@kungfu-tech/buildchain 4.0.9 → 4.1.0-alpha.0

package/dist/site/buildchain-contract.json

@@ -4,1320 +4,13 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "4.0.9",
+    "version": "4.1.0-alpha.0",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v4",
   "compatibilityPolicy": "major-compatible",
-  "compatibilityFacts": [
-    {
-      "schema": "kungfu.buildchain.compatibility-fact/v1",
-      "factId": "build-channel-router-d40dd0-to-30549a",
-      "factRoot": "sha256:47c1d78adba0d75ac74409d85ad6cf1188d10d25165d2d561118cf76e9ccb701",
-      "sourceRoot": "sha256:ecf235e22344544c30b205323c6e01644561bcda143d0c566acac2571ecd18d7",
-      "targetRoot": "sha256:88cdf46c2a819e99374e7f10e609c34773fb67db9b5161adcb4112c1ccf6dc01",
-      "predicate": {
-        "root": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-        "record": {
-          "schema": "kungfu.fact.temporal-predicate/v1",
-          "predicateId": "kungfu.buildchain.compatibility:accept-contract-lock/v1",
-          "operations": [
-            "accept-contract-lock"
-          ],
-          "direction": "source-to-target",
-          "pathPolicy": "explicit-bounded",
-          "cyclePolicy": "forbid",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea"
-        }
-      },
-      "relation": {
-        "root": "sha256:47c1d78adba0d75ac74409d85ad6cf1188d10d25165d2d561118cf76e9ccb701",
-        "record": {
-          "schema": "kungfu.fact.temporal-relation/v1",
-          "relationId": "buildchain:compatibility:build-channel-router-d40dd0-to-30549a",
-          "predicateRoot": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-          "sourceRoot": "sha256:ecf235e22344544c30b205323c6e01644561bcda143d0c566acac2571ecd18d7",
-          "targetRoot": "sha256:88cdf46c2a819e99374e7f10e609c34773fb67db9b5161adcb4112c1ccf6dc01",
-          "validFromCutRoot": "sha256:3b83f02e22ca82fc4a099b5f8c4353fffb1423b0a5cba41860b1ba86f7c8cbb7",
-          "scopeRoot": "sha256:dc381e72e9cad86293254f8542394f1abc27b4b0f07c122cb4cad5f73b381ccb",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-          "admissionRoots": [
-            "sha256:e449bdc62832fd18b33d93833207d70e843f066a85aae8b0c717234194ecb497"
-          ]
-        }
-      },
-      "proof": {
-        "schema": "kungfu.buildchain.compatibility-proof/v1",
-        "proofId": "build-channel-router-d40dd0-to-30549a",
-        "predicate": "compatible-breaking-digest",
-        "direction": "source-to-target",
-        "operation": "accept-contract-lock",
-        "source": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:build-channel-router",
-          "surfaceKind": "controller",
-          "breakingDigest": "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273"
-        },
-        "target": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:build-channel-router",
-          "surfaceKind": "controller",
-          "breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df"
-        },
-        "scope": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:build-channel-router",
-          "surfaceKind": "controller",
-          "majorLines": [
-            "v2",
-            "v3"
-          ],
-          "operation": "accept-contract-lock"
-        },
-        "scopeRoot": "sha256:dc381e72e9cad86293254f8542394f1abc27b4b0f07c122cb4cad5f73b381ccb",
-        "evidence": {
-          "kind": "protected-pull-request-contract-acceptance",
-          "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2549",
-          "protectedBase": "dev/v3/v3.0",
-          "sourceCommit": "0d87b772265066f5e6157e1ba6a2ba1021fb5225",
-          "mergeCommit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7",
-          "contractDigest": "sha256:2584ba36ab54cd5e9bab9e34dfc08d87a55dc57de1be7641492bf7ceb1366350",
-          "compatibilityDigest": "sha256:80f65cc191b1f771475184edf8a1bf9c10dd69bb58060aa09313d0e1e57f508a"
-        },
-        "evidenceRoot": "sha256:e449bdc62832fd18b33d93833207d70e843f066a85aae8b0c717234194ecb497",
-        "authority": {
-          "kind": "protected-base-contract-authority",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0"
-        },
-        "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-        "cut": {
-          "kind": "protected-git-cut",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0",
-          "commit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7"
-        },
-        "cutRoot": "sha256:3b83f02e22ca82fc4a099b5f8c4353fffb1423b0a5cba41860b1ba86f7c8cbb7",
-        "proofRoot": "sha256:36d2e188f43385d6191116393aa81ea025ccf61e21a1c5eae1d56be92a203b31"
-      }
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-fact/v1",
-      "factId": "promote-buildchain-ref-action-a59f09-to-6147c0",
-      "factRoot": "sha256:50e5b6e644493ac00d5b1d83a0ec6009f9faaae1bee15e88ee8386c9ec8a775d",
-      "sourceRoot": "sha256:b2ea5e385297f25146de02e5da2247b6a2d7f518d88eac95624a693891107a79",
-      "targetRoot": "sha256:33eee394ed2fe9892fd833eba4dc76dcae95a2ff1d8fb507a926651604be20e9",
-      "predicate": {
-        "root": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-        "record": {
-          "schema": "kungfu.fact.temporal-predicate/v1",
-          "predicateId": "kungfu.buildchain.compatibility:accept-contract-lock/v1",
-          "operations": [
-            "accept-contract-lock"
-          ],
-          "direction": "source-to-target",
-          "pathPolicy": "explicit-bounded",
-          "cyclePolicy": "forbid",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea"
-        }
-      },
-      "relation": {
-        "root": "sha256:50e5b6e644493ac00d5b1d83a0ec6009f9faaae1bee15e88ee8386c9ec8a775d",
-        "record": {
-          "schema": "kungfu.fact.temporal-relation/v1",
-          "relationId": "buildchain:compatibility:promote-buildchain-ref-action-a59f09-to-6147c0",
-          "predicateRoot": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-          "sourceRoot": "sha256:b2ea5e385297f25146de02e5da2247b6a2d7f518d88eac95624a693891107a79",
-          "targetRoot": "sha256:33eee394ed2fe9892fd833eba4dc76dcae95a2ff1d8fb507a926651604be20e9",
-          "validFromCutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-          "scopeRoot": "sha256:dbf061c2f7608451f0d2ae47e2d7eaa323d7cf61699f20467ac73712748e50c5",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-          "admissionRoots": [
-            "sha256:454c8cf77d6ecb35de2cdb2f8f80832d7fb31b9f9ef300749ac8b1595fd5cf86"
-          ]
-        }
-      },
-      "proof": {
-        "schema": "kungfu.buildchain.compatibility-proof/v1",
-        "proofId": "promote-buildchain-ref-action-a59f09-to-6147c0",
-        "predicate": "compatible-breaking-digest",
-        "direction": "source-to-target",
-        "operation": "accept-contract-lock",
-        "source": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "promote-buildchain-ref-action",
-          "surfaceKind": "action",
-          "breakingDigest": "sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874"
-        },
-        "target": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "promote-buildchain-ref-action",
-          "surfaceKind": "action",
-          "breakingDigest": "sha256:6147c0a8d5c36bfaa6021871574e1fc28192a3f1b8cfdae4d24ef3059ac1ebda"
-        },
-        "scope": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "promote-buildchain-ref-action",
-          "surfaceKind": "action",
-          "majorLines": [
-            "v2",
-            "v3"
-          ],
-          "operation": "accept-contract-lock"
-        },
-        "scopeRoot": "sha256:dbf061c2f7608451f0d2ae47e2d7eaa323d7cf61699f20467ac73712748e50c5",
-        "evidence": {
-          "kind": "protected-pull-request-contract-acceptance",
-          "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/1556",
-          "protectedBase": "dev/v2/v2.14",
-          "sourceCommit": "f8e2c5d28ef34d711892589331b7e018095a96d7",
-          "mergeCommit": "6e0c29be1489f686a9a3792b46bfaa4466828393",
-          "contractDigest": "sha256:f6dbf5147d9ad3b8c49ba6630cd52b8c7853ead7c921d7e1210a393aebf97d1f",
-          "compatibilityDigest": "sha256:cdf588422ec6b460bd6f631400efa6e361a045e052c8967d6c50fadd7aa4dd90"
-        },
-        "evidenceRoot": "sha256:454c8cf77d6ecb35de2cdb2f8f80832d7fb31b9f9ef300749ac8b1595fd5cf86",
-        "authority": {
-          "kind": "protected-base-contract-authority",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0"
-        },
-        "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-        "cut": {
-          "kind": "protected-git-cut",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0",
-          "commit": "ff0f9006be1c8f63be40e67789e0cfd28fd69d46"
-        },
-        "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-        "proofRoot": "sha256:e6f93f44a6613a9d6de776ebe8f29b1779b0cd18a24bdf126ec6c1a07770fa75"
-      }
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-fact/v1",
-      "factId": "advanced-release-candidate-promote-aa30f2-to-9db8dd",
-      "factRoot": "sha256:5664da2363bed0b45497215b60763c3be627e568eb3182af5891c23ae3875fbe",
-      "sourceRoot": "sha256:df85dfa54c463f6889cfa1374a1b67c25f41e3e32cd59dee80262d4c766945e9",
-      "targetRoot": "sha256:07960d74a035f5417974f7761c4cb2a203e7fc6166366a3d113f09f41df597e8",
-      "predicate": {
-        "root": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-        "record": {
-          "schema": "kungfu.fact.temporal-predicate/v1",
-          "predicateId": "kungfu.buildchain.compatibility:accept-contract-lock/v1",
-          "operations": [
-            "accept-contract-lock"
-          ],
-          "direction": "source-to-target",
-          "pathPolicy": "explicit-bounded",
-          "cyclePolicy": "forbid",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea"
-        }
-      },
-      "relation": {
-        "root": "sha256:5664da2363bed0b45497215b60763c3be627e568eb3182af5891c23ae3875fbe",
-        "record": {
-          "schema": "kungfu.fact.temporal-relation/v1",
-          "relationId": "buildchain:compatibility:advanced-release-candidate-promote-aa30f2-to-9db8dd",
-          "predicateRoot": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-          "sourceRoot": "sha256:df85dfa54c463f6889cfa1374a1b67c25f41e3e32cd59dee80262d4c766945e9",
-          "targetRoot": "sha256:07960d74a035f5417974f7761c4cb2a203e7fc6166366a3d113f09f41df597e8",
-          "validFromCutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-          "scopeRoot": "sha256:c9746475e09a42adf6e33cf3656d9d7cef8e880ba3efc31b8a3cd599b938a124",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-          "admissionRoots": [
-            "sha256:c428bab55d265c91220aa10f7f3d8be508bdc1b412049ca9de48fa6f9898a373"
-          ]
-        }
-      },
-      "proof": {
-        "schema": "kungfu.buildchain.compatibility-proof/v1",
-        "proofId": "advanced-release-candidate-promote-aa30f2-to-9db8dd",
-        "predicate": "compatible-breaking-digest",
-        "direction": "source-to-target",
-        "operation": "accept-contract-lock",
-        "source": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "advanced-release-candidate-promote",
-          "surfaceKind": "workflow",
-          "breakingDigest": "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
-        },
-        "target": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "advanced-release-candidate-promote",
-          "surfaceKind": "workflow",
-          "breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5"
-        },
-        "scope": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "advanced-release-candidate-promote",
-          "surfaceKind": "workflow",
-          "majorLines": [
-            "v2",
-            "v3"
-          ],
-          "operation": "accept-contract-lock"
-        },
-        "scopeRoot": "sha256:c9746475e09a42adf6e33cf3656d9d7cef8e880ba3efc31b8a3cd599b938a124",
-        "evidence": {
-          "kind": "protected-pull-request-contract-acceptance",
-          "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2342",
-          "protectedBase": "dev/v3/v3.0",
-          "sourceCommit": "8870db287a9ee5fb95eebbbe907b1649d84d5b7f",
-          "mergeCommit": "30b605adea1ed33dcf0bbb4cc7b666b64a6ccd18",
