@kungfu-tech/buildchain 4.0.2 → 4.0.3

package/architecture/{v4-stage-capsule-qualification.json → stage-capsule-qualification.json}

@@ -1,12 +1,12 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-v4-stage-capsule-qualification",
-  "capsuleAuthority": "architecture/v4-stage-capsule-contract.json",
-  "storeAuthority": "architecture/v4-stage-capsule-store-contract.json",
-  "checkpointAuthority": "architecture/v4-platform-stage-checkpoints.json",
-  "resumeAuthority": "architecture/v4-stage-capsule-resume-planner.json",
-  "implementation": "packages/core/v4-stage-capsule-qualification.js",
-  "rehearsal": "scripts/v4-stage-capsule-qualification.mjs",
+  "capsuleAuthority": "architecture/stage-capsule-contract.json",
+  "storeAuthority": "architecture/stage-capsule-store-contract.json",
+  "checkpointAuthority": "architecture/platform-stage-checkpoints.json",
+  "resumeAuthority": "architecture/stage-capsule-resume-planner.json",
+  "implementation": "packages/core/stage-capsule-qualification.js",
+  "rehearsal": "scripts/stage-capsule-qualification.mjs",
   "mode": "shadow-only",
   "productionAuthority": "v3",
   "campaign": {

package/architecture/{v4-stage-capsule-resume-planner.json → stage-capsule-resume-planner.json}

@@ -3,8 +3,8 @@
   "contract": "kungfu-buildchain-v4-stage-capsule-resume-planner",
   "schemaAuthority": "contracts/v4-stage-capsule-resume-v1.schema.json",
   "fixtureAuthority": "contracts/fixtures/v4-stage-capsule-resume-v1/late-platform-failure.json",
-  "capsuleAuthority": "architecture/v4-stage-capsule-contract.json",
-  "checkpointAuthority": "architecture/v4-platform-stage-checkpoints.json",
+  "capsuleAuthority": "architecture/stage-capsule-contract.json",
+  "checkpointAuthority": "architecture/platform-stage-checkpoints.json",
   "mode": "shadow-only",
   "productionAuthority": "v3",
   "planner": {

package/architecture/{v4-stage-capsule-store-contract.json → stage-capsule-store-contract.json}

@@ -1,13 +1,13 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-v4-stage-capsule-store-architecture",
-  "identityAuthority": "architecture/v4-stage-capsule-contract.json",
+  "identityAuthority": "architecture/stage-capsule-contract.json",
   "schemaAuthority": "contracts/v4-stage-capsule-store-v1.schema.json",
   "fixtureAuthority": "contracts/fixtures/v4-stage-capsule-store-v1/shared.json",
   "implementations": {
-    "rust": "crates/buildchain-v4-contracts/src/stage_capsule_store.rs",
-    "typescriptContract": "packages/core/v4-stage-capsule-store.js",
-    "localReferenceStore": "packages/core/v4-stage-capsule-local-store.js"
+    "rust": "crates/buildchain-domain-contracts/src/stage_capsule_store.rs",
+    "typescriptContract": "packages/core/stage-capsule-store.js",
+    "localReferenceStore": "packages/core/stage-capsule-local-store.js"
   },
   "authority": {
     "writer": "typescript-v3",

