@kungfu-tech/buildchain 4.0.8 → 4.0.9-alpha.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (57) hide show
  1. package/AGENTS.md +12 -19
  2. package/CONTRIBUTING.md +6 -9
  3. package/README.md +11 -1
  4. package/architecture/agent-change-map.md +11 -4
  5. package/architecture/build-environments.json +71 -0
  6. package/architecture/build-orchestration.json +18 -0
  7. package/architecture/ci-lane-change-budget.json +51 -2
  8. package/architecture/internal-capabilities.json +17 -4
  9. package/architecture/maintainability-debt.json +37 -126
  10. package/architecture/maintainability-policy.json +19 -210
  11. package/architecture/release-topology.json +9 -7
  12. package/architecture/universal-workflow-bootstrap.json +5 -4
  13. package/architecture/universal-workflow-train-admission.json +2 -2
  14. package/architecture/workflow-taxonomy.json +13 -0
  15. package/bin/buildchain.mjs +1 -1
  16. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  17. package/dist/site/buildchain-contract.json +41 -1131
  18. package/dist/site/buildchain-site.json +48 -153
  19. package/dist/site/capability-registry.json +2 -2
  20. package/dist/site/cli-registry.json +1 -1
  21. package/dist/site/controller-registry.json +30 -868
  22. package/dist/site/kfd-claims.json +148 -396
  23. package/dist/site/kfd-upstream-aggregate.json +1 -1
  24. package/dist/site/manual-registry.json +7 -7
  25. package/dist/site/node-api-registry.json +37 -37
  26. package/dist/site/page-registry.json +36 -141
  27. package/dist/site/public-surface-audit.json +93 -402
  28. package/dist/site/publication-authority-registry.json +22 -1
  29. package/dist/site/publication-registry.json +4 -4
  30. package/dist/site/site-manifest.json +11 -11
  31. package/dist/site/workflow-registry.json +165 -391
  32. package/docs/MAP.md +5 -4
  33. package/docs/cli-reference.md +1 -1
  34. package/docs/getting-started.md +8 -7
  35. package/docs/node-api-reference.md +85 -85
  36. package/docs/release-governance.md +19 -18
  37. package/docs/reusable-build-surface.md +160 -1430
  38. package/docs/runtime-train-validation.md +45 -172
  39. package/docs/workflow-catalog.md +1 -0
  40. package/package.json +1 -1
  41. package/packages/core/build-configuration.js +117 -0
  42. package/packages/core/buildchain-config.js +2 -0
  43. package/packages/core/buildchain-contract.js +14 -44
  44. package/packages/core/buildchain-publication-authority.js +1 -0
  45. package/packages/core/controller-evidence.js +2 -9
  46. package/scripts/buildchain-cli-help.mjs +1 -1
  47. package/scripts/check-floating-consumer-policy-contract.mjs +4 -7
  48. package/scripts/check-inventory.mjs +91 -77
  49. package/scripts/check-maintainability.mjs +23 -8
  50. package/scripts/check-universal-workflow-bootstrap.mjs +12 -2
  51. package/scripts/generate-channel-build-workflow.mjs +50 -410
  52. package/scripts/generate-site-bundle.mjs +2 -1
  53. package/scripts/generate-universal-workflow-facades.mjs +1 -0
  54. package/scripts/init-repo.mjs +25 -26
  55. package/scripts/resolve-build-configuration.mjs +105 -0
  56. package/scripts/universal-workflow-self-dogfood.mjs +8 -1
  57. package/scripts/verify-golden-path.mjs +3 -3
package/dist/site/controller-registry.json CHANGED
@@ -146,903 +146,65 @@
146
146
  "classification": "redacted",
147
147
  "source": "workflow-call-secret"
148
148
  },
149
- "artifact-compression-level": {
150
- "classification": "included",
151
- "source": "workflow-call-input"
152
- },
153
- "artifact-finalization-command": {
154
- "classification": "digest-only",
155
- "source": "workflow-call-input"
156
- },
157
- "artifact-finalization-on-platform": {
158
- "classification": "included",
159
- "source": "workflow-call-input"
160
- },
161
- "artifact-name": {
162
- "classification": "included",
163
- "source": "workflow-call-input"
164
- },
