npm - @kungfu-tech/buildchain - Versions diffs - 4.0.2-alpha.34 → 4.0.2-alpha.35 - Mend

@kungfu-tech/buildchain 4.0.2-alpha.34 → 4.0.2-alpha.35

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (91) hide show

package/AGENTS.md +9 -0
package/CONTRIBUTING.md +24 -0
package/README.md +2 -2
package/actions/promote-buildchain-ref/README.md +1 -1
package/architecture/agent-change-map.md +6 -4
package/architecture/internal-capabilities.json +4 -4
package/architecture/maintainability-debt.json +13 -11
package/architecture/maintainability-policy.json +4 -4
package/architecture/release-tail-contract-inventory.json +6 -6
package/architecture/v4-delivery-authority-parity.json +2 -2
package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.json +1 -1
package/architecture/v4-floating-consumer-policy.json +1 -1
package/architecture/v4-next-development-parity.json +4 -4
package/architecture/v4-platform-stage-checkpoints.json +1 -1
package/architecture/v4-publication-facade-patches.json +53 -0
package/architecture/v4-release-topology.json +46 -29
package/architecture/v4-rust-wasm-production-authority.json +1 -0
package/architecture/v4-stage-capsule-qualification.json +1 -1
package/architecture/v4-universal-workflow-bootstrap.json +1 -1
package/architecture/v4-universal-workflow-fault-campaign.json +1 -1
package/architecture/v4-universal-workflow-train-admission.json +4 -4
package/architecture/workflow-taxonomy.json +1437 -0
package/contracts/buildchain-v2-residuals-v1.json +64 -1
package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
package/contracts/v4-canonical-contracts-v1.schema.json +1 -0
package/dist/site/buildchain-contract.json +20 -20
package/dist/site/buildchain-site.json +122 -56
package/dist/site/capability-registry.json +4 -4
package/dist/site/controller-registry.json +5 -4
package/dist/site/kfd-claims.json +2617 -964
package/dist/site/kfd-upstream-aggregate.json +1 -1
package/dist/site/manual-registry.json +10 -10
package/dist/site/node-api-registry.json +26 -21
package/dist/site/page-registry.json +107 -41
package/dist/site/public-surface-audit.json +3196 -1128
package/dist/site/publication-authority-registry.json +1179 -417
package/dist/site/publication-registry.json +4 -4
package/dist/site/site-manifest.json +14 -14
package/dist/site/workflow-registry.json +5484 -1924
package/docs/MAP.md +1 -0
package/docs/auditable-demo.md +1 -1
package/docs/cli.md +3 -3
package/docs/dev-delivery-warrant.md +1 -1
package/docs/engineering-housekeeper.md +3 -3
package/docs/next-development-transition.md +1 -1
package/docs/node-api-reference.md +30 -30
package/docs/publication-authority.md +2 -2
package/docs/release-candidate.md +3 -3
package/docs/release-flow.md +67 -19
package/docs/release-governance.md +8 -8
package/docs/v4-adopter-delivery.md +1 -1
package/docs/v4-production-release.md +45 -8
package/docs/v4-stage-capsule.md +1 -1
package/docs/workflow-catalog.md +151 -0
package/package.json +8 -6
package/packages/core/buildchain-contract.js +1 -1
package/packages/core/buildchain-kfd-claims.js +2 -2
package/packages/core/buildchain-publication-authority.js +40 -25
package/packages/core/buildchain-v4-domain.wasm +0 -0
package/packages/core/controller-evidence.js +4 -1
package/packages/core/github-governance-authority.js +4 -4
package/packages/core/next-development-projection.js +1 -1
package/packages/core/release-line-dry-run.js +1 -1
package/packages/core/v4-canonical-contracts.js +1 -0
package/packages/core/v4-domain-wasm-artifact.js +2 -2
package/packages/core/v4-floating-consumer-evidence.js +1 -1
package/packages/core/v4-floating-consumer-policy.js +1 -1
package/scripts/binary-publication-evidence.mjs +135 -0
package/scripts/check-ci-lane-change-budget.mjs +4 -1
package/scripts/check-core-mechanism-inventory.mjs +4 -3
package/scripts/check-inventory.mjs +22 -22
package/scripts/check-v4-floating-consumer-policy-contract.mjs +1 -1
package/scripts/check-v4-public-dogfood-contract.mjs +18 -5
package/scripts/check-v4-release-topology.mjs +5 -2
package/scripts/check-v4-runtime-semantic-closure.mjs +4 -1
package/scripts/check-v4-universal-workflow-bootstrap.mjs +5 -9
package/scripts/check-workflow-taxonomy.mjs +6 -0
package/scripts/generate-channel-build-workflow.mjs +2 -1
package/scripts/generate-channel-promotion-workflow.mjs +4 -3
package/scripts/generate-site-bundle.mjs +11 -11
package/scripts/generate-v4-universal-workflow-facades.mjs +24 -6
package/scripts/generate-workflow-taxonomy.mjs +25 -0
package/scripts/maintainability-metrics.mjs +16 -5
package/scripts/release-asset-client.mjs +90 -0
package/scripts/release-candidate-resolver.mjs +1 -1
package/scripts/source-verification-evidence.mjs +344 -0
package/scripts/stable-candidate-qualification.mjs +1 -1
package/scripts/v4-publication-settlement.mjs +207 -0
package/scripts/v4-universal-workflow-self-dogfood.mjs +1 -1
package/scripts/verify-version-state-delta.mjs +173 -0
package/scripts/workflow-taxonomy.mjs +468 -0

package/dist/site/publication-authority-registry.json CHANGED Viewed

@@ -32,333 +32,300 @@
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.build.yml",
+      "workflowPath": ".github/workflows/.build-demo-adapter.yml",
       "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.build.yml",
+      "publisherWorkflowPath": ".github/workflows/.build-demo-adapter.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.declarative-auditable-demo.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/.build-engine.yml",
+      "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.declarative-auditable-demo.yml",
+      "publisherWorkflowPath": ".github/workflows/.build-engine.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.publication-authority.yml",
-      "authorityClass": "evidence-publication",
+      "workflowPath": ".github/workflows/.build-release-verify-compat.yml",
+      "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.publication-authority.yml",
+      "publisherWorkflowPath": ".github/workflows/.build-release-verify-compat.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.release-candidate-promote.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "channel-ref",
-        "github-release",
-        "npm-publish"
-      ],
