npm - @kungfu-tech/buildchain - Versions diffs - 4.0.2-alpha.8 → 4.0.2 - Mend

@kungfu-tech/buildchain 4.0.2-alpha.8 → 4.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (157) hide show

package/AGENTS.md +10 -1
package/CONTRIBUTING.md +24 -0
package/README.md +2 -2
package/actions/promote-buildchain-ref/README.md +1 -1
package/actions/v4-release-candidate-promote/README.md +28 -0
package/architecture/agent-change-map.md +64 -7
package/architecture/ci-lane-change-budget.json +366 -0
package/architecture/internal-capabilities.json +53 -8
package/architecture/maintainability-debt.json +147 -93
package/architecture/maintainability-policy.json +32 -28
package/architecture/release-tail-contract-inventory.json +6 -6
package/architecture/v4-architecture-constitution.md +23 -20
package/architecture/v4-cross-platform-adopter-qualification.json +1 -1
package/architecture/v4-delivery-authority-parity.json +2 -2
package/architecture/v4-delivery-warrant-shadow-bootstrap-plan.json +1 -1
package/architecture/v4-floating-consumer-policy.json +2 -2
package/architecture/v4-next-development-parity.json +5 -5
package/architecture/v4-partial-mutation-recovery-qualification.json +4 -1
package/architecture/v4-platform-stage-checkpoints.json +1 -1
package/architecture/v4-provider-operation-journal-contract.json +5 -2
package/architecture/v4-publication-facade-patches.json +64 -0
package/architecture/v4-release-activation-shadow-domain.json +5 -2
package/architecture/v4-release-topology.json +74 -39
package/architecture/v4-rust-wasm-production-authority.json +58 -0
package/architecture/v4-stable-publication-fence.json +5 -2
package/architecture/v4-stage-capsule-qualification.json +2 -2
package/architecture/v4-tail-reseal-parity.json +8 -6
package/architecture/v4-universal-workflow-bootstrap.json +171 -0
package/architecture/v4-universal-workflow-fault-campaign.json +72 -0
package/architecture/v4-universal-workflow-train-admission.json +40 -0
package/architecture/workflow-taxonomy.json +1451 -0
package/bin/buildchain.mjs +7 -7
package/contracts/buildchain-v2-residuals-v1.json +57 -48
package/contracts/dev-delivery-authority-v2.schema.json +16 -2
package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
package/contracts/v4-canonical-contracts-v1.schema.json +1 -0
package/dist/site/buildchain-contract.json +93 -48
package/dist/site/buildchain-site.json +222 -69
package/dist/site/capability-registry.json +4 -4
package/dist/site/controller-registry.json +50 -13
package/dist/site/kfd-claims.json +2585 -1000
package/dist/site/kfd-upstream-aggregate.json +1 -1
package/dist/site/manual-registry.json +13 -13
package/dist/site/node-api-registry.json +120 -115
package/dist/site/page-registry.json +204 -51
package/dist/site/public-surface-audit.json +3205 -1219
package/dist/site/publication-authority-registry.json +1124 -362
package/dist/site/publication-registry.json +4 -4
package/dist/site/schemas/dev-delivery-authority-v2.schema.json +16 -2
package/dist/site/site-manifest.json +17 -17
package/dist/site/workflow-registry.json +5061 -1659
package/docs/MAP.md +1 -0
package/docs/auditable-demo.md +1 -1
package/docs/cli.md +21 -8
package/docs/dev-delivery-warrant.md +1 -1
package/docs/engineering-housekeeper.md +3 -3
package/docs/kfd-support.md +26 -2
package/docs/next-development-transition.md +2 -2
package/docs/node-api-reference.md +190 -190
package/docs/publication-authority.md +2 -2
package/docs/release-candidate.md +3 -3
package/docs/release-flow.md +67 -19
package/docs/release-governance.md +8 -8
package/docs/release-passport.md +27 -2
package/docs/reusable-build-surface.md +16 -0
package/docs/v4-adopter-delivery.md +2 -2
package/docs/v4-production-release.md +71 -8
package/docs/v4-rust-wasm-production-authority.md +58 -0
package/docs/v4-stage-capsule.md +2 -2
package/docs/v4-tail-reseal.md +1 -1
package/docs/workflow-catalog.md +154 -0
package/docs/workflow-path-migration.md +109 -0
package/package.json +10 -6
package/packages/core/artifact-verification-envelope.js +5 -5
package/packages/core/buildchain-contract.js +1 -1
package/packages/core/buildchain-kfd-claims.js +2 -2
package/packages/core/buildchain-publication-authority.js +42 -26
package/packages/core/buildchain-v4-domain.wasm +0 -0
package/packages/core/ci-lane-change-budget.js +14 -1
package/packages/core/controller-evidence.js +4 -1
package/packages/core/dev-delivery-candidate-identity.js +40 -6
package/packages/core/dev-delivery-warrant-state.js +3 -4
package/packages/core/dev-delivery-warrant.js +12 -2
package/packages/core/github-governance-authority.js +4 -4
package/packages/core/kfd-adopter-manifest.js +46 -47
package/packages/core/next-development-projection.js +2 -2
package/packages/core/paper-agent-entry.js +30 -4
package/packages/core/paper-fleet.js +1 -1
package/packages/core/paper-runtime-channels.js +348 -0
package/packages/core/paper-scaffold-content.js +10 -0
package/packages/core/paper.js +37 -71
package/packages/core/release-line-dry-run.js +1 -1
package/packages/core/release-passport-contract.js +5 -5
package/packages/core/release-passport.js +5 -4
package/packages/core/release-tail-provider-plane.js +68 -1048
package/packages/core/v4-canonical-contracts.js +10 -75
package/packages/core/v4-domain-wasm-artifact.js +7 -0
package/packages/core/v4-domain-wasm.js +216 -0
package/packages/core/v4-floating-consumer-evidence.js +1 -1
package/packages/core/v4-floating-consumer-policy.js +1 -1
package/packages/core/v4-partial-mutation-recovery-qualification.js +9 -386
package/packages/core/v4-product-publication.js +19 -349
package/packages/core/v4-protected-publication-source.js +19 -21
package/packages/core/v4-provider-operation-journal.js +18 -487
package/packages/core/v4-provider-readback-idempotency.js +12 -97
package/packages/core/v4-release-activation-shadow.js +13 -500
package/packages/core/v4-release-invocation.js +28 -389
package/packages/core/v4-stable-publication-fence.js +13 -342
package/packages/core/v4-universal-workflow-bootstrap.js +586 -0
package/scripts/binary-publication-evidence.mjs +135 -0
package/scripts/build-contract-core.mjs +1 -14
package/scripts/build-v4-domain-wasm.mjs +189 -0
package/scripts/check-action-bundles.mjs +12 -2
package/scripts/check-ci-lane-change-budget.mjs +4 -1
package/scripts/check-core-mechanism-inventory.mjs +4 -3
package/scripts/check-inventory.mjs +35 -44
package/scripts/check-maintainability.mjs +16 -113
package/scripts/check-v4-floating-consumer-policy-contract.mjs +2 -2