165
- "artifact-name-template": {
166
- "classification": "included",
167
- "source": "workflow-call-input"
168
- },
169
- "artifact-paths": {
170
- "classification": "digest-only",
171
- "source": "workflow-call-input"
172
- },
173
- "artifact-relay-s3-bucket": {
174
- "classification": "digest-only",
175
- "source": "workflow-call-input"
176
- },
177
- "artifact-relay-s3-download-role-arn": {
178
- "classification": "digest-only",
179
- "source": "workflow-call-input"
180
- },
181
- "artifact-relay-s3-oidc-audience": {
182
- "classification": "included",
183
- "source": "workflow-call-input"
184
- },
185
- "artifact-relay-s3-prefix": {
186
- "classification": "digest-only",
187
- "source": "workflow-call-input"
188
- },
189
- "artifact-relay-s3-region": {
190
- "classification": "digest-only",
191
- "source": "workflow-call-input"
192
- },
193
- "artifact-relay-s3-role-arn": {
194
- "classification": "digest-only",
195
- "source": "workflow-call-input"
196
- },
197
- "artifact-relay-s3-upload-role-arn": {
198
- "classification": "digest-only",
199
- "source": "workflow-call-input"
200
- },
201
- "artifact-retention-days": {
202
- "classification": "included",
203
- "source": "workflow-call-input"
204
- },
205
- "artifact-signing-request-upload-no-proxy": {
206
- "classification": "included",
207
- "source": "workflow-call-input"
208
- },
209
- "artifact-transfer-mode": {
210
- "classification": "included",
211
- "source": "workflow-call-input"
212
- },
213
- "aws-codebuild-project": {
214
- "classification": "included",
215
- "source": "workflow-call-input"
216
- },
217
- "aws-ec2-macos-runner-label": {
218
- "classification": "digest-only",
219
- "source": "workflow-call-input"
220
- },
221
- "aws-ec2-windows-runner-label": {
222
- "classification": "digest-only",
223
- "source": "workflow-call-input"
224
- },
225
- "build-command": {
226
- "classification": "digest-only",
227
- "source": "workflow-call-input"
228
- },
229
- "buildchain-contract-compatibility-policy": {
230
- "classification": "included",
231
- "source": "workflow-call-input"
232
- },
233
- "buildchain-contract-drift-issue-mode": {
234
- "classification": "included",
235
- "source": "workflow-call-input"
236
- },
237
- "buildchain-contract-expected-channel": {
238
- "classification": "included",
239
- "source": "workflow-call-input"
240
- },
241
- "buildchain-contract-expected-major": {
242
- "classification": "included",
243
- "source": "workflow-call-input"
244
- },
245
- "buildchain-contract-lock-path": {
246
- "classification": "digest-only",
247
- "source": "workflow-call-input"
248
- },
249
- "buildchain-expected-channel": {
250
- "classification": "included",
251
- "source": "workflow-call-input"
252
- },
253
- "buildchain-expected-major": {
254
- "classification": "included",
255
- "source": "workflow-call-input"
256
- },
257
- "buildchain-ref": {
258
- "classification": "included",
259
- "source": "workflow-call-input"
260
- },
261
- "buildchain-repository": {
262
- "classification": "included",
263
- "source": "workflow-call-input"
264
- },
265
- "buildchain-visible-workflow": {
266
- "classification": "included",
267
- "source": "workflow-call-input"
268
- },
269
- "cache-dependency-lock-root": {
270
- "classification": "included",
271
- "source": "workflow-call-input"
272
- },
273
- "cache-policy-root": {
274
- "classification": "included",
275
- "source": "workflow-call-input"
276
- },
277
- "cache-toolchain-root": {
278
- "classification": "included",
279
- "source": "workflow-call-input"
280
- },
281
- "cargo-registry-index": {
282
- "classification": "digest-only",
283
- "source": "workflow-call-input"
284
- },
285
- "checkout-cache-fallback": {
286
- "classification": "digest-only",
287
- "source": "workflow-call-input"
288
- },
289
- "checkout-cache-fetch-attempts": {
290
- "classification": "digest-only",