package/architecture/{v4-tail-reseal-parity.json → tail-reseal-parity.json}

@@ -12,9 +12,9 @@
     "branch": "dev/v4/v4.0",
     "publicReusableWorkflow": "kungfu-systems/buildchain/.github/workflows/public-ops-tail-reseal.yml@v4-alpha",
     "requestSchema": "contracts/v4-tail-reseal-v1.schema.json",
-    "planner": "packages/core/v4-tail-reseal.js",
-    "admission": "packages/core/v4-tail-reseal-github.js",
-    "receipt": "packages/core/v4-tail-reseal-receipt.js",
+    "planner": "packages/core/tail-reseal.js",
+    "admission": "packages/core/tail-reseal-github.js",
+    "receipt": "packages/core/tail-reseal-receipt.js",
     "cli": "buildchain tail-reseal"
   },
   "authority": {
@@ -35,8 +35,8 @@
       "id": "TR-01",
       "claim": "The exact captured v3 retained-candidate script, workflow and tests are rooted as parity authority.",
       "disposition": "implemented",
-      "implementationEvidence": ["architecture/v4-tail-reseal-parity.json"],
-      "verificationEvidence": ["tests/v4-tail-reseal-parity.test.mjs"]
+      "implementationEvidence": ["architecture/tail-reseal-parity.json"],
+      "verificationEvidence": ["tests/tail-reseal-parity.test.mjs"]
     },
     {
       "id": "TR-02",
@@ -44,11 +44,11 @@
       "disposition": "implemented",
       "implementationEvidence": [
         "contracts/v4-tail-reseal-v1.schema.json",
-        "packages/core/v4-tail-reseal-github.js"
+        "packages/core/tail-reseal-github.js"
       ],
       "verificationEvidence": [
         "contracts/fixtures/v4-tail-reseal-v1/valid.json",
-        "tests/v4-tail-reseal.test.mjs"
+        "tests/tail-reseal.test.mjs"
       ]
     },
     {
@@ -56,64 +56,64 @@
       "claim": "A fresh runner downloads retained archives and verifies every manifest and payload byte before any tail effect.",
       "disposition": "implemented",
       "implementationEvidence": [
-        "scripts/v4-tail-reseal.mjs",
+        "scripts/tail-reseal.mjs",
         ".github/workflows/public-ops-tail-reseal.yml"
       ],
-      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+      "verificationEvidence": ["tests/tail-reseal.test.mjs"]
     },
     {
       "id": "TR-04",
       "claim": "Install, build, verify, package and platform-matrix remain explicitly skipped under effect-free Stage Capsule reuse.",
       "disposition": "implemented",
-      "implementationEvidence": ["packages/core/v4-tail-reseal.js"],
-      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+      "implementationEvidence": ["packages/core/tail-reseal.js"],
+      "verificationEvidence": ["tests/tail-reseal.test.mjs"]
     },
     {
       "id": "TR-05",
       "claim": "Only macOS signing-finalization may change bytes; every other platform stays byte-identical and provider-effect-free.",
       "disposition": "implemented",
       "implementationEvidence": [
-        "packages/core/v4-tail-reseal-receipt.js",
-        "scripts/v4-tail-reseal.mjs"
+        "packages/core/tail-reseal-receipt.js",
+        "scripts/tail-reseal.mjs"
       ],
-      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+      "verificationEvidence": ["tests/tail-reseal.test.mjs"]
     },
     {
       "id": "TR-06",
       "claim": "The macOS effect is fenced by exact Warrant lineage, credential authority, release-tail transaction and idempotency key.",
       "disposition": "implemented",
       "implementationEvidence": [
-        "packages/core/v4-tail-reseal.js",
+        "packages/core/tail-reseal.js",
         ".github/workflows/public-ops-tail-reseal.yml"
       ],
-      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+      "verificationEvidence": ["tests/tail-reseal.test.mjs"]
     },
     {
       "id": "TR-07",
       "claim": "Source, platform, archive, manifest, signer, Warrant, credential, retention and prior-failure drift fails closed.",
       "disposition": "implemented",
       "implementationEvidence": [
-        "packages/core/v4-tail-reseal.js",
-        "packages/core/v4-tail-reseal-github.js"
+        "packages/core/tail-reseal.js",
+        "packages/core/tail-reseal-github.js"
       ],
-      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+      "verificationEvidence": ["tests/tail-reseal.test.mjs"]
     },
     {
       "id": "TR-08",
       "claim": "Expired retention or credential leases invalidate reuse and require a normal candidate rebuild.",
       "disposition": "implemented",
-      "implementationEvidence": ["packages/core/v4-tail-reseal.js"],
-      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+      "implementationEvidence": ["packages/core/tail-reseal.js"],
+      "verificationEvidence": ["tests/tail-reseal.test.mjs"]
     },
     {
       "id": "TR-09",
       "claim": "Successful reseal emits the ordinary v4 Release Candidate Passport with its original floating-consumer policy receipt.",
       "disposition": "implemented",
       "implementationEvidence": [
-        "packages/core/v4-tail-reseal-receipt.js",
+        "packages/core/tail-reseal-receipt.js",
         ".github/workflows/public-ops-tail-reseal.yml"
       ],
-      "verificationEvidence": ["tests/v4-tail-reseal.test.mjs"]
+      "verificationEvidence": ["tests/tail-reseal.test.mjs"]
     },
     {
       "id": "TR-10",
@@ -122,7 +122,7 @@
       "implementationEvidence": [
         ".github/workflows/public-ops-tail-reseal.yml"
       ],
-      "verificationEvidence": ["tests/v4-tail-reseal-parity.test.mjs"]
+      "verificationEvidence": ["tests/tail-reseal-parity.test.mjs"]
     },
     {
       "id": "TR-11",
@@ -131,13 +131,13 @@
       "implementationEvidence": [
         "package.json",
         "bin/buildchain.mjs",
-        "scripts/v4-tail-reseal.mjs",
+        "scripts/tail-reseal.mjs",
         "docs/v4-tail-reseal.md"
       ],
       "verificationEvidence": [
         "tests/command-registry.test.mjs",
-        "tests/v4-tail-reseal.test.mjs",
-        "tests/v4-tail-reseal-parity.test.mjs"
+        "tests/tail-reseal.test.mjs",
+        "tests/tail-reseal-parity.test.mjs"
       ]
     },
     {
@@ -148,5 +148,5 @@
       "verificationEvidence": []
     }
   ],
-  "matrixRoot": "sha256:dc8d99f2e90473abde7a04c02300e7bfd0b48a2ff187e99fae0bc090ff2a855d"
+  "matrixRoot": "sha256:f27988a8b5e954ad50eb773e64349559cbfb122d2e180c4845fd940ee1246e97"
 }

