@kungfu-tech/buildchain 4.0.2-alpha.9 → 4.0.3-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (281) hide show
  1. package/AGENTS.md +14 -5
  2. package/CONTRIBUTING.md +58 -0
  3. package/README.md +3 -3
  4. package/actions/promote-buildchain-ref/README.md +1 -1
  5. package/actions/release-candidate-promote/README.md +31 -0
  6. package/architecture/agent-change-map.md +190 -126
  7. package/architecture/{v4-architecture-constitution.md → architecture-constitution.md} +33 -30
  8. package/architecture/{v3-core-mechanism-inventory.md → baseline-core-mechanism-inventory.md} +1 -1
  9. package/architecture/{v4-bootstrap-authority.json → bootstrap-authority.json} +3 -3
  10. package/architecture/{v3-v4-capability-closure.md → capability-parity-closure.md} +3 -3
  11. package/architecture/{v3-v4-live-capability-inventory.json → capability-parity-live-capability-inventory.json} +4 -4
  12. package/architecture/{v4-capability-state-machine-manifest.json → capability-state-machine-manifest.json} +2 -2
  13. package/architecture/{v4-capability-state-machine-manifest.schema.json → capability-state-machine-manifest.schema.json} +2 -2
  14. package/architecture/ci-lane-change-budget.json +384 -0
  15. package/architecture/{v4-cross-platform-adopter-qualification.json → cross-platform-adopter-qualification.json} +4 -4
  16. package/architecture/{v4-delivery-authority-parity.json → delivery-authority-parity.json} +17 -17
  17. package/architecture/{v4-delivery-warrant-shadow-bootstrap-plan.json → delivery-warrant-shadow-bootstrap-plan.json} +4 -4
  18. package/architecture/{v4-delivery-warrant-shadow-bootstrap-plan.md → delivery-warrant-shadow-bootstrap-plan.md} +7 -7
  19. package/architecture/{v4-floating-consumer-policy.json → floating-consumer-policy.json} +2 -2
  20. package/architecture/{v4-floating-consumer-policy.md → floating-consumer-policy.md} +1 -1
  21. package/architecture/implementation-naming.json +1273 -0
  22. package/architecture/internal-capabilities.json +201 -154
  23. package/architecture/maintainability-debt.json +205 -146
  24. package/architecture/maintainability-policy.json +37 -33
  25. package/architecture/{v4-next-development-parity.json → next-development-parity.json} +12 -12
  26. package/architecture/{v4-partial-mutation-recovery-qualification.json → partial-mutation-recovery-qualification.json} +8 -5
  27. package/architecture/{v4-platform-stage-checkpoints.json → platform-stage-checkpoints.json} +3 -3
  28. package/architecture/{v4-provider-operation-journal-contract.json → provider-operation-journal-contract.json} +10 -7
  29. package/architecture/publication-facade-patches.json +64 -0
  30. package/architecture/{v4-publication-rehearsal-parity.json → publication-rehearsal-parity.json} +4 -4
  31. package/architecture/{v4-release-activation-shadow-domain.json → release-activation-shadow-domain.json} +9 -6
  32. package/architecture/release-tail-contract-inventory.json +6 -6
  33. package/architecture/{v4-release-topology.json → release-topology.json} +163 -72
  34. package/architecture/{v4-release-train-parity.json → release-train-parity.json} +2 -2
  35. package/architecture/{v4-runtime-ref-resume-authority.json → runtime-ref-resume-authority.json} +1 -1
  36. package/architecture/{v4-runtime-semantic-closure.json → runtime-semantic-closure.json} +2 -2
  37. package/architecture/{v4-rust-libnode-bridge-evaluation.json → rust-libnode-bridge-evaluation.json} +3 -3
  38. package/architecture/{v4-rust-libnode-bridge-spike.md → rust-libnode-bridge-spike.md} +6 -6
  39. package/architecture/rust-wasm-production-authority.json +58 -0
  40. package/architecture/{v4-stable-publication-fence.json → stable-publication-fence.json} +7 -4
  41. package/architecture/{v4-stage-capsule-contract.json → stage-capsule-contract.json} +1 -1
  42. package/architecture/{v4-stage-capsule-qualification.json → stage-capsule-qualification.json} +8 -8
  43. package/architecture/{v4-stage-capsule-resume-planner.json → stage-capsule-resume-planner.json} +2 -2
  44. package/architecture/{v4-stage-capsule-store-contract.json → stage-capsule-store-contract.json} +4 -4
  45. package/architecture/{v4-tail-reseal-parity.json → tail-reseal-parity.json} +35 -33
  46. package/architecture/universal-workflow-bootstrap.json +176 -0
  47. package/architecture/universal-workflow-fault-campaign.json +72 -0
  48. package/architecture/universal-workflow-train-admission.json +40 -0
  49. package/architecture/workflow-taxonomy.json +1462 -0
  50. package/bin/buildchain.mjs +10 -10
  51. package/bin/internal/adopter-delivery-cli.mjs +9 -9
  52. package/contracts/buildchain-v2-residuals-v1.json +57 -48
  53. package/contracts/dev-delivery-authority-v2.schema.json +16 -2
  54. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  55. package/contracts/v4-canonical-contracts-v1.schema.json +1 -0
  56. package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/Cargo.lock +1 -1
  57. package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/Cargo.toml +1 -1
  58. package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/src/main.rs +3 -3
  59. package/dist/site/buildchain-contract.json +98 -53
  60. package/dist/site/buildchain-site.json +351 -102
  61. package/dist/site/capability-registry.json +7 -7
  62. package/dist/site/controller-registry.json +50 -13
  63. package/dist/site/kfd-claims.json +2773 -1052
  64. package/dist/site/kfd-upstream-aggregate.json +1 -1
  65. package/dist/site/manual-registry.json +14 -14
  66. package/dist/site/node-api-registry.json +13176 -10733
  67. package/dist/site/page-registry.json +332 -83
  68. package/dist/site/public-surface-audit.json +3227 -1222
  69. package/dist/site/publication-authority-registry.json +1135 -363
  70. package/dist/site/publication-registry.json +4 -4
  71. package/dist/site/release-provenance.json +18 -9
  72. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +16 -2
  73. package/dist/site/site-manifest.json +18 -18
  74. package/dist/site/workflow-registry.json +5367 -1931
  75. package/docs/MAP.md +5 -3
  76. package/docs/auditable-demo.md +1 -1
  77. package/docs/cli.md +21 -8
  78. package/docs/dev-delivery-warrant.md +1 -1
  79. package/docs/engineering-housekeeper.md +3 -3
  80. package/docs/kfd-support.md +26 -2
  81. package/docs/next-development-transition.md +26 -3
  82. package/docs/node-api-reference.md +618 -358
  83. package/docs/oci-publication.md +173 -0
  84. package/docs/publication-authority.md +2 -2
  85. package/docs/publish-transaction.md +36 -3
  86. package/docs/release-candidate.md +3 -3
  87. package/docs/release-flow.md +67 -19
  88. package/docs/release-governance.md +8 -8
  89. package/docs/release-passport.md +27 -2
  90. package/docs/reusable-build-surface.md +17 -1
  91. package/docs/v4-adopter-delivery.md +4 -4
  92. package/docs/v4-canonical-contracts.md +7 -7
  93. package/docs/v4-delivery-warrant-read-candidate.md +3 -3
  94. package/docs/v4-delivery-warrant-semantic-diff.md +3 -3
  95. package/docs/v4-production-release.md +77 -8
  96. package/docs/v4-publication-rehearsal.md +3 -3
  97. package/docs/v4-runtime-ref-resume-authority.md +2 -2
  98. package/docs/v4-rust-wasm-production-authority.md +58 -0
  99. package/docs/v4-stage-capsule.md +9 -9
  100. package/docs/v4-tail-reseal.md +2 -2
  101. package/docs/workflow-catalog.md +155 -0
  102. package/docs/workflow-path-migration.md +109 -0
  103. package/package.json +39 -24
  104. package/packages/compatibility/adopter-delivery.js +16 -0
  105. package/packages/compatibility/cross-platform-adopter-qualification.js +12 -0
  106. package/packages/compatibility/floating-consumer-policy.js +14 -0
  107. package/packages/compatibility/publication-qualification.js +11 -0
  108. package/packages/compatibility/publication-rehearsal.js +18 -0
  109. package/packages/compatibility/runtime-ref-resume-authority.js +13 -0
  110. package/packages/compatibility/tail-reseal-receipt.js +7 -0
  111. package/packages/compatibility/tail-reseal.js +11 -0
  112. package/packages/core/{v4-adopter-delivery-parity.js → adopter-delivery-parity.js} +12 -12
  113. package/packages/core/{v4-adopter-delivery.js → adopter-delivery.js} +24 -24
  114. package/packages/core/artifact-verification-envelope.js +5 -5
  115. package/packages/core/buildchain-contract.js +6 -6
  116. package/packages/core/buildchain-domain.wasm +0 -0
  117. package/packages/core/buildchain-kfd-claims.js +2 -2
  118. package/packages/core/buildchain-publication-authority.js +43 -26
  119. package/packages/core/{v4-canonical-contracts.js → canonical-contracts.js} +39 -103
  120. package/packages/core/ci-lane-change-budget.js +14 -1
  121. package/packages/core/controller-evidence.js +4 -1
  122. package/packages/core/{v4-cross-platform-adopter-qualification.js → cross-platform-adopter-qualification.js} +19 -19
  123. package/packages/core/{v4-delivery-warrant-fixture-runner.js → delivery-warrant-fixture-runner.js} +36 -32
  124. package/packages/core/{v4-delivery-warrant-read-candidate.js → delivery-warrant-read-candidate.js} +40 -40
  125. package/packages/core/{v4-delivery-warrant-semantic-diff-gate.js → delivery-warrant-semantic-diff-gate.js} +58 -59
  126. package/packages/core/{v4-delivery-warrant-shadow-adapter.js → delivery-warrant-shadow-adapter.js} +15 -15
  127. package/packages/core/dev-delivery-candidate-identity.js +40 -6
  128. package/packages/core/dev-delivery-execution-transfer.js +6 -6
  129. package/packages/core/dev-delivery-native-proof.js +12 -8
  130. package/packages/core/dev-delivery-warrant-legacy-recovery.js +1 -1
  131. package/packages/core/dev-delivery-warrant-native-compatibility.js +4 -4
  132. package/packages/core/dev-delivery-warrant-state.js +14 -15
  133. package/packages/core/dev-delivery-warrant.js +15 -5
  134. package/packages/core/domain-wasm-artifact.js +7 -0
  135. package/packages/core/domain-wasm.js +216 -0
  136. package/packages/core/{v4-floating-consumer-evidence.js → floating-consumer-evidence.js} +14 -14
  137. package/packages/core/{v4-floating-consumer-policy.js → floating-consumer-policy.js} +28 -30
  138. package/packages/core/{v4-floating-consumer-release-passport.js → floating-consumer-release-passport.js} +25 -25
  139. package/packages/core/github-governance-authority.js +4 -4
  140. package/packages/core/index.js +4 -8
  141. package/packages/core/kfd-adopter-manifest.js +46 -47
  142. package/packages/core/next-development-projection.js +26 -3
  143. package/packages/core/next-development-transition.js +5 -6
  144. package/packages/core/oci-compose-qualification.js +143 -0
  145. package/packages/core/oci-publication-bundle.js +281 -0
  146. package/packages/core/oci-publication-graph.js +206 -0
  147. package/packages/core/paper-agent-entry.js +30 -4
  148. package/packages/core/paper-fleet.js +1 -1
  149. package/packages/core/paper-runtime-channels.js +348 -0
  150. package/packages/core/paper-scaffold-content.js +10 -0
  151. package/packages/core/paper.js +37 -71
  152. package/packages/core/partial-mutation-recovery-qualification.js +18 -0
  153. package/packages/core/{v4-platform-stage-checkpoints.js → platform-stage-checkpoints.js} +37 -37
  154. package/packages/core/product-publication.js +59 -0
  155. package/packages/core/{v4-protected-publication-source.js → protected-publication-source.js} +22 -24
  156. package/packages/core/provider-operation-journal.js +62 -0
  157. package/packages/core/{v4-provider-readback-idempotency.js → provider-readback-idempotency.js} +40 -125
  158. package/packages/core/public-export-compatibility.js +33 -0
  159. package/packages/core/publication-development.js +72 -0
  160. package/packages/core/{v4-publication-qualification.js → publication-qualification.js} +17 -17
  161. package/packages/core/{v4-publication-rehearsal-capsule.js → publication-rehearsal-capsule.js} +23 -23
  162. package/packages/core/publication-rehearsal-projection.js +2 -2
  163. package/packages/core/{v4-publication-rehearsal-provider-bindings.js → publication-rehearsal-provider-bindings.js} +4 -4
  164. package/packages/core/publication-rehearsal-runtime.js +21 -21
  165. package/packages/core/{v4-publication-rehearsal.js → publication-rehearsal.js} +33 -33
  166. package/packages/core/publication-sealed-bundle.js +78 -13
  167. package/packages/core/release-activation-shadow.js +32 -0
  168. package/packages/core/release-candidate.js +6 -6
  169. package/packages/core/release-invocation.js +64 -0
  170. package/packages/core/release-line-dry-run.js +1 -1
  171. package/packages/core/release-passport-contract.js +5 -5
  172. package/packages/core/release-passport.js +41 -40
  173. package/packages/core/release-tail-product-capabilities.js +9 -0
  174. package/packages/core/release-tail-provider-plane.js +68 -1048
  175. package/packages/core/{v4-runtime-ref-resume-authority.js → runtime-ref-resume-authority.js} +36 -40
  176. package/packages/core/{v4-runtime-selector-persistence.js → runtime-selector-persistence.js} +7 -7
  177. package/packages/core/stable-publication-fence.js +28 -0
  178. package/packages/core/{v4-stage-capsule-local-store.js → stage-capsule-local-store.js} +56 -54
  179. package/packages/core/{v4-stage-capsule-qualification-campaign.js → stage-capsule-qualification-campaign.js} +37 -38
  180. package/packages/core/{v4-stage-capsule-qualification.js → stage-capsule-qualification.js} +28 -29
  181. package/packages/core/{v4-stage-capsule-resume-planner.js → stage-capsule-resume-planner.js} +29 -29
  182. package/packages/core/{v4-stage-capsule-store.js → stage-capsule-store.js} +59 -56
  183. package/packages/core/{v4-stage-capsule.js → stage-capsule.js} +45 -45
  184. package/packages/core/{v4-tail-reseal-contract.js → tail-reseal-contract.js} +6 -6
  185. package/packages/core/{v4-tail-reseal-github.js → tail-reseal-github.js} +12 -12
  186. package/packages/core/{v4-tail-reseal-receipt.js → tail-reseal-receipt.js} +22 -22
  187. package/packages/core/{v4-tail-reseal.js → tail-reseal.js} +29 -29
  188. package/packages/core/universal-workflow-bootstrap.js +586 -0
  189. package/scripts/{v4-architecture.mjs → architecture.mjs} +6 -6
  190. package/scripts/binary-publication-evidence.mjs +135 -0
  191. package/scripts/{v4-bridge-bootstrap.mjs → bridge-bootstrap.mjs} +14 -18
  192. package/scripts/{v4-bridge-evidence.mjs → bridge-evidence.mjs} +8 -8
  193. package/scripts/build-contract-core.mjs +1 -14
  194. package/scripts/build-domain-wasm.mjs +177 -0
  195. package/scripts/{v3-v4-capability-catalog.mjs → capability-parity-catalog.mjs} +19 -19
  196. package/scripts/check-action-bundles.mjs +12 -2
  197. package/scripts/{check-v3-v4-capability-inventory.mjs → check-capability-parity-inventory.mjs} +42 -42
  198. package/scripts/check-ci-lane-change-budget.mjs +4 -1
  199. package/scripts/check-core-mechanism-inventory.mjs +8 -4
  200. package/scripts/{check-v4-floating-consumer-policy-contract.mjs → check-floating-consumer-policy-contract.mjs} +10 -10
  201. package/scripts/check-implementation-naming.mjs +135 -0
  202. package/scripts/check-inventory.mjs +39 -47
  203. package/scripts/check-maintainability.mjs +25 -115
  204. package/scripts/{check-v4-public-dogfood-contract.mjs → check-public-dogfood-contract.mjs} +37 -24
  205. package/scripts/{check-v4-release-topology.mjs → check-release-topology.mjs} +131 -52
  206. package/scripts/{check-v4-runtime-semantic-closure.mjs → check-runtime-semantic-closure.mjs} +23 -17
  207. package/scripts/check-universal-workflow-bootstrap.mjs +266 -0
  208. package/scripts/check-workflow-taxonomy.mjs +6 -0
  209. package/scripts/{v4-consumer-policy.mjs → consumer-policy.mjs} +15 -15
  210. package/scripts/copy-domain-wasm.mjs +14 -0
  211. package/scripts/{v4-cross-platform-adopter-qualification.mjs → cross-platform-adopter-qualification.mjs} +9 -9
  212. package/scripts/{v4-declarative-promotion-admission.mjs → declarative-promotion-admission.mjs} +4 -4
  213. package/scripts/dev-delivery-authority-command-adapters.mjs +1 -1
  214. package/scripts/dev-delivery-authority.mjs +8 -8
  215. package/scripts/dev-delivery-source-proof-reuse.mjs +2 -1
  216. package/scripts/dev-delivery-warrant-options.mjs +15 -10
  217. package/scripts/dev-delivery-warrant-store.mjs +98 -13
  218. package/scripts/dev-delivery-warrant-transition.mjs +109 -0
  219. package/scripts/dev-delivery-warrant.mjs +80 -103
  220. package/scripts/dev-pr-auto-merge.mjs +15 -15
  221. package/scripts/dev-pr-delivery-warrant.mjs +1 -1
  222. package/scripts/generate-channel-build-workflow.mjs +7 -2
  223. package/scripts/generate-channel-promotion-workflow.mjs +19 -34
  224. package/scripts/generate-release-candidate-passport.mjs +23 -23
  225. package/scripts/generate-site-bundle.mjs +28 -28
  226. package/scripts/generate-universal-workflow-facades.mjs +498 -0
  227. package/scripts/generate-workflow-taxonomy.mjs +25 -0
  228. package/scripts/github-output.mjs +31 -0
  229. package/scripts/{v4-host-adapter.mjs → host-adapter.mjs} +1 -1
  230. package/scripts/implementation-references.mjs +25 -0
  231. package/scripts/init-repo.mjs +1 -1
  232. package/scripts/maintainability-metrics.mjs +16 -5
  233. package/scripts/maintainability-public-surface.mjs +115 -0
  234. package/scripts/next-development-review.mjs +313 -0
  235. package/scripts/oci-compose-preview.mjs +261 -0
  236. package/scripts/paper-work-fleet-cli.mjs +2 -0
  237. package/scripts/{v4-platform-stage-checkpoint-rehearsal.mjs → platform-stage-checkpoint-rehearsal.mjs} +17 -17
  238. package/scripts/{v4-product-publication-intent.mjs → product-publication-intent.mjs} +28 -13
  239. package/scripts/publication-candidate-kind.mjs +93 -0
  240. package/scripts/publication-candidate-sealer.mjs +16 -1
  241. package/scripts/{v4-publication-rehearsal-fixture.mjs → publication-rehearsal-fixture.mjs} +5 -5
  242. package/scripts/publication-settlement.mjs +211 -0
  243. package/scripts/release-asset-client.mjs +91 -0
  244. package/scripts/{v4-release-candidate-adapter.mjs → release-candidate-adapter.mjs} +4 -4
  245. package/scripts/release-candidate-resolver.mjs +24 -35
  246. package/scripts/release-tail.mjs +5 -5
  247. package/scripts/resume-from-candidate-run.mjs +35 -42
  248. package/scripts/site-capability-metadata.mjs +9 -0
  249. package/scripts/source-verification-evidence.mjs +344 -0
  250. package/scripts/stable-candidate-qualification.mjs +1 -1
  251. package/scripts/{v4-stage-capsule-qualification.mjs → stage-capsule-qualification.mjs} +62 -62
  252. package/scripts/{v4-stage-capsule-resume-rehearsal.mjs → stage-capsule-resume-rehearsal.mjs} +6 -6
  253. package/scripts/{v4-tail-reseal-macos-rehearsal.mjs → tail-reseal-macos-rehearsal.mjs} +9 -9
  254. package/scripts/{v4-tail-reseal.mjs → tail-reseal.mjs} +19 -19
  255. package/scripts/universal-facade-maintainability.mjs +91 -0
  256. package/scripts/universal-workflow-backflow.mjs +212 -0
  257. package/scripts/universal-workflow-engine.mjs +620 -0
  258. package/scripts/universal-workflow-self-dogfood.mjs +205 -0
  259. package/scripts/verify-version-state-delta.mjs +175 -0
  260. package/scripts/{v4-warrant-shadow-plan.mjs → warrant-shadow-plan.mjs} +6 -6
  261. package/scripts/workflow-taxonomy.mjs +507 -0
  262. package/templates/native-dev-delivery.yml +4 -7
  263. package/templates/universal-buildchain-bootstrap-recovery.yml +282 -0
  264. package/templates/universal-buildchain-bootstrap.yml +28 -0
  265. package/actions/v4-release-candidate-promote/README.md +0 -3
  266. package/packages/core/v4-partial-mutation-recovery-qualification.js +0 -395
  267. package/packages/core/v4-product-publication.js +0 -387
  268. package/packages/core/v4-provider-operation-journal.js +0 -531
  269. package/packages/core/v4-release-activation-shadow.js +0 -519
  270. package/packages/core/v4-release-invocation.js +0 -425
  271. package/packages/core/v4-stable-publication-fence.js +0 -357
  272. /package/architecture/{v4-adopter-delivery-parity.json → adopter-delivery-parity.json} +0 -0
  273. /package/architecture/{v3-core-mechanism-inventory.json → baseline-core-mechanism-inventory.json} +0 -0
  274. /package/architecture/{v4-canonical-contract-fixtures.json → canonical-contract-fixtures.json} +0 -0
  275. /package/architecture/{v4-compatibility-facts-parity.json → compatibility-facts-parity.json} +0 -0
  276. /package/architecture/{v4-delivery-warrant-shadow-bootstrap-plan.schema.json → delivery-warrant-shadow-bootstrap-plan.schema.json} +0 -0
  277. /package/architecture/{v4-delivery-warrant-shadow-fixtures.json → delivery-warrant-shadow-fixtures.json} +0 -0
  278. /package/architecture/{v4-delivery-warrant-shadow-fixtures.schema.json → delivery-warrant-shadow-fixtures.schema.json} +0 -0
  279. /package/architecture/{v4-exception-ledger.json → exception-ledger.json} +0 -0
  280. /package/architecture/{v4-exception-ledger.schema.json → exception-ledger.schema.json} +0 -0
  281. /package/architecture/{v4-release-invocation-fixtures.json → release-invocation-fixtures.json} +0 -0
@@ -14,19 +14,19 @@
14
14
  },
15
15
  "runtimeContract": {
16
16
  "contract": "kungfu-buildchain-runtime-contract-world",
17
- "compatibilityDigest": "sha256:20411029d83211dff426fb6535a608902129844a5ccb4788db77d3f81becb839",
17
+ "compatibilityDigest": "sha256:a0d4f48bb6236f6932466cfb2802b866035c5be5861a9d41c2975307a640fb18",
18
18
  "majorLine": "v4"
19
19
  },
20
20
  "publicSurfaceReverseAudit": {
21
21
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
22
22
  "path": "dist/site/public-surface-audit.json",
23
23
  "status": "passed",
24
- "sha256": "8333ebb2a3177f40749363fc4dfce66e9c49928ad43c9b025d177344d068e124",
24
+ "sha256": "53f821889881caa22a05f6f3d6dd786ce346e891ff0ab29b6ca072fa300f0a28",
25
25
  "summary": {
26
26
  "cliCommandCount": 117,
27
- "workflowCount": 77,
27
+ "workflowCount": 115,
28
28
  "actionCount": 8,
29
- "sitePageCount": 84,
29
+ "sitePageCount": 88,
30
30
  "docCommandRefCount": 1050,
31
31
  "failureCount": 0
32
32
  },
@@ -246,12 +246,12 @@
246
246
  "contract": "kungfu-buildchain-public-surface-reverse-audit",
247
247
  "path": "dist/site/public-surface-audit.json",
248
248
  "status": "passed",
249
- "sha256": "8333ebb2a3177f40749363fc4dfce66e9c49928ad43c9b025d177344d068e124",
249
+ "sha256": "53f821889881caa22a05f6f3d6dd786ce346e891ff0ab29b6ca072fa300f0a28",
250
250
  "summary": {
251
251
  "cliCommandCount": 117,
252
- "workflowCount": 77,
252
+ "workflowCount": 115,
253
253
  "actionCount": 8,
254
- "sitePageCount": 84,
254
+ "sitePageCount": 88,
255
255
  "docCommandRefCount": 1050,
256
256
  "failureCount": 0
257
257
  },
@@ -332,6 +332,18 @@
332
332
  "public": true,
333
333
  "plane": "action"
334
334
  },
335
+ {
336
+ "id": "doc:actions/release-candidate-promote/README.md",
337
+ "name": "actions/release-candidate-promote/README.md",
338
+ "kind": "documentation",
339
+ "sourcePath": "actions/release-candidate-promote/README.md",
340
+ "evidencePath": "actions/release-candidate-promote/README.md",
341
+ "availability": "shipped",
342
+ "visibility": "public",
343
+ "participantFacing": true,
344
+ "public": true,
345
+ "plane": "action"
346
+ },
335
347
  {
336
348
  "id": "doc:actions/release-tail/README.md",
337
349
  "name": "actions/release-tail/README.md",
@@ -368,18 +380,6 @@
368
380
  "public": true,
369
381
  "plane": "action"
370
382
  },
371
- {
372
- "id": "doc:actions/v4-release-candidate-promote/README.md",
373
- "name": "actions/v4-release-candidate-promote/README.md",
374
- "kind": "documentation",
375
- "sourcePath": "actions/v4-release-candidate-promote/README.md",
376
- "evidencePath": "actions/v4-release-candidate-promote/README.md",
377
- "availability": "shipped",
378
- "visibility": "public",
379
- "participantFacing": true,
380