-          "contractDigest": "sha256:9c07dbdb9aa8390569cd07ace044af45e6751b91ffe8fcc0cb69a77388b0f72b",
-          "compatibilityDigest": "sha256:80cfdf1786019217c439810f1a80d2866bf8f7ef35a6fa569e1a687fb2bf4cbe"
-        },
-        "evidenceRoot": "sha256:c428bab55d265c91220aa10f7f3d8be508bdc1b412049ca9de48fa6f9898a373",
-        "authority": {
-          "kind": "protected-base-contract-authority",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0"
-        },
-        "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-        "cut": {
-          "kind": "protected-git-cut",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0",
-          "commit": "ff0f9006be1c8f63be40e67789e0cfd28fd69d46"
-        },
-        "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-        "proofRoot": "sha256:36c85ba487be1528e85776d2bc5f766a971d42ac238aec30071945f7d60d9fc5"
-      }
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-fact/v1",
-      "factId": "reusable-build-a6a353-to-dfbedd",
-      "factRoot": "sha256:7c85c77b8282d123924b89b4f5b239b58b7b1383af91b9006425d9269a2c6ce5",
-      "sourceRoot": "sha256:d62613e555428da8c08287d9335f00b5ecf4c90950307e1b2407bf84ffbc633d",
-      "targetRoot": "sha256:db4272cd6eba98596dedf2bb6c843604fa977950e188fdde6df22534d9715c23",
-      "predicate": {
-        "root": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-        "record": {
-          "schema": "kungfu.fact.temporal-predicate/v1",
-          "predicateId": "kungfu.buildchain.compatibility:accept-contract-lock/v1",
-          "operations": [
-            "accept-contract-lock"
-          ],
-          "direction": "source-to-target",
-          "pathPolicy": "explicit-bounded",
-          "cyclePolicy": "forbid",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea"
-        }
-      },
-      "relation": {
-        "root": "sha256:7c85c77b8282d123924b89b4f5b239b58b7b1383af91b9006425d9269a2c6ce5",
-        "record": {
-          "schema": "kungfu.fact.temporal-relation/v1",
-          "relationId": "buildchain:compatibility:reusable-build-a6a353-to-dfbedd",
-          "predicateRoot": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-          "sourceRoot": "sha256:d62613e555428da8c08287d9335f00b5ecf4c90950307e1b2407bf84ffbc633d",
-          "targetRoot": "sha256:db4272cd6eba98596dedf2bb6c843604fa977950e188fdde6df22534d9715c23",
-          "validFromCutRoot": "sha256:4a758c2d730bf99a28ae37057e865e9f0cb8a516200b5a0c29851ca414efa556",
-          "scopeRoot": "sha256:b50ae93f868501c8acfc93d93dc2deec916a4fcf12c19f959fbb3893cc11bb6c",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-          "admissionRoots": [
-            "sha256:8e0184e579c42a66851992a79d54b6f8add9eea776a589bc3004fe0e2177b15c"
-          ]
-        }
-      },
-      "proof": {
-        "schema": "kungfu.buildchain.compatibility-proof/v1",
-        "proofId": "reusable-build-a6a353-to-dfbedd",
-        "predicate": "compatible-breaking-digest",
-        "direction": "source-to-target",
-        "operation": "accept-contract-lock",
-        "source": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "reusable-build",
-          "surfaceKind": "workflow",
-          "breakingDigest": "sha256:a6a35370d6b0d0f46e1b2712dcc01961fe53c2febde95409a27a485c10a36650"
-        },
-        "target": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "reusable-build",
-          "surfaceKind": "workflow",
-          "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa"
-        },
-        "scope": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "reusable-build",
-          "surfaceKind": "workflow",
-          "majorLines": [
-            "v2",
-            "v3"
-          ],
-          "operation": "accept-contract-lock"
-        },
-        "scopeRoot": "sha256:b50ae93f868501c8acfc93d93dc2deec916a4fcf12c19f959fbb3893cc11bb6c",
-        "evidence": {
-          "kind": "protected-pull-request-contract-acceptance",
-          "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2089",
-          "protectedBase": "dev/v3/v3.0",
-          "sourceCommit": "1a6cb874bc6f1611f3eef607e711d3532798e9e7",
-          "mergeCommit": "71a75f21159b994241ec7cb2c50f7a150c5d440b",
-          "contractDigest": "sha256:7c2a7c132a2b2722f70f148b81048147047d4d2c46cf33f7cd2dc158aec092e0",
-          "compatibilityDigest": "sha256:61af7d0871220bc0909008bdc571905ad500cccf853e7841bc5d462a34b2d436"
-        },
-        "evidenceRoot": "sha256:8e0184e579c42a66851992a79d54b6f8add9eea776a589bc3004fe0e2177b15c",
-        "authority": {
-          "kind": "protected-base-contract-authority",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0"
-        },
-        "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-        "cut": {
-          "kind": "protected-git-cut",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0",
-          "commit": "71a75f21159b994241ec7cb2c50f7a150c5d440b"
-        },
-        "cutRoot": "sha256:4a758c2d730bf99a28ae37057e865e9f0cb8a516200b5a0c29851ca414efa556",
-        "proofRoot": "sha256:b99176f414752ffb276f4add6183aa81eeb480598368ca4f57804f024212d0f5"
-      }
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-fact/v1",
-      "factId": "build-lifecycle-e264a7-to-6b8d38",
-      "factRoot": "sha256:b45ecad5988d358bc4604f28db0faad793a02d8ee8592cc1f4323365e951c6f0",
-      "sourceRoot": "sha256:556fde50370a3065212b7357efccc4e84f6332dc4c8ff94357caf5f428773fdf",
-      "targetRoot": "sha256:da550aa8c13f0f1424d1edf68653611a8206b49b1f82d0939d248010d49e9080",
-      "predicate": {
-        "root": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-        "record": {
-          "schema": "kungfu.fact.temporal-predicate/v1",
-          "predicateId": "kungfu.buildchain.compatibility:accept-contract-lock/v1",
-          "operations": [
-            "accept-contract-lock"
-          ],
-          "direction": "source-to-target",
-          "pathPolicy": "explicit-bounded",
-          "cyclePolicy": "forbid",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea"
-        }
-      },
-      "relation": {
-        "root": "sha256:b45ecad5988d358bc4604f28db0faad793a02d8ee8592cc1f4323365e951c6f0",
-        "record": {
-          "schema": "kungfu.fact.temporal-relation/v1",
-          "relationId": "buildchain:compatibility:build-lifecycle-e264a7-to-6b8d38",
-          "predicateRoot": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-          "sourceRoot": "sha256:556fde50370a3065212b7357efccc4e84f6332dc4c8ff94357caf5f428773fdf",
-          "targetRoot": "sha256:da550aa8c13f0f1424d1edf68653611a8206b49b1f82d0939d248010d49e9080",
-          "validFromCutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-          "scopeRoot": "sha256:c1a391a06ad2732c09c09fe0a0806569ac066684f5f2cd381a634c7784da6de3",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-          "admissionRoots": [
-            "sha256:ec5b8374a76dea9fd344cace735f46caa7a8167eef1becd55fbdb0d3cd6f1109"
-          ]
-        }
-      },
-      "proof": {
-        "schema": "kungfu.buildchain.compatibility-proof/v1",
-        "proofId": "build-lifecycle-e264a7-to-6b8d38",
-        "predicate": "compatible-breaking-digest",
-        "direction": "source-to-target",
-        "operation": "accept-contract-lock",
-        "source": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:build-lifecycle",
-          "surfaceKind": "controller",
-          "breakingDigest": "sha256:e264a79f9f399038c2fcfd21e4168c68c2e1485ee5c651c02242a02b622ac2be"
-        },
-        "target": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:build-lifecycle",
-          "surfaceKind": "controller",
-          "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb"
-        },
-        "scope": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:build-lifecycle",
-          "surfaceKind": "controller",
-          "majorLines": [
-            "v2",
-            "v3"
-          ],
-          "operation": "accept-contract-lock"
-        },
-        "scopeRoot": "sha256:c1a391a06ad2732c09c09fe0a0806569ac066684f5f2cd381a634c7784da6de3",
-        "evidence": {
-          "kind": "protected-pull-request-contract-acceptance",
-          "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2058",
-          "protectedBase": "dev/v3/v3.0",
-          "sourceCommit": "c9a86bd1ac17b4fae54b0410498830edad80d831",
-          "mergeCommit": "3991801a7a7d6fe5e31b9a670dfde7ea59e61253",
-          "contractDigest": "sha256:da72850bbd3088f0e9eb20c17382557e0dfb7e68bf4469d352ed870ee8a334e8",
-          "compatibilityDigest": "sha256:32a651504c57829085dc8863f0e41dee98eb60708ff6dec958c9c7e4b1010102"
-        },
-        "evidenceRoot": "sha256:ec5b8374a76dea9fd344cace735f46caa7a8167eef1becd55fbdb0d3cd6f1109",
-        "authority": {
-          "kind": "protected-base-contract-authority",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0"
-        },
-        "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-        "cut": {
-          "kind": "protected-git-cut",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0",
-          "commit": "ff0f9006be1c8f63be40e67789e0cfd28fd69d46"
-        },
-        "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-        "proofRoot": "sha256:9024634cef43a9d695fa224d26be9aeb6370d3c981b003ece3b659dde8e73713"
-      }
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-fact/v1",
-      "factId": "web-surface-da569f-to-27f0cb",
-      "factRoot": "sha256:bba5690e6c535b54623d31b3260e59381bdb50161d7bff33b8e42b8b6dd3135a",
-      "sourceRoot": "sha256:b613d47196d2589279675d55435cb23f9dfc59bf5cdd37430c692b47e981bf23",
-      "targetRoot": "sha256:a409f21ebea76066bbf6ae064f220bef20cceba806e35ffc1caa107cacd0c0c2",
-      "predicate": {
-        "root": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-        "record": {
-          "schema": "kungfu.fact.temporal-predicate/v1",
-          "predicateId": "kungfu.buildchain.compatibility:accept-contract-lock/v1",
-          "operations": [
-            "accept-contract-lock"
-          ],
-          "direction": "source-to-target",
-          "pathPolicy": "explicit-bounded",
-          "cyclePolicy": "forbid",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea"
-        }
-      },
-      "relation": {
-        "root": "sha256:bba5690e6c535b54623d31b3260e59381bdb50161d7bff33b8e42b8b6dd3135a",
-        "record": {
-          "schema": "kungfu.fact.temporal-relation/v1",
-          "relationId": "buildchain:compatibility:web-surface-da569f-to-27f0cb",
-          "predicateRoot": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-          "sourceRoot": "sha256:b613d47196d2589279675d55435cb23f9dfc59bf5cdd37430c692b47e981bf23",
-          "targetRoot": "sha256:a409f21ebea76066bbf6ae064f220bef20cceba806e35ffc1caa107cacd0c0c2",
-          "validFromCutRoot": "sha256:4a758c2d730bf99a28ae37057e865e9f0cb8a516200b5a0c29851ca414efa556",
-          "scopeRoot": "sha256:0288a1bc232405047630819733074df11cfd86596c0fc95afd4403948399d679",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-          "admissionRoots": [
-            "sha256:8e0184e579c42a66851992a79d54b6f8add9eea776a589bc3004fe0e2177b15c"
-          ]
-        }
-      },
-      "proof": {
-        "schema": "kungfu.buildchain.compatibility-proof/v1",
-        "proofId": "web-surface-da569f-to-27f0cb",
-        "predicate": "compatible-breaking-digest",
-        "direction": "source-to-target",
-        "operation": "accept-contract-lock",
-        "source": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "web-surface",
-          "surfaceKind": "workflow",
-          "breakingDigest": "sha256:da569f90374e878948e3d5160ed9929338ce0572473ca8ee54867b0fe1aaeace"
-        },
-        "target": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "web-surface",
-          "surfaceKind": "workflow",
-          "breakingDigest": "sha256:27f0cb9c7d97288850d215be8696b323471c41fd1cdf3a2ff3ebf21f62541960"
-        },
-        "scope": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "web-surface",
-          "surfaceKind": "workflow",
-          "majorLines": [
-            "v2",
-            "v3"
-          ],
-          "operation": "accept-contract-lock"
-        },
-        "scopeRoot": "sha256:0288a1bc232405047630819733074df11cfd86596c0fc95afd4403948399d679",
-        "evidence": {
