@kungfu-tech/buildchain 4.0.2-alpha.34 → 4.0.2-alpha.35

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (91) hide show
  1. package/AGENTS.md +9 -0
  2. package/CONTRIBUTING.md +24 -0
  3. package/README.md +2 -2
  4. package/actions/promote-buildchain-ref/README.md +1 -1
  5. package/architecture/agent-change-map.md +6 -4
  6. package/architecture/internal-capabilities.json +4 -4
  7. package/architecture/maintainability-debt.json +13 -11
  8. package/architecture/maintainability-policy.json +4 -4
  9. package/architecture/release-tail-contract-inventory.json +6 -6
  10. package/architecture/v4-delivery-authority-parity.json +2 -2
  11. package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.json +1 -1
  12. package/architecture/v4-floating-consumer-policy.json +1 -1
  13. package/architecture/v4-next-development-parity.json +4 -4
  14. package/architecture/v4-platform-stage-checkpoints.json +1 -1
  15. package/architecture/v4-publication-facade-patches.json +53 -0
  16. package/architecture/v4-release-topology.json +46 -29
  17. package/architecture/v4-rust-wasm-production-authority.json +1 -0
  18. package/architecture/v4-stage-capsule-qualification.json +1 -1
  19. package/architecture/v4-universal-workflow-bootstrap.json +1 -1
  20. package/architecture/v4-universal-workflow-fault-campaign.json +1 -1
  21. package/architecture/v4-universal-workflow-train-admission.json +4 -4
  22. package/architecture/workflow-taxonomy.json +1437 -0
  23. package/contracts/buildchain-v2-residuals-v1.json +64 -1
  24. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  25. package/contracts/v4-canonical-contracts-v1.schema.json +1 -0
  26. package/dist/site/buildchain-contract.json +20 -20
  27. package/dist/site/buildchain-site.json +122 -56
  28. package/dist/site/capability-registry.json +4 -4
  29. package/dist/site/controller-registry.json +5 -4
  30. package/dist/site/kfd-claims.json +2617 -964
  31. package/dist/site/kfd-upstream-aggregate.json +1 -1
  32. package/dist/site/manual-registry.json +10 -10
  33. package/dist/site/node-api-registry.json +26 -21
  34. package/dist/site/page-registry.json +107 -41
  35. package/dist/site/public-surface-audit.json +3196 -1128
  36. package/dist/site/publication-authority-registry.json +1179 -417
  37. package/dist/site/publication-registry.json +4 -4
  38. package/dist/site/site-manifest.json +14 -14
  39. package/dist/site/workflow-registry.json +5484 -1924
  40. package/docs/MAP.md +1 -0
  41. package/docs/auditable-demo.md +1 -1
  42. package/docs/cli.md +3 -3
  43. package/docs/dev-delivery-warrant.md +1 -1
  44. package/docs/engineering-housekeeper.md +3 -3
  45. package/docs/next-development-transition.md +1 -1
  46. package/docs/node-api-reference.md +30 -30
  47. package/docs/publication-authority.md +2 -2
  48. package/docs/release-candidate.md +3 -3
  49. package/docs/release-flow.md +67 -19
  50. package/docs/release-governance.md +8 -8
  51. package/docs/v4-adopter-delivery.md +1 -1
  52. package/docs/v4-production-release.md +45 -8
  53. package/docs/v4-stage-capsule.md +1 -1
  54. package/docs/workflow-catalog.md +151 -0
  55. package/package.json +8 -6
  56. package/packages/core/buildchain-contract.js +1 -1
  57. package/packages/core/buildchain-kfd-claims.js +2 -2
  58. package/packages/core/buildchain-publication-authority.js +40 -25
  59. package/packages/core/buildchain-v4-domain.wasm +0 -0
  60. package/packages/core/controller-evidence.js +4 -1
  61. package/packages/core/github-governance-authority.js +4 -4
  62. package/packages/core/next-development-projection.js +1 -1
  63. package/packages/core/release-line-dry-run.js +1 -1
  64. package/packages/core/v4-canonical-contracts.js +1 -0
  65. package/packages/core/v4-domain-wasm-artifact.js +2 -2
  66. package/packages/core/v4-floating-consumer-evidence.js +1 -1
  67. package/packages/core/v4-floating-consumer-policy.js +1 -1
  68. package/scripts/binary-publication-evidence.mjs +135 -0
  69. package/scripts/check-ci-lane-change-budget.mjs +4 -1
  70. package/scripts/check-core-mechanism-inventory.mjs +4 -3
  71. package/scripts/check-inventory.mjs +22 -22
  72. package/scripts/check-v4-floating-consumer-policy-contract.mjs +1 -1
  73. package/scripts/check-v4-public-dogfood-contract.mjs +18 -5
  74. package/scripts/check-v4-release-topology.mjs +5 -2
  75. package/scripts/check-v4-runtime-semantic-closure.mjs +4 -1
  76. package/scripts/check-v4-universal-workflow-bootstrap.mjs +5 -9
  77. package/scripts/check-workflow-taxonomy.mjs +6 -0
  78. package/scripts/generate-channel-build-workflow.mjs +2 -1
  79. package/scripts/generate-channel-promotion-workflow.mjs +4 -3
  80. package/scripts/generate-site-bundle.mjs +11 -11
  81. package/scripts/generate-v4-universal-workflow-facades.mjs +24 -6
  82. package/scripts/generate-workflow-taxonomy.mjs +25 -0
  83. package/scripts/maintainability-metrics.mjs +16 -5
  84. package/scripts/release-asset-client.mjs +90 -0
  85. package/scripts/release-candidate-resolver.mjs +1 -1
  86. package/scripts/source-verification-evidence.mjs +344 -0
  87. package/scripts/stable-candidate-qualification.mjs +1 -1
  88. package/scripts/v4-publication-settlement.mjs +207 -0
  89. package/scripts/v4-universal-workflow-self-dogfood.mjs +1 -1
  90. package/scripts/verify-version-state-delta.mjs +173 -0
  91. package/scripts/workflow-taxonomy.mjs +468 -0
package/dist/site/public-surface-audit.json CHANGED
@@ -4,9 +4,9 @@
4
4
  "status": "passed",
5
5
  "summary": {
6
6
  "cliCommandCount": 117,
7
- "workflowCount": 74,
7
+ "workflowCount": 116,
8
8
  "actionCount": 8,
9
- "sitePageCount": 85,
9
+ "sitePageCount": 86,
10
10
  "docCommandRefCount": 1050,
11
11
  "failureCount": 0
12
12
  },
@@ -666,8 +666,46 @@
666
666
  "outputCount": 0
667
667
  },
668
668
  {
669
- "id": ".build",
670
- "path": ".github/workflows/.build.yml",
669
+ "id": ".build-demo-adapter",
670
+ "path": ".github/workflows/.build-demo-adapter.yml",
671
+ "reusable": true,
672
+ "inputs": [
673
+ "adapter-arguments-json",
674
+ "adapter-path",
675
+ "artifact-retention-days",
676
+ "buildchain-repository",
677
+ "media-profile",
678
+ "render-media",
679
+ "renderer-image",
680
+ "require-trusted-event",
681
+ "source-artifact-digest",
682
+ "source-artifact-name",
683
+ "source-ref",
684
+ "universal-request-json"
685
+ ],
686
+ "inputCount": 12,
687
+ "secrets": [],
688
+ "secretCount": 0,
689
+ "outputs": [
690
+ "gate-artifact-digest",
691
+ "gate-artifact-id",
692
+ "gate-artifact-name",
693
+ "gate-artifact-url",
694
+ "gate-root",
695
+ "media-artifact-digest",
696
+ "media-artifact-id",
697
+ "media-artifact-name",
698
+ "media-artifact-url",
699
+ "media-profile",
700
+ "media-qualification-root",
701
+ "media-root",
702
+ "source-sha"
703
+ ],
704
+ "outputCount": 13
705
+ },
706
+ {
707
+ "id": ".build-engine",
708
+ "path": ".github/workflows/.build-engine.yml",
671
709
  "reusable": true,
672
710
  "inputs": [
673
711
  "artifact-compression-level",
@@ -828,58 +866,8 @@
828
866
  "outputCount": 45
829
867
  },
830
868
  {
831
- "id": ".bump-minor-version",
832
- "path": ".github/workflows/.bump-minor-version.yml",
833
- "reusable": true,
834
- "inputs": [
835
- "universal-request-json"
836
- ],
837
- "inputCount": 1,
838
- "secrets": [
839
- "GITHUB_PUSH_TOKEN"
840
- ],
841
- "secretCount": 1,
842
- "outputs": [],
843
- "outputCount": 0
844
- },
845
- {
846
- "id": ".declarative-auditable-demo",
847
- "path": ".github/workflows/.declarative-auditable-demo.yml",
848
- "reusable": true,
849
- "inputs": [
850
- "artifact-retention-days",
851
- "binary-artifact-digest",
852
- "binary-artifact-name",
853
- "buildchain-repository",
854
- "materialize",
855
- "materialize-base-ref",
856
- "media-profile",
857
- "render-failure-advisory",
858
- "render-media",
859
- "renderer-image",
860
- "scenario-path",
861
- "source-ref",
862
- "universal-request-json"
863
- ],
864
- "inputCount": 13,
865
- "secrets": [
866
- "DEMO_UPDATE_TOKEN"
867
- ],
868
- "secretCount": 1,
869
- "outputs": [
870
- "capture-artifact-digest",
871
- "capture-artifact-name",
872
- "evidence-artifact-digest",
873
- "evidence-artifact-name",
874
- "publication-pr-url",
875
- "render-result",
876
- "source-sha"
877
- ],
878
- "outputCount": 7
879
- },
880
- {
881
- "id": ".gate-profile",
882
- "path": ".github/workflows/.gate-profile.yml",
869
+ "id": ".build-gate-profile",
870
+ "path": ".github/workflows/.build-gate-profile.yml",
883
871
  "reusable": true,
884
872
  "inputs": [
885
873
  "artifact-name",
@@ -936,436 +924,1861 @@
936
924
  "outputCount": 14
937
925
  },
938
926
  {
939
- "id": ".publication-authority",
940
- "path": ".github/workflows/.publication-authority.yml",
927
+ "id": ".build-release-verify-compat",
928
+ "path": ".github/workflows/.build-release-verify-compat.yml",
941
929
  "reusable": true,
942
930
  "inputs": [
943
- "admission-json",
944
- "authority-workflow-path",
945
- "auto-admission",
946
- "auto-admission-kind",
947
- "auto-no-gate",
931
+ "auto-approve-enabled",
932
+ "aws-ci-region",
933
+ "aws-user-region",
934
+ "bucket-staging-ci",
935
+ "bucket-staging-user",
936
+ "build-container-enabled",
937
+ "build-runner-linux",
938
+ "build-runner-linux-labels",
939
+ "build-runner-macos",
940
+ "build-runner-macos-labels",
941
+ "build-runner-windows",
942
+ "build-runner-windows-labels",
943
+ "build-timeout-minutes",
948
944
  "buildchain-ref",
949
945
  "buildchain-repository",
950
- "consumer-gate-command",
951
- "consumer-gate-controller-sha",
952
- "consumer-gate-evidence-source-sha",
953
- "consumer-gate-evidence-source-tree",
954
- "consumer-predicate-digest",
955
- "consumer-predicate-id",
956
- "consumer-qualification-required",
957
- "control-plane-audit-json",
958
- "dry-run",
959
- "evidence-controller-artifact",
960
- "evidence-manifest-pattern",
961
- "evidence-passport-artifact",
962
- "evidence-payload-pattern",
963
- "evidence-publication-artifact",
964
- "evidence-repository",
965
- "evidence-run-id",
966
- "evidence-summary-artifact",
967
- "expected-json",
968
- "gate-aggregate-json",
969
- "github-governance-receipt-json",
970
- "package-name",
971
- "product",
972
- "publication-target",
973
- "publication-version",
974
- "publisher-workflow-path",
975
- "required-status-check",
976
- "runner-provenance-json",
977
- "source-sha",
978
- "target-ref",
946
+ "builder-container",
947
+ "code-signing-macos",
948
+ "code-signing-windows",
949
+ "collaborator-automation-enabled",
950
+ "enable-linux",
951
+ "enable-macos",
952
+ "enable-windows",
953
+ "find-dependencies",
954
+ "java-version",
955
+ "manager",
956
+ "max-build-attempts",
957
+ "max-preview-links",
958
+ "node-version",
959
+ "pipenv-version",
960
+ "poetry-version",
961
+ "prebuild",
962
+ "preview-files",
963
+ "publish-aws-ci",
964
+ "publish-aws-user",
965
+ "publish-github-npm",
966
+ "publish-versioning",
967
+ "python-version",
968
+ "setup-env-timeout-minutes",
969
+ "setup-python-enabled",
979
970
  "universal-request-json",
980
- "used-nonces-json"
971
+ "use-pipenv",
972
+ "use-poetry"
981
973
  ],
982
- "inputCount": 38,
974
+ "inputCount": 42,
983
975
  "secrets": [
984
- "BUILDCHAIN_GOVERNANCE_READ_TOKEN",
985
- "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
976
+ "APPLE_CSC_KEY",
977
+ "APPLE_CSC_KEY_PASSWORD",
978
+ "APPLE_ID",
979
+ "APPLE_ID_PASSWORD",
980
+ "AWS_CI_ACCESS_KEY_ID",
981
+ "AWS_CI_SECRET_ACCESS_KEY",
982
+ "AWS_USER_ACCESS_KEY_ID",
983
+ "AWS_USER_SECRET_ACCESS_KEY",
984
+ "GITHUB_PUSH_TOKEN",
985
+ "NODE_AUTH_TOKEN",
986
+ "WINDOWS_CSC_KEY"
987
+ ],
988
+ "secretCount": 11,
989
+ "outputs": [],
990
+ "outputCount": 0
991
+ },
992
+ {
993
+ "id": ".build-sam-verify-compat",
994
+ "path": ".github/workflows/.build-sam-verify-compat.yml",
995
+ "reusable": true,
996
+ "inputs": [
997
+ "aws-region",
998
+ "aws-role",
999
+ "aws-root",
1000
+ "manager",
1001
+ "universal-request-json"
1002
+ ],
1003
+ "inputCount": 5,
1004
+ "secrets": [
1005
+ "AWS_ACCOUNT_ID",
1006
+ "NODE_AUTH_TOKEN"
986
1007
  ],
987
1008
  "secretCount": 2,
988
- "outputs": [
989
- "capability-artifact",
990
- "capability-digest",
991
- "capability-json",
992
- "gate-aggregate-digest",
993
- "gate-aggregate-json"
1009
+ "outputs": [],
1010
+ "outputCount": 0
1011
+ },
1012
+ {
1013
+ "id": ".build-wheel-verify-compat",
1014
+ "path": ".github/workflows/.build-wheel-verify-compat.yml",
1015
+ "reusable": true,
1016
+ "inputs": [
1017
+ "aws-user-region",
1018
+ "bucket-release",
1019
+ "max-preview-links",
1020
+ "node-version",
1021
+ "preview-files",
1022
+ "universal-request-json"
994
1023
  ],
995
- "outputCount": 5
1024
+ "inputCount": 6,
1025
+ "secrets": [
1026
+ "AWS_USER_ACCESS_KEY_ID",
1027
+ "AWS_USER_SECRET_ACCESS_KEY",
1028
+ "NODE_AUTH_TOKEN"
1029
+ ],
1030
+ "secretCount": 3,
1031
+ "outputs": [],
1032
+ "outputCount": 0
996
1033
  },
997
1034
  {
998
- "id": ".release-candidate-promote",
999
- "path": ".github/workflows/.release-candidate-promote.yml",
1035
+ "id": ".build",
1036
+ "path": ".github/workflows/.build.yml",
1000
1037
  "reusable": true,
1001
1038
  "inputs": [
1002
- "allow-repository",
1039
+ "artifact-compression-level",
1040
+ "artifact-finalization-command",
1041
+ "artifact-finalization-on-platform",
1003
1042
  "artifact-name",
1004
- "artifact-patterns",
1005
- "branch-protection-bypass-apps",
1006
- "branch-protection-bypass-teams",
1007
- "branch-protection-bypass-users",
1008
- "buildchain-alpha-contract-lock-path",
1043
+ "artifact-name-template",
1044
+ "artifact-paths",
1045
+ "artifact-relay-s3-bucket",
1046
+ "artifact-relay-s3-download-role-arn",
1047
+ "artifact-relay-s3-oidc-audience",
1048
+ "artifact-relay-s3-prefix",
1049
+ "artifact-relay-s3-region",
1050
+ "artifact-relay-s3-role-arn",
1051
+ "artifact-relay-s3-upload-role-arn",
1052
+ "artifact-retention-days",
1053
+ "artifact-signing-request-upload-no-proxy",
1054
+ "artifact-transfer-mode",
1055
+ "aws-codebuild-project",
1056
+ "aws-ec2-macos-runner-label",
1057
+ "aws-ec2-windows-runner-label",
1058
+ "build-command",
1009
1059
  "buildchain-contract-compatibility-policy",
1010
1060
  "buildchain-contract-drift-issue-mode",
1061
+ "buildchain-contract-expected-channel",
1062
+ "buildchain-contract-expected-major",
1011
1063
  "buildchain-contract-lock-path",
1012
1064
  "buildchain-expected-channel",
1013
1065
  "buildchain-expected-major",
1014
1066
  "buildchain-ref",
1015
1067
  "buildchain-repository",
1016
- "buildchain-stable-contract-lock-path",
1017
- "channel",
1018
- "declarative-release-tail",
1019
- "dry-run",
1020
- "github-artifact-attestation-environment",
1021
- "github-artifact-attestation-policy-json",
1022
- "github-artifact-attestation-retention-days",
1023
- "github-governance-receipt-json",
1024
- "github-release",
1025
- "github-release-notes",
1026
- "github-release-payload-patterns",
1027
- "github-release-title",
1028
- "package-manager",
1029
- "promotion-contract-lock-digest",
1030
- "promotion-contract-lock-path",
1031
- "promotion-override-used",
1032
- "promotion-publication-channel",
1033
- "promotion-router-ref",
1034
- "promotion-router-sha",
1035
- "promotion-runtime-authorization-json",
1036
- "promotion-runtime-authorization-root",
1037
- "promotion-runtime-ref",
1038
- "promotion-runtime-sha",
1039
- "promotion-shell-ref",
1040
- "promotion-shell-sha",
1041
- "promotion-target-ref",
1042
- "provider-failure-after-capability",
1043
- "publication-admission-json",
1044
- "publication-authority-workflow-path",
1045
- "publication-auto-admission",
1046
- "publication-auto-no-gate",
1047
- "publication-commit-command",
1048
- "publication-commit-evidence-path",
1049
- "publication-consumer-predicate-id",
1050
- "publication-consumer-qualification-command",
1051
- "publication-consumer-qualification-controller-sha",
1052
- "publication-control-plane-audit-json",
1053
- "publication-expected-json",
1054
- "publication-gate-aggregate-json",
1055
- "publication-gate-command",
1056
- "publication-gate-controller-sha",
1057
- "publication-package-name",
1058
- "publication-product",
1059
- "publication-publisher-workflow-path",
1060
- "publication-runner-provenance-json",
1061
- "publication-target",
1062
- "publication-used-nonces-json",
1063
- "publication-used-qualification-nonces-json",
1064
- "publish-artifact-kind",
1065
- "publish-command",
1066
- "publish-dist-tag",
1067
- "publish-mode",
1068
- "publish-package-main",
1069
- "publish-package-set-order",
1070
- "publish-rematerialize-on-resume",
1071
- "publish-required-artifacts-json",
1072
- "publish-target",
1073
- "publish-transaction-override",
1074
- "release-activation-command",
1075
- "release-activation-receipt-set-path",
1076
- "release-candidate-family-assignment-id",
1077
- "release-candidate-family-evidence-required",
1078
- "release-candidate-family-evidence-root",
1079
- "release-candidate-family-initiative-id",
1080
- "release-candidate-wait-seconds",
1081
- "release-candidate-workflow-file",
1082
- "release-candidate-workflow-name",
1083
- "release-passport",
1084
- "release-passport-adopter-delivery-json",
1085
- "release-passport-attachment-command",
1086
- "release-passport-buildchain-self-kfd",
1087
- "release-passport-evidence-command",
1088
- "release-passport-evidence-jsons",
1089
- "release-passport-evidence-path",
1090
- "release-passport-impact-json",
1091
- "release-passport-invariant-passport-command",
1092
- "release-passport-invariant-passport-jsons",
1093
- "release-passport-kfd-1-witness-jsons",
1094
- "release-passport-kfd-2-claim-jsons",
1095
- "release-passport-kfd-3-artifact-verify-command",
1096
- "release-passport-kfd-3-artifact-witness-jsons",
1097
- "release-passport-kfd-3-prebuild-witness-jsons",
1098
- "release-passport-kfd-adopter-manifest-gate-json",
1099
- "release-passport-kfd-adopter-manifest-json",
1100
- "release-passport-kfd-product-gate-jsons",
1101
- "release-passport-kfd-support-matrix-json",
1102
- "release-passport-output-dir",
1103
- "release-passport-platform-manifest-paths",
1104
- "release-passport-product-name",
1105
- "release-passport-v4-runtime-resume-evidence-json",
1106
- "release-propagation-config-path",
1107
- "required-artifact-count",
1108
- "required-status-check",
1109
- "resume-buildchain-runtime-sha",
1110
- "resume-candidate-repository",
1111
- "resume-candidate-run-id",
1112
- "resume-expected-candidate-root",
1113
- "resume-expected-candidate-runtime-sha",
1114
- "resume-expected-source-tree",