- "public": true,
381
- "plane": "action"
382
- },
383
383
  {
384
384
  "id": "doc:actions/validate-config/README.md",
385
385
  "name": "actions/validate-config/README.md",
@@ -1632,8 +1632,8 @@
1632
1632
  "id": "export:./v4-floating-consumer-policy",
1633
1633
  "name": "@kungfu-tech/buildchain/v4-floating-consumer-policy",
1634
1634
  "kind": "package-export",
1635
- "sourcePath": "packages/core/v4-floating-consumer-policy.js",
1636
- "evidencePath": "packages/core/v4-floating-consumer-policy.js",
1635
+ "sourcePath": "packages/compatibility/floating-consumer-policy.js",
1636
+ "evidencePath": "packages/compatibility/floating-consumer-policy.js",
1637
1637
  "availability": "shipped",
1638
1638
  "visibility": "public",
1639
1639
  "participantFacing": true,
@@ -1644,8 +1644,8 @@
1644
1644
  "id": "export:./v4-runtime-ref-resume-authority",
1645
1645
  "name": "@kungfu-tech/buildchain/v4-runtime-ref-resume-authority",
1646
1646
  "kind": "package-export",
1647
- "sourcePath": "packages/core/v4-runtime-ref-resume-authority.js",
1648
- "evidencePath": "packages/core/v4-runtime-ref-resume-authority.js",
1647
+ "sourcePath": "packages/compatibility/runtime-ref-resume-authority.js",
1648
+ "evidencePath": "packages/compatibility/runtime-ref-resume-authority.js",
1649
1649
  "availability": "shipped",
1650
1650
  "visibility": "public",
1651
1651
  "participantFacing": true,
@@ -1656,8 +1656,8 @@
1656
1656
  "id": "export:./v4-tail-reseal",
1657
1657
  "name": "@kungfu-tech/buildchain/v4-tail-reseal",
1658
1658
  "kind": "package-export",
1659
- "sourcePath": "packages/core/v4-tail-reseal.js",
1660
- "evidencePath": "packages/core/v4-tail-reseal.js",
1659
+ "sourcePath": "packages/compatibility/tail-reseal.js",
1660
+ "evidencePath": "packages/compatibility/tail-reseal.js",
1661
1661
  "availability": "shipped",
1662
1662
  "visibility": "public",
1663
1663
  "participantFacing": true,
@@ -1668,8 +1668,8 @@
1668
1668
  "id": "export:./v4-tail-reseal-receipt",
1669
1669
  "name": "@kungfu-tech/buildchain/v4-tail-reseal-receipt",
1670
1670
  "kind": "package-export",
1671
- "sourcePath": "packages/core/v4-tail-reseal-receipt.js",
1672
- "evidencePath": "packages/core/v4-tail-reseal-receipt.js",
1671
+ "sourcePath": "packages/compatibility/tail-reseal-receipt.js",
1672
+ "evidencePath": "packages/compatibility/tail-reseal-receipt.js",
1673
1673
  "availability": "shipped",
1674
1674
  "visibility": "public",
1675
1675
  "participantFacing": true,
@@ -1680,8 +1680,8 @@
1680
1680
  "id": "export:./v4-publication-rehearsal",
1681
1681
  "name": "@kungfu-tech/buildchain/v4-publication-rehearsal",
1682
1682
  "kind": "package-export",
1683
- "sourcePath": "packages/core/v4-publication-rehearsal.js",
1684
- "evidencePath": "packages/core/v4-publication-rehearsal.js",
1683
+ "sourcePath": "packages/compatibility/publication-rehearsal.js",
1684
+ "evidencePath": "packages/compatibility/publication-rehearsal.js",
1685
1685
  "availability": "shipped",
1686
1686
  "visibility": "public",
1687
1687
  "participantFacing": true,
@@ -1716,8 +1716,8 @@
1716
1716
  "id": "export:./v4-publication-qualification",
1717
1717
  "name": "@kungfu-tech/buildchain/v4-publication-qualification",
1718
1718
  "kind": "package-export",
1719
- "sourcePath": "packages/core/v4-publication-qualification.js",
1720
- "evidencePath": "packages/core/v4-publication-qualification.js",
1719
+ "sourcePath": "packages/compatibility/publication-qualification.js",
1720
+ "evidencePath": "packages/compatibility/publication-qualification.js",
1721
1721
  "availability": "shipped",
1722
1722
  "visibility": "public",
1723
1723
  "participantFacing": true,
@@ -1836,8 +1836,8 @@
1836
1836
  "id": "export:./v4-adopter-delivery",
1837
1837
  "name": "@kungfu-tech/buildchain/v4-adopter-delivery",
1838
1838
  "kind": "package-export",
1839
- "sourcePath": "packages/core/v4-adopter-delivery.js",
1840
- "evidencePath": "packages/core/v4-adopter-delivery.js",
1839
+ "sourcePath": "packages/compatibility/adopter-delivery.js",
1840
+ "evidencePath": "packages/compatibility/adopter-delivery.js",
1841
1841
  "availability": "shipped",
1842
1842
  "visibility": "public",
1843
1843
  "participantFacing": true,
@@ -1848,8 +1848,8 @@
1848
1848
  "id": "export:./v4-cross-platform-adopter-qualification",
1849
1849
  "name": "@kungfu-tech/buildchain/v4-cross-platform-adopter-qualification",
1850
1850
  "kind": "package-export",
1851
- "sourcePath": "packages/core/v4-cross-platform-adopter-qualification.js",
1852
- "evidencePath": "packages/core/v4-cross-platform-adopter-qualification.js",
1851
+ "sourcePath": "packages/compatibility/cross-platform-adopter-qualification.js",
1852
+ "evidencePath": "packages/compatibility/cross-platform-adopter-qualification.js",
1853
1853
  "availability": "shipped",
1854
1854
  "visibility": "public",
1855
1855
  "participantFacing": true,
@@ -2215,6 +2215,114 @@
2215
2215
  "participantFacing": true,
2216
2216
  "public": true,
2217
2217
  "packageExport": "./buildchain-kfd-claims"
2218
+ },
2219
+ {
2220
+ "id": "export:./oci-publication",
2221
+ "name": "@kungfu-tech/buildchain/oci-publication",
2222
+ "kind": "package-export",
2223
+ "sourcePath": "packages/core/oci-publication-bundle.js",
2224
+ "evidencePath": "packages/core/oci-publication-bundle.js",
2225
+ "availability": "shipped",
2226
+ "visibility": "public",
2227
+ "participantFacing": true,
2228
+ "public": true,
2229
+ "packageExport": "./oci-publication"
2230
+ },
2231
+ {
2232
+ "id": "export:./floating-consumer-policy",
2233
+ "name": "@kungfu-tech/buildchain/floating-consumer-policy",
2234
+ "kind": "package-export",
2235
+ "sourcePath": "packages/core/floating-consumer-policy.js",
2236
+ "evidencePath": "packages/core/floating-consumer-policy.js",
2237
+ "availability": "shipped",
2238
+ "visibility": "public",
2239
+ "participantFacing": true,
2240
+ "public": true,
2241
+ "packageExport": "./floating-consumer-policy"
2242
+ },
2243
+ {
2244
+ "id": "export:./runtime-ref-resume-authority",
2245
+ "name": "@kungfu-tech/buildchain/runtime-ref-resume-authority",
2246
+ "kind": "package-export",
2247
+ "sourcePath": "packages/core/runtime-ref-resume-authority.js",
2248
+ "evidencePath": "packages/core/runtime-ref-resume-authority.js",
2249
+ "availability": "shipped",
2250
+ "visibility": "public",
2251
+ "participantFacing": true,
2252
+ "public": true,
2253
+ "packageExport": "./runtime-ref-resume-authority"
2254
+ },
2255
+ {
2256
+ "id": "export:./tail-reseal",
2257
+ "name": "@kungfu-tech/buildchain/tail-reseal",
2258
+ "kind": "package-export",
2259
+ "sourcePath": "packages/core/tail-reseal.js",
2260
+ "evidencePath": "packages/core/tail-reseal.js",
2261
+ "availability": "shipped",
2262
+ "visibility": "public",
2263
+ "participantFacing": true,
2264
+ "public": true,
2265
+ "packageExport": "./tail-reseal"
2266
+ },
2267
+ {
2268
+ "id": "export:./tail-reseal-receipt",
2269
+ "name": "@kungfu-tech/buildchain/tail-reseal-receipt",
2270
+ "kind": "package-export",
2271
+ "sourcePath": "packages/core/tail-reseal-receipt.js",
2272
+ "evidencePath": "packages/core/tail-reseal-receipt.js",
2273
+ "availability": "shipped",
2274
+ "visibility": "public",
2275
+ "participantFacing": true,
2276
+ "public": true,
2277
+ "packageExport": "./tail-reseal-receipt"
2278
+ },
2279
+ {
2280
+ "id": "export:./publication-rehearsal",
2281
+ "name": "@kungfu-tech/buildchain/publication-rehearsal",
2282
+ "kind": "package-export",
2283
+ "sourcePath": "packages/core/publication-rehearsal.js",
2284
+ "evidencePath": "packages/core/publication-rehearsal.js",
2285
+ "availability": "shipped",
2286
+ "visibility": "public",
2287
+ "participantFacing": true,
2288
+ "public": true,
2289
+ "packageExport": "./publication-rehearsal"
2290
+ },
2291
+ {
2292
+ "id": "export:./publication-qualification",
2293
+ "name": "@kungfu-tech/buildchain/publication-qualification",
2294
+ "kind": "package-export",
2295
+ "sourcePath": "packages/core/publication-qualification.js",
2296
+ "evidencePath": "packages/core/publication-qualification.js",
2297
+ "availability": "shipped",
2298
+ "visibility": "public",
2299
+ "participantFacing": true,
2300
+ "public": true,
2301
+ "packageExport": "./publication-qualification"
2302
+ },
2303
+ {
2304
+ "id": "export:./adopter-delivery",
2305
+ "name": "@kungfu-tech/buildchain/adopter-delivery",
2306
+ "kind": "package-export",
2307
+ "sourcePath": "packages/core/adopter-delivery.js",
2308
+ "evidencePath": "packages/core/adopter-delivery.js",
2309
+ "availability": "shipped",
2310
+ "visibility": "public",
2311
+ "participantFacing": true,
2312
+ "public": true,
2313
+ "packageExport": "./adopter-delivery"
2314
+ },
2315
+ {
2316
+ "id": "export:./cross-platform-adopter-qualification",
2317
+ "name": "@kungfu-tech/buildchain/cross-platform-adopter-qualification",
2318
+ "kind": "package-export",
2319
+ "sourcePath": "packages/core/cross-platform-adopter-qualification.js",
2320
+ "evidencePath": "packages/core/cross-platform-adopter-qualification.js",
2321
+ "availability": "shipped",
2322
+ "visibility": "public",
2323
+ "participantFacing": true,
2324
+ "public": true,
2325
+ "packageExport": "./cross-platform-adopter-qualification"
2218
2326
  }
2219
2327
  ],
2220
2328
  "siteConsumptionContracts": [
@@ -3854,7 +3962,7 @@
3854
3962
  "visibility": "public",
3855
3963
  "participantFacing": true,
3856
3964
  "public": true,
3857
- "inputCount": 11,
3965
+ "inputCount": 12,
3858
3966
  "inputs": [
3859
3967
  "adapter-arguments-json",
3860
3968
  "adapter-path",
@@ -3866,7 +3974,8 @@
3866
3974
  "require-trusted-event",
3867
3975
  "source-artifact-digest",
3868
3976
  "source-artifact-name",
3869
- "source-ref"
3977
+ "source-ref",
3978
+ "universal-request-json"
3870
3979
  ],
3871
3980
  "reverseAuditSource": ".github/workflows"
3872
3981
  },
@@ -3880,7 +3989,7 @@
3880
3989
  "visibility": "public",
3881
3990
  "participantFacing": true,
3882
3991
  "public": true,
3883
- "inputCount": 15,
3992
+ "inputCount": 16,
3884
3993
  "inputs": [
3885
3994
  "auto-admission",
3886
3995
  "buildchain-ref",
@@ -3896,21 +4005,49 @@
3896
4005
  "publication-version",
3897
4006
  "release-tag",
3898
4007
  "source-sha",
3899
- "target-ref"
4008
+ "target-ref",
4009
+ "universal-request-json"
3900
4010
  ],
3901
4011
  "reverseAuditSource": ".github/workflows"
3902
4012
  },
3903
4013
  {
3904
- "id": "workflow:.build",
3905
- "name": "workflow:.build",
4014
+ "id": "workflow:.build-demo-adapter",
4015
+ "name": "workflow:.build-demo-adapter",
3906
4016
  "kind": "workflow",
3907
- "sourcePath": ".github/workflows/.build.yml",
3908
- "evidencePath": ".github/workflows/.build.yml",
4017
+ "sourcePath": ".github/workflows/.build-demo-adapter.yml",
4018
+ "evidencePath": ".github/workflows/.build-demo-adapter.yml",
4019
+ "availability": "shipped",
4020
+ "visibility": "public",
4021
+ "participantFacing": true,
4022
+ "public": true,
4023
+ "inputCount": 12,
4024
+ "inputs": [
4025
+ "adapter-arguments-json",
4026
+ "adapter-path",
4027
+ "artifact-retention-days",
4028
+ "buildchain-repository",
4029
+ "media-profile",
4030
+ "render-media",
4031
+ "renderer-image",
4032
+ "require-trusted-event",
4033
+ "source-artifact-digest",
4034
+ "source-artifact-name",
4035
+ "source-ref",
4036
+ "universal-request-json"
4037
+ ],
4038
+ "reverseAuditSource": ".github/workflows"
4039
+ },
4040
+ {
4041
+ "id": "workflow:.build-engine",
4042
+ "name": "workflow:.build-engine",
4043
+ "kind": "workflow",
4044
+ "sourcePath": ".github/workflows/.build-engine.yml",
4045
+ "evidencePath": ".github/workflows/.build-engine.yml",
3909
4046
  "availability": "shipped",
3910
4047
  "visibility": "public",
3911
4048
  "participantFacing": true,
3912
4049
  "public": true,
3913
- "inputCount": 93,
4050
+ "inputCount": 94,
3914
4051
  "inputs": [
3915
4052
  "artifact-compression-level",
3916
4053
  "artifact-finalization-command",
@@ -4001,6 +4138,7 @@
4001
4138
  "setup-rust",
4002
4139
  "shifu-cache-profile-digest",
4003
4140
  "shifu-cache-profile-ref",
4141
+ "universal-request-json",
4004
4142
  "untrusted-policy",
4005
4143
  "verify-command",
4006
4144
  "verify-substage-evidence-path",
@@ -4009,57 +4147,16 @@
4009
4147
  "reverseAuditSource": ".github/workflows"
4010
4148
  },
4011
4149
  {
4012
- "id": "workflow:.bump-minor-version",
4013
- "name": "workflow:.bump-minor-version",
4014
- "kind": "workflow",
4015
- "sourcePath": ".github/workflows/.bump-minor-version.yml",
4016
- "evidencePath": ".github/workflows/.bump-minor-version.yml",
4017
- "availability": "shipped",
4018
- "visibility": "public",
4019
- "participantFacing": true,
4020
- "public": true,
4021
- "inputCount": 0,
4022
- "inputs": [],
4023
- "reverseAuditSource": ".github/workflows"
4024
- },
4025
- {
4026
- "id": "workflow:.declarative-auditable-demo",
4027
- "name": "workflow:.declarative-auditable-demo",
4028
- "kind": "workflow",
4029
- "sourcePath": ".github/workflows/.declarative-auditable-demo.yml",
4030
- "evidencePath": ".github/workflows/.declarative-auditable-demo.yml",
4031
- "availability": "shipped",
4032
- "visibility": "public",
4033
- "participantFacing": true,
4034
- "public": true,
4035
- "inputCount": 12,
4036
- "inputs": [
4037
- "artifact-retention-days",
4038
- "binary-artifact-digest",
4039
- "binary-artifact-name",
4040
- "buildchain-repository",
4041
- "materialize",
4042
- "materialize-base-ref",
4043
- "media-profile",
4044
- "render-failure-advisory",
4045
- "render-media",
4046
- "renderer-image",
4047
- "scenario-path",
4048
- "source-ref"
4049
- ],
4050
- "reverseAuditSource": ".github/workflows"
4051
- },
4052
- {
4053
- "id": "workflow:.gate-profile",
4054
- "name": "workflow:.gate-profile",
4150
+ "id": "workflow:.build-gate-profile",
4151
+ "name": "workflow:.build-gate-profile",
4055
4152
  "kind": "workflow",
4056
- "sourcePath": ".github/workflows/.gate-profile.yml",
4057
- "evidencePath": ".github/workflows/.gate-profile.yml",
4153
+ "sourcePath": ".github/workflows/.build-gate-profile.yml",
4154
+ "evidencePath": ".github/workflows/.build-gate-profile.yml",
4058
4155
  "availability": "shipped",
4059
4156
  "visibility": "public",
4060
4157
  "participantFacing": true,
4061
4158
  "public": true,
4062
- "inputCount": 30,
4159
+ "inputCount": 31,
4063
4160
  "inputs": [
4064
4161
  "artifact-name",
4065
4162
  "artifact-retention-days",
@@ -4089,607 +4186,1654 @@
4089
4186
  "shifu-cache-profile-digest",
4090
4187
  "shifu-cache-profile-ref",
4091
4188
  "source-ref",
4189
+ "universal-request-json",
4092
4190
  "untrusted-policy",
4093
4191
  "working-directory"
4094
4192
  ],
4095
4193
  "reverseAuditSource": ".github/workflows"
4096
4194
  },
4097
4195
  {
4098
- "id": "workflow:.publication-authority",
4099
- "name": "workflow:.publication-authority",
4196
+ "id": "workflow:.build-release-verify-compat",
4197
+ "name": "workflow:.build-release-verify-compat",
4100
4198
  "kind": "workflow",
4101
- "sourcePath": ".github/workflows/.publication-authority.yml",
4102
- "evidencePath": ".github/workflows/.publication-authority.yml",
4199
+ "sourcePath": ".github/workflows/.build-release-verify-compat.yml",
4200
+ "evidencePath": ".github/workflows/.build-release-verify-compat.yml",
4103
4201
  "availability": "shipped",
4104
4202
  "visibility": "public",
4105
4203
  "participantFacing": true,
4106
4204
  "public": true,
4107
- "inputCount": 37,
4205
+ "inputCount": 42,
4108
4206
  "inputs": [
4109
- "admission-json",
4110
- "authority-workflow-path",
4111
- "auto-admission",
4112
- "auto-admission-kind",
4113
- "auto-no-gate",
4207
+ "auto-approve-enabled",
4208
+ "aws-ci-region",
4209
+ "aws-user-region",
4210
+ "bucket-staging-ci",
4211
+ "bucket-staging-user",
4212
+ "build-container-enabled",
4213
+ "build-runner-linux",
4214
+ "build-runner-linux-labels",
4215
+ "build-runner-macos",
4216
+ "build-runner-macos-labels",
4217
+ "build-runner-windows",
4218
+ "build-runner-windows-labels",
4219
+ "build-timeout-minutes",
4114
4220
  "buildchain-ref",
4115
4221
  "buildchain-repository",
4116
- "consumer-gate-command",
4117
- "consumer-gate-controller-sha",
4118
- "consumer-gate-evidence-source-sha",
4119
- "consumer-gate-evidence-source-tree",
4120
- "consumer-predicate-digest",
4121
- "consumer-predicate-id",
4122
- "consumer-qualification-required",
4123
- "control-plane-audit-json",
4124
- "dry-run",
4125
- "evidence-controller-artifact",
4126
- "evidence-manifest-pattern",
4127
- "evidence-passport-artifact",
4128
- "evidence-payload-pattern",
4129
- "evidence-publication-artifact",
4130
- "evidence-repository",
4131
- "evidence-run-id",
4132
- "evidence-summary-artifact",
4133
- "expected-json",
4134
- "gate-aggregate-json",
4135
- "github-governance-receipt-json",
4136
- "package-name",
4137
- "product",
4138
- "publication-target",
4139
- "publication-version",
4140
- "publisher-workflow-path",
4141
- "required-status-check",
4142
- "runner-provenance-json",
4143
- "source-sha",
4144
- "target-ref",
4145
- "used-nonces-json"
4222
+ "builder-container",
4223
+ "code-signing-macos",
4224
+ "code-signing-windows",
4225
+ "collaborator-automation-enabled",
4226
+ "enable-linux",
4227
+ "enable-macos",
4228
+ "enable-windows",
4229
+ "find-dependencies",
4230
+ "java-version",
4231
+ "manager",
4232
+ "max-build-attempts",
4233
+ "max-preview-links",
4234
+ "node-version",
4235
+ "pipenv-version",
4236
+ "poetry-version",
4237
+ "prebuild",
4238
+ "preview-files",
4239
+ "publish-aws-ci",
4240
+ "publish-aws-user",
4241
+ "publish-github-npm",
4242
+ "publish-versioning",
4243
+ "python-version",
4244
+ "setup-env-timeout-minutes",
4245
+ "setup-python-enabled",
4246
+ "universal-request-json",
4247
+ "use-pipenv",
4248
+ "use-poetry"
4146
4249
  ],
4147
4250
  "reverseAuditSource": ".github/workflows"
4148
4251
  },
4149
4252
  {
4150
- "id": "workflow:.release-candidate-promote",
4151
- "name": "workflow:.release-candidate-promote",
4253
+ "id": "workflow:.build-sam-verify-compat",
4254
+ "name": "workflow:.build-sam-verify-compat",
4152
4255
  "kind": "workflow",
4153
- "sourcePath": ".github/workflows/.release-candidate-promote.yml",
4154
- "evidencePath": ".github/workflows/.release-candidate-promote.yml",
4256
+ "sourcePath": ".github/workflows/.build-sam-verify-compat.yml",
4257
+ "evidencePath": ".github/workflows/.build-sam-verify-compat.yml",
4155
4258
  "availability": "shipped",
4156
4259
  "visibility": "public",
4157
4260
  "participantFacing": true,
4158
4261
  "public": true,
4159
- "inputCount": 121,
4262
+ "inputCount": 5,
4160
4263
  "inputs": [
4161
- "allow-repository",
4162
- "artifact-name",
4163
- "artifact-patterns",
4164
- "branch-protection-bypass-apps",
4165
- "branch-protection-bypass-teams",
4166
- "branch-protection-bypass-users",
4167
- "buildchain-alpha-contract-lock-path",
4168
- "buildchain-contract-compatibility-policy",
4169
- "buildchain-contract-drift-issue-mode",
4170
- "buildchain-contract-lock-path",
4171
- "buildchain-expected-channel",
4172
- "buildchain-expected-major",
4173
- "buildchain-ref",
4174
- "buildchain-repository",
4175
- "buildchain-stable-contract-lock-path",
4176
- "channel",
4177
- "declarative-release-tail",
4178
- "dry-run",
4264
+ "aws-region",
4265
+ "aws-role",
4266
+ "aws-root",
4267
+ "manager",
4268
+ "universal-request-json"
4269
+ ],
4270
+ "reverseAuditSource": ".github/workflows"
4271
+ },
4272
+ {
4273
+ "id": "workflow:.build-wheel-verify-compat",
4274
+ "name": "workflow:.build-wheel-verify-compat",
4275
+ "kind": "workflow",
4276
+ "sourcePath": ".github/workflows/.build-wheel-verify-compat.yml",
4277
+ "evidencePath": ".github/workflows/.build-wheel-verify-compat.yml",
4278
+ "availability": "shipped",
4279
+ "visibility": "public",
4280
+ "participantFacing": true,
4281
+ "public": true,
4282
+ "inputCount": 6,
4283
+ "inputs": [
4284
+ "aws-user-region",
4285
+ "bucket-release",
4286
+ "max-preview-links",
4287
+ "node-version",
4288
+ "preview-files",
4289
+ "universal-request-json"
4290
+ ],
4291
+ "reverseAuditSource": ".github/workflows"
4292
+ },
4293
+ {
4294
+ "id": "workflow:.build",
4295
+ "name": "workflow:.build",
4296
+ "kind": "workflow",
4297
+ "sourcePath": ".github/workflows/.build.yml",
4298
+ "evidencePath": ".github/workflows/.build.yml",
4299
+ "availability": "shipped",
4300
+ "visibility": "public",
4301
+ "participantFacing": true,
4302
+ "public": true,
4303
+ "inputCount": 94,
4304
+ "inputs": [
4305
+ "artifact-compression-level",
4306
+ "artifact-finalization-command",
4307
+ "artifact-finalization-on-platform",
4308
+ "artifact-name",
4309
+ "artifact-name-template",
4310
+ "artifact-paths",
4311
+ "artifact-relay-s3-bucket",
4312
+ "artifact-relay-s3-download-role-arn",
4313
+ "artifact-relay-s3-oidc-audience",
4314
+ "artifact-relay-s3-prefix",
4315
+ "artifact-relay-s3-region",
4316
+ "artifact-relay-s3-role-arn",
4317
+ "artifact-relay-s3-upload-role-arn",
4318
+ "artifact-retention-days",
4319
+ "artifact-signing-request-upload-no-proxy",
4320
+ "artifact-transfer-mode",
4321
+ "aws-codebuild-project",
4322
+ "aws-ec2-macos-runner-label",
4323
+ "aws-ec2-windows-runner-label",
4324
+ "build-command",
4325
+ "buildchain-contract-compatibility-policy",
4326
+ "buildchain-contract-drift-issue-mode",
4327
+ "buildchain-contract-expected-channel",
4328
+ "buildchain-contract-expected-major",
4329
+ "buildchain-contract-lock-path",
4330
+ "buildchain-expected-channel",
4331
+ "buildchain-expected-major",
4332
+ "buildchain-ref",
4333
+ "buildchain-repository",
4334
+ "buildchain-visible-workflow",
4335
+ "cache-dependency-lock-root",
4336
+ "cache-policy-root",
4337
+ "cache-toolchain-root",
4338
+ "cargo-registry-index",
4339
+ "checkout-cache-fallback",
4340
+ "checkout-cache-fetch-attempts",
4341
+ "checkout-cache-github-timeout-seconds",
4342
+ "checkout-cache-mirror-url-template",
4343
+ "checkout-cache-mode",
4344
+ "checkout-cache-reference-repository-template",
4345
+ "checkout-cache-timeout-seconds",
4346
+ "checkout-history-mode",
4347
+ "compiler-cache-platforms-json",
4348
+ "compiler-cache-provider",
4349
+ "compiler-cache-required",
4350
+ "control-runner-json",
4351
+ "credential-island-caller-owned",
4352
+ "credential-island-environment",
4353
+ "credential-island-macos-app-path",
4354
+ "credential-island-macos-platform-id",
4355
+ "expected-artifacts-json",
4356
+ "fail-fast",
4357
+ "gate-profile-aggregate-json",
4358
+ "github-artifact-attestation-platform-id",
4359
+ "github-artifact-attestation-signer-sha",
4360
+ "github-artifact-attestation-subject-path",
4361
+ "install-command",
4362
+ "kfd-agent-hub",
4363
+ "lifecycle-timeout-minutes",
4364
+ "linux-container-image",
4365
+ "linux-container-preset",
4366
+ "node-version",
4367
+ "platforms-json",
4368
+ "pre-upload-transport-smoke-artifact-root",
4369
+ "pre-upload-transport-smoke-scenario-path",
4370
+ "process-sample-interval-ms",
4371
+ "process-summary-path",
4372
+ "publish-anchor-request-json",
4373
+ "publish-channel",
4374
+ "publish-refs-json",
4375
+ "publish-registry",
4376
+ "publish-source-ref",
4377
+ "release-candidate",
4378
+ "release-candidate-family-evidence-json",
4379
+ "requested-parallelism",
4380
+ "require-build",
4381
+ "require-install",
4382
+ "require-trusted-event",
4383
+ "require-verify",
4384
+ "runner-preset",
4385
+ "rust-toolchain",
4386
+ "rustup-dist-server",
4387
+ "rustup-update-root",
4388
+ "sample-process-tree",
4389
+ "self-hosted-offline-fallback",
4390
+ "setup-node",
4391
+ "setup-rust",
4392
+ "shifu-cache-profile-digest",
4393
+ "shifu-cache-profile-ref",
4394
+ "universal-request-json",
4395
+ "untrusted-policy",
4396
+ "verify-command",
4397
+ "verify-substage-evidence-path",
4398
+ "working-directory"
4399
+ ],
4400