package/architecture/{v4-universal-workflow-bootstrap.json → universal-workflow-bootstrap.json}

@@ -7,14 +7,14 @@
     "admissionSchema": "kungfu-buildchain-v4-universal-workflow-admission/v1",
     "terminalReceiptSchema": "kungfu-buildchain-v4-universal-workflow-terminal-receipt/v1",
     "candidateRepository": "kungfu-systems/buildchain",
-    "candidateEnginePath": "scripts/v4-universal-workflow-engine.mjs",
+    "candidateEnginePath": "scripts/universal-workflow-engine.mjs",
     "consumerTemplate": "templates/universal-buildchain-bootstrap.yml",
     "consumerRecoveryTemplate": "templates/universal-buildchain-bootstrap-recovery.yml",
     "consumerRecoveryWorkflow": ".github/workflows/universal-bootstrap-recovery.yml",
     "consumerRecoveryMode": "separate-pre-positioned-consumer-owned-shell",
     "recoveryDependsOnPublishedBuildchain": false,
     "selfDogfoodWorkflow": ".github/workflows/self-ops-bootstrap-dogfood.yml",
-    "faultCampaign": "architecture/v4-universal-workflow-fault-campaign.json",
+    "faultCampaign": "architecture/universal-workflow-fault-campaign.json",
     "discoveryRefExecutionAuthority": false,
     "exactShaExecutionAuthority": true,
     "consumerSourceMutationPerIncident": false,
@@ -100,6 +100,7 @@
     ".github/workflows/patrol-monthly.yml",
     ".github/workflows/patrol-observed-evidence.yml",
     ".github/workflows/patrol-weekly.yml",
+    ".github/workflows/public-release-oci-compose-preview.yml",
     ".github/workflows/publication-artifact.yml",
     ".github/workflows/release-candidate-promote.yml",
     ".github/workflows/release-governance-reconcile.yml",
@@ -144,6 +145,7 @@
     ".github/workflows/patrol-monthly.yml",
     ".github/workflows/patrol-observed-evidence.yml",
     ".github/workflows/patrol-weekly.yml",
+    ".github/workflows/public-release-oci-compose-preview.yml",
     ".github/workflows/publication-artifact.yml",
     ".github/workflows/release-candidate-promote.yml",
     ".github/workflows/release-governance-reconcile.yml",
@@ -155,7 +157,7 @@
     ".github/workflows/v4-tail-reseal.yml"
   ],
   "migration": {
-    "compatibilityFacadeGenerator": "scripts/generate-v4-universal-workflow-facades.mjs",
+    "compatibilityFacadeGenerator": "scripts/generate-universal-workflow-facades.mjs",
     "facadeSourceRevision": "06a2d9f7d5753c5c9b2bf0e7f0e3220fc18cc183",
     "channelGeneratedFacades": [
       ".github/workflows/build.yml",
@@ -166,6 +168,9 @@
     "compatibilityFacades": "generated-dual-path",
     "externalConsumerDogfood": "public-consumer-three-platform-runtime-and-non-circular-recovery-hosted-proof-passed",
     "buildchainSelfDogfood": "train-primary-and-consumer-recovery-three-pair-hosted-proof-passed",
-    "oldPathRetirement": "pending-protected-dev-integration"
+    "oldPathRetirement": "pending-protected-dev-integration",
+    "postMigrationWorkflows": [
+      ".github/workflows/public-release-oci-compose-preview.yml"
+    ]
   }
 }

