@kungfu-tech/buildchain 4.0.2-alpha.0 → 4.0.2-alpha.10

package/dist/site/public-surface-audit.json

@@ -934,7 +934,6 @@
         "reusable": true,
         "inputs": [
           "admission-json",
-          "authority-job-id",
           "authority-workflow-path",
           "auto-admission",
           "auto-admission-kind",
@@ -972,7 +971,7 @@
           "target-ref",
           "used-nonces-json"
         ],
-        "inputCount": 38,
+        "inputCount": 37,
         "secrets": [
           "BUILDCHAIN_GOVERNANCE_READ_TOKEN",
           "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
@@ -1151,14 +1150,17 @@
           "release-candidate-artifact",
           "release-candidate-recovery-receipt-artifact",
           "release-candidate-recovery-root",
+          "release-invocation-root",
           "release-propagation-work-artifact",
+          "release-receipt-root",
           "release-tail-declaration-root",
           "release-tail-receipt-roots-json",
           "release-tail-state-root",
           "release-tail-transaction-root",
-          "release-tail-transaction-state"
+          "release-tail-transaction-state",
+          "release-transaction-root"
         ],
-        "outputCount": 28
+        "outputCount": 31
       },
       {
         "id": ".release-docker",
@@ -2731,14 +2733,17 @@
           "release-candidate-artifact",
           "release-candidate-recovery-receipt-artifact",
           "release-candidate-recovery-root",
+          "release-invocation-root",
           "release-propagation-work-artifact",
+          "release-receipt-root",
           "release-tail-declaration-root",
           "release-tail-receipt-roots-json",
           "release-tail-state-root",
           "release-tail-transaction-root",
-          "release-tail-transaction-state"
+          "release-tail-transaction-state",
+          "release-transaction-root"
         ],
-        "outputCount": 40
+        "outputCount": 43
       },
       {
         "id": "release-governance-reconcile",
@@ -3299,15 +3304,37 @@
         "path": "actions/v4-release-candidate-promote/action.yml",
         "inputs": [
           "artifact-paths",
+          "candidate-build-summary-path",
           "candidate-passport-path",
           "failure-after-capability",
+          "mutation-token",
+          "product-publication-intent-path",
           "publication-qualification-path",
+          "publish-auth",
+          "publish-command",
+          "publish-dist-tag",
+          "publish-mode",
+          "publish-package-main",
+          "publish-package-set-order",
+          "publish-rematerialize-on-resume",
+          "publish-transaction-override",
+          "publisher-workflow-sha",
           "repository",
+          "required-artifacts-path",
+          "required-status-check",
+          "resume-transaction-id",
+          "runtime-commit",
+          "runtime-tree",
+          "sealed-bundle-manifest",
+          "sealed-bundle-root",
+          "source-sha",
           "stage-capsules-path",
           "state-path",
+          "target-ref",
+          "target-sha",
           "token"
         ],
-        "inputCount": 8
+        "inputCount": 30
       },
       {
         "id": "validate-config",
@@ -8916,8 +8943,8 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "fbc23073bbae240489a2f826b2c26daadc58e704050c5f8df366509f5c5a1c3e",
-    "workflowRegistryDigest": "48dcf0d6e798d64f8cb0acb2c7e6af7782b8332f9a254a83512abf9d8e31a49f",
-    "pageRegistryDigest": "620d7dd295b0ed42c046ebea1b2cfb97b69f9e10a0c4f5cb0b796e7e0f1219d1"
+    "workflowRegistryDigest": "94bf156ba4e061eea93609fc3c5773fbc1d082452d584611f10cddf34ad36e93",
+    "pageRegistryDigest": "225249f141d3242a46c66de72f005f119235b7e13b873594f1c503185d7a285e"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-authority-registry.json

@@ -803,8 +803,7 @@
       "path": ".github/workflows/.release-candidate-promote.yml",
       "signals": [
         "write-permission",
-        "oidc",
-        "environment"
+        "oidc"
       ],
       "classified": true
     },
@@ -1260,5 +1259,5 @@
       "classified": false
     }
   ],
-  "registryDigest": "4f60d125496eb73e47dc21ceafa340e5cd7c5fd840eabfa17044dbacedd97f5a"
+  "registryDigest": "123c20ea9806ce8ba7b82545165b30ce08537eee64795c2de11f0cc3546a0844"
 }

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-08-28T20:30:35.956Z",
-  "publishedAt": "2026-08-28T20:30:35.956Z",
+  "generatedAt": "2026-08-31T02:59:43.000Z",
+  "publishedAt": "2026-08-31T02:59:43.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "3881f9dea6fa750ce5e561fc86419a163ca19b90",
+  "sourceRevision": "e113193be5efb13eb5a47f7f51f2d59989e4d969",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.0",
+    "version": "4.0.2-alpha.10",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-08-28T20:30:35.956Z",
-  "publishedAt": "2026-08-28T20:30:35.956Z",
+  "generatedAt": "2026-08-31T02:59:43.000Z",
+  "publishedAt": "2026-08-31T02:59:43.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "3881f9dea6fa750ce5e561fc86419a163ca19b90",
+  "sourceRevision": "e113193be5efb13eb5a47f7f51f2d59989e4d969",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.0.2-alpha.0",
+    "version": "4.0.2-alpha.10",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -253,7 +253,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:e9683e04409d60ee1a4e60f89766c158586cf1eb91fc890f0b2660814f05dbdb"
+      "digest": "sha256:1f50b0f7a45632b6e08b492687818ccbd3e0f00d7f189a21e1512e1a61df7df8"
     },
     {
       "id": "build-facts",

package/dist/site/workflow-registry.json

@@ -398,7 +398,6 @@
       "reusable": true,
       "inputs": [
         "admission-json",
-        "authority-job-id",
         "authority-workflow-path",
         "auto-admission",
         "auto-admission-kind",
@@ -436,7 +435,7 @@
         "target-ref",
         "used-nonces-json"
       ],
-      "inputCount": 38,
+      "inputCount": 37,
       "secrets": [
         "BUILDCHAIN_GOVERNANCE_READ_TOKEN",
         "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
@@ -625,14 +624,17 @@
         "release-candidate-artifact",