+ "reverseAuditSource": ".github/workflows"
4401
+ },
4402
+ {
4403
+ "id": "workflow:.bump-minor-version",
4404
+ "name": "workflow:.bump-minor-version",
4405
+ "kind": "workflow",
4406
+ "sourcePath": ".github/workflows/.bump-minor-version.yml",
4407
+ "evidencePath": ".github/workflows/.bump-minor-version.yml",
4408
+ "availability": "shipped",
4409
+ "visibility": "public",
4410
+ "participantFacing": true,
4411
+ "public": true,
4412
+ "inputCount": 1,
4413
+ "inputs": [
4414
+ "universal-request-json"
4415
+ ],
4416
+ "reverseAuditSource": ".github/workflows"
4417
+ },
4418
+ {
4419
+ "id": "workflow:.declarative-auditable-demo",
4420
+ "name": "workflow:.declarative-auditable-demo",
4421
+ "kind": "workflow",
4422
+ "sourcePath": ".github/workflows/.declarative-auditable-demo.yml",
4423
+ "evidencePath": ".github/workflows/.declarative-auditable-demo.yml",
4424
+ "availability": "shipped",
4425
+ "visibility": "public",
4426
+ "participantFacing": true,
4427
+ "public": true,
4428
+ "inputCount": 13,
4429
+ "inputs": [
4430
+ "artifact-retention-days",
4431
+ "binary-artifact-digest",
4432
+ "binary-artifact-name",
4433
+ "buildchain-repository",
4434
+ "materialize",
4435
+ "materialize-base-ref",
4436
+ "media-profile",
4437
+ "render-failure-advisory",
4438
+ "render-media",
4439
+ "renderer-image",
4440
+ "scenario-path",
4441
+ "source-ref",
4442
+ "universal-request-json"
4443
+ ],
4444
+ "reverseAuditSource": ".github/workflows"
4445
+ },
4446
+ {
4447
+ "id": "workflow:.gate-profile",
4448
+ "name": "workflow:.gate-profile",
4449
+ "kind": "workflow",
4450
+ "sourcePath": ".github/workflows/.gate-profile.yml",
4451
+ "evidencePath": ".github/workflows/.gate-profile.yml",
4452
+ "availability": "shipped",
4453
+ "visibility": "public",
4454
+ "participantFacing": true,
4455
+ "public": true,
4456
+ "inputCount": 31,
4457
+ "inputs": [
4458
+ "artifact-name",
4459
+ "artifact-retention-days",
4460
+ "buildchain-ref",
4461
+ "buildchain-repository",
4462
+ "cargo-registry-index",
4463
+ "checkout-cache-fallback",
4464
+ "checkout-cache-fetch-attempts",
4465
+ "checkout-cache-github-timeout-seconds",
4466
+ "checkout-cache-mirror-url-template",
4467
+ "checkout-cache-mode",
4468
+ "checkout-cache-reference-repository-template",
4469
+ "checkout-cache-timeout-seconds",
4470
+ "gate-command-json",
4471
+ "gate-environment-json",
4472
+ "gate-plan-command-json",
4473
+ "gate-profile",
4474
+ "gate-registry",
4475
+ "include-advisory",
4476
+ "node-version",
4477
+ "platforms-json",
4478
+ "require-trusted-event",
4479
+ "runner-preset",
4480
+ "rust-toolchain",
4481
+ "rustup-dist-server",
4482
+ "rustup-update-root",
4483
+ "shifu-cache-profile-digest",
4484
+ "shifu-cache-profile-ref",
4485
+ "source-ref",
4486
+ "universal-request-json",
4487
+ "untrusted-policy",
4488
+ "working-directory"
4489
+ ],
4490
+ "reverseAuditSource": ".github/workflows"
4491
+ },
4492
+ {
4493
+ "id": "workflow:.ops-git-sync",
4494
+ "name": "workflow:.ops-git-sync",
4495
+ "kind": "workflow",
4496
+ "sourcePath": ".github/workflows/.ops-git-sync.yml",
4497
+ "evidencePath": ".github/workflows/.ops-git-sync.yml",
4498
+ "availability": "shipped",
4499
+ "visibility": "public",
4500
+ "participantFacing": true,
4501
+ "public": true,
4502
+ "inputCount": 5,
4503
+ "inputs": [
4504
+ "force",
4505
+ "remote-host",
4506
+ "remote-path",
4507
+ "remote-repo",
4508
+ "universal-request-json"
4509
+ ],
4510
+ "reverseAuditSource": ".github/workflows"
4511
+ },
4512
+ {
4513
+ "id": "workflow:.publication-authority",
4514
+ "name": "workflow:.publication-authority",
4515
+ "kind": "workflow",
4516
+ "sourcePath": ".github/workflows/.publication-authority.yml",
4517
+ "evidencePath": ".github/workflows/.publication-authority.yml",
4518
+ "availability": "shipped",
4519
+ "visibility": "public",
4520
+ "participantFacing": true,
4521
+ "public": true,
4522
+ "inputCount": 38,
4523
+ "inputs": [
4524
+ "admission-json",
4525
+ "authority-workflow-path",
4526
+ "auto-admission",
4527
+ "auto-admission-kind",
4528
+ "auto-no-gate",
4529
+ "buildchain-ref",
4530
+ "buildchain-repository",
4531
+ "consumer-gate-command",
4532
+ "consumer-gate-controller-sha",
4533
+ "consumer-gate-evidence-source-sha",
4534
+ "consumer-gate-evidence-source-tree",
4535
+ "consumer-predicate-digest",
4536
+ "consumer-predicate-id",
4537
+ "consumer-qualification-required",
4538
+ "control-plane-audit-json",
4539
+ "dry-run",
4540
+ "evidence-controller-artifact",
4541
+ "evidence-manifest-pattern",
4542
+ "evidence-passport-artifact",
4543
+ "evidence-payload-pattern",
4544
+ "evidence-publication-artifact",
4545
+ "evidence-repository",
4546
+ "evidence-run-id",
4547
+ "evidence-summary-artifact",
4548
+ "expected-json",
4549
+ "gate-aggregate-json",
4550
+ "github-governance-receipt-json",
4551
+ "package-name",
4552
+ "product",
4553
+ "publication-target",
4554
+ "publication-version",
4555
+ "publisher-workflow-path",
4556
+ "required-status-check",
4557
+ "runner-provenance-json",
4558
+ "source-sha",
4559
+ "target-ref",
4560
+ "universal-request-json",
4561
+ "used-nonces-json"
4562
+ ],
4563
+ "reverseAuditSource": ".github/workflows"
4564
+ },
4565
+ {
4566
+ "id": "workflow:.release-authority",
4567
+ "name": "workflow:.release-authority",
4568
+ "kind": "workflow",
4569
+ "sourcePath": ".github/workflows/.release-authority.yml",
4570
+ "evidencePath": ".github/workflows/.release-authority.yml",
4571
+ "availability": "shipped",
4572
+ "visibility": "public",
4573
+ "participantFacing": true,
4574
+ "public": true,
4575
+ "inputCount": 38,
4576
+ "inputs": [
4577
+ "admission-json",
4578
+ "authority-workflow-path",
4579
+ "auto-admission",
4580
+ "auto-admission-kind",
4581
+ "auto-no-gate",
4582
+ "buildchain-ref",
4583
+ "buildchain-repository",
4584
+ "consumer-gate-command",
4585
+ "consumer-gate-controller-sha",
4586
+ "consumer-gate-evidence-source-sha",
4587
+ "consumer-gate-evidence-source-tree",
4588
+ "consumer-predicate-digest",
4589
+ "consumer-predicate-id",
4590
+ "consumer-qualification-required",
4591
+ "control-plane-audit-json",
4592
+ "dry-run",
4593
+ "evidence-controller-artifact",
4594
+ "evidence-manifest-pattern",
4595
+ "evidence-passport-artifact",
4596
+ "evidence-payload-pattern",
4597
+ "evidence-publication-artifact",
4598
+ "evidence-repository",
4599
+ "evidence-run-id",
4600
+ "evidence-summary-artifact",
4601
+ "expected-json",
4602
+ "gate-aggregate-json",
4603
+ "github-governance-receipt-json",
4604
+ "package-name",
4605
+ "product",
4606
+ "publication-target",
4607
+ "publication-version",
4608
+ "publisher-workflow-path",
4609
+ "required-status-check",
4610
+ "runner-provenance-json",
4611
+ "source-sha",
4612
+ "target-ref",
4613
+ "universal-request-json",
4614
+ "used-nonces-json"
4615
+ ],
4616
+ "reverseAuditSource": ".github/workflows"
4617
+ },
4618
+ {
4619
+ "id": "workflow:.release-binary-assets",
4620
+ "name": "workflow:.release-binary-assets",
4621
+ "kind": "workflow",
4622
+ "sourcePath": ".github/workflows/.release-binary-assets.yml",
4623
+ "evidencePath": ".github/workflows/.release-binary-assets.yml",
4624
+ "availability": "shipped",
4625
+ "visibility": "public",
4626
+ "participantFacing": true,
4627
+ "public": true,
4628
+ "inputCount": 16,
4629
+ "inputs": [
4630
+ "auto-admission",
4631
+ "buildchain-ref",
4632
+ "buildchain-repository",
4633
+ "evidence-run-id",
4634
+ "github-governance-receipt-json",
4635
+ "publication-admission-json",
4636
+ "publication-control-plane-audit-json",
4637
+ "publication-expected-json",
4638
+ "publication-gate-aggregate-json",
4639
+ "publication-runner-provenance-json",
4640
+ "publication-used-nonces-json",
4641
+ "publication-version",
4642
+ "release-tag",
4643
+ "source-sha",
4644
+ "target-ref",
4645
+ "universal-request-json"
4646
+ ],
4647
+ "reverseAuditSource": ".github/workflows"
4648
+ },
4649
+ {
4650
+ "id": "workflow:.release-candidate-promote",
4651
+ "name": "workflow:.release-candidate-promote",
4652
+ "kind": "workflow",
4653
+ "sourcePath": ".github/workflows/.release-candidate-promote.yml",
4654
+ "evidencePath": ".github/workflows/.release-candidate-promote.yml",
4655
+ "availability": "shipped",
4656
+ "visibility": "public",
4657
+ "participantFacing": true,
4658
+ "public": true,
4659
+ "inputCount": 122,
4660
+ "inputs": [
4661
+ "allow-repository",
4662
+ "artifact-name",
4663
+ "artifact-patterns",
4664
+ "branch-protection-bypass-apps",
4665
+ "branch-protection-bypass-teams",
4666
+ "branch-protection-bypass-users",
4667
+ "buildchain-alpha-contract-lock-path",
4668
+ "buildchain-contract-compatibility-policy",
4669
+ "buildchain-contract-drift-issue-mode",
4670
+ "buildchain-contract-lock-path",
4671
+ "buildchain-expected-channel",
4672
+ "buildchain-expected-major",
4673
+ "buildchain-ref",
4674
+ "buildchain-repository",
4675
+ "buildchain-stable-contract-lock-path",
4676
+ "channel",
4677
+ "declarative-release-tail",
4678
+ "dry-run",
4679
+ "github-artifact-attestation-environment",
4680
+ "github-artifact-attestation-policy-json",
4681
+ "github-artifact-attestation-retention-days",
4682
+ "github-governance-receipt-json",
4683
+ "github-release",
4684
+ "github-release-notes",
4685
+ "github-release-payload-patterns",
4686
+ "github-release-title",
4687
+ "package-manager",
4688
+ "promotion-contract-lock-digest",
4689
+ "promotion-contract-lock-path",
4690
+ "promotion-override-used",
4691
+ "promotion-publication-channel",
4692
+ "promotion-router-ref",
4693
+ "promotion-router-sha",
4694
+ "promotion-runtime-authorization-json",
4695
+ "promotion-runtime-authorization-root",
4696
+ "promotion-runtime-ref",
4697
+ "promotion-runtime-sha",
4698
+ "promotion-shell-ref",
4699
+ "promotion-shell-sha",
4700
+ "promotion-target-ref",
4701
+ "provider-failure-after-capability",
4702
+ "publication-admission-json",
4703
+ "publication-authority-workflow-path",
4704
+ "publication-auto-admission",
4705
+ "publication-auto-no-gate",
4706
+ "publication-commit-command",
4707
+ "publication-commit-evidence-path",
4708
+ "publication-consumer-predicate-id",
4709
+ "publication-consumer-qualification-command",
4710
+ "publication-consumer-qualification-controller-sha",
4711
+ "publication-control-plane-audit-json",
4712
+ "publication-expected-json",
4713
+ "publication-gate-aggregate-json",
4714
+ "publication-gate-command",
4715
+ "publication-gate-controller-sha",
4716
+ "publication-package-name",
4717
+ "publication-product",
4718
+ "publication-publisher-workflow-path",
4719
+ "publication-runner-provenance-json",
4720
+ "publication-target",
4721
+ "publication-used-nonces-json",
4722
+ "publication-used-qualification-nonces-json",
4723
+ "publish-artifact-kind",
4724
+ "publish-command",
4725
+ "publish-dist-tag",
4726
+ "publish-mode",
4727
+ "publish-package-main",
4728
+ "publish-package-set-order",
4729
+ "publish-rematerialize-on-resume",
4730
+ "publish-required-artifacts-json",
4731
+ "publish-target",
4732
+ "publish-transaction-override",
4733
+ "release-activation-command",
4734
+ "release-activation-receipt-set-path",
4735
+ "release-candidate-family-assignment-id",
4736
+ "release-candidate-family-evidence-required",
4737
+ "release-candidate-family-evidence-root",
4738
+ "release-candidate-family-initiative-id",
4739
+ "release-candidate-wait-seconds",
4740
+ "release-candidate-workflow-file",
4741
+ "release-candidate-workflow-name",
4742
+ "release-passport",
4743
+ "release-passport-adopter-delivery-json",
4744
+ "release-passport-attachment-command",
4745
+ "release-passport-buildchain-self-kfd",
4746
+ "release-passport-evidence-command",
4747
+ "release-passport-evidence-jsons",
4748
+ "release-passport-evidence-path",
4749
+ "release-passport-impact-json",
4750
+ "release-passport-invariant-passport-command",
4751
+ "release-passport-invariant-passport-jsons",
4752
+ "release-passport-kfd-1-witness-jsons",
4753
+ "release-passport-kfd-2-claim-jsons",
4754
+ "release-passport-kfd-3-artifact-verify-command",
4755
+ "release-passport-kfd-3-artifact-witness-jsons",
4756
+ "release-passport-kfd-3-prebuild-witness-jsons",
4757
+ "release-passport-kfd-adopter-manifest-gate-json",
4758
+ "release-passport-kfd-adopter-manifest-json",
4759
+ "release-passport-kfd-product-gate-jsons",
4760
+ "release-passport-kfd-support-matrix-json",
4761
+ "release-passport-output-dir",
4762
+ "release-passport-platform-manifest-paths",
4763
+ "release-passport-product-name",
4764
+ "release-passport-v4-runtime-resume-evidence-json",
4765
+ "release-propagation-config-path",
4766
+ "required-artifact-count",
4767
+ "required-status-check",
4768
+ "resume-buildchain-runtime-sha",
4769
+ "resume-candidate-repository",
4770
+ "resume-candidate-run-id",
4771
+ "resume-expected-candidate-root",
4772
+ "resume-expected-candidate-runtime-sha",
4773
+ "resume-expected-source-tree",
4774
+ "resume-expected-workflow-file",
4775
+ "resume-expected-workflow-name",
4776
+ "resume-transaction-id",
4777
+ "runner-preset",
4778
+ "standalone-binary-distribution",
4779
+ "target-ref",
4780
+ "target-sha",
4781
+ "trusted-publishing",
4782
+ "universal-request-json"
4783
+ ],
4784
+ "reverseAuditSource": ".github/workflows"
4785
+ },
4786
+ {
4787
+ "id": "workflow:.release-minor-bump-compat",
4788
+ "name": "workflow:.release-minor-bump-compat",
4789
+ "kind": "workflow",
4790
+ "sourcePath": ".github/workflows/.release-minor-bump-compat.yml",
4791
+ "evidencePath": ".github/workflows/.release-minor-bump-compat.yml",
4792
+ "availability": "shipped",
4793
+ "visibility": "public",
4794
+ "participantFacing": true,
4795
+ "public": true,
4796
+ "inputCount": 1,
4797
+ "inputs": [
4798
+ "universal-request-json"
4799
+ ],
4800
+ "reverseAuditSource": ".github/workflows"
4801
+ },
4802
+ {
4803
+ "id": "workflow:.release-page-sync-retired",
4804
+ "name": "workflow:.release-page-sync-retired",
4805
+ "kind": "workflow",
4806
+ "sourcePath": ".github/workflows/.release-page-sync-retired.yml",
4807
+ "evidencePath": ".github/workflows/.release-page-sync-retired.yml",
4808
+ "availability": "shipped",
4809
+ "visibility": "public",
4810
+ "participantFacing": true,
4811
+ "public": true,
4812
+ "inputCount": 14,
4813
+ "inputs": [
4814
+ "aws-region",
4815
+ "aws-role-arn",
4816
+ "base-id",
4817
+ "bucket-release",
4818
+ "cloudfront-id",
4819
+ "exclude",
4820
+ "lower-edge",
4821
+ "product",
4822
+ "product-name",
4823
+ "release-path",
4824
+ "release-url",
4825
+ "repo",
4826
+ "universal-request-json",
4827
+ "upper-edge"
4828
+ ],
4829
+ "reverseAuditSource": ".github/workflows"
4830
+ },
4831
+ {
4832
+ "id": "workflow:.release-promote",
4833
+ "name": "workflow:.release-promote",
4834
+ "kind": "workflow",
4835
+ "sourcePath": ".github/workflows/.release-promote.yml",
4836
+ "evidencePath": ".github/workflows/.release-promote.yml",
4837
+ "availability": "shipped",
4838
+ "visibility": "public",
4839
+ "participantFacing": true,
4840
+ "public": true,
4841
+ "inputCount": 122,
4842
+ "inputs": [
4843
+ "allow-repository",
4844
+ "artifact-name",
4845
+ "artifact-patterns",
4846
+ "branch-protection-bypass-apps",
4847
+ "branch-protection-bypass-teams",
4848
+ "branch-protection-bypass-users",
4849
+ "buildchain-alpha-contract-lock-path",
4850
+ "buildchain-contract-compatibility-policy",
4851
+ "buildchain-contract-drift-issue-mode",
4852
+ "buildchain-contract-lock-path",
4853
+ "buildchain-expected-channel",
4854
+ "buildchain-expected-major",
4855
+ "buildchain-ref",
4856
+ "buildchain-repository",
4857
+ "buildchain-stable-contract-lock-path",
4858
+ "channel",
4859
+ "declarative-release-tail",
4860
+ "dry-run",
4179
4861
  "github-artifact-attestation-environment",
4180
4862
  "github-artifact-attestation-policy-json",
4181
4863
  "github-artifact-attestation-retention-days",
4182
4864
  "github-governance-receipt-json",
4183
- "github-release",
4184
- "github-release-notes",
4185
- "github-release-payload-patterns",
4186
- "github-release-title",
4187
- "package-manager",
4188
- "promotion-contract-lock-digest",
4189
- "promotion-contract-lock-path",
4190
- "promotion-override-used",
4191
- "promotion-publication-channel",
4192
- "promotion-router-ref",
4193
- "promotion-router-sha",
4194
- "promotion-runtime-authorization-json",
4195
- "promotion-runtime-authorization-root",
4196
- "promotion-runtime-ref",
4197
- "promotion-runtime-sha",
4198
- "promotion-shell-ref",
4199
- "promotion-shell-sha",
4200
- "promotion-target-ref",
4201
- "provider-failure-after-capability",
4865
+ "github-release",
4866
+ "github-release-notes",
4867
+ "github-release-payload-patterns",
4868
+ "github-release-title",
4869
+ "package-manager",
4870
+ "promotion-contract-lock-digest",
4871
+ "promotion-contract-lock-path",
4872
+ "promotion-override-used",
4873
+ "promotion-publication-channel",
4874
+ "promotion-router-ref",
4875
+ "promotion-router-sha",
4876
+ "promotion-runtime-authorization-json",
4877
+ "promotion-runtime-authorization-root",
4878
+ "promotion-runtime-ref",
4879
+ "promotion-runtime-sha",
4880
+ "promotion-shell-ref",
4881
+ "promotion-shell-sha",
4882
+ "promotion-target-ref",
4883
+ "provider-failure-after-capability",
4884
+ "publication-admission-json",
4885
+ "publication-authority-workflow-path",
4886
+ "publication-auto-admission",
4887
+ "publication-auto-no-gate",
4888
+ "publication-commit-command",
4889
+ "publication-commit-evidence-path",
4890
+ "publication-consumer-predicate-id",
4891
+ "publication-consumer-qualification-command",
4892
+ "publication-consumer-qualification-controller-sha",
4893
+ "publication-control-plane-audit-json",
4894
+ "publication-expected-json",
4895
+ "publication-gate-aggregate-json",
4896
+ "publication-gate-command",
4897
+ "publication-gate-controller-sha",
4898
+ "publication-package-name",
4899
+ "publication-product",
4900
+ "publication-publisher-workflow-path",
4901
+ "publication-runner-provenance-json",
4902
+ "publication-target",
4903
+ "publication-used-nonces-json",
4904
+ "publication-used-qualification-nonces-json",
4905
+ "publish-artifact-kind",
4906
+ "publish-command",
4907
+ "publish-dist-tag",
4908
+ "publish-mode",
4909
+ "publish-package-main",
4910
+ "publish-package-set-order",
4911
+ "publish-rematerialize-on-resume",
4912
+ "publish-required-artifacts-json",
4913
+ "publish-target",
4914
+ "publish-transaction-override",
4915
+ "release-activation-command",
4916
+ "release-activation-receipt-set-path",
4917
+ "release-candidate-family-assignment-id",
4918
+ "release-candidate-family-evidence-required",
4919
+ "release-candidate-family-evidence-root",
4920
+ "release-candidate-family-initiative-id",
4921
+ "release-candidate-wait-seconds",
4922
+ "release-candidate-workflow-file",
4923
+ "release-candidate-workflow-name",
4924
+ "release-passport",
4925
+ "release-passport-adopter-delivery-json",
4926
+ "release-passport-attachment-command",
4927
+ "release-passport-buildchain-self-kfd",
4928
+ "release-passport-evidence-command",
4929
+ "release-passport-evidence-jsons",
4930
+ "release-passport-evidence-path",
4931
+ "release-passport-impact-json",
4932
+ "release-passport-invariant-passport-command",
4933
+ "release-passport-invariant-passport-jsons",
4934
+ "release-passport-kfd-1-witness-jsons",
4935
+ "release-passport-kfd-2-claim-jsons",
4936
+ "release-passport-kfd-3-artifact-verify-command",
4937
+ "release-passport-kfd-3-artifact-witness-jsons",
4938
+ "release-passport-kfd-3-prebuild-witness-jsons",
4939
+ "release-passport-kfd-adopter-manifest-gate-json",
4940
+ "release-passport-kfd-adopter-manifest-json",
4941
+ "release-passport-kfd-product-gate-jsons",
4942
+ "release-passport-kfd-support-matrix-json",
4943
+ "release-passport-output-dir",
4944
+ "release-passport-platform-manifest-paths",
4945
+ "release-passport-product-name",
4946
+ "release-passport-v4-runtime-resume-evidence-json",
4947
+ "release-propagation-config-path",
4948
+ "required-artifact-count",
4949
+ "required-status-check",
4950
+ "resume-buildchain-runtime-sha",
4951
+ "resume-candidate-repository",
4952
+ "resume-candidate-run-id",
4953
+ "resume-expected-candidate-root",
4954
+ "resume-expected-candidate-runtime-sha",
4955
+ "resume-expected-source-tree",
4956
+ "resume-expected-workflow-file",
4957
+ "resume-expected-workflow-name",
4958
+ "resume-transaction-id",
4959
+ "runner-preset",
4960
+ "standalone-binary-distribution",
4961
+ "target-ref",
4962
+ "target-sha",
4963
+ "trusted-publishing",
4964
+ "universal-request-json"
4965
+ ],
4966
+ "reverseAuditSource": ".github/workflows"
4967
+ },
4968
+ {
4969
+ "id": "workflow:.release-verify",
4970
+ "name": "workflow:.release-verify",
4971
+ "kind": "workflow",
4972
+ "sourcePath": ".github/workflows/.release-verify.yml",
4973
+ "evidencePath": ".github/workflows/.release-verify.yml",
4974
+ "availability": "shipped",
4975
+ "visibility": "public",
4976
+ "participantFacing": true,
4977
+ "public": true,
4978
+ "inputCount": 42,
4979
+ "inputs": [
4980
+ "auto-approve-enabled",
4981
+ "aws-ci-region",
4982
+ "aws-user-region",
4983
+ "bucket-staging-ci",
4984
+ "bucket-staging-user",
4985
+ "build-container-enabled",
4986
+ "build-runner-linux",
4987
+ "build-runner-linux-labels",
4988
+ "build-runner-macos",
4989
+ "build-runner-macos-labels",
4990
+ "build-runner-windows",
4991
+ "build-runner-windows-labels",
4992
+ "build-timeout-minutes",
4993
+ "buildchain-ref",
4994
+ "buildchain-repository",
4995
+ "builder-container",
4996
+ "code-signing-macos",
4997
+ "code-signing-windows",
4998
+ "collaborator-automation-enabled",
4999
+ "enable-linux",
5000
+ "enable-macos",
5001
+ "enable-windows",
5002
+ "find-dependencies",
5003
+ "java-version",
5004
+ "manager",
5005
+ "max-build-attempts",
5006
+ "max-preview-links",
5007
+ "node-version",
5008
+ "pipenv-version",
5009
+ "poetry-version",
5010
+ "prebuild",
5011
+ "preview-files",
5012
+ "publish-aws-ci",
5013
+ "publish-aws-user",
5014
+ "publish-github-npm",
5015
+ "publish-versioning",
5016
+ "python-version",
5017
+ "setup-env-timeout-minutes",
5018
+ "setup-python-enabled",
5019
+ "universal-request-json",
5020
+ "use-pipenv",
5021
+ "use-poetry"
5022
+ ],
5023
+ "reverseAuditSource": ".github/workflows"
5024
+ },
5025
+ {
5026
+ "id": "workflow:.sam-verify",
5027
+ "name": "workflow:.sam-verify",
5028
+ "kind": "workflow",
5029
+ "sourcePath": ".github/workflows/.sam-verify.yml",
5030
+ "evidencePath": ".github/workflows/.sam-verify.yml",
5031
+ "availability": "shipped",
5032
+ "visibility": "public",
5033
+ "participantFacing": true,
5034
+ "public": true,
5035
+ "inputCount": 5,
5036
+ "inputs": [
5037
+ "aws-region",
5038
+ "aws-role",
5039
+ "aws-root",
5040
+ "manager",
5041
+ "universal-request-json"
5042
+ ],
5043
+ "reverseAuditSource": ".github/workflows"
5044
+ },
5045
+ {
5046
+ "id": "workflow:.sync-release-page",
5047
+ "name": "workflow:.sync-release-page",
5048
+ "kind": "workflow",
5049
+ "sourcePath": ".github/workflows/.sync-release-page.yml",
5050
+ "evidencePath": ".github/workflows/.sync-release-page.yml",
5051
+ "availability": "shipped",
5052
+ "visibility": "public",
5053
+ "participantFacing": true,
5054
+ "public": true,
5055
+ "inputCount": 14,
5056
+ "inputs": [
5057
+ "aws-region",
5058
+ "aws-role-arn",
5059
+ "base-id",
5060
+ "bucket-release",
5061
+ "cloudfront-id",
5062
+ "exclude",
5063
+ "lower-edge",
5064
+ "product",
5065
+ "product-name",
5066
+ "release-path",
5067
+ "release-url",
5068
+ "repo",
5069
+ "universal-request-json",
5070
+ "upper-edge"
5071
+ ],
5072
+ "reverseAuditSource": ".github/workflows"
5073
+ },
5074
+ {
5075
+ "id": "workflow:.sync-remote-git",
5076
+ "name": "workflow:.sync-remote-git",
5077
+ "kind": "workflow",
5078
+ "sourcePath": ".github/workflows/.sync-remote-git.yml",