package/architecture/{v4-universal-workflow-fault-campaign.json → universal-workflow-fault-campaign.json}

@@ -16,9 +16,9 @@
     },
     {
       "id": "typed-input-adapter",
-      "injectionTarget": "packages/core/v4-universal-workflow-bootstrap.js",
+      "injectionTarget": "packages/core/universal-workflow-bootstrap.js",
       "recoveryRoute": "exact-train-candidate",
-      "recoveryTarget": "scripts/v4-universal-workflow-engine.mjs"
+      "recoveryTarget": "scripts/universal-workflow-engine.mjs"
     },
     {
       "id": "route-selector",
@@ -34,21 +34,21 @@
     },
     {
       "id": "router",
-      "injectionTarget": "packages/core/v4-release-invocation.js",
+      "injectionTarget": "packages/core/release-invocation.js",
       "recoveryRoute": "exact-train-candidate",
-      "recoveryTarget": "scripts/v4-universal-workflow-engine.mjs"
+      "recoveryTarget": "scripts/universal-workflow-engine.mjs"
     },
     {
       "id": "action",
-      "injectionTarget": "actions/v4-release-candidate-promote/action.yml",
+      "injectionTarget": "actions/release-candidate-promote/action.yml",
       "recoveryRoute": "exact-train-candidate",
-      "recoveryTarget": "actions/v4-release-candidate-promote/dist/index.js"
+      "recoveryTarget": "actions/release-candidate-promote/dist/index.js"
     },
     {
       "id": "cli-runtime",
-      "injectionTarget": "scripts/v4-universal-workflow-engine.mjs",
+      "injectionTarget": "scripts/universal-workflow-engine.mjs",
       "recoveryRoute": "exact-train-candidate",
-      "recoveryTarget": "scripts/v4-universal-workflow-engine.mjs"
+      "recoveryTarget": "scripts/universal-workflow-engine.mjs"
     },
     {
       "id": "recovery-logic",

package/architecture/{v4-universal-workflow-train-admission.json → universal-workflow-train-admission.json}

