfd-gate.js} +0 -0
  1439. /package/packages/core/{kfd-product-gates.js → adoption/kfd-product-gates.js} +0 -0
  1440. /package/packages/core/{artifact-signing-result.js → build/artifact-signing-result.js} +0 -0
  1441. /package/packages/core/{build-configuration.js → build/build-configuration.js} +0 -0
  1442. /package/{scripts → packages/core/build/commands}/resolve-artifact-signing-upload-route.mjs +0 -0
  1443. /package/packages/core/{detached-artifact-signature.js → build/detached-artifact-signature.js} +0 -0
  1444. /package/{scripts/gate-profile-core.mjs → packages/core/build/gate/contracts.js} +0 -0
  1445. /package/packages/core/{portable-dev-cache.js → build/portable-dev-cache.js} +0 -0
  1446. /package/packages/core/{buildchain-channel-identity.js → consumer/buildchain-channel-identity.js} +0 -0
  1447. /package/packages/core/{buildchain-layout.js → contracts/buildchain-layout.js} +0 -0
  1448. /package/{bin/internal → packages/core/contracts}/command-registry.mjs +0 -0
  1449. /package/packages/core/{kungfu-temporal-fact.js → contracts/kungfu-temporal-fact.js} +0 -0
  1450. /package/packages/core/{surface-manifest.js → contracts/surface-manifest.js} +0 -0
  1451. /package/packages/core/{workflow-call-contract.js → contracts/workflow-call-contract.js} +0 -0
  1452. /package/{scripts → packages/core/dev-delivery/commands}/project-cut-merge-queue-admission.mjs +0 -0
  1453. /package/packages/core/{dev-delivery-authority-evidence.js → dev-delivery/dev-delivery-authority-evidence.js} +0 -0
  1454. /package/packages/core/{dev-delivery-authority-observation.js → dev-delivery/dev-delivery-authority-observation.js} +0 -0
  1455. /package/packages/core/{dev-delivery-authority-qualification.js → dev-delivery/dev-delivery-authority-qualification.js} +0 -0
  1456. /package/packages/core/{dev-delivery-authority-settlement.js → dev-delivery/dev-delivery-authority-settlement.js} +0 -0
  1457. /package/packages/core/{dev-delivery-common.js → dev-delivery/dev-delivery-common.js} +0 -0
  1458. /package/packages/core/{dev-delivery-execution-failure.js → dev-delivery/dev-delivery-execution-failure.js} +0 -0
  1459. /package/packages/core/{dev-delivery-landing-admission-core.js → dev-delivery/dev-delivery-landing-admission-core.js} +0 -0
  1460. /package/packages/core/{dev-delivery-landing-readback.js → dev-delivery/dev-delivery-landing-readback.js} +0 -0
  1461. /package/packages/core/{dev-delivery-landing-terminal-evidence.js → dev-delivery/dev-delivery-landing-terminal-evidence.js} +0 -0
  1462. /package/packages/core/{dev-delivery-landing-testing-port.js → dev-delivery/dev-delivery-landing-testing-port.js} +0 -0
  1463. /package/packages/core/{dev-delivery-native-execution.js → dev-delivery/dev-delivery-native-execution.js} +0 -0
  1464. /package/packages/core/{dev-delivery-process-boundary.js → dev-delivery/dev-delivery-process-boundary.js} +0 -0
  1465. /package/packages/core/{dev-delivery-provider-attempt.js → dev-delivery/dev-delivery-provider-attempt.js} +0 -0
  1466. /package/packages/core/{dev-delivery-provider-heartbeat.js → dev-delivery/dev-delivery-provider-heartbeat.js} +0 -0
  1467. /package/packages/core/{dev-delivery-warrant-cancellation.js → dev-delivery/dev-delivery-warrant-cancellation.js} +0 -0
  1468. /package/packages/core/{dev-delivery-warrant-qualification.js → dev-delivery/dev-delivery-warrant-qualification.js} +0 -0
  1469. /package/packages/core/{dev-delivery-warrant-settlement.js → dev-delivery/dev-delivery-warrant-settlement.js} +0 -0
  1470. /package/packages/core/{dev-delivery-writer-protocol-transition.js → dev-delivery/dev-delivery-writer-protocol-transition.js} +0 -0
  1471. /package/packages/core/{engineering-housekeeper-github-client.js → governance/engineering-housekeeper-github-client.js} +0 -0
  1472. /package/packages/core/{engineering-housekeeper-github.js → governance/engineering-housekeeper-github.js} +0 -0
  1473. /package/packages/core/{engineering-housekeeper.js → governance/engineering-housekeeper.js} +0 -0
  1474. /package/packages/core/{issue-reporting.js → governance/issue-reporting.js} +0 -0
  1475. /package/packages/core/{cache-evidence.js → observability/cache-evidence.js} +0 -0
  1476. /package/packages/core/{candidate-timeline.js → observability/candidate-timeline.js} +0 -0
  1477. /package/packages/core/{logging.js → observability/logging.js} +0 -0
  1478. /package/packages/core/{paper-work.js → paper/paper-work.js} +0 -0
  1479. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-controller-core.mjs +0 -0
  1480. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-controller.mjs +0 -0
  1481. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-core.mjs +0 -0
  1482. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-job-controller.mjs +0 -0
  1483. /package/{scripts → packages/core/providers/commands}/aws-macos-jit.mjs +0 -0
  1484. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-campaign-core.mjs +0 -0
  1485. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-controller-core.mjs +0 -0
  1486. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-core.mjs +0 -0
  1487. /package/{scripts → packages/core/providers/commands}/aws-windows-jit.mjs +0 -0
  1488. /package/{scripts → packages/core/providers/commands}/github-output.mjs +0 -0
  1489. /package/packages/core/{oci-publication-graph.js → publication/oci-publication-graph.js} +0 -0
  1490. /package/packages/core/{publication-control-plane-audit.js → publication/publication-control-plane-audit.js} +0 -0
  1491. /package/packages/core/{publication-qualification.js → publication/publication-qualification.js} +0 -0
  1492. /package/packages/core/{publication-rehearsal-provider-bindings.js → publication/publication-rehearsal-provider-bindings.js} +0 -0
  1493. /package/packages/core/{publication-sealed-bundle.js → publication/publication-sealed-bundle.js} +0 -0
  1494. /package/packages/core/{channel-candidate.js → release/channel-candidate.js} +0 -0
  1495. /package/packages/core/{channel-promotion-baseline.js → release/channel-promotion-baseline.js} +0 -0
  1496. /package/{scripts → packages/core/release/commands}/promotion-routing-evidence.mjs +0 -0
  1497. /package/packages/core/{dev-alpha-candidate-selection.js → release/dev-alpha-candidate-selection.js} +0 -0
  1498. /package/packages/core/{next-development-candidate-reservation.js → release/next-development-candidate-reservation.js} +0 -0
  1499. /package/packages/core/{next-development-controller.js → release/next-development-controller.js} +0 -0
  1500. /package/packages/core/{publish-transaction.js → release/publish-transaction.js} +0 -0
  1501. /package/packages/core/{release-activation-transaction.js → release/release-activation-transaction.js} +0 -0
  1502. /package/packages/core/{release-propagation-agent-entry.js → release/release-propagation-agent-entry.js} +0 -0
  1503. /package/packages/core/{release-propagation-capture.js → release/release-propagation-capture.js} +0 -0
  1504. /package/packages/core/{release-propagation-common.js → release/release-propagation-common.js} +0 -0
  1505. /package/packages/core/{release-propagation-execution-profile.js → release/release-propagation-execution-profile.js} +0 -0
  1506. /package/packages/core/{release-propagation-pickup.js → release/release-propagation-pickup.js} +0 -0
  1507. /package/packages/core/{release-propagation-push.js → release/release-propagation-push.js} +0 -0
  1508. /package/packages/core/{release-propagation-release.js → release/release-propagation-release.js} +0 -0
  1509. /package/packages/core/{release-propagation-stage-evidence.js → release/release-propagation-stage-evidence.js} +0 -0
  1510. /package/packages/core/{release-propagation-work-capture.js → release/release-propagation-work-capture.js} +0 -0
  1511. /package/packages/core/{release-propagation-work-constants.js → release/release-propagation-work-constants.js} +0 -0
  1512. /package/packages/core/{release-propagation-work-control.js → release/release-propagation-work-control.js} +0 -0
  1513. /package/packages/core/{release-propagation-work-transitions.js → release/release-propagation-work-transitions.js} +0 -0
  1514. /package/packages/core/{release-propagation-work.js → release/release-propagation-work.js} +0 -0
  1515. /package/packages/core/{release-propagation.js → release/release-propagation.js} +0 -0
  1516. /package/packages/core/{release-tail-product-capabilities.js → release/release-tail-product-capabilities.js} +0 -0
  1517. /package/packages/core/{release-train.js → release/release-train.js} +0 -0
  1518. /package/packages/core/{self-dogfood-version.js → release/self-dogfood-version.js} +0 -0
  1519. /package/packages/core/{stable-candidate-ledger.js → release/stable-candidate-ledger.js} +0 -0
  1520. /package/packages/core/{stable-release-gate.js → release/stable-release-gate.js} +0 -0
  1521. /package/packages/core/{tail-reseal-contract.js → release/tail-reseal-contract.js} +0 -0
  1522. /package/packages/core/{domain-wasm.js → runtime/domain-wasm.js} +0 -0
  1523. /package/packages/core/{spawn-command.js → runtime/spawn-command.js} +0 -0
  1524. /package/packages/core/{badges.js → web/badges.js} +0 -0
  1525. /package/{scripts → packages/core/web/commands}/web-surface-cloudfront-rewrite.mjs +0 -0
  1526. /package/{scripts → packages/core/web/commands}/web-surface-immutable-object.mjs +0 -0
  1527. /package/{scripts → packages/core/web/commands}/web-surface-routing.mjs +0 -0
@@ -185,557 +185,553 @@
185
185
  },
186
186
  "declarations": [
187
187
  {
188
- "laneId": ".github/workflows/.release-candidate-promote.yml#qualify",
188
+ "laneId": ".github/workflows/.build-demo-adapter.yml#gate",
189
189
  "authorityClass": "evidence",
190
190
  "triggerClass": "reusable",
191
191
  "concurrencyPolicy": {
192
- "mode": "serialized",
192
+ "mode": "ref-scoped",
193
193
  "cancelInProgress": false
194
194
  },
195
- "expectedRunnerMinutes": 30,
195
+ "expectedRunnerMinutes": 20,
196
196
  "cancellationBehavior": "finish-started",
197
197
  "sloImpact": {
198
198
  "mergeCritical": false,
199
- "metric": "protected release qualification latency",
199
+ "metric": "capability execution budget",
200
200
  "expectedContributionSeconds": 0,
201
- "rationale": "QUALIFY is the read-only exact-runtime and sealed-candidate admission boundary."
201
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
202
202
  }
203
203
  },
204
204
  {
205
- "laneId": ".github/workflows/.release-candidate-promote.yml#apply",
206
- "authorityClass": "release",
205
+ "laneId": ".github/workflows/.build-demo-adapter.yml#render",
206
+ "authorityClass": "evidence",
207
207
  "triggerClass": "reusable",
208
208
  "concurrencyPolicy": {
209
- "mode": "serialized",
209
+ "mode": "ref-scoped",
210
210
  "cancelInProgress": false
211
211
  },
212
- "expectedRunnerMinutes": 30,
212
+ "expectedRunnerMinutes": 40,
213
213
  "cancellationBehavior": "finish-started",
214
214
  "sloImpact": {
215
215
  "mergeCritical": false,
216
- "metric": "protected release APPLY latency",
216
+ "metric": "capability execution budget",
217
217
  "expectedContributionSeconds": 0,
218
- "rationale": "APPLY is the sole contents-write and provider-mutation OIDC authority boundary."
218
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
219
219
  }
220
220
  },
221
221
  {
222
- "laneId": ".github/workflows/.release-candidate-promote.yml#settle",
222
+ "laneId": ".github/workflows/.build-gate-profile.yml#aggregate",
223
223
  "authorityClass": "evidence",
224
224
  "triggerClass": "reusable",
225
225
  "concurrencyPolicy": {
226
- "mode": "serialized",
226
+ "mode": "none",
227
227
  "cancelInProgress": false
228
228
  },
229
- "expectedRunnerMinutes": 10,
230
- "cancellationBehavior": "finish-started",
229
+ "expectedRunnerMinutes": 360,
230
+ "cancellationBehavior": "provider-default",
231
231
  "sloImpact": {
232
232
  "mergeCritical": false,
233
- "metric": "terminal receipt projection latency",
233
+ "metric": "capability execution budget",
234
234
  "expectedContributionSeconds": 0,
235
- "rationale": "SETTLE verifies and projects the already durable terminal ReleaseReceipt without mutation authority."
235
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
236
236
  }
237
237
  },
238
238
  {
239
- "laneId": ".github/workflows/buildchain-ref-promotion-recovery.yml#resume",
240
- "authorityClass": "release",
241
- "triggerClass": "manual",
239
+ "laneId": ".github/workflows/.build-gate-profile.yml#plan",
240
+ "authorityClass": "evidence",
241
+ "triggerClass": "reusable",
242
242
  "concurrencyPolicy": {
243
243
  "mode": "none",
244
244
  "cancelInProgress": false
245
245
  },
246
- "expectedRunnerMinutes": 35,
247
- "cancellationBehavior": "finish-started",
246
+ "expectedRunnerMinutes": 360,
247
+ "cancellationBehavior": "provider-default",
248
248
  "sloImpact": {
249
249
  "mergeCritical": false,
250
- "metric": "manual recovery adapter latency",
250
+ "metric": "capability execution budget",
251
251
  "expectedContributionSeconds": 0,
252
- "rationale": "The recovery surface is a one-way adapter into the same canonical publisher."
252
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
253
253
  }
254
254
  },
255
255
  {
256
- "laneId": ".github/workflows/buildchain-ref-promotion.yml#classify-workflow-run",
256
+ "laneId": ".github/workflows/.build-gate-profile.yml#run-gates",
257
257
  "authorityClass": "evidence",
258
- "triggerClass": "mixed",
258
+ "triggerClass": "reusable",
259
259
  "concurrencyPolicy": {
260
260
  "mode": "none",
261
261
  "cancelInProgress": false
262
262
  },
263
- "expectedRunnerMinutes": 2,
264
- "cancellationBehavior": "finish-started",
263
+ "expectedRunnerMinutes": 360,
264
+ "cancellationBehavior": "provider-default",
265
265
  "sloImpact": {
266
266
  "mergeCritical": false,
267
- "metric": "Alpha finalization classification latency",
267
+ "metric": "capability execution budget",
268
268
  "expectedContributionSeconds": 0,
269
- "rationale": "The read-only classifier binds the verified head to exact product state before suppressing a duplicate publication transaction."