-          "kind": "protected-pull-request-contract-acceptance",
-          "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2089",
-          "protectedBase": "dev/v3/v3.0",
-          "sourceCommit": "1a6cb874bc6f1611f3eef607e711d3532798e9e7",
-          "mergeCommit": "71a75f21159b994241ec7cb2c50f7a150c5d440b",
-          "contractDigest": "sha256:7c2a7c132a2b2722f70f148b81048147047d4d2c46cf33f7cd2dc158aec092e0",
-          "compatibilityDigest": "sha256:61af7d0871220bc0909008bdc571905ad500cccf853e7841bc5d462a34b2d436"
-        },
-        "evidenceRoot": "sha256:8e0184e579c42a66851992a79d54b6f8add9eea776a589bc3004fe0e2177b15c",
-        "authority": {
-          "kind": "protected-base-contract-authority",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0"
-        },
-        "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-        "cut": {
-          "kind": "protected-git-cut",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0",
-          "commit": "71a75f21159b994241ec7cb2c50f7a150c5d440b"
-        },
-        "cutRoot": "sha256:4a758c2d730bf99a28ae37057e865e9f0cb8a516200b5a0c29851ca414efa556",
-        "proofRoot": "sha256:3ba66a1e8f8d00ddd45f3f448bcccb15469cbd31f5765d36f61e4cfe7fd0dd41"
-      }
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-fact/v1",
-      "factId": "build-lifecycle-307459-to-6b8d38",
-      "factRoot": "sha256:c803aa7787c92e9ac71e0f52b6d2ec0cc76e8bc0e55f192affa9546286899ce9",
-      "sourceRoot": "sha256:4ac7d3ce8c279470d2ae71deda9a8a898064c240e75f02006c0ea4057ce690b1",
-      "targetRoot": "sha256:da550aa8c13f0f1424d1edf68653611a8206b49b1f82d0939d248010d49e9080",
-      "predicate": {
-        "root": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-        "record": {
-          "schema": "kungfu.fact.temporal-predicate/v1",
-          "predicateId": "kungfu.buildchain.compatibility:accept-contract-lock/v1",
-          "operations": [
-            "accept-contract-lock"
-          ],
-          "direction": "source-to-target",
-          "pathPolicy": "explicit-bounded",
-          "cyclePolicy": "forbid",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea"
-        }
-      },
-      "relation": {
-        "root": "sha256:c803aa7787c92e9ac71e0f52b6d2ec0cc76e8bc0e55f192affa9546286899ce9",
-        "record": {
-          "schema": "kungfu.fact.temporal-relation/v1",
-          "relationId": "buildchain:compatibility:build-lifecycle-307459-to-6b8d38",
-          "predicateRoot": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-          "sourceRoot": "sha256:4ac7d3ce8c279470d2ae71deda9a8a898064c240e75f02006c0ea4057ce690b1",
-          "targetRoot": "sha256:da550aa8c13f0f1424d1edf68653611a8206b49b1f82d0939d248010d49e9080",
-          "validFromCutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-          "scopeRoot": "sha256:c1a391a06ad2732c09c09fe0a0806569ac066684f5f2cd381a634c7784da6de3",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-          "admissionRoots": [
-            "sha256:ec5b8374a76dea9fd344cace735f46caa7a8167eef1becd55fbdb0d3cd6f1109"
-          ]
-        }
-      },
-      "proof": {
-        "schema": "kungfu.buildchain.compatibility-proof/v1",
-        "proofId": "build-lifecycle-307459-to-6b8d38",
-        "predicate": "compatible-breaking-digest",
-        "direction": "source-to-target",
-        "operation": "accept-contract-lock",
-        "source": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:build-lifecycle",
-          "surfaceKind": "controller",
-          "breakingDigest": "sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1"
-        },
-        "target": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:build-lifecycle",
-          "surfaceKind": "controller",
-          "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb"
-        },
-        "scope": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:build-lifecycle",
-          "surfaceKind": "controller",
-          "majorLines": [
-            "v2",
-            "v3"
-          ],
-          "operation": "accept-contract-lock"
-        },
-        "scopeRoot": "sha256:c1a391a06ad2732c09c09fe0a0806569ac066684f5f2cd381a634c7784da6de3",
-        "evidence": {
-          "kind": "protected-pull-request-contract-acceptance",
-          "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2058",
-          "protectedBase": "dev/v3/v3.0",
-          "sourceCommit": "c9a86bd1ac17b4fae54b0410498830edad80d831",
-          "mergeCommit": "3991801a7a7d6fe5e31b9a670dfde7ea59e61253",
-          "contractDigest": "sha256:da72850bbd3088f0e9eb20c17382557e0dfb7e68bf4469d352ed870ee8a334e8",
-          "compatibilityDigest": "sha256:32a651504c57829085dc8863f0e41dee98eb60708ff6dec958c9c7e4b1010102"
-        },
-        "evidenceRoot": "sha256:ec5b8374a76dea9fd344cace735f46caa7a8167eef1becd55fbdb0d3cd6f1109",
-        "authority": {
-          "kind": "protected-base-contract-authority",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0"
-        },
-        "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-        "cut": {
-          "kind": "protected-git-cut",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0",
-          "commit": "ff0f9006be1c8f63be40e67789e0cfd28fd69d46"
-        },
-        "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-        "proofRoot": "sha256:3bd1c54198b78a462d2005ac66c139ad4d6f1962925c8f0971b4d0a222f1a7c5"
-      }
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-fact/v1",
-      "factId": "release-candidate-promote-acd401-to-e60642",
-      "factRoot": "sha256:ec1c70ff70cca52ac276fab344b1c2d00c9581a8efec6d6fa37d56cb11632af1",
-      "sourceRoot": "sha256:4e97e8e31e7d00e6f616774fec9ab802d5274ed15c852d4e922a1187cd599f91",
-      "targetRoot": "sha256:465664b29542d294179396d8c78d507551373f34a5ee0d2682b342fe523174ad",
-      "predicate": {
-        "root": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-        "record": {
-          "schema": "kungfu.fact.temporal-predicate/v1",
-          "predicateId": "kungfu.buildchain.compatibility:accept-contract-lock/v1",
-          "operations": [
-            "accept-contract-lock"
-          ],
-          "direction": "source-to-target",
-          "pathPolicy": "explicit-bounded",
-          "cyclePolicy": "forbid",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea"
-        }
-      },
-      "relation": {
-        "root": "sha256:ec1c70ff70cca52ac276fab344b1c2d00c9581a8efec6d6fa37d56cb11632af1",
-        "record": {
-          "schema": "kungfu.fact.temporal-relation/v1",
-          "relationId": "buildchain:compatibility:release-candidate-promote-acd401-to-e60642",
-          "predicateRoot": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-          "sourceRoot": "sha256:4e97e8e31e7d00e6f616774fec9ab802d5274ed15c852d4e922a1187cd599f91",
-          "targetRoot": "sha256:465664b29542d294179396d8c78d507551373f34a5ee0d2682b342fe523174ad",
-          "validFromCutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-          "scopeRoot": "sha256:0b8668413118308004e8ded1e9d051d94c68311c3944791babb9a4ad29d2d50b",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-          "admissionRoots": [
-            "sha256:c428bab55d265c91220aa10f7f3d8be508bdc1b412049ca9de48fa6f9898a373"
-          ]
-        }
-      },
-      "proof": {
-        "schema": "kungfu.buildchain.compatibility-proof/v1",
-        "proofId": "release-candidate-promote-acd401-to-e60642",
-        "predicate": "compatible-breaking-digest",
-        "direction": "source-to-target",
-        "operation": "accept-contract-lock",
-        "source": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "release-candidate-promote",
-          "surfaceKind": "workflow",
-          "breakingDigest": "sha256:acd401cfc46450115a3763fd4b679d85f185e8757ebd52510d6262e1533df4cf"
-        },
-        "target": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "release-candidate-promote",
-          "surfaceKind": "workflow",
-          "breakingDigest": "sha256:e60642aa298933d2c103284794921a6c340a50aa91ee528b06e58892a2a006bf"
-        },
-        "scope": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "release-candidate-promote",
-          "surfaceKind": "workflow",
-          "majorLines": [
-            "v2",
-            "v3"
-          ],
-          "operation": "accept-contract-lock"
-        },
-        "scopeRoot": "sha256:0b8668413118308004e8ded1e9d051d94c68311c3944791babb9a4ad29d2d50b",
-        "evidence": {
-          "kind": "protected-pull-request-contract-acceptance",
-          "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2342",
-          "protectedBase": "dev/v3/v3.0",
-          "sourceCommit": "8870db287a9ee5fb95eebbbe907b1649d84d5b7f",
-          "mergeCommit": "30b605adea1ed33dcf0bbb4cc7b666b64a6ccd18",
-          "contractDigest": "sha256:9c07dbdb9aa8390569cd07ace044af45e6751b91ffe8fcc0cb69a77388b0f72b",
-          "compatibilityDigest": "sha256:80cfdf1786019217c439810f1a80d2866bf8f7ef35a6fa569e1a687fb2bf4cbe"
-        },
-        "evidenceRoot": "sha256:c428bab55d265c91220aa10f7f3d8be508bdc1b412049ca9de48fa6f9898a373",
-        "authority": {
-          "kind": "protected-base-contract-authority",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0"
-        },
-        "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-        "cut": {
-          "kind": "protected-git-cut",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0",
-          "commit": "ff0f9006be1c8f63be40e67789e0cfd28fd69d46"
-        },
-        "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-        "proofRoot": "sha256:cb642b68aaf60e9c0eb93d46a2a1fc482810142201c7340ad7efe824b1683921"
-      }
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-fact/v1",
-      "factId": "release-propagation-d7a1f1-to-b873ce",
-      "factRoot": "sha256:f6e89a46bb73e93583477eeb3bc3a8bd1f36bdafd040777fb3a999460191b360",
-      "sourceRoot": "sha256:9d5429548ca8095450edd77104ffcd3ba9ee0f3cf6b24d690ea179938b932ed5",
-      "targetRoot": "sha256:06f31cc613d65375a8a893d0d0f7cb665bce2346d04448b348bdc384590826e8",
-      "predicate": {
-        "root": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-        "record": {
-          "schema": "kungfu.fact.temporal-predicate/v1",
-          "predicateId": "kungfu.buildchain.compatibility:accept-contract-lock/v1",
-          "operations": [
-            "accept-contract-lock"
-          ],
-          "direction": "source-to-target",
-          "pathPolicy": "explicit-bounded",
-          "cyclePolicy": "forbid",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea"
-        }
-      },
-      "relation": {
-        "root": "sha256:f6e89a46bb73e93583477eeb3bc3a8bd1f36bdafd040777fb3a999460191b360",
-        "record": {
-          "schema": "kungfu.fact.temporal-relation/v1",
-          "relationId": "buildchain:compatibility:release-propagation-d7a1f1-to-b873ce",
-          "predicateRoot": "sha256:2b211f8251b0410b178f1f579d9bda9aa707877cc05c1ee839a3343f0f2307c9",
-          "sourceRoot": "sha256:9d5429548ca8095450edd77104ffcd3ba9ee0f3cf6b24d690ea179938b932ed5",
-          "targetRoot": "sha256:06f31cc613d65375a8a893d0d0f7cb665bce2346d04448b348bdc384590826e8",
-          "validFromCutRoot": "sha256:8bff86e6995cb22ff77eb3ea5a62b843734e9b9688694dc3d6e3e8847fd88499",
-          "scopeRoot": "sha256:0ff862e406419464370403011c3bf90d291d85a2c08ae8179d6b8d540c9e70f2",
-          "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-          "admissionRoots": [
-            "sha256:943908ff0b680d7ae84c68dc90412e4e6292323531b5e449ce4d1433061258c8"
-          ]
-        }
-      },
-      "proof": {
-        "schema": "kungfu.buildchain.compatibility-proof/v1",
-        "proofId": "release-propagation-d7a1f1-to-b873ce",
-        "predicate": "compatible-breaking-digest",
-        "direction": "source-to-target",
-        "operation": "accept-contract-lock",
-        "source": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:release-propagation",
-          "surfaceKind": "controller",
-          "breakingDigest": "sha256:d7a1f15990ce8bd13149474888232c7d4451dd2a49bebf4d4ce1336695da430e"
-        },
-        "target": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:release-propagation",
-          "surfaceKind": "controller",
-          "breakingDigest": "sha256:b873ceb65618972bea615afcb9c616c138ce834b3246ec7237ef87c1618d68bd"