291
- "source": "workflow-call-input"
292
- },
293
- "checkout-cache-github-timeout-seconds": {
294
- "classification": "digest-only",
295
- "source": "workflow-call-input"
296
- },
297
- "checkout-cache-mirror-url-template": {
298
- "classification": "digest-only",
299
- "source": "workflow-call-input"
300
- },
301
- "checkout-cache-mode": {
302
- "classification": "digest-only",
303
- "source": "workflow-call-input"
304
- },
305
- "checkout-cache-reference-repository-template": {
306
- "classification": "digest-only",
307
- "source": "workflow-call-input"
308
- },
309
- "checkout-cache-timeout-seconds": {
310
- "classification": "digest-only",
311
- "source": "workflow-call-input"
312
- },
313
- "checkout-history-mode": {
314
- "classification": "included",
315
- "source": "workflow-call-input"
316
- },
317
- "compiler-cache-platforms-json": {
318
- "classification": "digest-only",
319
- "source": "workflow-call-input"
320
- },
321
- "compiler-cache-provider": {
322
- "classification": "included",
323
- "source": "workflow-call-input"
324
- },
325
- "compiler-cache-required": {
326
- "classification": "included",
327
- "source": "workflow-call-input"
328
- },
329
- "control-runner-json": {
330
- "classification": "digest-only",
331
- "source": "workflow-call-input"
332
- },
333
- "credential-island-caller-owned": {
334
- "classification": "included",
335
- "source": "workflow-call-input"
336
- },
337
- "credential-island-environment": {
338
- "classification": "digest-only",
339
- "source": "workflow-call-input"
340
- },
341
- "credential-island-macos-app-path": {
342
- "classification": "digest-only",
343
- "source": "workflow-call-input"
344
- },
345
- "credential-island-macos-platform-id": {
346
- "classification": "included",
347
- "source": "workflow-call-input"
348
- },
349
- "expected-artifacts-json": {
350
- "classification": "digest-only",
351
- "source": "workflow-call-input"
352
- },
353
- "fail-fast": {
354
- "classification": "included",
355
- "source": "workflow-call-input"
356
- },
357
- "gate-profile-aggregate-json": {
358
- "classification": "digest-only",
359
- "source": "workflow-call-input"
360
- },
361
- "github-artifact-attestation-platform-id": {
362
- "classification": "included",
363
- "source": "workflow-call-input"
364
- },
365
- "github-artifact-attestation-signer-sha": {
366
- "classification": "included",
367
- "source": "workflow-call-input"
368
- },
369
- "github-artifact-attestation-subject-path": {
370
- "classification": "digest-only",
371
- "source": "workflow-call-input"
372
- },
373
- "install-command": {
374
- "classification": "digest-only",
375
- "source": "workflow-call-input"
376
- },
377
- "kfd-agent-hub": {
378
- "classification": "included",
379
- "source": "workflow-call-input"
380
- },
381
- "lifecycle-timeout-minutes": {
382
- "classification": "included",
383
- "source": "workflow-call-input"
384
- },
385
- "linux-container-image": {
386
- "classification": "digest-only",
387
- "source": "workflow-call-input"
388
- },
389
- "linux-container-preset": {
390
- "classification": "included",
391
- "source": "workflow-call-input"
392
- },
393
- "node-version": {
394
- "classification": "included",
395
- "source": "workflow-call-input"
396
- },
397
- "platforms-json": {
398
- "classification": "digest-only",
399
- "source": "workflow-call-input"
400
- },
401
- "pre-upload-transport-smoke-artifact-root": {
402
- "classification": "included",
403
- "source": "workflow-call-input"
404
- },
405
- "pre-upload-transport-smoke-scenario-path": {
406
- "classification": "digest-only",
407
- "source": "workflow-call-input"
408
- },
409
- "process-sample-interval-ms": {
410
- "classification": "included",
411
- "source": "workflow-call-input"
412
- },
413
- "process-summary-path": {
414
- "classification": "digest-only",
415
- "source": "workflow-call-input"
