@kungfu-tech/buildchain 4.0.8 → 4.0.9-alpha.0

package/dist/site/workflow-registry.json

@@ -169,102 +169,9 @@
       "path": ".github/workflows/.build-engine.yml",
       "reusable": true,
       "inputs": [
-        "artifact-compression-level",
-        "artifact-finalization-command",
-        "artifact-finalization-on-platform",
-        "artifact-name",
-        "artifact-name-template",
-        "artifact-paths",
-        "artifact-relay-s3-bucket",
-        "artifact-relay-s3-download-role-arn",
-        "artifact-relay-s3-oidc-audience",
-        "artifact-relay-s3-prefix",
-        "artifact-relay-s3-region",
-        "artifact-relay-s3-role-arn",
-        "artifact-relay-s3-upload-role-arn",
-        "artifact-retention-days",
-        "artifact-signing-request-upload-no-proxy",
-        "artifact-transfer-mode",
-        "aws-codebuild-project",
-        "aws-ec2-macos-runner-label",
-        "aws-ec2-windows-runner-label",
-        "build-command",
-        "buildchain-contract-compatibility-policy",
-        "buildchain-contract-drift-issue-mode",
-        "buildchain-contract-expected-channel",
-        "buildchain-contract-expected-major",
-        "buildchain-contract-lock-path",
-        "buildchain-expected-channel",
-        "buildchain-expected-major",
-        "buildchain-ref",
-        "buildchain-repository",
-        "buildchain-visible-workflow",
-        "cache-dependency-lock-root",
-        "cache-policy-root",
-        "cache-toolchain-root",
-        "cargo-registry-index",
-        "checkout-cache-fallback",
-        "checkout-cache-fetch-attempts",
-        "checkout-cache-github-timeout-seconds",
-        "checkout-cache-mirror-url-template",
-        "checkout-cache-mode",
-        "checkout-cache-reference-repository-template",
-        "checkout-cache-timeout-seconds",
-        "checkout-history-mode",
-        "compiler-cache-platforms-json",
-        "compiler-cache-provider",
-        "compiler-cache-required",
-        "control-runner-json",
-        "credential-island-caller-owned",
-        "credential-island-environment",
-        "credential-island-macos-app-path",
-        "credential-island-macos-platform-id",
-        "expected-artifacts-json",
-        "fail-fast",
-        "gate-profile-aggregate-json",
-        "github-artifact-attestation-platform-id",
-        "github-artifact-attestation-signer-sha",
-        "github-artifact-attestation-subject-path",
-        "install-command",
-        "kfd-agent-hub",
-        "lifecycle-timeout-minutes",
-        "linux-container-image",
-        "linux-container-preset",
-        "node-version",
-        "platforms-json",
-        "pre-upload-transport-smoke-artifact-root",
-        "pre-upload-transport-smoke-scenario-path",
-        "process-sample-interval-ms",
-        "process-summary-path",
-        "publish-anchor-request-json",
-        "publish-channel",
-        "publish-refs-json",
-        "publish-registry",
-        "publish-source-ref",
-        "release-candidate",
-        "release-candidate-family-evidence-json",
-        "requested-parallelism",
-        "require-build",
-        "require-install",
-        "require-trusted-event",
-        "require-verify",
-        "runner-preset",
-        "rust-toolchain",
-        "rustup-dist-server",
-        "rustup-update-root",
-        "sample-process-tree",
-        "self-hosted-offline-fallback",
-        "setup-node",
-        "setup-rust",
-        "shifu-cache-profile-digest",
-        "shifu-cache-profile-ref",
-        "universal-request-json",
-        "untrusted-policy",
-        "verify-command",
-        "verify-substage-evidence-path",
-        "working-directory"
+        "config-path"
       ],
-      "inputCount": 94,
+      "inputCount": 1,
       "secrets": [
         "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
         "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -592,102 +499,9 @@