-        },
-        "scope": {
-          "contract": "kungfu-buildchain-runtime-contract-world",
-          "surfaceId": "controller:release-propagation",
-          "surfaceKind": "controller",
-          "majorLines": [
-            "v2",
-            "v3"
-          ],
-          "operation": "accept-contract-lock"
-        },
-        "scopeRoot": "sha256:0ff862e406419464370403011c3bf90d291d85a2c08ae8179d6b8d540c9e70f2",
-        "evidence": {
-          "kind": "protected-pull-request-contract-acceptance",
-          "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2143",
-          "protectedBase": "dev/v3/v3.0",
-          "sourceCommit": "b63aff4dd63ad6017b8f48e1c690f595a9c832a2",
-          "mergeCommit": "487ee09ca4832ffd15607db00060df4c0839fbae",
-          "contractDigest": "sha256:00c37f8a663387831ba4d066056d0b21d4f3c5f3ea5b0cf84456af332cf8d87e",
-          "compatibilityDigest": "sha256:3bbcaf835844260ed98414d3bd176667245d12131e13fc748e4c2fae12399691"
-        },
-        "evidenceRoot": "sha256:943908ff0b680d7ae84c68dc90412e4e6292323531b5e449ce4d1433061258c8",
-        "authority": {
-          "kind": "protected-base-contract-authority",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0"
-        },
-        "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-        "cut": {
-          "kind": "protected-git-cut",
-          "repository": "kungfu-systems/buildchain",
-          "protectedBase": "dev/v3/v3.0",
-          "commit": "487ee09ca4832ffd15607db00060df4c0839fbae"
-        },
-        "cutRoot": "sha256:8bff86e6995cb22ff77eb3ea5a62b843734e9b9688694dc3d6e3e8847fd88499",
-        "proofRoot": "sha256:8b98ff903d3abd8d9a9b6a0b250efd8fdf6fd5d4127aa4d0d0c4a5b3db87f353"
-      }
-    }
-  ],
-  "compatibilityProofs": [
-    {
-      "schema": "kungfu.buildchain.compatibility-proof/v1",
-      "proofId": "advanced-release-candidate-promote-aa30f2-to-9db8dd",
-      "predicate": "compatible-breaking-digest",
-      "direction": "source-to-target",
-      "operation": "accept-contract-lock",
-      "source": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "advanced-release-candidate-promote",
-        "surfaceKind": "workflow",
-        "breakingDigest": "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
-      },
-      "target": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "advanced-release-candidate-promote",
-        "surfaceKind": "workflow",
-        "breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5"
-      },
-      "scope": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "advanced-release-candidate-promote",
-        "surfaceKind": "workflow",
-        "majorLines": [
-          "v2",
-          "v3"
-        ],
-        "operation": "accept-contract-lock"
-      },
-      "scopeRoot": "sha256:c9746475e09a42adf6e33cf3656d9d7cef8e880ba3efc31b8a3cd599b938a124",
-      "evidence": {
-        "kind": "protected-pull-request-contract-acceptance",
-        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2342",
-        "protectedBase": "dev/v3/v3.0",
-        "sourceCommit": "8870db287a9ee5fb95eebbbe907b1649d84d5b7f",
-        "mergeCommit": "30b605adea1ed33dcf0bbb4cc7b666b64a6ccd18",
-        "contractDigest": "sha256:9c07dbdb9aa8390569cd07ace044af45e6751b91ffe8fcc0cb69a77388b0f72b",
-        "compatibilityDigest": "sha256:80cfdf1786019217c439810f1a80d2866bf8f7ef35a6fa569e1a687fb2bf4cbe"
-      },
-      "evidenceRoot": "sha256:c428bab55d265c91220aa10f7f3d8be508bdc1b412049ca9de48fa6f9898a373",
-      "authority": {
-        "kind": "protected-base-contract-authority",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0"
-      },
-      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-      "cut": {
-        "kind": "protected-git-cut",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0",
-        "commit": "ff0f9006be1c8f63be40e67789e0cfd28fd69d46"
-      },
-      "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-      "proofRoot": "sha256:36c85ba487be1528e85776d2bc5f766a971d42ac238aec30071945f7d60d9fc5"
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-proof/v1",
-      "proofId": "build-channel-router-d40dd0-to-30549a",
-      "predicate": "compatible-breaking-digest",
-      "direction": "source-to-target",
-      "operation": "accept-contract-lock",
-      "source": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:build-channel-router",
-        "surfaceKind": "controller",
-        "breakingDigest": "sha256:d40dd05d7e07473d4b2dc1b62fbb0ed6f06449b4d3a7c44a2e8014313e3c0273"
-      },
-      "target": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:build-channel-router",
-        "surfaceKind": "controller",
-        "breakingDigest": "sha256:30549aa26cd1e1dd81f10fe3529d3c6e3f8438a6efa0100c47ebae4d2f3d71df"
-      },
-      "scope": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:build-channel-router",
-        "surfaceKind": "controller",
-        "majorLines": [
-          "v2",
-          "v3"
-        ],
-        "operation": "accept-contract-lock"
-      },
-      "scopeRoot": "sha256:dc381e72e9cad86293254f8542394f1abc27b4b0f07c122cb4cad5f73b381ccb",
-      "evidence": {
-        "kind": "protected-pull-request-contract-acceptance",
-        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2549",
-        "protectedBase": "dev/v3/v3.0",
-        "sourceCommit": "0d87b772265066f5e6157e1ba6a2ba1021fb5225",
-        "mergeCommit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7",
-        "contractDigest": "sha256:2584ba36ab54cd5e9bab9e34dfc08d87a55dc57de1be7641492bf7ceb1366350",
-        "compatibilityDigest": "sha256:80f65cc191b1f771475184edf8a1bf9c10dd69bb58060aa09313d0e1e57f508a"
-      },
-      "evidenceRoot": "sha256:e449bdc62832fd18b33d93833207d70e843f066a85aae8b0c717234194ecb497",
-      "authority": {
-        "kind": "protected-base-contract-authority",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0"
-      },
-      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-      "cut": {
-        "kind": "protected-git-cut",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0",
-        "commit": "34fad9d3a94c450d75c0d06fd6ed00470c992ff7"
-      },
-      "cutRoot": "sha256:3b83f02e22ca82fc4a099b5f8c4353fffb1423b0a5cba41860b1ba86f7c8cbb7",
-      "proofRoot": "sha256:36d2e188f43385d6191116393aa81ea025ccf61e21a1c5eae1d56be92a203b31"
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-proof/v1",
-      "proofId": "web-surface-da569f-to-27f0cb",
-      "predicate": "compatible-breaking-digest",
-      "direction": "source-to-target",
-      "operation": "accept-contract-lock",
-      "source": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "web-surface",
-        "surfaceKind": "workflow",
-        "breakingDigest": "sha256:da569f90374e878948e3d5160ed9929338ce0572473ca8ee54867b0fe1aaeace"
-      },
-      "target": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "web-surface",
-        "surfaceKind": "workflow",
-        "breakingDigest": "sha256:27f0cb9c7d97288850d215be8696b323471c41fd1cdf3a2ff3ebf21f62541960"
-      },
-      "scope": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "web-surface",
-        "surfaceKind": "workflow",
-        "majorLines": [
-          "v2",
-          "v3"
-        ],
-        "operation": "accept-contract-lock"
-      },
-      "scopeRoot": "sha256:0288a1bc232405047630819733074df11cfd86596c0fc95afd4403948399d679",
-      "evidence": {
-        "kind": "protected-pull-request-contract-acceptance",
-        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2089",
-        "protectedBase": "dev/v3/v3.0",
-        "sourceCommit": "1a6cb874bc6f1611f3eef607e711d3532798e9e7",
-        "mergeCommit": "71a75f21159b994241ec7cb2c50f7a150c5d440b",
-        "contractDigest": "sha256:7c2a7c132a2b2722f70f148b81048147047d4d2c46cf33f7cd2dc158aec092e0",
-        "compatibilityDigest": "sha256:61af7d0871220bc0909008bdc571905ad500cccf853e7841bc5d462a34b2d436"
-      },
-      "evidenceRoot": "sha256:8e0184e579c42a66851992a79d54b6f8add9eea776a589bc3004fe0e2177b15c",
-      "authority": {
-        "kind": "protected-base-contract-authority",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0"
-      },
-      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-      "cut": {
-        "kind": "protected-git-cut",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0",
-        "commit": "71a75f21159b994241ec7cb2c50f7a150c5d440b"
-      },
-      "cutRoot": "sha256:4a758c2d730bf99a28ae37057e865e9f0cb8a516200b5a0c29851ca414efa556",
-      "proofRoot": "sha256:3ba66a1e8f8d00ddd45f3f448bcccb15469cbd31f5765d36f61e4cfe7fd0dd41"
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-proof/v1",
-      "proofId": "build-lifecycle-307459-to-6b8d38",
-      "predicate": "compatible-breaking-digest",
-      "direction": "source-to-target",
-      "operation": "accept-contract-lock",
-      "source": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:build-lifecycle",
-        "surfaceKind": "controller",
-        "breakingDigest": "sha256:30745921541e9b0f70475bb2178c2559f6aef248f6680670ccd44d8c5a69a6b1"
-      },
-      "target": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:build-lifecycle",
-        "surfaceKind": "controller",
-        "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb"
-      },
-      "scope": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:build-lifecycle",
-        "surfaceKind": "controller",
-        "majorLines": [
-          "v2",
-          "v3"
-        ],
-        "operation": "accept-contract-lock"
-      },
-      "scopeRoot": "sha256:c1a391a06ad2732c09c09fe0a0806569ac066684f5f2cd381a634c7784da6de3",
-      "evidence": {
-        "kind": "protected-pull-request-contract-acceptance",
-        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2058",
-        "protectedBase": "dev/v3/v3.0",
-        "sourceCommit": "c9a86bd1ac17b4fae54b0410498830edad80d831",
-        "mergeCommit": "3991801a7a7d6fe5e31b9a670dfde7ea59e61253",
-        "contractDigest": "sha256:da72850bbd3088f0e9eb20c17382557e0dfb7e68bf4469d352ed870ee8a334e8",
-        "compatibilityDigest": "sha256:32a651504c57829085dc8863f0e41dee98eb60708ff6dec958c9c7e4b1010102"
-      },
-      "evidenceRoot": "sha256:ec5b8374a76dea9fd344cace735f46caa7a8167eef1becd55fbdb0d3cd6f1109",
-      "authority": {
-        "kind": "protected-base-contract-authority",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0"
-      },
-      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-      "cut": {
-        "kind": "protected-git-cut",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0",
-        "commit": "ff0f9006be1c8f63be40e67789e0cfd28fd69d46"
-      },
-      "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-      "proofRoot": "sha256:3bd1c54198b78a462d2005ac66c139ad4d6f1962925c8f0971b4d0a222f1a7c5"
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-proof/v1",
-      "proofId": "release-propagation-d7a1f1-to-b873ce",
-      "predicate": "compatible-breaking-digest",
-      "direction": "source-to-target",
-      "operation": "accept-contract-lock",
-      "source": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:release-propagation",
-        "surfaceKind": "controller",
-        "breakingDigest": "sha256:d7a1f15990ce8bd13149474888232c7d4451dd2a49bebf4d4ce1336695da430e"
-      },
-      "target": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:release-propagation",
-        "surfaceKind": "controller",
-        "breakingDigest": "sha256:b873ceb65618972bea615afcb9c616c138ce834b3246ec7237ef87c1618d68bd"
-      },
-      "scope": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:release-propagation",
-        "surfaceKind": "controller",
-        "majorLines": [
-          "v2",
-          "v3"
-        ],
-        "operation": "accept-contract-lock"
-      },
-      "scopeRoot": "sha256:0ff862e406419464370403011c3bf90d291d85a2c08ae8179d6b8d540c9e70f2",
-      "evidence": {
-        "kind": "protected-pull-request-contract-acceptance",
-        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2143",
-        "protectedBase": "dev/v3/v3.0",
-        "sourceCommit": "b63aff4dd63ad6017b8f48e1c690f595a9c832a2",
-        "mergeCommit": "487ee09ca4832ffd15607db00060df4c0839fbae",