-      "credentialMode": "trusted-publishing",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/.release-candidate-promote.yml",
-      "environment": "none",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/.release-verify.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/.build-sam-verify-compat.yml",
+      "authorityClass": "retired-deny",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.release-verify.yml",
+      "publisherWorkflowPath": ".github/workflows/.build-sam-verify-compat.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.sam-verify.yml",
+      "workflowPath": ".github/workflows/.build-wheel-verify-compat.yml",
       "authorityClass": "retired-deny",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.sam-verify.yml",
+      "publisherWorkflowPath": ".github/workflows/.build-wheel-verify-compat.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.sync-remote-git.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/.build.yml",
+      "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.sync-remote-git.yml",
+      "publisherWorkflowPath": ".github/workflows/.build.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.web-surface.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "web-production"
-      ],
-      "credentialMode": "oidc",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/.web-surface.yml",
-      "environment": "consumer-defined",
-      "environmentMode": "caller-bound",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/.wheel-verify.yml",
-      "authorityClass": "retired-deny",
+      "workflowPath": ".github/workflows/.declarative-auditable-demo.yml",
+      "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.wheel-verify.yml",
+      "publisherWorkflowPath": ".github/workflows/.declarative-auditable-demo.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/artifact-signing-authority.yml",
-      "authorityClass": "evidence-publication",
+      "workflowPath": ".github/workflows/.ops-git-sync.yml",
+      "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/artifact-signing-authority.yml",
+      "publisherWorkflowPath": ".github/workflows/.ops-git-sync.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/auditable-demo.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/.publication-authority.yml",
+      "authorityClass": "evidence-publication",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/auditable-demo.yml",
+      "publisherWorkflowPath": ".github/workflows/.publication-authority.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/binary-distribution.yml",
+      "workflowPath": ".github/workflows/.release-authority.yml",
       "authorityClass": "evidence-publication",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/binary-distribution.yml",
+      "publisherWorkflowPath": ".github/workflows/.release-authority.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/binary-release-assets.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
+      "workflowPath": ".github/workflows/.release-binary-assets.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "github-release"
+      ],
+      "credentialMode": "github-token",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/binary-release-assets.yml",
-      "environment": "",
+      "publisherWorkflowPath": ".github/workflows/.release-binary-assets.yml",
+      "environment": "buildchain-release-assets",
       "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
+      "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/bootstrap.yml",
+      "workflowPath": ".github/workflows/.release-candidate-promote.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
-        "universal-candidate-execution"
+        "channel-ref",
+        "github-release",
+        "npm-publish"
       ],
-      "credentialMode": "caller-secrets",
+      "credentialMode": "trusted-publishing",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/bootstrap.yml",
+      "publisherWorkflowPath": ".github/workflows/.release-candidate-promote.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/build-surface-fixture.yml",
-      "authorityClass": "non-publication-oidc",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/build-surface-fixture.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/build.yml",
-      "authorityClass": "non-publication-oidc",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/build.yml",
-      "environment": "",
+      "workflowPath": ".github/workflows/.release-promote.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "channel-ref",
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/.release-promote.yml",
+      "environment": "none",
       "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
+      "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-alpha-self-dogfood.yml",
-      "authorityClass": "non-publication-oidc",
+      "workflowPath": ".github/workflows/.release-verify.yml",
+      "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-alpha-self-dogfood.yml",
+      "publisherWorkflowPath": ".github/workflows/.release-verify.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-dev-delivery.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/.sam-verify.yml",
+      "authorityClass": "retired-deny",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-dev-delivery.yml",
+      "publisherWorkflowPath": ".github/workflows/.sam-verify.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-patrol-daily.yml",
+      "workflowPath": ".github/workflows/.sync-remote-git.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-daily.yml",
+      "publisherWorkflowPath": ".github/workflows/.sync-remote-git.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-patrol-monthly.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-monthly.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
+      "workflowPath": ".github/workflows/.web-surface.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "web-production"
+      ],
+      "credentialMode": "oidc",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/.web-surface.yml",
+      "environment": "consumer-defined",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-patrol-weekly.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/.wheel-verify.yml",