@@ -23,18 +23,18 @@
     "statuses": "write"
   },
   "contractRoots": [
-    "sha256:1de4662862d6b519a115613d542891506e0b267a439219c9192ec515347d7b2a",
-    "sha256:38ab6e09aea11256a038c208b5e83dafc19cd740057e0eb90e1b1bd28175b067",
-    "sha256:4e1f0a8ae7b3f7651b16687d7cfab88a9622c5f88e04c82faf66769230ef595d",
-    "sha256:613b0803c29c86f0c6c90a3e0bebd9bcd0ba62dca9eae94afaab3abe869e0a47",
-    "sha256:65a0c2fc3faecaddf5076fff086b5d6e12eb9ba27796efc10aed19f2d93b9457",
-    "sha256:b94023c4abe4216765198adcaefb4825874a4d9053be096d35a53d6821128b52",
-    "sha256:ca0592275354f0690756e3f11accdd23615987827c346618c50c2e8a2807ad4d"
+    "sha256:19034e431506e219bec09851b0adb0e5ee6d1798528d2369f3f60b3f1bf2a8bf",
+    "sha256:20d48eff5e9eac02d552a1cbdb76f01e2b5addec798260ab43c0102ebf630f4b",
+    "sha256:348955860bd0c5f5486c48be2e6c8553b50afa0be96699eff1b3dba914e7f80d",
+    "sha256:5e922ecc5f5b7b17a67ccd73be1eb73ae9db886a9da439dbef942b5e2d80062b",
+    "sha256:b5d0050d17f2302e337dbbc9ad9bc07012d41b575cbca59123af5ae9df157579",
+    "sha256:bab725233283c317972f383bcdd7c72725a1b46d96aa732e117f042b4bd313e9",
+    "sha256:bbc0b1317f612b81ba3e462eab5a5ed2e0549ced6918fdc9b58b3dd14dc3db19"
   ],
   "targetRef": "dev/v4/v4.0",
   "allowedReviewers": ["kungfu-origin"],
   "minimumApprovals": 1,
   "requiredChecks": ["check"],
   "validFrom": "2026-08-30T00:00:00.000Z",
-  "expiresAt": "2026-09-07T00:00:00.000Z"
+  "expiresAt": "2026-09-15T00:00:00.000Z"
 }

package/architecture/workflow-taxonomy.json

@@ -1370,6 +1370,17 @@
       },
       "compatibility": null,
       "rationale": "Classify the existing .github/workflows/verify.yml capability without adding execution behavior."
+    },
+    {
+      "id": "oci-compose-preview",
+      "role": "public",
+      "category": "release",
+      "purpose": "oci-compose-preview",
+      "summary": "Buildchain OCI Compose Preview",
+      "owner": "kungfu-origin",
+      "status": "active",
+      "invocation": "reusable",
+      "rationale": "Promote one digest-preserving Compose preview only after verified public v4 publication and exact-source installation qualification."
     }
   ],
   "migrationSources": {

package/bin/buildchain.mjs

@@ -11,7 +11,7 @@ import { runLifecycle } from "../scripts/run-lifecycle-core.mjs";
 import { runReleasePropagationCli } from "../scripts/release-propagation.mjs";
 import { runReleaseGovernanceCli } from "../scripts/reconcile-release-governance.mjs";
 import { runReleaseTailCli } from "../scripts/release-tail.mjs";
-import { runV4TailResealCli } from "../scripts/v4-tail-reseal.mjs";
+import { runTailResealCli } from "../scripts/tail-reseal.mjs";
 import { runPublicationArtifactCli } from "../scripts/publication-artifact.mjs";
 import { runPublicationPackageCli } from "../scripts/publication-package.mjs";
 import { runPublicationReproducibilityCli } from "../scripts/publication-reproducibility.mjs";
@@ -1680,7 +1680,7 @@ async function handleReleaseTailCommand(args) {
 }
 
 async function handleTailResealCommand(args) {
-  await runV4TailResealCli(args);
+  await runTailResealCli(args);
 }
 
 async function handleNextDevelopmentCommand(args) {
@@ -1748,7 +1748,7 @@ async function handlePublishSourceCommand(args) {
 }
 
 async function handleArchitectureCommand(args) {
-  runScript("v4-architecture.mjs", args);
+  runScript("architecture.mjs", args);
 }
 