5079
+ "evidencePath": ".github/workflows/.sync-remote-git.yml",
5080
+ "availability": "shipped",
5081
+ "visibility": "public",
5082
+ "participantFacing": true,
5083
+ "public": true,
5084
+ "inputCount": 5,
5085
+ "inputs": [
5086
+ "force",
5087
+ "remote-host",
5088
+ "remote-path",
5089
+ "remote-repo",
5090
+ "universal-request-json"
5091
+ ],
5092
+ "reverseAuditSource": ".github/workflows"
5093
+ },
5094
+ {
5095
+ "id": "workflow:.web-surface",
5096
+ "name": "workflow:.web-surface",
5097
+ "kind": "workflow",
5098
+ "sourcePath": ".github/workflows/.web-surface.yml",
5099
+ "evidencePath": ".github/workflows/.web-surface.yml",
5100
+ "availability": "shipped",
5101
+ "visibility": "public",
5102
+ "participantFacing": true,
5103
+ "public": true,
5104
+ "inputCount": 44,
5105
+ "inputs": [
5106
+ "artifact-path",
5107
+ "aws-region",
5108
+ "build-command",
5109
+ "buildchain-contract-compatibility-policy",
5110
+ "buildchain-contract-drift-issue-mode",
5111
+ "buildchain-contract-expected-channel",
5112
+ "buildchain-contract-expected-major",
5113
+ "buildchain-contract-lock-path",
5114
+ "buildchain-ref",
5115
+ "buildchain-repository",
5116
+ "fail-on-release-pr-error",
5117
+ "github-governance-receipt-json",
5118
+ "node-version",
5119
+ "preview-apply",
5120
+ "preview-aws-role-arn",
5121
+ "preview-cleanup-apply",
5122
+ "preview-comment",
5123
+ "preview-environment",
5124
+ "production-apply",
5125
+ "production-approved",
5126
+ "production-aws-role-arn",
5127
+ "production-environment",
5128
+ "production-release-app-client-id",
5129
+ "production-release-app-id",
5130
+ "production-release-branch-channel",
5131
+ "production-release-head-prefix",
5132
+ "production-release-label",
5133
+ "production-release-on-main",
5134
+ "production-release-pr-mode",
5135
+ "production-release-pr-token",
5136
+ "production-source-sha",
4202
5137
  "publication-admission-json",
4203
- "publication-authority-workflow-path",
4204
- "publication-auto-admission",
4205
- "publication-auto-no-gate",
4206
- "publication-commit-command",
4207
- "publication-commit-evidence-path",
4208
- "publication-consumer-predicate-id",
4209
- "publication-consumer-qualification-command",
4210
- "publication-consumer-qualification-controller-sha",
4211
5138
  "publication-control-plane-audit-json",
4212
5139
  "publication-expected-json",
4213
5140
  "publication-gate-aggregate-json",
4214
- "publication-gate-command",
4215
- "publication-gate-controller-sha",
4216
- "publication-package-name",
4217
- "publication-product",
4218
- "publication-publisher-workflow-path",
4219
5141
  "publication-runner-provenance-json",
4220
- "publication-target",
4221
5142
  "publication-used-nonces-json",
4222
- "publication-used-qualification-nonces-json",
4223
- "publish-artifact-kind",
4224
- "publish-command",
4225
- "publish-dist-tag",
4226
- "publish-mode",
4227
- "publish-package-main",
4228
- "publish-package-set-order",
4229
- "publish-rematerialize-on-resume",
4230
- "publish-required-artifacts-json",
4231
- "publish-target",
4232
- "publish-transaction-override",
4233
- "release-activation-command",
4234
- "release-activation-receipt-set-path",
4235
- "release-candidate-family-assignment-id",
4236
- "release-candidate-family-evidence-required",
4237
- "release-candidate-family-evidence-root",
4238
- "release-candidate-family-initiative-id",
4239
- "release-candidate-wait-seconds",
4240
- "release-candidate-workflow-file",
4241
- "release-candidate-workflow-name",
4242
- "release-passport",
4243
- "release-passport-adopter-delivery-json",
4244
- "release-passport-attachment-command",
4245
- "release-passport-buildchain-self-kfd",
4246
- "release-passport-evidence-command",
4247
- "release-passport-evidence-jsons",
4248
- "release-passport-evidence-path",
4249
- "release-passport-impact-json",
4250
- "release-passport-invariant-passport-command",
4251
- "release-passport-invariant-passport-jsons",
4252
- "release-passport-kfd-1-witness-jsons",
4253
- "release-passport-kfd-2-claim-jsons",
4254
- "release-passport-kfd-3-artifact-verify-command",
4255
- "release-passport-kfd-3-artifact-witness-jsons",
4256
- "release-passport-kfd-3-prebuild-witness-jsons",
4257
- "release-passport-kfd-adopter-manifest-gate-json",
4258
- "release-passport-kfd-adopter-manifest-json",
4259
- "release-passport-kfd-product-gate-jsons",
4260
- "release-passport-kfd-support-matrix-json",
4261
- "release-passport-output-dir",
4262
- "release-passport-platform-manifest-paths",
4263
- "release-passport-product-name",
4264
- "release-passport-v4-runtime-resume-evidence-json",
4265
- "release-propagation-config-path",
4266
- "required-artifact-count",
4267
- "required-status-check",
4268
- "resume-buildchain-runtime-sha",
4269
- "resume-candidate-repository",
4270
- "resume-candidate-run-id",
4271
- "resume-expected-candidate-root",
4272
- "resume-expected-candidate-runtime-sha",
4273
- "resume-expected-source-tree",
4274
- "resume-expected-workflow-file",
4275
- "resume-expected-workflow-name",
4276
- "resume-transaction-id",
5143
+ "release-feedback-actor-privacy",
5144
+ "staging-apply",
5145
+ "staging-aws-role-arn",
5146
+ "staging-environment",
5147
+ "universal-request-json",
5148
+ "verify-command",
5149
+ "working-directory"
5150
+ ],
5151
+ "reverseAuditSource": ".github/workflows"
5152
+ },
5153
+ {
5154
+ "id": "workflow:.wheel-verify",
5155
+ "name": "workflow:.wheel-verify",
5156
+ "kind": "workflow",
5157
+ "sourcePath": ".github/workflows/.wheel-verify.yml",
5158
+ "evidencePath": ".github/workflows/.wheel-verify.yml",
5159
+ "availability": "shipped",
5160
+ "visibility": "public",
5161
+ "participantFacing": true,
5162
+ "public": true,
5163
+ "inputCount": 6,
5164
+ "inputs": [
5165
+ "aws-user-region",
5166
+ "bucket-release",
5167
+ "max-preview-links",
5168
+ "node-version",
5169
+ "preview-files",
5170
+ "universal-request-json"
5171
+ ],
5172
+ "reverseAuditSource": ".github/workflows"
5173
+ },
5174
+ {
5175
+ "id": "workflow:artifact-signing-authority",
5176
+ "name": "workflow:artifact-signing-authority",
5177
+ "kind": "workflow",
5178
+ "sourcePath": ".github/workflows/artifact-signing-authority.yml",
5179
+ "evidencePath": ".github/workflows/artifact-signing-authority.yml",
5180
+ "availability": "shipped",
5181
+ "visibility": "public",
5182
+ "participantFacing": true,
5183
+ "public": true,
5184
+ "inputCount": 0,
5185
+ "inputs": [],
5186
+ "reverseAuditSource": ".github/workflows"
5187
+ },
5188
+ {
5189
+ "id": "workflow:bootstrap",
5190
+ "name": "workflow:bootstrap",
5191
+ "kind": "workflow",
5192
+ "sourcePath": ".github/workflows/bootstrap.yml",
5193
+ "evidencePath": ".github/workflows/bootstrap.yml",
5194
+ "availability": "shipped",
5195
+ "visibility": "public",
5196
+ "participantFacing": true,
5197
+ "public": true,
5198
+ "inputCount": 1,
5199
+ "inputs": [
5200
+ "request-json"
5201
+ ],
5202
+ "reverseAuditSource": ".github/workflows"
5203
+ },
5204
+ {
5205
+ "id": "workflow:build",
5206
+ "name": "workflow:build",
5207
+ "kind": "workflow",
5208
+ "sourcePath": ".github/workflows/build.yml",
5209
+ "evidencePath": ".github/workflows/build.yml",
5210
+ "availability": "shipped",
5211
+ "visibility": "public",
5212
+ "participantFacing": true,
5213
+ "public": true,
5214
+ "inputCount": 97,
5215
+ "inputs": [
5216
+ "artifact-compression-level",
5217
+ "artifact-finalization-command",
5218
+ "artifact-finalization-on-platform",
5219
+ "artifact-name",
5220
+ "artifact-name-template",
5221
+ "artifact-paths",
5222
+ "artifact-relay-s3-bucket",
5223
+ "artifact-relay-s3-download-role-arn",
5224
+ "artifact-relay-s3-oidc-audience",
5225
+ "artifact-relay-s3-prefix",
5226
+ "artifact-relay-s3-region",
5227
+ "artifact-relay-s3-role-arn",
5228
+ "artifact-relay-s3-upload-role-arn",
5229
+ "artifact-retention-days",
5230
+ "artifact-signing-request-upload-no-proxy",
5231
+ "artifact-transfer-mode",
5232
+ "aws-codebuild-project",
5233
+ "aws-ec2-macos-runner-label",
5234
+ "aws-ec2-windows-runner-label",
5235
+ "build-command",
5236
+ "buildchain-alpha-contract-lock-path",
5237
+ "buildchain-channel",
5238
+ "buildchain-contract-compatibility-policy",
5239
+ "buildchain-contract-drift-issue-mode",
5240
+ "buildchain-contract-expected-channel",
5241
+ "buildchain-contract-expected-major",
5242
+ "buildchain-contract-lock-path",
5243
+ "buildchain-expected-channel",
5244
+ "buildchain-expected-major",
5245
+ "buildchain-ref",
5246
+ "buildchain-repository",
5247
+ "buildchain-stable-contract-lock-path",
5248
+ "buildchain-visible-workflow",
5249
+ "cache-dependency-lock-root",
5250
+ "cache-policy-root",
5251
+ "cache-toolchain-root",
5252
+ "cargo-registry-index",
5253
+ "checkout-cache-fallback",
5254
+ "checkout-cache-fetch-attempts",
5255
+ "checkout-cache-github-timeout-seconds",
5256
+ "checkout-cache-mirror-url-template",
5257
+ "checkout-cache-mode",
5258
+ "checkout-cache-reference-repository-template",
5259
+ "checkout-cache-timeout-seconds",
5260
+ "checkout-history-mode",
5261
+ "compiler-cache-platforms-json",
5262
+ "compiler-cache-provider",
5263
+ "compiler-cache-required",
5264
+ "control-runner-json",
5265
+ "credential-island-caller-owned",
5266
+ "credential-island-environment",
5267
+ "credential-island-macos-app-path",
5268
+ "credential-island-macos-platform-id",
5269
+ "expected-artifacts-json",
5270
+ "fail-fast",
5271
+ "gate-profile-aggregate-json",
5272
+ "github-artifact-attestation-platform-id",
5273
+ "github-artifact-attestation-signer-sha",
5274
+ "github-artifact-attestation-subject-path",
5275
+ "install-command",
5276
+ "kfd-agent-hub",
5277
+ "lifecycle-timeout-minutes",
5278
+ "linux-container-image",
5279
+ "linux-container-preset",
5280
+ "node-version",
5281
+ "platforms-json",
5282
+ "pre-upload-transport-smoke-artifact-root",
5283
+ "pre-upload-transport-smoke-scenario-path",
5284
+ "process-sample-interval-ms",
5285
+ "process-summary-path",
5286
+ "publish-anchor-request-json",
5287
+ "publish-channel",
5288
+ "publish-refs-json",
5289
+ "publish-registry",
5290
+ "publish-source-ref",
5291
+ "release-candidate",
5292
+ "release-candidate-family-evidence-json",
5293
+ "requested-parallelism",
5294
+ "require-build",
5295
+ "require-install",
5296
+ "require-trusted-event",
5297
+ "require-verify",
4277
5298
  "runner-preset",
4278
- "standalone-binary-distribution",
4279
- "target-ref",
4280
- "target-sha",
4281
- "trusted-publishing"
5299
+ "rust-toolchain",
5300
+ "rustup-dist-server",
5301
+ "rustup-update-root",
5302
+ "sample-process-tree",
5303
+ "self-hosted-offline-fallback",
5304
+ "setup-node",
5305
+ "setup-rust",
5306
+ "shifu-cache-profile-digest",
5307
+ "shifu-cache-profile-ref",
5308
+ "universal-request-json",
5309
+ "untrusted-policy",
5310
+ "verify-command",
5311
+ "verify-substage-evidence-path",
5312
+ "working-directory"
4282
5313
  ],
4283
5314
  "reverseAuditSource": ".github/workflows"
4284
5315
  },
4285
5316
  {
4286
- "id": "workflow:.release-docker",
4287
- "name": "workflow:.release-docker",
5317
+ "id": "workflow:buildchain-patrol",
5318
+ "name": "workflow:buildchain-patrol",
4288
5319
  "kind": "workflow",
4289
- "sourcePath": ".github/workflows/.release-docker.yml",
4290
- "evidencePath": ".github/workflows/.release-docker.yml",
5320
+ "sourcePath": ".github/workflows/buildchain-patrol.yml",
5321
+ "evidencePath": ".github/workflows/buildchain-patrol.yml",
4291
5322
  "availability": "shipped",
4292
5323
  "visibility": "public",
4293
5324
  "participantFacing": true,
4294
5325
  "public": true,
4295
- "inputCount": 1,
5326
+ "inputCount": 17,
4296
5327
  "inputs": [
4297
- "image-name"
5328
+ "allowed-head-prefixes",
5329
+ "block-labels",
5330
+ "buildchain-ref",
5331
+ "buildchain-repository",
5332
+ "cadence",
5333
+ "capabilities",
5334
+ "dry-run",
5335
+ "landing-mode",
5336
+ "max-actions",
5337
+ "merge-method",
5338
+ "mode",
5339
+ "ready-label",
5340
+ "require-approval",
5341
+ "required-status-checks",
5342
+ "same-repository-only",
5343
+ "target-branch",
5344
+ "universal-request-json"
4298
5345
  ],
4299
5346
  "reverseAuditSource": ".github/workflows"
4300
5347
  },
4301
5348
  {
4302
- "id": "workflow:.release-elastic-beanstalk",
4303
- "name": "workflow:.release-elastic-beanstalk",
5349
+ "id": "workflow:check",
5350
+ "name": "workflow:check",
4304
5351
  "kind": "workflow",
4305
- "sourcePath": ".github/workflows/.release-elastic-beanstalk.yml",
4306
- "evidencePath": ".github/workflows/.release-elastic-beanstalk.yml",
5352
+ "sourcePath": ".github/workflows/check.yml",
5353
+ "evidencePath": ".github/workflows/check.yml",
4307
5354
  "availability": "shipped",
4308
5355
  "visibility": "public",
4309
5356
  "participantFacing": true,
4310
5357
  "public": true,
4311
- "inputCount": 3,
5358
+ "inputCount": 13,
4312
5359
  "inputs": [
4313
- "aws-region",
4314
- "eb-application-name",
4315
- "eb-environment-name"
5360
+ "buildchain-ref",
5361
+ "buildchain-repository",
5362
+ "mode",
5363
+ "node-version",
5364
+ "require-version-state",
5365
+ "source-proof-closure-paths-json",
5366
+ "source-proof-dependency-paths-json",
5367
+ "source-proof-policy-paths-json",
5368
+ "source-proof-required-contexts-json",
5369
+ "source-proof-reuse",
5370
+ "universal-request-json",
5371
+ "upload-artifacts",
5372
+ "working-directory"
4316
5373
  ],
4317
5374
  "reverseAuditSource": ".github/workflows"
4318
5375
  },
4319
5376
  {
4320
- "id": "workflow:.release-new-version",
4321
- "name": "workflow:.release-new-version",
5377
+ "id": "workflow:dev-alpha-candidate-patrol",
5378
+ "name": "workflow:dev-alpha-candidate-patrol",
4322
5379
  "kind": "workflow",
4323
- "sourcePath": ".github/workflows/.release-new-version.yml",
4324
- "evidencePath": ".github/workflows/.release-new-version.yml",
5380
+ "sourcePath": ".github/workflows/dev-alpha-candidate-patrol.yml",
5381
+ "evidencePath": ".github/workflows/dev-alpha-candidate-patrol.yml",
4325
5382
  "availability": "shipped",
4326
5383
  "visibility": "public",
4327
5384
  "participantFacing": true,
4328
5385
  "public": true,
4329
- "inputCount": 27,
5386
+ "inputCount": 16,
4330
5387
  "inputs": [
4331
- "action-bump-version-path",
4332
- "action-bump-version-ref",
4333
- "action-bump-version-repository",
4334
- "aws-ci-region",
4335
- "aws-user-region",
4336
- "bucket-release-ci",
4337
- "bucket-release-user",
4338
- "bucket-staging-ci",
4339
- "bucket-staging-user",
4340
- "clean-release-ci",
4341
- "clean-release-user",
4342
- "close-issues",
4343
- "cloudfront-id-ci",
4344
- "cloudfront-id-user",
4345
- "cloudfront-paths-ci",
4346
- "cloudfront-paths-user",
4347
- "create-release-note",
4348
- "max-preview-links",
4349
- "need-qa-automated",
4350
- "node-version",
4351
- "protect-dev-branches",
4352
- "publish-aws-ci",
4353
- "publish-aws-user",
4354
- "publish-github-npm",
4355
- "publish-npmjs",
4356
- "publish-release-note",
4357
- "sync-extensions-version"
5388
+ "alpha-workflow-path",
5389
+ "auto-merge",
5390
+ "buildchain-ref",
5391
+ "buildchain-repository",
5392
+ "create-pull-request",
5393
+ "dev-workflow-path",
5394
+ "dry-run",
5395
+ "max-age-seconds",
5396
+ "merge-method",
5397
+ "pull-request-body-prefix",
5398
+ "pull-request-body-prefix-renderer",
5399
+ "reactivation-authorized",
5400
+ "settlement-authorized",
5401
+ "source-branch",
5402
+ "target-branch",
5403
+ "universal-request-json"
4358
5404
  ],
4359
5405
  "reverseAuditSource": ".github/workflows"
4360
5406
  },
4361
5407
  {
4362
- "id": "workflow:.release-verify",
4363
- "name": "workflow:.release-verify",
5408
+ "id": "workflow:dev-delivery-warrant-cancel",
5409
+ "name": "workflow:dev-delivery-warrant-cancel",
4364
5410
  "kind": "workflow",
4365
- "sourcePath": ".github/workflows/.release-verify.yml",
4366
- "evidencePath": ".github/workflows/.release-verify.yml",
5411
+ "sourcePath": ".github/workflows/dev-delivery-warrant-cancel.yml",
5412
+ "evidencePath": ".github/workflows/dev-delivery-warrant-cancel.yml",
4367
5413
  "availability": "shipped",
4368
5414
  "visibility": "public",
4369
5415
  "participantFacing": true,
4370
5416
  "public": true,
4371
- "inputCount": 41,
5417
+ "inputCount": 13,
4372
5418
  "inputs": [
4373
- "auto-approve-enabled",
4374
- "aws-ci-region",
4375
- "aws-user-region",
4376
- "bucket-staging-ci",
4377
- "bucket-staging-user",
4378
- "build-container-enabled",
4379
- "build-runner-linux",
4380
- "build-runner-linux-labels",
4381
- "build-runner-macos",
4382
- "build-runner-macos-labels",
4383
- "build-runner-windows",
4384
- "build-runner-windows-labels",
4385
- "build-timeout-minutes",
4386
5419
  "buildchain-ref",
4387
5420
  "buildchain-repository",
4388
- "builder-container",
4389
- "code-signing-macos",
4390
- "code-signing-windows",
4391
- "collaborator-automation-enabled",
4392
- "enable-linux",
4393
- "enable-macos",
4394
- "enable-windows",
4395
- "find-dependencies",
4396
- "java-version",
4397
- "manager",
4398
- "max-build-attempts",
4399
- "max-preview-links",
4400
- "node-version",
4401
- "pipenv-version",
4402
- "poetry-version",
4403
- "prebuild",
4404
- "preview-files",
4405
- "publish-aws-ci",
4406
- "publish-aws-user",
4407
- "publish-github-npm",
4408
- "publish-versioning",
4409
- "python-version",
4410
- "setup-env-timeout-minutes",
4411
- "setup-python-enabled",
4412
- "use-pipenv",
4413
- "use-poetry"
5421
+ "event-action",
5422
+ "expected-candidate-id",
5423
+ "expected-old-state-root",
5424
+ "expected-pr-number",
5425
+ "expected-source-head-sha",
5426
+ "observed-source-head-sha",
5427
+ "outcome",
5428
+ "reason",
5429
+ "target-branch",
5430
+ "terminal-evidence-root",
5431
+ "universal-request-json"
5432
+ ],
5433
+ "reverseAuditSource": ".github/workflows"
5434
+ },
5435
+ {
5436
+ "id": "workflow:dev-delivery-warrant-close",
5437
+ "name": "workflow:dev-delivery-warrant-close",
5438
+ "kind": "workflow",
5439
+ "sourcePath": ".github/workflows/dev-delivery-warrant-close.yml",
5440
+ "evidencePath": ".github/workflows/dev-delivery-warrant-close.yml",
5441
+ "availability": "shipped",
5442
+ "visibility": "public",
5443
+ "participantFacing": true,
5444
+ "public": true,
5445
+ "inputCount": 14,
5446
+ "inputs": [
5447
+ "buildchain-ref",
5448
+ "buildchain-repository",
5449
+ "current-base-sha",
5450
+ "expected-head-sha",
5451
+ "expected-pr-number",
5452
+ "merge-group-head-sha",
5453
+ "merge-group-tree-sha",
5454
+ "outcome",
5455
+ "reason",
5456
+ "replay-tree-sha",
5457
+ "required-context-roots-json",
5458
+ "target-branch",
5459
+ "terminal-evidence-root",
5460
+ "universal-request-json"
5461
+ ],
5462
+ "reverseAuditSource": ".github/workflows"
5463
+ },
5464
+ {
5465
+ "id": "workflow:dev-pr-auto-merge",
5466
+ "name": "workflow:dev-pr-auto-merge",
5467
+ "kind": "workflow",
5468
+ "sourcePath": ".github/workflows/dev-pr-auto-merge.yml",
5469
+ "evidencePath": ".github/workflows/dev-pr-auto-merge.yml",
5470
+ "availability": "shipped",
5471
+ "visibility": "public",
5472
+ "participantFacing": true,
5473
+ "public": true,
5474
+ "inputCount": 45,
5475
+ "inputs": [
5476
+ "active-lease-context",
5477
+ "affected-paths-json",
5478
+ "allowed-head-prefixes",
5479
+ "assignment-root",
5480
+ "block-labels",
5481
+ "buildchain-ref",
5482
+ "buildchain-repository",
5483
+ "closure-root",
5484
+ "defer-landing",
5485
+ "delivery-class",
5486
+ "delivery-priority",
5487
+ "delivery-warrant-mode",
5488
+ "dependency-root",
5489
+ "diagnostic-context",
5490
+ "dry-run",
5491
+ "environment-root",
5492
+ "expected-head-sha",
5493
+ "expected-pr-number",
5494
+ "handoff-workflow-id",
5495
+ "initiative-root",
5496
+ "landing-mode",
5497
+ "legacy-active-owner-binding-json",
5498
+ "max-merges",
5499
+ "merge-method",
5500
+ "native-command",
5501
+ "native-command-root",
5502
+ "native-heartbeat-seconds",
5503
+ "native-proof-json",
5504
+ "plan-root",
5505
+ "project-cut-proof-json",
5506
+ "queue-admission-context",
5507
+ "ready-label",
5508
+ "release-blocker-priority-json",
5509
+ "require-approval",
5510
+ "required-status-checks",
5511
+ "same-repository-only",
5512
+ "shard-evidence-roots-json",
5513
+ "source-identity-root",
5514
+ "source-patch-root",
5515
+ "source-workflow-id",
5516
+ "source-workflow-run-id",
5517
+ "target-branch",
5518
+ "toolchain-root",
5519
+ "universal-request-json",
5520
+ "warrant-lease-seconds"
4414
5521
  ],
4415
5522
  "reverseAuditSource": ".github/workflows"
4416
5523
  },
4417
5524
  {
4418
- "id": "workflow:.sam-release",
4419
- "name": "workflow:.sam-release",
5525
+ "id": "workflow:dev-qualification-patrol",
5526
+ "name": "workflow:dev-qualification-patrol",
4420
5527
  "kind": "workflow",
4421
- "sourcePath": ".github/workflows/.sam-release.yml",
4422
- "evidencePath": ".github/workflows/.sam-release.yml",
5528
+ "sourcePath": ".github/workflows/dev-qualification-patrol.yml",
5529
+ "evidencePath": ".github/workflows/dev-qualification-patrol.yml",
4423
5530
  "availability": "shipped",
4424
5531
  "visibility": "public",
4425
5532
  "participantFacing": true,
4426
5533
  "public": true,
4427
- "inputCount": 4,
5534
+ "inputCount": 11,
4428
5535
  "inputs": [
4429
- "aws-region",
4430
- "aws-role",
4431
- "aws-root",
4432
- "bucket-release"
5536
+ "buildchain-ref",
5537
+ "buildchain-repository",
5538
+ "dev-workflow-path",
5539
+ "dispatch-inputs-json",
5540
+ "dry-run",
5541
+ "max-attempts",
5542
+ "mutation-authorized",
5543
+ "preflight-workflow-path",
5544
+ "priority-workflows-json",
5545
+ "source-branch",
5546
+ "universal-request-json"
4433
5547
  ],
4434
5548
  "reverseAuditSource": ".github/workflows"
4435
5549
  },
4436
5550
  {
4437
- "id": "workflow:.sam-verify",
4438
- "name": "workflow:.sam-verify",
5551
+ "id": "workflow:engineering-housekeeper",
5552
+ "name": "workflow:engineering-housekeeper",
4439
5553
  "kind": "workflow",
4440
- "sourcePath": ".github/workflows/.sam-verify.yml",
4441
- "evidencePath": ".github/workflows/.sam-verify.yml",
5554
+ "sourcePath": ".github/workflows/engineering-housekeeper.yml",
5555
+ "evidencePath": ".github/workflows/engineering-housekeeper.yml",
4442
5556
  "availability": "shipped",
4443
5557
  "visibility": "public",
4444
5558
  "participantFacing": true,
4445
5559
  "public": true,
4446
- "inputCount": 4,
5560
+ "inputCount": 15,
4447
5561
  "inputs": [
4448
- "aws-region",
4449
- "aws-role",
4450
- "aws-root",
4451
- "manager"
5562
+ "apply-enabled",
5563
+ "artifact-prefix",
5564
+ "artifact-retention-days",
5565
+ "buildchain-ref",
5566
+ "buildchain-repository",
5567
+ "max-actions",
5568
+ "mode",
5569
+ "protected-patterns",
5570
+ "repository",
5571
+ "retained-patterns",
5572
+ "stale-days",
5573
+ "stale-pull-request-label",
5574
+ "target-branch",
5575
+ "temporary-branch-patterns",
5576
+ "universal-request-json"
4452
5577
  ],
4453
5578
  "reverseAuditSource": ".github/workflows"
4454
5579
  },
4455
5580
  {
4456
- "id": "workflow:.sync-release-page",
4457
- "name": "workflow:.sync-release-page",
5581
+ "id": "workflow:github-artifact-attestation",
5582
+ "name": "workflow:github-artifact-attestation",
4458
5583
  "kind": "workflow",
4459
- "sourcePath": ".github/workflows/.sync-release-page.yml",
4460
- "evidencePath": ".github/workflows/.sync-release-page.yml",
5584
+ "sourcePath": ".github/workflows/github-artifact-attestation.yml",
5585
+ "evidencePath": ".github/workflows/github-artifact-attestation.yml",
4461
5586
  "availability": "shipped",
4462
5587
  "visibility": "public",
4463
5588
  "participantFacing": true,
4464
5589
  "public": true,
4465
- "inputCount": 13,
5590
+ "inputCount": 14,
4466
5591
  "inputs": [
4467
- "aws-region",
4468
- "aws-role-arn",
4469
- "base-id",
4470
- "bucket-release",
4471
- "cloudfront-id",
4472
- "exclude",
4473