         "release-candidate-recovery-receipt-artifact",
         "release-candidate-recovery-root",
+        "release-invocation-root",
         "release-propagation-work-artifact",
+        "release-receipt-root",
         "release-tail-declaration-root",
         "release-tail-receipt-roots-json",
         "release-tail-state-root",
         "release-tail-transaction-root",
-        "release-tail-transaction-state"
+        "release-tail-transaction-state",
+        "release-transaction-root"
       ],
-      "outputCount": 28,
+      "outputCount": 31,
       "surface": "reusable-workflow",
       "capabilityGroup": "api-cli-reference",
       "status": "active",
@@ -2039,7 +2041,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.0",
+      "introducedVersion": "4.0.2-alpha.10",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2060,7 +2062,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.0",
+      "introducedVersion": "4.0.2-alpha.10",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2081,7 +2083,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.0",
+      "introducedVersion": "4.0.2-alpha.10",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2131,7 +2133,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.0",
+      "introducedVersion": "4.0.2-alpha.10",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2725,14 +2727,17 @@
         "release-candidate-artifact",
         "release-candidate-recovery-receipt-artifact",
         "release-candidate-recovery-root",
+        "release-invocation-root",
         "release-propagation-work-artifact",
+        "release-receipt-root",
         "release-tail-declaration-root",
         "release-tail-receipt-roots-json",
         "release-tail-state-root",
         "release-tail-transaction-root",
-        "release-tail-transaction-state"
+        "release-tail-transaction-state",
+        "release-transaction-root"
       ],
-      "outputCount": 40,
+      "outputCount": 43,
       "surface": "release-governance",
       "capabilityGroup": "reusable-build",
       "status": "active",
@@ -3528,15 +3533,37 @@
       "path": "actions/v4-release-candidate-promote/action.yml",
       "inputs": [
         "artifact-paths",
+        "candidate-build-summary-path",
         "candidate-passport-path",
         "failure-after-capability",
+        "mutation-token",
+        "product-publication-intent-path",
         "publication-qualification-path",
+        "publish-auth",
+        "publish-command",
+        "publish-dist-tag",
+        "publish-mode",
+        "publish-package-main",
+        "publish-package-set-order",
+        "publish-rematerialize-on-resume",
+        "publish-transaction-override",
+        "publisher-workflow-sha",
         "repository",
+        "required-artifacts-path",
+        "required-status-check",
+        "resume-transaction-id",
+        "runtime-commit",
+        "runtime-tree",
+        "sealed-bundle-manifest",
+        "sealed-bundle-root",
+        "source-sha",
         "stage-capsules-path",
         "state-path",
+        "target-ref",
+        "target-sha",
         "token"
       ],
-      "inputCount": 8,
+      "inputCount": 30,
       "capabilityGroup": "api-cli-reference",
       "status": "active",
       "owner": "buildchain-actions",

package/docs/node-api-reference.md

@@ -510,7 +510,7 @@ Target: `./packages/core/index.js`. Public symbols: 636.
 | `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-work-constants.js:2` |
 | `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-work-constants.js:1` |
 | `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from "@kungfu-tech/buildchain";` | `packages/core/release-propagation-work-constants.js:4` |
-| `RELEASE_TAIL_CAPABILITY_REGISTRY` | constant: const RELEASE_TAIL_CAPABILITY_REGISTRY | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_CAPABILITY_REGISTRY } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-plane.js:31` |
+| `RELEASE_TAIL_CAPABILITY_REGISTRY` | constant: const RELEASE_TAIL_CAPABILITY_REGISTRY | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_CAPABILITY_REGISTRY } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-plane.js:30` |
 | `RELEASE_TAIL_COMPATIBILITY_CONTRACT` | constant: const RELEASE_TAIL_COMPATIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_COMPATIBILITY_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-compatibility.js:1` |
 | `RELEASE_TAIL_DECLARATION_CONTRACT` | constant: const RELEASE_TAIL_DECLARATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_DECLARATION_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-plane.js:5` |
 | `RELEASE_TAIL_EFFECT_SCHEMA` | constant: const RELEASE_TAIL_EFFECT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_EFFECT_SCHEMA } from "@kungfu-tech/buildchain";` | `packages/core/release-tail-provider-plane.js:10` |
@@ -557,7 +557,7 @@ Target: `./packages/core/index.js`. Public symbols: 636.
 | `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { runLifecycleStage } from "@kungfu-tech/buildchain";` | `packages/core/buildchain-config.js:1524` |
 | `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from "@kungfu-tech/buildchain";` | `packages/core/publication-authority.js:36` |
 | `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from "@kungfu-tech/buildchain";` | `packages/core/publication-authority.js:14` |
-| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-policy.js:429` |
+| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain";` | `packages/core/v4-floating-consumer-policy.js:432` |
 | `scanV4RuntimeSelectorPersistence` | value: scanV4RuntimeSelectorPersistence | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { scanV4RuntimeSelectorPersistence } from "@kungfu-tech/buildchain";` | `packages/core/v4-runtime-ref-resume-authority.js:1` |
 | `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from "@kungfu-tech/buildchain";` | `packages/core/kfd.js:495` |
 | `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from "@kungfu-tech/buildchain";` | `packages/core/artifact-verification-envelope.js:323` |
@@ -1199,7 +1199,7 @@ Target: `./packages/core/index.js`. Public symbols: 636.