+      "authorityClass": "retired-deny",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-weekly.yml",
+      "publisherWorkflowPath": ".github/workflows/.wheel-verify.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-patrol.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/artifact-signing-authority.yml",
+      "authorityClass": "evidence-publication",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/artifact-signing-authority.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-ref-promotion-recovery.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-ref-promotion-recovery.yml",
-      "environment": "",
+      "workflowPath": ".github/workflows/bootstrap.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "universal-candidate-execution"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/bootstrap.yml",
+      "environment": "none",
       "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
+      "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-ref-promotion.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/build.yml",
+      "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-ref-promotion.yml",
+      "publisherWorkflowPath": ".github/workflows/build.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-stable-candidate-patrol.yml",
+      "workflowPath": ".github/workflows/buildchain-patrol.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-stable-candidate-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/buildchain-patrol.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
@@ -403,19 +370,6 @@
       "runnerPolicy": "unqualified",
       "notes": ""
     },
-    {
-      "workflowPath": ".github/workflows/dev-merge-queue-governance.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-merge-queue-governance.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
     {
       "workflowPath": ".github/workflows/dev-pr-auto-merge.yml",
       "authorityClass": "governance-write",
@@ -442,45 +396,6 @@
       "runnerPolicy": "unqualified",
       "notes": ""
     },
-    {
-      "workflowPath": ".github/workflows/engineering-housekeeper-daily.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper-daily.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/engineering-housekeeper-monthly.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper-monthly.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/engineering-housekeeper-weekly.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper-weekly.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
     {
       "workflowPath": ".github/workflows/engineering-housekeeper.yml",
       "authorityClass": "governance-write",
@@ -509,32 +424,6 @@
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
-    {
-      "workflowPath": ".github/workflows/github-governance-audit.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/github-governance-audit.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/npm-publish.yml",
-      "authorityClass": "dry-run-only",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/npm-publish.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
     {
       "workflowPath": ".github/workflows/paper-release-sealed.yml",
       "authorityClass": "product-publication",
@@ -622,137 +511,324 @@
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/publication-artifact.yml",
-      "authorityClass": "evidence-publication",
+      "workflowPath": ".github/workflows/public-build-candidate.yml",
+      "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/publication-artifact.yml",
+      "publisherWorkflowPath": ".github/workflows/public-build-candidate.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/release-candidate-promote.yml",
+      "workflowPath": ".github/workflows/public-build-demo.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-build-demo.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-build-publication.yml",
+      "authorityClass": "evidence-publication",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-build-publication.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-bootstrap-recovery.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
-        "channel-ref",
-        "github-release",
-        "npm-publish"
+        "universal-candidate-execution"
       ],
-      "credentialMode": "trusted-publishing",
+      "credentialMode": "caller-secrets",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/release-candidate-promote.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-bootstrap-recovery.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-bootstrap.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "universal-candidate-execution"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-ops-bootstrap.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/release-line-bootstrap.yml",
+      "workflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/release-line-bootstrap.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/release-propagation.yml",
+      "workflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/release-propagation.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/release-tail.yml",
+      "workflowPath": ".github/workflows/public-ops-housekeeping.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-housekeeping.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-observed-evidence.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
-        "artifact.publish",
-        "release.activate",
-        "released-evidence.synthesize",
-        "signed-channel.commit"
+        "observed-evidence-publication"
       ],
-      "credentialMode": "caller-secrets",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/release-tail.yml",
-      "environment": "caller-bound",
+      "credentialMode": "oidc",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-ops-observed-evidence.yml",
+      "environment": "consumer-defined",
       "environmentMode": "caller-bound",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/release-verify.yml",
+      "workflowPath": ".github/workflows/public-ops-patrol-daily.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/release-verify.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-daily.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "workflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-warrant-close.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-close.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/universal-bootstrap-dogfood.yml",