269
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
270
270
  }
271
271
  },
272
272
  {
273
- "laneId": ".github/workflows/buildchain-ref-promotion.yml#promote",
274
- "authorityClass": "release",
275
- "triggerClass": "mixed",
273
+ "laneId": ".github/workflows/.build.yml#attest",
274
+ "authorityClass": "evidence",
275
+ "triggerClass": "reusable",
276
276
  "concurrencyPolicy": {
277
277
  "mode": "none",
278
278
  "cancelInProgress": false
279
279
  },
280
- "expectedRunnerMinutes": 35,
280
+ "expectedRunnerMinutes": 15,
281
281
  "cancellationBehavior": "finish-started",
282
282
  "sloImpact": {
283
283
  "mergeCritical": false,
284
- "metric": "Buildchain alpha promotion adapter latency",
284
+ "metric": "build orchestration latency",
285
285
  "expectedContributionSeconds": 0,
286
- "rationale": "The Buildchain-owned alpha entry delegates to the single v4 publisher."
286
+ "rationale": "Attest only the verified final artifact identity."
287
287
  }
288
288
  },
289
289
  {
290
- "laneId": ".github/workflows/buildchain-ref-promotion.yml#universal-bootstrap",
291
- "authorityClass": "governed-delegation",
292
- "triggerClass": "mixed",
290
+ "laneId": ".github/workflows/.build.yml#build-container",
291
+ "authorityClass": "evidence",
292
+ "triggerClass": "reusable",
293
293
  "concurrencyPolicy": {
294
294
  "mode": "none",
295
295
  "cancelInProgress": false
296
296
  },
297
- "expectedRunnerMinutes": 60,
297
+ "expectedRunnerMinutes": 180,
298
298
  "cancellationBehavior": "finish-started",
299
299
  "sloImpact": {
300
300
  "mergeCritical": false,
301
- "metric": "canonical exact-candidate self-promotion latency",
301
+ "metric": "build orchestration latency",
302
302
  "expectedContributionSeconds": 0,
303
- "rationale": "The canonical publisher delegates one closed request to the exact reviewed candidate and keeps the compatibility path mutually exclusive."
303
+ "rationale": "Run ordered project stages on the governed Linux container."
304
304
  }
305
305
  },
306
306
  {
307
- "laneId": ".github/workflows/release-candidate-promote.yml#invoke",
308
- "authorityClass": "release",
307
+ "laneId": ".github/workflows/.build.yml#deliver",
308
+ "authorityClass": "evidence",
309
309
  "triggerClass": "reusable",
310
310
  "concurrencyPolicy": {
311
311
  "mode": "none",
312
312
  "cancelInProgress": false
313
313
  },
314
- "expectedRunnerMinutes": 35,
314
+ "expectedRunnerMinutes": 15,
315
315
  "cancellationBehavior": "finish-started",
316
316
  "sloImpact": {
317
317
  "mergeCritical": false,
318
- "metric": "public promotion adapter latency",
318
+ "metric": "build orchestration latency",
319
319
  "expectedContributionSeconds": 0,
320
- "rationale": "The public compatibility surface resolves discovery facts and invokes one fixed v4 publisher."
320
+ "rationale": "Verify every required producer and publish rooted final references."
321
321
  }
322
322
  },
323
323
  {
324
- "laneId": ".github/workflows/v4-declarative-release-tail-dogfood.yml#publish",
325
- "authorityClass": "release",
326
- "triggerClass": "manual",
324
+ "laneId": ".github/workflows/.build.yml#plan",
325
+ "authorityClass": "evidence",
326
+ "triggerClass": "reusable",
327
327
  "concurrencyPolicy": {
328
328
  "mode": "none",
329
329
  "cancelInProgress": false
330
330
  },
331
- "expectedRunnerMinutes": 35,
331
+ "expectedRunnerMinutes": 10,
332
332
  "cancellationBehavior": "finish-started",
333
333
  "sloImpact": {
334
334
  "mergeCritical": false,
335
- "metric": "manual dogfood release completion latency",
335
+ "metric": "build orchestration latency",
336
336
  "expectedContributionSeconds": 0,
337
- "rationale": "The explicit dogfood run proves hosted provider publication and checkpoint resume without joining pull-request checks."
337
+ "rationale": "Admit the source and runtime and resolve the read-only project plan."
338
338
  }
339
339
  },
340
340
  {
341
- "laneId": ".github/workflows/v4-adopter-delivery.yml#qualification",
342
- "authorityClass": "evidence",
343
- "triggerClass": "mixed",
341
+ "laneId": ".github/workflows/.build.yml#sign",
342
+ "authorityClass": "governed-delegation",
343
+ "triggerClass": "reusable",
344
344
  "concurrencyPolicy": {
345
345
  "mode": "none",
346
346
  "cancelInProgress": false
347
347
  },
348
- "expectedRunnerMinutes": 5,
348
+ "expectedRunnerMinutes": 180,
349
349
  "cancellationBehavior": "finish-started",
350
350
  "sloImpact": {
351
351
  "mergeCritical": false,
352
- "metric": "public adopter qualification completion latency",
352
+ "metric": "build orchestration latency",
353
353
  "expectedContributionSeconds": 0,
354
- "rationale": "The lane only reconciles already-produced rooted platform reports and grants no provider, release, or stable publication authority."
354
+ "rationale": "Keep detached signing and certificate instances separate from source execution."
355
355
  }
356
356
  },
357
357
  {
358
- "laneId": ".github/workflows/bootstrap.yml#admit",
358
+ "laneId": ".github/workflows/.ops-git-sync.yml#sync",
359
359
  "authorityClass": "evidence",
360
360
  "triggerClass": "reusable",
361
361
  "concurrencyPolicy": {
362
362
  "mode": "none",
363
363
  "cancelInProgress": false
364
364
  },
365
- "expectedRunnerMinutes": 10,
366
- "cancellationBehavior": "finish-started",
365
+ "expectedRunnerMinutes": 360,
366
+ "cancellationBehavior": "provider-default",
367
367
  "sloImpact": {
368
368
  "mergeCritical": false,
369
- "metric": "exact-candidate admission latency",
369
+ "metric": "capability execution budget",
370
370
  "expectedContributionSeconds": 0,
371
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
371
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
372
372
  }
373
373
  },
374
374
  {
375
- "laneId": ".github/workflows/bootstrap.yml#execute",
376
- "authorityClass": "governed-delegation",
375
+ "laneId": ".github/workflows/.release-authority.yml#verify",
376
+ "authorityClass": "release",
377
377
  "triggerClass": "reusable",
378
378
  "concurrencyPolicy": {
379
379
  "mode": "none",
380
380
  "cancelInProgress": false
381
381
  },
382
- "expectedRunnerMinutes": 60,
383
- "cancellationBehavior": "finish-started",
382
+ "expectedRunnerMinutes": 360,
383
+ "cancellationBehavior": "provider-default",
384
384
  "sloImpact": {
385
385
  "mergeCritical": false,
386
- "metric": "exact-candidate execution latency",
386
+ "metric": "capability execution budget",
387
387
  "expectedContributionSeconds": 0,
388
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
388
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
389
389
  }
390
390
  },
391
391
  {
392
- "laneId": ".github/workflows/bootstrap.yml#settle",
393
- "authorityClass": "evidence",
392
+ "laneId": ".github/workflows/.release-binary-assets.yml#publication-authority",
393
+ "authorityClass": "governed-delegation",
394
394
  "triggerClass": "reusable",
395
395
  "concurrencyPolicy": {
396
396
  "mode": "none",
397
397
  "cancelInProgress": false
398
398
  },
399
- "expectedRunnerMinutes": 10,
400
- "cancellationBehavior": "finish-started",
399
+ "expectedRunnerMinutes": 360,
400
+ "cancellationBehavior": "provider-default",
401
401
  "sloImpact": {
402
402
  "mergeCritical": false,
403
- "metric": "universal terminal settlement latency",
403
+ "metric": "capability execution budget",
404
404
  "expectedContributionSeconds": 0,
405
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
405
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
406
406
  }
407
407
  },
408
408
  {
409
- "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-admit",
410
- "authorityClass": "evidence",
409
+ "laneId": ".github/workflows/.release-binary-assets.yml#publish",
410
+ "authorityClass": "release",
411
411
  "triggerClass": "reusable",
412
412
  "concurrencyPolicy": {
413
413
  "mode": "none",
414
414
  "cancelInProgress": false
415
415
  },
416
- "expectedRunnerMinutes": 10,
417
- "cancellationBehavior": "finish-started",
416
+ "expectedRunnerMinutes": 360,
417
+ "cancellationBehavior": "provider-default",
418
418
  "sloImpact": {
419
419
  "mergeCritical": false,
420
- "metric": "consumer-owned exact-candidate admission latency",
420
+ "metric": "capability execution budget",
421
421
  "expectedContributionSeconds": 0,
422
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
422
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
423
423
  }
424
424
  },
425
425
  {
426
- "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-execute",
427
- "authorityClass": "governed-delegation",
426
+ "laneId": ".github/workflows/.release-promote.yml#apply",
427
+ "authorityClass": "release",
428
428
  "triggerClass": "reusable",
429
429
  "concurrencyPolicy": {
430
- "mode": "none",
430
+ "mode": "serialized",
431
431
  "cancelInProgress": false
432
432
  },
433
- "expectedRunnerMinutes": 60,
433
+ "expectedRunnerMinutes": 30,
434
434
  "cancellationBehavior": "finish-started",
435
435
  "sloImpact": {
436
436
  "mergeCritical": false,
437
- "metric": "consumer-owned exact-candidate execution latency",
437
+ "metric": "protected release APPLY latency",
438
438
  "expectedContributionSeconds": 0,
439
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
439
+ "rationale": "APPLY is the sole contents-write and provider-mutation OIDC authority boundary."
440
440
  }
441
441
  },
442
442
  {
443
- "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-settle",
443
+ "laneId": ".github/workflows/.release-promote.yml#qualify",
444
444
  "authorityClass": "evidence",
445
445
  "triggerClass": "reusable",
446
446
  "concurrencyPolicy": {
447
- "mode": "none",
447
+ "mode": "serialized",
448
448
  "cancelInProgress": false
449
449
  },
450
- "expectedRunnerMinutes": 10,
450
+ "expectedRunnerMinutes": 30,
451
451
  "cancellationBehavior": "finish-started",
452
452
  "sloImpact": {
453
453
  "mergeCritical": false,
454
- "metric": "consumer-owned terminal settlement latency",
454
+ "metric": "protected release qualification latency",
455
455
  "expectedContributionSeconds": 0,
456
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
456
+ "rationale": "QUALIFY is the read-only exact-runtime and sealed-candidate admission boundary."
457
457
  }
458
458
  },
459
459
  {
460
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#prepare",
460
+ "laneId": ".github/workflows/.release-promote.yml#settle",
461
461
  "authorityClass": "evidence",
462
- "triggerClass": "mixed",
462
+ "triggerClass": "reusable",
463
463
  "concurrencyPolicy": {
464
- "mode": "none",
464
+ "mode": "serialized",
465
465
  "cancelInProgress": false
466
466
  },
467
467
  "expectedRunnerMinutes": 10,
468
468
  "cancellationBehavior": "finish-started",
469
469
  "sloImpact": {
470
470
  "mergeCritical": false,
471
- "metric": "Train-first self-dogfood admission latency",
471
+ "metric": "terminal receipt projection latency",
472
472
  "expectedContributionSeconds": 0,
473
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
473
+ "rationale": "SETTLE verifies and projects the already durable terminal ReleaseReceipt without mutation authority."
474
474
  }
475
475
  },
476
476
  {
477
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-conformance",
477
+ "laneId": ".github/workflows/build.yml#build",
478
478
  "authorityClass": "governed-delegation",
479
- "triggerClass": "mixed",
479
+ "triggerClass": "reusable",
480
480
  "concurrencyPolicy": {
481
481
  "mode": "none",
482
482
  "cancelInProgress": false
483
483
  },
484
- "expectedRunnerMinutes": 60,
484
+ "expectedRunnerMinutes": 120,
485
485
  "cancellationBehavior": "finish-started",
486
486
  "sloImpact": {
487
487
  "mergeCritical": false,
488
- "metric": "Train-first exact-candidate self-dogfood latency",
488
+ "metric": "configured build planning and execution latency",
489
489
  "expectedContributionSeconds": 0,
490
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
490
+ "rationale": "The public facade delegates once to the backbone; no additional build or controller runs."
491
491
  }
492
492
  },
493
493
  {
494
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-conformance",
495
- "authorityClass": "governed-delegation",
494
+ "laneId": ".github/workflows/public-build-adopter-qualification.yml#conformance",
495
+ "authorityClass": "evidence",
496
496
  "triggerClass": "mixed",
497
497
  "concurrencyPolicy": {
498
498
  "mode": "none",
499
499
  "cancelInProgress": false
500
500
  },
501
- "expectedRunnerMinutes": 60,
502
- "cancellationBehavior": "finish-started",
501
+ "expectedRunnerMinutes": 360,
502
+ "cancellationBehavior": "provider-default",
503
503
  "sloImpact": {
504
504
  "mergeCritical": false,
505
- "metric": "Train-first exact-candidate self-dogfood latency",
505
+ "metric": "capability execution budget",
506
506
  "expectedContributionSeconds": 0,
507
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
507
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
508
508
  }
509
509
  },
510
510
  {
511
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-alpha",
512
- "authorityClass": "governed-delegation",
511
+ "laneId": ".github/workflows/public-build-adopter-qualification.yml#consumer-admission",
512
+ "authorityClass": "evidence",
513
513
  "triggerClass": "mixed",
514
514
  "concurrencyPolicy": {
515
515
  "mode": "none",
516
516
  "cancelInProgress": false
517
517
  },
518
- "expectedRunnerMinutes": 60,
519
- "cancellationBehavior": "finish-started",
518
+ "expectedRunnerMinutes": 360,
519
+ "cancellationBehavior": "provider-default",
520
520
  "sloImpact": {
521
521
  "mergeCritical": false,
522
- "metric": "Train-first exact-candidate self-dogfood latency",
522
+ "metric": "capability execution budget",
523
523
  "expectedContributionSeconds": 0,
524
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
524
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
525
525
  }
526
526
  },
527
527
  {
528
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-alpha",
529
- "authorityClass": "governed-delegation",
528
+ "laneId": ".github/workflows/public-build-adopter-qualification.yml#qualification",
529
+ "authorityClass": "evidence",
530
530
  "triggerClass": "mixed",
531
531
  "concurrencyPolicy": {
532
532
  "mode": "none",
533
533
  "cancelInProgress": false
534
534
  },
535
- "expectedRunnerMinutes": 60,
535
+ "expectedRunnerMinutes": 5,
536
536
  "cancellationBehavior": "finish-started",
537
537
  "sloImpact": {
538
538
  "mergeCritical": false,
539
- "metric": "Train-first exact-candidate self-dogfood latency",
539
+ "metric": "public adopter qualification completion latency",
540
540
  "expectedContributionSeconds": 0,
541
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
541
+ "rationale": "The lane only reconciles already-produced rooted platform reports and grants no provider, release, or stable publication authority."