       "path": ".github/workflows/.build.yml",
       "reusable": true,
       "inputs": [
-        "artifact-compression-level",
-        "artifact-finalization-command",
-        "artifact-finalization-on-platform",
-        "artifact-name",
-        "artifact-name-template",
-        "artifact-paths",
-        "artifact-relay-s3-bucket",
-        "artifact-relay-s3-download-role-arn",
-        "artifact-relay-s3-oidc-audience",
-        "artifact-relay-s3-prefix",
-        "artifact-relay-s3-region",
-        "artifact-relay-s3-role-arn",
-        "artifact-relay-s3-upload-role-arn",
-        "artifact-retention-days",
-        "artifact-signing-request-upload-no-proxy",
-        "artifact-transfer-mode",
-        "aws-codebuild-project",
-        "aws-ec2-macos-runner-label",
-        "aws-ec2-windows-runner-label",
-        "build-command",
-        "buildchain-contract-compatibility-policy",
-        "buildchain-contract-drift-issue-mode",
-        "buildchain-contract-expected-channel",
-        "buildchain-contract-expected-major",
-        "buildchain-contract-lock-path",
-        "buildchain-expected-channel",
-        "buildchain-expected-major",
-        "buildchain-ref",
-        "buildchain-repository",
-        "buildchain-visible-workflow",
-        "cache-dependency-lock-root",
-        "cache-policy-root",
-        "cache-toolchain-root",
-        "cargo-registry-index",
-        "checkout-cache-fallback",
-        "checkout-cache-fetch-attempts",
-        "checkout-cache-github-timeout-seconds",
-        "checkout-cache-mirror-url-template",
-        "checkout-cache-mode",
-        "checkout-cache-reference-repository-template",
-        "checkout-cache-timeout-seconds",
-        "checkout-history-mode",
-        "compiler-cache-platforms-json",
-        "compiler-cache-provider",
-        "compiler-cache-required",
-        "control-runner-json",
-        "credential-island-caller-owned",
-        "credential-island-environment",
-        "credential-island-macos-app-path",
-        "credential-island-macos-platform-id",
-        "expected-artifacts-json",
-        "fail-fast",
-        "gate-profile-aggregate-json",
-        "github-artifact-attestation-platform-id",
-        "github-artifact-attestation-signer-sha",
-        "github-artifact-attestation-subject-path",
-        "install-command",
-        "kfd-agent-hub",
-        "lifecycle-timeout-minutes",
-        "linux-container-image",
-        "linux-container-preset",
-        "node-version",
-        "platforms-json",
-        "pre-upload-transport-smoke-artifact-root",
-        "pre-upload-transport-smoke-scenario-path",
-        "process-sample-interval-ms",
-        "process-summary-path",
-        "publish-anchor-request-json",
-        "publish-channel",
-        "publish-refs-json",
-        "publish-registry",
-        "publish-source-ref",
-        "release-candidate",
-        "release-candidate-family-evidence-json",
-        "requested-parallelism",
-        "require-build",
-        "require-install",
-        "require-trusted-event",
-        "require-verify",
-        "runner-preset",
-        "rust-toolchain",
-        "rustup-dist-server",
-        "rustup-update-root",
-        "sample-process-tree",
-        "self-hosted-offline-fallback",
-        "setup-node",
-        "setup-rust",
-        "shifu-cache-profile-digest",
-        "shifu-cache-profile-ref",
-        "universal-request-json",
-        "untrusted-policy",
-        "verify-command",
-        "verify-substage-evidence-path",
-        "working-directory"
+        "config-path"
       ],
-      "inputCount": 94,
+      "inputCount": 1,
       "secrets": [
         "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
         "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -2078,105 +1892,9 @@
       "path": ".github/workflows/build.yml",
       "reusable": true,
       "inputs": [