+      "workflowPath": ".github/workflows/public-release-artifact-attestation.yml",
+      "authorityClass": "evidence-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "github-artifact-attestation"
+      ],
+      "credentialMode": "oidc",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-release-artifact-attestation.yml",
+      "environment": "consumer-defined",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-release-paper-sealed.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
-        "universal-candidate-execution"
+        "github-release",
+        "npm-publish"
       ],
-      "credentialMode": "caller-secrets",
+      "credentialMode": "trusted-publishing",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/universal-bootstrap-dogfood.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-paper-sealed.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/universal-bootstrap-recovery.yml",
+      "workflowPath": ".github/workflows/public-release-paper.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
-        "universal-candidate-execution"
+        "github-release",
+        "npm-publish"
       ],
-      "credentialMode": "caller-secrets",
+      "credentialMode": "trusted-publishing",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/universal-bootstrap-recovery.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-paper.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-release-promote.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "channel-ref",
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-release-promote.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "workflowPath": ".github/workflows/public-release-propagation.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-release-propagation.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-release-signing-authority.yml",
+      "authorityClass": "evidence-publication",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-release-signing-authority.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-release-tail.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
@@ -763,32 +839,705 @@
       ],
       "credentialMode": "caller-secrets",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-tail.yml",
+      "environment": "caller-bound",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-release-web.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "web-production"
+      ],
+      "credentialMode": "oidc",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-release-web.yml",
+      "environment": "consumer-defined",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/publication-artifact.yml",
+      "authorityClass": "evidence-publication",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/publication-artifact.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/release-candidate-promote.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "channel-ref",
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/release-candidate-promote.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
-    }
-  ],
-  "workflowFacts": [
+    },
+    {
+      "workflowPath": ".github/workflows/release-propagation.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/release-propagation.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/release-tail.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "artifact.publish",
+        "release.activate",
+        "released-evidence.synthesize",
+        "signed-channel.commit"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/release-tail.yml",
+      "environment": "caller-bound",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
+      "authorityClass": "non-publication-oidc",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-build-binary-distribution.yml",
+      "authorityClass": "evidence-publication",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-build-binary-distribution.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-build-demo-dogfood.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-build-demo-dogfood.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-build-fixture.yml",
+      "authorityClass": "non-publication-oidc",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-build-fixture.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-build-release-verify-compat.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-build-release-verify-compat.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "universal-candidate-execution"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-dev-delivery.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-dev-delivery.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-governance-audit.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-governance-audit.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-merge-queue.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-merge-queue.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-patrol-daily.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-daily.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-release-binary-assets.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-binary-assets.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-release-line-open.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-line-open.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-release-npm-dry-run.yml",
+      "authorityClass": "dry-run-only",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-npm-dry-run.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-release-promote.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-promote.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-release-tail-dogfood.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "artifact.publish",
+        "release.activate",
+        "released-evidence.synthesize",