542
542
  }
543
543
  },
544
544
  {
545
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-stable",
546
- "authorityClass": "governed-delegation",
547
- "triggerClass": "mixed",
545
+ "laneId": ".github/workflows/public-build-check.yml#check",
546
+ "authorityClass": "evidence",
547
+ "triggerClass": "reusable",
548
548
  "concurrencyPolicy": {
549
549
  "mode": "none",
550
550
  "cancelInProgress": false
551
551
  },
552
- "expectedRunnerMinutes": 60,
553
- "cancellationBehavior": "finish-started",
552
+ "expectedRunnerMinutes": 360,
553
+ "cancellationBehavior": "provider-default",
554
554
  "sloImpact": {
555
555
  "mergeCritical": false,
556
- "metric": "Train-first exact-candidate self-dogfood latency",
556
+ "metric": "capability execution budget",
557
557
  "expectedContributionSeconds": 0,
558
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
558
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
559
559
  }
560
560
  },
561
561
  {
562
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-stable",
563
- "authorityClass": "governed-delegation",
564
- "triggerClass": "mixed",
562
+ "laneId": ".github/workflows/public-build-demo.yml#capture",
563
+ "authorityClass": "evidence",
564
+ "triggerClass": "reusable",
565
565
  "concurrencyPolicy": {
566
- "mode": "none",
566
+ "mode": "ref-scoped",
567
567
  "cancelInProgress": false
568
568
  },
569
- "expectedRunnerMinutes": 60,
569
+ "expectedRunnerMinutes": 20,
570
570
  "cancellationBehavior": "finish-started",
571
571
  "sloImpact": {
572
572
  "mergeCritical": false,
573
- "metric": "Train-first exact-candidate self-dogfood latency",
573
+ "metric": "capability execution budget",
574
574
  "expectedContributionSeconds": 0,
575
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
575
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
576
576
  }
577
577
  },
578
578
  {
579
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#reconcile",
579
+ "laneId": ".github/workflows/public-build-demo.yml#publish",
580
580
  "authorityClass": "evidence",
581
- "triggerClass": "mixed",
581
+ "triggerClass": "reusable",
582
582
  "concurrencyPolicy": {
583
- "mode": "none",
583
+ "mode": "ref-scoped",
584
584
  "cancelInProgress": false
585
585
  },
586
- "expectedRunnerMinutes": 10,
586
+ "expectedRunnerMinutes": 15,
587
587
  "cancellationBehavior": "finish-started",
588
588
  "sloImpact": {
589
589
  "mergeCritical": false,
590
- "metric": "primary and recovery equivalence latency",
590
+ "metric": "capability execution budget",
591
591
  "expectedContributionSeconds": 0,
592
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
592
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
593
593
  }
594
594
  },
595
595
  {
596
- "laneId": ".github/workflows/self-release-next-development.yml#review",
597
- "authorityClass": "merge-critical-admission",
598
- "triggerClass": "mixed",
596
+ "laneId": ".github/workflows/public-build-demo.yml#qualify",
597
+ "authorityClass": "evidence",
598
+ "triggerClass": "reusable",
599
599
  "concurrencyPolicy": {
600
600
  "mode": "ref-scoped",
601
601
  "cancelInProgress": false
602
602
  },
603
- "expectedRunnerMinutes": 3,
603
+ "expectedRunnerMinutes": 120,
604
604
  "cancellationBehavior": "finish-started",
605
605
  "sloImpact": {
606
- "mergeCritical": true,
607
- "metric": "generated next-development independent review latency",
608
- "expectedContributionSeconds": 180,
609
- "rationale": "Only successful same-repository version PRs regenerate from the protected base and read completed publication evidence; ordinary source PRs skip the lane. Native queue checks remain final merge authority."
606
+ "mergeCritical": false,
607
+ "metric": "capability execution budget",
608
+ "expectedContributionSeconds": 0,
609
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
610
610
  }
611
611
  },
612
612
  {
613
- "laneId": ".github/workflows/public-release-oci-compose-preview.yml#promote",
614
- "authorityClass": "release",
613
+ "laneId": ".github/workflows/public-build-publication.yml#publication",
614
+ "authorityClass": "evidence",
615
615
  "triggerClass": "reusable",
616
616
  "concurrencyPolicy": {
617
- "mode": "serialized",
617
+ "mode": "none",
618
618
  "cancelInProgress": false
619
619
  },
620
- "expectedRunnerMinutes": 8,
621
- "cancellationBehavior": "finish-started",
620
+ "expectedRunnerMinutes": 360,
621
+ "cancellationBehavior": "provider-default",
622
622
  "sloImpact": {
623
623
  "mergeCritical": false,
624
- "metric": "qualified Compose preview promotion",
624
+ "metric": "capability execution budget",
625
625
  "expectedContributionSeconds": 0,
626
- "rationale": "Runs only after completed exact-source public installation qualification; no merge-critical runner lane is added."
626
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
627
627
  }
628
628
  },
629
629
  {
630
- "laneId": ".github/workflows/.build.yml#configure",
630
+ "laneId": ".github/workflows/public-build-stage-capsule-canary.yml#consumer-admission",
631
631
  "authorityClass": "evidence",
632
632
  "triggerClass": "reusable",
633
633
  "concurrencyPolicy": {
634
634
  "mode": "none",
635
635
  "cancelInProgress": false
636
636
  },
637
- "expectedRunnerMinutes": 5,
638
- "cancellationBehavior": "finish-started",
637
+ "expectedRunnerMinutes": 360,
638
+ "cancellationBehavior": "provider-default",
639
639
  "sloImpact": {
640
640
  "mergeCritical": false,
641
- "metric": "configured build planning and execution latency",
642
- "expectedContributionSeconds": 20,
643
- "rationale": "Resolve exact source TOML and runtime-owned environment before admission or matrix scheduling."
641
+ "metric": "capability execution budget",
642
+ "expectedContributionSeconds": 0,
643
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
644
644
  }
645
645
  },
646
646
  {
647
- "laneId": ".github/workflows/build.yml#build",
648
- "authorityClass": "governed-delegation",
647
+ "laneId": ".github/workflows/public-build-stage-capsule-canary.yml#qualify",
648
+ "authorityClass": "evidence",
649
649
  "triggerClass": "reusable",
650
650
  "concurrencyPolicy": {
651
651
  "mode": "none",
652
652
  "cancelInProgress": false
653
653
  },
654
- "expectedRunnerMinutes": 120,
654
+ "expectedRunnerMinutes": 360,
655
+ "cancellationBehavior": "provider-default",
656
+ "sloImpact": {
657
+ "mergeCritical": false,
658
+ "metric": "capability execution budget",
659
+ "expectedContributionSeconds": 0,
660
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
661
+ }
662
+ },
663
+ {
664
+ "laneId": ".github/workflows/public-build-stage-capsule-canary.yml#reconcile",
665
+ "authorityClass": "evidence",
666
+ "triggerClass": "reusable",
667
+ "concurrencyPolicy": {
668
+ "mode": "none",
669
+ "cancelInProgress": false
670
+ },
671
+ "expectedRunnerMinutes": 360,
672
+ "cancellationBehavior": "provider-default",
673
+ "sloImpact": {
674
+ "mergeCritical": false,
675
+ "metric": "capability execution budget",
676
+ "expectedContributionSeconds": 0,
677
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
678
+ }
679
+ },
680
+ {
681
+ "laneId": ".github/workflows/public-ops-alpha-candidate-patrol.yml#observe",
682
+ "authorityClass": "evidence",
683
+ "triggerClass": "reusable",
684
+ "concurrencyPolicy": {
685
+ "mode": "ref-scoped",
686
+ "cancelInProgress": false
687
+ },
688
+ "expectedRunnerMinutes": 360,
655
689
  "cancellationBehavior": "finish-started",
656
690
  "sloImpact": {
657
691
  "mergeCritical": false,
658
- "metric": "configured build planning and execution latency",
692
+ "metric": "capability execution budget",
659
693
  "expectedContributionSeconds": 0,
660
- "rationale": "The public facade delegates once to the backbone; no additional build or controller runs."
694
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
661
695
  }
662
696
  },
663
697
  {
664
- "laneId": ".github/workflows/self-build-stable-dogfood.yml#stable-consumer",
665
- "authorityClass": "governed-delegation",
666
- "triggerClass": "mixed",
698
+ "laneId": ".github/workflows/public-ops-alpha-candidate-patrol.yml#settle",
699
+ "authorityClass": "evidence",
700
+ "triggerClass": "reusable",
667
701
  "concurrencyPolicy": {
668
702
  "mode": "ref-scoped",
669
703
  "cancelInProgress": false
670
704
  },
671
- "expectedRunnerMinutes": 20,
705
+ "expectedRunnerMinutes": 360,
672
706
  "cancellationBehavior": "finish-started",
673
707
  "sloImpact": {
674
708
  "mergeCritical": false,
675
- "metric": "Published stable TOML build qualification latency",
709
+ "metric": "capability execution budget",
676
710
  "expectedContributionSeconds": 0,
677
- "rationale": "Independent thin public stable fixture caller permits producer-first channel upgrades without duplicating build orchestration."
711
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
678
712
  }
679
- }
680
- ],
681
- "declarationFamilies": [
713
+ },
682
714
  {
683
- "authorityClass": "governed-delegation",
715
+ "laneId": ".github/workflows/public-ops-bootstrap.yml#admit",
716
+ "authorityClass": "evidence",
684
717
  "triggerClass": "reusable",
685
718
  "concurrencyPolicy": {
686
719
  "mode": "none",
687
720
  "cancelInProgress": false
688
721
  },
689
- "expectedRunnerMinutes": 60,
722
+ "expectedRunnerMinutes": 10,
690
723
  "cancellationBehavior": "finish-started",
691
724
  "sloImpact": {
692
725
  "mergeCritical": false,
693
- "metric": "opt-in exact-candidate execution latency",
726
+ "metric": "exact-candidate admission latency",
694
727
  "expectedContributionSeconds": 0,
695
728
  "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
696
- },
697
- "laneIds": [
698
- ".github/workflows/.auditable-demo.yml#universal-bootstrap",
699
- ".github/workflows/.binary-release-assets.yml#universal-bootstrap",
700
- ".github/workflows/.bump-minor-version.yml#universal-bootstrap",
701
- ".github/workflows/.declarative-auditable-demo.yml#universal-bootstrap",
702
- ".github/workflows/.gate-profile.yml#universal-bootstrap",
703
- ".github/workflows/.publication-authority.yml#universal-bootstrap",
704
- ".github/workflows/.release-candidate-promote.yml#universal-bootstrap",
705
- ".github/workflows/.release-verify.yml#universal-bootstrap",
706
- ".github/workflows/.sam-verify.yml#universal-bootstrap",
707
- ".github/workflows/.sync-release-page.yml#universal-bootstrap",
708
- ".github/workflows/.sync-remote-git.yml#universal-bootstrap",
709
- ".github/workflows/.web-surface.yml#universal-bootstrap",
710
- ".github/workflows/.wheel-verify.yml#universal-bootstrap",
711
- ".github/workflows/buildchain-patrol.yml#universal-bootstrap",
712
- ".github/workflows/check.yml#universal-bootstrap",
713
- ".github/workflows/dev-alpha-candidate-patrol.yml#universal-bootstrap",
714
- ".github/workflows/dev-delivery-warrant-cancel.yml#universal-bootstrap",
715
- ".github/workflows/dev-delivery-warrant-close.yml#universal-bootstrap",
716
- ".github/workflows/dev-pr-auto-merge.yml#universal-bootstrap",
717
- ".github/workflows/dev-qualification-patrol.yml#universal-bootstrap",
718
- ".github/workflows/engineering-housekeeper.yml#universal-bootstrap",
719
- ".github/workflows/github-artifact-attestation.yml#universal-bootstrap",
720
- ".github/workflows/paper-release-sealed.yml#universal-bootstrap",
721
- ".github/workflows/paper-release.yml#universal-bootstrap",
722
- ".github/workflows/patrol-daily.yml#universal-bootstrap",
723
- ".github/workflows/patrol-monthly.yml#universal-bootstrap",
724
- ".github/workflows/patrol-observed-evidence.yml#universal-bootstrap",
725
- ".github/workflows/patrol-weekly.yml#universal-bootstrap",
726
- ".github/workflows/public-release-oci-compose-preview.yml#universal-bootstrap",
727
- ".github/workflows/publication-artifact.yml#universal-bootstrap",
728
- ".github/workflows/release-candidate-promote.yml#universal-bootstrap",
729
- ".github/workflows/release-propagation.yml#universal-bootstrap",
730
- ".github/workflows/release-tail.yml#universal-bootstrap",
731
- ".github/workflows/stable-candidate-patrol.yml#universal-bootstrap",
732
- ".github/workflows/v4-stage-capsule-canary.yml#universal-bootstrap",
733
- ".github/workflows/v4-tail-reseal.yml#universal-bootstrap"
734
- ]
729
+ }
735
730
  },
736
731
  {
732
+ "laneId": ".github/workflows/public-ops-bootstrap.yml#execute",
737
733
  "authorityClass": "governed-delegation",
738
- "triggerClass": "mixed",
734
+ "triggerClass": "reusable",
739
735
  "concurrencyPolicy": {
740
736
  "mode": "none",
741
737
  "cancelInProgress": false
@@ -744,14 +740,2008 @@
744
740
  "cancellationBehavior": "finish-started",
745
741
  "sloImpact": {
746
742
  "mergeCritical": false,
747
- "metric": "mixed-trigger exact-candidate execution latency",
743
+ "metric": "exact-candidate execution latency",
748
744
  "expectedContributionSeconds": 0,
749
745
  "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
746
+ }
747
+ },
748
+ {
749
+ "laneId": ".github/workflows/public-ops-bootstrap.yml#settle",
750
+ "authorityClass": "evidence",
751
+ "triggerClass": "reusable",
752
+ "concurrencyPolicy": {
753
+ "mode": "none",
754
+ "cancelInProgress": false
750
755
  },
751
- "laneIds": [
752
- ".github/workflows/release-governance-reconcile.yml#universal-bootstrap",
753
- ".github/workflows/v4-adopter-delivery.yml#universal-bootstrap"
754
- ]
756
+ "expectedRunnerMinutes": 10,
757
+ "cancellationBehavior": "finish-started",
758
+ "sloImpact": {
759
+ "mergeCritical": false,
760
+ "metric": "universal terminal settlement latency",
