@kungfu-tech/buildchain 4.0.2-alpha.2 → 4.0.2-alpha.20

package/dist/site/workflow-registry.json

@@ -18,9 +18,10 @@
         "require-trusted-event",
         "source-artifact-digest",
         "source-artifact-name",
-        "source-ref"
+        "source-ref",
+        "universal-request-json"
       ],
-      "inputCount": 11,
+      "inputCount": 12,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -69,9 +70,10 @@
         "publication-version",
         "release-tag",
         "source-sha",
-        "target-ref"
+        "target-ref",
+        "universal-request-json"
       ],
-      "inputCount": 15,
+      "inputCount": 16,
       "secrets": [],
       "secretCount": 0,
       "outputs": [],
@@ -181,12 +183,13 @@
         "setup-rust",
         "shifu-cache-profile-digest",
         "shifu-cache-profile-ref",
+        "universal-request-json",
         "untrusted-policy",
         "verify-command",
         "verify-substage-evidence-path",
         "working-directory"
       ],
-      "inputCount": 93,
+      "inputCount": 94,
       "secrets": [
         "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
         "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -262,8 +265,10 @@
       "id": ".bump-minor-version",
       "path": ".github/workflows/.bump-minor-version.yml",
       "reusable": true,
-      "inputs": [],
-      "inputCount": 0,
+      "inputs": [
+        "universal-request-json"
+      ],
+      "inputCount": 1,
       "secrets": [
         "GITHUB_PUSH_TOKEN"
       ],
@@ -297,9 +302,10 @@
         "render-media",
         "renderer-image",
         "scenario-path",
-        "source-ref"
+        "source-ref",
+        "universal-request-json"
       ],
-      "inputCount": 12,
+      "inputCount": 13,
       "secrets": [
         "DEMO_UPDATE_TOKEN"
       ],
@@ -358,10 +364,11 @@
         "shifu-cache-profile-digest",
         "shifu-cache-profile-ref",
         "source-ref",
+        "universal-request-json",
         "untrusted-policy",
         "working-directory"
       ],
-      "inputCount": 30,
+      "inputCount": 31,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -433,9 +440,10 @@
         "runner-provenance-json",
         "source-sha",
         "target-ref",
+        "universal-request-json",
         "used-nonces-json"
       ],
-      "inputCount": 37,
+      "inputCount": 38,
       "secrets": [
         "BUILDCHAIN_GOVERNANCE_READ_TOKEN",
         "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
@@ -585,9 +593,10 @@
         "standalone-binary-distribution",
         "target-ref",
         "target-sha",
-        "trusted-publishing"
+        "trusted-publishing",
+        "universal-request-json"
       ],
-      "inputCount": 121,
+      "inputCount": 122,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -646,120 +655,6 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
     },
-    {
-      "id": ".release-docker",
-      "path": ".github/workflows/.release-docker.yml",
-      "reusable": true,
-      "inputs": [
-        "image-name"
-      ],
-      "inputCount": 1,
-      "secrets": [
-        "DOCKER_HUB_PASSWORD",
-        "DOCKER_HUB_USERNAME",
-        "GITHUB_PUSH_TOKEN"
-      ],
-      "secretCount": 3,
-      "outputs": [],
-      "outputCount": 0,
-      "surface": "reusable-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "pre-3.0.2-alpha.4",
-      "compatibilityPromise": "preserved-through-the-v3-major-line",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
-      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
-    },
-    {
-      "id": ".release-elastic-beanstalk",
-      "path": ".github/workflows/.release-elastic-beanstalk.yml",
-      "reusable": true,
-      "inputs": [
-        "aws-region",
-        "eb-application-name",
-        "eb-environment-name"
-      ],
-      "inputCount": 3,
-      "secrets": [
-        "AWS_USER_ACCESS_KEY_ID",
-        "AWS_USER_SECRET_ACCESS_KEY",
-        "GITHUB_PUSH_TOKEN"
-      ],
-      "secretCount": 3,
-      "outputs": [],
-      "outputCount": 0,
-      "surface": "reusable-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "pre-3.0.2-alpha.4",
-      "compatibilityPromise": "preserved-through-the-v3-major-line",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
-      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
-    },
-    {
-      "id": ".release-new-version",