+        "signed-channel.commit"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-tail-dogfood.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/universal-bootstrap-recovery.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "universal-candidate-execution"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/universal-bootstrap-recovery.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    }
+  ],
+  "workflowFacts": [
+    {
+      "path": ".github/workflows/.auditable-demo.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.binary-release-assets.yml",
+      "signals": [
+        "write-permission",
+        "environment",
+        "github-release"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build-demo-adapter.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build-engine.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "environment",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build-gate-profile.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.build-release-verify-compat.yml",
+      "signals": [
+        "write-permission",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build-sam-verify-compat.yml",
+      "signals": [
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build-wheel-verify-compat.yml",
+      "signals": [
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "environment",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.bump-minor-version.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.declarative-auditable-demo.yml",
+      "signals": [
+        "write-permission",
+        "git-push"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.gate-profile.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.ops-git-sync.yml",
+      "signals": [
+        "git-push"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.publication-authority.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.release-authority.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.release-binary-assets.yml",
+      "signals": [
+        "write-permission",
+        "environment",
+        "github-release"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.release-candidate-promote.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.release-minor-bump-compat.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.release-page-sync-retired.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.release-promote.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.release-verify.yml",
+      "signals": [
+        "write-permission",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.sam-verify.yml",
+      "signals": [
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.sync-release-page.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.sync-remote-git.yml",
+      "signals": [
+        "git-push"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.web-surface.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "environment",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.wheel-verify.yml",
+      "signals": [
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/artifact-signing-authority.yml",
+      "signals": [
+        "environment"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/bootstrap.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/build.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/buildchain-patrol.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/check.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/dev-alpha-candidate-patrol.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/dev-delivery-warrant-cancel.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/dev-delivery-warrant-close.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/dev-pr-auto-merge.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/dev-qualification-patrol.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/engineering-housekeeper.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/github-artifact-attestation.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "environment"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/paper-release-sealed.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/paper-release.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
     {
-      "path": ".github/workflows/.auditable-demo.yml",
-      "signals": [],
+      "path": ".github/workflows/patrol-daily.yml",
+      "signals": [
+        "write-permission"
+      ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.binary-release-assets.yml",
+      "path": ".github/workflows/patrol-monthly.yml",
       "signals": [
-        "write-permission",
-        "environment",
-        "github-release"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.build.yml",
+      "path": ".github/workflows/patrol-observed-evidence.yml",
       "signals": [
-        "write-permission",
         "oidc",
         "environment",
         "cloud-credential"
@@ -796,30 +1545,19 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/.bump-minor-version.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/.declarative-auditable-demo.yml",
+      "path": ".github/workflows/patrol-weekly.yml",
       "signals": [
-        "write-permission",
-        "git-push"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.gate-profile.yml",
+      "path": ".github/workflows/public-build-adopter-qualification.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/.publication-authority.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.release-candidate-promote.yml",
+      "path": ".github/workflows/public-build-candidate.yml",
       "signals": [
         "write-permission",
         "oidc"
@@ -827,151 +1565,156 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/.release-verify.yml",
+      "path": ".github/workflows/public-build-check.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/public-build-demo.yml",
       "signals": [
         "write-permission",
-        "cloud-credential"
+        "git-push"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.sam-verify.yml",
+      "path": ".github/workflows/public-build-publication.yml",
       "signals": [
-        "cloud-credential"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.sync-release-page.yml",
+      "path": ".github/workflows/public-build-stage-capsule-canary.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/.sync-remote-git.yml",
+      "path": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
       "signals": [