761
+ "expectedContributionSeconds": 0,
762
+ "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
763
+ }
764
+ },
765
+ {
766
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#admission",
767
+ "authorityClass": "evidence",
768
+ "triggerClass": "reusable",
769
+ "concurrencyPolicy": {
770
+ "mode": "ref-scoped",
771
+ "cancelInProgress": false
772
+ },
773
+ "expectedRunnerMinutes": 360,
774
+ "cancellationBehavior": "finish-started",
775
+ "sloImpact": {
776
+ "mergeCritical": false,
777
+ "metric": "capability execution budget",
778
+ "expectedContributionSeconds": 0,
779
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
780
+ }
781
+ },
782
+ {
783
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#delivery-heartbeat",
784
+ "authorityClass": "evidence",
785
+ "triggerClass": "reusable",
786
+ "concurrencyPolicy": {
787
+ "mode": "ref-scoped",
788
+ "cancelInProgress": false
789
+ },
790
+ "expectedRunnerMinutes": 360,
791
+ "cancellationBehavior": "finish-started",
792
+ "sloImpact": {
793
+ "mergeCritical": false,
794
+ "metric": "capability execution budget",
795
+ "expectedContributionSeconds": 0,
796
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
797
+ }
798
+ },
799
+ {
800
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#merge-dev-prs",
801
+ "authorityClass": "evidence",
802
+ "triggerClass": "reusable",
803
+ "concurrencyPolicy": {
804
+ "mode": "ref-scoped",
805
+ "cancelInProgress": false
806
+ },
807
+ "expectedRunnerMinutes": 360,
808
+ "cancellationBehavior": "finish-started",
809
+ "sloImpact": {
810
+ "mergeCritical": false,
811
+ "metric": "capability execution budget",
812
+ "expectedContributionSeconds": 0,
813
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
814
+ }
815
+ },
816
+ {
817
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#native-execution",
818
+ "authorityClass": "evidence",
819
+ "triggerClass": "reusable",
820
+ "concurrencyPolicy": {
821
+ "mode": "ref-scoped",
822
+ "cancelInProgress": false
823
+ },
824
+ "expectedRunnerMinutes": 360,
825
+ "cancellationBehavior": "finish-started",
826
+ "sloImpact": {
827
+ "mergeCritical": false,
828
+ "metric": "capability execution budget",
829
+ "expectedContributionSeconds": 0,
830
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
831
+ }
832
+ },
833
+ {
834
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#seal-native-execution",
835
+ "authorityClass": "evidence",
836
+ "triggerClass": "reusable",
837
+ "concurrencyPolicy": {
838
+ "mode": "ref-scoped",
839
+ "cancelInProgress": false
840
+ },
841
+ "expectedRunnerMinutes": 360,
842
+ "cancellationBehavior": "finish-started",
843
+ "sloImpact": {
844
+ "mergeCritical": false,
845
+ "metric": "capability execution budget",
846
+ "expectedContributionSeconds": 0,
847
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
848
+ }
849
+ },
850
+ {
851
+ "laneId": ".github/workflows/public-ops-dev-qualification-patrol.yml#mutate",
852
+ "authorityClass": "evidence",
853
+ "triggerClass": "reusable",
854
+ "concurrencyPolicy": {
855
+ "mode": "ref-scoped",
856
+ "cancelInProgress": false
857
+ },
858
+ "expectedRunnerMinutes": 360,
859
+ "cancellationBehavior": "finish-started",
860
+ "sloImpact": {
861
+ "mergeCritical": false,
862
+ "metric": "capability execution budget",
863
+ "expectedContributionSeconds": 0,
864
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
865
+ }
866
+ },
867
+ {
868
+ "laneId": ".github/workflows/public-ops-dev-qualification-patrol.yml#observe",
869
+ "authorityClass": "evidence",
870
+ "triggerClass": "reusable",
871
+ "concurrencyPolicy": {
872
+ "mode": "ref-scoped",
873
+ "cancelInProgress": false
874
+ },
875
+ "expectedRunnerMinutes": 360,
876
+ "cancellationBehavior": "finish-started",
877
+ "sloImpact": {
878
+ "mergeCritical": false,
879
+ "metric": "capability execution budget",
880
+ "expectedContributionSeconds": 0,
881
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
882
+ }
883
+ },
884
+ {
885
+ "laneId": ".github/workflows/public-ops-housekeeping.yml#delete-branches",
886
+ "authorityClass": "evidence",
887
+ "triggerClass": "reusable",
888
+ "concurrencyPolicy": {
889
+ "mode": "ref-scoped",
890
+ "cancelInProgress": false
891
+ },
892
+ "expectedRunnerMinutes": 360,
893
+ "cancellationBehavior": "finish-started",
894
+ "sloImpact": {
895
+ "mergeCritical": false,
896
+ "metric": "capability execution budget",
897
+ "expectedContributionSeconds": 0,
898
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
899
+ }
900
+ },
901
+ {
902
+ "laneId": ".github/workflows/public-ops-housekeeping.yml#label-pull-requests",
903
+ "authorityClass": "evidence",
904
+ "triggerClass": "reusable",
905
+ "concurrencyPolicy": {
906
+ "mode": "ref-scoped",
907
+ "cancelInProgress": false
908
+ },
909
+ "expectedRunnerMinutes": 360,
910
+ "cancellationBehavior": "finish-started",
911
+ "sloImpact": {
912
+ "mergeCritical": false,
913
+ "metric": "capability execution budget",
914
+ "expectedContributionSeconds": 0,
915
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
916
+ }
917
+ },
918
+ {
919
+ "laneId": ".github/workflows/public-ops-housekeeping.yml#plan",
920
+ "authorityClass": "evidence",
921
+ "triggerClass": "reusable",
922
+ "concurrencyPolicy": {
923
+ "mode": "ref-scoped",
924
+ "cancelInProgress": false
925
+ },
926
+ "expectedRunnerMinutes": 360,
927
+ "cancellationBehavior": "finish-started",
928
+ "sloImpact": {
929
+ "mergeCritical": false,
930
+ "metric": "capability execution budget",
931
+ "expectedContributionSeconds": 0,
932
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
933
+ }
934
+ },
935
+ {
936
+ "laneId": ".github/workflows/public-ops-observed-evidence.yml#publish",
937
+ "authorityClass": "evidence",
938
+ "triggerClass": "reusable",
939
+ "concurrencyPolicy": {
940
+ "mode": "ref-scoped",
941
+ "cancelInProgress": false
942
+ },
943
+ "expectedRunnerMinutes": 360,
944
+ "cancellationBehavior": "finish-started",
945
+ "sloImpact": {
946
+ "mergeCritical": false,
947
+ "metric": "capability execution budget",
948
+ "expectedContributionSeconds": 0,
949
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
950
+ }
951
+ },
952
+ {
953
+ "laneId": ".github/workflows/public-ops-patrol-daily.yml#patrol",
954
+ "authorityClass": "governed-delegation",
955
+ "triggerClass": "reusable",
956
+ "concurrencyPolicy": {
957
+ "mode": "none",
958
+ "cancelInProgress": false
959
+ },
960
+ "expectedRunnerMinutes": 360,
961
+ "cancellationBehavior": "provider-default",
962
+ "sloImpact": {
963
+ "mergeCritical": false,
964
+ "metric": "capability execution budget",
965
+ "expectedContributionSeconds": 0,
966
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
967
+ }
968
+ },
969
+ {
970
+ "laneId": ".github/workflows/public-ops-patrol-monthly.yml#patrol",
971
+ "authorityClass": "governed-delegation",
972
+ "triggerClass": "reusable",
973
+ "concurrencyPolicy": {
974
+ "mode": "none",
975
+ "cancelInProgress": false
976
+ },
977
+ "expectedRunnerMinutes": 360,
978
+ "cancellationBehavior": "provider-default",
979
+ "sloImpact": {
980
+ "mergeCritical": false,
981
+ "metric": "capability execution budget",
982
+ "expectedContributionSeconds": 0,
983
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
984
+ }
985
+ },
986
+ {
987
+ "laneId": ".github/workflows/public-ops-patrol-weekly.yml#patrol",
988
+ "authorityClass": "governed-delegation",
989
+ "triggerClass": "reusable",
990
+ "concurrencyPolicy": {
991
+ "mode": "none",
992
+ "cancelInProgress": false
993
+ },
994
+ "expectedRunnerMinutes": 360,
995
+ "cancellationBehavior": "provider-default",
996
+ "sloImpact": {
997
+ "mergeCritical": false,
998
+ "metric": "capability execution budget",
999
+ "expectedContributionSeconds": 0,
1000
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1001
+ }
1002
+ },
1003
+ {
1004
+ "laneId": ".github/workflows/public-ops-patrol.yml#patrol",
1005
+ "authorityClass": "evidence",
1006
+ "triggerClass": "reusable",
1007
+ "concurrencyPolicy": {
1008
+ "mode": "ref-scoped",
1009
+ "cancelInProgress": false
1010
+ },
1011
+ "expectedRunnerMinutes": 360,
1012
+ "cancellationBehavior": "finish-started",
1013
+ "sloImpact": {
1014
+ "mergeCritical": false,
1015
+ "metric": "capability execution budget",
1016
+ "expectedContributionSeconds": 0,
1017
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1018
+ }
1019
+ },
1020
+ {
1021
+ "laneId": ".github/workflows/public-ops-release-governance.yml#reconcile",
1022
+ "authorityClass": "release",
1023
+ "triggerClass": "mixed",
1024
+ "concurrencyPolicy": {
1025
+ "mode": "none",
1026
+ "cancelInProgress": false
1027
+ },
1028
+ "expectedRunnerMinutes": 360,
1029
+ "cancellationBehavior": "provider-default",
1030
+ "sloImpact": {
1031
+ "mergeCritical": false,
1032
+ "metric": "capability execution budget",
1033
+ "expectedContributionSeconds": 0,
1034
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1035
+ }
1036
+ },
1037
+ {
1038
+ "laneId": ".github/workflows/public-ops-stable-candidate-patrol.yml#patrol",
1039
+ "authorityClass": "evidence",
1040
+ "triggerClass": "reusable",
1041
+ "concurrencyPolicy": {
1042
+ "mode": "ref-scoped",
1043
+ "cancelInProgress": false
1044
+ },
1045
+ "expectedRunnerMinutes": 360,
1046
+ "cancellationBehavior": "finish-started",
1047
+ "sloImpact": {
1048
+ "mergeCritical": false,
1049
+ "metric": "capability execution budget",
1050
+ "expectedContributionSeconds": 0,
1051
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1052
+ }
1053
+ },
1054
+ {
1055
+ "laneId": ".github/workflows/public-ops-tail-reseal.yml#plan",
1056
+ "authorityClass": "evidence",
1057
+ "triggerClass": "reusable",
1058
+ "concurrencyPolicy": {
1059
+ "mode": "none",
1060
+ "cancelInProgress": false
1061
+ },
1062
+ "expectedRunnerMinutes": 360,
1063
+ "cancellationBehavior": "provider-default",
1064
+ "sloImpact": {
1065
+ "mergeCritical": false,
1066
+ "metric": "capability execution budget",
1067
+ "expectedContributionSeconds": 0,
1068
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1069
+ }
1070
+ },
1071
+ {
1072
+ "laneId": ".github/workflows/public-ops-tail-reseal.yml#platforms",
1073
+ "authorityClass": "evidence",
1074
+ "triggerClass": "reusable",
1075
+ "concurrencyPolicy": {
1076
+ "mode": "none",
1077
+ "cancelInProgress": false
1078
+ },
1079
+ "expectedRunnerMinutes": 360,
1080
+ "cancellationBehavior": "provider-default",
1081
+ "sloImpact": {
1082
+ "mergeCritical": false,
1083
+ "metric": "capability execution budget",
1084
+ "expectedContributionSeconds": 0,
1085
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1086
+ }
1087
+ },
1088
+ {
1089
+ "laneId": ".github/workflows/public-ops-tail-reseal.yml#seal",
1090
+ "authorityClass": "evidence",
1091
+ "triggerClass": "reusable",
1092
+ "concurrencyPolicy": {
1093
+ "mode": "none",
1094
+ "cancelInProgress": false
1095
+ },
1096
+ "expectedRunnerMinutes": 360,
1097
+ "cancellationBehavior": "provider-default",
1098
+ "sloImpact": {
1099
+ "mergeCritical": false,
1100
+ "metric": "capability execution budget",
1101
+ "expectedContributionSeconds": 0,
1102
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1103
+ }
1104
+ },
1105
+ {
1106
+ "laneId": ".github/workflows/public-ops-warrant-cancel.yml#cancel",
1107
+ "authorityClass": "evidence",
1108
+ "triggerClass": "reusable",
1109
+ "concurrencyPolicy": {
1110
+ "mode": "none",
1111
+ "cancelInProgress": false
1112
+ },
1113
+ "expectedRunnerMinutes": 360,
1114
+ "cancellationBehavior": "provider-default",
1115
+ "sloImpact": {
1116
+ "mergeCritical": false,
1117
+ "metric": "capability execution budget",
1118
+ "expectedContributionSeconds": 0,
1119
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1120
+ }
1121
+ },
1122
+ {
1123
+ "laneId": ".github/workflows/public-ops-warrant-close.yml#close",
1124
+ "authorityClass": "evidence",
1125
+ "triggerClass": "reusable",
1126
+ "concurrencyPolicy": {
1127
+ "mode": "none",
1128
+ "cancelInProgress": false
1129
+ },
1130
+ "expectedRunnerMinutes": 360,
1131
+ "cancellationBehavior": "provider-default",
1132
+ "sloImpact": {
1133
+ "mergeCritical": false,
1134
+ "metric": "capability execution budget",
1135
+ "expectedContributionSeconds": 0,
1136
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1137
+ }
1138
+ },
1139
+ {
1140
+ "laneId": ".github/workflows/public-release-artifact-attestation.yml#attest",
1141
+ "authorityClass": "release",
1142
+ "triggerClass": "reusable",
1143
+ "concurrencyPolicy": {
1144
+ "mode": "none",
1145
+ "cancelInProgress": false
1146
+ },
1147
+ "expectedRunnerMinutes": 360,
1148
+ "cancellationBehavior": "provider-default",
1149
+ "sloImpact": {
1150
+ "mergeCritical": false,
1151
+ "metric": "capability execution budget",
1152
+ "expectedContributionSeconds": 0,
1153
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1154
+ }
1155
+ },
1156
+ {
1157
+ "laneId": ".github/workflows/public-release-oci-compose-preview.yml#promote",
1158
+ "authorityClass": "release",
1159
+ "triggerClass": "reusable",
1160
+ "concurrencyPolicy": {
1161
+ "mode": "serialized",
1162
+ "cancelInProgress": false
1163
+ },
1164
+ "expectedRunnerMinutes": 8,
1165
+ "cancellationBehavior": "finish-started",
1166
+ "sloImpact": {
1167
+ "mergeCritical": false,
1168
+ "metric": "qualified Compose preview promotion",
1169
+ "expectedContributionSeconds": 0,
1170
+ "rationale": "Runs only after completed exact-source public installation qualification; no merge-critical runner lane is added."