package/scripts/check-v4-public-dogfood-contract.mjs +22 -9
package/scripts/check-v4-release-topology.mjs +90 -33
package/scripts/check-v4-runtime-semantic-closure.mjs +4 -1
package/scripts/check-v4-universal-workflow-bootstrap.mjs +266 -0
package/scripts/check-workflow-taxonomy.mjs +6 -0
package/scripts/copy-v4-domain-wasm.mjs +14 -0
package/scripts/dev-delivery-authority-command-adapters.mjs +1 -1
package/scripts/dev-delivery-authority.mjs +8 -8
package/scripts/dev-delivery-source-proof-reuse.mjs +2 -1
package/scripts/dev-delivery-warrant-options.mjs +14 -9
package/scripts/dev-delivery-warrant-store.mjs +73 -7
package/scripts/dev-delivery-warrant-transition.mjs +109 -0
package/scripts/dev-delivery-warrant.mjs +76 -99
package/scripts/dev-pr-auto-merge.mjs +15 -15
package/scripts/generate-channel-build-workflow.mjs +7 -2
package/scripts/generate-channel-promotion-workflow.mjs +7 -5
package/scripts/generate-site-bundle.mjs +11 -11
package/scripts/generate-v4-universal-workflow-facades.mjs +458 -0
package/scripts/generate-workflow-taxonomy.mjs +25 -0
package/scripts/github-output.mjs +31 -0
package/scripts/maintainability-metrics.mjs +16 -5
package/scripts/maintainability-public-surface.mjs +115 -0
package/scripts/next-development-review.mjs +307 -0
package/scripts/paper-work-fleet-cli.mjs +2 -0
package/scripts/release-asset-client.mjs +91 -0
package/scripts/release-candidate-resolver.mjs +9 -9
package/scripts/source-verification-evidence.mjs +344 -0
package/scripts/stable-candidate-qualification.mjs +1 -1
package/scripts/universal-facade-maintainability.mjs +82 -0
package/scripts/v4-product-publication-intent.mjs +13 -6
package/scripts/v4-publication-settlement.mjs +211 -0
package/scripts/v4-universal-workflow-backflow.mjs +212 -0
package/scripts/v4-universal-workflow-engine.mjs +618 -0
package/scripts/v4-universal-workflow-self-dogfood.mjs +205 -0
package/scripts/verify-version-state-delta.mjs +173 -0
package/scripts/workflow-taxonomy.mjs +507 -0
package/templates/native-dev-delivery.yml +4 -7
package/templates/universal-buildchain-bootstrap-recovery.yml +282 -0
package/templates/universal-buildchain-bootstrap.yml +28 -0

package/dist/site/publication-authority-registry.json CHANGED Viewed

@@ -32,522 +32,728 @@
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.build.yml",
+      "workflowPath": ".github/workflows/.build-demo-adapter.yml",
       "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.build.yml",
+      "publisherWorkflowPath": ".github/workflows/.build-demo-adapter.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.declarative-auditable-demo.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/.build-engine.yml",
+      "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.declarative-auditable-demo.yml",
+      "publisherWorkflowPath": ".github/workflows/.build-engine.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.publication-authority.yml",
-      "authorityClass": "evidence-publication",
+      "workflowPath": ".github/workflows/.build-release-verify-compat.yml",
+      "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.publication-authority.yml",
+      "publisherWorkflowPath": ".github/workflows/.build-release-verify-compat.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.release-candidate-promote.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "channel-ref",
-        "github-release",
-        "npm-publish"
-      ],
-      "credentialMode": "trusted-publishing",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/.release-candidate-promote.yml",
-      "environment": "none",
-      "environmentMode": "fixed",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/.release-verify.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/.build-sam-verify-compat.yml",
+      "authorityClass": "retired-deny",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.release-verify.yml",
+      "publisherWorkflowPath": ".github/workflows/.build-sam-verify-compat.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.sam-release.yml",
+      "workflowPath": ".github/workflows/.build-wheel-verify-compat.yml",
       "authorityClass": "retired-deny",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.sam-release.yml",
+      "publisherWorkflowPath": ".github/workflows/.build-wheel-verify-compat.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.sam-verify.yml",
-      "authorityClass": "retired-deny",
+      "workflowPath": ".github/workflows/.build.yml",
+      "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.sam-verify.yml",
+      "publisherWorkflowPath": ".github/workflows/.build.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.sync-remote-git.yml",
+      "workflowPath": ".github/workflows/.declarative-auditable-demo.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.sync-remote-git.yml",
+      "publisherWorkflowPath": ".github/workflows/.declarative-auditable-demo.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.web-surface.yml",
-      "authorityClass": "product-publication",
-      "publicationCapable": true,
-      "capabilityIds": [
-        "web-production"
-      ],
-      "credentialMode": "oidc",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/.web-surface.yml",
-      "environment": "consumer-defined",
-      "environmentMode": "caller-bound",
-      "runnerPolicy": "qualified-measured",
-      "notes": ""
-    },
-    {
-      "workflowPath": ".github/workflows/.wheel-release.yml",
-      "authorityClass": "retired-deny",
+      "workflowPath": ".github/workflows/.ops-git-sync.yml",
+      "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.wheel-release.yml",
+      "publisherWorkflowPath": ".github/workflows/.ops-git-sync.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/.wheel-verify.yml",
-      "authorityClass": "retired-deny",
+      "workflowPath": ".github/workflows/.publication-authority.yml",
+      "authorityClass": "evidence-publication",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/.wheel-verify.yml",
+      "publisherWorkflowPath": ".github/workflows/.publication-authority.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/artifact-signing-authority.yml",
+      "workflowPath": ".github/workflows/.release-authority.yml",
       "authorityClass": "evidence-publication",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/artifact-signing-authority.yml",
+      "publisherWorkflowPath": ".github/workflows/.release-authority.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/auditable-demo.yml",