-        "artifact-compression-level",
-        "artifact-finalization-command",
-        "artifact-finalization-on-platform",
-        "artifact-name",
-        "artifact-name-template",
-        "artifact-paths",
-        "artifact-relay-s3-bucket",
-        "artifact-relay-s3-download-role-arn",
-        "artifact-relay-s3-oidc-audience",
-        "artifact-relay-s3-prefix",
-        "artifact-relay-s3-region",
-        "artifact-relay-s3-role-arn",
-        "artifact-relay-s3-upload-role-arn",
-        "artifact-retention-days",
-        "artifact-signing-request-upload-no-proxy",
-        "artifact-transfer-mode",
-        "aws-codebuild-project",
-        "aws-ec2-macos-runner-label",
-        "aws-ec2-windows-runner-label",
-        "build-command",
-        "buildchain-alpha-contract-lock-path",
-        "buildchain-channel",
-        "buildchain-contract-compatibility-policy",
-        "buildchain-contract-drift-issue-mode",
-        "buildchain-contract-expected-channel",
-        "buildchain-contract-expected-major",
-        "buildchain-contract-lock-path",
-        "buildchain-expected-channel",
-        "buildchain-expected-major",
-        "buildchain-ref",
-        "buildchain-repository",
-        "buildchain-stable-contract-lock-path",
-        "buildchain-visible-workflow",
-        "cache-dependency-lock-root",
-        "cache-policy-root",
-        "cache-toolchain-root",
-        "cargo-registry-index",
-        "checkout-cache-fallback",
-        "checkout-cache-fetch-attempts",
-        "checkout-cache-github-timeout-seconds",
-        "checkout-cache-mirror-url-template",
-        "checkout-cache-mode",
-        "checkout-cache-reference-repository-template",
-        "checkout-cache-timeout-seconds",
-        "checkout-history-mode",
-        "compiler-cache-platforms-json",
-        "compiler-cache-provider",
-        "compiler-cache-required",
-        "control-runner-json",
-        "credential-island-caller-owned",
-        "credential-island-environment",
-        "credential-island-macos-app-path",
-        "credential-island-macos-platform-id",
-        "expected-artifacts-json",
-        "fail-fast",
-        "gate-profile-aggregate-json",
-        "github-artifact-attestation-platform-id",
-        "github-artifact-attestation-signer-sha",
-        "github-artifact-attestation-subject-path",
-        "install-command",
-        "kfd-agent-hub",
-        "lifecycle-timeout-minutes",
-        "linux-container-image",
-        "linux-container-preset",
-        "node-version",
-        "platforms-json",
-        "pre-upload-transport-smoke-artifact-root",
-        "pre-upload-transport-smoke-scenario-path",
-        "process-sample-interval-ms",
-        "process-summary-path",
-        "publish-anchor-request-json",
-        "publish-channel",
-        "publish-refs-json",
-        "publish-registry",
-        "publish-source-ref",
-        "release-candidate",
-        "release-candidate-family-evidence-json",
-        "requested-parallelism",
-        "require-build",
-        "require-install",
-        "require-trusted-event",
-        "require-verify",
-        "runner-preset",
-        "rust-toolchain",
-        "rustup-dist-server",
-        "rustup-update-root",
-        "sample-process-tree",
-        "self-hosted-offline-fallback",
-        "setup-node",
-        "setup-rust",
-        "shifu-cache-profile-digest",
-        "shifu-cache-profile-ref",
-        "universal-request-json",
-        "untrusted-policy",
-        "verify-command",
-        "verify-substage-evidence-path",
-        "working-directory"
+        "config-path"
       ],
-      "inputCount": 97,
+      "inputCount": 1,
       "secrets": [
         "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
         "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -2746,7 +2464,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.8",