1171
+ }
1172
+ },
1173
+ {
1174
+ "laneId": ".github/workflows/public-release-paper.yml#publication-authority",
1175
+ "authorityClass": "governed-delegation",
1176
+ "triggerClass": "reusable",
1177
+ "concurrencyPolicy": {
1178
+ "mode": "none",
1179
+ "cancelInProgress": false
1180
+ },
1181
+ "expectedRunnerMinutes": 360,
1182
+ "cancellationBehavior": "provider-default",
1183
+ "sloImpact": {
1184
+ "mergeCritical": false,
1185
+ "metric": "capability execution budget",
1186
+ "expectedContributionSeconds": 0,
1187
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1188
+ }
1189
+ },
1190
+ {
1191
+ "laneId": ".github/workflows/public-release-paper.yml#publication-candidate",
1192
+ "authorityClass": "governed-delegation",
1193
+ "triggerClass": "reusable",
1194
+ "concurrencyPolicy": {
1195
+ "mode": "none",
1196
+ "cancelInProgress": false
1197
+ },
1198
+ "expectedRunnerMinutes": 360,
1199
+ "cancellationBehavior": "provider-default",
1200
+ "sloImpact": {
1201
+ "mergeCritical": false,
1202
+ "metric": "capability execution budget",
1203
+ "expectedContributionSeconds": 0,
1204
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1205
+ }
1206
+ },
1207
+ {
1208
+ "laneId": ".github/workflows/public-release-paper.yml#publish",
1209
+ "authorityClass": "release",
1210
+ "triggerClass": "reusable",
1211
+ "concurrencyPolicy": {
1212
+ "mode": "none",
1213
+ "cancelInProgress": false
1214
+ },
1215
+ "expectedRunnerMinutes": 360,
1216
+ "cancellationBehavior": "provider-default",
1217
+ "sloImpact": {
1218
+ "mergeCritical": false,
1219
+ "metric": "capability execution budget",
1220
+ "expectedContributionSeconds": 0,
1221
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1222
+ }
1223
+ },
1224
+ {
1225
+ "laneId": ".github/workflows/public-release-promote.yml#consumer-admission",
1226
+ "authorityClass": "release",
1227
+ "triggerClass": "reusable",
1228
+ "concurrencyPolicy": {
1229
+ "mode": "none",
1230
+ "cancelInProgress": false
1231
+ },
1232
+ "expectedRunnerMinutes": 360,
1233
+ "cancellationBehavior": "provider-default",
1234
+ "sloImpact": {
1235
+ "mergeCritical": false,
1236
+ "metric": "capability execution budget",
1237
+ "expectedContributionSeconds": 0,
1238
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1239
+ }
1240
+ },
1241
+ {
1242
+ "laneId": ".github/workflows/public-release-promote.yml#invoke",
1243
+ "authorityClass": "release",
1244
+ "triggerClass": "reusable",
1245
+ "concurrencyPolicy": {
1246
+ "mode": "none",
1247
+ "cancelInProgress": false
1248
+ },
1249
+ "expectedRunnerMinutes": 35,
1250
+ "cancellationBehavior": "finish-started",
1251
+ "sloImpact": {
1252
+ "mergeCritical": false,
1253
+ "metric": "public promotion adapter latency",
1254
+ "expectedContributionSeconds": 0,
1255
+ "rationale": "The public compatibility surface resolves discovery facts and invokes one fixed v4 publisher."
1256
+ }
1257
+ },
1258
+ {
1259
+ "laneId": ".github/workflows/public-release-promote.yml#resolve-promotion",
1260
+ "authorityClass": "release",
1261
+ "triggerClass": "reusable",
1262
+ "concurrencyPolicy": {
1263
+ "mode": "none",
1264
+ "cancelInProgress": false
1265
+ },
1266
+ "expectedRunnerMinutes": 360,
1267
+ "cancellationBehavior": "provider-default",
1268
+ "sloImpact": {
1269
+ "mergeCritical": false,
1270
+ "metric": "capability execution budget",
1271
+ "expectedContributionSeconds": 0,
1272
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1273
+ }
1274
+ },
1275
+ {
1276
+ "laneId": ".github/workflows/public-release-propagation.yml#propagate",
1277
+ "authorityClass": "release",
1278
+ "triggerClass": "reusable",
1279
+ "concurrencyPolicy": {
1280
+ "mode": "ref-scoped",
1281
+ "cancelInProgress": false
1282
+ },
1283
+ "expectedRunnerMinutes": 360,
1284
+ "cancellationBehavior": "finish-started",
1285
+ "sloImpact": {
1286
+ "mergeCritical": false,
1287
+ "metric": "capability execution budget",
1288
+ "expectedContributionSeconds": 0,
1289
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1290
+ }
1291
+ },
1292
+ {
1293
+ "laneId": ".github/workflows/public-release-signing-authority.yml#deliver",
1294
+ "authorityClass": "release",
1295
+ "triggerClass": "manual",
1296
+ "concurrencyPolicy": {
1297
+ "mode": "ref-scoped",
1298
+ "cancelInProgress": false
1299
+ },
1300
+ "expectedRunnerMinutes": 360,
1301
+ "cancellationBehavior": "finish-started",
1302
+ "sloImpact": {
1303
+ "mergeCritical": false,
1304
+ "metric": "capability execution budget",
1305
+ "expectedContributionSeconds": 0,
1306
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1307
+ }
1308
+ },
1309
+ {
1310
+ "laneId": ".github/workflows/public-release-signing-authority.yml#detached",
1311
+ "authorityClass": "release",
1312
+ "triggerClass": "manual",
1313
+ "concurrencyPolicy": {
1314
+ "mode": "ref-scoped",
1315
+ "cancelInProgress": false
1316
+ },
1317
+ "expectedRunnerMinutes": 360,
1318
+ "cancellationBehavior": "finish-started",
1319
+ "sloImpact": {
1320
+ "mergeCritical": false,
1321
+ "metric": "capability execution budget",
1322
+ "expectedContributionSeconds": 0,
1323
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1324
+ }
1325
+ },
1326
+ {
1327
+ "laneId": ".github/workflows/public-release-signing-authority.yml#intake",
1328
+ "authorityClass": "release",
1329
+ "triggerClass": "manual",
1330
+ "concurrencyPolicy": {
1331
+ "mode": "ref-scoped",
1332
+ "cancelInProgress": false
1333
+ },
1334
+ "expectedRunnerMinutes": 360,
1335
+ "cancellationBehavior": "finish-started",
1336
+ "sloImpact": {
1337
+ "mergeCritical": false,
1338
+ "metric": "capability execution budget",
1339
+ "expectedContributionSeconds": 0,
1340
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1341
+ }
1342
+ },
1343
+ {
1344
+ "laneId": ".github/workflows/public-release-signing-authority.yml#macos",
1345
+ "authorityClass": "release",
1346
+ "triggerClass": "manual",
1347
+ "concurrencyPolicy": {
1348
+ "mode": "ref-scoped",
1349
+ "cancelInProgress": false
1350
+ },
1351
+ "expectedRunnerMinutes": 360,
1352
+ "cancellationBehavior": "finish-started",
1353
+ "sloImpact": {
1354
+ "mergeCritical": false,
1355
+ "metric": "capability execution budget",
1356
+ "expectedContributionSeconds": 0,
1357
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1358
+ }
1359
+ },
1360
+ {
1361
+ "laneId": ".github/workflows/public-release-signing-authority.yml#windows",
1362
+ "authorityClass": "release",
1363
+ "triggerClass": "manual",
1364
+ "concurrencyPolicy": {
1365
+ "mode": "ref-scoped",
1366
+ "cancelInProgress": false
1367
+ },
1368
+ "expectedRunnerMinutes": 360,
1369
+ "cancellationBehavior": "finish-started",
1370
+ "sloImpact": {
1371
+ "mergeCritical": false,
1372
+ "metric": "capability execution budget",
1373
+ "expectedContributionSeconds": 0,
1374
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1375
+ }
1376
+ },
1377
+ {
1378
+ "laneId": ".github/workflows/public-release-tail.yml#release-tail",
1379
+ "authorityClass": "release",
1380
+ "triggerClass": "reusable",
1381
+ "concurrencyPolicy": {
1382
+ "mode": "none",
1383
+ "cancelInProgress": false
1384
+ },
1385
+ "expectedRunnerMinutes": 360,
1386
+ "cancellationBehavior": "provider-default",
1387
+ "sloImpact": {
1388
+ "mergeCritical": false,
1389
+ "metric": "capability execution budget",
1390
+ "expectedContributionSeconds": 0,
1391
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1392
+ }
1393
+ },
1394
+ {
1395
+ "laneId": ".github/workflows/public-release-web.yml#apply-input-gate",
1396
+ "authorityClass": "release",
1397
+ "triggerClass": "reusable",
1398
+ "concurrencyPolicy": {
1399
+ "mode": "none",
1400
+ "cancelInProgress": false
1401
+ },
1402
+ "expectedRunnerMinutes": 360,
1403
+ "cancellationBehavior": "provider-default",
1404
+ "sloImpact": {
1405
+ "mergeCritical": false,
1406
+ "metric": "capability execution budget",
1407
+ "expectedContributionSeconds": 0,
1408
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1409
+ }
1410
+ },
1411
+ {
1412
+ "laneId": ".github/workflows/public-release-web.yml#controller-plan",
1413
+ "authorityClass": "release",
1414
+ "triggerClass": "reusable",
1415
+ "concurrencyPolicy": {
1416
+ "mode": "none",
1417
+ "cancelInProgress": false
1418
+ },
1419
+ "expectedRunnerMinutes": 360,
1420
+ "cancellationBehavior": "provider-default",
1421
+ "sloImpact": {
1422
+ "mergeCritical": false,
1423
+ "metric": "capability execution budget",
1424
+ "expectedContributionSeconds": 0,
1425
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1426
+ }
1427
+ },
1428
+ {
1429
+ "laneId": ".github/workflows/public-release-web.yml#controller-receipt",
1430
+ "authorityClass": "release",
1431
+ "triggerClass": "reusable",
1432
+ "concurrencyPolicy": {
1433
+ "mode": "none",
1434
+ "cancelInProgress": false
1435
+ },
1436
+ "expectedRunnerMinutes": 360,
1437
+ "cancellationBehavior": "provider-default",
1438
+ "sloImpact": {
1439
+ "mergeCritical": false,
1440
+ "metric": "capability execution budget",
1441
+ "expectedContributionSeconds": 0,
1442
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1443
+ }
1444
+ },
1445
+ {
1446
+ "laneId": ".github/workflows/public-release-web.yml#external-publication-authority",
1447
+ "authorityClass": "governed-delegation",
1448
+ "triggerClass": "reusable",
1449
+ "concurrencyPolicy": {
1450
+ "mode": "none",
1451
+ "cancelInProgress": false
1452
+ },
1453
+ "expectedRunnerMinutes": 360,
1454
+ "cancellationBehavior": "provider-default",
1455
+ "sloImpact": {
1456
+ "mergeCritical": false,
1457
+ "metric": "capability execution budget",
1458
+ "expectedContributionSeconds": 0,
1459
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1460
+ }
1461
+ },
1462
+ {
1463
+ "laneId": ".github/workflows/public-release-web.yml#open-production-release-pr",
1464
+ "authorityClass": "release",
1465
+ "triggerClass": "reusable",
1466
+ "concurrencyPolicy": {
1467
+ "mode": "none",
1468
+ "cancelInProgress": false
1469
+ },
1470
+ "expectedRunnerMinutes": 360,
1471
+ "cancellationBehavior": "provider-default",
1472
+ "sloImpact": {
1473
+ "mergeCritical": false,
1474
+ "metric": "capability execution budget",
1475
+ "expectedContributionSeconds": 0,
1476
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1477
+ }
1478
+ },
1479
+ {
1480
+ "laneId": ".github/workflows/public-release-web.yml#plan",
1481
+ "authorityClass": "release",
1482
+ "triggerClass": "reusable",
1483
+ "concurrencyPolicy": {
1484
+ "mode": "none",
1485
+ "cancelInProgress": false
1486
+ },
1487
+ "expectedRunnerMinutes": 360,
1488
+ "cancellationBehavior": "provider-default",
1489
+ "sloImpact": {
1490
+ "mergeCritical": false,
1491
+ "metric": "capability execution budget",
1492
+ "expectedContributionSeconds": 0,
1493
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1494
+ }
1495
+ },
1496
+ {
1497
+ "laneId": ".github/workflows/public-release-web.yml#preview-apply",
1498
+ "authorityClass": "release",
1499
+ "triggerClass": "reusable",
1500
+ "concurrencyPolicy": {
1501
+ "mode": "none",
1502
+ "cancelInProgress": false
1503
+ },
1504
+ "expectedRunnerMinutes": 360,
1505
+ "cancellationBehavior": "provider-default",
1506
+ "sloImpact": {
1507
+ "mergeCritical": false,
1508
+ "metric": "capability execution budget",
1509
+ "expectedContributionSeconds": 0,
1510
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1511
+ }
1512
+ },
1513
+ {
1514
+ "laneId": ".github/workflows/public-release-web.yml#preview-cleanup",
1515
+ "authorityClass": "release",
1516
+ "triggerClass": "reusable",
1517
+ "concurrencyPolicy": {
1518
+ "mode": "none",
1519
+ "cancelInProgress": false
1520
+ },
1521
+ "expectedRunnerMinutes": 360,
1522
+ "cancellationBehavior": "provider-default",
1523
+ "sloImpact": {
1524
+ "mergeCritical": false,
1525
+ "metric": "capability execution budget",
1526
+ "expectedContributionSeconds": 0,
1527
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1528
+ }
1529
+ },
1530
+ {
1531
+ "laneId": ".github/workflows/public-release-web.yml#production-apply",
1532
+ "authorityClass": "release",
1533
+ "triggerClass": "reusable",
1534
+ "concurrencyPolicy": {
1535
+ "mode": "none",
1536
+ "cancelInProgress": false
1537
+ },
1538
+ "expectedRunnerMinutes": 360,
1539
+ "cancellationBehavior": "provider-default",
1540
+ "sloImpact": {
1541
+ "mergeCritical": false,
1542
+ "metric": "capability execution budget",
1543
+ "expectedContributionSeconds": 0,
1544
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1545
+ }
1546
+ },
1547
+ {
1548
+ "laneId": ".github/workflows/public-release-web.yml#publication-authority",
1549
+ "authorityClass": "release",
1550
+ "triggerClass": "reusable",
1551
+ "concurrencyPolicy": {
1552
+ "mode": "none",
1553
+ "cancelInProgress": false
1554
+ },
1555
+ "expectedRunnerMinutes": 360,
1556
+ "cancellationBehavior": "provider-default",
1557
+ "sloImpact": {
1558
+ "mergeCritical": false,
1559
+ "metric": "capability execution budget",
1560
+ "expectedContributionSeconds": 0,
1561
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1562
+ }
1563
+ },
1564
+ {
1565
+ "laneId": ".github/workflows/public-release-web.yml#publication-decision",
1566
+ "authorityClass": "release",
1567
+ "triggerClass": "reusable",
1568
+ "concurrencyPolicy": {
1569
+ "mode": "none",
1570
+ "cancelInProgress": false
1571
+ },
1572
+ "expectedRunnerMinutes": 360,
1573
+ "cancellationBehavior": "provider-default",
1574
+ "sloImpact": {
1575
+ "mergeCritical": false,
1576
+ "metric": "capability execution budget",
1577
+ "expectedContributionSeconds": 0,
1578
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1579
+ }
1580
+ },
1581
+ {
1582
+ "laneId": ".github/workflows/public-release-web.yml#release-intent",
1583
+ "authorityClass": "release",
1584
+ "triggerClass": "reusable",
1585
+ "concurrencyPolicy": {
1586
+ "mode": "none",
1587
+ "cancelInProgress": false
1588
+ },
1589
+ "expectedRunnerMinutes": 360,
1590
+ "cancellationBehavior": "provider-default",
1591
+ "sloImpact": {
1592
+ "mergeCritical": false,
1593
+ "metric": "capability execution budget",
1594
+ "expectedContributionSeconds": 0,
1595