 | `RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT` | constant: const RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_STAGE_RECEIPT_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-work-constants.js:2` |
 | `RELEASE_PROPAGATION_WORK_CONTRACT` | constant: const RELEASE_PROPAGATION_WORK_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-work-constants.js:1` |
 | `RELEASE_PROPAGATION_WORK_STAGES` | constant: const RELEASE_PROPAGATION_WORK_STAGES | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_PROPAGATION_WORK_STAGES } from "@kungfu-tech/buildchain/core";` | `packages/core/release-propagation-work-constants.js:4` |
-| `RELEASE_TAIL_CAPABILITY_REGISTRY` | constant: const RELEASE_TAIL_CAPABILITY_REGISTRY | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_CAPABILITY_REGISTRY } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-plane.js:31` |
+| `RELEASE_TAIL_CAPABILITY_REGISTRY` | constant: const RELEASE_TAIL_CAPABILITY_REGISTRY | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_CAPABILITY_REGISTRY } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-plane.js:30` |
 | `RELEASE_TAIL_COMPATIBILITY_CONTRACT` | constant: const RELEASE_TAIL_COMPATIBILITY_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_COMPATIBILITY_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-compatibility.js:1` |
 | `RELEASE_TAIL_DECLARATION_CONTRACT` | constant: const RELEASE_TAIL_DECLARATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_DECLARATION_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-plane.js:5` |
 | `RELEASE_TAIL_EFFECT_SCHEMA` | constant: const RELEASE_TAIL_EFFECT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_EFFECT_SCHEMA } from "@kungfu-tech/buildchain/core";` | `packages/core/release-tail-provider-plane.js:10` |
@@ -1246,7 +1246,7 @@ Target: `./packages/core/index.js`. Public symbols: 636.
 | `runLifecycleStage` | function: function runLifecycleStage({ cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes }) | { cwd = process.cwd(), loadedConfig, name, stage, env: extraEnv, timeoutMinutes } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { runLifecycleStage } from "@kungfu-tech/buildchain/core";` | `packages/core/buildchain-config.js:1524` |
 | `RUNNER_PROVENANCE_CLASSES` | constant: const RUNNER_PROVENANCE_CLASSES | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CLASSES } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-authority.js:36` |
 | `RUNNER_PROVENANCE_CONTRACT` | constant: const RUNNER_PROVENANCE_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RUNNER_PROVENANCE_CONTRACT } from "@kungfu-tech/buildchain/core";` | `packages/core/publication-authority.js:14` |
-| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-policy.js:429` |
+| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-floating-consumer-policy.js:432` |
 | `scanV4RuntimeSelectorPersistence` | value: scanV4RuntimeSelectorPersistence | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { scanV4RuntimeSelectorPersistence } from "@kungfu-tech/buildchain/core";` | `packages/core/v4-runtime-ref-resume-authority.js:1` |
 | `schemas` | constant: const schemas | none | value | Import does not declare a throw contract. | none-on-import | `import { schemas } from "@kungfu-tech/buildchain/core";` | `packages/core/kfd.js:495` |
 | `sealArtifactVerificationReport` | function: function sealArtifactVerificationReport({ report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {}) | { report, bindings, kfdAssessment, issuedAt, expiresAt, revocation, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { sealArtifactVerificationReport } from "@kungfu-tech/buildchain/core";` | `packages/core/artifact-verification-envelope.js:323` |
@@ -1688,13 +1688,13 @@ Target: `./packages/core/dev-delivery-authority-landing.js`. Public symbols: 35.
 
 ## `@kungfu-tech/buildchain/dev-delivery-warrant`
 
-Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 56.
+Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 59.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| `cancelQueuedDevDeliveryCandidate` | function: function cancelQueuedDevDeliveryCandidate(queueInput, input, options) | queueInput, input, options | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cancelQueuedDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:512` |
+| `cancelQueuedDevDeliveryCandidate` | function: function cancelQueuedDevDeliveryCandidate(queueInput, input, options) | queueInput, input, options | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { cancelQueuedDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:520` |
 | `classifyDevDeliveryDelta` | function: function classifyDevDeliveryDelta({ proof, current = {} } = {}) | { proof, current = {} } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { classifyDevDeliveryDelta } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:109` |
-| `closeDevDeliveryWarrant` | function: function closeDevDeliveryWarrant(queueInput, warrant, { outcome, evidenceRoot, reason = "", providerFailureAuthority = null, now = new Date().toISOString(), } = {}) | queueInput, warrant, { outcome, evidenceRoot, reason = "", providerFailureAuthority = null, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { closeDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:387` |
+| `closeDevDeliveryWarrant` | function: function closeDevDeliveryWarrant(queueInput, warrant, { outcome, evidenceRoot, reason = "", providerFailureAuthority = null, now = new Date().toISOString(), } = {}) | queueInput, warrant, { outcome, evidenceRoot, reason = "", providerFailureAuthority = null, now = new Date().toISOString(), } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { closeDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:395` |
 | `createDevDeliveryQueue` | value: createDevDeliveryQueue | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { createDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `createIntegrationDeliveryProof` | function: function createIntegrationDeliveryProof(input = {}) | input = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { createIntegrationDeliveryProof } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:241` |
 | `createNativeCommandContract` | value: createNativeCommandContract | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { createNativeCommandContract } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:1` |
@@ -1711,6 +1711,7 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 56.