-        "contractDigest": "sha256:00c37f8a663387831ba4d066056d0b21d4f3c5f3ea5b0cf84456af332cf8d87e",
-        "compatibilityDigest": "sha256:3bbcaf835844260ed98414d3bd176667245d12131e13fc748e4c2fae12399691"
-      },
-      "evidenceRoot": "sha256:943908ff0b680d7ae84c68dc90412e4e6292323531b5e449ce4d1433061258c8",
-      "authority": {
-        "kind": "protected-base-contract-authority",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0"
-      },
-      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-      "cut": {
-        "kind": "protected-git-cut",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0",
-        "commit": "487ee09ca4832ffd15607db00060df4c0839fbae"
-      },
-      "cutRoot": "sha256:8bff86e6995cb22ff77eb3ea5a62b843734e9b9688694dc3d6e3e8847fd88499",
-      "proofRoot": "sha256:8b98ff903d3abd8d9a9b6a0b250efd8fdf6fd5d4127aa4d0d0c4a5b3db87f353"
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-proof/v1",
-      "proofId": "build-lifecycle-e264a7-to-6b8d38",
-      "predicate": "compatible-breaking-digest",
-      "direction": "source-to-target",
-      "operation": "accept-contract-lock",
-      "source": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:build-lifecycle",
-        "surfaceKind": "controller",
-        "breakingDigest": "sha256:e264a79f9f399038c2fcfd21e4168c68c2e1485ee5c651c02242a02b622ac2be"
-      },
-      "target": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:build-lifecycle",
-        "surfaceKind": "controller",
-        "breakingDigest": "sha256:6b8d38e92b2c67b5bc83fae0a3fd95bfa47582fbc176e6cdeebe7630a57534cb"
-      },
-      "scope": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "controller:build-lifecycle",
-        "surfaceKind": "controller",
-        "majorLines": [
-          "v2",
-          "v3"
-        ],
-        "operation": "accept-contract-lock"
-      },
-      "scopeRoot": "sha256:c1a391a06ad2732c09c09fe0a0806569ac066684f5f2cd381a634c7784da6de3",
-      "evidence": {
-        "kind": "protected-pull-request-contract-acceptance",
-        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2058",
-        "protectedBase": "dev/v3/v3.0",
-        "sourceCommit": "c9a86bd1ac17b4fae54b0410498830edad80d831",
-        "mergeCommit": "3991801a7a7d6fe5e31b9a670dfde7ea59e61253",
-        "contractDigest": "sha256:da72850bbd3088f0e9eb20c17382557e0dfb7e68bf4469d352ed870ee8a334e8",
-        "compatibilityDigest": "sha256:32a651504c57829085dc8863f0e41dee98eb60708ff6dec958c9c7e4b1010102"
-      },
-      "evidenceRoot": "sha256:ec5b8374a76dea9fd344cace735f46caa7a8167eef1becd55fbdb0d3cd6f1109",
-      "authority": {
-        "kind": "protected-base-contract-authority",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0"
-      },
-      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-      "cut": {
-        "kind": "protected-git-cut",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0",
-        "commit": "ff0f9006be1c8f63be40e67789e0cfd28fd69d46"
-      },
-      "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-      "proofRoot": "sha256:9024634cef43a9d695fa224d26be9aeb6370d3c981b003ece3b659dde8e73713"
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-proof/v1",
-      "proofId": "reusable-build-a6a353-to-dfbedd",
-      "predicate": "compatible-breaking-digest",
-      "direction": "source-to-target",
-      "operation": "accept-contract-lock",
-      "source": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "reusable-build",
-        "surfaceKind": "workflow",
-        "breakingDigest": "sha256:a6a35370d6b0d0f46e1b2712dcc01961fe53c2febde95409a27a485c10a36650"
-      },
-      "target": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "reusable-build",
-        "surfaceKind": "workflow",
-        "breakingDigest": "sha256:dfbedd543ae0c067982b5c8c02d98dd2f7f7df88752be97fb330da6b0ba30faa"
-      },
-      "scope": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "reusable-build",
-        "surfaceKind": "workflow",
-        "majorLines": [
-          "v2",
-          "v3"
-        ],
-        "operation": "accept-contract-lock"
-      },
-      "scopeRoot": "sha256:b50ae93f868501c8acfc93d93dc2deec916a4fcf12c19f959fbb3893cc11bb6c",
-      "evidence": {
-        "kind": "protected-pull-request-contract-acceptance",
-        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2089",
-        "protectedBase": "dev/v3/v3.0",
-        "sourceCommit": "1a6cb874bc6f1611f3eef607e711d3532798e9e7",
-        "mergeCommit": "71a75f21159b994241ec7cb2c50f7a150c5d440b",
-        "contractDigest": "sha256:7c2a7c132a2b2722f70f148b81048147047d4d2c46cf33f7cd2dc158aec092e0",
-        "compatibilityDigest": "sha256:61af7d0871220bc0909008bdc571905ad500cccf853e7841bc5d462a34b2d436"
-      },
-      "evidenceRoot": "sha256:8e0184e579c42a66851992a79d54b6f8add9eea776a589bc3004fe0e2177b15c",
-      "authority": {
-        "kind": "protected-base-contract-authority",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0"
-      },
-      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-      "cut": {
-        "kind": "protected-git-cut",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0",
-        "commit": "71a75f21159b994241ec7cb2c50f7a150c5d440b"
-      },
-      "cutRoot": "sha256:4a758c2d730bf99a28ae37057e865e9f0cb8a516200b5a0c29851ca414efa556",
-      "proofRoot": "sha256:b99176f414752ffb276f4add6183aa81eeb480598368ca4f57804f024212d0f5"
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-proof/v1",
-      "proofId": "release-candidate-promote-acd401-to-e60642",
-      "predicate": "compatible-breaking-digest",
-      "direction": "source-to-target",
-      "operation": "accept-contract-lock",
-      "source": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "release-candidate-promote",
-        "surfaceKind": "workflow",
-        "breakingDigest": "sha256:acd401cfc46450115a3763fd4b679d85f185e8757ebd52510d6262e1533df4cf"
-      },
-      "target": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "release-candidate-promote",
-        "surfaceKind": "workflow",
-        "breakingDigest": "sha256:e60642aa298933d2c103284794921a6c340a50aa91ee528b06e58892a2a006bf"
-      },
-      "scope": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "release-candidate-promote",
-        "surfaceKind": "workflow",
-        "majorLines": [
-          "v2",
-          "v3"
-        ],
-        "operation": "accept-contract-lock"
-      },
-      "scopeRoot": "sha256:0b8668413118308004e8ded1e9d051d94c68311c3944791babb9a4ad29d2d50b",
-      "evidence": {
-        "kind": "protected-pull-request-contract-acceptance",
-        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/2342",
-        "protectedBase": "dev/v3/v3.0",
-        "sourceCommit": "8870db287a9ee5fb95eebbbe907b1649d84d5b7f",
-        "mergeCommit": "30b605adea1ed33dcf0bbb4cc7b666b64a6ccd18",
-        "contractDigest": "sha256:9c07dbdb9aa8390569cd07ace044af45e6751b91ffe8fcc0cb69a77388b0f72b",
-        "compatibilityDigest": "sha256:80cfdf1786019217c439810f1a80d2866bf8f7ef35a6fa569e1a687fb2bf4cbe"
-      },
-      "evidenceRoot": "sha256:c428bab55d265c91220aa10f7f3d8be508bdc1b412049ca9de48fa6f9898a373",
-      "authority": {
-        "kind": "protected-base-contract-authority",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0"
-      },
-      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-      "cut": {
-        "kind": "protected-git-cut",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0",
-        "commit": "ff0f9006be1c8f63be40e67789e0cfd28fd69d46"
-      },
-      "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-      "proofRoot": "sha256:cb642b68aaf60e9c0eb93d46a2a1fc482810142201c7340ad7efe824b1683921"
-    },
-    {
-      "schema": "kungfu.buildchain.compatibility-proof/v1",
-      "proofId": "promote-buildchain-ref-action-a59f09-to-6147c0",
-      "predicate": "compatible-breaking-digest",
-      "direction": "source-to-target",
-      "operation": "accept-contract-lock",
-      "source": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "promote-buildchain-ref-action",
-        "surfaceKind": "action",
-        "breakingDigest": "sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874"
-      },
-      "target": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "promote-buildchain-ref-action",
-        "surfaceKind": "action",
-        "breakingDigest": "sha256:6147c0a8d5c36bfaa6021871574e1fc28192a3f1b8cfdae4d24ef3059ac1ebda"
-      },
-      "scope": {
-        "contract": "kungfu-buildchain-runtime-contract-world",
-        "surfaceId": "promote-buildchain-ref-action",
-        "surfaceKind": "action",
-        "majorLines": [
-          "v2",
-          "v3"
-        ],
-        "operation": "accept-contract-lock"
-      },
-      "scopeRoot": "sha256:dbf061c2f7608451f0d2ae47e2d7eaa323d7cf61699f20467ac73712748e50c5",
-      "evidence": {
-        "kind": "protected-pull-request-contract-acceptance",
-        "pullRequest": "https://github.com/kungfu-systems/buildchain/pull/1556",
-        "protectedBase": "dev/v2/v2.14",
-        "sourceCommit": "f8e2c5d28ef34d711892589331b7e018095a96d7",
-        "mergeCommit": "6e0c29be1489f686a9a3792b46bfaa4466828393",
-        "contractDigest": "sha256:f6dbf5147d9ad3b8c49ba6630cd52b8c7853ead7c921d7e1210a393aebf97d1f",
-        "compatibilityDigest": "sha256:cdf588422ec6b460bd6f631400efa6e361a045e052c8967d6c50fadd7aa4dd90"
-      },
-      "evidenceRoot": "sha256:454c8cf77d6ecb35de2cdb2f8f80832d7fb31b9f9ef300749ac8b1595fd5cf86",
-      "authority": {
-        "kind": "protected-base-contract-authority",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0"
-      },
-      "authorityRoot": "sha256:6908bf14a35e1ad7d0b865cb776744b789d1b41a0920d2160ef374febb4e24ea",
-      "cut": {
-        "kind": "protected-git-cut",
-        "repository": "kungfu-systems/buildchain",
-        "protectedBase": "dev/v3/v3.0",
-        "commit": "ff0f9006be1c8f63be40e67789e0cfd28fd69d46"
-      },
-      "cutRoot": "sha256:4fd5ae0cdad01a09e91bbb3f183ac595510a8f25baf7ba865de7633a7eacb3eb",
-      "proofRoot": "sha256:e6f93f44a6613a9d6de776ebe8f29b1779b0cd18a24bdf126ec6c1a07770fa75"
-    }
-  ],
+  "compatibilityFacts": [],
+  "compatibilityProofs": [],
   "surfaces": [
     {
       "contractVersion": 1,
@@ -1350,7 +43,7 @@
         "retryable GitHub fallback fetches use a bounded attempt budget before exact source SHA and tree verification"
       ],
       "breakingDigest": "sha256:eee8d601f94fae3b9d440e467792ca5cb9e7fd0a42cd3ad13a72f3f7087de5e9",
-      "auditDigest": "sha256:95140e9dca7d35ac59ac64690f672a16970d94ee9b1eb925c6f0a171beb4eea3"
+      "auditDigest": "sha256:e54a930d1734e80e233d4c0256cff545f565895740dead47b8918a204d2738f4"
     },
     {
       "contractVersion": 1,
@@ -1382,7 +75,7 @@
         "source, runtime and configuration roots are bound before the build matrix"
       ],
       "breakingDigest": "sha256:f49f1c3e437f82b60852aa232054799abe821987ae81b990ed5f85f604bca572",
-      "auditDigest": "sha256:24d0e268ccfaa1e1f6ed70525d9d59f8d755ba8fd94496aa6eca818563334770"
+      "auditDigest": "sha256:9a2f2cec168ff4734f302368679073971bff60c84d3335372363a9206c74dbc8"
     },
     {
       "contractVersion": 1,
@@ -1390,8 +83,8 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "dev-pr-auto-merge",
       "kind": "workflow",
-      "path": ".github/workflows/dev-pr-auto-merge.yml",
-      "publicRef": "kungfu-systems/buildchain/.github/workflows/dev-pr-auto-merge.yml@v4-alpha",
+      "path": ".github/workflows/public-ops-dev-auto-merge.yml",
+      "publicRef": "kungfu-systems/buildchain/.github/workflows/public-ops-dev-auto-merge.yml@v4-alpha",
       "requiredInputs": [
         "target-branch",
         "expected-pr-number",
@@ -1421,10 +114,8 @@
         "buildchain-repository",
         "buildchain-ref",
         "source-workflow-run-id",
-        "legacy-active-owner-binding-json",
         "delivery-warrant-mode",
         "handoff-workflow-id",
-        "source-workflow-id",
         "assignment-root",
         "initiative-root",
         "source-identity-root",
@@ -1465,7 +156,7 @@
         "durable consumers call the public floating workflow and may route a train or exact runtime only through trusted non-persistent dispatch input"
       ],
       "breakingDigest": "sha256:21b65d0746d2e8b3e8a7df4c6fab295a85c8fd42cc405ec3bc5df5cdab0421f0",