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1596
+ }
1597
+ },
1598
+ {
1599
+ "laneId": ".github/workflows/public-release-web.yml#staging-apply",
1600
+ "authorityClass": "release",
1601
+ "triggerClass": "reusable",
1602
+ "concurrencyPolicy": {
1603
+ "mode": "none",
1604
+ "cancelInProgress": false
1605
+ },
1606
+ "expectedRunnerMinutes": 360,
1607
+ "cancellationBehavior": "provider-default",
1608
+ "sloImpact": {
1609
+ "mergeCritical": false,
1610
+ "metric": "capability execution budget",
1611
+ "expectedContributionSeconds": 0,
1612
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1613
+ }
1614
+ },
1615
+ {
1616
+ "laneId": ".github/workflows/self-build-adopter-dogfood.yml#dogfood",
1617
+ "authorityClass": "governed-delegation",
1618
+ "triggerClass": "manual",
1619
+ "concurrencyPolicy": {
1620
+ "mode": "none",
1621
+ "cancelInProgress": false
1622
+ },
1623
+ "expectedRunnerMinutes": 360,
1624
+ "cancellationBehavior": "provider-default",
1625
+ "sloImpact": {
1626
+ "mergeCritical": false,
1627
+ "metric": "capability execution budget",
1628
+ "expectedContributionSeconds": 0,
1629
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1630
+ }
1631
+ },
1632
+ {
1633
+ "laneId": ".github/workflows/self-build-alpha-dogfood.yml#alpha-consumer",
1634
+ "authorityClass": "governed-delegation",
1635
+ "triggerClass": "mixed",
1636
+ "concurrencyPolicy": {
1637
+ "mode": "ref-scoped",
1638
+ "cancelInProgress": false
1639
+ },
1640
+ "expectedRunnerMinutes": 360,
1641
+ "cancellationBehavior": "finish-started",
1642
+ "sloImpact": {
1643
+ "mergeCritical": false,
1644
+ "metric": "capability execution budget",
1645
+ "expectedContributionSeconds": 0,
1646
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1647
+ }
1648
+ },
1649
+ {
1650
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#binary",
1651
+ "authorityClass": "evidence",
1652
+ "triggerClass": "mixed",
1653
+ "concurrencyPolicy": {
1654
+ "mode": "none",
1655
+ "cancelInProgress": false
1656
+ },
1657
+ "expectedRunnerMinutes": 360,
1658
+ "cancellationBehavior": "provider-default",
1659
+ "sloImpact": {
1660
+ "mergeCritical": false,
1661
+ "metric": "capability execution budget",
1662
+ "expectedContributionSeconds": 0,
1663
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1664
+ }
1665
+ },
1666
+ {
1667
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#dispatch-publication",
1668
+ "authorityClass": "evidence",
1669
+ "triggerClass": "mixed",
1670
+ "concurrencyPolicy": {
1671
+ "mode": "none",
1672
+ "cancelInProgress": false
1673
+ },
1674
+ "expectedRunnerMinutes": 360,
1675
+ "cancellationBehavior": "provider-default",
1676
+ "sloImpact": {
1677
+ "mergeCritical": false,
1678
+ "metric": "capability execution budget",
1679
+ "expectedContributionSeconds": 0,
1680
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1681
+ }
1682
+ },
1683
+ {
1684
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#passport",
1685
+ "authorityClass": "evidence",
1686
+ "triggerClass": "mixed",
1687
+ "concurrencyPolicy": {
1688
+ "mode": "none",
1689
+ "cancelInProgress": false
1690
+ },
1691
+ "expectedRunnerMinutes": 45,
1692
+ "cancellationBehavior": "provider-default",
1693
+ "sloImpact": {
1694
+ "mergeCritical": false,
1695
+ "metric": "capability execution budget",
1696
+ "expectedContributionSeconds": 0,
1697
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1698
+ }
1699
+ },
1700
+ {
1701
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#preflight",
1702
+ "authorityClass": "evidence",
1703
+ "triggerClass": "mixed",
1704
+ "concurrencyPolicy": {
1705
+ "mode": "none",
1706
+ "cancelInProgress": false
1707
+ },
1708
+ "expectedRunnerMinutes": 360,
1709
+ "cancellationBehavior": "provider-default",
1710
+ "sloImpact": {
1711
+ "mergeCritical": false,
1712
+ "metric": "capability execution budget",
1713
+ "expectedContributionSeconds": 0,
1714
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1715
+ }
1716
+ },
1717
+ {
1718
+ "laneId": ".github/workflows/self-build-channel-verify.yml#verify",
1719
+ "authorityClass": "merge-critical-admission",
1720
+ "triggerClass": "pull-request",
1721
+ "concurrencyPolicy": {
1722
+ "mode": "none",
1723
+ "cancelInProgress": false
1724
+ },
1725
+ "expectedRunnerMinutes": 360,
1726
+ "cancellationBehavior": "provider-default",
1727
+ "sloImpact": {
1728
+ "mergeCritical": true,
1729
+ "metric": "protected delivery dependency budget",
1730
+ "expectedContributionSeconds": 21600,
1731
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1732
+ }
1733
+ },
1734
+ {
1735
+ "laneId": ".github/workflows/self-build-demo-dogfood.yml#dogfood",
1736
+ "authorityClass": "governed-delegation",
1737
+ "triggerClass": "mixed",
1738
+ "concurrencyPolicy": {
1739
+ "mode": "ref-scoped",
1740
+ "cancelInProgress": false
1741
+ },
1742
+ "expectedRunnerMinutes": 360,
1743
+ "cancellationBehavior": "finish-started",
1744
+ "sloImpact": {
1745
+ "mergeCritical": false,
1746
+ "metric": "capability execution budget",
1747
+ "expectedContributionSeconds": 0,
1748
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1749
+ }
1750
+ },
1751
+ {
1752
+ "laneId": ".github/workflows/self-build-demo-dogfood.yml#exact-binary",
1753
+ "authorityClass": "evidence",
1754
+ "triggerClass": "mixed",
1755
+ "concurrencyPolicy": {
1756
+ "mode": "ref-scoped",
1757
+ "cancelInProgress": false
1758
+ },
1759
+ "expectedRunnerMinutes": 20,
1760
+ "cancellationBehavior": "finish-started",
1761
+ "sloImpact": {
1762
+ "mergeCritical": false,
1763
+ "metric": "capability execution budget",
1764
+ "expectedContributionSeconds": 0,
1765
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1766
+ }
1767
+ },
1768
+ {
1769
+ "laneId": ".github/workflows/self-build-demo-media-qualification.yml#qualify",
1770
+ "authorityClass": "merge-critical-admission",
1771
+ "triggerClass": "mixed",
1772
+ "concurrencyPolicy": {
1773
+ "mode": "none",
1774
+ "cancelInProgress": false
1775
+ },
1776
+ "expectedRunnerMinutes": 20,
1777
+ "cancellationBehavior": "provider-default",
1778
+ "sloImpact": {
1779
+ "mergeCritical": true,
1780
+ "metric": "protected delivery dependency budget",
1781
+ "expectedContributionSeconds": 1200,
1782
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1783
+ }
1784
+ },
1785
+ {
1786
+ "laneId": ".github/workflows/self-build-fixture.yml#buildchain-package-candidate",
1787
+ "authorityClass": "merge-critical-admission",
1788
+ "triggerClass": "mixed",
1789
+ "concurrencyPolicy": {
1790
+ "mode": "none",
1791
+ "cancelInProgress": false
1792
+ },
1793
+ "expectedRunnerMinutes": 360,
1794
+ "cancellationBehavior": "provider-default",
1795
+ "sloImpact": {
1796
+ "mergeCritical": true,
1797
+ "metric": "protected delivery dependency budget",
1798
+ "expectedContributionSeconds": 21600,
1799
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1800
+ }
1801
+ },
1802
+ {
1803
+ "laneId": ".github/workflows/self-build-fixture.yml#libnode-shaped",
1804
+ "authorityClass": "governed-delegation",
1805
+ "triggerClass": "mixed",
1806
+ "concurrencyPolicy": {
1807
+ "mode": "none",
1808
+ "cancelInProgress": false
1809
+ },
1810
+ "expectedRunnerMinutes": 360,
1811
+ "cancellationBehavior": "provider-default",
1812
+ "sloImpact": {
1813
+ "mergeCritical": true,
1814
+ "metric": "protected delivery dependency budget",
1815
+ "expectedContributionSeconds": 21600,
1816
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1817
+ }
1818
+ },
1819
+ {
1820
+ "laneId": ".github/workflows/self-build-public-consumer-dogfood.yml#dogfood",
1821
+ "authorityClass": "governed-delegation",
1822
+ "triggerClass": "mixed",
1823
+ "concurrencyPolicy": {
1824
+ "mode": "none",
1825
+ "cancelInProgress": false
1826
+ },
1827
+ "expectedRunnerMinutes": 360,
1828
+ "cancellationBehavior": "provider-default",
1829
+ "sloImpact": {
1830
+ "mergeCritical": true,
1831
+ "metric": "protected delivery dependency budget",
1832
+ "expectedContributionSeconds": 21600,
1833
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1834
+ }
1835
+ },
1836
+ {
1837
+ "laneId": ".github/workflows/self-build-stable-candidate-qualification.yml#qualify",
1838
+ "authorityClass": "evidence",
1839
+ "triggerClass": "mixed",
1840
+ "concurrencyPolicy": {
1841
+ "mode": "ref-scoped",
1842
+ "cancelInProgress": false
1843
+ },
1844
+ "expectedRunnerMinutes": 360,
1845
+ "cancellationBehavior": "finish-started",
1846
+ "sloImpact": {
1847
+ "mergeCritical": false,
1848
+ "metric": "capability execution budget",
1849
+ "expectedContributionSeconds": 0,
1850
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1851
+ }
1852
+ },
1853
+ {
1854
+ "laneId": ".github/workflows/self-build-stable-dogfood.yml#stable-consumer",
1855
+ "authorityClass": "governed-delegation",
1856
+ "triggerClass": "mixed",
1857
+ "concurrencyPolicy": {
1858
+ "mode": "ref-scoped",
1859
+ "cancelInProgress": false
1860
+ },
1861
+ "expectedRunnerMinutes": 20,
1862
+ "cancellationBehavior": "finish-started",
1863
+ "sloImpact": {
1864
+ "mergeCritical": false,
1865
+ "metric": "Published stable TOML build qualification latency",
1866
+ "expectedContributionSeconds": 0,
1867
+ "rationale": "Independent thin public stable fixture caller permits producer-first channel upgrades without duplicating build orchestration."
1868
+ }
1869
+ },
1870
+ {
1871
+ "laneId": ".github/workflows/self-build-verify.yml#build-backbone",
1872
+ "authorityClass": "merge-critical-admission",
1873
+ "triggerClass": "mixed",
1874
+ "concurrencyPolicy": {
1875
+ "mode": "none",
1876
+ "cancelInProgress": false
1877
+ },
1878
+ "expectedRunnerMinutes": 20,
1879
+ "cancellationBehavior": "provider-default",
1880
+ "sloImpact": {
1881
+ "mergeCritical": true,
1882
+ "metric": "protected delivery dependency budget",
1883
+ "expectedContributionSeconds": 1200,
1884
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1885
+ }
1886
+ },
1887
+ {
1888
+ "laneId": ".github/workflows/self-build-verify.yml#check",
1889
+ "authorityClass": "merge-critical-admission",
1890
+ "triggerClass": "mixed",
1891
+ "concurrencyPolicy": {
1892
+ "mode": "none",
1893
+ "cancelInProgress": false
1894
+ },
1895
+ "expectedRunnerMinutes": 360,
1896
+ "cancellationBehavior": "provider-default",
1897
+ "sloImpact": {
1898
+ "mergeCritical": true,
1899
+ "metric": "protected delivery dependency budget",
1900
+ "expectedContributionSeconds": 21600,
1901
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1902
+ }
1903
+ },
1904
+ {
1905
+ "laneId": ".github/workflows/self-build-verify.yml#stage-capsule-checkpoints",
1906
+ "authorityClass": "merge-critical-admission",
1907
+ "triggerClass": "mixed",
1908
+ "concurrencyPolicy": {
1909
+ "mode": "none",
1910
+ "cancelInProgress": false
1911
+ },
1912
+ "expectedRunnerMinutes": 360,
1913
+ "cancellationBehavior": "provider-default",
1914
+ "sloImpact": {
1915
+ "mergeCritical": true,
1916
+ "metric": "protected delivery dependency budget",
1917
+ "expectedContributionSeconds": 21600,
1918
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1919
+ }
1920
+ },
1921
+ {
1922
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#prepare",
1923
+ "authorityClass": "merge-critical-admission",
1924
+ "triggerClass": "mixed",
1925
+ "concurrencyPolicy": {
1926
+ "mode": "none",
1927
+ "cancelInProgress": false
1928
+ },
1929
+ "expectedRunnerMinutes": 360,
1930
+ "cancellationBehavior": "provider-default",
1931
+ "sloImpact": {
1932
+ "mergeCritical": true,
1933
+ "metric": "protected delivery dependency budget",
1934
+ "expectedContributionSeconds": 21600,
1935
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1936
+ }
1937
+ },
1938
+ {
1939
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-alpha",
1940
+ "authorityClass": "governed-delegation",
1941
+ "triggerClass": "mixed",
1942
+ "concurrencyPolicy": {
1943
+ "mode": "none",
1944
+ "cancelInProgress": false
1945
+ },
1946
+ "expectedRunnerMinutes": 360,
1947
+ "cancellationBehavior": "provider-default",
1948
+ "sloImpact": {
1949
+ "mergeCritical": true,
1950
+ "metric": "protected delivery dependency budget",
1951
+ "expectedContributionSeconds": 21600,
1952
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1953
+ }
1954
+ },
1955
+ {
1956
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-conformance",
1957
+ "authorityClass": "governed-delegation",
1958
+ "triggerClass": "mixed",
1959
+ "concurrencyPolicy": {
1960
+ "mode": "none",
1961
+ "cancelInProgress": false
1962
+ },
1963
+ "expectedRunnerMinutes": 360,
1964
+ "cancellationBehavior": "provider-default",
1965
+ "sloImpact": {
1966
+ "mergeCritical": true,
1967
+ "metric": "protected delivery dependency budget",
1968
+ "expectedContributionSeconds": 21600,
1969
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1970
+ }
1971
+ },
1972
+ {
1973
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-stable",
1974
+ "authorityClass": "governed-delegation",
1975
+ "triggerClass": "mixed",
1976
+ "concurrencyPolicy": {
1977
+ "mode": "none",
1978
+ "cancelInProgress": false
1979
+ },
1980
+ "expectedRunnerMinutes": 360,
1981
+ "cancellationBehavior": "provider-default",
1982
+ "sloImpact": {
1983
+ "mergeCritical": true,
1984
+ "metric": "protected delivery dependency budget",
1985
+ "expectedContributionSeconds": 21600,
1986
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1987
+ }
1988
+ },
1989
+ {
1990
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#reconcile",
1991
+ "authorityClass": "merge-critical-admission",
1992
+ "triggerClass": "mixed",
1993
+ "concurrencyPolicy": {
1994
+ "mode": "none",
1995
+ "cancelInProgress": false
1996
+ },
1997
+ "expectedRunnerMinutes": 360,
1998
+ "cancellationBehavior": "provider-default",
1999
+ "sloImpact": {
2000
+ "mergeCritical": true,
2001
+ "metric": "protected delivery dependency budget",
2002
+ "expectedContributionSeconds": 21600,
2003
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2004
+ }
2005
+ },
2006
+ {
2007
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-alpha",
2008
+ "authorityClass": "governed-delegation",
2009
+ "triggerClass": "mixed",
2010
+ "concurrencyPolicy": {
2011