- "lower-edge",
4474
- "product",
4475
- "product-name",
4476
- "release-path",
4477
- "release-url",
4478
- "repo",
4479
- "upper-edge"
5592
+ "buildchain-ref",
5593
+ "environment",
5594
+ "evidence-artifact-name",
5595
+ "evidence-run-id",
5596
+ "platform-manifest-artifact-name",
5597
+ "platform-manifest-relative-path",
5598
+ "policy-json",
5599
+ "release-passport-artifact-name",
5600
+ "release-passport-relative-path",
5601
+ "retention-days",
5602
+ "source-sha",
5603
+ "subject-artifact-name",
5604
+ "subject-relative-path",
5605
+ "universal-request-json"
4480
5606
  ],
4481
5607
  "reverseAuditSource": ".github/workflows"
4482
5608
  },
4483
5609
  {
4484
- "id": "workflow:.sync-remote-git",
4485
- "name": "workflow:.sync-remote-git",
5610
+ "id": "workflow:paper-release-sealed",
5611
+ "name": "workflow:paper-release-sealed",
4486
5612
  "kind": "workflow",
4487
- "sourcePath": ".github/workflows/.sync-remote-git.yml",
4488
- "evidencePath": ".github/workflows/.sync-remote-git.yml",
5613
+ "sourcePath": ".github/workflows/paper-release-sealed.yml",
5614
+ "evidencePath": ".github/workflows/paper-release-sealed.yml",
4489
5615
  "availability": "shipped",
4490
5616
  "visibility": "public",
4491
5617
  "participantFacing": true,
4492
5618
  "public": true,
4493
- "inputCount": 4,
5619
+ "inputCount": 27,
4494
5620
  "inputs": [
4495
- "force",
4496
- "remote-host",
4497
- "remote-path",
4498
- "remote-repo"
5621
+ "artifact-name",
5622
+ "artifact-paths",
5623
+ "artifact-retention-days",
5624
+ "branch-protection-bypass-apps",
5625
+ "branch-protection-bypass-teams",
5626
+ "branch-protection-bypass-users",
5627
+ "buildchain-contract-lock-path",
5628
+ "buildchain-ref",
5629
+ "buildchain-repository",
5630
+ "dry-run",
5631
+ "github-governance-receipt-json",
5632
+ "github-release",
5633
+ "github-release-notes",
5634
+ "github-release-title",
5635
+ "package-name",
5636
+ "publish-dist-tag",
5637
+ "publisher-workflow-path",
5638
+ "release-passport-impact-json",
5639
+ "release-passport-output-dir",
5640
+ "release-passport-product-name",
5641
+ "required-status-check",
5642
+ "target-ref",
5643
+ "target-sha",
5644
+ "toolchain-type",
5645
+ "universal-request-json",
5646
+ "verify-command",
5647
+ "working-directory"
4499
5648
  ],
4500
5649
  "reverseAuditSource": ".github/workflows"
4501
5650
  },
4502
5651
  {
4503
- "id": "workflow:.web-surface",
4504
- "name": "workflow:.web-surface",
5652
+ "id": "workflow:paper-release",
5653
+ "name": "workflow:paper-release",
4505
5654
  "kind": "workflow",
4506
- "sourcePath": ".github/workflows/.web-surface.yml",
4507
- "evidencePath": ".github/workflows/.web-surface.yml",
5655
+ "sourcePath": ".github/workflows/paper-release.yml",
5656
+ "evidencePath": ".github/workflows/paper-release.yml",
4508
5657
  "availability": "shipped",
4509
5658
  "visibility": "public",
4510
5659
  "participantFacing": true,
4511
5660
  "public": true,
4512
- "inputCount": 43,
5661
+ "inputCount": 39,
4513
5662
  "inputs": [
4514
- "artifact-path",
4515
- "aws-region",
5663
+ "artifact-name",
5664
+ "artifact-retention-days",
5665
+ "branch-protection-bypass-apps",
5666
+ "branch-protection-bypass-teams",
5667
+ "branch-protection-bypass-users",
4516
5668
  "build-command",
4517
5669
  "buildchain-contract-compatibility-policy",
4518
5670
  "buildchain-contract-drift-issue-mode",
4519
- "buildchain-contract-expected-channel",
4520
- "buildchain-contract-expected-major",
4521
5671
  "buildchain-contract-lock-path",
4522
5672
  "buildchain-ref",
4523
5673
  "buildchain-repository",
4524
- "fail-on-release-pr-error",
5674
+ "dry-run",
4525
5675
  "github-governance-receipt-json",
5676
+ "github-release",
5677
+ "github-release-notes",
5678
+ "github-release-title",
4526
5679
  "node-version",
4527
- "preview-apply",
4528
- "preview-aws-role-arn",
4529
- "preview-cleanup-apply",
4530
- "preview-comment",
4531
- "preview-environment",
4532
- "production-apply",
4533
- "production-approved",
4534
- "production-aws-role-arn",
4535
- "production-environment",
4536
- "production-release-app-client-id",
4537
- "production-release-app-id",
4538
- "production-release-branch-channel",
4539
- "production-release-head-prefix",
4540
- "production-release-label",
4541
- "production-release-on-main",
4542
- "production-release-pr-mode",
4543
- "production-release-pr-token",
4544
- "production-source-sha",
5680
+ "package-name",
4545
5681
  "publication-admission-json",
4546
5682
  "publication-control-plane-audit-json",
4547
5683
  "publication-expected-json",
4548
- "publication-gate-aggregate-json",
4549
5684
  "publication-runner-provenance-json",
4550
5685
  "publication-used-nonces-json",
4551
- "release-feedback-actor-privacy",
4552
- "staging-apply",
4553
- "staging-aws-role-arn",
4554
- "staging-environment",
5686
+ "publish-dist-tag",
5687
+ "publish-package-set-order",
5688
+ "release-passport-impact-json",
5689
+ "release-passport-output-dir",
5690
+ "release-passport-product-name",
5691
+ "required-status-check",
5692
+ "setup-node",
5693
+ "target-ref",
5694
+ "target-sha",
5695
+ "toolchain-command",
5696
+ "toolchain-digest",
5697
+ "toolchain-image",
5698
+ "toolchain-type",
5699
+ "universal-request-json",
4555
5700
  "verify-command",
4556
- "working-directory"
4557
- ],
4558
- "reverseAuditSource": ".github/workflows"
4559
- },
4560
- {
4561
- "id": "workflow:.wheel-release",
4562
- "name": "workflow:.wheel-release",
4563
- "kind": "workflow",
4564
- "sourcePath": ".github/workflows/.wheel-release.yml",
4565
- "evidencePath": ".github/workflows/.wheel-release.yml",
4566
- "availability": "shipped",
4567
- "visibility": "public",
4568
- "participantFacing": true,
4569
- "public": true,
4570
- "inputCount": 3,
4571
- "inputs": [
4572
- "aws-region",
4573
- "aws-user-region",
4574
- "bucket-release"
4575
- ],
4576
- "reverseAuditSource": ".github/workflows"
4577
- },
4578
- {
4579
- "id": "workflow:.wheel-verify",
4580
- "name": "workflow:.wheel-verify",
4581
- "kind": "workflow",
4582
- "sourcePath": ".github/workflows/.wheel-verify.yml",
4583
- "evidencePath": ".github/workflows/.wheel-verify.yml",
4584
- "availability": "shipped",
4585
- "visibility": "public",
4586
- "participantFacing": true,
4587
- "public": true,
4588
- "inputCount": 5,
4589
- "inputs": [
4590
- "aws-user-region",
4591
- "bucket-release",
4592
- "max-preview-links",
4593
- "node-version",
4594
- "preview-files"
4595
- ],
4596
- "reverseAuditSource": ".github/workflows"
4597
- },
4598
- {
4599
- "id": "workflow:artifact-signing-authority",
4600
- "name": "workflow:artifact-signing-authority",
4601
- "kind": "workflow",
4602
- "sourcePath": ".github/workflows/artifact-signing-authority.yml",
4603
- "evidencePath": ".github/workflows/artifact-signing-authority.yml",
4604
- "availability": "shipped",
4605
- "visibility": "public",
4606
- "participantFacing": true,
4607
- "public": true,
4608
- "inputCount": 0,
4609
- "inputs": [],
5701
+ "working-directory"
5702
+ ],
4610
5703
  "reverseAuditSource": ".github/workflows"
4611
5704
  },
4612
5705
  {
4613
- "id": "workflow:auditable-demo-media-profile-qualification",
4614
- "name": "workflow:auditable-demo-media-profile-qualification",
5706
+ "id": "workflow:patrol-daily",
5707
+ "name": "workflow:patrol-daily",
4615
5708
  "kind": "workflow",
4616
- "sourcePath": ".github/workflows/auditable-demo-media-profile-qualification.yml",
4617
- "evidencePath": ".github/workflows/auditable-demo-media-profile-qualification.yml",
5709
+ "sourcePath": ".github/workflows/patrol-daily.yml",
5710
+ "evidencePath": ".github/workflows/patrol-daily.yml",
4618
5711
  "availability": "shipped",
4619
5712
  "visibility": "public",
4620
5713
  "participantFacing": true,
4621
5714
  "public": true,
4622
- "inputCount": 0,
4623
- "inputs": [],
5715
+ "inputCount": 14,
5716
+ "inputs": [
5717
+ "allowed-head-prefixes",
5718
+ "block-labels",
5719
+ "buildchain-ref",
5720
+ "buildchain-repository",
5721
+ "dry-run",
5722
+ "landing-mode",
5723
+ "max-actions",
5724
+ "merge-method",
5725
+ "ready-label",
5726
+ "require-approval",
5727
+ "required-status-checks",
5728
+ "same-repository-only",
5729
+ "target-branch",
5730
+ "universal-request-json"
5731
+ ],
4624
5732
  "reverseAuditSource": ".github/workflows"
4625
5733
  },
4626
5734
  {
4627
- "id": "workflow:auditable-demo",
4628
- "name": "workflow:auditable-demo",
5735
+ "id": "workflow:patrol-monthly",
5736
+ "name": "workflow:patrol-monthly",
4629
5737
  "kind": "workflow",
4630
- "sourcePath": ".github/workflows/auditable-demo.yml",
4631
- "evidencePath": ".github/workflows/auditable-demo.yml",
5738
+ "sourcePath": ".github/workflows/patrol-monthly.yml",
5739
+ "evidencePath": ".github/workflows/patrol-monthly.yml",
4632
5740
  "availability": "shipped",
4633
5741
  "visibility": "public",
4634
5742
  "participantFacing": true,
4635
5743
  "public": true,
4636
- "inputCount": 0,
4637
- "inputs": [],
5744
+ "inputCount": 5,
5745
+ "inputs": [
5746
+ "buildchain-ref",
5747
+ "buildchain-repository",
5748
+ "dry-run",
5749
+ "target-branch",
5750
+ "universal-request-json"
5751
+ ],
4638
5752
  "reverseAuditSource": ".github/workflows"
4639
5753
  },
4640
5754
  {
4641
- "id": "workflow:binary-distribution",
4642
- "name": "workflow:binary-distribution",
5755
+ "id": "workflow:patrol-observed-evidence",
5756
+ "name": "workflow:patrol-observed-evidence",
4643
5757
  "kind": "workflow",
4644
- "sourcePath": ".github/workflows/binary-distribution.yml",
4645
- "evidencePath": ".github/workflows/binary-distribution.yml",
5758
+ "sourcePath": ".github/workflows/patrol-observed-evidence.yml",
5759
+ "evidencePath": ".github/workflows/patrol-observed-evidence.yml",
4646
5760
  "availability": "shipped",
4647
5761
  "visibility": "public",
4648
5762
  "participantFacing": true,
4649
5763
  "public": true,
4650
- "inputCount": 0,
4651
- "inputs": [],
5764
+ "inputCount": 13,
5765
+ "inputs": [
5766
+ "artifact-path",
5767
+ "build-command",
5768
+ "buildchain-ref",
5769
+ "cloudfront-distribution",
5770
+ "evidence-source-path",
5771
+ "evidence-source-ref",
5772
+ "evidence-source-repository",
5773
+ "manifest-path",
5774
+ "production-aws-role-arn",
5775
+ "production-bucket",
5776
+ "production-environment",
5777
+ "universal-request-json",
5778
+ "verify-command"
5779
+ ],
4652
5780
  "reverseAuditSource": ".github/workflows"
4653
5781
  },
4654
5782
  {
4655
- "id": "workflow:binary-release-assets",
4656
- "name": "workflow:binary-release-assets",
5783
+ "id": "workflow:patrol-weekly",
5784
+ "name": "workflow:patrol-weekly",
4657
5785
  "kind": "workflow",
4658
- "sourcePath": ".github/workflows/binary-release-assets.yml",
4659
- "evidencePath": ".github/workflows/binary-release-assets.yml",
5786
+ "sourcePath": ".github/workflows/patrol-weekly.yml",
5787
+ "evidencePath": ".github/workflows/patrol-weekly.yml",
4660
5788
  "availability": "shipped",
4661
5789
  "visibility": "public",
4662
5790
  "participantFacing": true,
4663
5791
  "public": true,
4664
- "inputCount": 0,
4665
- "inputs": [],
5792
+ "inputCount": 5,
5793
+ "inputs": [
5794
+ "buildchain-ref",
5795
+ "buildchain-repository",
5796
+ "dry-run",
5797
+ "target-branch",
5798
+ "universal-request-json"
5799
+ ],
4666
5800
  "reverseAuditSource": ".github/workflows"
4667
5801
  },
4668
5802
  {
4669
- "id": "workflow:build-surface-fixture",
4670
- "name": "workflow:build-surface-fixture",
5803
+ "id": "workflow:public-build-adopter-qualification",
5804
+ "name": "workflow:public-build-adopter-qualification",
4671
5805
  "kind": "workflow",
4672
- "sourcePath": ".github/workflows/build-surface-fixture.yml",
4673
- "evidencePath": ".github/workflows/build-surface-fixture.yml",
5806
+ "sourcePath": ".github/workflows/public-build-adopter-qualification.yml",
5807
+ "evidencePath": ".github/workflows/public-build-adopter-qualification.yml",
4674
5808
  "availability": "shipped",
4675
5809
  "visibility": "public",
4676
5810
  "participantFacing": true,
4677
5811
  "public": true,
4678
- "inputCount": 0,
4679
- "inputs": [],
5812
+ "inputCount": 9,
5813
+ "inputs": [
5814
+ "archive-path",
5815
+ "bootstrap-path",
5816
+ "consumer",
5817
+ "consumer-ref",
5818
+ "consumer-repository",
5819
+ "input-path",
5820
+ "invocation-source-path",
5821
+ "node-version",
5822
+ "universal-request-json"
5823
+ ],
4680
5824
  "reverseAuditSource": ".github/workflows"
4681
5825
  },
4682
5826
  {
4683
- "id": "workflow:build",
4684
- "name": "workflow:build",
5827
+ "id": "workflow:public-build-candidate",
5828
+ "name": "workflow:public-build-candidate",
4685
5829
  "kind": "workflow",
4686
- "sourcePath": ".github/workflows/build.yml",
4687
- "evidencePath": ".github/workflows/build.yml",
5830
+ "sourcePath": ".github/workflows/public-build-candidate.yml",
5831
+ "evidencePath": ".github/workflows/public-build-candidate.yml",
4688
5832
  "availability": "shipped",
4689
5833
  "visibility": "public",
4690
5834
  "participantFacing": true,
4691
5835
  "public": true,
4692
- "inputCount": 96,
5836
+ "inputCount": 97,
4693
5837
  "inputs": [
4694
5838
  "artifact-compression-level",
4695
5839
  "artifact-finalization-command",
@@ -4783,6 +5927,7 @@
4783
5927
  "setup-rust",
4784
5928
  "shifu-cache-profile-digest",
4785
5929
  "shifu-cache-profile-ref",
5930
+ "universal-request-json",
4786
5931
  "untrusted-policy",
4787
5932
  "verify-command",
4788
5933
  "verify-substage-evidence-path",
@@ -4791,482 +5936,570 @@
4791
5936
  "reverseAuditSource": ".github/workflows"
4792
5937
  },
4793
5938
  {
4794
- "id": "workflow:buildchain-alpha-self-dogfood",
4795
- "name": "workflow:buildchain-alpha-self-dogfood",
4796
- "kind": "workflow",
4797
- "sourcePath": ".github/workflows/buildchain-alpha-self-dogfood.yml",
4798
- "evidencePath": ".github/workflows/buildchain-alpha-self-dogfood.yml",
4799
- "availability": "shipped",
4800
- "visibility": "public",
4801
- "participantFacing": true,
4802
- "public": true,
4803
- "inputCount": 0,
4804
- "inputs": [],
4805
- "reverseAuditSource": ".github/workflows"
4806
- },
4807
- {
4808
- "id": "workflow:buildchain-candidate-recovery-dogfood-failure",
4809
- "name": "workflow:buildchain-candidate-recovery-dogfood-failure",
4810
- "kind": "workflow",
4811
- "sourcePath": ".github/workflows/buildchain-candidate-recovery-dogfood-failure.yml",
4812
- "evidencePath": ".github/workflows/buildchain-candidate-recovery-dogfood-failure.yml",
4813
- "availability": "shipped",
4814
- "visibility": "public",
4815
- "participantFacing": true,
4816
- "public": true,
4817
- "inputCount": 0,
4818
- "inputs": [],
4819
- "reverseAuditSource": ".github/workflows"
4820
- },
4821
- {
4822
- "id": "workflow:buildchain-dev-delivery",
4823
- "name": "workflow:buildchain-dev-delivery",
5939
+ "id": "workflow:public-build-check",
5940
+ "name": "workflow:public-build-check",
4824
5941
  "kind": "workflow",
4825
- "sourcePath": ".github/workflows/buildchain-dev-delivery.yml",
4826
- "evidencePath": ".github/workflows/buildchain-dev-delivery.yml",
5942
+ "sourcePath": ".github/workflows/public-build-check.yml",
5943
+ "evidencePath": ".github/workflows/public-build-check.yml",
4827
5944
  "availability": "shipped",
4828
5945
  "visibility": "public",
4829
5946
  "participantFacing": true,
4830
5947
  "public": true,
4831
- "inputCount": 0,
4832
- "inputs": [],
5948
+ "inputCount": 13,
5949
+ "inputs": [
5950
+ "buildchain-ref",
5951
+ "buildchain-repository",
5952
+ "mode",
5953
+ "node-version",
5954
+ "require-version-state",
5955
+ "source-proof-closure-paths-json",
5956
+ "source-proof-dependency-paths-json",
5957
+ "source-proof-policy-paths-json",
5958
+ "source-proof-required-contexts-json",
5959
+ "source-proof-reuse",
5960
+ "universal-request-json",
5961
+ "upload-artifacts",
5962
+ "working-directory"
5963
+ ],
4833
5964
  "reverseAuditSource": ".github/workflows"
4834
5965
  },
4835
5966
  {
4836
- "id": "workflow:buildchain-patrol-daily",
4837
- "name": "workflow:buildchain-patrol-daily",
5967
+ "id": "workflow:public-build-demo",
5968
+ "name": "workflow:public-build-demo",
4838
5969
  "kind": "workflow",
4839
- "sourcePath": ".github/workflows/buildchain-patrol-daily.yml",
4840
- "evidencePath": ".github/workflows/buildchain-patrol-daily.yml",
5970
+ "sourcePath": ".github/workflows/public-build-demo.yml",
5971
+ "evidencePath": ".github/workflows/public-build-demo.yml",
4841
5972
  "availability": "shipped",
4842
5973
  "visibility": "public",
4843
5974
  "participantFacing": true,
4844
5975
  "public": true,
4845
- "inputCount": 0,
4846
- "inputs": [],
5976
+ "inputCount": 13,
5977
+ "inputs": [
5978
+ "artifact-retention-days",
5979
+ "binary-artifact-digest",
5980
+ "binary-artifact-name",
5981
+ "buildchain-repository",
5982
+ "materialize",
5983
+ "materialize-base-ref",
5984
+ "media-profile",
5985
+ "render-failure-advisory",
5986
+ "render-media",
5987
+ "renderer-image",
5988
+ "scenario-path",
5989
+ "source-ref",
5990
+ "universal-request-json"
5991
+ ],
4847
5992
  "reverseAuditSource": ".github/workflows"
4848
5993
  },
4849
5994
  {
4850
- "id": "workflow:buildchain-patrol-monthly",
4851
- "name": "workflow:buildchain-patrol-monthly",
5995
+ "id": "workflow:public-build-publication",
5996
+ "name": "workflow:public-build-publication",
4852
5997
  "kind": "workflow",
4853
- "sourcePath": ".github/workflows/buildchain-patrol-monthly.yml",
4854
- "evidencePath": ".github/workflows/buildchain-patrol-monthly.yml",
5998
+ "sourcePath": ".github/workflows/public-build-publication.yml",
5999
+ "evidencePath": ".github/workflows/public-build-publication.yml",
4855
6000
  "availability": "shipped",
4856
6001
  "visibility": "public",
4857
6002
  "participantFacing": true,
4858
6003
  "public": true,
4859
- "inputCount": 0,
4860
- "inputs": [],
6004
+ "inputCount": 24,
6005
+ "inputs": [
6006
+ "artifact-name",
6007
+ "artifact-paths",
6008
+ "artifact-retention-days",
6009
+ "build-command",
6010
+ "buildchain-alpha-contract-lock-path",
6011
+ "buildchain-contract-compatibility-policy",
6012
+ "buildchain-contract-drift-issue-mode",
6013
+ "buildchain-contract-lock-path",
6014
+ "buildchain-ref",
6015
+ "buildchain-repository",
6016
+ "buildchain-stable-contract-lock-path",
6017
+ "node-version",
6018
+ "package-name",
6019
+ "prepare-paper-package",
6020
+ "publish-dist-tag",
6021
+ "setup-node",
6022
+ "target-ref",
6023
+ "toolchain-command",
6024
+ "toolchain-digest",
6025
+ "toolchain-image",
6026
+ "toolchain-type",
6027
+ "universal-request-json",
6028
+ "verify-command",
6029
+ "working-directory"
6030
+ ],
4861
6031
  "reverseAuditSource": ".github/workflows"
4862
6032
  },
4863
6033
  {
4864
- "id": "workflow:buildchain-patrol-weekly",
4865
- "name": "workflow:buildchain-patrol-weekly",
6034
+ "id": "workflow:public-build-stage-capsule-canary",
6035
+ "name": "workflow:public-build-stage-capsule-canary",
4866
6036
  "kind": "workflow",
4867
- "sourcePath": ".github/workflows/buildchain-patrol-weekly.yml",
4868
- "evidencePath": ".github/workflows/buildchain-patrol-weekly.yml",
6037
+ "sourcePath": ".github/workflows/public-build-stage-capsule-canary.yml",
6038
+ "evidencePath": ".github/workflows/public-build-stage-capsule-canary.yml",
4869
6039
  "availability": "shipped",
4870
6040
  "visibility": "public",
4871
6041
  "participantFacing": true,
4872
6042
  "public": true,
4873
- "inputCount": 0,
4874
- "inputs": [],
6043
+ "inputCount": 7,
6044
+ "inputs": [
6045
+ "build-artifact-path",
6046
+ "consumer",
6047
+ "go-version",
6048
+ "install-artifact-path",
6049
+ "node-version",
6050
+ "universal-request-json",
6051
+ "verify-artifact-path"
6052
+ ],
4875
6053
  "reverseAuditSource": ".github/workflows"
4876
6054
  },
4877
6055
  {
4878
- "id": "workflow:buildchain-patrol",
4879
- "name": "workflow:buildchain-patrol",
6056
+ "id": "workflow:public-ops-alpha-candidate-patrol",
6057
+ "name": "workflow:public-ops-alpha-candidate-patrol",
4880
6058
  "kind": "workflow",
4881
- "sourcePath": ".github/workflows/buildchain-patrol.yml",
4882
- "evidencePath": ".github/workflows/buildchain-patrol.yml",
6059
+ "sourcePath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
6060
+ "evidencePath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
4883
6061
  "availability": "shipped",
4884
6062
  "visibility": "public",
4885
6063
  "participantFacing": true,
4886
6064
  "public": true,
4887
6065
  "inputCount": 16,
4888
6066
  "inputs": [
4889
- "allowed-head-prefixes",
4890
- "block-labels",
6067
+ "alpha-workflow-path",
6068
+ "auto-merge",
4891
6069
  "buildchain-ref",
4892
6070
  "buildchain-repository",
4893
- "cadence",
4894
- "capabilities",
6071
+ "create-pull-request",
6072
+ "dev-workflow-path",
4895
6073
  "dry-run",
4896
- "landing-mode",
4897
- "max-actions",
6074
+ "max-age-seconds",
4898
6075
  "merge-method",
4899
- "mode",
4900
- "ready-label",
4901
- "require-approval",
4902
- "required-status-checks",
4903
- "same-repository-only",
4904
- "target-branch"
6076
+ "pull-request-body-prefix",
6077
+ "pull-request-body-prefix-renderer",
6078
+ "reactivation-authorized",
6079
+ "settlement-authorized",
6080
+ "source-branch",
6081
+ "target-branch",
6082
+ "universal-request-json"
4905
6083
  ],
4906
6084
  "reverseAuditSource": ".github/workflows"
4907
6085
  },
4908
6086
  {
4909
- "id": "workflow:buildchain-ref-promotion-recovery",
4910
- "name": "workflow:buildchain-ref-promotion-recovery",
6087
+ "id": "workflow:public-ops-bootstrap-recovery",
6088
+ "name": "workflow:public-ops-bootstrap-recovery",
4911
6089
  "kind": "workflow",
4912
- "sourcePath": ".github/workflows/buildchain-ref-promotion-recovery.yml",
4913
- "evidencePath": ".github/workflows/buildchain-ref-promotion-recovery.yml",
6090
+ "sourcePath": ".github/workflows/public-ops-bootstrap-recovery.yml",
6091
+ "evidencePath": ".github/workflows/public-ops-bootstrap-recovery.yml",
4914
6092
  "availability": "shipped",
4915
6093
  "visibility": "public",
4916
6094
  "participantFacing": true,
4917
6095
  "public": true,
4918
- "inputCount": 0,
4919
- "inputs": [],
6096
+ "inputCount": 1,
6097
+ "inputs": [
6098
+ "request-json"
6099
+ ],
4920
6100
  "reverseAuditSource": ".github/workflows"
4921
6101
  },
4922
6102
  {
4923
- "id": "workflow:buildchain-ref-promotion",
4924
- "name": "workflow:buildchain-ref-promotion",
6103
+ "id": "workflow:public-ops-bootstrap",
6104
+ "name": "workflow:public-ops-bootstrap",
4925
6105
  "kind": "workflow",
4926
- "sourcePath": ".github/workflows/buildchain-ref-promotion.yml",
4927
- "evidencePath": ".github/workflows/buildchain-ref-promotion.yml",
6106
+ "sourcePath": ".github/workflows/public-ops-bootstrap.yml",
6107
+ "evidencePath": ".github/workflows/public-ops-bootstrap.yml",
4928
6108
  "availability": "shipped",
4929
6109
  "visibility": "public",
4930
6110
  "participantFacing": true,
4931
6111
  "public": true,
4932
- "inputCount": 0,
4933
- "inputs": [],
6112
+ "inputCount": 1,
6113
+ "inputs": [
6114
+ "request-json"
6115
+ ],
4934
6116
  "reverseAuditSource": ".github/workflows"
4935
6117
  },
4936
6118
  {
4937
- "id": "workflow:buildchain-stable-candidate-patrol",
4938
- "name": "workflow:buildchain-stable-candidate-patrol",
6119
+ "id": "workflow:public-ops-dev-auto-merge",
6120
+ "name": "workflow:public-ops-dev-auto-merge",
4939
6121
  "kind": "workflow",
4940
- "sourcePath": ".github/workflows/buildchain-stable-candidate-patrol.yml",
4941
- "evidencePath": ".github/workflows/buildchain-stable-candidate-patrol.yml",
6122
+ "sourcePath": ".github/workflows/public-ops-dev-auto-merge.yml",
6123
+ "evidencePath": ".github/workflows/public-ops-dev-auto-merge.yml",
4942
6124
  "availability": "shipped",
4943
6125
  "visibility": "public",
4944
6126
  "participantFacing": true,
4945
6127
  "public": true,