1115
- "resume-expected-workflow-file",
1116
- "resume-expected-workflow-name",
1117
- "resume-transaction-id",
1068
+ "buildchain-visible-workflow",
1069
+ "cache-dependency-lock-root",
1070
+ "cache-policy-root",
1071
+ "cache-toolchain-root",
1072
+ "cargo-registry-index",
1073
+ "checkout-cache-fallback",
1074
+ "checkout-cache-fetch-attempts",
1075
+ "checkout-cache-github-timeout-seconds",
1076
+ "checkout-cache-mirror-url-template",
1077
+ "checkout-cache-mode",
1078
+ "checkout-cache-reference-repository-template",
1079
+ "checkout-cache-timeout-seconds",
1080
+ "checkout-history-mode",
1081
+ "compiler-cache-platforms-json",
1082
+ "compiler-cache-provider",
1083
+ "compiler-cache-required",
1084
+ "control-runner-json",
1085
+ "credential-island-caller-owned",
1086
+ "credential-island-environment",
1087
+ "credential-island-macos-app-path",
1088
+ "credential-island-macos-platform-id",
1089
+ "expected-artifacts-json",
1090
+ "fail-fast",
1091
+ "gate-profile-aggregate-json",
1092
+ "github-artifact-attestation-platform-id",
1093
+ "github-artifact-attestation-signer-sha",
1094
+ "github-artifact-attestation-subject-path",
1095
+ "install-command",
1096
+ "kfd-agent-hub",
1097
+ "lifecycle-timeout-minutes",
1098
+ "linux-container-image",
1099
+ "linux-container-preset",
1100
+ "node-version",
1101
+ "platforms-json",
1102
+ "pre-upload-transport-smoke-artifact-root",
1103
+ "pre-upload-transport-smoke-scenario-path",
1104
+ "process-sample-interval-ms",
1105
+ "process-summary-path",
1106
+ "publish-anchor-request-json",
1107
+ "publish-channel",
1108
+ "publish-refs-json",
1109
+ "publish-registry",
1110
+ "publish-source-ref",
1111
+ "release-candidate",
1112
+ "release-candidate-family-evidence-json",
1113
+ "requested-parallelism",
1114
+ "require-build",
1115
+ "require-install",
1116
+ "require-trusted-event",
1117
+ "require-verify",
1118
1118
  "runner-preset",
1119
- "standalone-binary-distribution",
1120
- "target-ref",
1121
- "target-sha",
1122
- "trusted-publishing",
1119
+ "rust-toolchain",
1120
+ "rustup-dist-server",
1121
+ "rustup-update-root",
1122
+ "sample-process-tree",
1123
+ "self-hosted-offline-fallback",
1124
+ "setup-node",
1125
+ "setup-rust",
1126
+ "shifu-cache-profile-digest",
1127
+ "shifu-cache-profile-ref",
1128
+ "universal-request-json",
1129
+ "untrusted-policy",
1130
+ "verify-command",
1131
+ "verify-substage-evidence-path",
1132
+ "working-directory"
1133
+ ],
1134
+ "inputCount": 94,
1135
+ "secrets": [
1136
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
1137
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
1138
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN",
1139
+ "BUILDCHAIN_MACOS_CERTIFICATE_P12_BASE64",
1140
+ "BUILDCHAIN_MACOS_CERTIFICATE_PASSWORD",
1141
+ "BUILDCHAIN_MACOS_NOTARY_API_ISSUER",
1142
+ "BUILDCHAIN_MACOS_NOTARY_API_KEY_ID",
1143
+ "BUILDCHAIN_MACOS_NOTARY_API_KEY_P8_BASE64",
1144
+ "BUILDCHAIN_PROMOTION_TOKEN"
1145
+ ],
1146
+ "secretCount": 9,
1147
+ "outputs": [
1148
+ "artifact-coordinates-json",
1149
+ "build-diagnostics-summary-artifact",
1150
+ "build-diagnostics-summary-json",
1151
+ "build-summary-artifact",
1152
+ "build-summary-json",
1153
+ "buildchain-contract-digest",
1154
+ "buildchain-contract-lock-drift",
1155
+ "buildchain-contract-lock-status",
1156
+ "buildchain-runtime-class",
1157
+ "buildchain-runtime-override",
1158
+ "buildchain-runtime-ref",
1159
+ "buildchain-runtime-sha",
1160
+ "buildchain-runtime-trust-decision",
1161
+ "controller-plan-artifact",
1162
+ "controller-plan-digest",
1163
+ "controller-plan-json",
1164
+ "controller-receipt-artifact",
1165
+ "controller-receipt-digest",
1166
+ "controller-receipt-json",
1167
+ "controller-receipt-status",
1168
+ "credential-island-macos-artifact",
1169
+ "credential-island-macos-manifest-artifact",
1170
+ "linux-container-enabled",
1171
+ "linux-container-image",
1172
+ "platform-count",
1173
+ "platforms-json",
1174
+ "publish-allowed",
1175
+ "publish-channel",
1176
+ "publish-reason",
1177
+ "publish-source-channel",
1178
+ "publish-source-consumer-version",
1179
+ "publish-source-line",
1180
+ "publish-source-locked",
1181
+ "publish-source-ref",
1182
+ "publish-source-sha",
1183
+ "publish-source-tree-sha",
1184
+ "release-candidate-artifact",
1185
+ "release-candidate-passport-artifact",
1186
+ "release-candidate-passport-json",
1187
+ "release-manifest-json",
1188
+ "runner-preset",
1189
+ "runner-routing-json",
1190
+ "trusted-event",
1191
+ "v4-consumer-policy-receipt-json",
1192
+ "v4-consumer-policy-receipt-root"
1193
+ ],
1194
+ "outputCount": 45
1195
+ },
1196
+ {
1197
+ "id": ".bump-minor-version",
1198
+ "path": ".github/workflows/.bump-minor-version.yml",
1199
+ "reusable": true,
1200
+ "inputs": [
1123
1201
  "universal-request-json"
1124
1202
  ],
1125
- "inputCount": 122,
1203
+ "inputCount": 1,
1204
+ "secrets": [
1205
+ "GITHUB_PUSH_TOKEN"
1206
+ ],
1207
+ "secretCount": 1,
1208
+ "outputs": [],
1209
+ "outputCount": 0
1210
+ },
1211
+ {
1212
+ "id": ".declarative-auditable-demo",
1213
+ "path": ".github/workflows/.declarative-auditable-demo.yml",
1214
+ "reusable": true,
1215
+ "inputs": [
1216
+ "artifact-retention-days",
1217
+ "binary-artifact-digest",
1218
+ "binary-artifact-name",
1219
+ "buildchain-repository",
1220
+ "materialize",
1221
+ "materialize-base-ref",
1222
+ "media-profile",
1223
+ "render-failure-advisory",
1224
+ "render-media",
1225
+ "renderer-image",
1226
+ "scenario-path",
1227
+ "source-ref",
1228
+ "universal-request-json"
1229
+ ],
1230
+ "inputCount": 13,
1231
+ "secrets": [
1232
+ "DEMO_UPDATE_TOKEN"
1233
+ ],
1234
+ "secretCount": 1,
1235
+ "outputs": [
1236
+ "capture-artifact-digest",
1237
+ "capture-artifact-name",
1238
+ "evidence-artifact-digest",
1239
+ "evidence-artifact-name",
1240
+ "publication-pr-url",
1241
+ "render-result",
1242
+ "source-sha"
1243
+ ],
1244
+ "outputCount": 7
1245
+ },
1246
+ {
1247
+ "id": ".gate-profile",
1248
+ "path": ".github/workflows/.gate-profile.yml",
1249
+ "reusable": true,
1250
+ "inputs": [
1251
+ "artifact-name",
1252
+ "artifact-retention-days",
1253
+ "buildchain-ref",
1254
+ "buildchain-repository",
1255
+ "cargo-registry-index",
1256
+ "checkout-cache-fallback",
1257
+ "checkout-cache-fetch-attempts",
1258
+ "checkout-cache-github-timeout-seconds",
1259
+ "checkout-cache-mirror-url-template",
1260
+ "checkout-cache-mode",
1261
+ "checkout-cache-reference-repository-template",
1262
+ "checkout-cache-timeout-seconds",
1263
+ "gate-command-json",
1264
+ "gate-environment-json",
1265
+ "gate-plan-command-json",
1266
+ "gate-profile",
1267
+ "gate-registry",
1268
+ "include-advisory",
1269
+ "node-version",
1270
+ "platforms-json",
1271
+ "require-trusted-event",
1272
+ "runner-preset",
1273
+ "rust-toolchain",
1274
+ "rustup-dist-server",
1275
+ "rustup-update-root",
1276
+ "shifu-cache-profile-digest",
1277
+ "shifu-cache-profile-ref",
1278
+ "source-ref",
1279
+ "universal-request-json",
1280
+ "untrusted-policy",
1281
+ "working-directory"
1282
+ ],
1283
+ "inputCount": 31,
1284
+ "secrets": [],
1285
+ "secretCount": 0,
1286
+ "outputs": [
1287
+ "buildchain-runtime-sha",
1288
+ "controller-plan-artifact",
1289
+ "controller-plan-digest",
1290
+ "controller-plan-json",
1291
+ "controller-receipt-artifact",
1292
+ "controller-receipt-digest",
1293
+ "controller-receipt-json",
1294
+ "controller-receipt-status",
1295
+ "gate-aggregate-artifact",
1296
+ "gate-aggregate-digest",
1297
+ "gate-aggregate-json",
1298
+ "gate-aggregate-status",
1299
+ "gate-matrix-digest",
1300
+ "source-sha"
1301
+ ],
1302
+ "outputCount": 14
1303
+ },
1304
+ {
1305
+ "id": ".ops-git-sync",
1306
+ "path": ".github/workflows/.ops-git-sync.yml",
1307
+ "reusable": true,
1308
+ "inputs": [
1309
+ "force",
1310
+ "remote-host",
1311
+ "remote-path",
1312
+ "remote-repo",
1313
+ "universal-request-json"
1314
+ ],
1315
+ "inputCount": 5,
1316
+ "secrets": [
1317
+ "REMOTE_CREDENTIAL",
1318
+ "REMOTE_USER"
1319
+ ],
1320
+ "secretCount": 2,
1321
+ "outputs": [],
1322
+ "outputCount": 0
1323
+ },
1324
+ {
1325
+ "id": ".publication-authority",
1326
+ "path": ".github/workflows/.publication-authority.yml",
1327
+ "reusable": true,
1328
+ "inputs": [
1329
+ "admission-json",
1330
+ "authority-workflow-path",
1331
+ "auto-admission",
1332
+ "auto-admission-kind",
1333
+ "auto-no-gate",
1334
+ "buildchain-ref",
1335
+ "buildchain-repository",
1336
+ "consumer-gate-command",
1337
+ "consumer-gate-controller-sha",
1338
+ "consumer-gate-evidence-source-sha",
1339
+ "consumer-gate-evidence-source-tree",
1340
+ "consumer-predicate-digest",
1341
+ "consumer-predicate-id",
1342
+ "consumer-qualification-required",
1343
+ "control-plane-audit-json",
1344
+ "dry-run",
1345
+ "evidence-controller-artifact",
1346
+ "evidence-manifest-pattern",
1347
+ "evidence-passport-artifact",
1348
+ "evidence-payload-pattern",
1349
+ "evidence-publication-artifact",
1350
+ "evidence-repository",
1351
+ "evidence-run-id",
1352
+ "evidence-summary-artifact",
1353
+ "expected-json",
1354
+ "gate-aggregate-json",
1355
+ "github-governance-receipt-json",
1356
+ "package-name",
1357
+ "product",
1358
+ "publication-target",
1359
+ "publication-version",
1360
+ "publisher-workflow-path",
1361
+ "required-status-check",
1362
+ "runner-provenance-json",
1363
+ "source-sha",
1364
+ "target-ref",
1365
+ "universal-request-json",
1366
+ "used-nonces-json"
1367
+ ],
1368
+ "inputCount": 38,
1369
+ "secrets": [
1370
+ "BUILDCHAIN_GOVERNANCE_READ_TOKEN",
1371
+ "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
1372
+ ],
1373
+ "secretCount": 2,
1374
+ "outputs": [
1375
+ "capability-artifact",
1376
+ "capability-digest",
1377
+ "capability-json",
1378
+ "gate-aggregate-digest",
1379
+ "gate-aggregate-json"
1380
+ ],
1381
+ "outputCount": 5
1382
+ },
1383
+ {
1384
+ "id": ".release-authority",
1385
+ "path": ".github/workflows/.release-authority.yml",
1386
+ "reusable": true,
1387
+ "inputs": [
1388
+ "admission-json",
1389
+ "authority-workflow-path",
1390
+ "auto-admission",
1391
+ "auto-admission-kind",
1392
+ "auto-no-gate",
1393
+ "buildchain-ref",
1394
+ "buildchain-repository",
1395
+ "consumer-gate-command",
1396
+ "consumer-gate-controller-sha",
1397
+ "consumer-gate-evidence-source-sha",
1398
+ "consumer-gate-evidence-source-tree",
1399
+ "consumer-predicate-digest",
1400
+ "consumer-predicate-id",
1401
+ "consumer-qualification-required",
1402
+ "control-plane-audit-json",
1403
+ "dry-run",
1404
+ "evidence-controller-artifact",
1405
+ "evidence-manifest-pattern",
1406
+ "evidence-passport-artifact",
1407
+ "evidence-payload-pattern",
1408
+ "evidence-publication-artifact",
1409
+ "evidence-repository",
1410
+ "evidence-run-id",
1411
+ "evidence-summary-artifact",
1412
+ "expected-json",
1413
+ "gate-aggregate-json",
1414
+ "github-governance-receipt-json",
1415
+ "package-name",
1416
+ "product",
1417
+ "publication-target",
1418
+ "publication-version",
1419
+ "publisher-workflow-path",
1420
+ "required-status-check",
1421
+ "runner-provenance-json",
1422
+ "source-sha",
1423
+ "target-ref",
1424
+ "universal-request-json",
1425
+ "used-nonces-json"
1426
+ ],
1427
+ "inputCount": 38,
1428
+ "secrets": [
1429
+ "BUILDCHAIN_GOVERNANCE_READ_TOKEN",
1430
+ "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
1431
+ ],
1432
+ "secretCount": 2,
1433
+ "outputs": [
1434
+ "capability-artifact",
1435
+ "capability-digest",
1436
+ "capability-json",
1437
+ "gate-aggregate-digest",
1438
+ "gate-aggregate-json"
1439
+ ],
1440
+ "outputCount": 5
1441
+ },
1442
+ {
1443
+ "id": ".release-binary-assets",
1444
+ "path": ".github/workflows/.release-binary-assets.yml",
1445
+ "reusable": true,
1446
+ "inputs": [
1447
+ "auto-admission",
1448
+ "buildchain-ref",
1449
+ "buildchain-repository",
1450
+ "evidence-run-id",
1451
+ "github-governance-receipt-json",
1452
+ "publication-admission-json",
1453
+ "publication-control-plane-audit-json",
1454
+ "publication-expected-json",
1455
+ "publication-gate-aggregate-json",
1456
+ "publication-runner-provenance-json",
1457
+ "publication-used-nonces-json",
1458
+ "publication-version",
1459
+ "release-tag",
1460
+ "source-sha",
1461
+ "target-ref",
1462
+ "universal-request-json"
1463
+ ],
1464
+ "inputCount": 16,
1465
+ "secrets": [],
1466
+ "secretCount": 0,
1467
+ "outputs": [],
1468
+ "outputCount": 0
1469
+ },
1470
+ {
1471
+ "id": ".release-candidate-promote",
1472
+ "path": ".github/workflows/.release-candidate-promote.yml",
1473
+ "reusable": true,
1474
+ "inputs": [
1475
+ "allow-repository",
1476
+ "artifact-name",
1477
+ "artifact-patterns",
1478
+ "branch-protection-bypass-apps",
1479
+ "branch-protection-bypass-teams",
1480
+ "branch-protection-bypass-users",
1481
+ "buildchain-alpha-contract-lock-path",
1482
+ "buildchain-contract-compatibility-policy",
1483
+ "buildchain-contract-drift-issue-mode",
1484
+ "buildchain-contract-lock-path",
1485
+ "buildchain-expected-channel",
1486
+ "buildchain-expected-major",
1487
+ "buildchain-ref",
1488
+ "buildchain-repository",
1489
+ "buildchain-stable-contract-lock-path",
1490
+ "channel",
1491
+ "declarative-release-tail",
1492
+ "dry-run",
1493
+ "github-artifact-attestation-environment",
1494
+ "github-artifact-attestation-policy-json",
1495
+ "github-artifact-attestation-retention-days",
1496
+ "github-governance-receipt-json",
1497
+ "github-release",
1498
+ "github-release-notes",
1499
+ "github-release-payload-patterns",
1500
+ "github-release-title",
1501
+ "package-manager",
1502
+ "promotion-contract-lock-digest",
1503
+ "promotion-contract-lock-path",
1504
+ "promotion-override-used",
1505
+ "promotion-publication-channel",
1506
+ "promotion-router-ref",
1507
+ "promotion-router-sha",
1508
+ "promotion-runtime-authorization-json",
1509
+ "promotion-runtime-authorization-root",
1510
+ "promotion-runtime-ref",
1511
+ "promotion-runtime-sha",
1512
+ "promotion-shell-ref",
1513
+ "promotion-shell-sha",
1514
+ "promotion-target-ref",
1515
+ "provider-failure-after-capability",
1516
+ "publication-admission-json",
1517
+ "publication-authority-workflow-path",
1518
+ "publication-auto-admission",
1519
+ "publication-auto-no-gate",
1520
+ "publication-commit-command",
1521
+ "publication-commit-evidence-path",
1522
+ "publication-consumer-predicate-id",
1523
+ "publication-consumer-qualification-command",
1524
+ "publication-consumer-qualification-controller-sha",
1525
+ "publication-control-plane-audit-json",
1526
+ "publication-expected-json",
1527
+ "publication-gate-aggregate-json",
1528
+ "publication-gate-command",
1529
+ "publication-gate-controller-sha",
1530
+ "publication-package-name",
1531
+ "publication-product",
1532
+ "publication-publisher-workflow-path",
1533
+ "publication-runner-provenance-json",
1534
+ "publication-target",
1535
+ "publication-used-nonces-json",
1536
+ "publication-used-qualification-nonces-json",
1537
+ "publish-artifact-kind",
1538
+ "publish-command",
1539
+ "publish-dist-tag",
1540
+ "publish-mode",
1541
+ "publish-package-main",
1542
+ "publish-package-set-order",
1543
+ "publish-rematerialize-on-resume",
1544
+ "publish-required-artifacts-json",
1545
+ "publish-target",
1546
+ "publish-transaction-override",
1547
+ "release-activation-command",
1548
+ "release-activation-receipt-set-path",
1549
+ "release-candidate-family-assignment-id",
1550
+ "release-candidate-family-evidence-required",
1551
+ "release-candidate-family-evidence-root",
1552
+ "release-candidate-family-initiative-id",
1553
+ "release-candidate-wait-seconds",
1554
+ "release-candidate-workflow-file",
1555
+ "release-candidate-workflow-name",
1556
+ "release-passport",
1557
+ "release-passport-adopter-delivery-json",
1558
+ "release-passport-attachment-command",
1559
+ "release-passport-buildchain-self-kfd",
1560
+ "release-passport-evidence-command",
1561
+ "release-passport-evidence-jsons",
1562
+ "release-passport-evidence-path",
1563
+ "release-passport-impact-json",
1564
+ "release-passport-invariant-passport-command",
1565
+ "release-passport-invariant-passport-jsons",
1566
+ "release-passport-kfd-1-witness-jsons",
1567
+ "release-passport-kfd-2-claim-jsons",
1568
+ "release-passport-kfd-3-artifact-verify-command",
1569
+ "release-passport-kfd-3-artifact-witness-jsons",
1570
+ "release-passport-kfd-3-prebuild-witness-jsons",
1571
+ "release-passport-kfd-adopter-manifest-gate-json",
1572
+ "release-passport-kfd-adopter-manifest-json",
1573
+ "release-passport-kfd-product-gate-jsons",
1574
+ "release-passport-kfd-support-matrix-json",
1575
+ "release-passport-output-dir",
1576
+ "release-passport-platform-manifest-paths",
1577
+ "release-passport-product-name",
1578
+ "release-passport-v4-runtime-resume-evidence-json",
1579
+ "release-propagation-config-path",
1580
+ "required-artifact-count",
1581
+ "required-status-check",
1582
+ "resume-buildchain-runtime-sha",
1583
+ "resume-candidate-repository",
1584
+ "resume-candidate-run-id",
1585
+ "resume-expected-candidate-root",
1586
+ "resume-expected-candidate-runtime-sha",
1587
+ "resume-expected-source-tree",
1588
+ "resume-expected-workflow-file",
1589
+ "resume-expected-workflow-name",
1590
+ "resume-transaction-id",
1591
+ "runner-preset",
1592
+ "standalone-binary-distribution",
1593
+ "target-ref",
1594
+ "target-sha",
1595
+ "trusted-publishing",
1596
+ "universal-request-json"
1597
+ ],
1598
+ "inputCount": 122,
1599
+ "secrets": [
1600
+ "BUILDCHAIN_ISSUE_APP_ID",
1601
+ "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
1602
+ "BUILDCHAIN_ISSUE_TOKEN",
1603
+ "BUILDCHAIN_PROMOTION_TOKEN",
1604
+ "BUILDCHAIN_PUBLICATION_COMMIT_SIGNING_KEY",
1605
+ "BUILDCHAIN_PUBLICATION_COMMIT_TOKEN",
1606
+ "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY",
1607
+ "buildchain-issue-app-id",
1608
+ "buildchain-issue-app-private-key",
1609
+ "buildchain-issue-token"
1610
+ ],
1611
+ "secretCount": 10,
1612
+ "outputs": [
1613
+ "built-source-sha",
1614
+ "controller-plan-artifact",
1615
+ "controller-plan-digest",
1616
+ "controller-plan-json",
1617
+ "controller-receipt-artifact",
1618
+ "controller-receipt-digest",
1619
+ "controller-receipt-json",
1620
+ "controller-receipt-status",
1621
+ "github-artifact-attestation-evidence-root",
1622
+ "github-artifact-attestation-id",
1623
+ "github-artifact-attestation-publication-receipt-digest",
1624
+ "github-artifact-attestation-url",
1625
+ "promoted-sha",
1626
+ "publication-capability-digest",
1627
+ "publication-commit-evidence-digest",
1628