+      "workflowPath": ".github/workflows/.release-binary-assets.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "github-release"
+      ],
+      "credentialMode": "github-token",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/.release-binary-assets.yml",
+      "environment": "buildchain-release-assets",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.release-candidate-promote.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "channel-ref",
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/.release-candidate-promote.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.release-promote.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "channel-ref",
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/.release-promote.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.release-verify.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/auditable-demo.yml",
+      "publisherWorkflowPath": ".github/workflows/.release-verify.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/binary-distribution.yml",
-      "authorityClass": "evidence-publication",
+      "workflowPath": ".github/workflows/.sam-verify.yml",
+      "authorityClass": "retired-deny",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/binary-distribution.yml",
+      "publisherWorkflowPath": ".github/workflows/.sam-verify.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/binary-release-assets.yml",
+      "workflowPath": ".github/workflows/.sync-remote-git.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/binary-release-assets.yml",
+      "publisherWorkflowPath": ".github/workflows/.sync-remote-git.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/build-surface-fixture.yml",
-      "authorityClass": "non-publication-oidc",
+      "workflowPath": ".github/workflows/.web-surface.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "web-production"
+      ],
+      "credentialMode": "oidc",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/.web-surface.yml",
+      "environment": "consumer-defined",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/.wheel-verify.yml",
+      "authorityClass": "retired-deny",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/build-surface-fixture.yml",
+      "publisherWorkflowPath": ".github/workflows/.wheel-verify.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/build.yml",
-      "authorityClass": "non-publication-oidc",
+      "workflowPath": ".github/workflows/artifact-signing-authority.yml",
+      "authorityClass": "evidence-publication",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/build.yml",
+      "publisherWorkflowPath": ".github/workflows/artifact-signing-authority.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-alpha-self-dogfood.yml",
+      "workflowPath": ".github/workflows/bootstrap.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "universal-candidate-execution"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/bootstrap.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/build.yml",
       "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-alpha-self-dogfood.yml",
+      "publisherWorkflowPath": ".github/workflows/build.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-dev-delivery.yml",
+      "workflowPath": ".github/workflows/buildchain-patrol.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-dev-delivery.yml",
+      "publisherWorkflowPath": ".github/workflows/buildchain-patrol.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-patrol-daily.yml",
+      "workflowPath": ".github/workflows/dev-alpha-candidate-patrol.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-daily.yml",
+      "publisherWorkflowPath": ".github/workflows/dev-alpha-candidate-patrol.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-patrol-monthly.yml",
+      "workflowPath": ".github/workflows/dev-delivery-warrant-cancel.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-monthly.yml",
+      "publisherWorkflowPath": ".github/workflows/dev-delivery-warrant-cancel.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-patrol-weekly.yml",
+      "workflowPath": ".github/workflows/dev-delivery-warrant-close.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-weekly.yml",
+      "publisherWorkflowPath": ".github/workflows/dev-delivery-warrant-close.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-patrol.yml",
+      "workflowPath": ".github/workflows/dev-pr-auto-merge.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/dev-pr-auto-merge.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-ref-promotion-recovery.yml",
+      "workflowPath": ".github/workflows/dev-qualification-patrol.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-ref-promotion-recovery.yml",
+      "publisherWorkflowPath": ".github/workflows/dev-qualification-patrol.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-ref-promotion.yml",
+      "workflowPath": ".github/workflows/engineering-housekeeper.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-ref-promotion.yml",
+      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/buildchain-stable-candidate-patrol.yml",
+      "workflowPath": ".github/workflows/github-artifact-attestation.yml",
+      "authorityClass": "evidence-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "github-artifact-attestation"
+      ],
+      "credentialMode": "oidc",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/github-artifact-attestation.yml",
+      "environment": "consumer-defined",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/paper-release-sealed.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/paper-release-sealed.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/paper-release.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/paper-release.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/patrol-daily.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/buildchain-stable-candidate-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/patrol-daily.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/dev-alpha-candidate-patrol.yml",
+      "workflowPath": ".github/workflows/patrol-monthly.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-alpha-candidate-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/patrol-monthly.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/dev-delivery-warrant-cancel.yml",