-      "path": ".github/workflows/.release-new-version.yml",
-      "reusable": true,
-      "inputs": [
-        "action-bump-version-path",
-        "action-bump-version-ref",
-        "action-bump-version-repository",
-        "aws-ci-region",
-        "aws-user-region",
-        "bucket-release-ci",
-        "bucket-release-user",
-        "bucket-staging-ci",
-        "bucket-staging-user",
-        "clean-release-ci",
-        "clean-release-user",
-        "close-issues",
-        "cloudfront-id-ci",
-        "cloudfront-id-user",
-        "cloudfront-paths-ci",
-        "cloudfront-paths-user",
-        "create-release-note",
-        "max-preview-links",
-        "need-qa-automated",
-        "node-version",
-        "protect-dev-branches",
-        "publish-aws-ci",
-        "publish-aws-user",
-        "publish-github-npm",
-        "publish-npmjs",
-        "publish-release-note",
-        "sync-extensions-version"
-      ],
-      "inputCount": 27,
-      "secrets": [
-        "AIRTABLE_API_KEY",
-        "AWS_CI_ACCESS_KEY_ID",
-        "AWS_CI_SECRET_ACCESS_KEY",
-        "AWS_USER_ACCESS_KEY_ID",
-        "AWS_USER_SECRET_ACCESS_KEY",
-        "GITHUB_PUSH_TOKEN",
-        "MONDAY_API_KEY",
-        "NPM_PUSH_TOKEN"
-      ],
-      "secretCount": 8,
-      "outputs": [],
-      "outputCount": 0,
-      "surface": "reusable-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "pre-3.0.2-alpha.4",
-      "compatibilityPromise": "preserved-through-the-v3-major-line",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
-      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
-    },
     {
       "id": ".release-verify",
       "path": ".github/workflows/.release-verify.yml",
@@ -804,10 +699,11 @@
         "python-version",
         "setup-env-timeout-minutes",
         "setup-python-enabled",
+        "universal-request-json",
         "use-pipenv",
         "use-poetry"
       ],
-      "inputCount": 41,
+      "inputCount": 42,
       "secrets": [
         "APPLE_CSC_KEY",
         "APPLE_CSC_KEY_PASSWORD",
@@ -835,34 +731,6 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
     },
-    {
-      "id": ".sam-release",
-      "path": ".github/workflows/.sam-release.yml",
-      "reusable": true,
-      "inputs": [
-        "aws-region",
-        "aws-role",
-        "aws-root",
-        "bucket-release"
-      ],
-      "inputCount": 4,
-      "secrets": [
-        "AWS_ACCOUNT_ID"
-      ],
-      "secretCount": 1,
-      "outputs": [],
-      "outputCount": 0,
-      "surface": "reusable-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "pre-3.0.2-alpha.4",
-      "compatibilityPromise": "preserved-through-the-v3-major-line",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
-      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
-    },
     {
       "id": ".sam-verify",
       "path": ".github/workflows/.sam-verify.yml",
@@ -871,9 +739,10 @@
         "aws-region",
         "aws-role",
         "aws-root",
-        "manager"
+        "manager",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "AWS_ACCOUNT_ID",
         "NODE_AUTH_TOKEN"
@@ -909,9 +778,10 @@
         "release-path",
         "release-url",
         "repo",
+        "universal-request-json",
         "upper-edge"
       ],
-      "inputCount": 13,
+      "inputCount": 14,
       "secrets": [
         "AIRTABLE_API_KEY",
         "GITHUB_PUSH_TOKEN"
@@ -938,9 +808,10 @@
         "force",
         "remote-host",
         "remote-path",
-        "remote-repo"
+        "remote-repo",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "REMOTE_CREDENTIAL",
         "REMOTE_USER"
@@ -1005,10 +876,11 @@
         "staging-apply",
         "staging-aws-role-arn",
         "staging-environment",
+        "universal-request-json",
         "verify-command",
         "working-directory"
       ],
-      "inputCount": 43,
+      "inputCount": 44,
       "secrets": [
         "production-release-app-private-key"
       ],
@@ -1050,34 +922,6 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
     },
-    {
-      "id": ".wheel-release",
-      "path": ".github/workflows/.wheel-release.yml",
-      "reusable": true,
-      "inputs": [
-        "aws-region",
-        "aws-user-region",
-        "bucket-release"
-      ],
-      "inputCount": 3,
-      "secrets": [
-        "AWS_USER_ACCESS_KEY_ID",
-        "AWS_USER_SECRET_ACCESS_KEY"