-      "auditDigest": "sha256:d86830e186b6ec56816e875adfebd33d705ae309983cc37106717ce05ec9ccca"
+      "auditDigest": "sha256:54139745756565b11025020269b6c414ad171646008bfb7505e8d19accf50fba"
     },
     {
       "contractVersion": 1,
@@ -1473,8 +164,8 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "release-candidate-promote",
       "kind": "workflow",
-      "path": ".github/workflows/release-candidate-promote.yml",
-      "publicRef": "kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@v4",
+      "path": ".github/workflows/public-release-promote.yml",
+      "publicRef": "kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4",
       "requiredInputs": [
         "channel"
       ],
@@ -1522,9 +213,7 @@
         "github-artifact-attestation-retention-days",
         "buildchain-contract-lock-path",
         "buildchain-contract-drift-issue-mode",
-        "github-release",
-        "github-release-title",
-        "github-release-notes"
+        "github-release"
       ],
       "publishArtifactSchema": {
         "requirementDigest": "optional-before-publish-required-after-publish",
@@ -1564,7 +253,7 @@
         "GitHub Release passport and evidence publication is delegated to promote-buildchain-ref after the semver release transaction completes"
       ],
       "breakingDigest": "sha256:5f10c81d3f80cb417960be682921884639c40b6d875f1a3b1ffae7e652c3f468",
-      "auditDigest": "sha256:357b3e3b3a25efaf6dbf6c82e95265520eb8e41060572b3496c50f4f6c83d89e"
+      "auditDigest": "sha256:1e23e3e5951b70ee8634bcfa33e5f50cce2381e36436b7b956c3036f1bd4d1cd"
     },
     {
       "contractVersion": 1,
@@ -1572,8 +261,8 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "advanced-release-candidate-promote",
       "kind": "workflow",
-      "path": ".github/workflows/.release-candidate-promote.yml",
-      "publicRef": "kungfu-systems/buildchain/.github/workflows/.release-candidate-promote.yml@v4",
+      "path": ".github/workflows/.release-promote.yml",
+      "publicRef": "kungfu-systems/buildchain/.github/workflows/.release-promote.yml@v4",
       "requiredInputs": [
         "channel"
       ],
@@ -1619,16 +308,7 @@
         "resume-from-candidate-run is fail-closed and uses a fresh caller event instead of rerunning a frozen startup graph"
       ],
       "breakingDigest": "sha256:9db8dd07152855d03ff30f9c571438593c689d3e8139fa45431d000f548242f5",
-      "auditDigest": "sha256:b1755a45984fa324ef9eb2a29c73f31ff97560ff3c6e97bf100334e74bd8b76c",
-      "compatibleBreakingDigests": [
-        "sha256:aa30f22e3af0a89841310bdbdc900844dd95a66974db173fa140a71bbd7e82c0"
-      ],
-      "compatibilityProofRoots": [
-        "sha256:36c85ba487be1528e85776d2bc5f766a971d42ac238aec30071945f7d60d9fc5"
-      ],
-      "compatibilityFactRoots": [
-        "sha256:5664da2363bed0b45497215b60763c3be627e568eb3182af5891c23ae3875fbe"
-      ]
+      "auditDigest": "sha256:242b4b358e7da42d3f59abcb4e53460b3047027ec085795ed841792f31425dbf"
     },
     {
       "contractVersion": 1,
@@ -1636,8 +316,8 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "web-surface",
       "kind": "workflow",
-      "path": ".github/workflows/.web-surface.yml",
-      "publicRef": "kungfu-systems/buildchain/.github/workflows/.web-surface.yml@v4",
+      "path": ".github/workflows/public-release-web.yml",
+      "publicRef": "kungfu-systems/buildchain/.github/workflows/public-release-web.yml@v4",
       "requiredInputs": [],
       "requiredOutputs": [
         "buildchain-runtime-sha",
@@ -1646,7 +326,7 @@
         "web-surface-manifest-json"
       ],
       "breakingDefaults": {
-        "buildchainRefDefault": "workflow-shell-ref-or-v3",
+        "buildchainRefDefault": "workflow-shell-ref-or-v4",
         "contractCompatibilityPolicy": "major-compatible",
         "breakingDriftPolicy": "fail-closed-before-build"
       },
@@ -1671,17 +351,8 @@
         "effective channel and preview alias are injected before caller build and verify commands",
         "channel-aware artifact host facts are checked against the deploy plan before adapter side effects"
       ],
-      "breakingDigest": "sha256:27f0cb9c7d97288850d215be8696b323471c41fd1cdf3a2ff3ebf21f62541960",
-      "auditDigest": "sha256:5c006ccc4e465649d971490a8cb40f4601a7a83b6496077e2a1d2a1baf90893b",
-      "compatibleBreakingDigests": [
-        "sha256:da569f90374e878948e3d5160ed9929338ce0572473ca8ee54867b0fe1aaeace"
-      ],
-      "compatibilityProofRoots": [
-        "sha256:3ba66a1e8f8d00ddd45f3f448bcccb15469cbd31f5765d36f61e4cfe7fd0dd41"
-      ],
-      "compatibilityFactRoots": [
-        "sha256:bba5690e6c535b54623d31b3260e59381bdb50161d7bff33b8e42b8b6dd3135a"
-      ]
+      "breakingDigest": "sha256:3bb62548a4e1476d3b5df9deb7bacf6c2e5bb333132a456108ab1572d571b9a8",
+      "auditDigest": "sha256:4ef45e54a24e7876e3bec684c13e395d9e1494c5ea152b5fbcec1378fa934d37"
     },
     {
       "contractVersion": 1,
@@ -1689,8 +360,8 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "auditable-demo",
       "kind": "workflow",
-      "path": ".github/workflows/.auditable-demo.yml",
-      "publicRef": "kungfu-systems/buildchain/.github/workflows/.auditable-demo.yml@v4",
+      "path": ".github/workflows/.build-demo-adapter.yml",
+      "publicRef": "kungfu-systems/buildchain/.github/workflows/.build-demo-adapter.yml@v4",
       "requiredInputs": [
         "source-artifact-name",
         "source-artifact-digest",
@@ -1739,7 +410,7 @@
         "media qualification does not claim browser playback, responsive layout, reduced-motion behavior, accessibility, or production deployment"
       ],
       "breakingDigest": "sha256:425f8d3d1ba205dd6fe35a20f1dc6dad7d7c563872283e3af79fea4d5c475692",
-      "auditDigest": "sha256:33d86446d6cbcce9ba7f386a32db0afbf32e52ff995ddd4b3cf1989831d7f2db"
+      "auditDigest": "sha256:d8f95d689041cf816d82581378668da4e8a405558cfc48daff66340889561d6a"
     },
     {
       "contractVersion": 1,
@@ -1747,8 +418,8 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "declarative-auditable-demo",
       "kind": "workflow",
-      "path": ".github/workflows/.declarative-auditable-demo.yml",
-      "publicRef": "kungfu-systems/buildchain/.github/workflows/.declarative-auditable-demo.yml@v4",
+      "path": ".github/workflows/public-build-demo.yml",
+      "publicRef": "kungfu-systems/buildchain/.github/workflows/public-build-demo.yml@v4",
       "requiredInputs": [
         "binary-artifact-name",
         "binary-artifact-digest",
@@ -1790,7 +461,7 @@
         "identity, compliance, Product System metadata, package metadata, registry history, scans, and generation grant no authority"
       ],
       "breakingDigest": "sha256:0bcba689ab5060e12230db4118895242ecb48677ff581ea0360b1833bdac558c",
-      "auditDigest": "sha256:b00e330b547e6e823f9cf83ac97406ca7c93c688a9e80e63af5bc39cbf840941"
+      "auditDigest": "sha256:9d2114a14538fc745dde3882110cf36318d0deb3a5816d565e8f0b771d344220"
     },
     {
       "contractVersion": 1,
@@ -1798,8 +469,8 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "release-candidate-promote-action",
       "kind": "action",
-      "path": "actions/release-candidate-promote/action.yml",
-      "publicRef": "kungfu-systems/buildchain/actions/release-candidate-promote@v4",
+      "path": "actions/release/promotion/candidate/action.yml",
+      "publicRef": "kungfu-systems/buildchain/actions/release/promotion/candidate@v4",
       "requiredInputs": [
         "token",
         "repository",
@@ -1836,7 +507,7 @@
         "no consumer command, script, shell, checkout, or executable tail hook is accepted"
       ],
       "breakingDigest": "sha256:930a8c3bb97347aea40ab19c4ee1dc29c1f4b75897e19bc0d56da1018fa382c8",
-      "auditDigest": "sha256:4d51bce0908155875a70f8168fc545fe164bd1b6a4146a3de56b4dd7a5c1758c"
+      "auditDigest": "sha256:17c4a1b24c1afb1c5e6b2226489878de5158287c931ef5e5c690221f594fd98f"
     },
     {
       "contractVersion": 1,
@@ -1844,8 +515,8 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "promote-buildchain-ref-action",
       "kind": "action",
-      "path": "actions/promote-buildchain-ref/action.yml",
-      "publicRef": "kungfu-systems/buildchain/actions/promote-buildchain-ref@v4",
+      "path": "actions/release/promotion/ref/action.yml",
+      "publicRef": "kungfu-systems/buildchain/actions/release/promotion/ref@v4",
       "requiredInputs": [
         "token",
         "sha",
@@ -1873,9 +544,7 @@
         "release-passport-evidence-jsons",
         "release-passport-attachment-command",
         "release-passport-github-artifact-attestation-policy-jsons",
-        "github-release",
-        "github-release-title",
-        "github-release-notes"
+        "github-release"
       ],
       "publishArtifactSchema": {
         "requirementDigest": "optional-before-publish-required-after-publish",
@@ -1907,16 +576,7 @@
         "semver GitHub Releases are created or updated only after transaction completion, with prerelease/latest metadata bound to the authoritative publication channel and tag syntax retained as the fallback for ordinary callers"
       ],
       "breakingDigest": "sha256:6147c0a8d5c36bfaa6021871574e1fc28192a3f1b8cfdae4d24ef3059ac1ebda",
-      "auditDigest": "sha256:2422f86979d2ce521a39e0f19db23cac4bd251bc21f701237a0105fb802e453b",
-      "compatibleBreakingDigests": [
-        "sha256:a59f0910e6df842e7699139472e5dd69ac2fdd7f7213bf2cb346d1d622556874"
-      ],
-      "compatibilityProofRoots": [
-        "sha256:e6f93f44a6613a9d6de776ebe8f29b1779b0cd18a24bdf126ec6c1a07770fa75"
-      ],
-      "compatibilityFactRoots": [
-        "sha256:50e5b6e644493ac00d5b1d83a0ec6009f9faaae1bee15e88ee8386c9ec8a775d"
-      ]
+      "auditDigest": "sha256:1b8f8615a114a6f352aeb79a0d25c8ed08b9305f07cabac7a2d4be76cd0ec705"
     },
     {
       "contractVersion": 1,
@@ -1924,8 +584,8 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "macos-credential-island-action",
       "kind": "action",
-      "path": "actions/macos-credential-island/action.yml",
-      "publicRef": "kungfu-systems/buildchain/actions/macos-credential-island@v4",
+      "path": "actions/build/credential/macos-island/action.yml",
+      "publicRef": "kungfu-systems/buildchain/actions/build/credential/macos-island@v4",
       "requiredInputs": [
         "input-root",
         "output-root",
@@ -1980,8 +640,8 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "report-buildchain-issue-action",
       "kind": "action",
-      "path": "actions/report-buildchain-issue/action.yml",
-      "publicRef": "kungfu-systems/buildchain/actions/report-buildchain-issue@v4",
+      "path": "actions/governance/incident/report/action.yml",
+      "publicRef": "kungfu-systems/buildchain/actions/governance/incident/report@v4",
       "requiredInputs": [
         "token"
       ],
@@ -2015,7 +675,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "release-passport-schema",
       "kind": "schema",
-      "path": "packages/core/release-passport.js",
+      "path": "packages/core/release/release-passport.js",
       "requiredInputs": [
         "buildchain.release.json"
       ],
@@ -2031,7 +691,7 @@
         "release-state SHA is recorded as a durable audit entrance"
       ],
       "breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
-      "auditDigest": "sha256:c1648ab8f104b4a929a094126082e7502b9381f3590ecf7acc959eb6d4b20877"
+      "auditDigest": "sha256:baf6dea00db705099a4a04b317f8b1abcb8e515b28b4230dd24195a720feb9b7"
     },
     {
       "contractVersion": 1,
@@ -2039,7 +699,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "kfd-1-release-gate",
       "kind": "schema",
-      "path": "packages/core/kfd-gate.js",
+      "path": "packages/core/adoption/kfd-gate.js",
       "requiredInputs": [
         "KFD-1 witness JSON"
       ],
@@ -2064,7 +724,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "kfd-2-release-trust-passport-audit",
       "kind": "schema",
-      "path": "packages/core/release-passport.js",
+      "path": "packages/core/release/release-passport.js",
       "requiredInputs": [
         "public release claim evidence"
       ],
@@ -2080,7 +740,7 @@
         "prose-only public claims downgrade the release trust passport audit"
       ],
       "breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
-      "auditDigest": "sha256:c1648ab8f104b4a929a094126082e7502b9381f3590ecf7acc959eb6d4b20877"