 | `DEV_DELIVERY_CANCELLATION_RECEIPT_SCHEMA` | value: DEV_DELIVERY_CANCELLATION_RECEIPT_SCHEMA | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_CANCELLATION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `DEV_DELIVERY_CLASSES` | value: DEV_DELIVERY_CLASSES | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_CLASSES } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `DEV_DELIVERY_LEASE_RECEIPT_SCHEMA` | value: DEV_DELIVERY_LEASE_RECEIPT_SCHEMA | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_LEASE_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
+| `DEV_DELIVERY_MINIMUM_WRITER_PROTOCOL_ROOT` | value: DEV_DELIVERY_MINIMUM_WRITER_PROTOCOL_ROOT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_MINIMUM_WRITER_PROTOCOL_ROOT } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `DEV_DELIVERY_PRIORITIES` | value: DEV_DELIVERY_PRIORITIES | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_PRIORITIES } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA` | constant: const DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { DEV_DELIVERY_QUALIFICATION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:41` |
 | `DEV_DELIVERY_QUEUE_CONTRACT` | value: DEV_DELIVERY_QUEUE_CONTRACT | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_QUEUE_CONTRACT } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
@@ -1719,8 +1720,10 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 56.
 | `DEV_DELIVERY_SUBMISSION_RECEIPT_SCHEMA` | value: DEV_DELIVERY_SUBMISSION_RECEIPT_SCHEMA | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_SUBMISSION_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `DEV_DELIVERY_TERMINAL_EVIDENCE_CORRECTION_SCHEMA` | value: DEV_DELIVERY_TERMINAL_EVIDENCE_CORRECTION_SCHEMA | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_TERMINAL_EVIDENCE_CORRECTION_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `DEV_DELIVERY_WARRANT_SCHEMA` | value: DEV_DELIVERY_WARRANT_SCHEMA | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_WARRANT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
+| `DEV_DELIVERY_WRITER_PROTOCOL_FENCE_RECEIPT_SCHEMA` | value: DEV_DELIVERY_WRITER_PROTOCOL_FENCE_RECEIPT_SCHEMA | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { DEV_DELIVERY_WRITER_PROTOCOL_FENCE_RECEIPT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `devDeliveryContentRoot` | function: function devDeliveryContentRoot(value) | value | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { devDeliveryContentRoot } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-common.js:27` |
-| `heartbeatDevDeliveryWarrant` | function: function heartbeatDevDeliveryWarrant(queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {}) | queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { heartbeatDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:258` |
+| `fenceDevDeliveryWriterProtocol` | value: fenceDevDeliveryWriterProtocol | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { fenceDevDeliveryWriterProtocol } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
+| `heartbeatDevDeliveryWarrant` | function: function heartbeatDevDeliveryWarrant(queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {}) | queueInput, warrant, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { heartbeatDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:266` |
 | `INTEGRATION_DELIVERY_PROOF_SCHEMA` | constant: const INTEGRATION_DELIVERY_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { INTEGRATION_DELIVERY_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:6` |
 | `NATIVE_COMMAND_CONTRACT_SCHEMA` | value: NATIVE_COMMAND_CONTRACT_SCHEMA | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { NATIVE_COMMAND_CONTRACT_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:1` |
 | `NATIVE_EXECUTION_BINDING_SCHEMA` | value: NATIVE_EXECUTION_BINDING_SCHEMA | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { NATIVE_EXECUTION_BINDING_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:1` |
@@ -1730,15 +1733,15 @@ Target: `./packages/core/dev-delivery-warrant.js`. Public symbols: 56.
 | `NATIVE_QUALIFICATION_PROOF_SCHEMA` | constant: const NATIVE_QUALIFICATION_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { NATIVE_QUALIFICATION_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:31` |
 | `normalizeDevDeliveryQueue` | value: normalizeDevDeliveryQueue | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { normalizeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
 | `normalizeNativeCommandContract` | value: normalizeNativeCommandContract | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { normalizeNativeCommandContract } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-native-proof.js:1` |
-| `observeDevDeliveryQueue` | function: function observeDevDeliveryQueue(queueInput, { now = new Date().toISOString(), allowLegacyV3Readback = false } = {}) | queueInput, { now = new Date().toISOString(), allowLegacyV3Readback = false } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { observeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:526` |
+| `observeDevDeliveryQueue` | function: function observeDevDeliveryQueue(queueInput, { now = new Date().toISOString(), allowLegacyV3Readback = false } = {}) | queueInput, { now = new Date().toISOString(), allowLegacyV3Readback = false } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { observeDevDeliveryQueue } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:534` |
 | `PROJECT_CUT_REPLAY_PROOF_SCHEMA` | constant: const PROJECT_CUT_REPLAY_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { PROJECT_CUT_REPLAY_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:5` |
-| `qualifyDevDeliveryWarrant` | constant: const qualifyDevDeliveryWarrant | none | value | Import does not declare a throw contract. | none-on-import | `import { qualifyDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:383` |
+| `qualifyDevDeliveryWarrant` | constant: const qualifyDevDeliveryWarrant | none | value | Import does not declare a throw contract. | none-on-import | `import { qualifyDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:391` |