+      "workflowPath": ".github/workflows/patrol-observed-evidence.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "observed-evidence-publication"
+      ],
+      "credentialMode": "oidc",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/patrol-observed-evidence.yml",
+      "environment": "consumer-defined",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/patrol-weekly.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-delivery-warrant-cancel.yml",
+      "publisherWorkflowPath": ".github/workflows/patrol-weekly.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/dev-delivery-warrant-close.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/public-build-candidate.yml",
+      "authorityClass": "non-publication-oidc",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-delivery-warrant-close.yml",
+      "publisherWorkflowPath": ".github/workflows/public-build-candidate.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/dev-merge-queue-governance.yml",
+      "workflowPath": ".github/workflows/public-build-demo.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-merge-queue-governance.yml",
+      "publisherWorkflowPath": ".github/workflows/public-build-demo.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/dev-pr-auto-merge.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/public-build-publication.yml",
+      "authorityClass": "evidence-publication",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-pr-auto-merge.yml",
+      "publisherWorkflowPath": ".github/workflows/public-build-publication.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/dev-qualification-patrol.yml",
+      "workflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/dev-qualification-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/engineering-housekeeper-daily.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper-daily.yml",
-      "environment": "",
+      "workflowPath": ".github/workflows/public-ops-bootstrap-recovery.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "universal-candidate-execution"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-ops-bootstrap-recovery.yml",
+      "environment": "none",
       "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-bootstrap.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "universal-candidate-execution"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-ops-bootstrap.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/engineering-housekeeper-monthly.yml",
+      "workflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper-monthly.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/engineering-housekeeper-weekly.yml",
+      "workflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper-weekly.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/engineering-housekeeper.yml",
+      "workflowPath": ".github/workflows/public-ops-housekeeping.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-housekeeping.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/github-artifact-attestation.yml",
-      "authorityClass": "evidence-publication",
+      "workflowPath": ".github/workflows/public-ops-observed-evidence.yml",
+      "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
-        "github-artifact-attestation"
+        "observed-evidence-publication"
       ],
       "credentialMode": "oidc",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/github-artifact-attestation.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-observed-evidence.yml",
       "environment": "consumer-defined",
       "environmentMode": "caller-bound",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/github-governance-audit.yml",
+      "workflowPath": ".github/workflows/public-ops-patrol-daily.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/github-governance-audit.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-daily.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/npm-publish.yml",
-      "authorityClass": "dry-run-only",
+      "workflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
+      "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/npm-publish.yml",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/paper-release-sealed.yml",
+      "workflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-ops-warrant-close.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-close.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-release-artifact-attestation.yml",
+      "authorityClass": "evidence-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "github-artifact-attestation"
+      ],
+      "credentialMode": "oidc",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-release-artifact-attestation.yml",
+      "environment": "consumer-defined",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-release-paper-sealed.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
@@ -556,14 +762,14 @@
       ],
       "credentialMode": "trusted-publishing",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/paper-release-sealed.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-paper-sealed.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/paper-release.yml",
+      "workflowPath": ".github/workflows/public-release-paper.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
@@ -572,64 +778,86 @@
       ],
       "credentialMode": "trusted-publishing",
       "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/paper-release.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-paper.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/patrol-daily.yml",
+      "workflowPath": ".github/workflows/public-release-promote.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "channel-ref",
+        "github-release",
+        "npm-publish"
+      ],
+      "credentialMode": "trusted-publishing",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-release-promote.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/public-release-propagation.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/patrol-daily.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-propagation.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/patrol-monthly.yml",
-      "authorityClass": "governance-write",
+      "workflowPath": ".github/workflows/public-release-signing-authority.yml",
+      "authorityClass": "evidence-publication",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/patrol-monthly.yml",
+      "publisherWorkflowPath": ".github/workflows/public-release-signing-authority.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/patrol-observed-evidence.yml",