+      "auditDigest": "sha256:baf6dea00db705099a4a04b317f8b1abcb8e515b28b4230dd24195a720feb9b7"
     },
     {
       "contractVersion": 1,
@@ -2088,7 +748,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "kfd-3-collaboration-interface-release-gate",
       "kind": "schema",
-      "path": "packages/core/kfd-gate.js",
+      "path": "packages/core/adoption/kfd-gate.js",
       "requiredInputs": [
         "KFD-3 prebuild witness JSON",
         "KFD-3 artifact witness JSON or verify command"
@@ -2140,7 +800,7 @@
         "README badge block checks and writes are generated from machine-readable repository facts"
       ],
       "breakingDigest": "sha256:90a73892b2d6c214048448d5f45df75639bdf7b7e8fefd9c596e04b087407bcc",
-      "auditDigest": "sha256:765a3bfba4facef7e6d44c108f4031828ab647049ddb8c3faf23bad640fdce9f"
+      "auditDigest": "sha256:5371a68edf3cf389ba209c285a5a7d3bda11199ced4ad454646200e2494358a3"
     },
     {
       "contractVersion": 1,
@@ -2148,7 +808,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "homebrew-distribution-index",
       "kind": "node-api",
-      "path": "packages/core/homebrew.js",
+      "path": "packages/core/build/homebrew.js",
       "requiredInputs": [
         "upstream release passport"
       ],
@@ -2175,7 +835,7 @@
         "CLI and JavaScript callers use the same Node API implementation"
       ],
       "breakingDigest": "sha256:148c0387ff4cea76433bbde80cd9d77c5aa67e1a29856ced33e4d819366f2213",
-      "auditDigest": "sha256:0e978219bd6fca754d80a616d538d5825b116eec78b65857bbe5063b8c84d933"
+      "auditDigest": "sha256:be87a8f8ba03c6164d93102df8bb214c877e2d1d37e4ced8da096aa909a4e6a6"
     },
     {
       "contractVersion": 1,
@@ -2183,7 +843,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "readme-badge-facts",
       "kind": "node-api",
-      "path": "packages/core/readme-badges.js",
+      "path": "packages/core/web/readme-badges.js",
       "requiredInputs": [
         "repository checkout"
       ],
@@ -2208,7 +868,7 @@
         "CLI and JavaScript callers use the same Node API implementation"
       ],
       "breakingDigest": "sha256:bcd72ad6dfba8013c96f8b2f7b0a307d2e7713972a1219348f0d5ecc493939a0",
-      "auditDigest": "sha256:13914ebabbc92ed49dd842c2aa51cc99d72b0732423c0b53a030c6458a0cd9d8"
+      "auditDigest": "sha256:8e38effc20c682d27fc883f02eb7726ba0c5f5d2219c00d78d893d69679c20c0"
     },
     {
       "contractVersion": 1,
@@ -2230,7 +890,7 @@
         "manual entries carry source file digests so downstream sites and agents can detect stale hand-written documentation"
       ],
       "breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2",
-      "auditDigest": "sha256:5a826b4665d21e46ebaace02497512ea6ddc7d629194d926dd9b755e2d2207b0"
+      "auditDigest": "sha256:fce20a24d00c7d1d839f22d6358853a973d00a8f12105ac1f20caaf2d505055f"
     },
     {
       "contractVersion": 1,
@@ -2252,7 +912,7 @@
         "agents can discover supported Node APIs without importing internal file paths"
       ],
       "breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
-      "auditDigest": "sha256:e78b4ee81f01cac6f2a018618180b4cea99d4dcb663c66cd3155716ea1cf0ad2"
+      "auditDigest": "sha256:c3afcd02862975859e7a6fd31332fbd396765ccf80b19edbea58196b46a134dd"
     },
     {
       "contractVersion": 1,
@@ -2260,7 +920,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "controller:source-check",
       "kind": "controller",
-      "path": ".github/workflows/check.yml",
+      "path": ".github/workflows/public-build-check.yml",
       "requiredInputs": [],
       "requiredOutputs": [
         "controller-plan-json",
@@ -2272,7 +932,7 @@
       "breakingDefaults": {
         "evidenceContract": "buildchain.controller-evidence/v1",
         "descriptorVersion": 1,
-        "workflowPath": ".github/workflows/check.yml",
+        "workflowPath": ".github/workflows/public-build-check.yml",
         "requiredStages": [
           "resolve-runtime",
           "checkout-source",
@@ -2302,14 +962,13 @@
         "source-proof-policy-paths-json",
         "source-proof-required-contexts-json",
         "source-proof-reuse",
-        "universal-request-json",
         "upload-artifacts",
         "working-directory"
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:cdb7dc4e69031dcd2c590789c666ececbad6bcc9cb916ae5b7f4cee4cda6d63e",
-        "registryDigest": "sha256:8dd5d9aa36ae676582a1ccf19d0f1deab351e8cb55a5f15202375aedad954cb6",
+        "digest": "sha256:25fcc6b11e90a837bfc42a0eb7eaaf35eb17d6bc2a183a7e3d8d69a26fd9dbc6",
+        "registryDigest": "sha256:311b1b2bf86bafcac88628749d7ef47e051c6bb1a43afdd89f9ea82ed75dc89d",
         "inputClassifications": {
           "buildchain-ref": {
             "classification": "included",
@@ -2351,10 +1010,6 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "universal-request-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
           "upload-artifacts": {
             "classification": "included",
             "source": "workflow-call-input"
@@ -2371,8 +1026,8 @@
         "redacted input values are never serialized and digest-only input values are never emitted in plaintext",
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
-      "breakingDigest": "sha256:d4bd0f2a1921bfed71a4d9104d45934555bde74a5c189f93ad79f37074c02b87",
-      "auditDigest": "sha256:fbf3549e4f4987733f53ff362bf49d2001d56ae5842bbd1ed343c0fba40d9429"
+      "breakingDigest": "sha256:c90592a71d859c9814e70cb1c8603d8240271e8049fe4e754fe4776b8f1b1a4c",
+      "auditDigest": "sha256:8bbfeed147965b6fe1ac622c703a23d58213ec274c3761eefb8c9dff6482fb27"
     },
     {
       "contractVersion": 1,
@@ -2394,12 +1049,10 @@
         "descriptorVersion": 1,
         "workflowPath": ".github/workflows/.build.yml",
         "requiredStages": [
-          "resolve-runtime",
-          "resolve-source",
+          "plan",
           "build",
-          "signing-finalization",
-          "verify",
-          "aggregate"
+          "sign",
+          "deliver"
         ],
         "capabilities": [
           "source-lock",
@@ -2417,9 +1070,6 @@
         "inputClassificationPolicy": "buildchain-configured-controller-input-policy/v1"
       },
       "optionalInputs": [
-        "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN",
-        "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN",
-        "BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN",
         "BUILDCHAIN_MACOS_CERTIFICATE_P12_BASE64",
         "BUILDCHAIN_MACOS_CERTIFICATE_PASSWORD",
         "BUILDCHAIN_MACOS_NOTARY_API_ISSUER",
@@ -2431,21 +1081,9 @@
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:af4bb7f0d036f1719cf28242f4e50471bb11ba26d90e8af6f2f03d2d293ff9ce",
-        "registryDigest": "sha256:8dd5d9aa36ae676582a1ccf19d0f1deab351e8cb55a5f15202375aedad954cb6",
+        "digest": "sha256:4a6897900f70c1353ea8b6fb3379186d50a4f221d3c000f91436d6785d34d876",
+        "registryDigest": "sha256:311b1b2bf86bafcac88628749d7ef47e051c6bb1a43afdd89f9ea82ed75dc89d",
         "inputClassifications": {
-          "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
-            "classification": "redacted",
-            "source": "workflow-call-secret"
-          },
-          "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN": {
-            "classification": "redacted",
-            "source": "workflow-call-secret"
-          },
-          "BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN": {
-            "classification": "redacted",
-            "source": "workflow-call-secret"
-          },
           "BUILDCHAIN_MACOS_CERTIFICATE_P12_BASE64": {
             "classification": "redacted",
             "source": "workflow-call-secret"
@@ -2486,8 +1124,8 @@
         "redacted input values are never serialized and digest-only input values are never emitted in plaintext",
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
-      "breakingDigest": "sha256:51ef685c6a85a669785d5de240cdda95ed6fe947485d6b2552e2b17d96acdfe1",
-      "auditDigest": "sha256:95140e9dca7d35ac59ac64690f672a16970d94ee9b1eb925c6f0a171beb4eea3"
+      "breakingDigest": "sha256:6adb4adc805a741ec7e54a769c4bb89ef66805bb63ac99dfab06ba11f36d9381",
+      "auditDigest": "sha256:e54a930d1734e80e233d4c0256cff545f565895740dead47b8918a204d2738f4"
     },
     {
       "contractVersion": 1,
@@ -2495,7 +1133,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "controller:shifu-gate-profile-envelope",
       "kind": "controller",
-      "path": ".github/workflows/.gate-profile.yml",
+      "path": ".github/workflows/.build-gate-profile.yml",
       "requiredInputs": [],
       "requiredOutputs": [
         "controller-plan-json",
@@ -2507,7 +1145,7 @@
       "breakingDefaults": {
         "evidenceContract": "buildchain.controller-evidence/v1",
         "descriptorVersion": 1,
-        "workflowPath": ".github/workflows/.gate-profile.yml",
+        "workflowPath": ".github/workflows/.build-gate-profile.yml",
         "requiredStages": [
           "plan",
           "execute",
@@ -2551,14 +1189,13 @@
         "shifu-cache-profile-digest",
         "shifu-cache-profile-ref",
         "source-ref",
-        "universal-request-json",
         "untrusted-policy",
         "working-directory"
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:76c8da1ca1d7c6014cbda3ae3c82b2e28dafda45ddc7d3b4d6fccb6d3fd4853e",
-        "registryDigest": "sha256:8dd5d9aa36ae676582a1ccf19d0f1deab351e8cb55a5f15202375aedad954cb6",
+        "digest": "sha256:73b51ef36d39740f72d0e71f521a411dbcbccc149fa4b34e97fa863be6300bde",
+        "registryDigest": "sha256:311b1b2bf86bafcac88628749d7ef47e051c6bb1a43afdd89f9ea82ed75dc89d",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -2672,10 +1309,6 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "universal-request-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
           "untrusted-policy": {
             "classification": "included",
             "source": "workflow-call-input"
@@ -2692,8 +1325,8 @@
         "redacted input values are never serialized and digest-only input values are never emitted in plaintext",
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
-      "breakingDigest": "sha256:5f1868478b7ccd9fb79aea76bc771289d2ca6bd2dccd1abf57575426f1eae5fb",
-      "auditDigest": "sha256:f5ad2bc08c4092aa27dc257d669a25fe27713c5df90f130ae4e70af983860ace"
+      "breakingDigest": "sha256:93d630270c6db2c6993f0965d44280e0f178159d8d74519c7752a38d5771d02e",
+      "auditDigest": "sha256:41041cd7a99d12a21aab95ba51e8fb1de26f36755b519d166a3748542e22162f"
     },
     {
       "contractVersion": 1,
@@ -2701,7 +1334,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "controller:web-surface",
       "kind": "controller",
-      "path": ".github/workflows/.web-surface.yml",
+      "path": ".github/workflows/public-release-web.yml",
       "requiredInputs": [],
       "requiredOutputs": [
         "controller-plan-json",
@@ -2713,7 +1346,7 @@
       "breakingDefaults": {
         "evidenceContract": "buildchain.controller-evidence/v1",
         "descriptorVersion": 1,
-        "workflowPath": ".github/workflows/.web-surface.yml",
+        "workflowPath": ".github/workflows/public-release-web.yml",
         "requiredStages": [
           "resolve-runtime",
           "plan",
@@ -2756,7 +1389,6 @@
         "production-aws-role-arn",
         "production-environment",
         "production-release-app-client-id",
-        "production-release-app-id",
         "production-release-app-private-key",
         "production-release-branch-channel",
         "production-release-head-prefix",
@@ -2775,14 +1407,13 @@
         "staging-apply",
         "staging-aws-role-arn",
         "staging-environment",
-        "universal-request-json",
         "verify-command",
         "working-directory"
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:8977c5222c4e30ee2d22e6519add1760cbbd917097b57f576d249001918217c8",
-        "registryDigest": "sha256:8dd5d9aa36ae676582a1ccf19d0f1deab351e8cb55a5f15202375aedad954cb6",
+        "digest": "sha256:f203ed816826d4da70d1538c26301ff56389c0f46b0df4e896bf05bce9b6b047",
+        "registryDigest": "sha256:311b1b2bf86bafcac88628749d7ef47e051c6bb1a43afdd89f9ea82ed75dc89d",
         "inputClassifications": {
           "artifact-path": {
             "classification": "digest-only",