 | `rankDevDeliveryCandidates` | value: rankDevDeliveryCandidates | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { rankDevDeliveryCandidates } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
-| `reconcileDevDeliveryTerminalEvidence` | constant: const reconcileDevDeliveryTerminalEvidence | none | value | Import does not declare a throw contract. | none-on-import | `import { reconcileDevDeliveryTerminalEvidence } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:521` |
-| `recoverExpiredDevDeliveryWarrant` | function: function recoverExpiredDevDeliveryWarrant(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoverExpiredDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:304` |
+| `reconcileDevDeliveryTerminalEvidence` | constant: const reconcileDevDeliveryTerminalEvidence | none | value | Import does not declare a throw contract. | none-on-import | `import { reconcileDevDeliveryTerminalEvidence } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:529` |
+| `recoverExpiredDevDeliveryWarrant` | function: function recoverExpiredDevDeliveryWarrant(queueInput, { now = new Date().toISOString() } = {}) | queueInput, { now = new Date().toISOString() } = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { recoverExpiredDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:312` |
 | `RELEASE_BLOCKER_PRIORITY_CLAIM_SCHEMA` | constant: const RELEASE_BLOCKER_PRIORITY_CLAIM_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_BLOCKER_PRIORITY_CLAIM_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/release-blocker-priority.js:15` |
-| `selectDevDeliveryWarrant` | function: function selectDevDeliveryWarrant(queueInput, { now = new Date().toISOString(), leaseSeconds } = {}) | queueInput, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { selectDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:98` |
-| `settleDevDeliveryTerminalEvent` | constant: const settleDevDeliveryTerminalEvent | none | value | Import does not declare a throw contract. | none-on-import | `import { settleDevDeliveryTerminalEvent } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:515` |
+| `selectDevDeliveryWarrant` | function: function selectDevDeliveryWarrant(queueInput, { now = new Date().toISOString(), leaseSeconds } = {}) | queueInput, { now = new Date().toISOString(), leaseSeconds } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { selectDevDeliveryWarrant } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:106` |
+| `settleDevDeliveryTerminalEvent` | constant: const settleDevDeliveryTerminalEvent | none | value | Import does not declare a throw contract. | none-on-import | `import { settleDevDeliveryTerminalEvent } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:523` |
 | `SOURCE_QUALIFICATION_PROOF_SCHEMA` | constant: const SOURCE_QUALIFICATION_PROOF_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { SOURCE_QUALIFICATION_PROOF_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:3` |
 | `SOURCE_QUALIFICATION_PROOF_V2_SCHEMA` | constant: const SOURCE_QUALIFICATION_PROOF_V2_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { SOURCE_QUALIFICATION_PROOF_V2_SCHEMA } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-proof.js:4` |
 | `submitDevDeliveryCandidate` | value: submitDevDeliveryCandidate | none | unknown | No narrower error contract was mechanically discoverable. | unknown | `import { submitDevDeliveryCandidate } from "@kungfu-tech/buildchain/dev-delivery-warrant";` | `packages/core/dev-delivery-warrant.js:1` |
@@ -1979,7 +1982,7 @@ Target: `./packages/core/v4-floating-consumer-policy.js`. Public symbols: 10.
 | --- | --- | --- | --- | --- | --- | --- | --- |
 | `certifyV4FloatingConsumerPolicyReceipt` | function: function certifyV4FloatingConsumerPolicyReceipt(options = {}) | options = {} | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { certifyV4FloatingConsumerPolicyReceipt } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:202` |
 | `resolveV4FloatingConsumerPolicyAuthority` | function: function resolveV4FloatingConsumerPolicyAuthority({ runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {}) | { runtimeRoot = defaultRuntimeRoot(), callerRoot = process.cwd(), stableLockPath = DEFAULT_STABLE_LOCK_PATH, alphaLockPath = DEFAULT_ALPHA_LOCK_PATH, } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { resolveV4FloatingConsumerPolicyAuthority } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-policy.js:89` |
-| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-policy.js:429` |
+| `scanV4FloatingConsumerPolicy` | function: function scanV4FloatingConsumerPolicy({ root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {}) | { root = process.cwd(), invocationRoot = root, repository = "", sourceSha = "", invokedWorkflow = "", invocationSourcePath = "", expectedInvocationChannel = "", resolvedWorkflowSha = "", resolvedRuntimeSha = "", stableLockPath = ".buildchain/contract-lock.json", alphaLockPath = ".buildchain/alpha-contract-lock.json", policy, scannerRoot = "", } = {} | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { scanV4FloatingConsumerPolicy } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-policy.js:432` |
 | `V4_FLOATING_CONSUMER_CERTIFICATION` | constant: const V4_FLOATING_CONSUMER_CERTIFICATION | none | value | Import does not declare a throw contract. | none-on-import | `import { V4_FLOATING_CONSUMER_CERTIFICATION } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:7` |
 | `V4_FLOATING_CONSUMER_POLICY` | constant: const V4_FLOATING_CONSUMER_POLICY | none | value | Import does not declare a throw contract. | none-on-import | `import { V4_FLOATING_CONSUMER_POLICY } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:3` |
 | `V4_FLOATING_CONSUMER_RECEIPT` | constant: const V4_FLOATING_CONSUMER_RECEIPT | none | value | Import does not declare a throw contract. | none-on-import | `import { V4_FLOATING_CONSUMER_RECEIPT } from "@kungfu-tech/buildchain/v4-floating-consumer-policy";` | `packages/core/v4-floating-consumer-evidence.js:5` |
@@ -2764,7 +2767,7 @@ Target: `./packages/core/release-tail-provider-plane.js`. Public symbols: 20.