-      ],
-      "secretCount": 2,
-      "outputs": [],
-      "outputCount": 0,
-      "surface": "reusable-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "pre-3.0.2-alpha.4",
-      "compatibilityPromise": "preserved-through-the-v3-major-line",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
-      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
-    },
     {
       "id": ".wheel-verify",
       "path": ".github/workflows/.wheel-verify.yml",
@@ -1087,9 +931,10 @@
         "bucket-release",
         "max-preview-links",
         "node-version",
-        "preview-files"
+        "preview-files",
+        "universal-request-json"
       ],
-      "inputCount": 5,
+      "inputCount": 6,
       "secrets": [
         "AWS_USER_ACCESS_KEY_ID",
         "AWS_USER_SECRET_ACCESS_KEY",
@@ -1214,6 +1059,38 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
     },
+    {
+      "id": "bootstrap",
+      "path": ".github/workflows/bootstrap.yml",
+      "reusable": true,
+      "inputs": [
+        "request-json"
+      ],
+      "inputCount": 1,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [
+        "admission-root",
+        "backflow-root",
+        "request-root",
+        "result-json",
+        "result-root",
+        "runtime-sha",
+        "terminal-receipt-json",
+        "terminal-receipt-root"
+      ],
+      "outputCount": 8,
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "pre-3.0.2-alpha.4",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
+    },
     {
       "id": "build-surface-fixture",
       "path": ".github/workflows/build-surface-fixture.yml",
@@ -1332,12 +1209,13 @@
         "setup-rust",
         "shifu-cache-profile-digest",
         "shifu-cache-profile-ref",
+        "universal-request-json",
         "untrusted-policy",
         "verify-command",
         "verify-substage-evidence-path",
         "working-directory"
       ],
-      "inputCount": 96,
+      "inputCount": 97,
       "secrets": [
         "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
         "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -1558,9 +1436,10 @@
         "require-approval",
         "required-status-checks",
         "same-repository-only",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 16,
+      "inputCount": 17,
       "secrets": [
         "github-token"
       ],
@@ -1704,10 +1583,11 @@
         "source-proof-policy-paths-json",
         "source-proof-required-contexts-json",
         "source-proof-reuse",
+        "universal-request-json",
         "upload-artifacts",
         "working-directory"
       ],
-      "inputCount": 12,
+      "inputCount": 13,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -1755,9 +1635,10 @@
         "reactivation-authorized",
         "settlement-authorized",
         "source-branch",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 15,
+      "inputCount": 16,
       "secrets": [
         "promotion-token"
       ],
@@ -1809,9 +1690,10 @@
         "outcome",
         "reason",
         "target-branch",
-        "terminal-evidence-root"
+        "terminal-evidence-root",
+        "universal-request-json"
       ],
-      "inputCount": 12,
+      "inputCount": 13,
       "secrets": [
         "github-token"
       ],
@@ -1850,9 +1732,10 @@
         "replay-tree-sha",
         "required-context-roots-json",
         "target-branch",
-        "terminal-evidence-root"
+        "terminal-evidence-root",
+        "universal-request-json"
       ],
-      "inputCount": 13,
+      "inputCount": 14,
       "secrets": [
         "github-token"
       ],
@@ -1944,9 +1827,10 @@
         "source-workflow-run-id",
         "target-branch",
         "toolchain-root",
+        "universal-request-json",
         "warrant-lease-seconds"
       ],
-      "inputCount": 44,
+      "inputCount": 45,
       "secrets": [
         "github-token"
       ],
@@ -1998,9 +1882,10 @@
         "mutation-authorized",
         "preflight-workflow-path",
         "priority-workflows-json",
-        "source-branch"
+        "source-branch",
+        "universal-request-json"
       ],
-      "inputCount": 10,
+      "inputCount": 11,
       "secrets": [
         "qualification-token"
       ],
@@ -2041,7 +1926,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.2",
+      "introducedVersion": "4.0.2-alpha.20",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2062,7 +1947,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.2",
