@kungfu-tech/buildchain 4.0.2-alpha.4 → 4.0.2-alpha.41

package/architecture/ci-lane-change-budget.json

@@ -252,6 +252,23 @@
         "rationale": "The recovery surface is a one-way adapter into the same canonical publisher."
       }
     },
+    {
+      "laneId": ".github/workflows/buildchain-ref-promotion.yml#classify-workflow-run",
+      "authorityClass": "evidence",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 2,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "Alpha finalization classification latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The read-only classifier binds the verified head to exact product state before suppressing a duplicate publication transaction."
+      }
+    },
     {
       "laneId": ".github/workflows/buildchain-ref-promotion.yml#promote",
       "authorityClass": "release",
@@ -269,6 +286,23 @@
         "rationale": "The Buildchain-owned alpha entry delegates to the single v4 publisher."
       }
     },
+    {
+      "laneId": ".github/workflows/buildchain-ref-promotion.yml#universal-bootstrap",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "canonical exact-candidate self-promotion latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The canonical publisher delegates one closed request to the exact reviewed candidate and keeps the compatibility path mutually exclusive."
+      }
+    },
     {
       "laneId": ".github/workflows/release-candidate-promote.yml#invoke",
       "authorityClass": "release",
@@ -319,6 +353,338 @@
         "expectedContributionSeconds": 0,
         "rationale": "The lane only reconciles already-produced rooted platform reports and grants no provider, release, or stable publication authority."
       }
+    },
+    {
+      "laneId": ".github/workflows/bootstrap.yml#admit",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 10,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "exact-candidate admission latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/bootstrap.yml#execute",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "exact-candidate execution latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/bootstrap.yml#settle",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 10,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "universal terminal settlement latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-admit",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 10,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "consumer-owned exact-candidate admission latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-execute",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "consumer-owned exact-candidate execution latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-settle",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 10,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "consumer-owned terminal settlement latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#prepare",
+      "authorityClass": "evidence",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 10,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "Train-first self-dogfood admission latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-conformance",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "Train-first exact-candidate self-dogfood latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-conformance",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "Train-first exact-candidate self-dogfood latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-alpha",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "Train-first exact-candidate self-dogfood latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-alpha",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "Train-first exact-candidate self-dogfood latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-stable",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "Train-first exact-candidate self-dogfood latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-stable",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "Train-first exact-candidate self-dogfood latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#reconcile",
+      "authorityClass": "evidence",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 10,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "primary and recovery equivalence latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      }
+    },
+    {
+      "laneId": ".github/workflows/self-release-next-development.yml#review",
+      "authorityClass": "merge-critical-admission",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "ref-scoped",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 3,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": true,
+        "metric": "generated next-development independent review latency",
+        "expectedContributionSeconds": 180,
+        "rationale": "Only successful same-repository version PRs regenerate from the protected base and read completed publication evidence; ordinary source PRs skip the lane. Native queue checks remain final merge authority."
+      }
+    }
+  ],
+  "declarationFamilies": [
+    {
+      "authorityClass": "governed-delegation",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "opt-in exact-candidate execution latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      },