416
- },
417
- "publish-anchor-request-json": {
418
- "classification": "digest-only",
419
- "source": "workflow-call-input"
420
- },
421
- "publish-channel": {
422
- "classification": "included",
423
- "source": "workflow-call-input"
424
- },
425
- "publish-refs-json": {
426
- "classification": "digest-only",
427
- "source": "workflow-call-input"
428
- },
429
- "publish-registry": {
430
- "classification": "included",
431
- "source": "workflow-call-input"
432
- },
433
- "publish-source-ref": {
434
- "classification": "included",
435
- "source": "workflow-call-input"
436
- },
437
- "release-candidate": {
438
- "classification": "included",
439
- "source": "workflow-call-input"
440
- },
441
- "release-candidate-family-evidence-json": {
442
- "classification": "digest-only",
443
- "source": "workflow-call-input"
444
- },
445
- "requested-parallelism": {
446
- "classification": "included",
447
- "source": "workflow-call-input"
448
- },
449
- "require-build": {
450
- "classification": "included",
451
- "source": "workflow-call-input"
452
- },
453
- "require-install": {
454
- "classification": "included",
455
- "source": "workflow-call-input"
456
- },
457
- "require-trusted-event": {
458
- "classification": "included",
459
- "source": "workflow-call-input"
460
- },
461
- "require-verify": {
462
- "classification": "included",
463
- "source": "workflow-call-input"
464
- },
465
- "runner-preset": {
466
- "classification": "digest-only",
467
- "source": "workflow-call-input"
468
- },
469
- "rust-toolchain": {
470
- "classification": "included",
471
- "source": "workflow-call-input"
472
- },
473
- "rustup-dist-server": {
474
- "classification": "included",
475
- "source": "workflow-call-input"
476
- },
477
- "rustup-update-root": {
478
- "classification": "included",
479
- "source": "workflow-call-input"
480
- },
481
- "sample-process-tree": {
482
- "classification": "included",
483
- "source": "workflow-call-input"
484
- },
485
- "self-hosted-offline-fallback": {
486
- "classification": "included",
487
- "source": "workflow-call-input"
488
- },
489
- "setup-node": {
490
- "classification": "included",
491
- "source": "workflow-call-input"
492
- },
493
- "setup-rust": {
494
- "classification": "included",
495
- "source": "workflow-call-input"
496
- },
497
- "shifu-cache-profile-digest": {
498
- "classification": "included",
499
- "source": "workflow-call-input"
500
- },
501
- "shifu-cache-profile-ref": {
502
- "classification": "included",
503
- "source": "workflow-call-input"
504
- },
505
- "universal-request-json": {
506
- "classification": "digest-only",
507
- "source": "workflow-call-input"
508
- },
509
- "untrusted-policy": {
510
- "classification": "included",
511
- "source": "workflow-call-input"
512
- },
513
- "verify-command": {
514
- "classification": "digest-only",
515
- "source": "workflow-call-input"
516
- },
517
- "verify-substage-evidence-path": {
518
- "classification": "digest-only",
519
- "source": "workflow-call-input"
520
- },
521
- "working-directory": {
522
- "classification": "digest-only",
523
- "source": "workflow-call-input"
524
- }
525
- },
526
- "expected": {
527
- "stages": [
528
- {
529
- "id": "resolve-runtime",
530
- "required": true
531
- },
532
- {
533
- "id": "resolve-source",
534
- "required": true
535
- },
536
- {
537
- "id": "anchored-release-preflight",
538
- "required": false
539
- },
540
- {
541
- "id": "build",
542
- "required": true
543
- },
544
- {
545
- "id": "signing-finalization",
546
- "required": true
547
- },
548
- {
549
- "id": "credential-island",
550
- "required": false
551
- },
552
- {
553
- "id": "verify",
554
- "required": true
555
- },
556
- {
557
- "id": "aggregate",
558
- "required": true
559
- }
560
- ],
561
- "capabilities": [
562
- "source-lock",
563
- "lifecycle-build",
564
- "artifact-signing-finalization",
565
- "credential-island",
566