4946
- "inputCount": 0,
4947
- "inputs": [],
6128
+ "inputCount": 45,
6129
+ "inputs": [
6130
+ "active-lease-context",
6131
+ "affected-paths-json",
6132
+ "allowed-head-prefixes",
6133
+ "assignment-root",
6134
+ "block-labels",
6135
+ "buildchain-ref",
6136
+ "buildchain-repository",
6137
+ "closure-root",
6138
+ "defer-landing",
6139
+ "delivery-class",
6140
+ "delivery-priority",
6141
+ "delivery-warrant-mode",
6142
+ "dependency-root",
6143
+ "diagnostic-context",
6144
+ "dry-run",
6145
+ "environment-root",
6146
+ "expected-head-sha",
6147
+ "expected-pr-number",
6148
+ "handoff-workflow-id",
6149
+ "initiative-root",
6150
+ "landing-mode",
6151
+ "legacy-active-owner-binding-json",
6152
+ "max-merges",
6153
+ "merge-method",
6154
+ "native-command",
6155
+ "native-command-root",
6156
+ "native-heartbeat-seconds",
6157
+ "native-proof-json",
6158
+ "plan-root",
6159
+ "project-cut-proof-json",
6160
+ "queue-admission-context",
6161
+ "ready-label",
6162
+ "release-blocker-priority-json",
6163
+ "require-approval",
6164
+ "required-status-checks",
6165
+ "same-repository-only",
6166
+ "shard-evidence-roots-json",
6167
+ "source-identity-root",
6168
+ "source-patch-root",
6169
+ "source-workflow-id",
6170
+ "source-workflow-run-id",
6171
+ "target-branch",
6172
+ "toolchain-root",
6173
+ "universal-request-json",
6174
+ "warrant-lease-seconds"
6175
+ ],
4948
6176
  "reverseAuditSource": ".github/workflows"
4949
6177
  },
4950
6178
  {
4951
- "id": "workflow:buildchain-stable-candidate-qualification",
4952
- "name": "workflow:buildchain-stable-candidate-qualification",
6179
+ "id": "workflow:public-ops-dev-qualification-patrol",
6180
+ "name": "workflow:public-ops-dev-qualification-patrol",
4953
6181
  "kind": "workflow",
4954
- "sourcePath": ".github/workflows/buildchain-stable-candidate-qualification.yml",
4955
- "evidencePath": ".github/workflows/buildchain-stable-candidate-qualification.yml",
6182
+ "sourcePath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
6183
+ "evidencePath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
4956
6184
  "availability": "shipped",
4957
6185
  "visibility": "public",
4958
6186
  "participantFacing": true,
4959
6187
  "public": true,
4960
- "inputCount": 0,
4961
- "inputs": [],
6188
+ "inputCount": 11,
6189
+ "inputs": [
6190
+ "buildchain-ref",
6191
+ "buildchain-repository",
6192
+ "dev-workflow-path",
6193
+ "dispatch-inputs-json",
6194
+ "dry-run",
6195
+ "max-attempts",
6196
+ "mutation-authorized",
6197
+ "preflight-workflow-path",
6198
+ "priority-workflows-json",
6199
+ "source-branch",
6200
+ "universal-request-json"
6201
+ ],
4962
6202
  "reverseAuditSource": ".github/workflows"
4963
6203
  },
4964
6204
  {
4965
- "id": "workflow:candidate-lab",
4966
- "name": "workflow:candidate-lab",
6205
+ "id": "workflow:public-ops-housekeeping",
6206
+ "name": "workflow:public-ops-housekeeping",
4967
6207
  "kind": "workflow",
4968
- "sourcePath": ".github/workflows/candidate-lab.yml",
4969
- "evidencePath": ".github/workflows/candidate-lab.yml",
6208
+ "sourcePath": ".github/workflows/public-ops-housekeeping.yml",
6209
+ "evidencePath": ".github/workflows/public-ops-housekeeping.yml",
4970
6210
  "availability": "shipped",
4971
6211
  "visibility": "public",
4972
6212
  "participantFacing": true,
4973
6213
  "public": true,
4974
- "inputCount": 0,
4975
- "inputs": [],
6214
+ "inputCount": 15,
6215
+ "inputs": [
6216
+ "apply-enabled",
6217
+ "artifact-prefix",
6218
+ "artifact-retention-days",
6219
+ "buildchain-ref",
6220
+ "buildchain-repository",
6221
+ "max-actions",
6222
+ "mode",
6223
+ "protected-patterns",
6224
+ "repository",
6225
+ "retained-patterns",
6226
+ "stale-days",
6227
+ "stale-pull-request-label",
6228
+ "target-branch",
6229
+ "temporary-branch-patterns",
6230
+ "universal-request-json"
6231
+ ],
4976
6232
  "reverseAuditSource": ".github/workflows"
4977
6233
  },
4978
6234
  {
4979
- "id": "workflow:check",
4980
- "name": "workflow:check",
6235
+ "id": "workflow:public-ops-observed-evidence",
6236
+ "name": "workflow:public-ops-observed-evidence",
4981
6237
  "kind": "workflow",
4982
- "sourcePath": ".github/workflows/check.yml",
4983
- "evidencePath": ".github/workflows/check.yml",
6238
+ "sourcePath": ".github/workflows/public-ops-observed-evidence.yml",
6239
+ "evidencePath": ".github/workflows/public-ops-observed-evidence.yml",
4984
6240
  "availability": "shipped",
4985
6241
  "visibility": "public",
4986
6242
  "participantFacing": true,
4987
6243
  "public": true,
4988
- "inputCount": 12,
6244
+ "inputCount": 13,
4989
6245
  "inputs": [
6246
+ "artifact-path",
6247
+ "build-command",
4990
6248
  "buildchain-ref",
4991
- "buildchain-repository",
4992
- "mode",
4993
- "node-version",
4994
- "require-version-state",
4995
- "source-proof-closure-paths-json",
4996
- "source-proof-dependency-paths-json",
4997
- "source-proof-policy-paths-json",
4998
- "source-proof-required-contexts-json",
4999
- "source-proof-reuse",
5000
- "upload-artifacts",
5001
- "working-directory"
6249
+ "cloudfront-distribution",
6250
+ "evidence-source-path",
6251
+ "evidence-source-ref",
6252
+ "evidence-source-repository",
6253
+ "manifest-path",
6254
+ "production-aws-role-arn",
6255
+ "production-bucket",
6256
+ "production-environment",
6257
+ "universal-request-json",
6258
+ "verify-command"
5002
6259
  ],
5003
6260
  "reverseAuditSource": ".github/workflows"
5004
6261
  },
5005
6262
  {
5006
- "id": "workflow:dev-alpha-candidate-patrol",
5007
- "name": "workflow:dev-alpha-candidate-patrol",
6263
+ "id": "workflow:public-ops-patrol-daily",
6264
+ "name": "workflow:public-ops-patrol-daily",
5008
6265
  "kind": "workflow",
5009
- "sourcePath": ".github/workflows/dev-alpha-candidate-patrol.yml",
5010
- "evidencePath": ".github/workflows/dev-alpha-candidate-patrol.yml",
6266
+ "sourcePath": ".github/workflows/public-ops-patrol-daily.yml",
6267
+ "evidencePath": ".github/workflows/public-ops-patrol-daily.yml",
5011
6268
  "availability": "shipped",
5012
6269
  "visibility": "public",
5013
6270
  "participantFacing": true,
5014
6271
  "public": true,
5015
- "inputCount": 15,
6272
+ "inputCount": 14,
5016
6273
  "inputs": [
5017
- "alpha-workflow-path",
5018
- "auto-merge",
6274
+ "allowed-head-prefixes",
6275
+ "block-labels",
5019
6276
  "buildchain-ref",
5020
6277
  "buildchain-repository",
5021
- "create-pull-request",
5022
- "dev-workflow-path",
5023
6278
  "dry-run",
5024
- "max-age-seconds",
6279
+ "landing-mode",
6280
+ "max-actions",
5025
6281
  "merge-method",
5026
- "pull-request-body-prefix",
5027
- "pull-request-body-prefix-renderer",
5028
- "reactivation-authorized",
5029
- "settlement-authorized",
5030
- "source-branch",
5031
- "target-branch"
6282
+ "ready-label",
6283
+ "require-approval",
6284
+ "required-status-checks",
6285
+ "same-repository-only",
6286
+ "target-branch",
6287
+ "universal-request-json"
5032
6288
  ],
5033
6289
  "reverseAuditSource": ".github/workflows"
5034
6290
  },
5035
6291
  {
5036
- "id": "workflow:dev-delivery-warrant-cancel",
5037
- "name": "workflow:dev-delivery-warrant-cancel",
6292
+ "id": "workflow:public-ops-patrol-monthly",
6293
+ "name": "workflow:public-ops-patrol-monthly",
5038
6294
  "kind": "workflow",
5039
- "sourcePath": ".github/workflows/dev-delivery-warrant-cancel.yml",
5040
- "evidencePath": ".github/workflows/dev-delivery-warrant-cancel.yml",
6295
+ "sourcePath": ".github/workflows/public-ops-patrol-monthly.yml",
6296
+ "evidencePath": ".github/workflows/public-ops-patrol-monthly.yml",
5041
6297
  "availability": "shipped",
5042
6298
  "visibility": "public",
5043
6299
  "participantFacing": true,
5044
6300
  "public": true,
5045
- "inputCount": 12,
6301
+ "inputCount": 5,
5046
6302
  "inputs": [
5047
6303
  "buildchain-ref",
5048
6304
  "buildchain-repository",
5049
- "event-action",
5050
- "expected-candidate-id",
5051
- "expected-old-state-root",
5052
- "expected-pr-number",
5053
- "expected-source-head-sha",
5054
- "observed-source-head-sha",
5055
- "outcome",
5056
- "reason",
6305
+ "dry-run",
5057
6306
  "target-branch",
5058
- "terminal-evidence-root"
6307
+ "universal-request-json"
5059
6308
  ],
5060
6309
  "reverseAuditSource": ".github/workflows"
5061
6310
  },
5062
6311
  {
5063
- "id": "workflow:dev-delivery-warrant-close",
5064
- "name": "workflow:dev-delivery-warrant-close",
6312
+ "id": "workflow:public-ops-patrol-weekly",
6313
+ "name": "workflow:public-ops-patrol-weekly",
5065
6314
  "kind": "workflow",
5066
- "sourcePath": ".github/workflows/dev-delivery-warrant-close.yml",
5067
- "evidencePath": ".github/workflows/dev-delivery-warrant-close.yml",
6315
+ "sourcePath": ".github/workflows/public-ops-patrol-weekly.yml",
6316
+ "evidencePath": ".github/workflows/public-ops-patrol-weekly.yml",
5068
6317
  "availability": "shipped",
5069
6318
  "visibility": "public",
5070
6319
  "participantFacing": true,
5071
6320
  "public": true,
5072
- "inputCount": 13,
6321
+ "inputCount": 5,
5073
6322
  "inputs": [
5074
6323
  "buildchain-ref",
5075
6324
  "buildchain-repository",
5076
- "current-base-sha",
5077
- "expected-head-sha",
5078
- "expected-pr-number",
5079
- "merge-group-head-sha",
5080
- "merge-group-tree-sha",
5081
- "outcome",
5082
- "reason",
5083
- "replay-tree-sha",
5084
- "required-context-roots-json",
6325
+ "dry-run",
5085
6326
  "target-branch",
5086
- "terminal-evidence-root"
6327
+ "universal-request-json"
5087
6328
  ],
5088
6329
  "reverseAuditSource": ".github/workflows"
5089
6330
  },
5090
6331
  {
5091
- "id": "workflow:dev-merge-queue-governance",
5092
- "name": "workflow:dev-merge-queue-governance",
5093
- "kind": "workflow",
5094
- "sourcePath": ".github/workflows/dev-merge-queue-governance.yml",
5095
- "evidencePath": ".github/workflows/dev-merge-queue-governance.yml",
5096
- "availability": "shipped",
5097
- "visibility": "public",
5098
- "participantFacing": true,
5099
- "public": true,
5100
- "inputCount": 0,
5101
- "inputs": [],
5102
- "reverseAuditSource": ".github/workflows"
5103
- },
5104
- {
5105
- "id": "workflow:dev-pr-auto-merge",
5106
- "name": "workflow:dev-pr-auto-merge",
6332
+ "id": "workflow:public-ops-patrol",
6333
+ "name": "workflow:public-ops-patrol",
5107
6334
  "kind": "workflow",
5108
- "sourcePath": ".github/workflows/dev-pr-auto-merge.yml",
5109
- "evidencePath": ".github/workflows/dev-pr-auto-merge.yml",
6335
+ "sourcePath": ".github/workflows/public-ops-patrol.yml",
6336
+ "evidencePath": ".github/workflows/public-ops-patrol.yml",
5110
6337
  "availability": "shipped",
5111
6338
  "visibility": "public",
5112
6339
  "participantFacing": true,
5113
6340
  "public": true,
5114
- "inputCount": 44,
6341
+ "inputCount": 17,
5115
6342
  "inputs": [
5116
- "active-lease-context",
5117
- "affected-paths-json",
5118
6343
  "allowed-head-prefixes",
5119
- "assignment-root",
5120
6344
  "block-labels",
5121
6345
  "buildchain-ref",
5122
6346
  "buildchain-repository",
5123
- "closure-root",
5124
- "defer-landing",
5125
- "delivery-class",
5126
- "delivery-priority",
5127
- "delivery-warrant-mode",
5128
- "dependency-root",
5129
- "diagnostic-context",
6347
+ "cadence",
6348
+ "capabilities",
5130
6349
  "dry-run",
5131
- "environment-root",
5132
- "expected-head-sha",
5133
- "expected-pr-number",
5134
- "handoff-workflow-id",
5135
- "initiative-root",
5136
6350
  "landing-mode",
5137
- "legacy-active-owner-binding-json",
5138
- "max-merges",
6351
+ "max-actions",
5139
6352
  "merge-method",
5140
- "native-command",
5141
- "native-command-root",
5142
- "native-heartbeat-seconds",
5143
- "native-proof-json",
5144
- "plan-root",
5145
- "project-cut-proof-json",
5146
- "queue-admission-context",
6353
+ "mode",
5147
6354
  "ready-label",
5148
- "release-blocker-priority-json",
5149
6355
  "require-approval",
5150
6356
  "required-status-checks",
5151
6357
  "same-repository-only",
5152
- "shard-evidence-roots-json",
5153
- "source-identity-root",
5154
- "source-patch-root",
5155
- "source-workflow-id",
5156
- "source-workflow-run-id",
5157
6358
  "target-branch",
5158
- "toolchain-root",
5159
- "warrant-lease-seconds"
6359
+ "universal-request-json"
5160
6360
  ],
5161
6361
  "reverseAuditSource": ".github/workflows"
5162
6362
  },
5163
6363
  {
5164
- "id": "workflow:dev-qualification-patrol",
5165
- "name": "workflow:dev-qualification-patrol",
6364
+ "id": "workflow:public-ops-release-governance",
6365
+ "name": "workflow:public-ops-release-governance",
5166
6366
  "kind": "workflow",
5167
- "sourcePath": ".github/workflows/dev-qualification-patrol.yml",
5168
- "evidencePath": ".github/workflows/dev-qualification-patrol.yml",
6367
+ "sourcePath": ".github/workflows/public-ops-release-governance.yml",
6368
+ "evidencePath": ".github/workflows/public-ops-release-governance.yml",
5169
6369
  "availability": "shipped",
5170
6370
  "visibility": "public",
5171
6371
  "participantFacing": true,
5172
6372
  "public": true,
5173
- "inputCount": 10,
6373
+ "inputCount": 5,
5174
6374
  "inputs": [
6375
+ "apply",
6376
+ "branch",
5175
6377
  "buildchain-ref",
5176
- "buildchain-repository",
5177
- "dev-workflow-path",
5178
- "dispatch-inputs-json",
5179
- "dry-run",
5180
- "max-attempts",
5181
- "mutation-authorized",
5182
- "preflight-workflow-path",
5183
- "priority-workflows-json",
5184
- "source-branch"
6378
+ "candidate-sha",
6379
+ "universal-request-json"
5185
6380
  ],
5186
6381
  "reverseAuditSource": ".github/workflows"
5187
6382
  },
5188
6383
  {
5189
- "id": "workflow:engineering-housekeeper-daily",
5190
- "name": "workflow:engineering-housekeeper-daily",
6384
+ "id": "workflow:public-ops-stable-candidate-patrol",
6385
+ "name": "workflow:public-ops-stable-candidate-patrol",
5191
6386
  "kind": "workflow",
5192
- "sourcePath": ".github/workflows/engineering-housekeeper-daily.yml",
5193
- "evidencePath": ".github/workflows/engineering-housekeeper-daily.yml",
6387
+ "sourcePath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
6388
+ "evidencePath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
5194
6389
  "availability": "shipped",
5195
6390
  "visibility": "public",
5196
6391
  "participantFacing": true,
5197
6392
  "public": true,
5198
- "inputCount": 0,
5199
- "inputs": [],
6393
+ "inputCount": 17,
6394
+ "inputs": [
6395
+ "auto-approve",
6396
+ "auto-merge",
6397
+ "auto-promote",
6398
+ "buildchain-ref",
6399
+ "buildchain-repository",
6400
+ "dry-run",
6401
+ "hold",
6402
+ "hold-reason",
6403
+ "ledger-ref",
6404
+ "merge-method",
6405
+ "minimum-soak-seconds",
6406
+ "release-now",
6407
+ "required-checks",
6408
+ "revoke-reason",
6409
+ "revoked-versions",
6410
+ "target-branch",
6411
+ "universal-request-json"
6412
+ ],
5200
6413
  "reverseAuditSource": ".github/workflows"
5201
6414
  },
5202
6415
  {
5203
- "id": "workflow:engineering-housekeeper-monthly",
5204
- "name": "workflow:engineering-housekeeper-monthly",
6416
+ "id": "workflow:public-ops-tail-reseal",
6417
+ "name": "workflow:public-ops-tail-reseal",
5205
6418
  "kind": "workflow",
5206
- "sourcePath": ".github/workflows/engineering-housekeeper-monthly.yml",
5207
- "evidencePath": ".github/workflows/engineering-housekeeper-monthly.yml",
6419
+ "sourcePath": ".github/workflows/public-ops-tail-reseal.yml",
6420
+ "evidencePath": ".github/workflows/public-ops-tail-reseal.yml",
5208
6421
  "availability": "shipped",
5209
6422
  "visibility": "public",
5210
6423
  "participantFacing": true,
5211
6424
  "public": true,
5212
- "inputCount": 0,
5213
- "inputs": [],
6425
+ "inputCount": 5,
6426
+ "inputs": [
6427
+ "artifact-retention-days",
6428
+ "consumer-policy-receipt-json",
6429
+ "macos-finalization-command",
6430
+ "request-json",
6431
+ "universal-request-json"
6432
+ ],
5214
6433
  "reverseAuditSource": ".github/workflows"
5215
6434
  },
5216
6435
  {
5217
- "id": "workflow:engineering-housekeeper-weekly",
5218
- "name": "workflow:engineering-housekeeper-weekly",
6436
+ "id": "workflow:public-ops-warrant-cancel",
6437
+ "name": "workflow:public-ops-warrant-cancel",
5219
6438
  "kind": "workflow",
5220
- "sourcePath": ".github/workflows/engineering-housekeeper-weekly.yml",
5221
- "evidencePath": ".github/workflows/engineering-housekeeper-weekly.yml",
6439
+ "sourcePath": ".github/workflows/public-ops-warrant-cancel.yml",
6440
+ "evidencePath": ".github/workflows/public-ops-warrant-cancel.yml",
5222
6441
  "availability": "shipped",
5223
6442
  "visibility": "public",
5224
6443
  "participantFacing": true,
5225
6444
  "public": true,
5226
- "inputCount": 0,
5227
- "inputs": [],
6445
+ "inputCount": 13,
6446
+ "inputs": [
6447
+ "buildchain-ref",
6448
+ "buildchain-repository",
6449
+ "event-action",
6450
+ "expected-candidate-id",
6451
+ "expected-old-state-root",
6452
+ "expected-pr-number",
6453
+ "expected-source-head-sha",
6454
+ "observed-source-head-sha",
6455
+ "outcome",
6456
+ "reason",
6457
+ "target-branch",
6458
+ "terminal-evidence-root",
6459
+ "universal-request-json"
6460
+ ],
5228
6461
  "reverseAuditSource": ".github/workflows"
5229
6462
  },
5230
6463
  {
5231
- "id": "workflow:engineering-housekeeper",
5232
- "name": "workflow:engineering-housekeeper",
6464
+ "id": "workflow:public-ops-warrant-close",
6465
+ "name": "workflow:public-ops-warrant-close",
5233
6466
  "kind": "workflow",
5234
- "sourcePath": ".github/workflows/engineering-housekeeper.yml",
5235
- "evidencePath": ".github/workflows/engineering-housekeeper.yml",
6467
+ "sourcePath": ".github/workflows/public-ops-warrant-close.yml",
6468
+ "evidencePath": ".github/workflows/public-ops-warrant-close.yml",
5236
6469
  "availability": "shipped",
5237
6470
  "visibility": "public",
5238
6471
  "participantFacing": true,
5239
6472
  "public": true,
5240
6473
  "inputCount": 14,
5241
6474
  "inputs": [
5242
- "apply-enabled",
5243
- "artifact-prefix",
5244
- "artifact-retention-days",
5245
6475
  "buildchain-ref",
5246
6476
  "buildchain-repository",
5247
- "max-actions",
5248
- "mode",
5249
- "protected-patterns",
5250
- "repository",
5251
- "retained-patterns",
5252
- "stale-days",
5253
- "stale-pull-request-label",
6477
+ "current-base-sha",
6478
+ "expected-head-sha",
6479
+ "expected-pr-number",
6480
+ "merge-group-head-sha",
6481
+ "merge-group-tree-sha",
6482
+ "outcome",
6483
+ "reason",
6484
+ "replay-tree-sha",
6485
+ "required-context-roots-json",
5254
6486
  "target-branch",
5255
- "temporary-branch-patterns"
6487
+ "terminal-evidence-root",
6488
+ "universal-request-json"
5256
6489
  ],
5257
6490
  "reverseAuditSource": ".github/workflows"
5258
6491
  },
5259
6492
  {
5260
- "id": "workflow:github-artifact-attestation",
5261
- "name": "workflow:github-artifact-attestation",
6493
+ "id": "workflow:public-release-artifact-attestation",
6494
+ "name": "workflow:public-release-artifact-attestation",
5262
6495
  "kind": "workflow",
5263
- "sourcePath": ".github/workflows/github-artifact-attestation.yml",
5264
- "evidencePath": ".github/workflows/github-artifact-attestation.yml",
6496
+ "sourcePath": ".github/workflows/public-release-artifact-attestation.yml",
6497
+ "evidencePath": ".github/workflows/public-release-artifact-attestation.yml",
5265
6498
  "availability": "shipped",
5266
6499
  "visibility": "public",
5267
6500
  "participantFacing": true,
5268
6501
  "public": true,
5269
- "inputCount": 13,
6502
+ "inputCount": 14,
5270
6503
  "inputs": [
5271
6504
  "buildchain-ref",
5272
6505
  "environment",
@@ -5280,49 +6513,38 @@
5280
6513
  "retention-days",
5281
6514
  "source-sha",
5282
6515
  "subject-artifact-name",
5283
- "subject-relative-path"
6516
+ "subject-relative-path",
6517
+ "universal-request-json"
5284
6518
  ],
5285
6519
  "reverseAuditSource": ".github/workflows"
5286
6520
  },
5287
6521
  {
5288
- "id": "workflow:github-governance-audit",
5289
- "name": "workflow:github-governance-audit",
5290
- "kind": "workflow",
5291
- "sourcePath": ".github/workflows/github-governance-audit.yml",
5292
- "evidencePath": ".github/workflows/github-governance-audit.yml",
5293
- "availability": "shipped",
5294
- "visibility": "public",
5295
- "participantFacing": true,
5296
- "public": true,
5297
- "inputCount": 0,
5298
- "inputs": [],
5299
- "reverseAuditSource": ".github/workflows"
5300
- },
5301
- {
5302
- "id": "workflow:npm-publish",
5303
- "name": "workflow:npm-publish",
6522
+ "id": "workflow:public-release-oci-compose-preview",
6523
+ "name": "workflow:public-release-oci-compose-preview",
5304
6524
  "kind": "workflow",
5305
- "sourcePath": ".github/workflows/npm-publish.yml",
5306
- "evidencePath": ".github/workflows/npm-publish.yml",
6525
+ "sourcePath": ".github/workflows/public-release-oci-compose-preview.yml",
6526
+ "evidencePath": ".github/workflows/public-release-oci-compose-preview.yml",
5307
6527
  "availability": "shipped",
5308
6528
  "visibility": "public",
5309
6529
  "participantFacing": true,
5310
6530
  "public": true,
5311
- "inputCount": 0,
5312
- "inputs": [],
6531
+ "inputCount": 1,
6532
+ "inputs": [
6533
+ "universal-request-json"
6534
+ ],
5313
6535
  "reverseAuditSource": ".github/workflows"
5314
6536
  },
5315
6537
  {
5316
- "id": "workflow:paper-release-sealed",
5317
- "name": "workflow:paper-release-sealed",
6538
+ "id": "workflow:public-release-paper-sealed",
6539
+ "name": "workflow:public-release-paper-sealed",
5318
6540
  "kind": "workflow",
5319
- "sourcePath": ".github/workflows/paper-release-sealed.yml",
5320
- "evidencePath": ".github/workflows/paper-release-sealed.yml",
6541
+ "sourcePath": ".github/workflows/public-release-paper-sealed.yml",
6542
+ "evidencePath": ".github/workflows/public-release-paper-sealed.yml",
5321
6543
  "availability": "shipped",
5322
6544
  "visibility": "public",
5323
6545
  "participantFacing": true,
5324
6546
  "public": true,
5325
- "inputCount": 26,
6547
+ "inputCount": 27,
5326
6548
  "inputs": [
5327
6549
  "artifact-name",
5328
6550
  "artifact-paths",
@@ -5348,22 +6570,23 @@
5348
6570
  "target-ref",
5349
6571
  "target-sha",
5350
6572
  "toolchain-type",
6573
+ "universal-request-json",
5351
6574
  "verify-command",
5352
6575
  "working-directory"
5353
6576
  ],
5354
6577
  "reverseAuditSource": ".github/workflows"
5355
6578
  },
5356
6579
  {
5357
- "id": "workflow:paper-release",
5358
- "name": "workflow:paper-release",
6580
+ "id": "workflow:public-release-paper",
6581
+ "name": "workflow:public-release-paper",
5359
6582
  "kind": "workflow",
5360
- "sourcePath": ".github/workflows/paper-release.yml",
5361
- "evidencePath": ".github/workflows/paper-release.yml",
6583
+ "sourcePath": ".github/workflows/public-release-paper.yml",
6584
+ "evidencePath": ".github/workflows/public-release-paper.yml",
5362
6585
  "availability": "shipped",
5363
6586
  "visibility": "public",
5364
6587
  "participantFacing": true,
5365
6588
  "public": true,
5366
- "inputCount": 38,
6589
+ "inputCount": 39,
5367
6590
  "inputs": [
5368
6591
  "artifact-name",
5369
6592
  "artifact-retention-days",
@@ -5401,101 +6624,269 @@
5401
6624
  "toolchain-digest",
5402
6625
  "toolchain-image",
5403
6626
  "toolchain-type",
6627
+ "universal-request-json",
5404
6628
  "verify-command",
5405
6629
  "working-directory"
5406
6630
  ],
5407
6631
  "reverseAuditSource": ".github/workflows"
5408
6632
  },
5409
6633
  {
5410
- "id": "workflow:patrol-daily",
5411
- "name": "workflow:patrol-daily",
6634
+ "id": "workflow:public-release-promote",
6635
+ "name": "workflow:public-release-promote",
5412
6636
  "kind": "workflow",
5413
- "sourcePath": ".github/workflows/patrol-daily.yml",
5414
- "evidencePath": ".github/workflows/patrol-daily.yml",
6637
+ "sourcePath": ".github/workflows/public-release-promote.yml",
6638
+ "evidencePath": ".github/workflows/public-release-promote.yml",
5415
6639
  "availability": "shipped",
5416
6640
  "visibility": "public",
5417
6641
  "participantFacing": true,
5418
6642