+ "mode": "none",
2012
+ "cancelInProgress": false
2013
+ },
2014
+ "expectedRunnerMinutes": 360,
2015
+ "cancellationBehavior": "provider-default",
2016
+ "sloImpact": {
2017
+ "mergeCritical": true,
2018
+ "metric": "protected delivery dependency budget",
2019
+ "expectedContributionSeconds": 21600,
2020
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2021
+ }
2022
+ },
2023
+ {
2024
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-conformance",
2025
+ "authorityClass": "governed-delegation",
2026
+ "triggerClass": "mixed",
2027
+ "concurrencyPolicy": {
2028
+ "mode": "none",
2029
+ "cancelInProgress": false
2030
+ },
2031
+ "expectedRunnerMinutes": 360,
2032
+ "cancellationBehavior": "provider-default",
2033
+ "sloImpact": {
2034
+ "mergeCritical": true,
2035
+ "metric": "protected delivery dependency budget",
2036
+ "expectedContributionSeconds": 21600,
2037
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2038
+ }
2039
+ },
2040
+ {
2041
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-stable",
2042
+ "authorityClass": "governed-delegation",
2043
+ "triggerClass": "mixed",
2044
+ "concurrencyPolicy": {
2045
+ "mode": "none",
2046
+ "cancelInProgress": false
2047
+ },
2048
+ "expectedRunnerMinutes": 360,
2049
+ "cancellationBehavior": "provider-default",
2050
+ "sloImpact": {
2051
+ "mergeCritical": true,
2052
+ "metric": "protected delivery dependency budget",
2053
+ "expectedContributionSeconds": 21600,
2054
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2055
+ }
2056
+ },
2057
+ {
2058
+ "laneId": ".github/workflows/self-ops-dev-delivery.yml#deliver",
2059
+ "authorityClass": "governed-delegation",
2060
+ "triggerClass": "mixed",
2061
+ "concurrencyPolicy": {
2062
+ "mode": "none",
2063
+ "cancelInProgress": false
2064
+ },
2065
+ "expectedRunnerMinutes": 360,
2066
+ "cancellationBehavior": "provider-default",
2067
+ "sloImpact": {
2068
+ "mergeCritical": false,
2069
+ "metric": "capability execution budget",
2070
+ "expectedContributionSeconds": 0,
2071
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2072
+ }
2073
+ },
2074
+ {
2075
+ "laneId": ".github/workflows/self-ops-governance-audit.yml#audit",
2076
+ "authorityClass": "merge-critical-admission",
2077
+ "triggerClass": "mixed",
2078
+ "concurrencyPolicy": {
2079
+ "mode": "ref-scoped",
2080
+ "cancelInProgress": false
2081
+ },
2082
+ "expectedRunnerMinutes": 20,
2083
+ "cancellationBehavior": "finish-started",
2084
+ "sloImpact": {
2085
+ "mergeCritical": true,
2086
+ "metric": "protected delivery dependency budget",
2087
+ "expectedContributionSeconds": 1200,
2088
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2089
+ }
2090
+ },
2091
+ {
2092
+ "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#apply",
2093
+ "authorityClass": "governed-delegation",
2094
+ "triggerClass": "mixed",
2095
+ "concurrencyPolicy": {
2096
+ "mode": "none",
2097
+ "cancelInProgress": false
2098
+ },
2099
+ "expectedRunnerMinutes": 360,
2100
+ "cancellationBehavior": "provider-default",
2101
+ "sloImpact": {
2102
+ "mergeCritical": false,
2103
+ "metric": "capability execution budget",
2104
+ "expectedContributionSeconds": 0,
2105
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2106
+ }
2107
+ },
2108
+ {
2109
+ "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#invalid-apply-gate",
2110
+ "authorityClass": "post-merge-advisory",
2111
+ "triggerClass": "mixed",
2112
+ "concurrencyPolicy": {
2113
+ "mode": "none",
2114
+ "cancelInProgress": false
2115
+ },
2116
+ "expectedRunnerMinutes": 360,
2117
+ "cancellationBehavior": "provider-default",
2118
+ "sloImpact": {
2119
+ "mergeCritical": false,
2120
+ "metric": "capability execution budget",
2121
+ "expectedContributionSeconds": 0,
2122
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2123
+ }
2124
+ },
2125
+ {
2126
+ "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#report",
2127
+ "authorityClass": "governed-delegation",
2128
+ "triggerClass": "mixed",
2129
+ "concurrencyPolicy": {
2130
+ "mode": "none",
2131
+ "cancelInProgress": false
2132
+ },
2133
+ "expectedRunnerMinutes": 360,
2134
+ "cancellationBehavior": "provider-default",
2135
+ "sloImpact": {
2136
+ "mergeCritical": false,
2137
+ "metric": "capability execution budget",
2138
+ "expectedContributionSeconds": 0,
2139
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2140
+ }
2141
+ },
2142
+ {
2143
+ "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#apply",
2144
+ "authorityClass": "governed-delegation",
2145
+ "triggerClass": "mixed",
2146
+ "concurrencyPolicy": {
2147
+ "mode": "none",
2148
+ "cancelInProgress": false
2149
+ },
2150
+ "expectedRunnerMinutes": 360,
2151
+ "cancellationBehavior": "provider-default",
2152
+ "sloImpact": {
2153
+ "mergeCritical": false,
2154
+ "metric": "capability execution budget",
2155
+ "expectedContributionSeconds": 0,
2156
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2157
+ }
2158
+ },
2159
+ {
2160
+ "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#invalid-apply-gate",
2161
+ "authorityClass": "post-merge-advisory",
2162
+ "triggerClass": "mixed",
2163
+ "concurrencyPolicy": {
2164
+ "mode": "none",
2165
+ "cancelInProgress": false
2166
+ },
2167
+ "expectedRunnerMinutes": 360,
2168
+ "cancellationBehavior": "provider-default",
2169
+ "sloImpact": {
2170
+ "mergeCritical": false,
2171
+ "metric": "capability execution budget",
2172
+ "expectedContributionSeconds": 0,
2173
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2174
+ }
2175
+ },
2176
+ {
2177
+ "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#report",
2178
+ "authorityClass": "governed-delegation",
2179
+ "triggerClass": "mixed",
2180
+ "concurrencyPolicy": {
2181
+ "mode": "none",
2182
+ "cancelInProgress": false
2183
+ },
2184
+ "expectedRunnerMinutes": 360,
2185
+ "cancellationBehavior": "provider-default",
2186
+ "sloImpact": {
2187
+ "mergeCritical": false,
2188
+ "metric": "capability execution budget",
2189
+ "expectedContributionSeconds": 0,
2190
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2191
+ }
2192
+ },
2193
+ {
2194
+ "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#apply",
2195
+ "authorityClass": "governed-delegation",
2196
+ "triggerClass": "mixed",
2197
+ "concurrencyPolicy": {
2198
+ "mode": "none",
2199
+ "cancelInProgress": false
2200
+ },
2201
+ "expectedRunnerMinutes": 360,
2202
+ "cancellationBehavior": "provider-default",
2203
+ "sloImpact": {
2204
+ "mergeCritical": false,
2205
+ "metric": "capability execution budget",
2206
+ "expectedContributionSeconds": 0,
2207
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2208
+ }
2209
+ },
2210
+ {
2211
+ "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#invalid-apply-gate",
2212
+ "authorityClass": "post-merge-advisory",
2213
+ "triggerClass": "mixed",
2214
+ "concurrencyPolicy": {
2215
+ "mode": "none",
2216
+ "cancelInProgress": false
2217
+ },
2218
+ "expectedRunnerMinutes": 360,
2219
+ "cancellationBehavior": "provider-default",
2220
+ "sloImpact": {
2221
+ "mergeCritical": false,
2222
+ "metric": "capability execution budget",
2223
+ "expectedContributionSeconds": 0,
2224
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2225
+ }
2226
+ },
2227
+ {
2228
+ "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#report",
2229
+ "authorityClass": "governed-delegation",
2230
+ "triggerClass": "mixed",
2231
+ "concurrencyPolicy": {
2232
+ "mode": "none",
2233
+ "cancelInProgress": false
2234
+ },
2235
+ "expectedRunnerMinutes": 360,
2236
+ "cancellationBehavior": "provider-default",
2237
+ "sloImpact": {
2238
+ "mergeCritical": false,
2239
+ "metric": "capability execution budget",
2240
+ "expectedContributionSeconds": 0,
2241
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2242
+ }
2243
+ },
2244
+ {
2245
+ "laneId": ".github/workflows/self-ops-merge-queue.yml#reconcile",
2246
+ "authorityClass": "evidence",
2247
+ "triggerClass": "mixed",
2248
+ "concurrencyPolicy": {
2249
+ "mode": "none",
2250
+ "cancelInProgress": false
2251
+ },
2252
+ "expectedRunnerMinutes": 360,
2253
+ "cancellationBehavior": "provider-default",
2254
+ "sloImpact": {
2255
+ "mergeCritical": false,
2256
+ "metric": "capability execution budget",
2257
+ "expectedContributionSeconds": 0,
2258
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2259
+ }
2260
+ },
2261
+ {
2262
+ "laneId": ".github/workflows/self-ops-patrol-daily.yml#patrol",
2263
+ "authorityClass": "governed-delegation",
2264
+ "triggerClass": "mixed",
2265
+ "concurrencyPolicy": {
2266
+ "mode": "none",
2267
+ "cancelInProgress": false
2268
+ },
2269
+ "expectedRunnerMinutes": 360,
2270
+ "cancellationBehavior": "provider-default",
2271
+ "sloImpact": {
2272
+ "mergeCritical": false,
2273
+ "metric": "capability execution budget",
2274
+ "expectedContributionSeconds": 0,
2275
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2276
+ }
2277
+ },
2278
+ {
2279
+ "laneId": ".github/workflows/self-ops-patrol-monthly.yml#patrol",
2280
+ "authorityClass": "governed-delegation",
2281
+ "triggerClass": "mixed",
2282
+ "concurrencyPolicy": {
2283
+ "mode": "none",
2284
+ "cancelInProgress": false
2285
+ },
2286
+ "expectedRunnerMinutes": 360,
2287
+ "cancellationBehavior": "provider-default",
2288
+ "sloImpact": {
2289
+ "mergeCritical": false,
2290
+ "metric": "capability execution budget",
2291
+ "expectedContributionSeconds": 0,
2292
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2293
+ }
2294
+ },
2295
+ {
2296
+ "laneId": ".github/workflows/self-ops-patrol-weekly.yml#patrol",
2297
+ "authorityClass": "governed-delegation",
2298
+ "triggerClass": "mixed",
2299
+ "concurrencyPolicy": {
2300
+ "mode": "none",
2301
+ "cancelInProgress": false
2302
+ },
2303
+ "expectedRunnerMinutes": 360,
2304
+ "cancellationBehavior": "provider-default",
2305
+ "sloImpact": {
2306
+ "mergeCritical": false,
2307
+ "metric": "capability execution budget",
2308
+ "expectedContributionSeconds": 0,
2309
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2310
+ }
2311
+ },
2312
+ {
2313
+ "laneId": ".github/workflows/self-ops-promotion-recovery.yml#resume",
2314
+ "authorityClass": "governed-delegation",
2315
+ "triggerClass": "manual",
2316
+ "concurrencyPolicy": {
2317
+ "mode": "none",
2318
+ "cancelInProgress": false
2319
+ },
2320
+ "expectedRunnerMinutes": 360,
2321
+ "cancellationBehavior": "provider-default",
2322
+ "sloImpact": {
2323
+ "mergeCritical": false,
2324
+ "metric": "capability execution budget",
2325
+ "expectedContributionSeconds": 0,
2326
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2327
+ }
2328
+ },
2329
+ {
2330
+ "laneId": ".github/workflows/self-ops-runner-smoke.yml#smoke",
2331
+ "authorityClass": "evidence",
2332
+ "triggerClass": "manual",
2333
+ "concurrencyPolicy": {
2334
+ "mode": "none",
2335
+ "cancelInProgress": false
2336
+ },
2337
+ "expectedRunnerMinutes": 360,
2338
+ "cancellationBehavior": "provider-default",
2339
+ "sloImpact": {
2340
+ "mergeCritical": false,
2341
+ "metric": "capability execution budget",
2342
+ "expectedContributionSeconds": 0,
2343
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2344
+ }
2345
+ },
2346
+ {
2347
+ "laneId": ".github/workflows/self-ops-stable-candidate-patrol.yml#patrol",
2348
+ "authorityClass": "governed-delegation",
2349
+ "triggerClass": "mixed",
2350
+ "concurrencyPolicy": {
2351
+ "mode": "none",
2352
+ "cancelInProgress": false
2353
+ },
2354
+ "expectedRunnerMinutes": 360,
2355
+ "cancellationBehavior": "provider-default",
2356
+ "sloImpact": {
2357
+ "mergeCritical": false,
2358
+ "metric": "capability execution budget",
2359
+ "expectedContributionSeconds": 0,
2360
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2361
+ }
2362
+ },
2363
+ {
2364
+ "laneId": ".github/workflows/self-release-binary-assets.yml#publish",
2365
+ "authorityClass": "governed-delegation",
2366
+ "triggerClass": "manual",
2367
+ "concurrencyPolicy": {
2368
+ "mode": "none",
2369
+ "cancelInProgress": false
2370
+ },
2371
+ "expectedRunnerMinutes": 360,
2372
+ "cancellationBehavior": "provider-default",
2373
+ "sloImpact": {
2374
+ "mergeCritical": false,
2375
+ "metric": "capability execution budget",
2376
+ "expectedContributionSeconds": 0,
2377
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2378
+ }
2379
+ },
2380
+ {
2381
+ "laneId": ".github/workflows/self-release-binary-assets.yml#resolve",
2382
+ "authorityClass": "release",
2383
+ "triggerClass": "manual",
2384
+ "concurrencyPolicy": {
2385
+ "mode": "none",
2386
+ "cancelInProgress": false
2387
+ },
2388
+ "expectedRunnerMinutes": 360,
2389
+ "cancellationBehavior": "provider-default",
2390
+ "sloImpact": {
2391
+ "mergeCritical": false,
2392
+ "metric": "capability execution budget",
2393
+ "expectedContributionSeconds": 0,
2394
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2395
+ }
2396
+ },
2397
+ {
2398
+ "laneId": ".github/workflows/self-release-line-open.yml#bootstrap",
2399
+ "authorityClass": "release",
2400
+ "triggerClass": "manual",
2401
+ "concurrencyPolicy": {
2402
+ "mode": "none",
2403
+ "cancelInProgress": false
2404
+ },
2405
+ "expectedRunnerMinutes": 360,
2406
+ "cancellationBehavior": "provider-default",
2407
+ "sloImpact": {
2408
+ "mergeCritical": false,
2409
+ "metric": "capability execution budget",
2410
+ "expectedContributionSeconds": 0,
2411
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2412
+ }
2413
+ },
2414
+ {
2415
+ "laneId": ".github/workflows/self-release-next-development.yml#review",
2416
+ "authorityClass": "merge-critical-admission",
2417
+ "triggerClass": "mixed",
2418
+ "concurrencyPolicy": {
2419
+ "mode": "ref-scoped",
2420
+ "cancelInProgress": false
2421
+ },
2422
+ "expectedRunnerMinutes": 3,
2423
+ "cancellationBehavior": "finish-started",
2424
+ "sloImpact": {
2425
+ "mergeCritical": true,
2426
+ "metric": "generated next-development independent review latency",
2427
+ "expectedContributionSeconds": 180,
2428
+ "rationale": "Only successful same-repository version PRs regenerate from the protected base and read completed publication evidence; ordinary source PRs skip the lane. Native queue checks remain final merge authority."