- "lifecycle-verify",
567
- "artifact-admission"
568
- ],
569
- "evidence": [
570
- "platform-manifests",
571
- "build-summary",
572
- "controller-receipt"
573
- ]
574
- },
575
- "digest": "sha256:939f1ac15513a0417b539b3d10e875a9f0ea02e885facac9fa4de0ab0e1f8ee5"
576
- },
577
- {
578
- "schemaVersion": 1,
579
- "contract": "buildchain.controller-descriptor/v1",
580
- "id": "build-channel-router",
581
- "version": 1,
582
- "workflow": {
583
- "id": "build",
584
- "path": ".github/workflows/build.yml"
585
- },
586
- "inputs": {
587
- "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
588
- "classification": "redacted",
589
- "source": "workflow-call-secret"
590
- },
591
- "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN": {
592
- "classification": "redacted",
593
- "source": "workflow-call-secret"
594
- },
595
- "BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN": {
596
- "classification": "redacted",
597
- "source": "workflow-call-secret"
598
- },
599
- "BUILDCHAIN_MACOS_CERTIFICATE_P12_BASE64": {
600
- "classification": "redacted",
601
- "source": "workflow-call-secret"
602
- },
603
- "BUILDCHAIN_MACOS_CERTIFICATE_PASSWORD": {
604
- "classification": "redacted",
605
- "source": "workflow-call-secret"
606
- },
607
- "BUILDCHAIN_MACOS_NOTARY_API_ISSUER": {
608
- "classification": "redacted",
609
- "source": "workflow-call-secret"
610
- },
611
- "BUILDCHAIN_MACOS_NOTARY_API_KEY_ID": {
612
- "classification": "redacted",
613
- "source": "workflow-call-secret"
614
- },
615
- "BUILDCHAIN_MACOS_NOTARY_API_KEY_P8_BASE64": {
616
- "classification": "redacted",
617
- "source": "workflow-call-secret"
618
- },
619
- "BUILDCHAIN_PROMOTION_TOKEN": {
620
- "classification": "redacted",
621
- "source": "workflow-call-secret"
622
- },
623
- "artifact-compression-level": {
624
- "classification": "included",
625
- "source": "workflow-call-input"
626
- },
627
- "artifact-finalization-command": {
628
- "classification": "digest-only",
629
- "source": "workflow-call-input"
630
- },
631
- "artifact-finalization-on-platform": {
632
- "classification": "included",
633
- "source": "workflow-call-input"
634
- },
635
- "artifact-name": {
636
- "classification": "included",
637
- "source": "workflow-call-input"
638
- },
639
- "artifact-name-template": {
640
- "classification": "included",
641
- "source": "workflow-call-input"
642
- },
643
- "artifact-paths": {
644
- "classification": "digest-only",
645
- "source": "workflow-call-input"
646
- },
647
- "artifact-relay-s3-bucket": {
648
- "classification": "digest-only",
649
- "source": "workflow-call-input"
650
- },
651
- "artifact-relay-s3-download-role-arn": {
652
- "classification": "digest-only",
653
- "source": "workflow-call-input"
654
- },
655
- "artifact-relay-s3-oidc-audience": {
656
- "classification": "included",
657
- "source": "workflow-call-input"
658
- },
659
- "artifact-relay-s3-prefix": {
660
- "classification": "digest-only",
661
- "source": "workflow-call-input"
662
- },
663
- "artifact-relay-s3-region": {
664
- "classification": "digest-only",
665
- "source": "workflow-call-input"
666
- },
667
- "artifact-relay-s3-role-arn": {
668
- "classification": "digest-only",
669
- "source": "workflow-call-input"
670
- },
671
- "artifact-relay-s3-upload-role-arn": {
672
- "classification": "digest-only",
673
- "source": "workflow-call-input"
674
- },
675
- "artifact-retention-days": {
676
- "classification": "included",
677
- "source": "workflow-call-input"
678
- },
679
- "artifact-signing-request-upload-no-proxy": {
680
- "classification": "included",
681
- "source": "workflow-call-input"
682
- },
683
- "artifact-transfer-mode": {
684
- "classification": "included",
685
- "source": "workflow-call-input"
686
- },
687
- "aws-codebuild-project": {
688
- "classification": "included",
689
- "source": "workflow-call-input"
690
- },
691
- "aws-ec2-macos-runner-label": {