-        "git-push"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.web-surface.yml",
+      "path": ".github/workflows/public-ops-bootstrap-recovery.yml",
       "signals": [
         "write-permission",
-        "oidc",
-        "environment",
-        "cloud-credential"
+        "oidc"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.wheel-verify.yml",
+      "path": ".github/workflows/public-ops-bootstrap.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/public-ops-dev-auto-merge.yml",
       "signals": [
-        "cloud-credential"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/artifact-signing-authority.yml",
+      "path": ".github/workflows/public-ops-dev-qualification-patrol.yml",
       "signals": [
-        "environment"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/auditable-demo-media-profile-qualification.yml",
+      "path": ".github/workflows/public-ops-housekeeping.yml",
       "signals": [],
-      "classified": false
+      "classified": true
     },
     {
-      "path": ".github/workflows/auditable-demo.yml",
+      "path": ".github/workflows/public-ops-observed-evidence.yml",
       "signals": [
-        "write-permission"
+        "oidc",
+        "environment",
+        "cloud-credential"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/binary-distribution.yml",
+      "path": ".github/workflows/public-ops-patrol-daily.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/binary-release-assets.yml",
+      "path": ".github/workflows/public-ops-patrol-monthly.yml",
       "signals": [
-        "write-permission",
-        "github-release"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/bootstrap.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/build-surface-fixture.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/build.yml",
+      "path": ".github/workflows/public-ops-patrol-weekly.yml",
       "signals": [
-        "write-permission",
-        "oidc"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-alpha-self-dogfood.yml",
+      "path": ".github/workflows/public-ops-patrol.yml",
       "signals": [
-        "write-permission",
-        "oidc"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-candidate-recovery-dogfood-failure.yml",
+      "path": ".github/workflows/public-ops-release-governance.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/buildchain-dev-delivery.yml",
+      "path": ".github/workflows/public-ops-stable-candidate-patrol.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-patrol-daily.yml",
+      "path": ".github/workflows/public-ops-tail-reseal.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/public-ops-warrant-cancel.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-patrol-monthly.yml",
+      "path": ".github/workflows/public-ops-warrant-close.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-patrol-weekly.yml",
+      "path": ".github/workflows/public-release-artifact-attestation.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "oidc",
+        "environment"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-patrol.yml",
+      "path": ".github/workflows/public-release-paper-sealed.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "oidc"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-ref-promotion-recovery.yml",
+      "path": ".github/workflows/public-release-paper.yml",
       "signals": [
         "write-permission",
         "oidc"
@@ -979,7 +1722,7 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-ref-promotion.yml",
+      "path": ".github/workflows/public-release-promote.yml",
       "signals": [
         "write-permission",
         "oidc"
@@ -987,171 +1730,203 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-stable-candidate-patrol.yml",
+      "path": ".github/workflows/public-release-propagation.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "git-push"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-stable-candidate-qualification.yml",
-      "signals": [],
-      "classified": false
+      "path": ".github/workflows/public-release-signing-authority.yml",
+      "signals": [
+        "environment"
+      ],
+      "classified": true
     },
     {
-      "path": ".github/workflows/candidate-lab.yml",
+      "path": ".github/workflows/public-release-tail.yml",
       "signals": [],
-      "classified": false
+      "classified": true
     },
     {
-      "path": ".github/workflows/check.yml",
-      "signals": [],
-      "classified": false
+      "path": ".github/workflows/public-release-web.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "environment",
+        "cloud-credential"
+      ],
+      "classified": true
     },
     {
-      "path": ".github/workflows/dev-alpha-candidate-patrol.yml",
+      "path": ".github/workflows/publication-artifact.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/dev-delivery-warrant-cancel.yml",
+      "path": ".github/workflows/release-candidate-promote.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "oidc"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/dev-delivery-warrant-close.yml",
+      "path": ".github/workflows/release-governance-reconcile.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/release-propagation.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "git-push"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/dev-merge-queue-governance.yml",
+      "path": ".github/workflows/release-tail.yml",
       "signals": [],
       "classified": true
     },
     {
-      "path": ".github/workflows/dev-pr-auto-merge.yml",
+      "path": ".github/workflows/self-build-adopter-dogfood.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/self-build-alpha-dogfood.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "oidc"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/dev-qualification-patrol.yml",
+      "path": ".github/workflows/self-build-binary-distribution.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/engineering-housekeeper-daily.yml",
+      "path": ".github/workflows/self-build-candidate-lab.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/self-build-demo-dogfood.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/engineering-housekeeper-monthly.yml",
-      "signals": [
-        "write-permission"