+ "publication-commit-evidence-path",
1629
+ "publication-commit-payload-root",
1630
+ "publication-commit-url",
1631
+ "release-candidate-action",
1632
+ "release-candidate-artifact",
1633
+ "release-candidate-recovery-receipt-artifact",
1634
+ "release-candidate-recovery-root",
1635
+ "release-invocation-root",
1636
+ "release-propagation-work-artifact",
1637
+ "release-receipt-root",
1638
+ "release-tail-declaration-root",
1639
+ "release-tail-receipt-roots-json",
1640
+ "release-tail-state-root",
1641
+ "release-tail-transaction-root",
1642
+ "release-tail-transaction-state",
1643
+ "release-transaction-root"
1644
+ ],
1645
+ "outputCount": 31
1646
+ },
1647
+ {
1648
+ "id": ".release-minor-bump-compat",
1649
+ "path": ".github/workflows/.release-minor-bump-compat.yml",
1650
+ "reusable": true,
1651
+ "inputs": [
1652
+ "universal-request-json"
1653
+ ],
1654
+ "inputCount": 1,
1655
+ "secrets": [
1656
+ "GITHUB_PUSH_TOKEN"
1657
+ ],
1658
+ "secretCount": 1,
1659
+ "outputs": [],
1660
+ "outputCount": 0
1661
+ },
1662
+ {
1663
+ "id": ".release-page-sync-retired",
1664
+ "path": ".github/workflows/.release-page-sync-retired.yml",
1665
+ "reusable": true,
1666
+ "inputs": [
1667
+ "aws-region",
1668
+ "aws-role-arn",
1669
+ "base-id",
1670
+ "bucket-release",
1671
+ "cloudfront-id",
1672
+ "exclude",
1673
+ "lower-edge",
1674
+ "product",
1675
+ "product-name",
1676
+ "release-path",
1677
+ "release-url",
1678
+ "repo",
1679
+ "universal-request-json",
1680
+ "upper-edge"
1681
+ ],
1682
+ "inputCount": 14,
1683
+ "secrets": [
1684
+ "AIRTABLE_API_KEY",
1685
+ "GITHUB_PUSH_TOKEN"
1686
+ ],
1687
+ "secretCount": 2,
1688
+ "outputs": [],
1689
+ "outputCount": 0
1690
+ },
1691
+ {
1692
+ "id": ".release-promote",
1693
+ "path": ".github/workflows/.release-promote.yml",
1694
+ "reusable": true,
1695
+ "inputs": [
1696
+ "allow-repository",
1697
+ "artifact-name",
1698
+ "artifact-patterns",
1699
+ "branch-protection-bypass-apps",
1700
+ "branch-protection-bypass-teams",
1701
+ "branch-protection-bypass-users",
1702
+ "buildchain-alpha-contract-lock-path",
1703
+ "buildchain-contract-compatibility-policy",
1704
+ "buildchain-contract-drift-issue-mode",
1705
+ "buildchain-contract-lock-path",
1706
+ "buildchain-expected-channel",
1707
+ "buildchain-expected-major",
1708
+ "buildchain-ref",
1709
+ "buildchain-repository",
1710
+ "buildchain-stable-contract-lock-path",
1711
+ "channel",
1712
+ "declarative-release-tail",
1713
+ "dry-run",
1714
+ "github-artifact-attestation-environment",
1715
+ "github-artifact-attestation-policy-json",
1716
+ "github-artifact-attestation-retention-days",
1717
+ "github-governance-receipt-json",
1718
+ "github-release",
1719
+ "github-release-notes",
1720
+ "github-release-payload-patterns",
1721
+ "github-release-title",
1722
+ "package-manager",
1723
+ "promotion-contract-lock-digest",
1724
+ "promotion-contract-lock-path",
1725
+ "promotion-override-used",
1726
+ "promotion-publication-channel",
1727
+ "promotion-router-ref",
1728
+ "promotion-router-sha",
1729
+ "promotion-runtime-authorization-json",
1730
+ "promotion-runtime-authorization-root",
1731
+ "promotion-runtime-ref",
1732
+ "promotion-runtime-sha",
1733
+ "promotion-shell-ref",
1734
+ "promotion-shell-sha",
1735
+ "promotion-target-ref",
1736
+ "provider-failure-after-capability",
1737
+ "publication-admission-json",
1738
+ "publication-authority-workflow-path",
1739
+ "publication-auto-admission",
1740
+ "publication-auto-no-gate",
1741
+ "publication-commit-command",
1742
+ "publication-commit-evidence-path",
1743
+ "publication-consumer-predicate-id",
1744
+ "publication-consumer-qualification-command",
1745
+ "publication-consumer-qualification-controller-sha",
1746
+ "publication-control-plane-audit-json",
1747
+ "publication-expected-json",
1748
+ "publication-gate-aggregate-json",
1749
+ "publication-gate-command",
1750
+ "publication-gate-controller-sha",
1751
+ "publication-package-name",
1752
+ "publication-product",
1753
+ "publication-publisher-workflow-path",
1754
+ "publication-runner-provenance-json",
1755
+ "publication-target",
1756
+ "publication-used-nonces-json",
1757
+ "publication-used-qualification-nonces-json",
1758
+ "publish-artifact-kind",
1759
+ "publish-command",
1760
+ "publish-dist-tag",
1761
+ "publish-mode",
1762
+ "publish-package-main",
1763
+ "publish-package-set-order",
1764
+ "publish-rematerialize-on-resume",
1765
+ "publish-required-artifacts-json",
1766
+ "publish-target",
1767
+ "publish-transaction-override",
1768
+ "release-activation-command",
1769
+ "release-activation-receipt-set-path",
1770
+ "release-candidate-family-assignment-id",
1771
+ "release-candidate-family-evidence-required",
1772
+ "release-candidate-family-evidence-root",
1773
+ "release-candidate-family-initiative-id",
1774
+ "release-candidate-wait-seconds",
1775
+ "release-candidate-workflow-file",
1776
+ "release-candidate-workflow-name",
1777
+ "release-passport",
1778
+ "release-passport-adopter-delivery-json",
1779
+ "release-passport-attachment-command",
1780
+ "release-passport-buildchain-self-kfd",
1781
+ "release-passport-evidence-command",
1782
+ "release-passport-evidence-jsons",
1783
+ "release-passport-evidence-path",
1784
+ "release-passport-impact-json",
1785
+ "release-passport-invariant-passport-command",
1786
+ "release-passport-invariant-passport-jsons",
1787
+ "release-passport-kfd-1-witness-jsons",
1788
+ "release-passport-kfd-2-claim-jsons",
1789
+ "release-passport-kfd-3-artifact-verify-command",
1790
+ "release-passport-kfd-3-artifact-witness-jsons",
1791
+ "release-passport-kfd-3-prebuild-witness-jsons",
1792
+ "release-passport-kfd-adopter-manifest-gate-json",
1793
+ "release-passport-kfd-adopter-manifest-json",
1794
+ "release-passport-kfd-product-gate-jsons",
1795
+ "release-passport-kfd-support-matrix-json",
1796
+ "release-passport-output-dir",
1797
+ "release-passport-platform-manifest-paths",
1798
+ "release-passport-product-name",
1799
+ "release-passport-v4-runtime-resume-evidence-json",
1800
+ "release-propagation-config-path",
1801
+ "required-artifact-count",
1802
+ "required-status-check",
1803
+ "resume-buildchain-runtime-sha",
1804
+ "resume-candidate-repository",
1805
+ "resume-candidate-run-id",
1806
+ "resume-expected-candidate-root",
1807
+ "resume-expected-candidate-runtime-sha",
1808
+ "resume-expected-source-tree",
1809
+ "resume-expected-workflow-file",
1810
+ "resume-expected-workflow-name",
1811
+ "resume-transaction-id",
1812
+ "runner-preset",
1813
+ "standalone-binary-distribution",
1814
+ "target-ref",
1815
+ "target-sha",
1816
+ "trusted-publishing",
1817
+ "universal-request-json"
1818
+ ],
1819
+ "inputCount": 122,
1820
+ "secrets": [
1821
+ "BUILDCHAIN_ISSUE_APP_ID",
1822
+ "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
1823
+ "BUILDCHAIN_ISSUE_TOKEN",
1824
+ "BUILDCHAIN_PROMOTION_TOKEN",
1825
+ "BUILDCHAIN_PUBLICATION_COMMIT_SIGNING_KEY",
1826
+ "BUILDCHAIN_PUBLICATION_COMMIT_TOKEN",
1827
+ "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY",
1828
+ "buildchain-issue-app-id",
1829
+ "buildchain-issue-app-private-key",
1830
+ "buildchain-issue-token"
1831
+ ],
1832
+ "secretCount": 10,
1833
+ "outputs": [
1834
+ "built-source-sha",
1835
+ "controller-plan-artifact",
1836
+ "controller-plan-digest",
1837
+ "controller-plan-json",
1838
+ "controller-receipt-artifact",
1839
+ "controller-receipt-digest",
1840
+ "controller-receipt-json",
1841
+ "controller-receipt-status",
1842
+ "github-artifact-attestation-evidence-root",
1843
+ "github-artifact-attestation-id",
1844
+ "github-artifact-attestation-publication-receipt-digest",
1845
+ "github-artifact-attestation-url",
1846
+ "promoted-sha",
1847
+ "publication-capability-digest",
1848
+ "publication-commit-evidence-digest",
1849
+ "publication-commit-evidence-path",
1850
+ "publication-commit-payload-root",
1851
+ "publication-commit-url",
1852
+ "release-candidate-action",
1853
+ "release-candidate-artifact",
1854
+ "release-candidate-recovery-receipt-artifact",
1855
+ "release-candidate-recovery-root",
1856
+ "release-invocation-root",
1857
+ "release-propagation-work-artifact",
1858
+ "release-receipt-root",
1859
+ "release-tail-declaration-root",
1860
+ "release-tail-receipt-roots-json",
1861
+ "release-tail-state-root",
1862
+ "release-tail-transaction-root",
1863
+ "release-tail-transaction-state",
1864
+ "release-transaction-root"
1865
+ ],
1866
+ "outputCount": 31
1867
+ },
1868
+ {
1869
+ "id": ".release-verify",
1870
+ "path": ".github/workflows/.release-verify.yml",
1871
+ "reusable": true,
1872
+ "inputs": [
1873
+ "auto-approve-enabled",
1874
+ "aws-ci-region",
1875
+ "aws-user-region",
1876
+ "bucket-staging-ci",
1877
+ "bucket-staging-user",
1878
+ "build-container-enabled",
1879
+ "build-runner-linux",
1880
+ "build-runner-linux-labels",
1881
+ "build-runner-macos",
1882
+ "build-runner-macos-labels",
1883
+ "build-runner-windows",
1884
+ "build-runner-windows-labels",
1885
+ "build-timeout-minutes",
1886
+ "buildchain-ref",
1887
+ "buildchain-repository",
1888
+ "builder-container",
1889
+ "code-signing-macos",
1890
+ "code-signing-windows",
1891
+ "collaborator-automation-enabled",
1892
+ "enable-linux",
1893
+ "enable-macos",
1894
+ "enable-windows",
1895
+ "find-dependencies",
1896
+ "java-version",
1897
+ "manager",
1898
+ "max-build-attempts",
1899
+ "max-preview-links",
1900
+ "node-version",
1901
+ "pipenv-version",
1902
+ "poetry-version",
1903
+ "prebuild",
1904
+ "preview-files",
1905
+ "publish-aws-ci",
1906
+ "publish-aws-user",
1907
+ "publish-github-npm",
1908
+ "publish-versioning",
1909
+ "python-version",
1910
+ "setup-env-timeout-minutes",
1911
+ "setup-python-enabled",
1912
+ "universal-request-json",
1913
+ "use-pipenv",
1914
+ "use-poetry"
1915
+ ],
1916
+ "inputCount": 42,
1917
+ "secrets": [
1918
+ "APPLE_CSC_KEY",
1919
+ "APPLE_CSC_KEY_PASSWORD",
1920
+ "APPLE_ID",
1921
+ "APPLE_ID_PASSWORD",
1922
+ "AWS_CI_ACCESS_KEY_ID",
1923
+ "AWS_CI_SECRET_ACCESS_KEY",
1924
+ "AWS_USER_ACCESS_KEY_ID",
1925
+ "AWS_USER_SECRET_ACCESS_KEY",
1926
+ "GITHUB_PUSH_TOKEN",
1927
+ "NODE_AUTH_TOKEN",
1928
+ "WINDOWS_CSC_KEY"
1929
+ ],
1930
+ "secretCount": 11,
1931
+ "outputs": [],
1932
+ "outputCount": 0
1933
+ },
1934
+ {
1935
+ "id": ".sam-verify",
1936
+ "path": ".github/workflows/.sam-verify.yml",
1937
+ "reusable": true,
1938
+ "inputs": [
1939
+ "aws-region",
1940
+ "aws-role",
1941
+ "aws-root",
1942
+ "manager",
1943
+ "universal-request-json"
1944
+ ],
1945
+ "inputCount": 5,
1946
+ "secrets": [
1947
+ "AWS_ACCOUNT_ID",
1948
+ "NODE_AUTH_TOKEN"
1949
+ ],
1950
+ "secretCount": 2,
1951
+ "outputs": [],
1952
+ "outputCount": 0
1953
+ },
1954
+ {
1955
+ "id": ".sync-release-page",
1956
+ "path": ".github/workflows/.sync-release-page.yml",
1957
+ "reusable": true,
1958
+ "inputs": [
1959
+ "aws-region",
1960
+ "aws-role-arn",
1961
+ "base-id",
1962
+ "bucket-release",
1963
+ "cloudfront-id",
1964
+ "exclude",
1965
+ "lower-edge",
1966
+ "product",
1967
+ "product-name",
1968
+ "release-path",
1969
+ "release-url",
1970
+ "repo",
1971
+ "universal-request-json",
1972
+ "upper-edge"
1973
+ ],
1974
+ "inputCount": 14,
1975
+ "secrets": [
1976
+ "AIRTABLE_API_KEY",
1977
+ "GITHUB_PUSH_TOKEN"
1978
+ ],
1979
+ "secretCount": 2,
1980
+ "outputs": [],
1981
+ "outputCount": 0
1982
+ },
1983
+ {
1984
+ "id": ".sync-remote-git",
1985
+ "path": ".github/workflows/.sync-remote-git.yml",
1986
+ "reusable": true,
1987
+ "inputs": [
1988
+ "force",
1989
+ "remote-host",
1990
+ "remote-path",
1991
+ "remote-repo",
1992
+ "universal-request-json"
1993
+ ],
1994
+ "inputCount": 5,
1995
+ "secrets": [
1996
+ "REMOTE_CREDENTIAL",
1997
+ "REMOTE_USER"
1998
+ ],
1999
+ "secretCount": 2,
2000
+ "outputs": [],
2001
+ "outputCount": 0
2002
+ },
2003
+ {
2004
+ "id": ".web-surface",
2005
+ "path": ".github/workflows/.web-surface.yml",
2006
+ "reusable": true,
2007
+ "inputs": [
2008
+ "artifact-path",
2009
+ "aws-region",
2010
+ "build-command",
2011
+ "buildchain-contract-compatibility-policy",
2012
+ "buildchain-contract-drift-issue-mode",
2013
+ "buildchain-contract-expected-channel",
2014
+ "buildchain-contract-expected-major",
2015
+ "buildchain-contract-lock-path",
2016
+ "buildchain-ref",
2017
+ "buildchain-repository",
2018
+ "fail-on-release-pr-error",
2019
+ "github-governance-receipt-json",
2020
+ "node-version",
2021
+ "preview-apply",
2022
+ "preview-aws-role-arn",
2023
+ "preview-cleanup-apply",
2024
+ "preview-comment",
2025
+ "preview-environment",
2026
+ "production-apply",
2027
+ "production-approved",
2028
+ "production-aws-role-arn",
2029
+ "production-environment",
2030
+ "production-release-app-client-id",
2031
+ "production-release-app-id",
2032
+ "production-release-branch-channel",
2033
+ "production-release-head-prefix",
2034
+ "production-release-label",
2035
+ "production-release-on-main",
2036
+ "production-release-pr-mode",
2037
+ "production-release-pr-token",
2038
+ "production-source-sha",
2039
+ "publication-admission-json",
2040
+ "publication-control-plane-audit-json",
2041
+ "publication-expected-json",
2042
+ "publication-gate-aggregate-json",
2043
+ "publication-runner-provenance-json",
2044
+ "publication-used-nonces-json",
2045
+ "release-feedback-actor-privacy",
2046
+ "staging-apply",
2047
+ "staging-aws-role-arn",
2048
+ "staging-environment",
2049
+ "universal-request-json",
2050
+ "verify-command",
2051
+ "working-directory"
2052
+ ],
2053
+ "inputCount": 44,
2054
+ "secrets": [
2055
+ "production-release-app-private-key"
2056
+ ],
2057
+ "secretCount": 1,
2058
+ "outputs": [
2059
+ "buildchain-runtime-class",
2060
+ "buildchain-runtime-override",
2061
+ "buildchain-runtime-ref",
2062
+ "buildchain-runtime-sha",
2063
+ "controller-plan-artifact",
2064
+ "controller-plan-digest",
2065
+ "controller-plan-json",
2066
+ "controller-receipt-artifact",
2067
+ "controller-receipt-digest",
2068
+ "controller-receipt-json",
2069
+ "controller-receipt-status",
2070
+ "preview-apply-result-json",
2071
+ "preview-cleanup-result-json",
2072
+ "production-apply-result-json",
2073
+ "production-release-pr-url",
2074
+ "release-pr-status",
2075
+ "staging-apply-result-json",
2076
+ "web-surface-alias",
2077
+ "web-surface-channel",
2078
+ "web-surface-cleanup-plan-json",
2079
+ "web-surface-manifest-json",
2080
+ "web-surface-url",
2081
+ "web-surface-urls-json"
2082
+ ],
2083
+ "outputCount": 23
2084
+ },
2085
+ {
2086
+ "id": ".wheel-verify",
2087
+ "path": ".github/workflows/.wheel-verify.yml",
2088
+ "reusable": true,
2089
+ "inputs": [
2090
+ "aws-user-region",
2091
+ "bucket-release",
2092
+ "max-preview-links",
2093
+ "node-version",
2094
+ "preview-files",
2095
+ "universal-request-json"
2096
+ ],
2097
+ "inputCount": 6,
2098
+ "secrets": [
2099
+ "AWS_USER_ACCESS_KEY_ID",
2100
+ "AWS_USER_SECRET_ACCESS_KEY",
2101
+ "NODE_AUTH_TOKEN"
2102
+ ],
2103
+ "secretCount": 3,
2104
+ "outputs": [],
2105
+ "outputCount": 0
2106
+ },
2107
+ {
2108
+ "id": "artifact-signing-authority",
2109
+ "path": ".github/workflows/artifact-signing-authority.yml",
2110
+ "reusable": false,
2111
+ "inputs": [],
2112
+ "inputCount": 0,
2113
+ "secrets": [],
2114
+ "secretCount": 0,
2115
+ "outputs": [],
2116
+ "outputCount": 0
2117
+ },
2118
+ {
2119
+ "id": "bootstrap",
2120
+ "path": ".github/workflows/bootstrap.yml",
2121
+ "reusable": true,
2122
+ "inputs": [
2123
+ "request-json"
2124
+ ],
2125
+ "inputCount": 1,
2126
+ "secrets": [],
2127
+ "secretCount": 0,
2128
+ "outputs": [
2129
+ "admission-root",
2130
+ "backflow-root",
2131
+ "request-root",
2132
+ "result-json",
2133
+ "result-root",
2134
+ "runtime-sha",
2135
+ "terminal-receipt-json",
2136
+ "terminal-receipt-root"
2137
+ ],
2138
+ "outputCount": 8
2139
+ },
2140
+ {
2141
+ "id": "build",
2142
+ "path": ".github/workflows/build.yml",
2143
+ "reusable": true,
2144
+ "inputs": [
2145
+ "artifact-compression-level",
2146
+ "artifact-finalization-command",
2147
+ "artifact-finalization-on-platform",
2148
+ "artifact-name",
2149
+ "artifact-name-template",
2150
+ "artifact-paths",
2151
+ "artifact-relay-s3-bucket",
2152
+ "artifact-relay-s3-download-role-arn",
2153
+ "artifact-relay-s3-oidc-audience",
2154
+ "artifact-relay-s3-prefix",
2155
+ "artifact-relay-s3-region",
2156
+ "artifact-relay-s3-role-arn",
2157
+ "artifact-relay-s3-upload-role-arn",
2158
+ "artifact-retention-days",
2159
+ "artifact-signing-request-upload-no-proxy",
2160
+ "artifact-transfer-mode",
2161
+ "aws-codebuild-project",
2162
+ "aws-ec2-macos-runner-label",
2163
+ "aws-ec2-windows-runner-label",
2164
+ "build-command",
2165
+ "buildchain-alpha-contract-lock-path",
2166
+ "buildchain-channel",
2167
+ "buildchain-contract-compatibility-policy",
2168
+ "buildchain-contract-drift-issue-mode",
2169
+ "buildchain-contract-expected-channel",
2170
+ "buildchain-contract-expected-major",
2171
+ "buildchain-contract-lock-path",
2172
+ "buildchain-expected-channel",
2173
+ "buildchain-expected-major",
2174
+ "buildchain-ref",
2175
+ "buildchain-repository",
2176
+ "buildchain-stable-contract-lock-path",
2177
+ "buildchain-visible-workflow",
2178
+ "cache-dependency-lock-root",
2179
+ "cache-policy-root",
2180
+ "cache-toolchain-root",
2181
+ "cargo-registry-index",
2182
+ "checkout-cache-fallback",
2183
+ "checkout-cache-fetch-attempts",
2184
+ "checkout-cache-github-timeout-seconds",
2185
+ "checkout-cache-mirror-url-template",
2186
+ "checkout-cache-mode",
2187
+ "checkout-cache-reference-repository-template",
2188
+ "checkout-cache-timeout-seconds",
2189
+ "checkout-history-mode",
2190
+ "compiler-cache-platforms-json",
2191
+ "compiler-cache-provider",
2192
+ "compiler-cache-required",
2193
+ "control-runner-json",
2194
+ "credential-island-caller-owned",
2195
+ "credential-island-environment",
2196
+ "credential-island-macos-app-path",
2197
+ "credential-island-macos-platform-id",
2198
+ "expected-artifacts-json",
2199
+ "fail-fast",
2200
+ "gate-profile-aggregate-json",
2201
+ "github-artifact-attestation-platform-id",
2202
+ "github-artifact-attestation-signer-sha",
2203
+ "github-artifact-attestation-subject-path",
2204
+ "install-command",
2205
+ "kfd-agent-hub",
2206
+ "lifecycle-timeout-minutes",
2207
+ "linux-container-image",
2208
+ "linux-container-preset",
2209
+ "node-version",
2210
+ "platforms-json",
2211
+ "pre-upload-transport-smoke-artifact-root",
2212
+ "pre-upload-transport-smoke-scenario-path",
2213
+ "process-sample-interval-ms",
2214
+ "process-summary-path",
2215
+ "publish-anchor-request-json",