692
- "classification": "digest-only",
693
- "source": "workflow-call-input"
694
- },
695
- "aws-ec2-windows-runner-label": {
696
- "classification": "digest-only",
697
- "source": "workflow-call-input"
698
- },
699
- "build-command": {
700
- "classification": "digest-only",
701
- "source": "workflow-call-input"
702
- },
703
- "buildchain-alpha-contract-lock-path": {
704
- "classification": "digest-only",
705
- "source": "workflow-call-input"
706
- },
707
- "buildchain-channel": {
708
- "classification": "included",
709
- "source": "workflow-call-input"
710
- },
711
- "buildchain-contract-compatibility-policy": {
712
- "classification": "included",
713
- "source": "workflow-call-input"
714
- },
715
- "buildchain-contract-drift-issue-mode": {
716
- "classification": "included",
717
- "source": "workflow-call-input"
718
- },
719
- "buildchain-contract-expected-channel": {
720
- "classification": "included",
721
- "source": "workflow-call-input"
722
- },
723
- "buildchain-contract-expected-major": {
724
- "classification": "included",
725
- "source": "workflow-call-input"
726
- },
727
- "buildchain-contract-lock-path": {
728
- "classification": "digest-only",
729
- "source": "workflow-call-input"
730
- },
731
- "buildchain-expected-channel": {
732
- "classification": "included",
733
- "source": "workflow-call-input"
734
- },
735
- "buildchain-expected-major": {
736
- "classification": "included",
737
- "source": "workflow-call-input"
738
- },
739
- "buildchain-ref": {
740
- "classification": "included",
741
- "source": "workflow-call-input"
742
- },
743
- "buildchain-repository": {
744
- "classification": "included",
745
- "source": "workflow-call-input"
746
- },
747
- "buildchain-stable-contract-lock-path": {
748
- "classification": "digest-only",
749
- "source": "workflow-call-input"
750
- },
751
- "buildchain-visible-workflow": {
752
- "classification": "included",
753
- "source": "workflow-call-input"
754
- },
755
- "cache-dependency-lock-root": {
756
- "classification": "included",
757
- "source": "workflow-call-input"
758
- },
759
- "cache-policy-root": {
760
- "classification": "included",
761
- "source": "workflow-call-input"
762
- },
763
- "cache-toolchain-root": {
764
- "classification": "included",
765
- "source": "workflow-call-input"
766
- },
767
- "cargo-registry-index": {
768
- "classification": "digest-only",
769
- "source": "workflow-call-input"
770
- },
771
- "checkout-cache-fallback": {
772
- "classification": "digest-only",
773
- "source": "workflow-call-input"
774
- },
775
- "checkout-cache-fetch-attempts": {
776
- "classification": "digest-only",
777
- "source": "workflow-call-input"
778
- },
779
- "checkout-cache-github-timeout-seconds": {
780
- "classification": "digest-only",
781
- "source": "workflow-call-input"
782
- },
783
- "checkout-cache-mirror-url-template": {
784
- "classification": "digest-only",
785
- "source": "workflow-call-input"
786
- },
787
- "checkout-cache-mode": {
788
- "classification": "digest-only",
789
- "source": "workflow-call-input"
790
- },
791
- "checkout-cache-reference-repository-template": {
792
- "classification": "digest-only",
793
- "source": "workflow-call-input"
794
- },
795
- "checkout-cache-timeout-seconds": {
796
- "classification": "digest-only",
797
- "source": "workflow-call-input"
798
- },
799
- "checkout-history-mode": {
800
- "classification": "included",
801
- "source": "workflow-call-input"
802
- },
803
- "compiler-cache-platforms-json": {
804
- "classification": "digest-only",
805
- "source": "workflow-call-input"
806
- },
807
- "compiler-cache-provider": {
808
- "classification": "included",
809
- "source": "workflow-call-input"
810
- },
811
- "compiler-cache-required": {
812
- "classification": "included",
813
- "source": "workflow-call-input"
814
- },
815
- "control-runner-json": {
816
- "classification": "digest-only",