+      "laneIds": [
+        ".github/workflows/.auditable-demo.yml#universal-bootstrap",
+        ".github/workflows/.binary-release-assets.yml#universal-bootstrap",
+        ".github/workflows/.build.yml#universal-bootstrap",
+        ".github/workflows/.bump-minor-version.yml#universal-bootstrap",
+        ".github/workflows/.declarative-auditable-demo.yml#universal-bootstrap",
+        ".github/workflows/.gate-profile.yml#universal-bootstrap",
+        ".github/workflows/.publication-authority.yml#universal-bootstrap",
+        ".github/workflows/.release-candidate-promote.yml#universal-bootstrap",
+        ".github/workflows/.release-verify.yml#universal-bootstrap",
+        ".github/workflows/.sam-verify.yml#universal-bootstrap",
+        ".github/workflows/.sync-release-page.yml#universal-bootstrap",
+        ".github/workflows/.sync-remote-git.yml#universal-bootstrap",
+        ".github/workflows/.web-surface.yml#universal-bootstrap",
+        ".github/workflows/.wheel-verify.yml#universal-bootstrap",
+        ".github/workflows/build.yml#universal-bootstrap",
+        ".github/workflows/buildchain-patrol.yml#universal-bootstrap",
+        ".github/workflows/check.yml#universal-bootstrap",
+        ".github/workflows/dev-alpha-candidate-patrol.yml#universal-bootstrap",
+        ".github/workflows/dev-delivery-warrant-cancel.yml#universal-bootstrap",
+        ".github/workflows/dev-delivery-warrant-close.yml#universal-bootstrap",
+        ".github/workflows/dev-pr-auto-merge.yml#universal-bootstrap",
+        ".github/workflows/dev-qualification-patrol.yml#universal-bootstrap",
+        ".github/workflows/engineering-housekeeper.yml#universal-bootstrap",
+        ".github/workflows/github-artifact-attestation.yml#universal-bootstrap",
+        ".github/workflows/paper-release-sealed.yml#universal-bootstrap",
+        ".github/workflows/paper-release.yml#universal-bootstrap",
+        ".github/workflows/patrol-daily.yml#universal-bootstrap",
+        ".github/workflows/patrol-monthly.yml#universal-bootstrap",
+        ".github/workflows/patrol-observed-evidence.yml#universal-bootstrap",
+        ".github/workflows/patrol-weekly.yml#universal-bootstrap",
+        ".github/workflows/publication-artifact.yml#universal-bootstrap",
+        ".github/workflows/release-candidate-promote.yml#universal-bootstrap",
+        ".github/workflows/release-propagation.yml#universal-bootstrap",
+        ".github/workflows/release-tail.yml#universal-bootstrap",
+        ".github/workflows/stable-candidate-patrol.yml#universal-bootstrap",
+        ".github/workflows/v4-stage-capsule-canary.yml#universal-bootstrap",
+        ".github/workflows/v4-tail-reseal.yml#universal-bootstrap"
+      ]
+    },
+    {
+      "authorityClass": "governed-delegation",
+      "triggerClass": "mixed",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "mixed-trigger exact-candidate execution latency",
+        "expectedContributionSeconds": 0,
+        "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
+      },
+      "laneIds": [
+        ".github/workflows/release-governance-reconcile.yml#universal-bootstrap",
+        ".github/workflows/v4-adopter-delivery.yml#universal-bootstrap"
+      ]
     }
   ]
 }

package/architecture/internal-capabilities.json

@@ -36,6 +36,7 @@
     "actions/release-tail/index.js",
     "scripts/authorize-promotion-runtime-override.cjs",
     "scripts/build-contract-core.mjs",
+    "scripts/github-output.mjs",
     "scripts/buildchain-cli-help.mjs",
     "scripts/generate-channel-build-workflow.mjs",
     "scripts/promotion-routing-evidence.mjs",
@@ -137,6 +138,12 @@
     "crates/buildchain-v4-contracts/src/adopter_delivery.rs",
     "crates/buildchain-v4-contracts/src/compatibility_facts.rs",
     "crates/buildchain-v4-contracts/src/compatibility_facts",
+    "packages/core/v4-universal-workflow-bootstrap.js",
+    "scripts/check-v4-universal-workflow-bootstrap.mjs",
+    "scripts/generate-v4-universal-workflow-facades.mjs",
+    "scripts/v4-universal-workflow-backflow.mjs",
+    "scripts/v4-universal-workflow-engine.mjs",
+    "scripts/v4-universal-workflow-self-dogfood.mjs",
     "scripts/check-internal-architecture.mjs",
     "scripts/check-maintainability.mjs",
     "scripts/maintainability-metrics.mjs",
@@ -271,11 +278,13 @@
       "id": "promotion-channel-orchestration",
       "owner": "Buildchain action maintainers",
       "implementation": [
+        "actions/promote-buildchain-ref/internal/contained-published-version-state.js",
         "actions/promote-buildchain-ref/internal/promote-alpha-channel.js",
         "actions/promote-buildchain-ref/internal/promote-major-channel.js",
         "actions/promote-buildchain-ref/internal/promote-release-channel.js"
       ],
       "tests": [
+        "tests/promote-buildchain-ref-contained-published-version-state.test.mjs",
         "tests/promote-buildchain-ref.test.mjs",
         "tests/promote-buildchain-ref-recovery.test.mjs",
         "tests/promote-buildchain-ref-governance.test.mjs",
@@ -287,7 +296,7 @@
       ],
       "generatedOutputs": ["actions/promote-buildchain-ref/dist/index.js"],
       "validationCommands": [