+      "introducedVersion": "4.0.9-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -3190,105 +2908,9 @@
       "path": ".github/workflows/public-build-candidate.yml",
       "reusable": true,
       "inputs": [
-        "artifact-compression-level",
-        "artifact-finalization-command",
-        "artifact-finalization-on-platform",
-        "artifact-name",
-        "artifact-name-template",
-        "artifact-paths",
-        "artifact-relay-s3-bucket",
-        "artifact-relay-s3-download-role-arn",
-        "artifact-relay-s3-oidc-audience",
-        "artifact-relay-s3-prefix",
-        "artifact-relay-s3-region",
-        "artifact-relay-s3-role-arn",
-        "artifact-relay-s3-upload-role-arn",
-        "artifact-retention-days",
-        "artifact-signing-request-upload-no-proxy",
-        "artifact-transfer-mode",
-        "aws-codebuild-project",
-        "aws-ec2-macos-runner-label",
-        "aws-ec2-windows-runner-label",
-        "build-command",
-        "buildchain-alpha-contract-lock-path",
-        "buildchain-channel",
-        "buildchain-contract-compatibility-policy",
-        "buildchain-contract-drift-issue-mode",
-        "buildchain-contract-expected-channel",
-        "buildchain-contract-expected-major",
-        "buildchain-contract-lock-path",
-        "buildchain-expected-channel",
-        "buildchain-expected-major",
-        "buildchain-ref",
-        "buildchain-repository",
-        "buildchain-stable-contract-lock-path",
-        "buildchain-visible-workflow",
-        "cache-dependency-lock-root",
-        "cache-policy-root",
-        "cache-toolchain-root",
-        "cargo-registry-index",
-        "checkout-cache-fallback",
-        "checkout-cache-fetch-attempts",
-        "checkout-cache-github-timeout-seconds",
-        "checkout-cache-mirror-url-template",
-        "checkout-cache-mode",
-        "checkout-cache-reference-repository-template",
-        "checkout-cache-timeout-seconds",
-        "checkout-history-mode",
-        "compiler-cache-platforms-json",
-        "compiler-cache-provider",
-        "compiler-cache-required",
-        "control-runner-json",
-        "credential-island-caller-owned",
-        "credential-island-environment",
-        "credential-island-macos-app-path",
-        "credential-island-macos-platform-id",
-        "expected-artifacts-json",
-        "fail-fast",
-        "gate-profile-aggregate-json",
-        "github-artifact-attestation-platform-id",
-        "github-artifact-attestation-signer-sha",
-        "github-artifact-attestation-subject-path",
-        "install-command",
-        "kfd-agent-hub",
-        "lifecycle-timeout-minutes",
-        "linux-container-image",
-        "linux-container-preset",
-        "node-version",
-        "platforms-json",
-        "pre-upload-transport-smoke-artifact-root",
-        "pre-upload-transport-smoke-scenario-path",
-        "process-sample-interval-ms",
-        "process-summary-path",
-        "publish-anchor-request-json",
-        "publish-channel",
-        "publish-refs-json",
-        "publish-registry",
-        "publish-source-ref",
-        "release-candidate",
-        "release-candidate-family-evidence-json",
-        "requested-parallelism",
-        "require-build",
-        "require-install",
-        "require-trusted-event",
-        "require-verify",
-        "runner-preset",
-        "rust-toolchain",
-        "rustup-dist-server",
-        "rustup-update-root",
-        "sample-process-tree",
-        "self-hosted-offline-fallback",
-        "setup-node",
-        "setup-rust",
-        "shifu-cache-profile-digest",
-        "shifu-cache-profile-ref",
-        "universal-request-json",
-        "untrusted-policy",
-        "verify-command",
-        "verify-substage-evidence-path",
-        "working-directory"
+        "config-path"
       ],
-      "inputCount": 97,
+      "inputCount": 1,
       "secrets": [