+      "introducedVersion": "4.0.2-alpha.20",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2083,7 +1968,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.2",
+      "introducedVersion": "4.0.2-alpha.20",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2107,9 +1992,10 @@
         "stale-days",
         "stale-pull-request-label",
         "target-branch",
-        "temporary-branch-patterns"
+        "temporary-branch-patterns",
+        "universal-request-json"
       ],
-      "inputCount": 14,
+      "inputCount": 15,
       "secrets": [
         "housekeeper_app_id",
         "housekeeper_app_private_key",
@@ -2133,7 +2019,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.2-alpha.2",
+      "introducedVersion": "4.0.2-alpha.20",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -2156,9 +2042,10 @@
         "retention-days",
         "source-sha",
         "subject-artifact-name",
-        "subject-relative-path"
+        "subject-relative-path",
+        "universal-request-json"
       ],
-      "inputCount": 13,
+      "inputCount": 14,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -2251,10 +2138,11 @@
         "target-ref",
         "target-sha",
         "toolchain-type",
+        "universal-request-json",
         "verify-command",
         "working-directory"
       ],
-      "inputCount": 26,
+      "inputCount": 27,
       "secrets": [
         "BUILDCHAIN_GENERATED_WRITE_APP_CLIENT_ID",
         "BUILDCHAIN_GENERATED_WRITE_APP_PRIVATE_KEY",
@@ -2325,10 +2213,11 @@
         "toolchain-digest",
         "toolchain-image",
         "toolchain-type",
+        "universal-request-json",
         "verify-command",
         "working-directory"
       ],
-      "inputCount": 38,
+      "inputCount": 39,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -2374,9 +2263,10 @@
         "require-approval",
         "required-status-checks",
         "same-repository-only",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 13,
+      "inputCount": 14,
       "secrets": [
         "github-token"
       ],
@@ -2408,9 +2298,10 @@
         "buildchain-ref",
         "buildchain-repository",
         "dry-run",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "github-token"
       ],
@@ -2450,9 +2341,10 @@
         "production-aws-role-arn",
         "production-bucket",
         "production-environment",
+        "universal-request-json",
         "verify-command"
       ],
-      "inputCount": 12,
+      "inputCount": 13,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -2478,9 +2370,10 @@
         "buildchain-ref",
         "buildchain-repository",
         "dry-run",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "github-token"
       ],
@@ -2530,10 +2423,11 @@
         "toolchain-digest",
         "toolchain-image",
         "toolchain-type",
+        "universal-request-json",
         "verify-command",
         "working-directory"
       ],
-      "inputCount": 23,
+      "inputCount": 24,
       "secrets": [],
       "secretCount": 0,
       "outputs": [
@@ -2676,9 +2570,10 @@
         "standalone-binary-distribution",
         "target-ref",
         "target-sha",
-        "trusted-publishing"
+        "trusted-publishing",
+        "universal-request-json"
       ],
-      "inputCount": 106,
+      "inputCount": 107,
       "secrets": [
         "BUILDCHAIN_ISSUE_APP_ID",
         "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
@@ -2757,9 +2652,10 @@
         "apply",
         "branch",
         "buildchain-ref",
-        "candidate-sha"
+        "candidate-sha",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "BUILDCHAIN_PROMOTION_TOKEN",
         "governance-token"
@@ -2843,9 +2739,10 @@
         "pr-title",
         "refresh-managed-readme-badges",
         "source-node",
+        "universal-request-json",
         "upstream-release-json"
       ],
-      "inputCount": 19,
+      "inputCount": 20,
       "secrets": [
         "propagation-token"
       ],
@@ -2895,9 +2792,10 @@
         "rehearsal-capsule-path",
         "rehearsal-evidence-path",
         "rehearsal-mode",
-        "state-path"
+        "state-path",
+        "universal-request-json"
       ],
-      "inputCount": 14,
+      "inputCount": 15,
       "secrets": [
         "http-token"
       ],
@@ -2943,27 +2841,6 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