-      ],
+      "path": ".github/workflows/self-build-demo-media-qualification.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/self-build-fixture.yml",
+      "signals": [],
       "classified": true
     },
     {
-      "path": ".github/workflows/engineering-housekeeper-weekly.yml",
+      "path": ".github/workflows/self-build-public-consumer-dogfood.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/self-build-release-verify-compat.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/engineering-housekeeper.yml",
+      "path": ".github/workflows/self-build-stable-candidate-qualification.yml",
       "signals": [],
-      "classified": true
+      "classified": false
     },
     {
-      "path": ".github/workflows/github-artifact-attestation.yml",
+      "path": ".github/workflows/self-build-verify.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/self-ops-bootstrap-dogfood.yml",
       "signals": [
         "write-permission",
-        "oidc",
-        "environment"
+        "oidc"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/github-governance-audit.yml",
+      "path": ".github/workflows/self-ops-dev-delivery.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/npm-publish.yml",
+      "path": ".github/workflows/self-ops-governance-audit.yml",
       "signals": [
-        "npm-publish"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/paper-release-sealed.yml",
+      "path": ".github/workflows/self-ops-housekeeping-daily.yml",
       "signals": [
-        "write-permission",
-        "oidc"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/paper-release.yml",
+      "path": ".github/workflows/self-ops-housekeeping-monthly.yml",
       "signals": [
-        "write-permission",
-        "oidc"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-daily.yml",
+      "path": ".github/workflows/self-ops-housekeeping-weekly.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-monthly.yml",
-      "signals": [
-        "write-permission"
-      ],
+      "path": ".github/workflows/self-ops-merge-queue.yml",
+      "signals": [],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-observed-evidence.yml",
+      "path": ".github/workflows/self-ops-patrol-daily.yml",
       "signals": [
-        "oidc",
-        "environment",
-        "cloud-credential"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-weekly.yml",
+      "path": ".github/workflows/self-ops-patrol-monthly.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/publication-artifact.yml",
+      "path": ".github/workflows/self-ops-patrol-weekly.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/release-candidate-promote.yml",
+      "path": ".github/workflows/self-ops-promotion-recovery.yml",
       "signals": [
         "write-permission",
         "oidc"
@@ -1159,65 +1934,52 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/release-governance-reconcile.yml",
+      "path": ".github/workflows/self-ops-recovery-failure-dogfood.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/release-line-bootstrap.yml",
-      "signals": [
-        "write-permission",
-        "git-push"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/release-new-version.yml",
+      "path": ".github/workflows/self-ops-runner-smoke.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/release-propagation.yml",
+      "path": ".github/workflows/self-ops-stable-candidate-patrol.yml",
       "signals": [
-        "write-permission",
-        "git-push"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/release-tail.yml",
-      "signals": [],
+      "path": ".github/workflows/self-release-binary-assets.yml",
+      "signals": [
+        "write-permission",
+        "github-release"
+      ],
       "classified": true
     },
     {
-      "path": ".github/workflows/release-verify.yml",
+      "path": ".github/workflows/self-release-line-open.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "git-push"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/self-hosted-runner-smoke.yml",
+      "path": ".github/workflows/self-release-new-version-compat.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/stable-candidate-patrol.yml",
-      "signals": [
-        "write-permission"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/universal-bootstrap-dogfood.yml",
+      "path": ".github/workflows/self-release-npm-dry-run.yml",
       "signals": [
-        "write-permission",
-        "oidc"
+        "npm-publish"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/universal-bootstrap-recovery.yml",
+      "path": ".github/workflows/self-release-promote.yml",
       "signals": [
         "write-permission",
         "oidc"
@@ -1225,17 +1987,12 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/v4-adopter-delivery-dogfood.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/v4-adopter-delivery.yml",
+      "path": ".github/workflows/self-release-rehearsal-dogfood.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "path": ".github/workflows/self-release-tail-dogfood.yml",
       "signals": [
         "write-permission",
         "oidc",
@@ -1244,30 +2001,35 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/v4-public-consumer-dogfood.yml",
-      "signals": [],
-      "classified": false
+      "path": ".github/workflows/stable-candidate-patrol.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
     },
     {
-      "path": ".github/workflows/v4-publication-rehearsal-dogfood.yml",
-      "signals": [],
-      "classified": false
+      "path": ".github/workflows/universal-bootstrap-recovery.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
     },
     {
-      "path": ".github/workflows/v4-stage-capsule-canary.yml",
+      "path": ".github/workflows/v4-adopter-delivery.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/v4-tail-reseal.yml",
+      "path": ".github/workflows/v4-stage-capsule-canary.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/verify.yml",
+      "path": ".github/workflows/v4-tail-reseal.yml",
       "signals": [],
       "classified": false
     }
   ],
-  "registryDigest": "3fb8f77f124ae720c5935fb1a571028360f0ba9993641033190b4ff2fe418594"
+  "registryDigest": "508282f0bd7a505e47e35c390a08b66bc249e72a3f52c81ed72bf8f21cd9f459"
 }