+      "workflowPath": ".github/workflows/public-release-tail.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
-        "observed-evidence-publication"
+        "artifact.publish",
+        "release.activate",
+        "released-evidence.synthesize",
+        "signed-channel.commit"
       ],
-      "credentialMode": "oidc",
-      "publisherWorkflowMode": "caller-bound",
-      "publisherWorkflowPath": ".github/workflows/patrol-observed-evidence.yml",
-      "environment": "consumer-defined",
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/public-release-tail.yml",
+      "environment": "caller-bound",
       "environmentMode": "caller-bound",
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/patrol-weekly.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/patrol-weekly.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
+      "workflowPath": ".github/workflows/public-release-web.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "web-production"
+      ],
+      "credentialMode": "oidc",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/public-release-web.yml",
+      "environment": "consumer-defined",
+      "environmentMode": "caller-bound",
+      "runnerPolicy": "qualified-measured",
       "notes": ""
     },
     {
@@ -662,19 +890,6 @@
       "runnerPolicy": "qualified-measured",
       "notes": ""
     },
-    {
-      "workflowPath": ".github/workflows/release-line-bootstrap.yml",
-      "authorityClass": "governance-write",
-      "publicationCapable": false,
-      "capabilityIds": [],
-      "credentialMode": "none",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/release-line-bootstrap.yml",
-      "environment": "",
-      "environmentMode": "fixed",
-      "runnerPolicy": "unqualified",
-      "notes": ""
-    },
     {
       "workflowPath": ".github/workflows/release-propagation.yml",
       "authorityClass": "governance-write",
@@ -707,69 +922,622 @@
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/release-verify.yml",
+      "workflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
+      "authorityClass": "non-publication-oidc",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-build-binary-distribution.yml",
+      "authorityClass": "evidence-publication",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-build-binary-distribution.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-build-demo-dogfood.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/release-verify.yml",
+      "publisherWorkflowPath": ".github/workflows/self-build-demo-dogfood.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "workflowPath": ".github/workflows/self-build-fixture.yml",
+      "authorityClass": "non-publication-oidc",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-build-fixture.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-build-release-verify-compat.yml",
       "authorityClass": "governance-write",
       "publicationCapable": false,
       "capabilityIds": [],
       "credentialMode": "none",
       "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "publisherWorkflowPath": ".github/workflows/self-build-release-verify-compat.yml",
       "environment": "",
       "environmentMode": "fixed",
       "runnerPolicy": "unqualified",
       "notes": ""
     },
     {
-      "workflowPath": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "workflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
       "authorityClass": "product-publication",
       "publicationCapable": true,
       "capabilityIds": [
-        "artifact.publish",
-        "release.activate",
-        "released-evidence.synthesize",
-        "signed-channel.commit"
+        "universal-candidate-execution"
       ],
       "credentialMode": "caller-secrets",
-      "publisherWorkflowMode": "fixed",
-      "publisherWorkflowPath": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
       "environment": "none",
       "environmentMode": "fixed",
       "runnerPolicy": "qualified-measured",
       "notes": ""
-    }
-  ],
-  "workflowFacts": [
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-dev-delivery.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-dev-delivery.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-governance-audit.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-governance-audit.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-merge-queue.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-merge-queue.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-patrol-daily.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-daily.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-release-binary-assets.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-binary-assets.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-release-line-open.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-line-open.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-release-npm-dry-run.yml",
+      "authorityClass": "dry-run-only",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-npm-dry-run.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-release-promote.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-promote.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/self-release-tail-dogfood.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "artifact.publish",
+        "release.activate",
+        "released-evidence.synthesize",
+        "signed-channel.commit"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/self-release-tail-dogfood.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "authorityClass": "governance-write",
+      "publicationCapable": false,
+      "capabilityIds": [],
+      "credentialMode": "none",
+      "publisherWorkflowMode": "fixed",
+      "publisherWorkflowPath": ".github/workflows/stable-candidate-patrol.yml",
+      "environment": "",
+      "environmentMode": "fixed",
+      "runnerPolicy": "unqualified",
+      "notes": ""
+    },
+    {
+      "workflowPath": ".github/workflows/universal-bootstrap-recovery.yml",
+      "authorityClass": "product-publication",
+      "publicationCapable": true,
+      "capabilityIds": [
+        "universal-candidate-execution"
+      ],
+      "credentialMode": "caller-secrets",
+      "publisherWorkflowMode": "caller-bound",
+      "publisherWorkflowPath": ".github/workflows/universal-bootstrap-recovery.yml",
+      "environment": "none",