         "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
         "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
@@ -3943,7 +3565,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.8",
+      "introducedVersion": "4.0.9-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -6004,7 +5626,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.8",
+      "introducedVersion": "4.0.9-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -6035,7 +5657,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.8",
+      "introducedVersion": "4.0.9-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -6066,7 +5688,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.0.8",
+      "introducedVersion": "4.0.9-alpha.0",
       "compatibilityPromise": "preserved-through-the-v3-major-line",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
@@ -6666,6 +6288,128 @@
   ],
   "actionSource": "actions/*/action.yml reverse input enumeration",
   "actions": [
+    {
+      "id": "build-agent-hub-evidence",
+      "path": "actions/build-agent-hub-evidence/action.yml",
+      "inputs": [
+        "plan-json",
+        "platform-json",
+        "source-json"
+      ],
+      "inputCount": 3,
+      "capabilityGroup": "reusable-build",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.0.9-alpha.0",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
+    },
+    {
+      "id": "build-artifact-transfer",
+      "path": "actions/build-artifact-transfer/action.yml",
+      "inputs": [
+        "artifact-name",
+        "plan-json",
+        "platform-json",
+        "relay-role",
+        "relay-upload-role",
+        "source-json",
+        "transfer-json"
+      ],
+      "inputCount": 7,
+      "capabilityGroup": "reusable-build",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.0.9-alpha.0",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
+    },
+    {
+      "id": "build-attestation-policy",
+      "path": "actions/build-attestation-policy/action.yml",
+      "inputs": [
+        "plan-json",
+        "platform-json",
+        "source-json"
+      ],
+      "inputCount": 3,
+      "capabilityGroup": "reusable-build",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.0.9-alpha.0",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
+    },
+    {
+      "id": "build-lifecycle-stage",
+      "path": "actions/build-lifecycle-stage/action.yml",
+      "inputs": [
+        "artifact-name",
+        "plan-json",
+        "platform-json",
+        "source-json",
+        "stage"
+      ],
+      "inputCount": 5,
+      "capabilityGroup": "reusable-build",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.0.9-alpha.0",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
+    },
+    {
+      "id": "build-signing-request",
+      "path": "actions/build-signing-request/action.yml",
+      "inputs": [
+        "artifact-name",
+        "plan-json",
+        "platform-json",
+        "source-json"
+      ],
+      "inputCount": 4,
+      "capabilityGroup": "reusable-build",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.0.9-alpha.0",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
+    },
+    {
+      "id": "build-verification-evidence",
+      "path": "actions/build-verification-evidence/action.yml",
+      "inputs": [
+        "plan-json",
+        "platform-json",
+        "source-json",
+        "verify-outcome"
+      ],
+      "inputCount": 4,
+      "capabilityGroup": "reusable-build",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.0.9-alpha.0",
+      "compatibilityPromise": "preserved-through-the-v3-major-line",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-breaking-change-review-in-a-future-major-line",
+      "nonDuplicationRationale": "Existing action identity retained as the canonical composite or JavaScript action boundary."
+    },
     {
       "id": "github-artifact-attestation",
       "path": "actions/github-artifact-attestation/action.yml",