  "public": true,
5419
- "inputCount": 13,
6643
+ "inputCount": 107,
5420
6644
  "inputs": [
5421
- "allowed-head-prefixes",
5422
- "block-labels",
6645
+ "allow-repository",
6646
+ "artifact-name",
6647
+ "artifact-patterns",
6648
+ "branch-protection-bypass-apps",
6649
+ "branch-protection-bypass-teams",
6650
+ "branch-protection-bypass-users",
6651
+ "buildchain-alpha-contract-lock-path",
6652
+ "buildchain-channel",
6653
+ "buildchain-contract-compatibility-policy",
6654
+ "buildchain-contract-drift-issue-mode",
6655
+ "buildchain-contract-lock-path",
5423
6656
  "buildchain-ref",
5424
6657
  "buildchain-repository",
6658
+ "buildchain-stable-contract-lock-path",
6659
+ "channel",
6660
+ "declarative-release-tail",
5425
6661
  "dry-run",
5426
- "landing-mode",
5427
- "max-actions",
5428
- "merge-method",
5429
- "ready-label",
5430
- "require-approval",
5431
- "required-status-checks",
5432
- "same-repository-only",
5433
- "target-branch"
6662
+ "github-artifact-attestation-environment",
6663
+ "github-artifact-attestation-policy-json",
6664
+ "github-artifact-attestation-retention-days",
6665
+ "github-governance-receipt-json",
6666
+ "github-release",
6667
+ "github-release-notes",
6668
+ "github-release-payload-patterns",
6669
+ "github-release-title",
6670
+ "package-manager",
6671
+ "provider-failure-after-capability",
6672
+ "publication-admission-json",
6673
+ "publication-auto-admission",
6674
+ "publication-auto-no-gate",
6675
+ "publication-commit-command",
6676
+ "publication-commit-evidence-path",
6677
+ "publication-consumer-predicate-id",
6678
+ "publication-consumer-qualification-command",
6679
+ "publication-consumer-qualification-controller-sha",
6680
+ "publication-control-plane-audit-json",
6681
+ "publication-expected-json",
6682
+ "publication-gate-aggregate-json",
6683
+ "publication-gate-command",
6684
+ "publication-gate-controller-sha",
6685
+ "publication-package-name",
6686
+ "publication-product",
6687
+ "publication-publisher-workflow-path",
6688
+ "publication-runner-provenance-json",
6689
+ "publication-target",
6690
+ "publication-used-nonces-json",
6691
+ "publication-used-qualification-nonces-json",
6692
+ "publish-artifact-kind",
6693
+ "publish-command",
6694
+ "publish-dist-tag",
6695
+ "publish-mode",
6696
+ "publish-package-main",
6697
+ "publish-package-set-order",
6698
+ "publish-rematerialize-on-resume",
6699
+ "publish-required-artifacts-json",
6700
+ "publish-target",
6701
+ "publish-transaction-override",
6702
+ "release-activation-command",
6703
+ "release-activation-receipt-set-path",
6704
+ "release-candidate-family-assignment-id",
6705
+ "release-candidate-family-evidence-required",
6706
+ "release-candidate-family-evidence-root",
6707
+ "release-candidate-family-initiative-id",
6708
+ "release-candidate-wait-seconds",
6709
+ "release-candidate-workflow-file",
6710
+ "release-candidate-workflow-name",
6711
+ "release-passport",
6712
+ "release-passport-adopter-delivery-json",
6713
+ "release-passport-attachment-command",
6714
+ "release-passport-buildchain-self-kfd",
6715
+ "release-passport-evidence-command",
6716
+ "release-passport-evidence-jsons",
6717
+ "release-passport-evidence-path",
6718
+ "release-passport-impact-json",
6719
+ "release-passport-invariant-passport-command",
6720
+ "release-passport-invariant-passport-jsons",
6721
+ "release-passport-kfd-1-witness-jsons",
6722
+ "release-passport-kfd-2-claim-jsons",
6723
+ "release-passport-kfd-3-artifact-verify-command",
6724
+ "release-passport-kfd-3-artifact-witness-jsons",
6725
+ "release-passport-kfd-3-prebuild-witness-jsons",
6726
+ "release-passport-kfd-adopter-manifest-gate-json",
6727
+ "release-passport-kfd-adopter-manifest-json",
6728
+ "release-passport-kfd-product-gate-jsons",
6729
+ "release-passport-kfd-support-matrix-json",
6730
+ "release-passport-output-dir",
6731
+ "release-passport-platform-manifest-paths",
6732
+ "release-passport-product-name",
6733
+ "release-passport-v4-runtime-resume-evidence-json",
6734
+ "release-propagation-config-path",
6735
+ "required-artifact-count",
6736
+ "required-status-check",
6737
+ "resume-buildchain-runtime-sha",
6738
+ "resume-candidate-repository",
6739
+ "resume-candidate-run-id",
6740
+ "resume-expected-candidate-root",
6741
+ "resume-expected-candidate-runtime-sha",
6742
+ "resume-expected-source-tree",
6743
+ "resume-expected-workflow-file",
6744
+ "resume-expected-workflow-name",
6745
+ "resume-transaction-id",
6746
+ "runner-preset",
6747
+ "standalone-binary-distribution",
6748
+ "target-ref",
6749
+ "target-sha",
6750
+ "trusted-publishing",
6751
+ "universal-request-json"
5434
6752
  ],
5435
6753
  "reverseAuditSource": ".github/workflows"
5436
6754
  },
5437
6755
  {
5438
- "id": "workflow:patrol-monthly",
5439
- "name": "workflow:patrol-monthly",
6756
+ "id": "workflow:public-release-propagation",
6757
+ "name": "workflow:public-release-propagation",
5440
6758
  "kind": "workflow",
5441
- "sourcePath": ".github/workflows/patrol-monthly.yml",
5442
- "evidencePath": ".github/workflows/patrol-monthly.yml",
6759
+ "sourcePath": ".github/workflows/public-release-propagation.yml",
6760
+ "evidencePath": ".github/workflows/public-release-propagation.yml",
5443
6761
  "availability": "shipped",
5444
6762
  "visibility": "public",
5445
6763
  "participantFacing": true,
5446
6764
  "public": true,
5447
- "inputCount": 4,
6765
+ "inputCount": 20,
5448
6766
  "inputs": [
6767
+ "agent-work-context-json",
6768
+ "agent-work-mode",
5449
6769
  "buildchain-ref",
5450
6770
  "buildchain-repository",
6771
+ "downstream-base-ref",
6772
+ "downstream-branch",
6773
+ "downstream-prepare-command",
6774
+ "downstream-repository",
6775
+ "downstream-target",
6776
+ "downstream-update-command",
6777
+ "downstream-verify-command",
5451
6778
  "dry-run",
5452
- "target-branch"
6779
+ "graph-json",
6780
+ "lock-path",
6781
+ "pr-body",
6782
+ "pr-title",
6783
+ "refresh-managed-readme-badges",
6784
+ "source-node",
6785
+ "universal-request-json",
6786
+ "upstream-release-json"
5453
6787
  ],
5454
6788
  "reverseAuditSource": ".github/workflows"
5455
6789
  },
5456
6790
  {
5457
- "id": "workflow:patrol-observed-evidence",
5458
- "name": "workflow:patrol-observed-evidence",
6791
+ "id": "workflow:public-release-signing-authority",
6792
+ "name": "workflow:public-release-signing-authority",
5459
6793
  "kind": "workflow",
5460
- "sourcePath": ".github/workflows/patrol-observed-evidence.yml",
5461
- "evidencePath": ".github/workflows/patrol-observed-evidence.yml",
6794
+ "sourcePath": ".github/workflows/public-release-signing-authority.yml",
6795
+ "evidencePath": ".github/workflows/public-release-signing-authority.yml",
5462
6796
  "availability": "shipped",
5463
6797
  "visibility": "public",
5464
6798
  "participantFacing": true,
5465
6799
  "public": true,
5466
- "inputCount": 12,
6800
+ "inputCount": 0,
6801
+ "inputs": [],
6802
+ "reverseAuditSource": ".github/workflows"
6803
+ },
6804
+ {
6805
+ "id": "workflow:public-release-tail",
6806
+ "name": "workflow:public-release-tail",
6807
+ "kind": "workflow",
6808
+ "sourcePath": ".github/workflows/public-release-tail.yml",
6809
+ "evidencePath": ".github/workflows/public-release-tail.yml",
6810
+ "availability": "shipped",
6811
+ "visibility": "public",
6812
+ "participantFacing": true,
6813
+ "public": true,
6814
+ "inputCount": 15,
5467
6815
  "inputs": [
5468
- "artifact-path",
5469
- "build-command",
5470
6816
  "buildchain-ref",
5471
- "cloudfront-distribution",
5472
- "evidence-source-path",
5473
- "evidence-source-ref",
5474
- "evidence-source-repository",
5475
- "manifest-path",
5476
- "production-aws-role-arn",
5477
- "production-bucket",
5478
- "production-environment",
5479
- "verify-command"
6817
+ "candidate-root",
6818
+ "capsule-contract",
6819
+ "capsule-path",
6820
+ "capsule-root",
6821
+ "declaration-path",
6822
+ "evidence-path",
6823
+ "execute",
6824
+ "provider-bindings-path",
6825
+ "rehearsal-authority-path",
6826
+ "rehearsal-capsule-path",
6827
+ "rehearsal-evidence-path",
6828
+ "rehearsal-mode",
6829
+ "state-path",
6830
+ "universal-request-json"
5480
6831
  ],
5481
6832
  "reverseAuditSource": ".github/workflows"
5482
6833
  },
5483
6834
  {
5484
- "id": "workflow:patrol-weekly",
5485
- "name": "workflow:patrol-weekly",
6835
+ "id": "workflow:public-release-web",
6836
+ "name": "workflow:public-release-web",
5486
6837
  "kind": "workflow",
5487
- "sourcePath": ".github/workflows/patrol-weekly.yml",
5488
- "evidencePath": ".github/workflows/patrol-weekly.yml",
6838
+ "sourcePath": ".github/workflows/public-release-web.yml",
6839
+ "evidencePath": ".github/workflows/public-release-web.yml",
5489
6840
  "availability": "shipped",
5490
6841
  "visibility": "public",
5491
6842
  "participantFacing": true,
5492
6843
  "public": true,
5493
- "inputCount": 4,
6844
+ "inputCount": 44,
5494
6845
  "inputs": [
6846
+ "artifact-path",
6847
+ "aws-region",
6848
+ "build-command",
6849
+ "buildchain-contract-compatibility-policy",
6850
+ "buildchain-contract-drift-issue-mode",
6851
+ "buildchain-contract-expected-channel",
6852
+ "buildchain-contract-expected-major",
6853
+ "buildchain-contract-lock-path",
5495
6854
  "buildchain-ref",
5496
6855
  "buildchain-repository",
5497
- "dry-run",
5498
- "target-branch"
6856
+ "fail-on-release-pr-error",
6857
+ "github-governance-receipt-json",
6858
+ "node-version",
6859
+ "preview-apply",
6860
+ "preview-aws-role-arn",
6861
+ "preview-cleanup-apply",
6862
+ "preview-comment",
6863
+ "preview-environment",
6864
+ "production-apply",
6865
+ "production-approved",
6866
+ "production-aws-role-arn",
6867
+ "production-environment",
6868
+ "production-release-app-client-id",
6869
+ "production-release-app-id",
6870
+ "production-release-branch-channel",
6871
+ "production-release-head-prefix",
6872
+ "production-release-label",
6873
+ "production-release-on-main",
6874
+ "production-release-pr-mode",
6875
+ "production-release-pr-token",
6876
+ "production-source-sha",
6877
+ "publication-admission-json",
6878
+ "publication-control-plane-audit-json",
6879
+ "publication-expected-json",
6880
+ "publication-gate-aggregate-json",
6881
+ "publication-runner-provenance-json",
6882
+ "publication-used-nonces-json",
6883
+ "release-feedback-actor-privacy",
6884
+ "staging-apply",
6885
+ "staging-aws-role-arn",
6886
+ "staging-environment",
6887
+ "universal-request-json",
6888
+ "verify-command",
6889
+ "working-directory"
5499
6890
  ],
5500
6891
  "reverseAuditSource": ".github/workflows"
5501
6892
  },
@@ -5509,7 +6900,7 @@
5509
6900
  "visibility": "public",
5510
6901
  "participantFacing": true,
5511
6902
  "public": true,
5512
- "inputCount": 23,
6903
+ "inputCount": 24,
5513
6904
  "inputs": [
5514
6905
  "artifact-name",
5515
6906
  "artifact-paths",
@@ -5532,6 +6923,7 @@
5532
6923
  "toolchain-digest",
5533
6924
  "toolchain-image",
5534
6925
  "toolchain-type",
6926
+ "universal-request-json",
5535
6927
  "verify-command",
5536
6928
  "working-directory"
5537
6929
  ],
@@ -5547,7 +6939,7 @@
5547
6939
  "visibility": "public",
5548
6940
  "participantFacing": true,
5549
6941
  "public": true,
5550
- "inputCount": 106,
6942
+ "inputCount": 107,
5551
6943
  "inputs": [
5552
6944
  "allow-repository",
5553
6945
  "artifact-name",
@@ -5654,7 +7046,8 @@
5654
7046
  "standalone-binary-distribution",
5655
7047
  "target-ref",
5656
7048
  "target-sha",
5657
- "trusted-publishing"
7049
+ "trusted-publishing",
7050
+ "universal-request-json"
5658
7051
  ],
5659
7052
  "reverseAuditSource": ".github/workflows"
5660
7053
  },
@@ -5668,21 +7061,87 @@
5668
7061
  "visibility": "public",
5669
7062
  "participantFacing": true,
5670
7063
  "public": true,
5671
- "inputCount": 4,
7064
+ "inputCount": 5,
5672
7065
  "inputs": [
5673
7066
  "apply",
5674
7067
  "branch",
5675
7068
  "buildchain-ref",
5676
- "candidate-sha"
7069
+ "candidate-sha",
7070
+ "universal-request-json"
7071
+ ],
7072
+ "reverseAuditSource": ".github/workflows"
7073
+ },
7074
+ {
7075
+ "id": "workflow:release-propagation",
7076
+ "name": "workflow:release-propagation",
7077
+ "kind": "workflow",
7078
+ "sourcePath": ".github/workflows/release-propagation.yml",
7079
+ "evidencePath": ".github/workflows/release-propagation.yml",
7080
+ "availability": "shipped",
7081
+ "visibility": "public",
7082
+ "participantFacing": true,
7083
+ "public": true,
7084
+ "inputCount": 20,
7085
+ "inputs": [
7086
+ "agent-work-context-json",
7087
+ "agent-work-mode",
7088
+ "buildchain-ref",
7089
+ "buildchain-repository",
7090
+ "downstream-base-ref",
7091
+ "downstream-branch",
7092
+ "downstream-prepare-command",
7093
+ "downstream-repository",
7094
+ "downstream-target",
7095
+ "downstream-update-command",
7096
+ "downstream-verify-command",
7097
+ "dry-run",
7098
+ "graph-json",
7099
+ "lock-path",
7100
+ "pr-body",
7101
+ "pr-title",
7102
+ "refresh-managed-readme-badges",
7103
+ "source-node",
7104
+ "universal-request-json",
7105
+ "upstream-release-json"
7106
+ ],
7107
+ "reverseAuditSource": ".github/workflows"
7108
+ },
7109
+ {
7110
+ "id": "workflow:release-tail",
7111
+ "name": "workflow:release-tail",
7112
+ "kind": "workflow",
7113
+ "sourcePath": ".github/workflows/release-tail.yml",
7114
+ "evidencePath": ".github/workflows/release-tail.yml",
7115
+ "availability": "shipped",
7116
+ "visibility": "public",
7117
+ "participantFacing": true,
7118
+ "public": true,
7119
+ "inputCount": 15,
7120
+ "inputs": [
7121
+ "buildchain-ref",
7122
+ "candidate-root",
7123
+ "capsule-contract",
7124
+ "capsule-path",
7125
+ "capsule-root",
7126
+ "declaration-path",
7127
+ "evidence-path",
7128
+ "execute",
7129
+ "provider-bindings-path",
7130
+ "rehearsal-authority-path",
7131
+ "rehearsal-capsule-path",
7132
+ "rehearsal-evidence-path",
7133
+ "rehearsal-mode",
7134
+ "state-path",
7135
+ "universal-request-json"
5677
7136
  ],
5678
7137
  "reverseAuditSource": ".github/workflows"
5679
7138
  },
5680
7139
  {
5681
- "id": "workflow:release-line-bootstrap",
5682
- "name": "workflow:release-line-bootstrap",
7140
+ "id": "workflow:self-build-adopter-dogfood",
7141
+ "name": "workflow:self-build-adopter-dogfood",
5683
7142
  "kind": "workflow",
5684
- "sourcePath": ".github/workflows/release-line-bootstrap.yml",
5685
- "evidencePath": ".github/workflows/release-line-bootstrap.yml",
7143
+ "sourcePath": ".github/workflows/self-build-adopter-dogfood.yml",
7144
+ "evidencePath": ".github/workflows/self-build-adopter-dogfood.yml",
5686
7145
  "availability": "shipped",
5687
7146
  "visibility": "public",
5688
7147
  "participantFacing": true,
@@ -5692,11 +7151,11 @@
5692
7151
  "reverseAuditSource": ".github/workflows"
5693
7152
  },
5694
7153
  {
5695
- "id": "workflow:release-new-version",
5696
- "name": "workflow:release-new-version",
7154
+ "id": "workflow:self-build-alpha-dogfood",
7155
+ "name": "workflow:self-build-alpha-dogfood",
5697
7156
  "kind": "workflow",
5698
- "sourcePath": ".github/workflows/release-new-version.yml",
5699
- "evidencePath": ".github/workflows/release-new-version.yml",
7157
+ "sourcePath": ".github/workflows/self-build-alpha-dogfood.yml",
7158
+ "evidencePath": ".github/workflows/self-build-alpha-dogfood.yml",
5700
7159
  "availability": "shipped",
5701
7160
  "visibility": "public",
5702
7161
  "participantFacing": true,
@@ -5706,74 +7165,305 @@
5706
7165
  "reverseAuditSource": ".github/workflows"
5707
7166
  },
5708
7167
  {
5709
- "id": "workflow:release-propagation",
5710
- "name": "workflow:release-propagation",
7168
+ "id": "workflow:self-build-binary-distribution",
7169
+ "name": "workflow:self-build-binary-distribution",
5711
7170
  "kind": "workflow",
5712
- "sourcePath": ".github/workflows/release-propagation.yml",
5713
- "evidencePath": ".github/workflows/release-propagation.yml",
7171
+ "sourcePath": ".github/workflows/self-build-binary-distribution.yml",
7172
+ "evidencePath": ".github/workflows/self-build-binary-distribution.yml",
7173
+ "availability": "shipped",
7174
+ "visibility": "public",
7175
+ "participantFacing": true,
7176
+ "public": true,
7177
+ "inputCount": 0,
7178
+ "inputs": [],
7179
+ "reverseAuditSource": ".github/workflows"
7180
+ },
7181
+ {
7182
+ "id": "workflow:self-build-candidate-lab",
7183
+ "name": "workflow:self-build-candidate-lab",
7184
+ "kind": "workflow",
7185
+ "sourcePath": ".github/workflows/self-build-candidate-lab.yml",
7186
+ "evidencePath": ".github/workflows/self-build-candidate-lab.yml",
7187
+ "availability": "shipped",
7188
+ "visibility": "public",
7189
+ "participantFacing": true,
7190
+ "public": true,
7191
+ "inputCount": 0,
7192
+ "inputs": [],
7193
+ "reverseAuditSource": ".github/workflows"
7194
+ },
7195
+ {
7196
+ "id": "workflow:self-build-demo-dogfood",
7197
+ "name": "workflow:self-build-demo-dogfood",
7198
+ "kind": "workflow",
7199
+ "sourcePath": ".github/workflows/self-build-demo-dogfood.yml",
7200
+ "evidencePath": ".github/workflows/self-build-demo-dogfood.yml",
7201
+ "availability": "shipped",
7202
+ "visibility": "public",
7203
+ "participantFacing": true,
7204
+ "public": true,
7205
+ "inputCount": 0,
7206
+ "inputs": [],
7207
+ "reverseAuditSource": ".github/workflows"
7208
+ },
7209
+ {
7210
+ "id": "workflow:self-build-demo-media-qualification",
7211
+ "name": "workflow:self-build-demo-media-qualification",
7212
+ "kind": "workflow",
7213
+ "sourcePath": ".github/workflows/self-build-demo-media-qualification.yml",
7214
+ "evidencePath": ".github/workflows/self-build-demo-media-qualification.yml",
7215
+ "availability": "shipped",
7216
+ "visibility": "public",
7217
+ "participantFacing": true,
7218
+ "public": true,
7219
+ "inputCount": 0,
7220
+ "inputs": [],
7221
+ "reverseAuditSource": ".github/workflows"
7222
+ },
7223
+ {
7224
+ "id": "workflow:self-build-fixture",
7225
+ "name": "workflow:self-build-fixture",
7226
+ "kind": "workflow",
7227
+ "sourcePath": ".github/workflows/self-build-fixture.yml",
7228
+ "evidencePath": ".github/workflows/self-build-fixture.yml",
7229
+ "availability": "shipped",
7230
+ "visibility": "public",
7231
+ "participantFacing": true,
7232
+ "public": true,
7233
+ "inputCount": 0,
7234
+ "inputs": [],
7235
+ "reverseAuditSource": ".github/workflows"
7236
+ },
7237
+ {
7238
+ "id": "workflow:self-build-public-consumer-dogfood",
7239
+ "name": "workflow:self-build-public-consumer-dogfood",
7240
+ "kind": "workflow",
7241
+ "sourcePath": ".github/workflows/self-build-public-consumer-dogfood.yml",
7242
+ "evidencePath": ".github/workflows/self-build-public-consumer-dogfood.yml",
7243
+ "availability": "shipped",
7244
+ "visibility": "public",
7245
+ "participantFacing": true,
7246
+ "public": true,
7247
+ "inputCount": 0,
7248
+ "inputs": [],
7249
+ "reverseAuditSource": ".github/workflows"
7250
+ },
7251
+ {
7252
+ "id": "workflow:self-build-release-verify-compat",
7253
+ "name": "workflow:self-build-release-verify-compat",
7254
+ "kind": "workflow",
7255
+ "sourcePath": ".github/workflows/self-build-release-verify-compat.yml",
7256
+ "evidencePath": ".github/workflows/self-build-release-verify-compat.yml",
7257
+ "availability": "shipped",
7258
+ "visibility": "public",
7259
+ "participantFacing": true,
7260
+ "public": true,
7261
+ "inputCount": 0,
7262
+ "inputs": [],
7263
+ "reverseAuditSource": ".github/workflows"
7264
+ },
7265
+ {
7266
+ "id": "workflow:self-build-stable-candidate-qualification",
7267
+ "name": "workflow:self-build-stable-candidate-qualification",
7268
+ "kind": "workflow",
7269
+ "sourcePath": ".github/workflows/self-build-stable-candidate-qualification.yml",
7270
+ "evidencePath": ".github/workflows/self-build-stable-candidate-qualification.yml",
7271
+ "availability": "shipped",
7272
+ "visibility": "public",
7273
+ "participantFacing": true,
7274
+ "public": true,
7275
+ "inputCount": 0,
7276
+ "inputs": [],
7277
+ "reverseAuditSource": ".github/workflows"
7278
+ },
7279
+ {
7280
+ "id": "workflow:self-build-verify",
7281
+ "name": "workflow:self-build-verify",
7282
+ "kind": "workflow",
7283
+ "sourcePath": ".github/workflows/self-build-verify.yml",
7284
+ "evidencePath": ".github/workflows/self-build-verify.yml",
7285
+ "availability": "shipped",
7286
+ "visibility": "public",
7287
+ "participantFacing": true,
7288
+ "public": true,
7289
+ "inputCount": 0,
7290
+ "inputs": [],
7291
+ "reverseAuditSource": ".github/workflows"
7292
+ },
7293
+ {
7294
+ "id": "workflow:self-ops-bootstrap-dogfood",
7295
+ "name": "workflow:self-ops-bootstrap-dogfood",
7296
+ "kind": "workflow",
7297
+ "sourcePath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
7298
+ "evidencePath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
7299
+ "availability": "shipped",
7300
+ "visibility": "public",
7301
+ "participantFacing": true,
7302
+ "public": true,
7303
+ "inputCount": 0,
7304
+ "inputs": [],
7305
+ "reverseAuditSource": ".github/workflows"
7306
+ },
7307
+ {
7308
+ "id": "workflow:self-ops-dev-delivery",
7309
+ "name": "workflow:self-ops-dev-delivery",
7310
+ "kind": "workflow",
7311
+ "sourcePath": ".github/workflows/self-ops-dev-delivery.yml",
7312
+ "evidencePath": ".github/workflows/self-ops-dev-delivery.yml",
7313
+ "availability": "shipped",
7314
+ "visibility": "public",
7315
+ "participantFacing": true,
7316
+ "public": true,
7317
+ "inputCount": 0,
7318
+ "inputs": [],
7319
+ "reverseAuditSource": ".github/workflows"
7320
+ },
7321
+ {
7322
+ "id": "workflow:self-ops-governance-audit",
7323
+ "name": "workflow:self-ops-governance-audit",
7324
+ "kind": "workflow",
7325
+ "sourcePath": ".github/workflows/self-ops-governance-audit.yml",
7326
+ "evidencePath": ".github/workflows/self-ops-governance-audit.yml",
7327
+ "availability": "shipped",
7328
+ "visibility": "public",
7329
+ "participantFacing": true,
7330
+ "public": true,
7331
+ "inputCount": 0,
7332
+ "inputs": [],
7333
+ "reverseAuditSource": ".github/workflows"
7334
+ },
7335
+ {
7336
+ "id": "workflow:self-ops-housekeeping-daily",
7337
+ "name": "workflow:self-ops-housekeeping-daily",
7338
+ "kind": "workflow",
7339
+ "sourcePath": ".github/workflows/self-ops-housekeeping-daily.yml",
7340
+ "evidencePath": ".github/workflows/self-ops-housekeeping-daily.yml",
7341
+ "availability": "shipped",
7342
+ "visibility": "public",
7343
+ "participantFacing": true,
7344
+ "public": true,
7345
+ "inputCount": 0,
7346
+ "inputs": [],
7347
+ "reverseAuditSource": ".github/workflows"
7348
+ },
7349
+ {
7350
+ "id": "workflow:self-ops-housekeeping-monthly",
7351
+ "name": "workflow:self-ops-housekeeping-monthly",
7352
+ "kind": "workflow",
7353
+ "sourcePath": ".github/workflows/self-ops-housekeeping-monthly.yml",
7354
+ "evidencePath": ".github/workflows/self-ops-housekeeping-monthly.yml",
7355
+ "availability": "shipped",
7356
+ "visibility": "public",
7357
+ "participantFacing": true,
7358
+ "public": true,
7359
+ "inputCount": 0,
7360
+ "inputs": [],
7361
+ "reverseAuditSource": ".github/workflows"
7362
+ },
7363
+ {
7364
+ "id": "workflow:self-ops-housekeeping-weekly",
7365
+ "name": "workflow:self-ops-housekeeping-weekly",
7366
+ "kind": "workflow",
7367
+ "sourcePath": ".github/workflows/self-ops-housekeeping-weekly.yml",
7368
+ "evidencePath": ".github/workflows/self-ops-housekeeping-weekly.yml",
7369
+ "availability": "shipped",
7370
+ "visibility": "public",
7371
+ "participantFacing": true,
7372
+ "public": true,
7373
+ "inputCount": 0,
7374
+ "inputs": [],
7375
+ "reverseAuditSource": ".github/workflows"
7376
+ },
7377
+ {
7378
+ "id": "workflow:self-ops-merge-queue",
7379
+ "name": "workflow:self-ops-merge-queue",
7380
+ "kind": "workflow",
7381
+ "sourcePath": ".github/workflows/self-ops-merge-queue.yml",
7382
+ "evidencePath": ".github/workflows/self-ops-merge-queue.yml",
7383
+ "availability": "shipped",
7384
+ "visibility": "public",
7385