+      "environmentMode": "fixed",
+      "runnerPolicy": "qualified-measured",
+      "notes": ""
+    }
+  ],
+  "workflowFacts": [
+    {
+      "path": ".github/workflows/.auditable-demo.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.binary-release-assets.yml",
+      "signals": [
+        "write-permission",
+        "environment",
+        "github-release"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build-demo-adapter.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build-engine.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "environment",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build-gate-profile.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.build-release-verify-compat.yml",
+      "signals": [
+        "write-permission",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build-sam-verify-compat.yml",
+      "signals": [
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build-wheel-verify-compat.yml",
+      "signals": [
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.build.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "environment",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.bump-minor-version.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.declarative-auditable-demo.yml",
+      "signals": [
+        "write-permission",
+        "git-push"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.gate-profile.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.ops-git-sync.yml",
+      "signals": [
+        "git-push"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.publication-authority.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.release-authority.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.release-binary-assets.yml",
+      "signals": [
+        "write-permission",
+        "environment",
+        "github-release"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.release-candidate-promote.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.release-minor-bump-compat.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.release-page-sync-retired.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.release-promote.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.release-verify.yml",
+      "signals": [
+        "write-permission",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.sam-verify.yml",
+      "signals": [
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.sync-release-page.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/.sync-remote-git.yml",
+      "signals": [
+        "git-push"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.web-surface.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "environment",
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/.wheel-verify.yml",
+      "signals": [
+        "cloud-credential"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/artifact-signing-authority.yml",
+      "signals": [
+        "environment"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/bootstrap.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/build.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/buildchain-patrol.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/check.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/dev-alpha-candidate-patrol.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/dev-delivery-warrant-cancel.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/dev-delivery-warrant-close.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/dev-pr-auto-merge.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/dev-qualification-patrol.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/engineering-housekeeper.yml",
+      "signals": [],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/github-artifact-attestation.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "environment"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/paper-release-sealed.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
+    {
+      "path": ".github/workflows/paper-release.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
+    },
     {
-      "path": ".github/workflows/.auditable-demo.yml",
-      "signals": [],
+      "path": ".github/workflows/patrol-daily.yml",
+      "signals": [
+        "write-permission"
+      ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.binary-release-assets.yml",
+      "path": ".github/workflows/patrol-monthly.yml",
       "signals": [
-        "write-permission",
-        "environment",
-        "github-release"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.build.yml",
+      "path": ".github/workflows/patrol-observed-evidence.yml",
       "signals": [
-        "write-permission",
         "oidc",
         "environment",
         "cloud-credential"
@@ -777,30 +1545,19 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/.bump-minor-version.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/.declarative-auditable-demo.yml",
+      "path": ".github/workflows/patrol-weekly.yml",
       "signals": [
-        "write-permission",
-        "git-push"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.gate-profile.yml",
+      "path": ".github/workflows/public-build-adopter-qualification.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/.publication-authority.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.release-candidate-promote.yml",
+      "path": ".github/workflows/public-build-candidate.yml",
       "signals": [
         "write-permission",
         "oidc"
@@ -808,171 +1565,156 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/.release-docker.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/.release-elastic-beanstalk.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/.release-new-version.yml",
+      "path": ".github/workflows/public-build-check.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/.release-verify.yml",
+      "path": ".github/workflows/public-build-demo.yml",
       "signals": [
         "write-permission",
-        "cloud-credential"
+        "git-push"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.sam-release.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/.sam-verify.yml",
+      "path": ".github/workflows/public-build-publication.yml",
       "signals": [
-        "cloud-credential"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.sync-release-page.yml",
+      "path": ".github/workflows/public-build-stage-capsule-canary.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/.sync-remote-git.yml",