2216
+ "publish-channel",
2217
+ "publish-refs-json",
2218
+ "publish-registry",
2219
+ "publish-source-ref",
2220
+ "release-candidate",
2221
+ "release-candidate-family-evidence-json",
2222
+ "requested-parallelism",
2223
+ "require-build",
2224
+ "require-install",
2225
+ "require-trusted-event",
2226
+ "require-verify",
2227
+ "runner-preset",
2228
+ "rust-toolchain",
2229
+ "rustup-dist-server",
2230
+ "rustup-update-root",
2231
+ "sample-process-tree",
2232
+ "self-hosted-offline-fallback",
2233
+ "setup-node",
2234
+ "setup-rust",
2235
+ "shifu-cache-profile-digest",
2236
+ "shifu-cache-profile-ref",
2237
+ "universal-request-json",
2238
+ "untrusted-policy",
2239
+ "verify-command",
2240
+ "verify-substage-evidence-path",
2241
+ "working-directory"
2242
+ ],
2243
+ "inputCount": 97,
2244
+ "secrets": [
2245
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
2246
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
2247
+ "BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN",
2248
+ "BUILDCHAIN_MACOS_CERTIFICATE_P12_BASE64",
2249
+ "BUILDCHAIN_MACOS_CERTIFICATE_PASSWORD",
2250
+ "BUILDCHAIN_MACOS_NOTARY_API_ISSUER",
2251
+ "BUILDCHAIN_MACOS_NOTARY_API_KEY_ID",
2252
+ "BUILDCHAIN_MACOS_NOTARY_API_KEY_P8_BASE64",
2253
+ "BUILDCHAIN_PROMOTION_TOKEN"
2254
+ ],
2255
+ "secretCount": 9,
2256
+ "outputs": [
2257
+ "artifact-coordinates-json",
2258
+ "build-diagnostics-summary-artifact",
2259
+ "build-diagnostics-summary-json",
2260
+ "build-summary-artifact",
2261
+ "build-summary-json",
2262
+ "buildchain-channel",
2263
+ "buildchain-channel-reason",
2264
+ "buildchain-channel-selection-source",
2265
+ "buildchain-contract-digest",
2266
+ "buildchain-contract-lock-drift",
2267
+ "buildchain-contract-lock-status",
2268
+ "buildchain-runtime-class",
2269
+ "buildchain-runtime-override",
2270
+ "buildchain-runtime-ref",
2271
+ "buildchain-runtime-sha",
2272
+ "buildchain-runtime-trust-decision",
2273
+ "controller-plan-artifact",
2274
+ "controller-plan-digest",
2275
+ "controller-plan-json",
2276
+ "controller-receipt-artifact",
2277
+ "controller-receipt-digest",
2278
+ "controller-receipt-json",
2279
+ "controller-receipt-status",
2280
+ "credential-island-macos-artifact",
2281
+ "credential-island-macos-manifest-artifact",
2282
+ "linux-container-enabled",
2283
+ "linux-container-image",
2284
+ "platform-count",
2285
+ "platforms-json",
2286
+ "publish-allowed",
2287
+ "publish-channel",
2288
+ "publish-reason",
2289
+ "publish-source-channel",
2290
+ "publish-source-consumer-version",
2291
+ "publish-source-line",
2292
+ "publish-source-locked",
2293
+ "publish-source-ref",
2294
+ "publish-source-sha",
2295
+ "publish-source-tree-sha",
2296
+ "release-candidate-artifact",
2297
+ "release-candidate-passport-artifact",
2298
+ "release-candidate-passport-json",
2299
+ "release-manifest-json",
2300
+ "runner-preset",
2301
+ "runner-routing-json",
2302
+ "trusted-event",
2303
+ "v4-consumer-policy-receipt-json",
2304
+ "v4-consumer-policy-receipt-root"
2305
+ ],
2306
+ "outputCount": 48
2307
+ },
2308
+ {
2309
+ "id": "buildchain-patrol",
2310
+ "path": ".github/workflows/buildchain-patrol.yml",
2311
+ "reusable": true,
2312
+ "inputs": [
2313
+ "allowed-head-prefixes",
2314
+ "block-labels",
2315
+ "buildchain-ref",
2316
+ "buildchain-repository",
2317
+ "cadence",
2318
+ "capabilities",
2319
+ "dry-run",
2320
+ "landing-mode",
2321
+ "max-actions",
2322
+ "merge-method",
2323
+ "mode",
2324
+ "ready-label",
2325
+ "require-approval",
2326
+ "required-status-checks",
2327
+ "same-repository-only",
2328
+ "target-branch",
2329
+ "universal-request-json"
2330
+ ],
2331
+ "inputCount": 17,
2332
+ "secrets": [
2333
+ "github-token"
2334
+ ],
2335
+ "secretCount": 1,
2336
+ "outputs": [
2337
+ "action-count",
2338
+ "evaluated-count",
2339
+ "planned-count",
2340
+ "result-path",
2341
+ "skipped-count"
2342
+ ],
2343
+ "outputCount": 5
2344
+ },
2345
+ {
2346
+ "id": "check",
2347
+ "path": ".github/workflows/check.yml",
2348
+ "reusable": true,
2349
+ "inputs": [
2350
+ "buildchain-ref",
2351
+ "buildchain-repository",
2352
+ "mode",
2353
+ "node-version",
2354
+ "require-version-state",
2355
+ "source-proof-closure-paths-json",
2356
+ "source-proof-dependency-paths-json",
2357
+ "source-proof-policy-paths-json",
2358
+ "source-proof-required-contexts-json",
2359
+ "source-proof-reuse",
2360
+ "universal-request-json",
2361
+ "upload-artifacts",
2362
+ "working-directory"
2363
+ ],
2364
+ "inputCount": 13,
2365
+ "secrets": [],
2366
+ "secretCount": 0,
2367
+ "outputs": [
2368
+ "controller-plan-artifact",
2369
+ "controller-plan-digest",
2370
+ "controller-plan-json",
2371
+ "controller-receipt-artifact",
2372
+ "controller-receipt-digest",
2373
+ "controller-receipt-json",
2374
+ "controller-receipt-status",
2375
+ "source-proof-decision-root",
2376
+ "source-proof-producer-run-id",
2377
+ "source-proof-reuse-reason",
2378
+ "source-proof-reused",
2379
+ "source-proof-root"
2380
+ ],
2381
+ "outputCount": 12
2382
+ },
2383
+ {
2384
+ "id": "dev-alpha-candidate-patrol",
2385
+ "path": ".github/workflows/dev-alpha-candidate-patrol.yml",
2386
+ "reusable": true,
2387
+ "inputs": [
2388
+ "alpha-workflow-path",
2389
+ "auto-merge",
2390
+ "buildchain-ref",
2391
+ "buildchain-repository",
2392
+ "create-pull-request",
2393
+ "dev-workflow-path",
2394
+ "dry-run",
2395
+ "max-age-seconds",
2396
+ "merge-method",
2397
+ "pull-request-body-prefix",
2398
+ "pull-request-body-prefix-renderer",
2399
+ "reactivation-authorized",
2400
+ "settlement-authorized",
2401
+ "source-branch",
2402
+ "target-branch",
2403
+ "universal-request-json"
2404
+ ],
2405
+ "inputCount": 16,
2406
+ "secrets": [
2407
+ "promotion-token"
2408
+ ],
2409
+ "secretCount": 1,
2410
+ "outputs": [
2411
+ "active-candidate-pr",
2412
+ "candidate-generation",
2413
+ "candidate-tree-sha",
2414
+ "controller-state",
2415
+ "cut-root",
2416
+ "drift-root",
2417
+ "eligible",
2418
+ "hold-root",
2419
+ "next-candidate-sha",
2420
+ "prior-state-root",
2421
+ "promotion-pr",
2422
+ "result-path",
2423
+ "runtime-sha",
2424
+ "selected-sha",
2425
+ "settlement-action",
2426
+ "source-lock-ref",
2427
+ "train-root"
2428
+ ],
2429
+ "outputCount": 17
2430
+ },
2431
+ {
2432
+ "id": "dev-delivery-warrant-cancel",
2433
+ "path": ".github/workflows/dev-delivery-warrant-cancel.yml",
2434
+ "reusable": true,
2435
+ "inputs": [
2436
+ "buildchain-ref",
2437
+ "buildchain-repository",
2438
+ "event-action",
2439
+ "expected-candidate-id",
2440
+ "expected-old-state-root",
2441
+ "expected-pr-number",
2442
+ "expected-source-head-sha",
2443
+ "observed-source-head-sha",
2444
+ "outcome",
2445
+ "reason",
2446
+ "target-branch",
2447
+ "terminal-evidence-root",
2448
+ "universal-request-json"
2449
+ ],
2450
+ "inputCount": 13,
2451
+ "secrets": [
2452
+ "github-token"
2453
+ ],
2454
+ "secretCount": 1,
2455
+ "outputs": [
2456
+ "cancellation-action",
2457
+ "cancellation-receipt-root",
2458
+ "final-state-root"
2459
+ ],
2460
+ "outputCount": 3
2461
+ },
2462
+ {
2463
+ "id": "dev-delivery-warrant-close",
2464
+ "path": ".github/workflows/dev-delivery-warrant-close.yml",
2465
+ "reusable": true,
2466
+ "inputs": [
2467
+ "buildchain-ref",
2468
+ "buildchain-repository",
2469
+ "current-base-sha",
2470
+ "expected-head-sha",
2471
+ "expected-pr-number",
2472
+ "merge-group-head-sha",
2473
+ "merge-group-tree-sha",
2474
+ "outcome",
2475
+ "reason",
2476
+ "replay-tree-sha",
2477
+ "required-context-roots-json",
2478
+ "target-branch",
2479
+ "terminal-evidence-root",
2480
+ "universal-request-json"
2481
+ ],
2482
+ "inputCount": 14,
2483
+ "secrets": [
2484
+ "github-token"
2485
+ ],
2486
+ "secretCount": 1,
2487
+ "outputs": [
2488
+ "close-receipt-root",
2489
+ "final-state-root",
2490
+ "integration-proof-root",
2491
+ "successor-wake-json"
2492
+ ],
2493
+ "outputCount": 4
2494
+ },
2495
+ {
2496
+ "id": "dev-pr-auto-merge",
2497
+ "path": ".github/workflows/dev-pr-auto-merge.yml",
2498
+ "reusable": true,
2499
+ "inputs": [
2500
+ "active-lease-context",
2501
+ "affected-paths-json",
2502
+ "allowed-head-prefixes",
2503
+ "assignment-root",
2504
+ "block-labels",
2505
+ "buildchain-ref",
2506
+ "buildchain-repository",
2507
+ "closure-root",
2508
+ "defer-landing",
2509
+ "delivery-class",
2510
+ "delivery-priority",
2511
+ "delivery-warrant-mode",
2512
+ "dependency-root",
2513
+ "diagnostic-context",
2514
+ "dry-run",
2515
+ "environment-root",
2516
+ "expected-head-sha",
2517
+ "expected-pr-number",
2518
+ "handoff-workflow-id",
2519
+ "initiative-root",
2520
+ "landing-mode",
2521
+ "legacy-active-owner-binding-json",
2522
+ "max-merges",
2523
+ "merge-method",
2524
+ "native-command",
2525
+ "native-command-root",
2526
+ "native-heartbeat-seconds",
2527
+ "native-proof-json",
2528
+ "plan-root",
2529
+ "project-cut-proof-json",
2530
+ "queue-admission-context",
2531
+ "ready-label",
2532
+ "release-blocker-priority-json",
2533
+ "require-approval",
2534
+ "required-status-checks",
2535
+ "same-repository-only",
2536
+ "shard-evidence-roots-json",
2537
+ "source-identity-root",
2538
+ "source-patch-root",
2539
+ "source-workflow-id",
2540
+ "source-workflow-run-id",
2541
+ "target-branch",
2542
+ "toolchain-root",
2543
+ "universal-request-json",
2544
+ "warrant-lease-seconds"
2545
+ ],
2546
+ "inputCount": 45,
1126
2547
  "secrets": [
1127
- "BUILDCHAIN_ISSUE_APP_ID",
1128
- "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
1129
- "BUILDCHAIN_ISSUE_TOKEN",
1130
- "BUILDCHAIN_PROMOTION_TOKEN",
1131
- "BUILDCHAIN_PUBLICATION_COMMIT_SIGNING_KEY",
1132
- "BUILDCHAIN_PUBLICATION_COMMIT_TOKEN",
1133
- "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY",
1134
- "buildchain-issue-app-id",
1135
- "buildchain-issue-app-private-key",
1136
- "buildchain-issue-token"
2548
+ "github-token"
1137
2549
  ],
1138
- "secretCount": 10,
2550
+ "secretCount": 1,
1139
2551
  "outputs": [
1140
- "built-source-sha",
1141
- "controller-plan-artifact",
1142
- "controller-plan-digest",
1143
- "controller-plan-json",
1144
- "controller-receipt-artifact",
1145
- "controller-receipt-digest",
1146
- "controller-receipt-json",
1147
- "controller-receipt-status",
1148
- "github-artifact-attestation-evidence-root",
1149
- "github-artifact-attestation-id",
1150
- "github-artifact-attestation-publication-receipt-digest",
1151
- "github-artifact-attestation-url",
1152
- "promoted-sha",
1153
- "publication-capability-digest",
1154
- "publication-commit-evidence-digest",
1155
- "publication-commit-evidence-path",
1156
- "publication-commit-payload-root",
1157
- "publication-commit-url",
1158
- "release-candidate-action",
1159
- "release-candidate-artifact",
1160
- "release-candidate-recovery-receipt-artifact",
1161
- "release-candidate-recovery-root",
1162
- "release-invocation-root",
1163
- "release-propagation-work-artifact",
1164
- "release-receipt-root",
1165
- "release-tail-declaration-root",
1166
- "release-tail-receipt-roots-json",
1167
- "release-tail-state-root",
1168
- "release-tail-transaction-root",
1169
- "release-tail-transaction-state",
1170
- "release-transaction-root"
2552
+ "action-count",
2553
+ "admission-receipt-root",
2554
+ "admission-state",
2555
+ "enqueued-count",
2556
+ "evaluated-count",
2557
+ "final-base-sha",
2558
+ "merged-count",
2559
+ "native-execution-transfer-root",
2560
+ "native-proof-root",
2561
+ "native-reuse-decision-root",
2562
+ "project-cut-proof-root",
2563
+ "provider-finalizer-boundary-root",
2564
+ "provider-heartbeat-receipt-root",
2565
+ "qualified-warrant-receipt-root",
2566
+ "skipped-count",
2567
+ "source-proof-root",
2568
+ "warrant-receipt-root",
2569
+ "warrant-state-commit",
2570
+ "warrant-state-root"
1171
2571
  ],
1172
- "outputCount": 31
2572
+ "outputCount": 19
1173
2573
  },
1174
2574
  {
1175
- "id": ".release-verify",
1176
- "path": ".github/workflows/.release-verify.yml",
2575
+ "id": "dev-qualification-patrol",
2576
+ "path": ".github/workflows/dev-qualification-patrol.yml",
1177
2577
  "reusable": true,
1178
2578
  "inputs": [
1179
- "auto-approve-enabled",
1180
- "aws-ci-region",
1181
- "aws-user-region",
1182
- "bucket-staging-ci",
1183
- "bucket-staging-user",
1184
- "build-container-enabled",
1185
- "build-runner-linux",
1186
- "build-runner-linux-labels",
1187
- "build-runner-macos",
1188
- "build-runner-macos-labels",
1189
- "build-runner-windows",
1190
- "build-runner-windows-labels",
1191
- "build-timeout-minutes",
1192
2579
  "buildchain-ref",
1193
2580
  "buildchain-repository",
1194
- "builder-container",
1195
- "code-signing-macos",
1196
- "code-signing-windows",
1197
- "collaborator-automation-enabled",
1198
- "enable-linux",
1199
- "enable-macos",
1200
- "enable-windows",
1201
- "find-dependencies",
1202
- "java-version",
1203
- "manager",
1204
- "max-build-attempts",
1205
- "max-preview-links",
1206
- "node-version",
1207
- "pipenv-version",
1208
- "poetry-version",
1209
- "prebuild",
1210
- "preview-files",
1211
- "publish-aws-ci",
1212
- "publish-aws-user",
1213
- "publish-github-npm",
1214
- "publish-versioning",
1215
- "python-version",
1216
- "setup-env-timeout-minutes",
1217
- "setup-python-enabled",
1218
- "universal-request-json",
1219
- "use-pipenv",
1220
- "use-poetry"
2581
+ "dev-workflow-path",
2582
+ "dispatch-inputs-json",
2583
+ "dry-run",
2584
+ "max-attempts",
2585
+ "mutation-authorized",
2586
+ "preflight-workflow-path",
2587
+ "priority-workflows-json",
2588
+ "source-branch",
2589
+ "universal-request-json"
1221
2590
  ],
1222
- "inputCount": 42,
2591
+ "inputCount": 11,
1223
2592
  "secrets": [
1224
- "APPLE_CSC_KEY",
1225
- "APPLE_CSC_KEY_PASSWORD",
1226
- "APPLE_ID",
1227
- "APPLE_ID_PASSWORD",
1228
- "AWS_CI_ACCESS_KEY_ID",
1229
- "AWS_CI_SECRET_ACCESS_KEY",
1230
- "AWS_USER_ACCESS_KEY_ID",
1231
- "AWS_USER_SECRET_ACCESS_KEY",
1232
- "GITHUB_PUSH_TOKEN",
1233
- "NODE_AUTH_TOKEN",
1234
- "WINDOWS_CSC_KEY"
2593
+ "qualification-token"
1235
2594
  ],
1236
- "secretCount": 11,
1237
- "outputs": [],
1238
- "outputCount": 0
2595
+ "secretCount": 1,
2596
+ "outputs": [
2597
+ "action",
2598
+ "active-run-id",
2599
+ "decision-root",
2600
+ "pending-sha",
2601
+ "reason",
2602
+ "source-sha",
2603
+ "state"
2604
+ ],
2605
+ "outputCount": 7
1239
2606
  },
1240
2607
  {
1241
- "id": ".sam-verify",
1242
- "path": ".github/workflows/.sam-verify.yml",
2608
+ "id": "engineering-housekeeper",
2609
+ "path": ".github/workflows/engineering-housekeeper.yml",
1243
2610
  "reusable": true,
1244
2611
  "inputs": [
1245
- "aws-region",
1246
- "aws-role",
1247
- "aws-root",
1248
- "manager",
2612
+ "apply-enabled",
2613
+ "artifact-prefix",
2614
+ "artifact-retention-days",
2615
+ "buildchain-ref",
2616
+ "buildchain-repository",
2617
+ "max-actions",
2618
+ "mode",
2619
+ "protected-patterns",
2620
+ "repository",
2621
+ "retained-patterns",
2622
+ "stale-days",
2623
+ "stale-pull-request-label",
2624
+ "target-branch",
2625
+ "temporary-branch-patterns",
1249
2626
  "universal-request-json"
1250
2627
  ],
1251
- "inputCount": 5,
2628
+ "inputCount": 15,
1252
2629
  "secrets": [
1253
- "AWS_ACCOUNT_ID",
1254
- "NODE_AUTH_TOKEN"
2630
+ "housekeeper_app_id",
2631
+ "housekeeper_app_private_key",
2632
+ "housekeeper_token"
1255
2633
  ],
1256
- "secretCount": 2,
1257
- "outputs": [],
1258
- "outputCount": 0
2634
+ "secretCount": 3,
2635
+ "outputs": [
2636
+ "action-count",
2637
+ "branch-receipt-root",
2638
+ "outcome",
2639
+ "plan-artifact",
2640
+ "plan-root",
2641
+ "pull-request-receipt-root",
2642
+ "receipt-artifact",
2643
+ "report-artifact",
2644
+ "report-receipt-root"
2645
+ ],
2646
+ "outputCount": 9
1259
2647
  },
1260
2648
  {
1261
- "id": ".sync-release-page",
1262
- "path": ".github/workflows/.sync-release-page.yml",
2649
+ "id": "github-artifact-attestation",
2650
+ "path": ".github/workflows/github-artifact-attestation.yml",
1263
2651
  "reusable": true,
1264
2652
  "inputs": [
1265
- "aws-region",
1266
- "aws-role-arn",
1267
- "base-id",
1268
- "bucket-release",
1269
- "cloudfront-id",
1270
- "exclude",
1271
- "lower-edge",
1272
- "product",
1273
- "product-name",
1274
- "release-path",
1275
- "release-url",
1276
- "repo",
1277
- "universal-request-json",
1278
- "upper-edge"
2653
+ "buildchain-ref",
2654
+ "environment",
2655
+ "evidence-artifact-name",
2656
+ "evidence-run-id",
2657
+ "platform-manifest-artifact-name",
2658
+ "platform-manifest-relative-path",
2659
+ "policy-json",
2660
+ "release-passport-artifact-name",
2661
+ "release-passport-relative-path",
2662
+ "retention-days",
2663
+ "source-sha",
2664
+ "subject-artifact-name",
2665
+ "subject-relative-path",
2666
+ "universal-request-json"
1279
2667
  ],
1280
- "inputCount": 14,
1281
- "secrets": [
1282
- "AIRTABLE_API_KEY",
1283
- "GITHUB_PUSH_TOKEN"
2668
+ "inputCount": 14,
2669
+ "secrets": [],
2670
+ "secretCount": 0,
2671
+ "outputs": [
2672
+ "attestation-id",
2673
+ "attestation-url",
2674
+ "bundle-digest",
2675
+ "evidence-artifact-name",
2676
+ "evidence-root"
1284
2677
  ],
1285
- "secretCount": 2,
1286
- "outputs": [],
1287
- "outputCount": 0
2678
+ "outputCount": 5
1288
2679
  },
1289
2680
  {
1290
- "id": ".sync-remote-git",
1291
- "path": ".github/workflows/.sync-remote-git.yml",
2681
+ "id": "paper-release-sealed",
2682
+ "path": ".github/workflows/paper-release-sealed.yml",
1292
2683
  "reusable": true,
1293
2684
  "inputs": [
1294
- "force",
1295
- "remote-host",
1296
- "remote-path",
1297
- "remote-repo",
1298
- "universal-request-json"
2685
+ "artifact-name",
2686
+ "artifact-paths",
2687
+ "artifact-retention-days",
2688
+ "branch-protection-bypass-apps",
2689
+ "branch-protection-bypass-teams",
2690
+ "branch-protection-bypass-users",
2691
+ "buildchain-contract-lock-path",
2692
+ "buildchain-ref",
2693
+ "buildchain-repository",
2694
+ "dry-run",
2695
+ "github-governance-receipt-json",
2696
+ "github-release",
2697
+ "github-release-notes",
2698
+ "github-release-title",
2699
+ "package-name",
2700
+ "publish-dist-tag",
2701
+ "publisher-workflow-path",
2702
+ "release-passport-impact-json",
2703
+ "release-passport-output-dir",
2704
+ "release-passport-product-name",
2705
+ "required-status-check",
2706
+ "target-ref",
2707
+ "target-sha",
2708
+ "toolchain-type",
2709
+ "universal-request-json",
2710
+ "verify-command",
2711
+ "working-directory"
1299
2712
  ],
1300
- "inputCount": 5,
2713
+ "inputCount": 27,
1301
2714
  "secrets": [
1302
- "REMOTE_CREDENTIAL",
1303
- "REMOTE_USER"
2715
+ "BUILDCHAIN_GENERATED_WRITE_APP_CLIENT_ID",