 async function handleAdopterDeliveryCommand(args) {

package/bin/internal/adopter-delivery-cli.mjs

@@ -1,9 +1,9 @@
 import {
-  loadV4PublishedAdopterDeliveryAuthority,
-  qualifyV4AdopterDeliveryBootstrap,
-  runV4AdopterDeliveryGate,
-  verifyV4AdopterDeliveryReadback,
-} from "../../packages/core/v4-adopter-delivery.js";
+  loadPublishedAdopterDeliveryAuthority,
+  qualifyAdopterDeliveryBootstrap,
+  runAdopterDeliveryGate,
+  verifyAdopterDeliveryReadback,
+} from "../../packages/core/adopter-delivery.js";
 import {
   printJson,
   readFlag,
@@ -22,7 +22,7 @@ export async function runAdopterDeliveryCli(args = []) {
     const input = readJsonInput(readFlag(commandArgs, "input", ""), {
       label: "adopter delivery input",
     });
-    emit(commandArgs, runV4AdopterDeliveryGate(input));
+    emit(commandArgs, runAdopterDeliveryGate(input));
     return;
   }
   if (subcommand === "verify") {
@@ -32,21 +32,21 @@ export async function runAdopterDeliveryCli(args = []) {
     const readback = readJsonInput(readFlag(commandArgs, "readback", ""), {
       label: "adopter delivery readback",
     });
-    emit(commandArgs, verifyV4AdopterDeliveryReadback({ input, readback }));
+    emit(commandArgs, verifyAdopterDeliveryReadback({ input, readback }));
     return;
   }
   if (subcommand === "bootstrap") {
     const request = readJsonInput(readFlag(commandArgs, "input", ""), {
       label: "adopter delivery bootstrap input",
     });
-    emit(commandArgs, qualifyV4AdopterDeliveryBootstrap(request));
+    emit(commandArgs, qualifyAdopterDeliveryBootstrap(request));
     return;
   }
   if (subcommand === "archive") {
     const request = readJsonInput(readFlag(commandArgs, "input", ""), {
       label: "published archive input",
     });
-    const authority = await loadV4PublishedAdopterDeliveryAuthority(request);
+    const authority = await loadPublishedAdopterDeliveryAuthority(request);
     try {
       emit(commandArgs, {
         schemaVersion: authority.schemaVersion,

package/contracts/fixtures/v4-tail-reseal-v1/valid.json

@@ -22,7 +22,7 @@
     "ref": "v4-alpha",
     "sha": "dddddddddddddddddddddddddddddddddddddddd",
     "contractRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
-    "consumerPolicyReceiptRoot": "sha256:402e7aadc3358f89554d3279bd30c4f7a41807c49748d4882117971b31ff3e40"
+    "consumerPolicyReceiptRoot": "sha256:acee2edcda59dfaf5fc0dd5877b7a20405fc6e0fa419abdd279a68aef32a0e5c"
   },
   "warrant": {
     "candidateId": "candidate-alpha-2",

package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/Cargo.lock

@@ -24,7 +24,7 @@ dependencies = [
 ]
 
 [[package]]
-name = "buildchain-v4-bridge"
+name = "buildchain-host-bridge"
 version = "0.1.0"
 dependencies = [
  "base64",

package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/Cargo.toml

@@ -1,5 +1,5 @@
 [package]
-name = "buildchain-v4-bridge"
+name = "buildchain-host-bridge"
 version = "0.1.0"
 edition = "2024"
 license = "Apache-2.0"

package/crates/{buildchain-v4-bridge → buildchain-host-bridge}/src/main.rs

@@ -222,7 +222,7 @@ fn read_bounded(
 fn execute(request: &HostRequest, serialized_request: &[u8]) -> HostResponse {
     let command = env::var("BUILDCHAIN_V4_HOST_COMMAND").unwrap_or_else(|_| "node".to_owned());
     let script = env::var("BUILDCHAIN_V4_HOST_SCRIPT")
-        .unwrap_or_else(|_| "scripts/v4-host-adapter.mjs".to_owned());
+        .unwrap_or_else(|_| "scripts/host-adapter.mjs".to_owned());
     let mut child = match Command::new(&command)
         .arg(&script)
         .stdin(Stdio::piped())
@@ -415,7 +415,7 @@ fn execute(request: &HostRequest, serialized_request: &[u8]) -> HostResponse {
 fn run() -> Result<i32, String> {
     let mode = env::args().nth(1).unwrap_or_else(|| "exchange".to_owned());
     if !["exchange", "compat"].contains(&mode.as_str()) {
-        return Err("usage: buildchain-v4-bridge [exchange|compat]".to_owned());
+        return Err("usage: buildchain-host-bridge [exchange|compat]".to_owned());
     }
     let mut serialized = Vec::new();
     io::stdin()
@@ -448,7 +448,7 @@ fn main() {
     match run() {
         Ok(code) => std::process::exit(code),
         Err(error) => {
-            eprintln!("buildchain-v4-bridge: {error}");
+            eprintln!("buildchain-host-bridge: {error}");
             std::process::exit(DATA_EXIT);
         }
     }