     },
-    {
-      "id": "schedule-purge-artifacts",
-      "path": ".github/workflows/schedule-purge-artifacts.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "pre-3.0.2-alpha.4",
-      "compatibilityPromise": "preserved-through-the-v3-major-line",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
-      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
-    },
     {
       "id": "self-hosted-runner-smoke",
       "path": ".github/workflows/self-hosted-runner-smoke.yml",
@@ -3005,9 +2882,10 @@
         "required-checks",
         "revoke-reason",
         "revoked-versions",
-        "target-branch"
+        "target-branch",
+        "universal-request-json"
       ],
-      "inputCount": 16,
+      "inputCount": 17,
       "secrets": [
         "approval-token",
         "promotion-token"
@@ -3033,6 +2911,56 @@
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
       "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
     },
+    {
+      "id": "universal-bootstrap-dogfood",
+      "path": ".github/workflows/universal-bootstrap-dogfood.yml",
+      "reusable": false,
+      "inputs": [],
+      "inputCount": 0,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [],
+      "outputCount": 0,
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "pre-3.0.2-alpha.4",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
+    },
+    {
+      "id": "universal-bootstrap-recovery",
+      "path": ".github/workflows/universal-bootstrap-recovery.yml",
+      "reusable": true,
+      "inputs": [
+        "request-json"
+      ],
+      "inputCount": 1,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [
+        "backflow-root",
+        "result-json",
+        "runtime-sha",
+        "terminal-receipt-json",
+        "terminal-receipt-root"
+      ],
+      "outputCount": 5,
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "pre-3.0.2-alpha.4",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing workflow identity retained for caller compatibility and repository orchestration."
+    },
     {
       "id": "v4-adopter-delivery-dogfood",
       "path": ".github/workflows/v4-adopter-delivery-dogfood.yml",
@@ -3066,9 +2994,10 @@
         "consumer-repository",
         "input-path",
         "invocation-source-path",
-        "node-version"
+        "node-version",
+        "universal-request-json"
       ],
-      "inputCount": 8,
+      "inputCount": 9,
       "secrets": [],
       "secretCount": 0,
       "outputs": [],
@@ -3157,9 +3086,10 @@
         "go-version",
         "install-artifact-path",
         "node-version",
+        "universal-request-json",
         "verify-artifact-path"
       ],
-      "inputCount": 6,
+      "inputCount": 7,
       "secrets": [],
       "secretCount": 0,
       "outputs": [],
@@ -3183,9 +3113,10 @@
         "artifact-retention-days",
         "consumer-policy-receipt-json",
         "macos-finalization-command",
-        "request-json"
+        "request-json",
+        "universal-request-json"
       ],
-      "inputCount": 4,
+      "inputCount": 5,
       "secrets": [
         "BUILDCHAIN_EVIDENCE_READ_TOKEN",
         "BUILDCHAIN_SIGNING_TOKEN"
@@ -3533,18 +3464,37 @@
       "path": "actions/v4-release-candidate-promote/action.yml",
       "inputs": [
         "artifact-paths",
+        "candidate-build-summary-path",
         "candidate-passport-path",
         "failure-after-capability",
+        "mutation-token",
+        "product-publication-intent-path",
         "publication-qualification-path",
+        "publish-auth",
+        "publish-command",
+        "publish-dist-tag",
+        "publish-mode",
+        "publish-package-main",
+        "publish-package-set-order",
+        "publish-rematerialize-on-resume",
+        "publish-transaction-override",
         "publisher-workflow-sha",
         "repository",
+        "required-artifacts-path",
+        "required-status-check",
+        "resume-transaction-id",
         "runtime-commit",
         "runtime-tree",
+        "sealed-bundle-manifest",
+        "sealed-bundle-root",
+        "source-sha",
         "stage-capsules-path",
         "state-path",
+        "target-ref",
+        "target-sha",
         "token"
       ],
-      "inputCount": 11,
+      "inputCount": 30,
       "capabilityGroup": "api-cli-reference",
       "status": "active",
       "owner": "buildchain-actions",