+ "participantFacing": true,
7386
+ "public": true,
7387
+ "inputCount": 0,
7388
+ "inputs": [],
7389
+ "reverseAuditSource": ".github/workflows"
7390
+ },
7391
+ {
7392
+ "id": "workflow:self-ops-patrol-daily",
7393
+ "name": "workflow:self-ops-patrol-daily",
7394
+ "kind": "workflow",
7395
+ "sourcePath": ".github/workflows/self-ops-patrol-daily.yml",
7396
+ "evidencePath": ".github/workflows/self-ops-patrol-daily.yml",
7397
+ "availability": "shipped",
7398
+ "visibility": "public",
7399
+ "participantFacing": true,
7400
+ "public": true,
7401
+ "inputCount": 0,
7402
+ "inputs": [],
7403
+ "reverseAuditSource": ".github/workflows"
7404
+ },
7405
+ {
7406
+ "id": "workflow:self-ops-patrol-monthly",
7407
+ "name": "workflow:self-ops-patrol-monthly",
7408
+ "kind": "workflow",
7409
+ "sourcePath": ".github/workflows/self-ops-patrol-monthly.yml",
7410
+ "evidencePath": ".github/workflows/self-ops-patrol-monthly.yml",
7411
+ "availability": "shipped",
7412
+ "visibility": "public",
7413
+ "participantFacing": true,
7414
+ "public": true,
7415
+ "inputCount": 0,
7416
+ "inputs": [],
7417
+ "reverseAuditSource": ".github/workflows"
7418
+ },
7419
+ {
7420
+ "id": "workflow:self-ops-patrol-weekly",
7421
+ "name": "workflow:self-ops-patrol-weekly",
7422
+ "kind": "workflow",
7423
+ "sourcePath": ".github/workflows/self-ops-patrol-weekly.yml",
7424
+ "evidencePath": ".github/workflows/self-ops-patrol-weekly.yml",
7425
+ "availability": "shipped",
7426
+ "visibility": "public",
7427
+ "participantFacing": true,
7428
+ "public": true,
7429
+ "inputCount": 0,
7430
+ "inputs": [],
7431
+ "reverseAuditSource": ".github/workflows"
7432
+ },
7433
+ {
7434
+ "id": "workflow:self-ops-promotion-recovery",
7435
+ "name": "workflow:self-ops-promotion-recovery",
7436
+ "kind": "workflow",
7437
+ "sourcePath": ".github/workflows/self-ops-promotion-recovery.yml",
7438
+ "evidencePath": ".github/workflows/self-ops-promotion-recovery.yml",
5714
7439
  "availability": "shipped",
5715
7440
  "visibility": "public",
5716
7441
  "participantFacing": true,
5717
7442
  "public": true,
5718
- "inputCount": 19,
5719
- "inputs": [
5720
- "agent-work-context-json",
5721
- "agent-work-mode",
5722
- "buildchain-ref",
5723
- "buildchain-repository",
5724
- "downstream-base-ref",
5725
- "downstream-branch",
5726
- "downstream-prepare-command",
5727
- "downstream-repository",
5728
- "downstream-target",
5729
- "downstream-update-command",
5730
- "downstream-verify-command",
5731
- "dry-run",
5732
- "graph-json",
5733
- "lock-path",
5734
- "pr-body",
5735
- "pr-title",
5736
- "refresh-managed-readme-badges",
5737
- "source-node",
5738
- "upstream-release-json"
5739
- ],
7443
+ "inputCount": 0,
7444
+ "inputs": [],
5740
7445
  "reverseAuditSource": ".github/workflows"
5741
7446
  },
5742
7447
  {
5743
- "id": "workflow:release-tail",
5744
- "name": "workflow:release-tail",
7448
+ "id": "workflow:self-ops-recovery-failure-dogfood",
7449
+ "name": "workflow:self-ops-recovery-failure-dogfood",
5745
7450
  "kind": "workflow",
5746
- "sourcePath": ".github/workflows/release-tail.yml",
5747
- "evidencePath": ".github/workflows/release-tail.yml",
7451
+ "sourcePath": ".github/workflows/self-ops-recovery-failure-dogfood.yml",
7452
+ "evidencePath": ".github/workflows/self-ops-recovery-failure-dogfood.yml",
5748
7453
  "availability": "shipped",
5749
7454
  "visibility": "public",
5750
7455
  "participantFacing": true,
5751
7456
  "public": true,
5752
- "inputCount": 14,
5753
- "inputs": [
5754
- "buildchain-ref",
5755
- "candidate-root",
5756
- "capsule-contract",
5757
- "capsule-path",
5758
- "capsule-root",
5759
- "declaration-path",
5760
- "evidence-path",
5761
- "execute",
5762
- "provider-bindings-path",
5763
- "rehearsal-authority-path",
5764
- "rehearsal-capsule-path",
5765
- "rehearsal-evidence-path",
5766
- "rehearsal-mode",
5767
- "state-path"
5768
- ],
7457
+ "inputCount": 0,
7458
+ "inputs": [],
5769
7459
  "reverseAuditSource": ".github/workflows"
5770
7460
  },
5771
7461
  {
5772
- "id": "workflow:release-verify",
5773
- "name": "workflow:release-verify",
7462
+ "id": "workflow:self-ops-runner-smoke",
7463
+ "name": "workflow:self-ops-runner-smoke",
5774
7464
  "kind": "workflow",
5775
- "sourcePath": ".github/workflows/release-verify.yml",
5776
- "evidencePath": ".github/workflows/release-verify.yml",
7465
+ "sourcePath": ".github/workflows/self-ops-runner-smoke.yml",
7466
+ "evidencePath": ".github/workflows/self-ops-runner-smoke.yml",
5777
7467
  "availability": "shipped",
5778
7468
  "visibility": "public",
5779
7469
  "participantFacing": true,
@@ -5783,11 +7473,11 @@
5783
7473
  "reverseAuditSource": ".github/workflows"
5784
7474
  },
5785
7475
  {
5786
- "id": "workflow:schedule-purge-artifacts",
5787
- "name": "workflow:schedule-purge-artifacts",
7476
+ "id": "workflow:self-ops-stable-candidate-patrol",
7477
+ "name": "workflow:self-ops-stable-candidate-patrol",
5788
7478
  "kind": "workflow",
5789
- "sourcePath": ".github/workflows/schedule-purge-artifacts.yml",
5790
- "evidencePath": ".github/workflows/schedule-purge-artifacts.yml",
7479
+ "sourcePath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
7480
+ "evidencePath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
5791
7481
  "availability": "shipped",
5792
7482
  "visibility": "public",
5793
7483
  "participantFacing": true,
@@ -5797,11 +7487,11 @@
5797
7487
  "reverseAuditSource": ".github/workflows"
5798
7488
  },
5799
7489
  {
5800
- "id": "workflow:self-hosted-runner-smoke",
5801
- "name": "workflow:self-hosted-runner-smoke",
7490
+ "id": "workflow:self-release-binary-assets",
7491
+ "name": "workflow:self-release-binary-assets",
5802
7492
  "kind": "workflow",
5803
- "sourcePath": ".github/workflows/self-hosted-runner-smoke.yml",
5804
- "evidencePath": ".github/workflows/self-hosted-runner-smoke.yml",
7493
+ "sourcePath": ".github/workflows/self-release-binary-assets.yml",
7494
+ "evidencePath": ".github/workflows/self-release-binary-assets.yml",
5805
7495
  "availability": "shipped",
5806
7496
  "visibility": "public",
5807
7497
  "participantFacing": true,
@@ -5811,42 +7501,25 @@
5811
7501
  "reverseAuditSource": ".github/workflows"
5812
7502
  },
5813
7503
  {
5814
- "id": "workflow:stable-candidate-patrol",
5815
- "name": "workflow:stable-candidate-patrol",
7504
+ "id": "workflow:self-release-line-open",
7505
+ "name": "workflow:self-release-line-open",
5816
7506
  "kind": "workflow",
5817
- "sourcePath": ".github/workflows/stable-candidate-patrol.yml",
5818
- "evidencePath": ".github/workflows/stable-candidate-patrol.yml",
7507
+ "sourcePath": ".github/workflows/self-release-line-open.yml",
7508
+ "evidencePath": ".github/workflows/self-release-line-open.yml",
5819
7509
  "availability": "shipped",
5820
7510
  "visibility": "public",
5821
7511
  "participantFacing": true,
5822
7512
  "public": true,
5823
- "inputCount": 16,
5824
- "inputs": [
5825
- "auto-approve",
5826
- "auto-merge",
5827
- "auto-promote",
5828
- "buildchain-ref",
5829
- "buildchain-repository",
5830
- "dry-run",
5831
- "hold",
5832
- "hold-reason",
5833
- "ledger-ref",
5834
- "merge-method",
5835
- "minimum-soak-seconds",
5836
- "release-now",
5837
- "required-checks",
5838
- "revoke-reason",
5839
- "revoked-versions",
5840
- "target-branch"
5841
- ],
7513
+ "inputCount": 0,
7514
+ "inputs": [],
5842
7515
  "reverseAuditSource": ".github/workflows"
5843
7516
  },
5844
7517
  {
5845
- "id": "workflow:v4-adopter-delivery-dogfood",
5846
- "name": "workflow:v4-adopter-delivery-dogfood",
7518
+ "id": "workflow:self-release-new-version-compat",
7519
+ "name": "workflow:self-release-new-version-compat",
5847
7520
  "kind": "workflow",
5848
- "sourcePath": ".github/workflows/v4-adopter-delivery-dogfood.yml",
5849
- "evidencePath": ".github/workflows/v4-adopter-delivery-dogfood.yml",
7521
+ "sourcePath": ".github/workflows/self-release-new-version-compat.yml",
7522
+ "evidencePath": ".github/workflows/self-release-new-version-compat.yml",
5850
7523
  "availability": "shipped",
5851
7524
  "visibility": "public",
5852
7525
  "participantFacing": true,
@@ -5856,34 +7529,25 @@
5856
7529
  "reverseAuditSource": ".github/workflows"
5857
7530
  },
5858
7531
  {
5859
- "id": "workflow:v4-adopter-delivery",
5860
- "name": "workflow:v4-adopter-delivery",
7532
+ "id": "workflow:self-release-next-development",
7533
+ "name": "workflow:self-release-next-development",
5861
7534
  "kind": "workflow",
5862
- "sourcePath": ".github/workflows/v4-adopter-delivery.yml",
5863
- "evidencePath": ".github/workflows/v4-adopter-delivery.yml",
7535
+ "sourcePath": ".github/workflows/self-release-next-development.yml",
7536
+ "evidencePath": ".github/workflows/self-release-next-development.yml",
5864
7537
  "availability": "shipped",
5865
7538
  "visibility": "public",
5866
7539
  "participantFacing": true,
5867
7540
  "public": true,
5868
- "inputCount": 8,
5869
- "inputs": [
5870
- "archive-path",
5871
- "bootstrap-path",
5872
- "consumer",
5873
- "consumer-ref",
5874
- "consumer-repository",
5875
- "input-path",
5876
- "invocation-source-path",
5877
- "node-version"
5878
- ],
7541
+ "inputCount": 0,
7542
+ "inputs": [],
5879
7543
  "reverseAuditSource": ".github/workflows"
5880
7544
  },
5881
7545
  {
5882
- "id": "workflow:v4-declarative-release-tail-dogfood",
5883
- "name": "workflow:v4-declarative-release-tail-dogfood",
7546
+ "id": "workflow:self-release-npm-dry-run",
7547
+ "name": "workflow:self-release-npm-dry-run",
5884
7548
  "kind": "workflow",
5885
- "sourcePath": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
5886
- "evidencePath": ".github/workflows/v4-declarative-release-tail-dogfood.yml",
7549
+ "sourcePath": ".github/workflows/self-release-npm-dry-run.yml",
7550
+ "evidencePath": ".github/workflows/self-release-npm-dry-run.yml",
5887
7551
  "availability": "shipped",
5888
7552
  "visibility": "public",
5889
7553
  "participantFacing": true,
@@ -5893,11 +7557,11 @@
5893
7557
  "reverseAuditSource": ".github/workflows"
5894
7558
  },
5895
7559
  {
5896
- "id": "workflow:v4-public-consumer-dogfood",
5897
- "name": "workflow:v4-public-consumer-dogfood",
7560
+ "id": "workflow:self-release-promote",
7561
+ "name": "workflow:self-release-promote",
5898
7562
  "kind": "workflow",
5899
- "sourcePath": ".github/workflows/v4-public-consumer-dogfood.yml",
5900
- "evidencePath": ".github/workflows/v4-public-consumer-dogfood.yml",
7563
+ "sourcePath": ".github/workflows/self-release-promote.yml",
7564
+ "evidencePath": ".github/workflows/self-release-promote.yml",
5901
7565
  "availability": "shipped",
5902
7566
  "visibility": "public",
5903
7567
  "participantFacing": true,
@@ -5907,11 +7571,11 @@
5907
7571
  "reverseAuditSource": ".github/workflows"
5908
7572
  },
5909
7573
  {
5910
- "id": "workflow:v4-publication-rehearsal-dogfood",
5911
- "name": "workflow:v4-publication-rehearsal-dogfood",
7574
+ "id": "workflow:self-release-rehearsal-dogfood",
7575
+ "name": "workflow:self-release-rehearsal-dogfood",
5912
7576
  "kind": "workflow",
5913
- "sourcePath": ".github/workflows/v4-publication-rehearsal-dogfood.yml",
5914
- "evidencePath": ".github/workflows/v4-publication-rehearsal-dogfood.yml",
7577
+ "sourcePath": ".github/workflows/self-release-rehearsal-dogfood.yml",
7578
+ "evidencePath": ".github/workflows/self-release-rehearsal-dogfood.yml",
5915
7579
  "availability": "shipped",
5916
7580
  "visibility": "public",
5917
7581
  "participantFacing": true,
@@ -5921,57 +7585,65 @@
5921
7585
  "reverseAuditSource": ".github/workflows"
5922
7586
  },
5923
7587
  {
5924
- "id": "workflow:v4-stage-capsule-canary",
5925
- "name": "workflow:v4-stage-capsule-canary",
7588
+ "id": "workflow:self-release-tail-dogfood",
7589
+ "name": "workflow:self-release-tail-dogfood",
5926
7590
  "kind": "workflow",
5927
- "sourcePath": ".github/workflows/v4-stage-capsule-canary.yml",
5928
- "evidencePath": ".github/workflows/v4-stage-capsule-canary.yml",
7591
+ "sourcePath": ".github/workflows/self-release-tail-dogfood.yml",
7592
+ "evidencePath": ".github/workflows/self-release-tail-dogfood.yml",
5929
7593
  "availability": "shipped",
5930
7594
  "visibility": "public",
5931
7595
  "participantFacing": true,
5932
7596
  "public": true,
5933
- "inputCount": 6,
5934
- "inputs": [
5935
- "build-artifact-path",
5936
- "consumer",
5937
- "go-version",
5938
- "install-artifact-path",
5939
- "node-version",
5940
- "verify-artifact-path"
5941
- ],
7597
+ "inputCount": 0,
7598
+ "inputs": [],
5942
7599
  "reverseAuditSource": ".github/workflows"
5943
7600
  },
5944
7601
  {
5945
- "id": "workflow:v4-tail-reseal",
5946
- "name": "workflow:v4-tail-reseal",
7602
+ "id": "workflow:stable-candidate-patrol",
7603
+ "name": "workflow:stable-candidate-patrol",
5947
7604
  "kind": "workflow",
5948
- "sourcePath": ".github/workflows/v4-tail-reseal.yml",
5949
- "evidencePath": ".github/workflows/v4-tail-reseal.yml",
7605
+ "sourcePath": ".github/workflows/stable-candidate-patrol.yml",
7606
+ "evidencePath": ".github/workflows/stable-candidate-patrol.yml",
5950
7607
  "availability": "shipped",
5951
7608
  "visibility": "public",
5952
7609
  "participantFacing": true,
5953
7610
  "public": true,
5954
- "inputCount": 4,
7611
+ "inputCount": 17,
5955
7612
  "inputs": [
5956
- "artifact-retention-days",
5957
- "consumer-policy-receipt-json",
5958
- "macos-finalization-command",
5959
- "request-json"
7613
+ "auto-approve",
7614
+ "auto-merge",
7615
+ "auto-promote",
7616
+ "buildchain-ref",
7617
+ "buildchain-repository",
7618
+ "dry-run",
7619
+ "hold",
7620
+ "hold-reason",
7621
+ "ledger-ref",
7622
+ "merge-method",
7623
+ "minimum-soak-seconds",
7624
+ "release-now",
7625
+ "required-checks",
7626
+ "revoke-reason",
7627
+ "revoked-versions",
7628
+ "target-branch",
7629
+ "universal-request-json"
5960
7630
  ],
5961
7631
  "reverseAuditSource": ".github/workflows"
5962
7632
  },
5963
7633
  {
5964
- "id": "workflow:verify",
5965
- "name": "workflow:verify",
7634
+ "id": "workflow:universal-bootstrap-recovery",
7635
+ "name": "workflow:universal-bootstrap-recovery",
5966
7636
  "kind": "workflow",
5967
- "sourcePath": ".github/workflows/verify.yml",
5968
- "evidencePath": ".github/workflows/verify.yml",
7637
+ "sourcePath": ".github/workflows/universal-bootstrap-recovery.yml",
7638
+ "evidencePath": ".github/workflows/universal-bootstrap-recovery.yml",
5969
7639
  "availability": "shipped",
5970
7640
  "visibility": "public",
5971
7641
  "participantFacing": true,
5972
7642
  "public": true,
5973
- "inputCount": 0,
5974
- "inputs": [],
7643
+ "inputCount": 1,
7644
+ "inputs": [
7645
+ "request-json"
7646
+ ],
5975
7647
  "reverseAuditSource": ".github/workflows"
5976
7648
  },
5977
7649
  {
@@ -6140,6 +7812,52 @@
6140
7812
  ],
6141
7813
  "reverseAuditSource": "actions/*/action.yml"
6142
7814
  },
7815
+ {
7816
+ "id": "action:release-candidate-promote",
7817
+ "name": "action:release-candidate-promote",
7818
+ "kind": "action",
7819
+ "sourcePath": "actions/release-candidate-promote/action.yml",
7820
+ "evidencePath": "actions/release-candidate-promote/action.yml",
7821
+ "availability": "shipped",
7822
+ "visibility": "public",
7823
+ "participantFacing": true,
7824
+ "public": true,
7825
+ "inputCount": 31,
7826
+ "inputs": [
7827
+ "artifact-paths",
7828
+ "candidate-build-summary-path",
7829
+ "candidate-passport-path",
7830
+ "failure-after-capability",
7831
+ "mutation-token",
7832
+ "product-publication-intent-path",
7833
+ "publication-qualification-path",
7834
+ "publish-artifact-kind",
7835
+ "publish-auth",
7836
+ "publish-command",
7837
+ "publish-dist-tag",
7838
+ "publish-mode",
7839
+ "publish-package-main",
7840
+ "publish-package-set-order",
7841
+ "publish-rematerialize-on-resume",
7842
+ "publish-transaction-override",
7843
+ "publisher-workflow-sha",
7844
+ "repository",
7845
+ "required-artifacts-path",
7846
+ "required-status-check",
7847
+ "resume-transaction-id",
7848
+ "runtime-commit",
7849
+ "runtime-tree",
7850
+ "sealed-bundle-manifest",
7851
+ "sealed-bundle-root",
7852
+ "source-sha",
7853
+ "stage-capsules-path",
7854
+ "state-path",
7855
+ "target-ref",
7856
+ "target-sha",
7857
+ "token"
7858
+ ],
7859
+ "reverseAuditSource": "actions/*/action.yml"
7860
+ },
6143
7861
  {
6144
7862
  "id": "action:release-tail",
6145
7863
  "name": "action:release-tail",
@@ -6265,51 +7983,6 @@
6265
7983
  ],
6266
7984
  "reverseAuditSource": "actions/*/action.yml"
6267
7985
  },
6268
- {
6269
- "id": "action:v4-release-candidate-promote",
6270
- "name": "action:v4-release-candidate-promote",
6271
- "kind": "action",
6272
- "sourcePath": "actions/v4-release-candidate-promote/action.yml",
6273
- "evidencePath": "actions/v4-release-candidate-promote/action.yml",
6274
- "availability": "shipped",
6275
- "visibility": "public",
6276
- "participantFacing": true,
6277
- "public": true,
6278
- "inputCount": 30,
6279
- "inputs": [
6280
- "artifact-paths",
6281
- "candidate-build-summary-path",
6282
- "candidate-passport-path",
6283
- "failure-after-capability",
6284
- "mutation-token",
6285
- "product-publication-intent-path",
6286
- "publication-qualification-path",
6287
- "publish-auth",
6288
- "publish-command",
6289
- "publish-dist-tag",
6290
- "publish-mode",
6291
- "publish-package-main",
6292
- "publish-package-set-order",
6293
- "publish-rematerialize-on-resume",
6294
- "publish-transaction-override",
6295
- "publisher-workflow-sha",
6296
- "repository",
6297
- "required-artifacts-path",
6298
- "required-status-check",
6299
- "resume-transaction-id",
6300
- "runtime-commit",
6301
- "runtime-tree",
6302
- "sealed-bundle-manifest",
6303
- "sealed-bundle-root",
6304
- "source-sha",
6305
- "stage-capsules-path",
6306
- "state-path",
6307
- "target-ref",
6308
- "target-sha",
6309
- "token"
6310
- ],
6311
- "reverseAuditSource": "actions/*/action.yml"
6312
- },
6313
7986
  {
6314
7987
  "id": "action:validate-config",
6315
7988
  "name": "action:validate-config",
@@ -6365,8 +8038,8 @@
6365
8038
  "reverseAuditSource": "dist/site/page-registry.json"
6366
8039
  },
6367
8040
  {
6368
- "id": "site-page:action:release-tail",
6369
- "name": "site-page:action:release-tail",
8041
+ "id": "site-page:action:release-candidate-promote",
8042
+ "name": "site-page:action:release-candidate-promote",
6370
8043
  "kind": "site-page",
6371
8044
  "sourcePath": "dist/site/page-registry.json",
6372
8045
  "evidencePath": "dist/site/page-registry.json",
@@ -6377,8 +8050,8 @@
6377
8050
  "reverseAuditSource": "dist/site/page-registry.json"
6378
8051
  },
6379
8052
  {
6380
- "id": "site-page:action:report-buildchain-issue",
6381
- "name": "site-page:action:report-buildchain-issue",
8053
+ "id": "site-page:action:release-tail",
8054
+ "name": "site-page:action:release-tail",
6382
8055
  "kind": "site-page",
6383
8056
  "sourcePath": "dist/site/page-registry.json",
6384
8057
  "evidencePath": "dist/site/page-registry.json",
@@ -6389,8 +8062,8 @@
6389
8062
  "reverseAuditSource": "dist/site/page-registry.json"
6390
8063
  },
6391
8064
  {
6392
- "id": "site-page:action:run-lifecycle",
6393
- "name": "site-page:action:run-lifecycle",
8065
+ "id": "site-page:action:report-buildchain-issue",
8066
+ "name": "site-page:action:report-buildchain-issue",
6394
8067
  "kind": "site-page",
6395
8068
  "sourcePath": "dist/site/page-registry.json",
6396
8069
  "evidencePath": "dist/site/page-registry.json",
@@ -6401,8 +8074,8 @@
6401
8074
  "reverseAuditSource": "dist/site/page-registry.json"
6402
8075
  },
6403
8076
  {
6404
- "id": "site-page:action:v4-release-candidate-promote",
6405
- "name": "site-page:action:v4-release-candidate-promote",
8077
+ "id": "site-page:action:run-lifecycle",
8078
+ "name": "site-page:action:run-lifecycle",
6406
8079
  "kind": "site-page",
6407
8080
  "sourcePath": "dist/site/page-registry.json",
6408
8081
  "evidencePath": "dist/site/page-registry.json",
@@ -6916,6 +8589,18 @@
6916
8589
  "public": true,
6917
8590
  "reverseAuditSource": "dist/site/page-registry.json"
6918
8591
  },
8592
+ {
8593
+ "id": "site-page:manual:oci-publication",
8594
+ "name": "site-page:manual:oci-publication",
8595
+ "kind": "site-page",
8596
+ "sourcePath": "dist/site/page-registry.json",
8597
+ "evidencePath": "dist/site/page-registry.json",
8598
+ "availability": "shipped",
8599
+ "visibility": "public",
8600
+ "participantFacing": true,
8601
+ "public": true,
8602
+ "reverseAuditSource": "dist/site/page-registry.json"
8603
+ },
6919
8604
  {
6920
8605
  "id": "site-page:manual:ownership",
6921
8606
  "name": "site-page:manual:ownership",
@@ -7276,6 +8961,18 @@
7276
8961
  "public": true,
7277
8962
  "reverseAuditSource": "dist/site/page-registry.json"
7278
8963
  },
8964
+ {
8965
+ "id": "site-page:manual:v4-rust-wasm-production-authority",
8966
+ "name": "site-page:manual:v4-rust-wasm-production-authority",
8967
+ "kind": "site-page",
8968
+ "sourcePath": "dist/site/page-registry.json",
8969
+ "evidencePath": "dist/site/page-registry.json",
8970
+ "availability": "shipped",
8971
+ "visibility": "public",
8972
+ "participantFacing": true,
8973
+ "public": true,
8974
+ "reverseAuditSource": "dist/site/page-registry.json"
8975
+ },
7279
8976
  {
7280
8977
  "id": "site-page:manual:v4-stage-capsule",
7281
8978
  "name": "site-page:manual:v4-stage-capsule",
@@ -7324,6 +9021,30 @@
7324
9021
  "public": true,
7325
9022
  "reverseAuditSource": "dist/site/page-registry.json"
7326
9023
  },
9024
+ {
9025
+ "id": "site-page:manual:workflow-catalog",
9026
+ "name": "site-page:manual:workflow-catalog",
9027
+ "kind": "site-page",
9028
+ "sourcePath": "dist/site/page-registry.json",
9029
+ "evidencePath": "dist/site/page-registry.json",
9030
+ "availability": "shipped",
9031
+ "visibility": "public",
9032
+ "participantFacing": true,
9033
+ "public": true,
9034
+ "reverseAuditSource": "dist/site/page-registry.json"
9035
+ },
9036
+ {
9037
+ "id": "site-page:manual:workflow-path-migration",
9038
+ "name": "site-page:manual:workflow-path-migration",
9039
+ "kind": "site-page",
9040
+ "sourcePath": "dist/site/page-registry.json",
9041
+ "evidencePath": "dist/site/page-registry.json",
9042
+ "availability": "shipped",
9043
+ "visibility": "public",
9044
+ "participantFacing": true,
9045
+ "public": true,
9046
+ "reverseAuditSource": "dist/site/page-registry.json"
9047
+ },
7327
9048
  {
7328
9049
  "id": "site-page:overview:home",
7329
9050
  "name": "site-page:overview:home",
@@ -7373,11 +9094,11 @@
7373
9094
  "public": true
7374
9095
  },
7375
9096
  {
7376
- "id": "control:.github/workflows/buildchain-ref-promotion.yml",
7377
- "name": "control:.github/workflows/buildchain-ref-promotion.yml",
9097
+ "id": "control:.github/workflows/self-release-promote.yml",
9098
+ "name": "control:.github/workflows/self-release-promote.yml",
7378
9099
  "kind": "workflow",
7379
- "sourcePath": ".github/workflows/buildchain-ref-promotion.yml",
7380
- "evidencePath": ".github/workflows/buildchain-ref-promotion.yml",
9100
+ "sourcePath": ".github/workflows/self-release-promote.yml",
9101
+ "evidencePath": ".github/workflows/self-release-promote.yml",
7381
9102
  "availability": "shipped",
7382
9103
  "visibility": "public",
7383
9104
  "participantFacing": true,
@@ -7476,7 +9197,7 @@
7476
9197
  "name": "Buildchain standalone binary distribution",
7477
9198
  "kind": "binary-distribution",
7478
9199
  "sourcePath": "scripts/build-standalone-binary.mjs",
7479
- "evidencePath": ".github/workflows/binary-distribution.yml",
9200
+ "evidencePath": ".github/workflows/self-build-binary-distribution.yml",
7480
9201
  "availability": "shipped",
7481
9202
  "visibility": "public",
7482
9203
  "participantFacing": true,
@@ -7507,6 +9228,6 @@
7507
9228
  }
7508
9229
  }
7509
9230
  ],
7510
- "publicSurfaceCount": 481
9231
+ "publicSurfaceCount": 532
7511
9232
  }
7512
9233
  }