+      "path": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
       "signals": [
-        "git-push"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.web-surface.yml",
+      "path": ".github/workflows/public-ops-bootstrap-recovery.yml",
       "signals": [
         "write-permission",
-        "oidc",
-        "environment",
-        "cloud-credential"
+        "oidc"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/.wheel-release.yml",
+      "path": ".github/workflows/public-ops-bootstrap.yml",
       "signals": [],
       "classified": true
     },
     {
-      "path": ".github/workflows/.wheel-verify.yml",
+      "path": ".github/workflows/public-ops-dev-auto-merge.yml",
       "signals": [
-        "cloud-credential"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/artifact-signing-authority.yml",
+      "path": ".github/workflows/public-ops-dev-qualification-patrol.yml",
       "signals": [
-        "environment"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/auditable-demo-media-profile-qualification.yml",
+      "path": ".github/workflows/public-ops-housekeeping.yml",
       "signals": [],
-      "classified": false
+      "classified": true
     },
     {
-      "path": ".github/workflows/auditable-demo.yml",
+      "path": ".github/workflows/public-ops-observed-evidence.yml",
       "signals": [
-        "write-permission"
+        "oidc",
+        "environment",
+        "cloud-credential"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/binary-distribution.yml",
+      "path": ".github/workflows/public-ops-patrol-daily.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/binary-release-assets.yml",
+      "path": ".github/workflows/public-ops-patrol-monthly.yml",
       "signals": [
-        "write-permission",
-        "github-release"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/build-surface-fixture.yml",
-      "signals": [],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/build.yml",
+      "path": ".github/workflows/public-ops-patrol-weekly.yml",
       "signals": [
-        "write-permission",
-        "oidc"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-alpha-self-dogfood.yml",
+      "path": ".github/workflows/public-ops-patrol.yml",
       "signals": [
-        "write-permission",
-        "oidc"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-candidate-recovery-dogfood-failure.yml",
+      "path": ".github/workflows/public-ops-release-governance.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/buildchain-dev-delivery.yml",
+      "path": ".github/workflows/public-ops-stable-candidate-patrol.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-patrol-daily.yml",
+      "path": ".github/workflows/public-ops-tail-reseal.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/public-ops-warrant-cancel.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-patrol-monthly.yml",
+      "path": ".github/workflows/public-ops-warrant-close.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-patrol-weekly.yml",
+      "path": ".github/workflows/public-release-artifact-attestation.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "oidc",
+        "environment"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-patrol.yml",
+      "path": ".github/workflows/public-release-paper-sealed.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "oidc"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-ref-promotion-recovery.yml",
+      "path": ".github/workflows/public-release-paper.yml",
       "signals": [
         "write-permission",
         "oidc"
@@ -980,7 +1722,7 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-ref-promotion.yml",
+      "path": ".github/workflows/public-release-promote.yml",
       "signals": [
         "write-permission",
         "oidc"
@@ -988,171 +1730,203 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-stable-candidate-patrol.yml",
+      "path": ".github/workflows/public-release-propagation.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "git-push"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/buildchain-stable-candidate-qualification.yml",
-      "signals": [],
-      "classified": false
+      "path": ".github/workflows/public-release-signing-authority.yml",
+      "signals": [
+        "environment"
+      ],
+      "classified": true
     },
     {
-      "path": ".github/workflows/candidate-lab.yml",
+      "path": ".github/workflows/public-release-tail.yml",
       "signals": [],
-      "classified": false
+      "classified": true
     },
     {
-      "path": ".github/workflows/check.yml",
-      "signals": [],
-      "classified": false
+      "path": ".github/workflows/public-release-web.yml",
+      "signals": [
+        "write-permission",
+        "oidc",
+        "environment",
+        "cloud-credential"
+      ],
+      "classified": true
     },
     {
-      "path": ".github/workflows/dev-alpha-candidate-patrol.yml",
+      "path": ".github/workflows/publication-artifact.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/dev-delivery-warrant-cancel.yml",
+      "path": ".github/workflows/release-candidate-promote.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "oidc"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/dev-delivery-warrant-close.yml",
+      "path": ".github/workflows/release-governance-reconcile.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/release-propagation.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "git-push"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/dev-merge-queue-governance.yml",
+      "path": ".github/workflows/release-tail.yml",
       "signals": [],
       "classified": true
     },
     {
-      "path": ".github/workflows/dev-pr-auto-merge.yml",
+      "path": ".github/workflows/self-build-adopter-dogfood.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/self-build-alpha-dogfood.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "oidc"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/dev-qualification-patrol.yml",
+      "path": ".github/workflows/self-build-binary-distribution.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/engineering-housekeeper-daily.yml",
+      "path": ".github/workflows/self-build-candidate-lab.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/self-build-demo-dogfood.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/engineering-housekeeper-monthly.yml",