2716
+ "BUILDCHAIN_GENERATED_WRITE_APP_PRIVATE_KEY",
2717
+ "BUILDCHAIN_GENERATED_WRITE_TOKEN",
2718
+ "BUILDCHAIN_PROMOTION_TOKEN",
2719
+ "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
1304
2720
  ],
1305
- "secretCount": 2,
1306
- "outputs": [],
1307
- "outputCount": 0
2721
+ "secretCount": 5,
2722
+ "outputs": [
2723
+ "github-release-url",
2724
+ "package-name",
2725
+ "package-version",
2726
+ "propagation-work-artifact",
2727
+ "public-release-tag",
2728
+ "release-passport-path",
2729
+ "upstream-release-json"
2730
+ ],
2731
+ "outputCount": 7
1308
2732
  },
1309
2733
  {
1310
- "id": ".web-surface",
1311
- "path": ".github/workflows/.web-surface.yml",
2734
+ "id": "paper-release",
2735
+ "path": ".github/workflows/paper-release.yml",
1312
2736
  "reusable": true,
1313
2737
  "inputs": [
1314
- "artifact-path",
1315
- "aws-region",
2738
+ "artifact-name",
2739
+ "artifact-retention-days",
2740
+ "branch-protection-bypass-apps",
2741
+ "branch-protection-bypass-teams",
2742
+ "branch-protection-bypass-users",
1316
2743
  "build-command",
1317
2744
  "buildchain-contract-compatibility-policy",
1318
2745
  "buildchain-contract-drift-issue-mode",
1319
- "buildchain-contract-expected-channel",
1320
- "buildchain-contract-expected-major",
1321
2746
  "buildchain-contract-lock-path",
1322
2747
  "buildchain-ref",
1323
2748
  "buildchain-repository",
1324
- "fail-on-release-pr-error",
2749
+ "dry-run",
1325
2750
  "github-governance-receipt-json",
2751
+ "github-release",
2752
+ "github-release-notes",
2753
+ "github-release-title",
1326
2754
  "node-version",
1327
- "preview-apply",
1328
- "preview-aws-role-arn",
1329
- "preview-cleanup-apply",
1330
- "preview-comment",
1331
- "preview-environment",
1332
- "production-apply",
1333
- "production-approved",
1334
- "production-aws-role-arn",
1335
- "production-environment",
1336
- "production-release-app-client-id",
1337
- "production-release-app-id",
1338
- "production-release-branch-channel",
1339
- "production-release-head-prefix",
1340
- "production-release-label",
1341
- "production-release-on-main",
1342
- "production-release-pr-mode",
1343
- "production-release-pr-token",
1344
- "production-source-sha",
2755
+ "package-name",
1345
2756
  "publication-admission-json",
1346
2757
  "publication-control-plane-audit-json",
1347
2758
  "publication-expected-json",
1348
- "publication-gate-aggregate-json",
1349
2759
  "publication-runner-provenance-json",
1350
2760
  "publication-used-nonces-json",
1351
- "release-feedback-actor-privacy",
1352
- "staging-apply",
1353
- "staging-aws-role-arn",
1354
- "staging-environment",
2761
+ "publish-dist-tag",
2762
+ "publish-package-set-order",
2763
+ "release-passport-impact-json",
2764
+ "release-passport-output-dir",
2765
+ "release-passport-product-name",
2766
+ "required-status-check",
2767
+ "setup-node",
2768
+ "target-ref",
2769
+ "target-sha",
2770
+ "toolchain-command",
2771
+ "toolchain-digest",
2772
+ "toolchain-image",
2773
+ "toolchain-type",
1355
2774
  "universal-request-json",
1356
2775
  "verify-command",
1357
2776
  "working-directory"
1358
2777
  ],
1359
- "inputCount": 44,
1360
- "secrets": [
1361
- "production-release-app-private-key"
1362
- ],
1363
- "secretCount": 1,
2778
+ "inputCount": 39,
2779
+ "secrets": [],
2780
+ "secretCount": 0,
1364
2781
  "outputs": [
1365
- "buildchain-runtime-class",
1366
- "buildchain-runtime-override",
1367
- "buildchain-runtime-ref",
1368
- "buildchain-runtime-sha",
1369
2782
  "controller-plan-artifact",
1370
2783
  "controller-plan-digest",
1371
2784
  "controller-plan-json",
@@ -1373,134 +2786,149 @@
1373
2786
  "controller-receipt-digest",
1374
2787
  "controller-receipt-json",
1375
2788
  "controller-receipt-status",
1376
- "preview-apply-result-json",
1377
- "preview-cleanup-result-json",
1378
- "production-apply-result-json",
1379
- "production-release-pr-url",
1380
- "release-pr-status",
1381
- "staging-apply-result-json",
1382
- "web-surface-alias",
1383
- "web-surface-channel",
1384
- "web-surface-cleanup-plan-json",
1385
- "web-surface-manifest-json",
1386
- "web-surface-url",
1387
- "web-surface-urls-json"
2789
+ "github-release-url",
2790
+ "package-name",
2791
+ "package-version",
2792
+ "public-release-tag",
2793
+ "release-passport-path"
1388
2794
  ],
1389
- "outputCount": 23
2795
+ "outputCount": 12
1390
2796
  },
1391
2797
  {
1392
- "id": ".wheel-verify",
1393
- "path": ".github/workflows/.wheel-verify.yml",
2798
+ "id": "patrol-daily",
2799
+ "path": ".github/workflows/patrol-daily.yml",
1394
2800
  "reusable": true,
1395
2801
  "inputs": [
1396
- "aws-user-region",
1397
- "bucket-release",
1398
- "max-preview-links",
1399
- "node-version",
1400
- "preview-files",
2802
+ "allowed-head-prefixes",
2803
+ "block-labels",
2804
+ "buildchain-ref",
2805
+ "buildchain-repository",
2806
+ "dry-run",
2807
+ "landing-mode",
2808
+ "max-actions",
2809
+ "merge-method",
2810
+ "ready-label",
2811
+ "require-approval",
2812
+ "required-status-checks",
2813
+ "same-repository-only",
2814
+ "target-branch",
1401
2815
  "universal-request-json"
1402
2816
  ],
1403
- "inputCount": 6,
2817
+ "inputCount": 14,
1404
2818
  "secrets": [
1405
- "AWS_USER_ACCESS_KEY_ID",
1406
- "AWS_USER_SECRET_ACCESS_KEY",
1407
- "NODE_AUTH_TOKEN"
2819
+ "github-token"
1408
2820
  ],
1409
- "secretCount": 3,
1410
- "outputs": [],
1411
- "outputCount": 0
1412
- },
1413
- {
1414
- "id": "artifact-signing-authority",
1415
- "path": ".github/workflows/artifact-signing-authority.yml",
1416
- "reusable": false,
1417
- "inputs": [],
1418
- "inputCount": 0,
1419
- "secrets": [],
1420
- "secretCount": 0,
1421
- "outputs": [],
1422
- "outputCount": 0
1423
- },
1424
- {
1425
- "id": "auditable-demo-media-profile-qualification",
1426
- "path": ".github/workflows/auditable-demo-media-profile-qualification.yml",
1427
- "reusable": false,
1428
- "inputs": [],
1429
- "inputCount": 0,
1430
- "secrets": [],
1431
- "secretCount": 0,
1432
- "outputs": [],
1433
- "outputCount": 0
1434
- },
1435
- {
1436
- "id": "auditable-demo",
1437
- "path": ".github/workflows/auditable-demo.yml",
1438
- "reusable": false,
1439
- "inputs": [],
1440
- "inputCount": 0,
1441
- "secrets": [],
1442
- "secretCount": 0,
1443
- "outputs": [],
1444
- "outputCount": 0
2821
+ "secretCount": 1,
2822
+ "outputs": [
2823
+ "action-count",
2824
+ "evaluated-count",
2825
+ "planned-count",
2826
+ "result-path",
2827
+ "skipped-count"
2828
+ ],
2829
+ "outputCount": 5
1445
2830
  },
1446
2831
  {
1447
- "id": "binary-distribution",
1448
- "path": ".github/workflows/binary-distribution.yml",
1449
- "reusable": false,
1450
- "inputs": [],
1451
- "inputCount": 0,
1452
- "secrets": [],
1453
- "secretCount": 0,
1454
- "outputs": [],
1455
- "outputCount": 0
2832
+ "id": "patrol-monthly",
2833
+ "path": ".github/workflows/patrol-monthly.yml",
2834
+ "reusable": true,
2835
+ "inputs": [
2836
+ "buildchain-ref",
2837
+ "buildchain-repository",
2838
+ "dry-run",
2839
+ "target-branch",
2840
+ "universal-request-json"
2841
+ ],
2842
+ "inputCount": 5,
2843
+ "secrets": [
2844
+ "github-token"
2845
+ ],
2846
+ "secretCount": 1,
2847
+ "outputs": [
2848
+ "action-count",
2849
+ "evaluated-count",
2850
+ "planned-count",
2851
+ "result-path",
2852
+ "skipped-count"
2853
+ ],
2854
+ "outputCount": 5
1456
2855
  },
1457
2856
  {
1458
- "id": "binary-release-assets",
1459
- "path": ".github/workflows/binary-release-assets.yml",
1460
- "reusable": false,
1461
- "inputs": [],
1462
- "inputCount": 0,
2857
+ "id": "patrol-observed-evidence",
2858
+ "path": ".github/workflows/patrol-observed-evidence.yml",
2859
+ "reusable": true,
2860
+ "inputs": [
2861
+ "artifact-path",
2862
+ "build-command",
2863
+ "buildchain-ref",
2864
+ "cloudfront-distribution",
2865
+ "evidence-source-path",
2866
+ "evidence-source-ref",
2867
+ "evidence-source-repository",
2868
+ "manifest-path",
2869
+ "production-aws-role-arn",
2870
+ "production-bucket",
2871
+ "production-environment",
2872
+ "universal-request-json",
2873
+ "verify-command"
2874
+ ],
2875
+ "inputCount": 13,
1463
2876
  "secrets": [],
1464
2877
  "secretCount": 0,
1465
- "outputs": [],
1466
- "outputCount": 0
2878
+ "outputs": [
2879
+ "receipt-path"
2880
+ ],
2881
+ "outputCount": 1
1467
2882
  },
1468
2883
  {
1469
- "id": "bootstrap",
1470
- "path": ".github/workflows/bootstrap.yml",
2884
+ "id": "patrol-weekly",
2885
+ "path": ".github/workflows/patrol-weekly.yml",
1471
2886
  "reusable": true,
1472
2887
  "inputs": [
1473
- "request-json"
2888
+ "buildchain-ref",
2889
+ "buildchain-repository",
2890
+ "dry-run",
2891
+ "target-branch",
2892
+ "universal-request-json"
1474
2893
  ],
1475
- "inputCount": 1,
1476
- "secrets": [],
1477
- "secretCount": 0,
2894
+ "inputCount": 5,
2895
+ "secrets": [
2896
+ "github-token"
2897
+ ],
2898
+ "secretCount": 1,
1478
2899
  "outputs": [
1479
- "admission-root",
1480
- "backflow-root",
1481
- "request-root",
1482
- "result-json",
1483
- "result-root",
1484
- "runtime-sha",
1485
- "terminal-receipt-json",
1486
- "terminal-receipt-root"
2900
+ "action-count",
2901
+ "evaluated-count",
2902
+ "planned-count",
2903
+ "result-path",
2904
+ "skipped-count"
1487
2905
  ],
1488
- "outputCount": 8
2906
+ "outputCount": 5
1489
2907
  },
1490
2908
  {
1491
- "id": "build-surface-fixture",
1492
- "path": ".github/workflows/build-surface-fixture.yml",
1493
- "reusable": false,
1494
- "inputs": [],
1495
- "inputCount": 0,
2909
+ "id": "public-build-adopter-qualification",
2910
+ "path": ".github/workflows/public-build-adopter-qualification.yml",
2911
+ "reusable": true,
2912
+ "inputs": [
2913
+ "archive-path",
2914
+ "bootstrap-path",
2915
+ "consumer",
2916
+ "consumer-ref",
2917
+ "consumer-repository",
2918
+ "input-path",
2919
+ "invocation-source-path",
2920
+ "node-version",
2921
+ "universal-request-json"
2922
+ ],
2923
+ "inputCount": 9,
1496
2924
  "secrets": [],
1497
2925
  "secretCount": 0,
1498
2926
  "outputs": [],
1499
2927
  "outputCount": 0
1500
2928
  },
1501
2929
  {
1502
- "id": "build",
1503
- "path": ".github/workflows/build.yml",
2930
+ "id": "public-build-candidate",
2931
+ "path": ".github/workflows/public-build-candidate.yml",
1504
2932
  "reusable": true,
1505
2933
  "inputs": [
1506
2934
  "artifact-compression-level",
@@ -1667,513 +3095,689 @@
1667
3095
  "outputCount": 48
1668
3096
  },
1669
3097
  {
1670
- "id": "buildchain-alpha-self-dogfood",
1671
- "path": ".github/workflows/buildchain-alpha-self-dogfood.yml",
1672
- "reusable": false,
1673
- "inputs": [],
1674
- "inputCount": 0,
3098
+ "id": "public-build-check",
3099
+ "path": ".github/workflows/public-build-check.yml",
3100
+ "reusable": true,
3101
+ "inputs": [
3102
+ "buildchain-ref",
3103
+ "buildchain-repository",
3104
+ "mode",
3105
+ "node-version",
3106
+ "require-version-state",
3107
+ "source-proof-closure-paths-json",
3108
+ "source-proof-dependency-paths-json",
3109
+ "source-proof-policy-paths-json",
3110
+ "source-proof-required-contexts-json",
3111
+ "source-proof-reuse",
3112
+ "universal-request-json",
3113
+ "upload-artifacts",
3114
+ "working-directory"
3115
+ ],
3116
+ "inputCount": 13,
1675
3117
  "secrets": [],
1676
3118
  "secretCount": 0,
1677
- "outputs": [],
1678
- "outputCount": 0
3119
+ "outputs": [
3120
+ "controller-plan-artifact",
3121
+ "controller-plan-digest",
3122
+ "controller-plan-json",
3123
+ "controller-receipt-artifact",
3124
+ "controller-receipt-digest",
3125
+ "controller-receipt-json",
3126
+ "controller-receipt-status",
3127
+ "source-proof-decision-root",
3128
+ "source-proof-producer-run-id",
3129
+ "source-proof-reuse-reason",
3130
+ "source-proof-reused",
3131
+ "source-proof-root"
3132
+ ],
3133
+ "outputCount": 12
1679
3134
  },
1680
3135
  {
1681
- "id": "buildchain-candidate-recovery-dogfood-failure",
1682
- "path": ".github/workflows/buildchain-candidate-recovery-dogfood-failure.yml",
1683
- "reusable": false,
1684
- "inputs": [],
1685
- "inputCount": 0,
1686
- "secrets": [],
1687
- "secretCount": 0,
1688
- "outputs": [],
1689
- "outputCount": 0
3136
+ "id": "public-build-demo",
3137
+ "path": ".github/workflows/public-build-demo.yml",
3138
+ "reusable": true,
3139
+ "inputs": [
3140
+ "artifact-retention-days",
3141
+ "binary-artifact-digest",
3142
+ "binary-artifact-name",
3143
+ "buildchain-repository",
3144
+ "materialize",
3145
+ "materialize-base-ref",
3146
+ "media-profile",
3147
+ "render-failure-advisory",
3148
+ "render-media",
3149
+ "renderer-image",
3150
+ "scenario-path",
3151
+ "source-ref",
3152
+ "universal-request-json"
3153
+ ],
3154
+ "inputCount": 13,
3155
+ "secrets": [
3156
+ "DEMO_UPDATE_TOKEN"
3157
+ ],
3158
+ "secretCount": 1,
3159
+ "outputs": [
3160
+ "capture-artifact-digest",
3161
+ "capture-artifact-name",
3162
+ "evidence-artifact-digest",
3163
+ "evidence-artifact-name",
3164
+ "publication-pr-url",
3165
+ "render-result",
3166
+ "source-sha"
3167
+ ],
3168
+ "outputCount": 7
1690
3169
  },
1691
3170
  {
1692
- "id": "buildchain-dev-delivery",
1693
- "path": ".github/workflows/buildchain-dev-delivery.yml",
1694
- "reusable": false,
1695
- "inputs": [],
1696
- "inputCount": 0,
3171
+ "id": "public-build-publication",
3172
+ "path": ".github/workflows/public-build-publication.yml",
3173
+ "reusable": true,
3174
+ "inputs": [
3175
+ "artifact-name",
3176
+ "artifact-paths",
3177
+ "artifact-retention-days",
3178
+ "build-command",
3179
+ "buildchain-alpha-contract-lock-path",
3180
+ "buildchain-contract-compatibility-policy",
3181
+ "buildchain-contract-drift-issue-mode",
3182
+ "buildchain-contract-lock-path",
3183
+ "buildchain-ref",
3184
+ "buildchain-repository",
3185
+ "buildchain-stable-contract-lock-path",
3186
+ "node-version",
3187
+ "package-name",
3188
+ "prepare-paper-package",
3189
+ "publish-dist-tag",
3190
+ "setup-node",
3191
+ "target-ref",
3192
+ "toolchain-command",
3193
+ "toolchain-digest",
3194
+ "toolchain-image",
3195
+ "toolchain-type",
3196
+ "universal-request-json",
3197
+ "verify-command",
3198
+ "working-directory"
3199
+ ],
3200
+ "inputCount": 24,
1697
3201
  "secrets": [],
1698
3202
  "secretCount": 0,
1699
- "outputs": [],
1700
- "outputCount": 0
3203
+ "outputs": [
3204
+ "controller-plan-artifact",
3205
+ "controller-plan-digest",
3206
+ "controller-plan-json",
3207
+ "controller-receipt-artifact",
3208
+ "controller-receipt-digest",
3209
+ "controller-receipt-json",
3210
+ "controller-receipt-status",
3211
+ "package-name",
3212
+ "package-version",
3213
+ "publication-artifact-name",
3214
+ "publication-manifest-json",
3215
+ "publication-manifest-path",
3216
+ "publication-passport-path",
3217
+ "publication-registry-path",
3218
+ "publish-dist-tag",
3219
+ "runtime-sha"
3220
+ ],
3221
+ "outputCount": 16
1701
3222
  },
1702
3223
  {
1703
- "id": "buildchain-patrol-daily",
1704
- "path": ".github/workflows/buildchain-patrol-daily.yml",
1705
- "reusable": false,
1706
- "inputs": [],
1707
- "inputCount": 0,
3224
+ "id": "public-build-stage-capsule-canary",
3225
+ "path": ".github/workflows/public-build-stage-capsule-canary.yml",
3226
+ "reusable": true,
3227
+ "inputs": [
3228
+ "build-artifact-path",
3229
+ "consumer",
3230
+ "go-version",
3231
+ "install-artifact-path",
3232
+ "node-version",
3233
+ "universal-request-json",
3234
+ "verify-artifact-path"
3235
+ ],
3236
+ "inputCount": 7,
1708
3237
  "secrets": [],
1709
3238
  "secretCount": 0,
1710
3239
  "outputs": [],
1711
3240
  "outputCount": 0
1712
3241
  },
1713
3242
  {
1714
- "id": "buildchain-patrol-monthly",
1715
- "path": ".github/workflows/buildchain-patrol-monthly.yml",
1716
- "reusable": false,
1717
- "inputs": [],
1718
- "inputCount": 0,
3243
+ "id": "public-ops-alpha-candidate-patrol",
3244
+ "path": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
3245
+ "reusable": true,
3246
+ "inputs": [
3247
+ "alpha-workflow-path",
3248
+ "auto-merge",
3249
+ "buildchain-ref",
3250
+ "buildchain-repository",
3251
+ "create-pull-request",
3252
+ "dev-workflow-path",
3253
+ "dry-run",
3254
+ "max-age-seconds",
3255
+ "merge-method",
3256
+ "pull-request-body-prefix",
3257
+ "pull-request-body-prefix-renderer",
3258
+ "reactivation-authorized",
3259
+ "settlement-authorized",
3260
+ "source-branch",
3261
+ "target-branch",
3262
+ "universal-request-json"
3263
+ ],
3264
+ "inputCount": 16,
3265
+ "secrets": [
3266
+ "promotion-token"
3267
+ ],
3268
+ "secretCount": 1,
3269
+ "outputs": [
3270
+ "active-candidate-pr",
3271
+ "candidate-generation",
3272
+ "candidate-tree-sha",
3273
+ "controller-state",
3274
+ "cut-root",
3275
+ "drift-root",
3276
+ "eligible",
3277
+ "hold-root",
3278
+ "next-candidate-sha",
3279
+ "prior-state-root",
3280
+ "promotion-pr",
3281
+ "result-path",
3282
+ "runtime-sha",
3283
+ "selected-sha",
3284
+ "settlement-action",
3285
+ "source-lock-ref",
3286
+ "train-root"
3287
+ ],
3288
+ "outputCount": 17
3289
+ },
3290
+ {
3291
+ "id": "public-ops-bootstrap-recovery",
3292
+ "path": ".github/workflows/public-ops-bootstrap-recovery.yml",
3293
+ "reusable": true,
3294
+ "inputs": [
3295
+ "request-json"
3296
+ ],
3297
+ "inputCount": 1,
1719
3298
  "secrets": [],
1720
3299
  "secretCount": 0,
1721
- "outputs": [],
1722
- "outputCount": 0
3300
+ "outputs": [
3301
+ "backflow-root",
3302
+ "result-json",
3303
+ "runtime-sha",
3304
+ "terminal-receipt-json",
3305
+ "terminal-receipt-root"
3306
+ ],
3307
+ "outputCount": 5
1723
3308
  },
1724
3309
  {
1725
- "id": "buildchain-patrol-weekly",
1726
- "path": ".github/workflows/buildchain-patrol-weekly.yml",
1727
- "reusable": false,
1728
- "inputs": [],
1729
- "inputCount": 0,
3310
+ "id": "public-ops-bootstrap",
3311
+ "path": ".github/workflows/public-ops-bootstrap.yml",
3312
+ "reusable": true,
3313
+ "inputs": [
3314
+ "request-json"
3315
+ ],
3316
+ "inputCount": 1,
1730
3317
  "secrets": [],
1731
3318
  "secretCount": 0,
1732
- "outputs": [],
1733
- "outputCount": 0
3319
+ "outputs": [
3320
+ "admission-root",
3321
+ "backflow-root",
3322
+ "request-root",
3323
+ "result-json",
3324
+ "result-root",
3325
+ "runtime-sha",
3326
+ "terminal-receipt-json",
3327
+ "terminal-receipt-root"
3328
+ ],
3329
+ "outputCount": 8
1734
3330
  },
1735
3331
  {
1736
- "id": "buildchain-patrol",
1737
- "path": ".github/workflows/buildchain-patrol.yml",
3332
+ "id": "public-ops-dev-auto-merge",
3333
+ "path": ".github/workflows/public-ops-dev-auto-merge.yml",
1738
3334
  "reusable": true,
1739
3335
  "inputs": [
3336
+ "active-lease-context",
3337
+ "affected-paths-json",
1740
3338
  "allowed-head-prefixes",
3339