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "4.0.2",
+    "version": "4.0.3",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v4",
@@ -1361,7 +1361,7 @@
         "retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
       ],
       "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa",
-      "auditDigest": "sha256:20549663f5459414dcfb00aa9a3a549003bbc09159eeab6cea211db96ed0eab2",
+      "auditDigest": "sha256:253a3a7f5592471b5d5d4a0050865c1bf9a47a7490820f6bc11d9495d1764cea",
       "compatibleBreakingDigests": [
         "sha256:a6a35370d6b0d0f46e1b2712dcc01961fe53c2febde95409a27a485c10a36650"
       ],
@@ -1591,7 +1591,7 @@
         "GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
       ],
       "breakingDigest": "sha256:5f10c81d3f80cb417960be682921884639c40b6d875f1a3b1ffae7e652c3f468",
-      "auditDigest": "sha256:66409a757d8b009e7704c4dfc779ae009fa27d2db47cf307818eb3230b6721b7"
+      "auditDigest": "sha256:357b3e3b3a25efaf6dbf6c82e95265520eb8e41060572b3496c50f4f6c83d89e"
     },
     {
       "contractVersion": 1,
@@ -1646,7 +1646,7 @@
         "resume-from-candidate-run is fail-closed and uses a fresh caller event instead of rerunning a frozen startup graph"
       ],
       "breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
-      "auditDigest": "sha256:9c7f3586a3444cdad34d2a61be3cb9b0ae271fb56f9e371d9c37940e6b317780",
+      "auditDigest": "sha256:b1755a45984fa324ef9eb2a29c73f31ff97560ff3c6e97bf100334e74bd8b76c",
       "compatibleBreakingDigests": [
         "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
       ],
@@ -1823,10 +1823,10 @@
       "contractVersion": 1,
       "stability": "stable",
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
-      "id": "v4-release-candidate-promote-action",
+      "id": "release-candidate-promote-action",
       "kind": "action",
-      "path": "actions/v4-release-candidate-promote/action.yml",
-      "publicRef": "kungfu-systems/buildchain/actions/v4-release-candidate-promote@v4",
+      "path": "actions/release-candidate-promote/action.yml",
+      "publicRef": "kungfu-systems/buildchain/actions/release-candidate-promote@v4",
       "requiredInputs": [
         "token",
         "repository",
@@ -1862,7 +1862,7 @@
         "durable provider checkpoints resume completed capabilities without replay",
         "no consumer command, script, shell, checkout, or executable tail hook is accepted"
       ],
-      "breakingDigest": "sha256:9229eb3a000fb408feb6b8793c209c77afbf9327026467d68954470e22e4f8f4",
+      "breakingDigest": "sha256:930a8c3bb97347aea40ab19c4ee1dc29c1f4b75897e19bc0d56da1018fa382c8",
       "auditDigest": "sha256:4d51bce0908155875a70f8168fc545fe164bd1b6a4146a3de56b4dd7a5c1758c"
     },
     {
@@ -2058,7 +2058,7 @@
         "release-state SHA is recorded as a durable audit entrance"
       ],
       "breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
-      "auditDigest": "sha256:4a095c1931b4e9c4d16455425d27a27f9607b7daffde5548b2a667dbdf41a546"
+      "auditDigest": "sha256:c1648ab8f104b4a929a094126082e7502b9381f3590ecf7acc959eb6d4b20877"
     },
     {
       "contractVersion": 1,
@@ -2107,7 +2107,7 @@
         "prose-only public claims downgrade the release trust passport audit"
       ],
       "breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
-      "auditDigest": "sha256:4a095c1931b4e9c4d16455425d27a27f9607b7daffde5548b2a667dbdf41a546"