-        "node --test tests/promote-buildchain-ref.test.mjs tests/promote-buildchain-ref-recovery.test.mjs tests/promote-buildchain-ref-governance.test.mjs tests/promotion-responsibilities.test.mjs"
+        "node --test tests/promote-buildchain-ref-contained-published-version-state.test.mjs tests/promote-buildchain-ref.test.mjs tests/promote-buildchain-ref-recovery.test.mjs tests/promote-buildchain-ref-governance.test.mjs tests/promotion-responsibilities.test.mjs"
       ]
     },
     {
@@ -412,12 +421,14 @@
       "owner": "Buildchain contract maintainers",
       "implementation": [
         "packages/core/buildchain-contract.js",
-        "scripts/build-contract-core.mjs"
+        "scripts/build-contract-core.mjs",
+        "scripts/github-output.mjs"
       ],
       "tests": [
         "tests/buildchain-contract.test.mjs",
         "tests/build-surface.test.mjs",
-        "tests/build-surface-promotion.test.mjs"
+        "tests/build-surface-promotion.test.mjs",
+        "tests/github-output.test.mjs"
       ],
       "contracts": [
         "dist/site/buildchain-contract.json",
@@ -578,7 +589,7 @@
       "contracts": [
         "architecture/v4-publication-rehearsal-parity.json",
         "contracts/v4-publication-rehearsal-capsule-v1.schema.json",
-        ".github/workflows/v4-publication-rehearsal-dogfood.yml",
+        ".github/workflows/self-release-rehearsal-dogfood.yml",
         "docs/v4-publication-rehearsal.md"
       ],
       "generatedOutputs": [],
@@ -645,7 +656,7 @@
         "contracts/dev-delivery-authority-v2.schema.json",
         "dist/site/schemas/dev-delivery-authority-v2.schema.json",
         ".github/workflows/dev-pr-auto-merge.yml",
-        ".github/workflows/buildchain-dev-delivery.yml",
+        ".github/workflows/self-ops-dev-delivery.yml",
         "templates/native-dev-delivery.yml",
         "docs/dev-delivery-warrant.md",
         "docs/dev-delivery-qualification-landing-adr.md"
@@ -722,8 +733,8 @@
         "contracts/fixtures/v4-adopter-delivery-v1/gate-positive.json",
         "contracts/fixtures/v4-adopter-delivery-v1/gate-unknown-selector.json",
         "contracts/fixtures/v4-adopter-delivery-v1/offline-vectors.json",
-        ".github/workflows/v4-adopter-delivery.yml",
-        ".github/workflows/v4-adopter-delivery-dogfood.yml",
+        ".github/workflows/public-build-adopter-qualification.yml",
+        ".github/workflows/self-build-adopter-dogfood.yml",
         "docs/v4-adopter-delivery.md"
       ],
       "generatedOutputs": [],
@@ -823,7 +834,7 @@
         "architecture/v4-tail-reseal-parity.json",
         "contracts/v4-tail-reseal-v1.schema.json",
         "contracts/fixtures/v4-tail-reseal-v1/valid.json",
-        ".github/workflows/v4-tail-reseal.yml",
+        ".github/workflows/public-ops-tail-reseal.yml",
         "docs/v4-stage-capsule.md",
         "docs/v4-runtime-ref-resume-authority.md",
         "docs/v4-tail-reseal.md"
@@ -833,6 +844,39 @@
         "node --test tests/v4-architecture.test.mjs tests/v4-bridge.test.mjs tests/v4-provider-operation-journal.test.mjs tests/v4-provider-readback-idempotency.test.mjs tests/v4-release-activation-shadow.test.mjs tests/v4-stable-publication-fence.test.mjs tests/v4-partial-mutation-recovery-qualification.test.mjs tests/v4-stage-capsule.test.mjs tests/v4-stage-capsule-store.test.mjs tests/v4-platform-stage-checkpoints.test.mjs tests/v4-stage-capsule-qualification.test.mjs tests/v4-runtime-ref-resume-authority.test.mjs tests/v4-tail-reseal.test.mjs tests/v4-tail-reseal-parity.test.mjs"
       ]
     },
+    {
+      "id": "v4-universal-workflow-bootstrap",
+      "owner": "Buildchain workflow maintainers",
+      "implementation": [
+        "packages/core/v4-universal-workflow-bootstrap.js",
+        "scripts/check-v4-universal-workflow-bootstrap.mjs",
+        "scripts/generate-v4-universal-workflow-facades.mjs",
+        "scripts/v4-universal-workflow-backflow.mjs",
+        "scripts/v4-universal-workflow-engine.mjs",
+        "scripts/v4-universal-workflow-self-dogfood.mjs"
+      ],
+      "tests": [
+        "tests/v4-universal-workflow-backflow.test.mjs",
+        "tests/v4-universal-workflow-bootstrap.test.mjs",
+        "tests/v4-universal-workflow-fault-campaign.test.mjs",
+        "tests/v4-universal-workflow-self-dogfood.test.mjs"
+      ],
+      "contracts": [
+        "architecture/v4-universal-workflow-bootstrap.json",
+        "architecture/v4-universal-workflow-fault-campaign.json",
+        "architecture/v4-universal-workflow-train-admission.json",
+        ".github/workflows/bootstrap.yml",
+        ".github/workflows/self-ops-bootstrap-dogfood.yml",
+        "templates/universal-buildchain-bootstrap-recovery.yml"
+      ],
+      "generatedOutputs": [
+        ".github/workflows/universal-bootstrap-recovery.yml"
+      ],
+      "validationCommands": [
+        "node scripts/check-v4-universal-workflow-bootstrap.mjs",
+        "node --test tests/v4-universal-workflow-bootstrap.test.mjs tests/v4-universal-workflow-backflow.test.mjs tests/v4-universal-workflow-fault-campaign.test.mjs tests/v4-universal-workflow-self-dogfood.test.mjs"
+      ]
+    },
     {
       "id": "maintainability-governance",
       "owner": "Buildchain architecture maintainers",