+ "assignment-root",
1741
3340
  "block-labels",
1742
3341
  "buildchain-ref",
1743
3342
  "buildchain-repository",
1744
- "cadence",
1745
- "capabilities",
3343
+ "closure-root",
3344
+ "defer-landing",
3345
+ "delivery-class",
3346
+ "delivery-priority",
3347
+ "delivery-warrant-mode",
3348
+ "dependency-root",
3349
+ "diagnostic-context",
1746
3350
  "dry-run",
3351
+ "environment-root",
3352
+ "expected-head-sha",
3353
+ "expected-pr-number",
3354
+ "handoff-workflow-id",
3355
+ "initiative-root",
1747
3356
  "landing-mode",
1748
- "max-actions",
3357
+ "legacy-active-owner-binding-json",
3358
+ "max-merges",
1749
3359
  "merge-method",
1750
- "mode",
3360
+ "native-command",
3361
+ "native-command-root",
3362
+ "native-heartbeat-seconds",
3363
+ "native-proof-json",
3364
+ "plan-root",
3365
+ "project-cut-proof-json",
3366
+ "queue-admission-context",
1751
3367
  "ready-label",
3368
+ "release-blocker-priority-json",
1752
3369
  "require-approval",
1753
3370
  "required-status-checks",
1754
3371
  "same-repository-only",
3372
+ "shard-evidence-roots-json",
3373
+ "source-identity-root",
3374
+ "source-patch-root",
3375
+ "source-workflow-id",
3376
+ "source-workflow-run-id",
1755
3377
  "target-branch",
1756
- "universal-request-json"
3378
+ "toolchain-root",
3379
+ "universal-request-json",
3380
+ "warrant-lease-seconds"
1757
3381
  ],
1758
- "inputCount": 17,
3382
+ "inputCount": 45,
1759
3383
  "secrets": [
1760
3384
  "github-token"
1761
3385
  ],
1762
3386
  "secretCount": 1,
1763
3387
  "outputs": [
1764
3388
  "action-count",
3389
+ "admission-receipt-root",
3390
+ "admission-state",
3391
+ "enqueued-count",
1765
3392
  "evaluated-count",
1766
- "planned-count",
1767
- "result-path",
1768
- "skipped-count"
3393
+ "final-base-sha",
3394
+ "merged-count",
3395
+ "native-execution-transfer-root",
3396
+ "native-proof-root",
3397
+ "native-reuse-decision-root",
3398
+ "project-cut-proof-root",
3399
+ "provider-finalizer-boundary-root",
3400
+ "provider-heartbeat-receipt-root",
3401
+ "qualified-warrant-receipt-root",
3402
+ "skipped-count",
3403
+ "source-proof-root",
3404
+ "warrant-receipt-root",
3405
+ "warrant-state-commit",
3406
+ "warrant-state-root"
1769
3407
  ],
1770
- "outputCount": 5
1771
- },
1772
- {
1773
- "id": "buildchain-ref-promotion-recovery",
1774
- "path": ".github/workflows/buildchain-ref-promotion-recovery.yml",
1775
- "reusable": false,
1776
- "inputs": [],
1777
- "inputCount": 0,
1778
- "secrets": [],
1779
- "secretCount": 0,
1780
- "outputs": [],
1781
- "outputCount": 0
1782
- },
1783
- {
1784
- "id": "buildchain-ref-promotion",
1785
- "path": ".github/workflows/buildchain-ref-promotion.yml",
1786
- "reusable": false,
1787
- "inputs": [],
1788
- "inputCount": 0,
1789
- "secrets": [],
1790
- "secretCount": 0,
1791
- "outputs": [],
1792
- "outputCount": 0
1793
- },
1794
- {
1795
- "id": "buildchain-stable-candidate-patrol",
1796
- "path": ".github/workflows/buildchain-stable-candidate-patrol.yml",
1797
- "reusable": false,
1798
- "inputs": [],
1799
- "inputCount": 0,
1800
- "secrets": [],
1801
- "secretCount": 0,
1802
- "outputs": [],
1803
- "outputCount": 0
1804
- },
1805
- {
1806
- "id": "buildchain-stable-candidate-qualification",
1807
- "path": ".github/workflows/buildchain-stable-candidate-qualification.yml",
1808
- "reusable": false,
1809
- "inputs": [],
1810
- "inputCount": 0,
1811
- "secrets": [],
1812
- "secretCount": 0,
1813
- "outputs": [],
1814
- "outputCount": 0
3408
+ "outputCount": 19
1815
3409
  },
1816
3410
  {
1817
- "id": "candidate-lab",
1818
- "path": ".github/workflows/candidate-lab.yml",
1819
- "reusable": false,
1820
- "inputs": [],
1821
- "inputCount": 0,
1822
- "secrets": [],
1823
- "secretCount": 0,
1824
- "outputs": [],
1825
- "outputCount": 0
3411
+ "id": "public-ops-dev-qualification-patrol",
3412
+ "path": ".github/workflows/public-ops-dev-qualification-patrol.yml",
3413
+ "reusable": true,
3414
+ "inputs": [
3415
+ "buildchain-ref",
3416
+ "buildchain-repository",
3417
+ "dev-workflow-path",
3418
+ "dispatch-inputs-json",
3419
+ "dry-run",
3420
+ "max-attempts",
3421
+ "mutation-authorized",
3422
+ "preflight-workflow-path",
3423
+ "priority-workflows-json",
3424
+ "source-branch",
3425
+ "universal-request-json"
3426
+ ],
3427
+ "inputCount": 11,
3428
+ "secrets": [
3429
+ "qualification-token"
3430
+ ],
3431
+ "secretCount": 1,
3432
+ "outputs": [
3433
+ "action",
3434
+ "active-run-id",
3435
+ "decision-root",
3436
+ "pending-sha",
3437
+ "reason",
3438
+ "source-sha",
3439
+ "state"
3440
+ ],
3441
+ "outputCount": 7
1826
3442
  },
1827
3443
  {
1828
- "id": "check",
1829
- "path": ".github/workflows/check.yml",
3444
+ "id": "public-ops-housekeeping",
3445
+ "path": ".github/workflows/public-ops-housekeeping.yml",
1830
3446
  "reusable": true,
1831
3447
  "inputs": [
3448
+ "apply-enabled",
3449
+ "artifact-prefix",
3450
+ "artifact-retention-days",
1832
3451
  "buildchain-ref",
1833
3452
  "buildchain-repository",
3453
+ "max-actions",
1834
3454
  "mode",
1835
- "node-version",
1836
- "require-version-state",
1837
- "source-proof-closure-paths-json",
1838
- "source-proof-dependency-paths-json",
1839
- "source-proof-policy-paths-json",
1840
- "source-proof-required-contexts-json",
1841
- "source-proof-reuse",
1842
- "universal-request-json",
1843
- "upload-artifacts",
1844
- "working-directory"
3455
+ "protected-patterns",
3456
+ "repository",
3457
+ "retained-patterns",
3458
+ "stale-days",
3459
+ "stale-pull-request-label",
3460
+ "target-branch",
3461
+ "temporary-branch-patterns",
3462
+ "universal-request-json"
1845
3463
  ],
1846
- "inputCount": 13,
1847
- "secrets": [],
1848
- "secretCount": 0,
3464
+ "inputCount": 15,
3465
+ "secrets": [
3466
+ "housekeeper_app_id",
3467
+ "housekeeper_app_private_key",
3468
+ "housekeeper_token"
3469
+ ],
3470
+ "secretCount": 3,
1849
3471
  "outputs": [
1850
- "controller-plan-artifact",
1851
- "controller-plan-digest",
1852
- "controller-plan-json",
1853
- "controller-receipt-artifact",
1854
- "controller-receipt-digest",
1855
- "controller-receipt-json",
1856
- "controller-receipt-status",
1857
- "source-proof-decision-root",
1858
- "source-proof-producer-run-id",
1859
- "source-proof-reuse-reason",
1860
- "source-proof-reused",
1861
- "source-proof-root"
3472
+ "action-count",
3473
+ "branch-receipt-root",
3474
+ "outcome",
3475
+ "plan-artifact",
3476
+ "plan-root",
3477
+ "pull-request-receipt-root",
3478
+ "receipt-artifact",
3479
+ "report-artifact",
3480
+ "report-receipt-root"
3481
+ ],
3482
+ "outputCount": 9
3483
+ },
3484
+ {
3485
+ "id": "public-ops-observed-evidence",
3486
+ "path": ".github/workflows/public-ops-observed-evidence.yml",
3487
+ "reusable": true,
3488
+ "inputs": [
3489
+ "artifact-path",
3490
+ "build-command",
3491
+ "buildchain-ref",
3492
+ "cloudfront-distribution",
3493
+ "evidence-source-path",
3494
+ "evidence-source-ref",
3495
+ "evidence-source-repository",
3496
+ "manifest-path",
3497
+ "production-aws-role-arn",
3498
+ "production-bucket",
3499
+ "production-environment",
3500
+ "universal-request-json",
3501
+ "verify-command"
1862
3502
  ],
1863
- "outputCount": 12
3503
+ "inputCount": 13,
3504
+ "secrets": [],
3505
+ "secretCount": 0,
3506
+ "outputs": [
3507
+ "receipt-path"
3508
+ ],
3509
+ "outputCount": 1
1864
3510
  },
1865
3511
  {
1866
- "id": "dev-alpha-candidate-patrol",
1867
- "path": ".github/workflows/dev-alpha-candidate-patrol.yml",
3512
+ "id": "public-ops-patrol-daily",
3513
+ "path": ".github/workflows/public-ops-patrol-daily.yml",
1868
3514
  "reusable": true,
1869
3515
  "inputs": [
1870
- "alpha-workflow-path",
1871
- "auto-merge",
3516
+ "allowed-head-prefixes",
3517
+ "block-labels",
1872
3518
  "buildchain-ref",
1873
3519
  "buildchain-repository",
1874
- "create-pull-request",
1875
- "dev-workflow-path",
1876
3520
  "dry-run",
1877
- "max-age-seconds",
3521
+ "landing-mode",
3522
+ "max-actions",
1878
3523
  "merge-method",
1879
- "pull-request-body-prefix",
1880
- "pull-request-body-prefix-renderer",
1881
- "reactivation-authorized",
1882
- "settlement-authorized",
1883
- "source-branch",
3524
+ "ready-label",
3525
+ "require-approval",
3526
+ "required-status-checks",
3527
+ "same-repository-only",
1884
3528
  "target-branch",
1885
3529
  "universal-request-json"
1886
3530
  ],
1887
- "inputCount": 16,
3531
+ "inputCount": 14,
1888
3532
  "secrets": [
1889
- "promotion-token"
3533
+ "github-token"
1890
3534
  ],
1891
3535
  "secretCount": 1,
1892
3536
  "outputs": [
1893
- "active-candidate-pr",
1894
- "candidate-generation",
1895
- "candidate-tree-sha",
1896
- "controller-state",
1897
- "cut-root",
1898
- "drift-root",
1899
- "eligible",
1900
- "hold-root",
1901
- "next-candidate-sha",
1902
- "prior-state-root",
1903
- "promotion-pr",
3537
+ "action-count",
3538
+ "evaluated-count",
3539
+ "planned-count",
1904
3540
  "result-path",
1905
- "runtime-sha",
1906
- "selected-sha",
1907
- "settlement-action",
1908
- "source-lock-ref",
1909
- "train-root"
3541
+ "skipped-count"
1910
3542
  ],
1911
- "outputCount": 17
3543
+ "outputCount": 5
1912
3544
  },
1913
3545
  {
1914
- "id": "dev-delivery-warrant-cancel",
1915
- "path": ".github/workflows/dev-delivery-warrant-cancel.yml",
3546
+ "id": "public-ops-patrol-monthly",
3547
+ "path": ".github/workflows/public-ops-patrol-monthly.yml",
1916
3548
  "reusable": true,
1917
3549
  "inputs": [
1918
3550
  "buildchain-ref",
1919
3551
  "buildchain-repository",
1920
- "event-action",
1921
- "expected-candidate-id",
1922
- "expected-old-state-root",
1923
- "expected-pr-number",
1924
- "expected-source-head-sha",
1925
- "observed-source-head-sha",
1926
- "outcome",
1927
- "reason",
3552
+ "dry-run",
1928
3553
  "target-branch",
1929
- "terminal-evidence-root",
1930
3554
  "universal-request-json"
1931
3555
  ],
1932
- "inputCount": 13,
3556
+ "inputCount": 5,
1933
3557
  "secrets": [
1934
3558
  "github-token"
1935
3559
  ],
1936
3560
  "secretCount": 1,
1937
3561
  "outputs": [
1938
- "cancellation-action",
1939
- "cancellation-receipt-root",
1940
- "final-state-root"
3562
+ "action-count",
3563
+ "evaluated-count",
3564
+ "planned-count",
3565
+ "result-path",
3566
+ "skipped-count"
1941
3567
  ],
1942
- "outputCount": 3
3568
+ "outputCount": 5
1943
3569
  },
1944
3570
  {
1945
- "id": "dev-delivery-warrant-close",
1946
- "path": ".github/workflows/dev-delivery-warrant-close.yml",
3571
+ "id": "public-ops-patrol-weekly",
3572
+ "path": ".github/workflows/public-ops-patrol-weekly.yml",
1947
3573
  "reusable": true,
1948
3574
  "inputs": [
1949
3575
  "buildchain-ref",
1950
3576
  "buildchain-repository",
1951
- "current-base-sha",
1952
- "expected-head-sha",
1953
- "expected-pr-number",
1954
- "merge-group-head-sha",
1955
- "merge-group-tree-sha",
1956
- "outcome",
1957
- "reason",
1958
- "replay-tree-sha",
1959
- "required-context-roots-json",
3577
+ "dry-run",
1960
3578
  "target-branch",
1961
- "terminal-evidence-root",
1962
3579
  "universal-request-json"
1963
3580
  ],
1964
- "inputCount": 14,
3581
+ "inputCount": 5,
1965
3582
  "secrets": [
1966
3583
  "github-token"
1967
3584
  ],
1968
3585
  "secretCount": 1,
1969
3586
  "outputs": [
1970
- "close-receipt-root",
1971
- "final-state-root",
1972
- "integration-proof-root",
1973
- "successor-wake-json"
3587
+ "action-count",
3588
+ "evaluated-count",
3589
+ "planned-count",
3590
+ "result-path",
3591
+ "skipped-count"
1974
3592
  ],
1975
- "outputCount": 4
1976
- },
1977
- {
1978
- "id": "dev-merge-queue-governance",
1979
- "path": ".github/workflows/dev-merge-queue-governance.yml",
1980
- "reusable": false,
1981
- "inputs": [],
1982
- "inputCount": 0,
1983
- "secrets": [],
1984
- "secretCount": 0,
1985
- "outputs": [],
1986
- "outputCount": 0
3593
+ "outputCount": 5
1987
3594
  },
1988
3595
  {
1989
- "id": "dev-pr-auto-merge",
1990
- "path": ".github/workflows/dev-pr-auto-merge.yml",
3596
+ "id": "public-ops-patrol",
3597
+ "path": ".github/workflows/public-ops-patrol.yml",
1991
3598
  "reusable": true,
1992
3599
  "inputs": [
1993
- "active-lease-context",
1994
- "affected-paths-json",
1995
3600
  "allowed-head-prefixes",
1996
- "assignment-root",
1997
3601
  "block-labels",
1998
3602
  "buildchain-ref",
1999
3603
  "buildchain-repository",
2000
- "closure-root",
2001
- "defer-landing",
2002
- "delivery-class",
2003
- "delivery-priority",
2004
- "delivery-warrant-mode",
2005
- "dependency-root",
2006
- "diagnostic-context",
3604
+ "cadence",
3605
+ "capabilities",
2007
3606
  "dry-run",
2008
- "environment-root",
2009
- "expected-head-sha",
2010
- "expected-pr-number",
2011
- "handoff-workflow-id",
2012
- "initiative-root",
2013
3607
  "landing-mode",
2014
- "legacy-active-owner-binding-json",
2015
- "max-merges",
3608
+ "max-actions",
2016
3609
  "merge-method",
2017
- "native-command",
2018
- "native-command-root",
2019
- "native-heartbeat-seconds",
2020
- "native-proof-json",
2021
- "plan-root",
2022
- "project-cut-proof-json",
2023
- "queue-admission-context",
3610
+ "mode",
2024
3611
  "ready-label",
2025
- "release-blocker-priority-json",
2026
3612
  "require-approval",
2027
3613
  "required-status-checks",
2028
3614
  "same-repository-only",
2029
- "shard-evidence-roots-json",
2030
- "source-identity-root",
2031
- "source-patch-root",
2032
- "source-workflow-id",
2033
- "source-workflow-run-id",
2034
3615
  "target-branch",
2035
- "toolchain-root",
2036
- "universal-request-json",
2037
- "warrant-lease-seconds"
3616
+ "universal-request-json"
2038
3617
  ],
2039
- "inputCount": 45,
3618
+ "inputCount": 17,
2040
3619
  "secrets": [
2041
3620
  "github-token"
2042
3621
  ],
2043
3622
  "secretCount": 1,
2044
3623
  "outputs": [
2045
3624
  "action-count",
2046
- "admission-receipt-root",
2047
- "admission-state",
2048
- "enqueued-count",
2049
3625
  "evaluated-count",
2050
- "final-base-sha",
2051
- "merged-count",
2052
- "native-execution-transfer-root",
2053
- "native-proof-root",
2054
- "native-reuse-decision-root",
2055
- "project-cut-proof-root",
2056
- "provider-finalizer-boundary-root",
2057
- "provider-heartbeat-receipt-root",
2058
- "qualified-warrant-receipt-root",
2059
- "skipped-count",
2060
- "source-proof-root",
2061
- "warrant-receipt-root",
2062
- "warrant-state-commit",
2063
- "warrant-state-root"
3626
+ "planned-count",
3627
+ "result-path",
3628
+ "skipped-count"
2064
3629
  ],
2065
- "outputCount": 19
3630
+ "outputCount": 5
3631
+ },
3632
+ {
3633
+ "id": "public-ops-release-governance",
3634
+ "path": ".github/workflows/public-ops-release-governance.yml",
3635
+ "reusable": true,
3636
+ "inputs": [
3637
+ "apply",
3638
+ "branch",
3639
+ "buildchain-ref",
3640
+ "candidate-sha",
3641
+ "universal-request-json"
3642
+ ],
3643
+ "inputCount": 5,
3644
+ "secrets": [
3645
+ "BUILDCHAIN_PROMOTION_TOKEN",
3646
+ "governance-token"
3647
+ ],
3648
+ "secretCount": 2,
3649
+ "outputs": [],
3650
+ "outputCount": 0
3651
+ },
3652
+ {
3653
+ "id": "public-ops-stable-candidate-patrol",
3654
+ "path": ".github/workflows/public-ops-stable-candidate-patrol.yml",
3655
+ "reusable": true,
3656
+ "inputs": [
3657
+ "auto-approve",
3658
+ "auto-merge",
3659
+ "auto-promote",
3660
+ "buildchain-ref",
3661
+ "buildchain-repository",
3662
+ "dry-run",
3663
+ "hold",
3664
+ "hold-reason",
3665
+ "ledger-ref",
3666
+ "merge-method",
3667
+ "minimum-soak-seconds",
3668
+ "release-now",
3669
+ "required-checks",
3670
+ "revoke-reason",
3671
+ "revoked-versions",
3672
+ "target-branch",
3673
+ "universal-request-json"
3674
+ ],
3675
+ "inputCount": 17,
3676
+ "secrets": [
3677
+ "approval-token",
3678
+ "promotion-token"
3679
+ ],
3680
+ "secretCount": 2,
3681
+ "outputs": [
3682
+ "promotion-pr",
3683
+ "result-path",
3684
+ "selected",
3685
+ "selected-sha",
3686
+ "selected-version",
3687
+ "stable-version"
3688
+ ],
3689
+ "outputCount": 6
3690
+ },
3691
+ {
3692
+ "id": "public-ops-tail-reseal",
3693
+ "path": ".github/workflows/public-ops-tail-reseal.yml",
3694
+ "reusable": true,
3695
+ "inputs": [
3696
+ "artifact-retention-days",
3697
+ "consumer-policy-receipt-json",
3698
+ "macos-finalization-command",
3699
+ "request-json",
3700
+ "universal-request-json"
3701
+ ],
3702
+ "inputCount": 5,
3703
+ "secrets": [
3704
+ "BUILDCHAIN_EVIDENCE_READ_TOKEN",
3705
+ "BUILDCHAIN_SIGNING_TOKEN"
3706
+ ],
3707
+ "secretCount": 2,
3708
+ "outputs": [
3709
+ "release-candidate-passport-json",
3710
+ "tail-reseal-receipt-root"
3711
+ ],
3712
+ "outputCount": 2
2066
3713
  },
2067
3714
  {
2068
- "id": "dev-qualification-patrol",
2069
- "path": ".github/workflows/dev-qualification-patrol.yml",
3715
+ "id": "public-ops-warrant-cancel",
3716
+ "path": ".github/workflows/public-ops-warrant-cancel.yml",
2070
3717
  "reusable": true,
2071
3718
  "inputs": [
2072
3719
  "buildchain-ref",
2073
3720
  "buildchain-repository",
2074
- "dev-workflow-path",
2075
- "dispatch-inputs-json",
2076
- "dry-run",
2077
- "max-attempts",
2078
- "mutation-authorized",
2079
- "preflight-workflow-path",
2080
- "priority-workflows-json",
2081
- "source-branch",
3721
+ "event-action",
3722
+ "expected-candidate-id",
3723
+ "expected-old-state-root",
3724
+ "expected-pr-number",
3725
+ "expected-source-head-sha",
3726
+ "observed-source-head-sha",
3727
+ "outcome",
3728
+ "reason",
3729
+ "target-branch",
3730
+ "terminal-evidence-root",
2082
3731
  "universal-request-json"
2083
3732
  ],
2084
- "inputCount": 11,
3733
+ "inputCount": 13,
2085
3734
  "secrets": [
2086
- "qualification-token"
3735
+ "github-token"
2087
3736
  ],
2088
3737
  "secretCount": 1,
2089
3738
  "outputs": [
2090
- "action",
2091
- "active-run-id",
2092
- "decision-root",
2093
- "pending-sha",
2094
- "reason",
2095
- "source-sha",
2096
- "state"
3739
+ "cancellation-action",
3740
+ "cancellation-receipt-root",
3741
+ "final-state-root"
2097
3742
  ],
2098
- "outputCount": 7
2099
- },
2100
- {
2101
- "id": "engineering-housekeeper-daily",
2102
- "path": ".github/workflows/engineering-housekeeper-daily.yml",
2103
- "reusable": false,
2104
- "inputs": [],
2105
- "inputCount": 0,
2106
- "secrets": [],
2107
- "secretCount": 0,
2108
- "outputs": [],
2109
- "outputCount": 0
2110
- },
2111
- {
2112
- "id": "engineering-housekeeper-monthly",
2113
- "path": ".github/workflows/engineering-housekeeper-monthly.yml",
2114
- "reusable": false,
2115
- "inputs": [],
2116
- "inputCount": 0,
2117
- "secrets": [],
2118
- "secretCount": 0,
2119
- "outputs": [],
2120
- "outputCount": 0
2121
- },
2122
- {
2123
- "id": "engineering-housekeeper-weekly",
2124