2429
+ }
2430
+ },
2431
+ {
2432
+ "laneId": ".github/workflows/self-release-npm-dry-run.yml#dry-run",
2433
+ "authorityClass": "release",
2434
+ "triggerClass": "manual",
2435
+ "concurrencyPolicy": {
2436
+ "mode": "none",
2437
+ "cancelInProgress": false
2438
+ },
2439
+ "expectedRunnerMinutes": 360,
2440
+ "cancellationBehavior": "provider-default",
2441
+ "sloImpact": {
2442
+ "mergeCritical": false,
2443
+ "metric": "capability execution budget",
2444
+ "expectedContributionSeconds": 0,
2445
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2446
+ }
2447
+ },
2448
+ {
2449
+ "laneId": ".github/workflows/self-release-promote.yml#classify-workflow-run",
2450
+ "authorityClass": "release",
2451
+ "triggerClass": "mixed",
2452
+ "concurrencyPolicy": {
2453
+ "mode": "none",
2454
+ "cancelInProgress": false
2455
+ },
2456
+ "expectedRunnerMinutes": 360,
2457
+ "cancellationBehavior": "provider-default",
2458
+ "sloImpact": {
2459
+ "mergeCritical": false,
2460
+ "metric": "capability execution budget",
2461
+ "expectedContributionSeconds": 0,
2462
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2463
+ }
2464
+ },
2465
+ {
2466
+ "laneId": ".github/workflows/self-release-promote.yml#promote",
2467
+ "authorityClass": "governed-delegation",
2468
+ "triggerClass": "mixed",
2469
+ "concurrencyPolicy": {
2470
+ "mode": "none",
2471
+ "cancelInProgress": false
2472
+ },
2473
+ "expectedRunnerMinutes": 360,
2474
+ "cancellationBehavior": "provider-default",
2475
+ "sloImpact": {
2476
+ "mergeCritical": false,
2477
+ "metric": "capability execution budget",
2478
+ "expectedContributionSeconds": 0,
2479
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2480
+ }
2481
+ },
2482
+ {
2483
+ "laneId": ".github/workflows/self-release-promote.yml#reject-invalid-candidate-recovery",
2484
+ "authorityClass": "release",
2485
+ "triggerClass": "mixed",
2486
+ "concurrencyPolicy": {
2487
+ "mode": "none",
2488
+ "cancelInProgress": false
2489
+ },
2490
+ "expectedRunnerMinutes": 360,
2491
+ "cancellationBehavior": "provider-default",
2492
+ "sloImpact": {
2493
+ "mergeCritical": false,
2494
+ "metric": "capability execution budget",
2495
+ "expectedContributionSeconds": 0,
2496
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2497
+ }
2498
+ },
2499
+ {
2500
+ "laneId": ".github/workflows/self-release-promote.yml#reject-invalid-durable-recovery",
2501
+ "authorityClass": "release",
2502
+ "triggerClass": "mixed",
2503
+ "concurrencyPolicy": {
2504
+ "mode": "none",
2505
+ "cancelInProgress": false
2506
+ },
2507
+ "expectedRunnerMinutes": 360,
2508
+ "cancellationBehavior": "provider-default",
2509
+ "sloImpact": {
2510
+ "mergeCritical": false,
2511
+ "metric": "capability execution budget",
2512
+ "expectedContributionSeconds": 0,
2513
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2514
+ }
2515
+ },
2516
+ {
2517
+ "laneId": ".github/workflows/self-release-promote.yml#reject-manual-apply",
2518
+ "authorityClass": "release",
2519
+ "triggerClass": "mixed",
2520
+ "concurrencyPolicy": {
2521
+ "mode": "none",
2522
+ "cancelInProgress": false
2523
+ },
2524
+ "expectedRunnerMinutes": 360,
2525
+ "cancellationBehavior": "provider-default",
2526
+ "sloImpact": {
2527
+ "mergeCritical": false,
2528
+ "metric": "capability execution budget",
2529
+ "expectedContributionSeconds": 0,
2530
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2531
+ }
2532
+ },
2533
+ {
2534
+ "laneId": ".github/workflows/self-release-rehearsal-dogfood.yml#rehearsal",
2535
+ "authorityClass": "governed-delegation",
2536
+ "triggerClass": "mixed",
2537
+ "concurrencyPolicy": {
2538
+ "mode": "none",
2539
+ "cancelInProgress": false
2540
+ },
2541
+ "expectedRunnerMinutes": 360,
2542
+ "cancellationBehavior": "provider-default",
2543
+ "sloImpact": {
2544
+ "mergeCritical": true,
2545
+ "metric": "protected delivery dependency budget",
2546
+ "expectedContributionSeconds": 21600,
2547
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2548
+ }
2549
+ },
2550
+ {
2551
+ "laneId": ".github/workflows/self-release-tail-dogfood.yml#publish",
2552
+ "authorityClass": "governed-delegation",
2553
+ "triggerClass": "manual",
2554
+ "concurrencyPolicy": {
2555
+ "mode": "none",
2556
+ "cancelInProgress": false
2557
+ },
2558
+ "expectedRunnerMinutes": 360,
2559
+ "cancellationBehavior": "provider-default",
2560
+ "sloImpact": {
2561
+ "mergeCritical": false,
2562
+ "metric": "capability execution budget",
2563
+ "expectedContributionSeconds": 0,
2564
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2565
+ }
2566
+ }
2567
+ ],
2568
+ "declarationFamilies": [
2569
+ {
2570
+ "laneIds": [
2571
+ ".github/workflows/.build-demo-adapter.yml#execution-runtime",
2572
+ ".github/workflows/.release-promote.yml#execution-runtime",
2573
+ ".github/workflows/public-build-demo.yml#execution-runtime",
2574
+ ".github/workflows/public-ops-alpha-candidate-patrol.yml#execution-runtime",
2575
+ ".github/workflows/public-ops-dev-auto-merge.yml#execution-runtime",
2576
+ ".github/workflows/public-ops-dev-qualification-patrol.yml#execution-runtime",
2577
+ ".github/workflows/public-ops-housekeeping.yml#execution-runtime",
2578
+ ".github/workflows/public-ops-patrol.yml#execution-runtime",
2579
+ ".github/workflows/public-ops-stable-candidate-patrol.yml#execution-runtime",
2580
+ ".github/workflows/public-release-oci-compose-preview.yml#execution-runtime"
2581
+ ],
2582
+ "authorityClass": "governed-delegation",
2583
+ "triggerClass": "reusable",
2584
+ "concurrencyPolicy": {
2585
+ "mode": "ref-scoped",
2586
+ "cancelInProgress": false
2587
+ },
2588
+ "expectedRunnerMinutes": 5,
2589
+ "cancellationBehavior": "finish-started",
2590
+ "sloImpact": {
2591
+ "mergeCritical": false,
2592
+ "metric": "runtime entry preparation",
2593
+ "expectedContributionSeconds": 300,
2594
+ "rationale": "Five-minute upper bound for central entry selection; no business execution or provider mutation."
2595
+ }
2596
+ },
2597
+ {
2598
+ "laneIds": [
2599
+ ".github/workflows/.build-gate-profile.yml#execution-runtime",
2600
+ ".github/workflows/.build.yml#execution-runtime",
2601
+ ".github/workflows/.ops-git-sync.yml#execution-runtime",
2602
+ ".github/workflows/.release-authority.yml#execution-runtime",
2603
+ ".github/workflows/.release-binary-assets.yml#execution-runtime",
2604
+ ".github/workflows/public-build-check.yml#execution-runtime",
2605
+ ".github/workflows/public-build-publication.yml#execution-runtime",
2606
+ ".github/workflows/public-build-stage-capsule-canary.yml#execution-runtime",
2607
+ ".github/workflows/public-ops-bootstrap.yml#execution-runtime",
2608
+ ".github/workflows/public-ops-observed-evidence.yml#execution-runtime",
2609
+ ".github/workflows/public-ops-tail-reseal.yml#execution-runtime",
2610
+ ".github/workflows/public-ops-warrant-cancel.yml#execution-runtime",
2611
+ ".github/workflows/public-ops-warrant-close.yml#execution-runtime",
2612
+ ".github/workflows/public-release-artifact-attestation.yml#execution-runtime",
2613
+ ".github/workflows/public-release-paper.yml#execution-runtime",
2614
+ ".github/workflows/public-release-promote.yml#execution-runtime",
2615
+ ".github/workflows/public-release-propagation.yml#execution-runtime",
2616
+ ".github/workflows/public-release-tail.yml#execution-runtime",
2617
+ ".github/workflows/public-release-web.yml#execution-runtime"
2618
+ ],
2619
+ "authorityClass": "governed-delegation",
2620
+ "triggerClass": "reusable",
2621
+ "concurrencyPolicy": {
2622
+ "mode": "none",
2623
+ "cancelInProgress": false
2624
+ },
2625
+ "expectedRunnerMinutes": 5,
2626
+ "cancellationBehavior": "finish-started",
2627
+ "sloImpact": {
2628
+ "mergeCritical": false,
2629
+ "metric": "runtime entry preparation",
2630
+ "expectedContributionSeconds": 300,
2631
+ "rationale": "Five-minute upper bound for central entry selection; no business execution or provider mutation."
2632
+ }
2633
+ },
2634
+ {
2635
+ "laneIds": [
2636
+ ".github/workflows/public-build-adopter-qualification.yml#execution-runtime",
2637
+ ".github/workflows/public-ops-release-governance.yml#execution-runtime",
2638
+ ".github/workflows/self-build-binary-distribution.yml#execution-runtime",
2639
+ ".github/workflows/self-build-demo-media-qualification.yml#execution-runtime",
2640
+ ".github/workflows/self-build-fixture.yml#execution-runtime",
2641
+ ".github/workflows/self-build-verify.yml#execution-runtime",
2642
+ ".github/workflows/self-ops-bootstrap-dogfood.yml#execution-runtime",
2643
+ ".github/workflows/self-ops-housekeeping-daily.yml#execution-runtime",
2644
+ ".github/workflows/self-ops-housekeeping-monthly.yml#execution-runtime",
2645
+ ".github/workflows/self-ops-housekeeping-weekly.yml#execution-runtime",
2646
+ ".github/workflows/self-ops-merge-queue.yml#execution-runtime",
2647
+ ".github/workflows/self-release-promote.yml#execution-runtime"
2648
+ ],
2649
+ "authorityClass": "governed-delegation",
2650
+ "triggerClass": "mixed",
2651
+ "concurrencyPolicy": {
2652
+ "mode": "none",
2653
+ "cancelInProgress": false
2654
+ },
2655
+ "expectedRunnerMinutes": 5,
2656
+ "cancellationBehavior": "finish-started",
2657
+ "sloImpact": {
2658
+ "mergeCritical": false,
2659
+ "metric": "runtime entry preparation",
2660
+ "expectedContributionSeconds": 300,
2661
+ "rationale": "Five-minute upper bound for central entry selection; no business execution or provider mutation."
2662
+ }
2663
+ },
2664
+ {
2665
+ "laneIds": [
2666
+ ".github/workflows/public-release-signing-authority.yml#execution-runtime"
2667
+ ],
2668
+ "authorityClass": "governed-delegation",
2669
+ "triggerClass": "manual",
2670
+ "concurrencyPolicy": {
2671
+ "mode": "ref-scoped",
2672
+ "cancelInProgress": false
2673
+ },
2674
+ "expectedRunnerMinutes": 5,
2675
+ "cancellationBehavior": "finish-started",
2676
+ "sloImpact": {
2677
+ "mergeCritical": false,
2678
+ "metric": "runtime entry preparation",
2679
+ "expectedContributionSeconds": 300,
2680
+ "rationale": "Five-minute upper bound for central entry selection; no business execution or provider mutation."
2681
+ }
2682
+ },
2683
+ {
2684
+ "laneIds": [
2685
+ ".github/workflows/self-build-channel-verify.yml#execution-runtime"
2686
+ ],
2687
+ "authorityClass": "governed-delegation",
2688
+ "triggerClass": "pull-request",
2689
+ "concurrencyPolicy": {
2690
+ "mode": "none",
2691
+ "cancelInProgress": false
2692
+ },
2693
+ "expectedRunnerMinutes": 5,
2694
+ "cancellationBehavior": "finish-started",
2695
+ "sloImpact": {
2696
+ "mergeCritical": false,
2697
+ "metric": "runtime entry preparation",
2698
+ "expectedContributionSeconds": 300,
2699
+ "rationale": "Five-minute upper bound for central entry selection; no business execution or provider mutation."
2700
+ }
2701
+ },
2702
+ {
2703
+ "laneIds": [
2704
+ ".github/workflows/self-build-demo-dogfood.yml#execution-runtime",
2705
+ ".github/workflows/self-build-stable-candidate-qualification.yml#execution-runtime",
2706
+ ".github/workflows/self-ops-governance-audit.yml#execution-runtime",
2707
+ ".github/workflows/self-release-next-development.yml#execution-runtime"
2708
+ ],
2709
+ "authorityClass": "governed-delegation",
2710
+ "triggerClass": "mixed",
2711
+ "concurrencyPolicy": {
2712
+ "mode": "ref-scoped",
2713
+ "cancelInProgress": false
2714
+ },
2715
+ "expectedRunnerMinutes": 5,
2716
+ "cancellationBehavior": "finish-started",
2717
+ "sloImpact": {
2718
+ "mergeCritical": false,
2719
+ "metric": "runtime entry preparation",
2720
+ "expectedContributionSeconds": 300,
2721
+ "rationale": "Five-minute upper bound for central entry selection; no business execution or provider mutation."
2722
+ }
2723
+ },
2724
+ {
2725
+ "laneIds": [
2726
+ ".github/workflows/self-ops-runner-smoke.yml#execution-runtime",
2727
+ ".github/workflows/self-release-binary-assets.yml#execution-runtime",
2728
+ ".github/workflows/self-release-line-open.yml#execution-runtime",
2729
+ ".github/workflows/self-release-npm-dry-run.yml#execution-runtime"
2730
+ ],
2731
+ "authorityClass": "governed-delegation",
2732
+ "triggerClass": "manual",
2733
+ "concurrencyPolicy": {
2734
+ "mode": "none",
2735
+ "cancelInProgress": false
2736
+ },
2737
+ "expectedRunnerMinutes": 5,
2738
+ "cancellationBehavior": "finish-started",
2739
+ "sloImpact": {
2740
+ "mergeCritical": false,
2741
+ "metric": "runtime entry preparation",
2742
+ "expectedContributionSeconds": 300,
2743
+ "rationale": "Five-minute upper bound for central entry selection; no business execution or provider mutation."
2744
+ }
755
2745
  }
756
2746
  ]
757
2747
  }