-      "signals": [
-        "write-permission"
-      ],
+      "path": ".github/workflows/self-build-demo-media-qualification.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/self-build-fixture.yml",
+      "signals": [],
       "classified": true
     },
     {
-      "path": ".github/workflows/engineering-housekeeper-weekly.yml",
+      "path": ".github/workflows/self-build-public-consumer-dogfood.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/self-build-release-verify-compat.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/engineering-housekeeper.yml",
+      "path": ".github/workflows/self-build-stable-candidate-qualification.yml",
       "signals": [],
-      "classified": true
+      "classified": false
     },
     {
-      "path": ".github/workflows/github-artifact-attestation.yml",
+      "path": ".github/workflows/self-build-verify.yml",
+      "signals": [],
+      "classified": false
+    },
+    {
+      "path": ".github/workflows/self-ops-bootstrap-dogfood.yml",
       "signals": [
         "write-permission",
-        "oidc",
-        "environment"
+        "oidc"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/github-governance-audit.yml",
+      "path": ".github/workflows/self-ops-dev-delivery.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/npm-publish.yml",
+      "path": ".github/workflows/self-ops-governance-audit.yml",
       "signals": [
-        "npm-publish"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/paper-release-sealed.yml",
+      "path": ".github/workflows/self-ops-housekeeping-daily.yml",
       "signals": [
-        "write-permission",
-        "oidc"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/paper-release.yml",
+      "path": ".github/workflows/self-ops-housekeeping-monthly.yml",
       "signals": [
-        "write-permission",
-        "oidc"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-daily.yml",
+      "path": ".github/workflows/self-ops-housekeeping-weekly.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-monthly.yml",
-      "signals": [
-        "write-permission"
-      ],
+      "path": ".github/workflows/self-ops-merge-queue.yml",
+      "signals": [],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-observed-evidence.yml",
+      "path": ".github/workflows/self-ops-patrol-daily.yml",
       "signals": [
-        "oidc",
-        "environment",
-        "cloud-credential"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/patrol-weekly.yml",
+      "path": ".github/workflows/self-ops-patrol-monthly.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/publication-artifact.yml",
+      "path": ".github/workflows/self-ops-patrol-weekly.yml",
       "signals": [
         "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/release-candidate-promote.yml",
+      "path": ".github/workflows/self-ops-promotion-recovery.yml",
       "signals": [
         "write-permission",
         "oidc"
@@ -1160,72 +1934,70 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/release-governance-reconcile.yml",
+      "path": ".github/workflows/self-ops-recovery-failure-dogfood.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/release-line-bootstrap.yml",
-      "signals": [
-        "write-permission",
-        "git-push"
-      ],
-      "classified": true
-    },
-    {
-      "path": ".github/workflows/release-new-version.yml",
+      "path": ".github/workflows/self-ops-runner-smoke.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/release-propagation.yml",
+      "path": ".github/workflows/self-ops-stable-candidate-patrol.yml",
       "signals": [
-        "write-permission",
-        "git-push"
+        "write-permission"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/release-tail.yml",
-      "signals": [],
+      "path": ".github/workflows/self-release-binary-assets.yml",
+      "signals": [
+        "write-permission",
+        "github-release"
+      ],
       "classified": true
     },
     {
-      "path": ".github/workflows/release-verify.yml",
+      "path": ".github/workflows/self-release-line-open.yml",
       "signals": [
-        "write-permission"
+        "write-permission",
+        "git-push"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/schedule-purge-artifacts.yml",
+      "path": ".github/workflows/self-release-new-version-compat.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/self-hosted-runner-smoke.yml",
+      "path": ".github/workflows/self-release-next-development.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/stable-candidate-patrol.yml",
+      "path": ".github/workflows/self-release-npm-dry-run.yml",
       "signals": [
-        "write-permission"
+        "npm-publish"
       ],
       "classified": true
     },
     {
-      "path": ".github/workflows/v4-adopter-delivery-dogfood.yml",
-      "signals": [],
-      "classified": false
+      "path": ".github/workflows/self-release-promote.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
     },
     {
-      "path": ".github/workflows/v4-adopter-delivery.yml",
+      "path": ".github/workflows/self-release-rehearsal-dogfood.yml",
       "signals": [],
       "classified": false
     },
     {
-      "path": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
+      "path": ".github/workflows/self-release-tail-dogfood.yml",
       "signals": [
         "write-permission",
         "oidc",
@@ -1234,30 +2006,20 @@
       "classified": true
     },
     {
-      "path": ".github/workflows/v4-public-consumer-dogfood.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/v4-publication-rehearsal-dogfood.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/v4-stage-capsule-canary.yml",
-      "signals": [],
-      "classified": false
-    },
-    {
-      "path": ".github/workflows/v4-tail-reseal.yml",
-      "signals": [],
-      "classified": false
+      "path": ".github/workflows/stable-candidate-patrol.yml",
+      "signals": [
+        "write-permission"
+      ],
+      "classified": true
     },
     {
-      "path": ".github/workflows/verify.yml",
-      "signals": [],
-      "classified": false
+      "path": ".github/workflows/universal-bootstrap-recovery.yml",
+      "signals": [
+        "write-permission",
+        "oidc"
+      ],
+      "classified": true
     }
   ],
-  "registryDigest": "123c20ea9806ce8ba7b82545165b30ce08537eee64795c2de11f0cc3546a0844"
+  "registryDigest": "894cce314366698d41a3ab20172a0b7a05f03f2167667eae51793537b832c811"
 }