- "path": ".github/workflows/engineering-housekeeper-weekly.yml",
2125
- "reusable": false,
2126
- "inputs": [],
2127
- "inputCount": 0,
2128
- "secrets": [],
2129
- "secretCount": 0,
2130
- "outputs": [],
2131
- "outputCount": 0
3743
+ "outputCount": 3
2132
3744
  },
2133
3745
  {
2134
- "id": "engineering-housekeeper",
2135
- "path": ".github/workflows/engineering-housekeeper.yml",
3746
+ "id": "public-ops-warrant-close",
3747
+ "path": ".github/workflows/public-ops-warrant-close.yml",
2136
3748
  "reusable": true,
2137
3749
  "inputs": [
2138
- "apply-enabled",
2139
- "artifact-prefix",
2140
- "artifact-retention-days",
2141
3750
  "buildchain-ref",
2142
3751
  "buildchain-repository",
2143
- "max-actions",
2144
- "mode",
2145
- "protected-patterns",
2146
- "repository",
2147
- "retained-patterns",
2148
- "stale-days",
2149
- "stale-pull-request-label",
3752
+ "current-base-sha",
3753
+ "expected-head-sha",
3754
+ "expected-pr-number",
3755
+ "merge-group-head-sha",
3756
+ "merge-group-tree-sha",
3757
+ "outcome",
3758
+ "reason",
3759
+ "replay-tree-sha",
3760
+ "required-context-roots-json",
2150
3761
  "target-branch",
2151
- "temporary-branch-patterns",
3762
+ "terminal-evidence-root",
2152
3763
  "universal-request-json"
2153
3764
  ],
2154
- "inputCount": 15,
3765
+ "inputCount": 14,
2155
3766
  "secrets": [
2156
- "housekeeper_app_id",
2157
- "housekeeper_app_private_key",
2158
- "housekeeper_token"
3767
+ "github-token"
2159
3768
  ],
2160
- "secretCount": 3,
3769
+ "secretCount": 1,
2161
3770
  "outputs": [
2162
- "action-count",
2163
- "branch-receipt-root",
2164
- "outcome",
2165
- "plan-artifact",
2166
- "plan-root",
2167
- "pull-request-receipt-root",
2168
- "receipt-artifact",
2169
- "report-artifact",
2170
- "report-receipt-root"
3771
+ "close-receipt-root",
3772
+ "final-state-root",
3773
+ "integration-proof-root",
3774
+ "successor-wake-json"
2171
3775
  ],
2172
- "outputCount": 9
3776
+ "outputCount": 4
2173
3777
  },
2174
3778
  {
2175
- "id": "github-artifact-attestation",
2176
- "path": ".github/workflows/github-artifact-attestation.yml",
3779
+ "id": "public-release-artifact-attestation",
3780
+ "path": ".github/workflows/public-release-artifact-attestation.yml",
2177
3781
  "reusable": true,
2178
3782
  "inputs": [
2179
3783
  "buildchain-ref",
@@ -2204,30 +3808,8 @@
2204
3808
  "outputCount": 5
2205
3809
  },
2206
3810
  {
2207
- "id": "github-governance-audit",
2208
- "path": ".github/workflows/github-governance-audit.yml",
2209
- "reusable": false,
2210
- "inputs": [],
2211
- "inputCount": 0,
2212
- "secrets": [],
2213
- "secretCount": 0,
2214
- "outputs": [],
2215
- "outputCount": 0
2216
- },
2217
- {
2218
- "id": "npm-publish",
2219
- "path": ".github/workflows/npm-publish.yml",
2220
- "reusable": false,
2221
- "inputs": [],
2222
- "inputCount": 0,
2223
- "secrets": [],
2224
- "secretCount": 0,
2225
- "outputs": [],
2226
- "outputCount": 0
2227
- },
2228
- {
2229
- "id": "paper-release-sealed",
2230
- "path": ".github/workflows/paper-release-sealed.yml",
3811
+ "id": "public-release-paper-sealed",
3812
+ "path": ".github/workflows/public-release-paper-sealed.yml",
2231
3813
  "reusable": true,
2232
3814
  "inputs": [
2233
3815
  "artifact-name",
@@ -2279,8 +3861,8 @@
2279
3861
  "outputCount": 7
2280
3862
  },
2281
3863
  {
2282
- "id": "paper-release",
2283
- "path": ".github/workflows/paper-release.yml",
3864
+ "id": "public-release-paper",
3865
+ "path": ".github/workflows/public-release-paper.yml",
2284
3866
  "reusable": true,
2285
3867
  "inputs": [
2286
3868
  "artifact-name",
@@ -2323,10 +3905,155 @@
2323
3905
  "verify-command",
2324
3906
  "working-directory"
2325
3907
  ],
2326
- "inputCount": 39,
2327
- "secrets": [],
2328
- "secretCount": 0,
3908
+ "inputCount": 39,
3909
+ "secrets": [],
3910
+ "secretCount": 0,
3911
+ "outputs": [
3912
+ "controller-plan-artifact",
3913
+ "controller-plan-digest",
3914
+ "controller-plan-json",
3915
+ "controller-receipt-artifact",
3916
+ "controller-receipt-digest",
3917
+ "controller-receipt-json",
3918
+ "controller-receipt-status",
3919
+ "github-release-url",
3920
+ "package-name",
3921
+ "package-version",
3922
+ "public-release-tag",
3923
+ "release-passport-path"
3924
+ ],
3925
+ "outputCount": 12
3926
+ },
3927
+ {
3928
+ "id": "public-release-promote",
3929
+ "path": ".github/workflows/public-release-promote.yml",
3930
+ "reusable": true,
3931
+ "inputs": [
3932
+ "allow-repository",
3933
+ "artifact-name",
3934
+ "artifact-patterns",
3935
+ "branch-protection-bypass-apps",
3936
+ "branch-protection-bypass-teams",
3937
+ "branch-protection-bypass-users",
3938
+ "buildchain-alpha-contract-lock-path",
3939
+ "buildchain-channel",
3940
+ "buildchain-contract-compatibility-policy",
3941
+ "buildchain-contract-drift-issue-mode",
3942
+ "buildchain-contract-lock-path",
3943
+ "buildchain-ref",
3944
+ "buildchain-repository",
3945
+ "buildchain-stable-contract-lock-path",
3946
+ "channel",
3947
+ "declarative-release-tail",
3948
+ "dry-run",
3949
+ "github-artifact-attestation-environment",
3950
+ "github-artifact-attestation-policy-json",
3951
+ "github-artifact-attestation-retention-days",
3952
+ "github-governance-receipt-json",
3953
+ "github-release",
3954
+ "github-release-notes",
3955
+ "github-release-payload-patterns",
3956
+ "github-release-title",
3957
+ "package-manager",
3958
+ "provider-failure-after-capability",
3959
+ "publication-admission-json",
3960
+ "publication-auto-admission",
3961
+ "publication-auto-no-gate",
3962
+ "publication-commit-command",
3963
+ "publication-commit-evidence-path",
3964
+ "publication-consumer-predicate-id",
3965
+ "publication-consumer-qualification-command",
3966
+ "publication-consumer-qualification-controller-sha",
3967
+ "publication-control-plane-audit-json",
3968
+ "publication-expected-json",
3969
+ "publication-gate-aggregate-json",
3970
+ "publication-gate-command",
3971
+ "publication-gate-controller-sha",
3972
+ "publication-package-name",
3973
+ "publication-product",
3974
+ "publication-publisher-workflow-path",
3975
+ "publication-runner-provenance-json",
3976
+ "publication-target",
3977
+ "publication-used-nonces-json",
3978
+ "publication-used-qualification-nonces-json",
3979
+ "publish-artifact-kind",
3980
+ "publish-command",
3981
+ "publish-dist-tag",
3982
+ "publish-mode",
3983
+ "publish-package-main",
3984
+ "publish-package-set-order",
3985
+ "publish-rematerialize-on-resume",
3986
+ "publish-required-artifacts-json",
3987
+ "publish-target",
3988
+ "publish-transaction-override",
3989
+ "release-activation-command",
3990
+ "release-activation-receipt-set-path",
3991
+ "release-candidate-family-assignment-id",
3992
+ "release-candidate-family-evidence-required",
3993
+ "release-candidate-family-evidence-root",
3994
+ "release-candidate-family-initiative-id",
3995
+ "release-candidate-wait-seconds",
3996
+ "release-candidate-workflow-file",
3997
+ "release-candidate-workflow-name",
3998
+ "release-passport",
3999
+ "release-passport-adopter-delivery-json",
4000
+ "release-passport-attachment-command",
4001
+ "release-passport-buildchain-self-kfd",
4002
+ "release-passport-evidence-command",
4003
+ "release-passport-evidence-jsons",
4004
+ "release-passport-evidence-path",
4005
+ "release-passport-impact-json",
4006
+ "release-passport-invariant-passport-command",
4007
+ "release-passport-invariant-passport-jsons",
4008
+ "release-passport-kfd-1-witness-jsons",
4009
+ "release-passport-kfd-2-claim-jsons",
4010
+ "release-passport-kfd-3-artifact-verify-command",
4011
+ "release-passport-kfd-3-artifact-witness-jsons",
4012
+ "release-passport-kfd-3-prebuild-witness-jsons",
4013
+ "release-passport-kfd-adopter-manifest-gate-json",
4014
+ "release-passport-kfd-adopter-manifest-json",
4015
+ "release-passport-kfd-product-gate-jsons",
4016
+ "release-passport-kfd-support-matrix-json",
4017
+ "release-passport-output-dir",
4018
+ "release-passport-platform-manifest-paths",
4019
+ "release-passport-product-name",
4020
+ "release-passport-v4-runtime-resume-evidence-json",
4021
+ "release-propagation-config-path",
4022
+ "required-artifact-count",
4023
+ "required-status-check",
4024
+ "resume-buildchain-runtime-sha",
4025
+ "resume-candidate-repository",
4026
+ "resume-candidate-run-id",
4027
+ "resume-expected-candidate-root",
4028
+ "resume-expected-candidate-runtime-sha",
4029
+ "resume-expected-source-tree",
4030
+ "resume-expected-workflow-file",
4031
+ "resume-expected-workflow-name",
4032
+ "resume-transaction-id",
4033
+ "runner-preset",
4034
+ "standalone-binary-distribution",
4035
+ "target-ref",
4036
+ "target-sha",
4037
+ "trusted-publishing",
4038
+ "universal-request-json"
4039
+ ],
4040
+ "inputCount": 107,
4041
+ "secrets": [
4042
+ "BUILDCHAIN_ISSUE_APP_ID",
4043
+ "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
4044
+ "BUILDCHAIN_ISSUE_TOKEN",
4045
+ "BUILDCHAIN_PROMOTION_TOKEN",
4046
+ "BUILDCHAIN_PUBLICATION_COMMIT_SIGNING_KEY",
4047
+ "BUILDCHAIN_PUBLICATION_COMMIT_TOKEN",
4048
+ "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY",
4049
+ "buildchain-issue-app-id",
4050
+ "buildchain-issue-app-private-key",
4051
+ "buildchain-issue-token"
4052
+ ],
4053
+ "secretCount": 10,
2329
4054
  "outputs": [
4055
+ "buildchain-channel",
4056
+ "built-source-sha",
2330
4057
  "controller-plan-artifact",
2331
4058
  "controller-plan-digest",
2332
4059
  "controller-plan-json",
@@ -2334,124 +4061,219 @@
2334
4061
  "controller-receipt-digest",
2335
4062
  "controller-receipt-json",
2336
4063
  "controller-receipt-status",
2337
- "github-release-url",
2338
- "package-name",
2339
- "package-version",
2340
- "public-release-tag",
2341
- "release-passport-path"
4064
+ "github-artifact-attestation-evidence-root",
4065
+ "github-artifact-attestation-id",
4066
+ "github-artifact-attestation-publication-receipt-digest",
4067
+ "github-artifact-attestation-url",
4068
+ "promoted-sha",
4069
+ "promotion-contract-lock-digest",
4070
+ "promotion-contract-lock-path",
4071
+ "promotion-override-used",
4072
+ "promotion-publication-channel",
4073
+ "promotion-router-ref",
4074
+ "promotion-router-sha",
4075
+ "promotion-runtime-ref",
4076
+ "promotion-runtime-sha",
4077
+ "promotion-shell-ref",
4078
+ "promotion-shell-sha",
4079
+ "promotion-target-ref",
4080
+ "publication-capability-digest",
4081
+ "publication-commit-evidence-digest",
4082
+ "publication-commit-evidence-path",
4083
+ "publication-commit-payload-root",
4084
+ "publication-commit-url",
4085
+ "release-candidate-action",
4086
+ "release-candidate-artifact",
4087
+ "release-candidate-recovery-receipt-artifact",
4088
+ "release-candidate-recovery-root",
4089
+ "release-invocation-root",
4090
+ "release-propagation-work-artifact",
4091
+ "release-receipt-root",
4092
+ "release-tail-declaration-root",
4093
+ "release-tail-receipt-roots-json",
4094
+ "release-tail-state-root",
4095
+ "release-tail-transaction-root",
4096
+ "release-tail-transaction-state",
4097
+ "release-transaction-root"
2342
4098
  ],
2343
- "outputCount": 12
4099
+ "outputCount": 43
2344
4100
  },
2345
4101
  {
2346
- "id": "patrol-daily",
2347
- "path": ".github/workflows/patrol-daily.yml",
4102
+ "id": "public-release-propagation",
4103
+ "path": ".github/workflows/public-release-propagation.yml",
2348
4104
  "reusable": true,
2349
4105
  "inputs": [
2350
- "allowed-head-prefixes",
2351
- "block-labels",
4106
+ "agent-work-context-json",
4107
+ "agent-work-mode",
2352
4108
  "buildchain-ref",
2353
4109
  "buildchain-repository",
4110
+ "downstream-base-ref",
4111
+ "downstream-branch",
4112
+ "downstream-prepare-command",
4113
+ "downstream-repository",
4114
+ "downstream-target",
4115
+ "downstream-update-command",
4116
+ "downstream-verify-command",
2354
4117
  "dry-run",
2355
- "landing-mode",
2356
- "max-actions",
2357
- "merge-method",
2358
- "ready-label",
2359
- "require-approval",
2360
- "required-status-checks",
2361
- "same-repository-only",
2362
- "target-branch",
2363
- "universal-request-json"
4118
+ "graph-json",
4119
+ "lock-path",
4120
+ "pr-body",
4121
+ "pr-title",
4122
+ "refresh-managed-readme-badges",
4123
+ "source-node",
4124
+ "universal-request-json",
4125
+ "upstream-release-json"
2364
4126
  ],
2365
- "inputCount": 14,
4127
+ "inputCount": 20,
2366
4128
  "secrets": [
2367
- "github-token"
4129
+ "propagation-token"
2368
4130
  ],
2369
4131
  "secretCount": 1,
2370
4132
  "outputs": [
2371
- "action-count",
2372
- "evaluated-count",
2373
- "planned-count",
2374
- "result-path",
2375
- "skipped-count"
4133
+ "controller-plan-artifact",
4134
+ "controller-plan-digest",
4135
+ "controller-plan-json",
4136
+ "controller-receipt-artifact",
4137
+ "controller-receipt-digest",
4138
+ "controller-receipt-json",
4139
+ "controller-receipt-status",
4140
+ "propagation-receipt-digest",
4141
+ "propagation-receipt-json",
4142
+ "propagation-work-artifact",
4143
+ "propagation-work-json",
4144
+ "propagation-work-next-action",
4145
+ "propagation-work-root"
2376
4146
  ],
2377
- "outputCount": 5
4147
+ "outputCount": 13
2378
4148
  },
2379
4149
  {
2380
- "id": "patrol-monthly",
2381
- "path": ".github/workflows/patrol-monthly.yml",
4150
+ "id": "public-release-signing-authority",
4151
+ "path": ".github/workflows/public-release-signing-authority.yml",
4152
+ "reusable": false,
4153
+ "inputs": [],
4154
+ "inputCount": 0,
4155
+ "secrets": [],
4156
+ "secretCount": 0,
4157
+ "outputs": [],
4158
+ "outputCount": 0
4159
+ },
4160
+ {
4161
+ "id": "public-release-tail",
4162
+ "path": ".github/workflows/public-release-tail.yml",
2382
4163
  "reusable": true,
2383
4164
  "inputs": [
2384
4165
  "buildchain-ref",
2385
- "buildchain-repository",
2386
- "dry-run",
2387
- "target-branch",
4166
+ "candidate-root",
4167
+ "capsule-contract",
4168
+ "capsule-path",
4169
+ "capsule-root",
4170
+ "declaration-path",
4171
+ "evidence-path",
4172
+ "execute",
4173
+ "provider-bindings-path",
4174
+ "rehearsal-authority-path",
4175
+ "rehearsal-capsule-path",
4176
+ "rehearsal-evidence-path",
4177
+ "rehearsal-mode",
4178
+ "state-path",
2388
4179
  "universal-request-json"
2389
4180
  ],
2390
- "inputCount": 5,
4181
+ "inputCount": 15,
2391
4182
  "secrets": [
2392
- "github-token"
4183
+ "http-token"
2393
4184
  ],
2394
4185
  "secretCount": 1,
2395
4186
  "outputs": [
2396
- "action-count",
2397
- "evaluated-count",
2398
- "planned-count",
2399
- "result-path",
2400
- "skipped-count"
4187
+ "binding-root",
4188
+ "evidence-root",
4189
+ "rehearsal-evidence-root",
4190
+ "state-root",
4191
+ "transaction-root",
4192
+ "transaction-state"
2401
4193
  ],
2402
- "outputCount": 5
4194
+ "outputCount": 6
2403
4195
  },
2404
4196
  {
2405
- "id": "patrol-observed-evidence",
2406
- "path": ".github/workflows/patrol-observed-evidence.yml",
4197
+ "id": "public-release-web",
4198
+ "path": ".github/workflows/public-release-web.yml",
2407
4199
  "reusable": true,
2408
4200
  "inputs": [
2409
4201
  "artifact-path",
4202
+ "aws-region",
2410
4203
  "build-command",
4204
+ "buildchain-contract-compatibility-policy",
4205
+ "buildchain-contract-drift-issue-mode",
4206
+ "buildchain-contract-expected-channel",
4207
+ "buildchain-contract-expected-major",
4208
+ "buildchain-contract-lock-path",
2411
4209
  "buildchain-ref",
2412
- "cloudfront-distribution",
2413
- "evidence-source-path",
2414
- "evidence-source-ref",
2415
- "evidence-source-repository",
2416
- "manifest-path",
4210
+ "buildchain-repository",
4211
+ "fail-on-release-pr-error",
4212
+ "github-governance-receipt-json",
4213
+ "node-version",
4214
+ "preview-apply",
4215
+ "preview-aws-role-arn",
4216
+ "preview-cleanup-apply",
4217
+ "preview-comment",
4218
+ "preview-environment",
4219
+ "production-apply",
4220
+ "production-approved",
2417
4221
  "production-aws-role-arn",
2418
- "production-bucket",
2419
4222
  "production-environment",
4223
+ "production-release-app-client-id",
4224
+ "production-release-app-id",
4225
+ "production-release-branch-channel",
4226
+ "production-release-head-prefix",
4227
+ "production-release-label",
4228
+ "production-release-on-main",
4229
+ "production-release-pr-mode",
4230
+ "production-release-pr-token",
4231
+ "production-source-sha",
4232
+ "publication-admission-json",
4233
+ "publication-control-plane-audit-json",
4234
+ "publication-expected-json",
4235
+ "publication-gate-aggregate-json",
4236
+ "publication-runner-provenance-json",
4237
+ "publication-used-nonces-json",
4238
+ "release-feedback-actor-privacy",
4239
+ "staging-apply",
4240
+ "staging-aws-role-arn",
4241
+ "staging-environment",
2420
4242
  "universal-request-json",
2421
- "verify-command"
2422
- ],
2423
- "inputCount": 13,
2424
- "secrets": [],
2425
- "secretCount": 0,
2426
- "outputs": [
2427
- "receipt-path"
2428
- ],
2429
- "outputCount": 1
2430
- },
2431
- {
2432
- "id": "patrol-weekly",
2433
- "path": ".github/workflows/patrol-weekly.yml",
2434
- "reusable": true,
2435
- "inputs": [
2436
- "buildchain-ref",
2437
- "buildchain-repository",
2438
- "dry-run",
2439
- "target-branch",
2440
- "universal-request-json"
4243
+ "verify-command",
4244
+ "working-directory"
2441
4245
  ],
2442
- "inputCount": 5,
4246
+ "inputCount": 44,
2443
4247
  "secrets": [
2444
- "github-token"
4248
+ "production-release-app-private-key"
2445
4249
  ],
2446
4250
  "secretCount": 1,
2447
4251
  "outputs": [
2448
- "action-count",
2449
- "evaluated-count",
2450
- "planned-count",
2451
- "result-path",
2452
- "skipped-count"
4252
+ "buildchain-runtime-class",
4253
+ "buildchain-runtime-override",
4254
+ "buildchain-runtime-ref",
4255
+ "buildchain-runtime-sha",
4256
+ "controller-plan-artifact",
4257
+ "controller-plan-digest",
4258
+ "controller-plan-json",
4259
+ "controller-receipt-artifact",
4260
+ "controller-receipt-digest",
4261
+ "controller-receipt-json",
4262
+ "controller-receipt-status",
4263
+ "preview-apply-result-json",
4264
+ "preview-cleanup-result-json",
4265
+ "production-apply-result-json",
4266
+ "production-release-pr-url",
4267
+ "release-pr-status",
4268
+ "staging-apply-result-json",
4269
+ "web-surface-alias",
4270
+ "web-surface-channel",
4271
+ "web-surface-cleanup-plan-json",
4272
+ "web-surface-manifest-json",
4273
+ "web-surface-url",
4274
+ "web-surface-urls-json"
2453
4275
  ],
2454
- "outputCount": 5
4276
+ "outputCount": 23
2455
4277
  },
2456
4278
  {
2457
4279
  "id": "publication-artifact",
@@ -2681,28 +4503,299 @@
2681
4503
  "outputCount": 43
2682
4504
  },
2683
4505
  {
2684
- "id": "release-governance-reconcile",
2685