 | `executeReleaseTailTransaction` | function: async function executeReleaseTailTransaction(transaction, { adapters, checkpoint: checkpointCallback } = {}) | transaction, { adapters, checkpoint: checkpointCallback } = {} | Promise<unknown> | May throw an Error on rejected input or failed operations; follow the linked source contract. | may-write-or-invoke-external-actions | `import { executeReleaseTailTransaction } from "@kungfu-tech/buildchain/release-tail-provider-plane";` | `packages/core/release-tail-provider-plane.js:1016` |
 | `parseReleaseTailDeclaration` | function: function parseReleaseTailDeclaration(input) | input | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { parseReleaseTailDeclaration } from "@kungfu-tech/buildchain/release-tail-provider-plane";` | `packages/core/release-tail-provider-plane.js:491` |
 | `readReleaseTailTransaction` | function: function readReleaseTailTransaction(filePath) | filePath | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleaseTailTransaction } from "@kungfu-tech/buildchain/release-tail-provider-plane";` | `packages/core/release-tail-provider-plane.js:830` |
-| `RELEASE_TAIL_CAPABILITY_REGISTRY` | constant: const RELEASE_TAIL_CAPABILITY_REGISTRY | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_CAPABILITY_REGISTRY } from "@kungfu-tech/buildchain/release-tail-provider-plane";` | `packages/core/release-tail-provider-plane.js:31` |
+| `RELEASE_TAIL_CAPABILITY_REGISTRY` | constant: const RELEASE_TAIL_CAPABILITY_REGISTRY | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_CAPABILITY_REGISTRY } from "@kungfu-tech/buildchain/release-tail-provider-plane";` | `packages/core/release-tail-provider-plane.js:30` |
 | `RELEASE_TAIL_DECLARATION_CONTRACT` | constant: const RELEASE_TAIL_DECLARATION_CONTRACT | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_DECLARATION_CONTRACT } from "@kungfu-tech/buildchain/release-tail-provider-plane";` | `packages/core/release-tail-provider-plane.js:5` |
 | `RELEASE_TAIL_EFFECT_SCHEMA` | constant: const RELEASE_TAIL_EFFECT_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_EFFECT_SCHEMA } from "@kungfu-tech/buildchain/release-tail-provider-plane";` | `packages/core/release-tail-provider-plane.js:10` |
 | `RELEASE_TAIL_OBSERVATION_SCHEMA` | constant: const RELEASE_TAIL_OBSERVATION_SCHEMA | none | value | Import does not declare a throw contract. | none-on-import | `import { RELEASE_TAIL_OBSERVATION_SCHEMA } from "@kungfu-tech/buildchain/release-tail-provider-plane";` | `packages/core/release-tail-provider-plane.js:12` |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "4.0.2-alpha.0",
+  "version": "4.0.2-alpha.10",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",
@@ -156,7 +156,7 @@
   "scripts": {
     "precheck:static": "prettier --check architecture/decisions/0003-two-phase-delivery-warrant.md architecture/v4-delivery-authority-parity.json contracts/dev-delivery-authority-v2.schema.json dist/site/schemas/dev-delivery-authority-v2.schema.json docs/dev-delivery-qualification-landing-adr.md packages/core/dev-delivery-authority-candidate.js packages/core/dev-delivery-authority-evidence.js packages/core/dev-delivery-authority-landing.js packages/core/dev-delivery-authority-observation.js packages/core/dev-delivery-authority-qualification.js packages/core/dev-delivery-authority-settlement.js packages/core/dev-delivery-authority-state.js packages/core/dev-delivery-execution-failure.js packages/core/dev-delivery-execution-transfer.js packages/core/dev-delivery-landing-readback.js packages/core/dev-delivery-landing-terminal-evidence.js packages/core/dev-delivery-landing-testing-port.js packages/core/dev-delivery-native-execution.js packages/core/dev-delivery-native-proof.js packages/core/dev-delivery-process-boundary.js packages/core/dev-delivery-warrant-qualification.js packages/core/dev-delivery-warrant-state.js scripts/dev-delivery-authority-command-adapters.mjs scripts/dev-delivery-authority-provider.mjs scripts/dev-delivery-authority.mjs scripts/dev-delivery-native-run.mjs scripts/dev-delivery-process-boundary.mjs scripts/dev-delivery-two-phase-resume.mjs scripts/dev-delivery-two-phase.mjs scripts/dev-delivery-warrant-options.mjs scripts/dev-delivery-warrant-store.mjs templates/native-dev-delivery.yml",
     "operator:windows-jit": "bash scripts/aws-windows-jit-operator.sh",
-    "check": "pnpm run check:static && node scripts/check-ci-lane-change-budget.mjs && node scripts/check-v4-public-dogfood-contract.mjs && node scripts/check-v4-floating-consumer-policy-contract.mjs && pnpm run check:v4-bridge && pnpm run check:v4-contracts && node scripts/check-maintainability.mjs && node scripts/check-internal-architecture.mjs && node scripts/generate-agent-change-map.mjs && node scripts/check-inventory.mjs && node scripts/check-core-mechanism-inventory.mjs && node scripts/check-v4-runtime-semantic-closure.mjs && node scripts/check-v3-v4-capability-inventory.mjs && node scripts/check-release-tail-contract.mjs && node scripts/v4-publication-rehearsal-fixture.mjs --check && node scripts/v4-architecture.mjs validate && node scripts/v4-warrant-shadow-plan.mjs validate && pnpm run check:site && pnpm run check:workflows && pnpm run test:unit && pnpm run check:golden-path && node scripts/check-action-bundles.mjs",