+      "auditDigest": "sha256:c1648ab8f104b4a929a094126082e7502b9381f3590ecf7acc959eb6d4b20877"
     },
     {
       "contractVersion": 1,
@@ -2167,7 +2167,7 @@
         "README badge block checks and writes are generated from machine-readable repository facts"
       ],
       "breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
-      "auditDigest": "sha256:b5ea02b539df886dd19d9a515d6d2a0099a25c1a41cc9e087f7dafb549e69ad1"
+      "auditDigest": "sha256:f85a192f737b2d7731f8c60664a93532a0879129fffa9d5a8a2887cb5a2b987b"
     },
     {
       "contractVersion": 1,
@@ -2257,7 +2257,7 @@
         "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
       ],
       "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
-      "auditDigest": "sha256:d04b7f3a39c92ac3f6a733805b686d87890591836c8c5fe000823d755a011d18"
+      "auditDigest": "sha256:b62b5d3abd9a347409f911a937983e0b58265ec09f02a9bad7adc9e02de4e6f0"
     },
     {
       "contractVersion": 1,
@@ -2279,7 +2279,7 @@
         "agents can discover supported Node APIs without importing internal file paths"
       ],
       "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
-      "auditDigest": "sha256:bcec6fe3d26c597ee77a2ddfa26941d586dc34bc60c4a80663c92180b38d35bc"
+      "auditDigest": "sha256:78803516ad11df09cf88aed4851a21498a862b1a6c077283dbd5ce1a0942dad2"
     },
     {
       "contractVersion": 1,
@@ -2974,7 +2974,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb",
-      "auditDigest": "sha256:20549663f5459414dcfb00aa9a3a549003bbc09159eeab6cea211db96ed0eab2",
+      "auditDigest": "sha256:253a3a7f5592471b5d5d4a0050865c1bf9a47a7490820f6bc11d9495d1764cea",
       "compatibleBreakingDigests": [
         "sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1",
         "sha256:e264a79f9f399038c2fcfd21e4168c68c2e1485ee5c651c02242a02b622ac2be"
@@ -4238,7 +4238,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:3f76502666069c2727d23efcfdb08fb80f89ced1955a69e29f11525ae88aca1d",
-      "auditDigest": "sha256:b224e107179552aa578d69e838a10f2da777ecabff92af4112f631aa9f506897"
+      "auditDigest": "sha256:ec5251321f4ed443749fff90b26720933ba145ccc37b018082a708088705b7cd"
     },
     {
       "contractVersion": 1,
@@ -5213,7 +5213,7 @@
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
       "breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
-      "auditDigest": "sha256:9c7f3586a3444cdad34d2a61be3cb9b0ae271fb56f9e371d9c37940e6b317780"
+      "auditDigest": "sha256:b1755a45984fa324ef9eb2a29c73f31ff97560ff3c6e97bf100334e74bd8b76c"
     },
     {
       "contractVersion": 1,
@@ -5443,6 +5443,6 @@
   "compatibilityFactRegistryRoot": "sha256:232fd556a2372b29db586bbc2acbdfce6464a68c93902797ff527f75f7816c42",
   "compatibilityFactCutRoot": "sha256:f61b975d4a96c921cc4bd37fb3ed9a0596b47004fe34dc7219979d697e3707f9",
   "compatibilityProofRegistryRoot": "sha256:b7194b811e4d3af2df4390bc4d1731e16a86215bd64ee18cb630dd5492f4fb63",
-  "compatibilityDigest": "sha256:20411029d83211dff426fb6535a608902129844a5ccb4788db77d3f81becb839",
-  "contractDigest": "sha256:3ff4d0a46c909ad17c7c91718c5440580e0a43e137a8b7fec767ca5e23b70768"
+  "compatibilityDigest": "sha256:a0d4f48bb6236f6932466cfb2802b866035c5be5861a9d41c2975307a640fb18",
+  "contractDigest": "sha256:85ba0b6f77f3f32bab285b66cebcaec8b221d464e0214022b83322694853af1c"
 }