- "path": ".github/workflows/release-governance-reconcile.yml",
2686
- "reusable": true,
2687
- "inputs": [
2688
- "apply",
2689
- "branch",
2690
- "buildchain-ref",
2691
- "candidate-sha",
2692
- "universal-request-json"
2693
- ],
2694
- "inputCount": 5,
2695
- "secrets": [
2696
- "BUILDCHAIN_PROMOTION_TOKEN",
2697
- "governance-token"
2698
- ],
2699
- "secretCount": 2,
4506
+ "id": "release-governance-reconcile",
4507
+ "path": ".github/workflows/release-governance-reconcile.yml",
4508
+ "reusable": true,
4509
+ "inputs": [
4510
+ "apply",
4511
+ "branch",
4512
+ "buildchain-ref",
4513
+ "candidate-sha",
4514
+ "universal-request-json"
4515
+ ],
4516
+ "inputCount": 5,
4517
+ "secrets": [
4518
+ "BUILDCHAIN_PROMOTION_TOKEN",
4519
+ "governance-token"
4520
+ ],
4521
+ "secretCount": 2,
4522
+ "outputs": [],
4523
+ "outputCount": 0
4524
+ },
4525
+ {
4526
+ "id": "release-propagation",
4527
+ "path": ".github/workflows/release-propagation.yml",
4528
+ "reusable": true,
4529
+ "inputs": [
4530
+ "agent-work-context-json",
4531
+ "agent-work-mode",
4532
+ "buildchain-ref",
4533
+ "buildchain-repository",
4534
+ "downstream-base-ref",
4535
+ "downstream-branch",
4536
+ "downstream-prepare-command",
4537
+ "downstream-repository",
4538
+ "downstream-target",
4539
+ "downstream-update-command",
4540
+ "downstream-verify-command",
4541
+ "dry-run",
4542
+ "graph-json",
4543
+ "lock-path",
4544
+ "pr-body",
4545
+ "pr-title",
4546
+ "refresh-managed-readme-badges",
4547
+ "source-node",
4548
+ "universal-request-json",
4549
+ "upstream-release-json"
4550
+ ],
4551
+ "inputCount": 20,
4552
+ "secrets": [
4553
+ "propagation-token"
4554
+ ],
4555
+ "secretCount": 1,
4556
+ "outputs": [
4557
+ "controller-plan-artifact",
4558
+ "controller-plan-digest",
4559
+ "controller-plan-json",
4560
+ "controller-receipt-artifact",
4561
+ "controller-receipt-digest",
4562
+ "controller-receipt-json",
4563
+ "controller-receipt-status",
4564
+ "propagation-receipt-digest",
4565
+ "propagation-receipt-json",
4566
+ "propagation-work-artifact",
4567
+ "propagation-work-json",
4568
+ "propagation-work-next-action",
4569
+ "propagation-work-root"
4570
+ ],
4571
+ "outputCount": 13
4572
+ },
4573
+ {
4574
+ "id": "release-tail",
4575
+ "path": ".github/workflows/release-tail.yml",
4576
+ "reusable": true,
4577
+ "inputs": [
4578
+ "buildchain-ref",
4579
+ "candidate-root",
4580
+ "capsule-contract",
4581
+ "capsule-path",
4582
+ "capsule-root",
4583
+ "declaration-path",
4584
+ "evidence-path",
4585
+ "execute",
4586
+ "provider-bindings-path",
4587
+ "rehearsal-authority-path",
4588
+ "rehearsal-capsule-path",
4589
+ "rehearsal-evidence-path",
4590
+ "rehearsal-mode",
4591
+ "state-path",
4592
+ "universal-request-json"
4593
+ ],
4594
+ "inputCount": 15,
4595
+ "secrets": [
4596
+ "http-token"
4597
+ ],
4598
+ "secretCount": 1,
4599
+ "outputs": [
4600
+ "binding-root",
4601
+ "evidence-root",
4602
+ "rehearsal-evidence-root",
4603
+ "state-root",
4604
+ "transaction-root",
4605
+ "transaction-state"
4606
+ ],
4607
+ "outputCount": 6
4608
+ },
4609
+ {
4610
+ "id": "self-build-adopter-dogfood",
4611
+ "path": ".github/workflows/self-build-adopter-dogfood.yml",
4612
+ "reusable": false,
4613
+ "inputs": [],
4614
+ "inputCount": 0,
4615
+ "secrets": [],
4616
+ "secretCount": 0,
4617
+ "outputs": [],
4618
+ "outputCount": 0
4619
+ },
4620
+ {
4621
+ "id": "self-build-alpha-dogfood",
4622
+ "path": ".github/workflows/self-build-alpha-dogfood.yml",
4623
+ "reusable": false,
4624
+ "inputs": [],
4625
+ "inputCount": 0,
4626
+ "secrets": [],
4627
+ "secretCount": 0,
4628
+ "outputs": [],
4629
+ "outputCount": 0
4630
+ },
4631
+ {
4632
+ "id": "self-build-binary-distribution",
4633
+ "path": ".github/workflows/self-build-binary-distribution.yml",
4634
+ "reusable": false,
4635
+ "inputs": [],
4636
+ "inputCount": 0,
4637
+ "secrets": [],
4638
+ "secretCount": 0,
4639
+ "outputs": [],
4640
+ "outputCount": 0
4641
+ },
4642
+ {
4643
+ "id": "self-build-candidate-lab",
4644
+ "path": ".github/workflows/self-build-candidate-lab.yml",
4645
+ "reusable": false,
4646
+ "inputs": [],
4647
+ "inputCount": 0,
4648
+ "secrets": [],
4649
+ "secretCount": 0,
4650
+ "outputs": [],
4651
+ "outputCount": 0
4652
+ },
4653
+ {
4654
+ "id": "self-build-demo-dogfood",
4655
+ "path": ".github/workflows/self-build-demo-dogfood.yml",
4656
+ "reusable": false,
4657
+ "inputs": [],
4658
+ "inputCount": 0,
4659
+ "secrets": [],
4660
+ "secretCount": 0,
4661
+ "outputs": [],
4662
+ "outputCount": 0
4663
+ },
4664
+ {
4665
+ "id": "self-build-demo-media-qualification",
4666
+ "path": ".github/workflows/self-build-demo-media-qualification.yml",
4667
+ "reusable": false,
4668
+ "inputs": [],
4669
+ "inputCount": 0,
4670
+ "secrets": [],
4671
+ "secretCount": 0,
4672
+ "outputs": [],
4673
+ "outputCount": 0
4674
+ },
4675
+ {
4676
+ "id": "self-build-fixture",
4677
+ "path": ".github/workflows/self-build-fixture.yml",
4678
+ "reusable": false,
4679
+ "inputs": [],
4680
+ "inputCount": 0,
4681
+ "secrets": [],
4682
+ "secretCount": 0,
4683
+ "outputs": [],
4684
+ "outputCount": 0
4685
+ },
4686
+ {
4687
+ "id": "self-build-public-consumer-dogfood",
4688
+ "path": ".github/workflows/self-build-public-consumer-dogfood.yml",
4689
+ "reusable": false,
4690
+ "inputs": [],
4691
+ "inputCount": 0,
4692
+ "secrets": [],
4693
+ "secretCount": 0,
4694
+ "outputs": [],
4695
+ "outputCount": 0
4696
+ },
4697
+ {
4698
+ "id": "self-build-release-verify-compat",
4699
+ "path": ".github/workflows/self-build-release-verify-compat.yml",
4700
+ "reusable": false,
4701
+ "inputs": [],
4702
+ "inputCount": 0,
4703
+ "secrets": [],
4704
+ "secretCount": 0,
4705
+ "outputs": [],
4706
+ "outputCount": 0
4707
+ },
4708
+ {
4709
+ "id": "self-build-stable-candidate-qualification",
4710
+ "path": ".github/workflows/self-build-stable-candidate-qualification.yml",
4711
+ "reusable": false,
4712
+ "inputs": [],
4713
+ "inputCount": 0,
4714
+ "secrets": [],
4715
+ "secretCount": 0,
4716
+ "outputs": [],
4717
+ "outputCount": 0
4718
+ },
4719
+ {
4720
+ "id": "self-build-verify",
4721
+ "path": ".github/workflows/self-build-verify.yml",
4722
+ "reusable": false,
4723
+ "inputs": [],
4724
+ "inputCount": 0,
4725
+ "secrets": [],
4726
+ "secretCount": 0,
4727
+ "outputs": [],
4728
+ "outputCount": 0
4729
+ },
4730
+ {
4731
+ "id": "self-ops-bootstrap-dogfood",
4732
+ "path": ".github/workflows/self-ops-bootstrap-dogfood.yml",
4733
+ "reusable": false,
4734
+ "inputs": [],
4735
+ "inputCount": 0,
4736
+ "secrets": [],
4737
+ "secretCount": 0,
4738
+ "outputs": [],
4739
+ "outputCount": 0
4740
+ },
4741
+ {
4742
+ "id": "self-ops-dev-delivery",
4743
+ "path": ".github/workflows/self-ops-dev-delivery.yml",
4744
+ "reusable": false,
4745
+ "inputs": [],
4746
+ "inputCount": 0,
4747
+ "secrets": [],
4748
+ "secretCount": 0,
4749
+ "outputs": [],
4750
+ "outputCount": 0
4751
+ },
4752
+ {
4753
+ "id": "self-ops-governance-audit",
4754
+ "path": ".github/workflows/self-ops-governance-audit.yml",
4755
+ "reusable": false,
4756
+ "inputs": [],
4757
+ "inputCount": 0,
4758
+ "secrets": [],
4759
+ "secretCount": 0,
4760
+ "outputs": [],
4761
+ "outputCount": 0
4762
+ },
4763
+ {
4764
+ "id": "self-ops-housekeeping-daily",
4765
+ "path": ".github/workflows/self-ops-housekeeping-daily.yml",
4766
+ "reusable": false,
4767
+ "inputs": [],
4768
+ "inputCount": 0,
4769
+ "secrets": [],
4770
+ "secretCount": 0,
4771
+ "outputs": [],
4772
+ "outputCount": 0
4773
+ },
4774
+ {
4775
+ "id": "self-ops-housekeeping-monthly",
4776
+ "path": ".github/workflows/self-ops-housekeeping-monthly.yml",
4777
+ "reusable": false,
4778
+ "inputs": [],
4779
+ "inputCount": 0,
4780
+ "secrets": [],
4781
+ "secretCount": 0,
4782
+ "outputs": [],
4783
+ "outputCount": 0
4784
+ },
4785
+ {
4786
+ "id": "self-ops-housekeeping-weekly",
4787
+ "path": ".github/workflows/self-ops-housekeeping-weekly.yml",
4788
+ "reusable": false,
4789
+ "inputs": [],
4790
+ "inputCount": 0,
4791
+ "secrets": [],
4792
+ "secretCount": 0,
2700
4793
  "outputs": [],
2701
4794
  "outputCount": 0
2702
4795
  },
2703
4796
  {
2704
- "id": "release-line-bootstrap",
2705
- "path": ".github/workflows/release-line-bootstrap.yml",
4797
+ "id": "self-ops-merge-queue",
4798
+ "path": ".github/workflows/self-ops-merge-queue.yml",
2706
4799
  "reusable": false,
2707
4800
  "inputs": [],
2708
4801
  "inputCount": 0,
@@ -2712,8 +4805,8 @@
2712
4805
  "outputCount": 0
2713
4806
  },
2714
4807
  {
2715
- "id": "release-new-version",
2716
- "path": ".github/workflows/release-new-version.yml",
4808
+ "id": "self-ops-patrol-daily",
4809
+ "path": ".github/workflows/self-ops-patrol-daily.yml",
2717
4810
  "reusable": false,
2718
4811
  "inputs": [],
2719
4812
  "inputCount": 0,
@@ -2723,92 +4816,129 @@
2723
4816
  "outputCount": 0
2724
4817
  },
2725
4818
  {
2726
- "id": "release-propagation",
2727
- "path": ".github/workflows/release-propagation.yml",
2728
- "reusable": true,
2729
- "inputs": [
2730
- "agent-work-context-json",
2731
- "agent-work-mode",
2732
- "buildchain-ref",
2733
- "buildchain-repository",
2734
- "downstream-base-ref",
2735
- "downstream-branch",
2736
- "downstream-prepare-command",
2737
- "downstream-repository",
2738
- "downstream-target",
2739
- "downstream-update-command",
2740
- "downstream-verify-command",
2741
- "dry-run",
2742
- "graph-json",
2743
- "lock-path",
2744
- "pr-body",
2745
- "pr-title",
2746
- "refresh-managed-readme-badges",
2747
- "source-node",
2748
- "universal-request-json",
2749
- "upstream-release-json"
2750
- ],
2751
- "inputCount": 20,
2752
- "secrets": [
2753
- "propagation-token"
2754
- ],
2755
- "secretCount": 1,
2756
- "outputs": [
2757
- "controller-plan-artifact",
2758
- "controller-plan-digest",
2759
- "controller-plan-json",
2760
- "controller-receipt-artifact",
2761
- "controller-receipt-digest",
2762
- "controller-receipt-json",
2763
- "controller-receipt-status",
2764
- "propagation-receipt-digest",
2765
- "propagation-receipt-json",
2766
- "propagation-work-artifact",
2767
- "propagation-work-json",
2768
- "propagation-work-next-action",
2769
- "propagation-work-root"
2770
- ],
2771
- "outputCount": 13
4819
+ "id": "self-ops-patrol-monthly",
4820
+ "path": ".github/workflows/self-ops-patrol-monthly.yml",
4821
+ "reusable": false,
4822
+ "inputs": [],
4823
+ "inputCount": 0,
4824
+ "secrets": [],
4825
+ "secretCount": 0,
4826
+ "outputs": [],
4827
+ "outputCount": 0
2772
4828
  },
2773
4829
  {
2774
- "id": "release-tail",
2775
- "path": ".github/workflows/release-tail.yml",
2776
- "reusable": true,
2777
- "inputs": [
2778
- "buildchain-ref",
2779
- "candidate-root",
2780
- "capsule-contract",
2781
- "capsule-path",
2782
- "capsule-root",
2783
- "declaration-path",
2784
- "evidence-path",
2785
- "execute",
2786
- "provider-bindings-path",
2787
- "rehearsal-authority-path",
2788
- "rehearsal-capsule-path",
2789
- "rehearsal-evidence-path",
2790
- "rehearsal-mode",
2791
- "state-path",
2792
- "universal-request-json"
2793
- ],
2794
- "inputCount": 15,
2795
- "secrets": [
2796
- "http-token"
2797
- ],
2798
- "secretCount": 1,
2799
- "outputs": [
2800
- "binding-root",
2801
- "evidence-root",
2802
- "rehearsal-evidence-root",
2803
- "state-root",
2804
- "transaction-root",
2805
- "transaction-state"
2806
- ],
2807
- "outputCount": 6
4830
+ "id": "self-ops-patrol-weekly",
4831
+ "path": ".github/workflows/self-ops-patrol-weekly.yml",
4832
+ "reusable": false,
4833
+ "inputs": [],
4834
+ "inputCount": 0,
4835
+ "secrets": [],
4836
+ "secretCount": 0,
4837
+ "outputs": [],
4838
+ "outputCount": 0
4839
+ },
4840
+ {
4841
+ "id": "self-ops-promotion-recovery",
4842
+ "path": ".github/workflows/self-ops-promotion-recovery.yml",
4843
+ "reusable": false,
4844
+ "inputs": [],
4845
+ "inputCount": 0,
4846
+ "secrets": [],
4847
+ "secretCount": 0,
4848
+ "outputs": [],
4849
+ "outputCount": 0
4850
+ },
4851
+ {
4852
+ "id": "self-ops-recovery-failure-dogfood",
4853
+ "path": ".github/workflows/self-ops-recovery-failure-dogfood.yml",
4854
+ "reusable": false,
4855
+ "inputs": [],
4856
+ "inputCount": 0,
4857
+ "secrets": [],
4858
+ "secretCount": 0,
4859
+ "outputs": [],
4860
+ "outputCount": 0
4861
+ },
4862
+ {
4863
+ "id": "self-ops-runner-smoke",
4864
+ "path": ".github/workflows/self-ops-runner-smoke.yml",
4865
+ "reusable": false,
4866
+ "inputs": [],
4867
+ "inputCount": 0,
4868
+ "secrets": [],
4869
+ "secretCount": 0,
4870
+ "outputs": [],
4871
+ "outputCount": 0
4872
+ },
4873
+ {
4874
+ "id": "self-ops-stable-candidate-patrol",
4875
+ "path": ".github/workflows/self-ops-stable-candidate-patrol.yml",
4876
+ "reusable": false,
4877
+ "inputs": [],
4878
+ "inputCount": 0,
4879
+ "secrets": [],
4880
+ "secretCount": 0,
4881
+ "outputs": [],
4882
+ "outputCount": 0
4883
+ },
4884
+ {
4885
+ "id": "self-release-binary-assets",
4886
+ "path": ".github/workflows/self-release-binary-assets.yml",
4887
+ "reusable": false,
4888
+ "inputs": [],
4889
+ "inputCount": 0,
4890
+ "secrets": [],
4891
+ "secretCount": 0,
4892
+ "outputs": [],
4893
+ "outputCount": 0
4894
+ },
4895
+ {
4896
+ "id": "self-release-line-open",
4897
+ "path": ".github/workflows/self-release-line-open.yml",
4898
+ "reusable": false,
4899
+ "inputs": [],
4900
+ "inputCount": 0,
4901
+ "secrets": [],
4902
+ "secretCount": 0,
4903
+ "outputs": [],
4904
+ "outputCount": 0
4905
+ },
4906
+ {
4907
+ "id": "self-release-new-version-compat",
4908
+ "path": ".github/workflows/self-release-new-version-compat.yml",
4909
+ "reusable": false,
4910
+ "inputs": [],
4911
+ "inputCount": 0,
4912
+ "secrets": [],
4913
+ "secretCount": 0,
4914
+ "outputs": [],
4915
+ "outputCount": 0
4916
+ },
4917
+ {
4918
+ "id": "self-release-npm-dry-run",
4919
+ "path": ".github/workflows/self-release-npm-dry-run.yml",
4920
+ "reusable": false,
4921
+ "inputs": [],
4922
+ "inputCount": 0,
4923
+ "secrets": [],
4924
+ "secretCount": 0,
4925
+ "outputs": [],
4926
+ "outputCount": 0
4927
+ },
4928
+ {
4929
+ "id": "self-release-promote",
4930
+ "path": ".github/workflows/self-release-promote.yml",
4931
+ "reusable": false,
4932
+ "inputs": [],
4933
+ "inputCount": 0,
4934
+ "secrets": [],
4935
+ "secretCount": 0,
4936
+ "outputs": [],
4937
+ "outputCount": 0
2808
4938
  },
2809
4939
  {
2810
- "id": "release-verify",
2811
- "path": ".github/workflows/release-verify.yml",
4940
+ "id": "self-release-rehearsal-dogfood",
4941
+ "path": ".github/workflows/self-release-rehearsal-dogfood.yml",
2812
4942
  "reusable": false,
2813
4943
  "inputs": [],
2814
4944
  "inputCount": 0,
@@ -2818,8 +4948,8 @@
2818
4948
  "outputCount": 0
2819
4949
  },
2820
4950
  {
2821
- "id": "self-hosted-runner-smoke",
2822
- "path": ".github/workflows/self-hosted-runner-smoke.yml",
4951
+ "id": "self-release-tail-dogfood",
4952
+ "path": ".github/workflows/self-release-tail-dogfood.yml",
2823
4953
  "reusable": false,
2824
4954
  "inputs": [],
2825
4955
  "inputCount": 0,
@@ -2867,17 +4997,6 @@
2867
4997
  ],
2868
4998
  "outputCount": 6
2869
4999
  },
2870
- {
2871
- "id": "universal-bootstrap-dogfood",
2872
- "path": ".github/workflows/universal-bootstrap-dogfood.yml",
2873
- "reusable": false,
2874
- "inputs": [],
2875
- "inputCount": 0,
2876
- "secrets": [],
2877
- "secretCount": 0,
2878
- "outputs": [],
2879
- "outputCount": 0
2880
- },
2881
5000
  {
2882
5001
  "id": "universal-bootstrap-recovery",
2883
5002
  "path": ".github/workflows/universal-bootstrap-recovery.yml",
@@ -2897,17 +5016,6 @@
2897
5016
  ],
2898
5017
  "outputCount": 5
2899
5018
  },
2900
- {
2901
- "id": "v4-adopter-delivery-dogfood",
2902
- "path": ".github/workflows/v4-adopter-delivery-dogfood.yml",
2903
- "reusable": false,
2904
- "inputs": [],
2905
- "inputCount": 0,
2906
- "secrets": [],
2907
- "secretCount": 0,
2908
- "outputs": [],
2909
- "outputCount": 0
2910
- },
2911
5019
  {
2912
5020
  "id": "v4-adopter-delivery",
2913
5021
  "path": ".github/workflows/v4-adopter-delivery.yml",
@@ -2929,39 +5037,6 @@
2929
5037
  "outputs": [],
2930
5038
  "outputCount": 0
2931
5039
  },
2932
- {
2933
- "id": "v4-declarative-release-tail-dogfood",
2934
- "path": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
2935
- "reusable": false,
2936
- "inputs": [],
2937
- "inputCount": 0,
2938
- "secrets": [],
2939
- "secretCount": 0,
2940
- "outputs": [],
2941
- "outputCount": 0
2942
- },
2943
- {
2944
- "id": "v4-public-consumer-dogfood",
2945
- "path": ".github/workflows/v4-public-consumer-dogfood.yml",
2946
- "reusable": false,
2947
- "inputs": [],
2948
- "inputCount": 0,
2949
- "secrets": [],
2950
- "secretCount": 0,
2951
- "outputs": [],
2952
- "outputCount": 0
2953
- },
2954
- {
2955
- "id": "v4-publication-rehearsal-dogfood",
2956
- "path": ".github/workflows/v4-publication-rehearsal-dogfood.yml",
2957
- "reusable": false,
2958
- "inputs": [],
2959
- "inputCount": 0,
2960
- "secrets": [],
2961
- "secretCount": 0,
2962
- "outputs": [],
2963
- "outputCount": 0
2964
- },
2965
5040
  {
2966
5041
  "id": "v4-stage-capsule-canary",
2967
5042
  "path": ".github/workflows/v4-stage-capsule-canary.yml",
@@ -3003,17 +5078,6 @@
3003
5078
  "tail-reseal-receipt-root"
3004
5079
  ],
3005
5080
  "outputCount": 2
3006
- },
3007
- {
3008
- "id": "verify",
3009
- "path": ".github/workflows/verify.yml",
3010
- "reusable": false,
3011
- "inputs": [],
3012
- "inputCount": 0,
3013
- "secrets": [],
3014
- "secretCount": 0,
3015
- "outputs": [],
3016
- "outputCount": 0
3017
5081
  }
3018
5082
  ],
3019
5083
  "actionInputs": [
@@ -3646,6 +5710,10 @@
3646
5710
  "id": "manual:web-surface-deployments",
3647
5711
  "category": "manual"
3648
5712
  },
5713
+ {
5714
+ "id": "manual:workflow-catalog",
5715
+ "category": "manual"
5716
+ },
3649
5717
  {
3650
5718
  "id": "overview:home",
3651
5719
  "category": "overview"
@@ -8909,8 +10977,8 @@
8909
10977
  "workflowRegistryPath": "dist/site/workflow-registry.json",
8910
10978
  "pageRegistryPath": "dist/site/page-registry.json",
8911
10979
  "cliRegistryDigest": "fbc23073bbae240489a2f826b2c26daadc58e704050c5f8df366509f5c5a1c3e",
8912
- "workflowRegistryDigest": "345bd4c52cf2d30f8aa2f458a88091286de5d1b219cdd54795fe6247a2ee061a",
8913
- "pageRegistryDigest": "4b5eeaee910e192ec173c6678a16656c90ec9400508f087dc0b8593a932b8019"
10980
+ "workflowRegistryDigest": "dd6a9caaa7e04097d6ae6c4a0c5a3548e7c6c0ace00efdd2909f9b7c0c9056b2",
10981
+ "pageRegistryDigest": "220e121eb5755d5a75c2abcbc0cab623f5afa3be59251dbd5f5336142d4c8c98"
8914
10982
  },
8915
10983
  "comparison": {
8916
10984
  "missingCliRegistry": [],