+    "check": "pnpm run check:static && node scripts/check-ci-lane-change-budget.mjs && node scripts/check-v4-public-dogfood-contract.mjs && node scripts/check-v4-floating-consumer-policy-contract.mjs && node scripts/check-v4-release-topology.mjs && pnpm run check:v4-bridge && pnpm run check:v4-contracts && node scripts/check-maintainability.mjs && node scripts/check-internal-architecture.mjs && node scripts/generate-agent-change-map.mjs && node scripts/check-inventory.mjs && node scripts/check-core-mechanism-inventory.mjs && node scripts/check-v4-runtime-semantic-closure.mjs && node scripts/check-v3-v4-capability-inventory.mjs && node scripts/check-release-tail-contract.mjs && node scripts/v4-publication-rehearsal-fixture.mjs --check && node scripts/v4-architecture.mjs validate && node scripts/v4-warrant-shadow-plan.mjs validate && pnpm run check:site && pnpm run check:workflows && pnpm run test:unit && pnpm run check:golden-path && node scripts/check-action-bundles.mjs",
     "check:static": "node scripts/check-javascript-syntax.mjs && prettier --check architecture/*.json contracts/release-tail-provider-bindings-v1.schema.json contracts/v4-canonical-contracts-v1.schema.json contracts/v4-compatibility-facts-v1.schema.json contracts/v4-delivery-warrant-semantic-diff-report-v1.schema.json contracts/v4-delivery-warrant-trace-v1.schema.json contracts/v4-floating-consumer-policy-receipt-v1.schema.json contracts/v4-runtime-ref-resume-authority-v1.schema.json contracts/v4-tail-reseal-v1.schema.json contracts/v4-host-contract-v1.schema.json contracts/v4-provider-operation-journal-v1.schema.json contracts/v4-release-activation-shadow-v1.schema.json contracts/v4-stable-publication-fence-v1.schema.json contracts/v4-partial-mutation-recovery-v1.schema.json contracts/v4-stage-capsule-v1.schema.json contracts/v4-stage-capsule-store-v1.schema.json contracts/v4-stage-capsule-resume-v1.schema.json contracts/release-tail-capabilities-v1.schema.json contracts/fixtures/release-tail-capabilities-v1/*.json contracts/fixtures/v4-delivery-warrant-trace-v1/*.json contracts/fixtures/v4-floating-consumer-policy-v1/*.json contracts/fixtures/v4-runtime-ref-resume-authority-v1/*.json contracts/fixtures/v4-tail-reseal-v1/*.json contracts/fixtures/v4-compatibility-facts-v1/*.json contracts/fixtures/v4-provider-operation-journal-v1/*.json contracts/fixtures/v4-provider-readback-idempotency-v1/*.json contracts/fixtures/v4-release-activation-shadow-v1/*.json contracts/fixtures/v4-stable-publication-fence-v1/*.json contracts/fixtures/v4-partial-mutation-recovery-v1/*.json contracts/fixtures/v4-stage-capsule-v1/*.json contracts/fixtures/v4-stage-capsule-store-v1/*.json contracts/fixtures/v4-stage-capsule-resume-v1/*.json bin/internal/command-registry.mjs bin/internal/compatibility-facts-cli.mjs packages/core/v4-canonical-contracts.js packages/core/kungfu-temporal-fact.js packages/core/buildchain-compatibility-fact.js packages/core/buildchain-compatibility-authority.js packages/core/buildchain-compatibility-proof.js packages/core/v4-floating-consumer-evidence.js packages/core/v4-floating-consumer-policy.js packages/core/v4-floating-consumer-release-passport.js packages/core/v4-runtime-ref-resume-authority.js packages/core/v4-tail-reseal-contract.js packages/core/v4-tail-reseal-github.js packages/core/v4-tail-reseal-receipt.js packages/core/v4-tail-reseal.js packages/core/v4-runtime-selector-persistence.js packages/core/v4-provider-operation-journal.js packages/core/v4-provider-readback-idempotency.js packages/core/v4-release-activation-shadow.js packages/core/v4-stable-publication-fence.js packages/core/v4-partial-mutation-recovery-qualification.js packages/core/v4-stage-capsule.js packages/core/v4-stage-capsule-store.js packages/core/v4-stage-capsule-local-store.js packages/core/v4-platform-stage-checkpoints.js packages/core/v4-stage-capsule-resume-planner.js packages/core/v4-stage-capsule-qualification.js packages/core/v4-stage-capsule-qualification-campaign.js packages/core/v4-delivery-warrant-fixture-runner.js packages/core/v4-delivery-warrant-read-candidate.js packages/core/v4-delivery-warrant-semantic-diff-gate.js packages/core/v4-delivery-warrant-shadow-adapter.js scripts/authorize-promotion-runtime-override.cjs scripts/check-core-mechanism-inventory.mjs scripts/check-v4-runtime-semantic-closure.mjs scripts/check-release-tail-contract.mjs scripts/check-javascript-syntax.mjs scripts/check-maintainability.mjs scripts/dev-pr-prequeue-guard.mjs scripts/check-v4-public-dogfood-contract.mjs scripts/maintainability-metrics.mjs scripts/maintainability-domain-metrics.mjs scripts/maintainability-governance.mjs scripts/generate-agent-change-map.mjs scripts/public-reference.mjs scripts/site-reference-registry.mjs scripts/generate-public-reference.mjs scripts/v4-architecture.mjs scripts/v4-bridge-bootstrap.mjs scripts/v4-bridge-evidence.mjs scripts/v4-consumer-policy.mjs scripts/v4-host-adapter.mjs scripts/v4-platform-stage-checkpoint-rehearsal.mjs scripts/v4-stage-capsule-resume-rehearsal.mjs scripts/v4-stage-capsule-qualification.mjs scripts/v4-tail-reseal-macos-rehearsal.mjs scripts/v4-tail-reseal.mjs scripts/v4-warrant-shadow-plan.mjs scripts/verify-golden-path.mjs tests/authorize-promotion-runtime-override.test.mjs tests/command-registry.test.mjs tests/core-mechanism-inventory.test.mjs tests/release-tail-contract.test.mjs tests/maintainability.test.mjs tests/maintainability-governance.test.mjs tests/promotion-responsibilities.test.mjs tests/public-reference.test.mjs tests/v4-architecture.test.mjs tests/v4-bridge.test.mjs tests/v4-canonical-contracts.test.mjs tests/v4-delivery-warrant-fixture-runner.test.mjs tests/v4-delivery-warrant-read-candidate.test.mjs tests/v4-floating-consumer-policy.test.mjs tests/v4-runtime-ref-resume-authority.test.mjs tests/v4-runtime-semantic-closure.test.mjs tests/v4-tail-reseal.test.mjs tests/v4-tail-reseal-parity.test.mjs tests/v4-compatibility-facts.test.mjs tests/v4-platform-stage-checkpoints.test.mjs tests/v4-provider-operation-journal.test.mjs tests/v4-provider-readback-idempotency.test.mjs tests/v4-public-dogfood-contract.test.mjs tests/v4-release-activation-shadow.test.mjs tests/v4-stable-publication-fence.test.mjs tests/v4-partial-mutation-recovery-qualification.test.mjs tests/v4-stage-capsule.test.mjs tests/v4-stage-capsule-store.test.mjs tests/v4-stage-capsule-resume-planner.test.mjs tests/v4-stage-capsule-qualification.test.mjs tests/v4-warrant-shadow-plan.test.mjs",