817
- "source": "workflow-call-input"
818
- },
819
- "credential-island-caller-owned": {
820
- "classification": "included",
821
- "source": "workflow-call-input"
822
- },
823
- "credential-island-environment": {
824
- "classification": "digest-only",
825
- "source": "workflow-call-input"
826
- },
827
- "credential-island-macos-app-path": {
828
- "classification": "digest-only",
829
- "source": "workflow-call-input"
830
- },
831
- "credential-island-macos-platform-id": {
832
- "classification": "included",
833
- "source": "workflow-call-input"
834
- },
835
- "expected-artifacts-json": {
836
- "classification": "digest-only",
837
- "source": "workflow-call-input"
838
- },
839
- "fail-fast": {
840
- "classification": "included",
841
- "source": "workflow-call-input"
842
- },
843
- "gate-profile-aggregate-json": {
844
- "classification": "digest-only",
845
- "source": "workflow-call-input"
846
- },
847
- "github-artifact-attestation-platform-id": {
848
- "classification": "included",
849
- "source": "workflow-call-input"
850
- },
851
- "github-artifact-attestation-signer-sha": {
852
- "classification": "included",
853
- "source": "workflow-call-input"
854
- },
855
- "github-artifact-attestation-subject-path": {
856
- "classification": "digest-only",
857
- "source": "workflow-call-input"
858
- },
859
- "install-command": {
860
- "classification": "digest-only",
861
- "source": "workflow-call-input"
862
- },
863
- "kfd-agent-hub": {
864
- "classification": "included",
865
- "source": "workflow-call-input"
866
- },
867
- "lifecycle-timeout-minutes": {
868
- "classification": "included",
869
- "source": "workflow-call-input"
870
- },
871
- "linux-container-image": {
872
- "classification": "digest-only",
873
- "source": "workflow-call-input"
874
- },
875
- "linux-container-preset": {
876
- "classification": "included",
877
- "source": "workflow-call-input"
878
- },
879
- "node-version": {
880
- "classification": "included",
881
- "source": "workflow-call-input"
882
- },
883
- "platforms-json": {
884
- "classification": "digest-only",
885
- "source": "workflow-call-input"
886
- },
887
- "pre-upload-transport-smoke-artifact-root": {
888
- "classification": "included",
889
- "source": "workflow-call-input"
890
- },
891
- "pre-upload-transport-smoke-scenario-path": {
892
- "classification": "digest-only",
893
- "source": "workflow-call-input"
894
- },
895
- "process-sample-interval-ms": {
896
- "classification": "included",
897
- "source": "workflow-call-input"
898
- },
899
- "process-summary-path": {
900
- "classification": "digest-only",
901
- "source": "workflow-call-input"
902
- },
903
- "publish-anchor-request-json": {
904
- "classification": "digest-only",
905
- "source": "workflow-call-input"
906
- },
907
- "publish-channel": {
908
- "classification": "included",
909
- "source": "workflow-call-input"
910
- },
911
- "publish-refs-json": {
912
- "classification": "digest-only",
913
- "source": "workflow-call-input"
914
- },
915
- "publish-registry": {
916
- "classification": "included",
917
- "source": "workflow-call-input"
918
- },
919
- "publish-source-ref": {
920
- "classification": "included",
921
- "source": "workflow-call-input"
922
- },
923
- "release-candidate": {
924
- "classification": "included",
925
- "source": "workflow-call-input"
926
- },
927
- "release-candidate-family-evidence-json": {
928
- "classification": "digest-only",
929
- "source": "workflow-call-input"
930
- },
931
- "requested-parallelism": {
932
- "classification": "included",
933
- "source": "workflow-call-input"
934
- },
935
- "require-build": {
936
- "classification": "included",
937
- "source": "workflow-call-input"
938
- },
939
- "require-install": {
940
- "classification": "included",
941
- "source": "workflow-call-input"
942
- },
943
- "require-trusted-event": {
944
- "classification": "included",
945