package/docs/MAP.md

@@ -8,11 +8,11 @@ confidence: high
 sensitivity: public
 evidence_grade: A
 review_state: unreviewed
-last_reviewed: 2026-07-31
+last_reviewed: 2026-09-08
 ai_provenance:
-  model_family: GPT-5
+  model_family: GPT-6
   product: Codex
-  generated_at: 2026-07-31
+  generated_at: 2026-09-08
   invisible_context: not asserted
 ---
 
@@ -173,7 +173,8 @@ replace them.
 | How do I deploy a site/app preview, staging, or production surface? | [`web-surface-deployments.md`](web-surface-deployments.md) | use | stable |
 | How do I publish observed infrastructure contracts for downstream consumers? | [`infra-contract.md`](infra-contract.md) | use | preview |
 | How do I operate a repeatable, disabled-by-default, budget-fail-closed AWS Windows JIT campaign? | [`aws-us-elastic-runner-burst-plane.md`](aws-us-elastic-runner-burst-plane.md#phase-2-operator-workflow) | use/verify | preview |
-| How do I use the active actions directly? | [`../actions/validate-config/README.md`](../actions/validate-config/README.md), [`../actions/run-lifecycle/README.md`](../actions/run-lifecycle/README.md), [`../actions/promote-buildchain-ref/README.md`](../actions/promote-buildchain-ref/README.md), [`../actions/release-candidate-promote/README.md`](../actions/release-candidate-promote/README.md), [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md), [`../actions/github-artifact-attestation/README.md`](../actions/github-artifact-attestation/README.md), [`../actions/macos-credential-island/README.md`](../actions/macos-credential-island/README.md), [`../actions/release-tail/README.md`](../actions/release-tail/README.md); `dist/site/workflow-registry.json#actions` is authoritative for the eight-entry inventory. | use | stable |
+| How do I use the active actions directly? | [`../actions/validate-config/README.md`](../actions/validate-config/README.md), [`../actions/run-lifecycle/README.md`](../actions/run-lifecycle/README.md), [`../actions/promote-buildchain-ref/README.md`](../actions/promote-buildchain-ref/README.md), [`../actions/release-candidate-promote/README.md`](../actions/release-candidate-promote/README.md), [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md), [`../actions/github-artifact-attestation/README.md`](../actions/github-artifact-attestation/README.md), [`../actions/macos-credential-island/README.md`](../actions/macos-credential-island/README.md), [`../actions/release-tail/README.md`](../actions/release-tail/README.md); `dist/site/workflow-registry.json#actions` is authoritative for the action inventory. | use | stable |
+| Where are shared build stages maintained? | [build-lifecycle-stage](../actions/build-lifecycle-stage/action.yml), [build-signing-request](../actions/build-signing-request/action.yml), [build-verification-evidence](../actions/build-verification-evidence/action.yml), [build-attestation-policy](../actions/build-attestation-policy/action.yml), [build-agent-hub-evidence](../actions/build-agent-hub-evidence/action.yml), [build-artifact-transfer](../actions/build-artifact-transfer/action.yml); [ownership](../architecture/build-orchestration.json) | contribute | active |
 | How can a consumer workflow report a Buildchain-owned failure back to Buildchain? | [`consumer-issue-reporting.md`](consumer-issue-reporting.md) + [`../actions/report-buildchain-issue/README.md`](../actions/report-buildchain-issue/README.md) | use | stable |
 | What do the fixture repositories demonstrate? | [`../fixtures/libnode-shaped/README.md`](../fixtures/libnode-shaped/README.md), [`../fixtures/publish-transaction-shaped/README.md`](../fixtures/publish-transaction-shaped/README.md), [`../fixtures/web-surface-shaped/README.md`](../fixtures/web-surface-shaped/README.md), [`../fixtures/publication-artifact-shaped/README.md`](../fixtures/publication-artifact-shaped/README.md) | verify | stable |
 | What license and contribution terms apply? | [`../LICENSE`](../LICENSE) + [`../LICENSE-POLICY.md`](../LICENSE-POLICY.md) | use | stable |

package/docs/cli-reference.md

@@ -990,7 +990,7 @@ buildchain infra-contract ...
 - Syntax:
 
 ```text
-buildchain init [--cwd <dir>] [--type package|native|web-surface|infra-contract|publication-artifact|anchored-package] [--force] [--package-manager pnpm|npm|yarn] [--runner-preset <preset>] [--artifact-name <template>]
+buildchain init [--cwd <dir>] [--type package|native|web-surface|infra-contract|publication-artifact|anchored-package] [--force] [--package-manager pnpm|npm|yarn] [--runner-preset <preset>] [--artifact-name <name>]
 ```
 
 ## `inspect`

package/docs/getting-started.md

@@ -7,12 +7,12 @@ source_level: local-files
 confidence: high
 sensitivity: public
 evidence_grade: A
-review_state: self-reviewed
-last_reviewed: 2026-08-01
+review_state: unreviewed
+last_reviewed: 2026-09-08
 ai_provenance:
-  model_family: GPT-5
+  model_family: GPT-6
   product: Codex
-  generated_at: 2026-08-01
+  generated_at: 2026-09-08
   invisible_context: not asserted
 ---
 
@@ -77,11 +77,12 @@ If the generated lifecycle commands do not match the repository, edit only
 
 ## 4. Inspect the reusable workflow and release dry-run
 
-The generated caller should contain one reusable `uses:` edge and a manual
-`buildchain-ref` input for bounded train validation:
+The generated caller contains one reusable `uses:` edge and no inputs.
+Project choices belong in `.buildchain/buildchain.toml`; `@v4` or `@v4-alpha`
+selects the runtime channel:
 
 ```bash
-rg -n 'uses:|buildchain-ref:' .github/workflows/build.yml
+rg -n 'uses:' .github/workflows/build.yml
 pnpm exec buildchain release --dry-run \
   --target-ref alpha/v4/v4.0 \
   --json