     "check:v4-bridge": "cargo fmt --manifest-path crates/buildchain-v4-bridge/Cargo.toml -- --check && cargo clippy --locked --manifest-path crates/buildchain-v4-bridge/Cargo.toml -- -D warnings && cargo test --locked --manifest-path crates/buildchain-v4-bridge/Cargo.toml",
     "check:v4-contracts": "cargo fmt --manifest-path crates/buildchain-v4-contracts/Cargo.toml -- --check && cargo clippy --locked --manifest-path crates/buildchain-v4-contracts/Cargo.toml -- -D warnings && cargo test --locked --manifest-path crates/buildchain-v4-contracts/Cargo.toml && node --test tests/v4-canonical-contracts.test.mjs tests/v4-delivery-warrant-fixture-runner.test.mjs tests/v4-delivery-warrant-read-candidate.test.mjs tests/v4-floating-consumer-policy-contract.test.mjs tests/v4-floating-consumer-policy.test.mjs tests/v4-runtime-ref-resume-authority.test.mjs tests/v4-tail-reseal.test.mjs tests/v4-tail-reseal-parity.test.mjs tests/v4-compatibility-facts.test.mjs tests/v4-publication-rehearsal.test.mjs tests/v4-platform-stage-checkpoints.test.mjs tests/v4-provider-operation-journal.test.mjs tests/v4-provider-readback-idempotency.test.mjs tests/v4-public-dogfood-contract.test.mjs tests/v4-release-activation-shadow.test.mjs tests/v4-stable-publication-fence.test.mjs tests/v4-partial-mutation-recovery-qualification.test.mjs tests/v4-stage-capsule.test.mjs tests/v4-stage-capsule-store.test.mjs tests/v4-stage-capsule-resume-planner.test.mjs tests/v4-stage-capsule-qualification.test.mjs",

package/packages/core/dev-delivery-candidate-identity.js

@@ -4,8 +4,39 @@ import {
   devDeliveryPositiveInteger as positiveInteger,
   devDeliveryText as text,
 } from "./dev-delivery-common.js";
-
 export const CHAINED_ATTEMPT_IDENTITY = "chained-attempt-v2";
+const terminalBeforeChainCutover = (candidate, terminalStates) =>
+  terminalStates.has(candidate.status) &&
+  candidate.enqueuedAt < "2026-08-05T14:42:34.000Z";
+const UNCHAINED_SUCCESSOR =
+  "same-PR successor must chain the latest durable predecessor";
+export const EXACT_DEV_DELIVERY_PROOF_FIELDS = Object.freeze([
+  "sourcePatchRoot",
+  "sourceProofRoot",
+  "planRoot",
+  "closureRoot",
+  "dependencyRoot",
+  "toolchainRoot",
+  "environmentRoot",
+  "sourceWorkflowRunId",
+]);
+
+export function matchesExactDevDeliveryCandidate(existing, attempted) {
+  return (
+    existing.sourceHead === attempted.sourceHead &&
+    EXACT_DEV_DELIVERY_PROOF_FIELDS.every(
+      (field) => existing[field] === attempted[field],
+    ) &&
+    JSON.stringify(existing.affectedPaths || []) ===
+      JSON.stringify(attempted.affectedPaths || []) &&
+    JSON.stringify(existing.shardEvidenceRoots || []) ===
+      JSON.stringify(attempted.shardEvidenceRoots || []) &&
+    existing.nativeCommandContract?.commandRoot ===
+      attempted.nativeCommandContract?.commandRoot &&
+    existing.releaseBlockerPriority?.claimRoot ===
+      attempted.releaseBlockerPriority?.claimRoot
+  );
+}
 
 export function createDevDeliveryCandidateIdentity(
   input,
@@ -47,27 +78,24 @@ export function validateDevDeliveryCandidateChain(candidates, terminalStates) {
   const latestByPullRequest = new Map();
   for (const candidate of candidates) {
     const latest = latestByPullRequest.get(candidate.pullRequestNumber);
-    if (latest && candidate.identitySemantics !== CHAINED_ATTEMPT_IDENTITY) {
-      throw new Error(
-        "same-PR successor must chain the latest durable predecessor",
-      );
+    if (
+      latest &&
+      candidate.identitySemantics !== CHAINED_ATTEMPT_IDENTITY &&
+      (!terminalBeforeChainCutover(latest, terminalStates) ||
+        !terminalBeforeChainCutover(candidate, terminalStates))
+    ) {
+      throw new Error(UNCHAINED_SUCCESSOR);
     }
     if (candidate.identitySemantics === CHAINED_ATTEMPT_IDENTITY) {
       const predecessor = precedingCandidates.get(
         candidate.predecessorCandidateId,
       );
-      if (!predecessor)
-        throw new Error(
-          "chained candidate predecessor must appear earlier in the queue",
-        );
-      if (predecessor.pullRequestNumber !== candidate.pullRequestNumber) {
-        throw new Error(
-          "chained candidate predecessor must belong to the same pull request",
-        );
-      }
-      if (!terminalStates.has(predecessor.status)) {
-        throw new Error("chained candidate predecessor must be terminal");
-      }
+      // prettier-ignore
+      if (!predecessor) throw new Error("chained candidate predecessor must appear earlier in the queue");
+      // prettier-ignore
+      if (predecessor.pullRequestNumber !== candidate.pullRequestNumber) throw new Error("chained candidate predecessor must belong to the same pull request");
+      // prettier-ignore
+      if (!terminalStates.has(predecessor.status)) throw new Error("chained candidate predecessor must be terminal");
       if (latest?.candidateId !== predecessor.candidateId) {
         throw new Error(
           "chained candidate must bind the latest durable predecessor",