- "source": "workflow-call-input"
946
- },
947
- "require-verify": {
948
- "classification": "included",
949
- "source": "workflow-call-input"
950
- },
951
- "runner-preset": {
952
- "classification": "digest-only",
953
- "source": "workflow-call-input"
954
- },
955
- "rust-toolchain": {
956
- "classification": "included",
957
- "source": "workflow-call-input"
958
- },
959
- "rustup-dist-server": {
960
- "classification": "included",
961
- "source": "workflow-call-input"
962
- },
963
- "rustup-update-root": {
964
- "classification": "included",
965
- "source": "workflow-call-input"
966
- },
967
- "sample-process-tree": {
968
- "classification": "included",
969
- "source": "workflow-call-input"
970
- },
971
- "self-hosted-offline-fallback": {
972
- "classification": "included",
973
- "source": "workflow-call-input"
974
- },
975
- "setup-node": {
976
- "classification": "included",
977
- "source": "workflow-call-input"
978
- },
979
- "setup-rust": {
980
- "classification": "included",
981
- "source": "workflow-call-input"
982
- },
983
- "shifu-cache-profile-digest": {
984
- "classification": "included",
985
- "source": "workflow-call-input"
986
- },
987
- "shifu-cache-profile-ref": {
988
- "classification": "included",
989
- "source": "workflow-call-input"
990
- },
991
- "universal-request-json": {
149
+ "config-path": {
992
150
  "classification": "digest-only",
993
151
  "source": "workflow-call-input"
994
152
  },
995
- "untrusted-policy": {
153
+ "configuration-root": {
996
154
  "classification": "included",
997
- "source": "workflow-call-input"
998
- },
999
- "verify-command": {
1000
- "classification": "digest-only",
1001
- "source": "workflow-call-input"
1002
- },
1003
- "verify-substage-evidence-path": {
1004
- "classification": "digest-only",
1005
- "source": "workflow-call-input"
1006
- },
1007
- "working-directory": {
1008
- "classification": "digest-only",
1009
- "source": "workflow-call-input"
155
+ "source": "resolved-build-plan"
1010
156
  }
1011
157
  },
1012
158
  "expected": {
1013
159
  "stages": [
1014
160
  {
1015
- "id": "resolve-channel",
161
+ "id": "resolve-runtime",
1016
162
  "required": true
1017
163
  },
1018
164
  {
1019
- "id": "override",
1020
- "required": false
165
+ "id": "resolve-source",
166
+ "required": true
1021
167
  },
1022
168
  {
1023
- "id": "alpha",
169
+ "id": "anchored-release-preflight",
1024
170
  "required": false
1025
171
  },
1026
172
  {
1027
- "id": "stable",
173
+ "id": "build",
174
+ "required": true
175
+ },
176
+ {
177
+ "id": "signing-finalization",
178
+ "required": true
179
+ },
180
+ {
181
+ "id": "credential-island",
1028
182
  "required": false
1029
183
  },
184
+ {
185
+ "id": "verify",
186
+ "required": true
187
+ },
1030
188
  {
1031
189
  "id": "aggregate",
1032
190
  "required": true
1033
191
  }
1034
192
  ],
1035
193
  "capabilities": [
1036
- "channel-selection",
1037
- "runtime-selection",
1038
- "build-delegation"
194
+ "source-lock",
195
+ "lifecycle-build",
196
+ "artifact-signing-finalization",
197
+ "credential-island",
198
+ "lifecycle-verify",
199
+ "artifact-admission"
1039
200
  ],
1040
201
  "evidence": [
1041
- "nested-controller-receipt",
202
+ "platform-manifests",
203
+ "build-summary",
1042
204
  "controller-receipt"
1043
205
  ]
1044
206
  },
1045
- "digest": "sha256:382ae38afbf17236d093ec5bf945b7a151b99dacd1af53ac447c1ca5de73b956"
207
+ "digest": "sha256:af4bb7f0d036f1719cf28242f4e50471bb11ba26d90e8af6f2f03d2d293ff9ce"
1046
208
  },
1047
209
  {
1048
210
  "schemaVersion": 1,
@@ -2579,5 +1741,5 @@
2579
1741
  "digest": "sha256:79fcf0b55df11186a5096aca13eaa965768ce7ee84b1e979eb1463f0b3f4e05e"
2580
1742
  }
2581
1743
  ],
2582
- "digest": "sha256:6e49d5c9b70da381067ef03e088cb635ef7f4dba7fc56c7fa82e4c00784cf013"
1744
+ "digest": "sha256:8dd5d9aa36ae676582a1ccf19d0f1deab351e8cb55a5f15202375aedad954cb6"
2583
1745
  }