@@ -2876,10 +1507,6 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "production-release-app-id": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
           "production-release-app-private-key": {
             "classification": "redacted",
             "source": "workflow-call-secret"
@@ -2906,7 +1533,7 @@
           },
           "production-release-pr-token": {
             "classification": "redacted",
-            "source": "workflow-call-input"
+            "source": "workflow-call-secret"
           },
           "production-source-sha": {
             "classification": "included",
@@ -2952,10 +1579,6 @@
             "classification": "digest-only",
             "source": "workflow-call-input"
           },
-          "universal-request-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
           "verify-command": {
             "classification": "digest-only",
             "source": "workflow-call-input"
@@ -2972,8 +1595,8 @@
         "redacted input values are never serialized and digest-only input values are never emitted in plaintext",
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
-      "breakingDigest": "sha256:f14825324a16b51c2e9ed708ebe64e1932e05b6d5e0866f83aea8439decb4a27",
-      "auditDigest": "sha256:5c006ccc4e465649d971490a8cb40f4601a7a83b6496077e2a1d2a1baf90893b"
+      "breakingDigest": "sha256:ad5e695f42245fdbe53afbef5311ae52f113c9016bec46eaff4476aeb158ec17",
+      "auditDigest": "sha256:4ef45e54a24e7876e3bec684c13e395d9e1494c5ea152b5fbcec1378fa934d37"
     },
     {
       "contractVersion": 1,
@@ -2981,7 +1604,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "controller:publication-artifact",
       "kind": "controller",
-      "path": ".github/workflows/publication-artifact.yml",
+      "path": ".github/workflows/public-build-publication.yml",
       "requiredInputs": [],
       "requiredOutputs": [
         "controller-plan-json",
@@ -2993,7 +1616,7 @@
       "breakingDefaults": {
         "evidenceContract": "buildchain.controller-evidence/v1",
         "descriptorVersion": 1,
-        "workflowPath": ".github/workflows/publication-artifact.yml",
+        "workflowPath": ".github/workflows/public-build-publication.yml",
         "requiredStages": [
           "resolve-runtime",
           "build",
@@ -3034,14 +1657,13 @@
         "toolchain-digest",
         "toolchain-image",
         "toolchain-type",
-        "universal-request-json",
         "verify-command",
         "working-directory"
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:6768756f1a1855ffec164c9745a45805b775741d2ef72f464bfac093efffee7d",
-        "registryDigest": "sha256:8dd5d9aa36ae676582a1ccf19d0f1deab351e8cb55a5f15202375aedad954cb6",
+        "digest": "sha256:7d36457df757062d7dbcc08cff600ec12f76e7177e15916a6d32dd1440dfa2ac",
+        "registryDigest": "sha256:311b1b2bf86bafcac88628749d7ef47e051c6bb1a43afdd89f9ea82ed75dc89d",
         "inputClassifications": {
           "artifact-name": {
             "classification": "included",
@@ -3127,10 +1749,6 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "universal-request-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
           "verify-command": {
             "classification": "digest-only",
             "source": "workflow-call-input"
@@ -3147,8 +1765,8 @@
         "redacted input values are never serialized and digest-only input values are never emitted in plaintext",
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
-      "breakingDigest": "sha256:3f76502666069c2727d23efcfdb08fb80f89ced1955a69e29f11525ae88aca1d",
-      "auditDigest": "sha256:ec5251321f4ed443749fff90b26720933ba145ccc37b018082a708088705b7cd"
+      "breakingDigest": "sha256:64043b583051b8fc5320b5d6f2304120037fb6a14b8448edbf6e91908f719739",
+      "auditDigest": "sha256:8d29eb3c9508d468905885c70249d99106496a96256b72249d3ec39f90b4682d"
     },
     {
       "contractVersion": 1,
@@ -3156,7 +1774,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "controller:paper-release",
       "kind": "controller",
-      "path": ".github/workflows/paper-release.yml",
+      "path": ".github/workflows/public-release-paper.yml",
       "requiredInputs": [],
       "requiredOutputs": [
         "controller-plan-json",
@@ -3168,7 +1786,7 @@
       "breakingDefaults": {
         "evidenceContract": "buildchain.controller-evidence/v1",
         "descriptorVersion": 1,
-        "workflowPath": ".github/workflows/paper-release.yml",
+        "workflowPath": ".github/workflows/public-release-paper.yml",
         "requiredStages": [
           "resolve-runtime",
           "build",
@@ -3193,80 +1811,68 @@
         "inputClassificationPolicy": "buildchain-controller-input-policy/v1"
       },
       "optionalInputs": [
+        "BUILDCHAIN_GENERATED_WRITE_APP_CLIENT_ID",
+        "BUILDCHAIN_GENERATED_WRITE_APP_PRIVATE_KEY",
+        "BUILDCHAIN_GENERATED_WRITE_TOKEN",
+        "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY",
         "artifact-name",
+        "artifact-paths",
         "artifact-retention-days",
         "branch-protection-bypass-apps",
-        "branch-protection-bypass-teams",
-        "branch-protection-bypass-users",
-        "build-command",
-        "buildchain-contract-compatibility-policy",
-        "buildchain-contract-drift-issue-mode",
         "buildchain-contract-lock-path",
         "buildchain-ref",
         "buildchain-repository",
         "dry-run",
         "github-governance-receipt-json",
         "github-release",
-        "github-release-notes",
-        "github-release-title",
-        "node-version",
         "package-name",
-        "publication-admission-json",
-        "publication-control-plane-audit-json",
-        "publication-expected-json",
-        "publication-runner-provenance-json",
-        "publication-used-nonces-json",
         "publish-dist-tag",
-        "publish-package-set-order",
+        "publisher-workflow-path",
         "release-passport-impact-json",
         "release-passport-output-dir",
         "release-passport-product-name",
         "required-status-check",
-        "setup-node",
         "target-ref",
         "target-sha",
-        "toolchain-command",
-        "toolchain-digest",
-        "toolchain-image",
         "toolchain-type",
-        "universal-request-json",
         "verify-command",
-        "working-directory"
+        "working-directory",
+        "candidate-receipt-digest"
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:24602f0ed35bbfb794051921b90686c9eed2434b17fd5da14e9ad95355c01634",
-        "registryDigest": "sha256:8dd5d9aa36ae676582a1ccf19d0f1deab351e8cb55a5f15202375aedad954cb6",
+        "digest": "sha256:a15783c73506eab77c388bd3bbfc7d9c7948cd8f8ce2c05b433f8f1be0dbe781",
+        "registryDigest": "sha256:311b1b2bf86bafcac88628749d7ef47e051c6bb1a43afdd89f9ea82ed75dc89d",
         "inputClassifications": {
-          "artifact-name": {
-            "classification": "included",
-            "source": "workflow-call-input"
+          "BUILDCHAIN_GENERATED_WRITE_APP_CLIENT_ID": {
+            "classification": "redacted",
+            "source": "workflow-call-secret"
           },
-          "artifact-retention-days": {
-            "classification": "included",
-            "source": "workflow-call-input"
+          "BUILDCHAIN_GENERATED_WRITE_APP_PRIVATE_KEY": {
+            "classification": "redacted",
+            "source": "workflow-call-secret"
           },
-          "branch-protection-bypass-apps": {
-            "classification": "included",
-            "source": "workflow-call-input"
+          "BUILDCHAIN_GENERATED_WRITE_TOKEN": {
+            "classification": "redacted",
+            "source": "workflow-call-secret"
           },
-          "branch-protection-bypass-teams": {
-            "classification": "included",
-            "source": "workflow-call-input"
+          "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY": {
+            "classification": "redacted",
+            "source": "workflow-call-secret"
           },
-          "branch-protection-bypass-users": {
+          "artifact-name": {
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "build-command": {
+          "artifact-paths": {
             "classification": "digest-only",
             "source": "workflow-call-input"
           },
-          "buildchain-contract-compatibility-policy": {
+          "artifact-retention-days": {
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "buildchain-contract-drift-issue-mode": {
+          "branch-protection-bypass-apps": {
             "classification": "included",
             "source": "workflow-call-input"
           },
@@ -3294,48 +1900,16 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "github-release-notes": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "github-release-title": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "node-version": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
           "package-name": {
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "publication-admission-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-control-plane-audit-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-expected-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-runner-provenance-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-used-nonces-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
           "publish-dist-tag": {
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "publish-package-set-order": {
-            "classification": "included",
+          "publisher-workflow-path": {
+            "classification": "digest-only",
             "source": "workflow-call-input"
           },
           "release-passport-impact-json": {
@@ -3354,38 +1928,18 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "setup-node": {
+          "target-ref": {
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "target-ref": {
+          "target-sha": {
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "target-sha": {
+          "toolchain-type": {
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "toolchain-command": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "toolchain-digest": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "toolchain-image": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "toolchain-type": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "universal-request-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
           "verify-command": {
             "classification": "digest-only",
             "source": "workflow-call-input"
@@ -3393,6 +1947,10 @@
           "working-directory": {
             "classification": "digest-only",
             "source": "workflow-call-input"
+          },
+          "candidate-receipt-digest": {
+            "classification": "included",
+            "source": "admitted-publication-candidate"
           }
         }
       },
@@ -3402,8 +1960,8 @@
         "redacted input values are never serialized and digest-only input values are never emitted in plaintext",
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
-      "breakingDigest": "sha256:0eb318df455ef9cb737a7c2515a2411b685d34ed0bde7b5f5b173a7a42513114",
-      "auditDigest": "sha256:e16dea163b7862a7dc010b3ebf8a16a6126603d8966d79974e00902eca4e3437"
+      "breakingDigest": "sha256:1175b298251f200a6290c7f46d79f70e5c703279d3a5c5e9776bb18d4e4f7b52",
+      "auditDigest": "sha256:ff415870df14b4d9689945aaa091760fa7c5b67adb18a9961694032d86ba6173"
     },
     {
       "contractVersion": 1,
@@ -3411,7 +1969,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "controller:release-candidate-promotion",
       "kind": "controller",
-      "path": ".github/workflows/.release-candidate-promote.yml",
+      "path": ".github/workflows/.release-promote.yml",
       "requiredInputs": [],
       "requiredOutputs": [
         "controller-plan-json",
@@ -3423,7 +1981,7 @@
       "breakingDefaults": {
         "evidenceContract": "buildchain.controller-evidence/v1",
         "descriptorVersion": 1,
-        "workflowPath": ".github/workflows/.release-candidate-promote.yml",
+        "workflowPath": ".github/workflows/.release-promote.yml",
         "requiredStages": [
           "preflight",
           "admit-release-candidate",
@@ -3455,136 +2013,15 @@
         "BUILDCHAIN_PUBLICATION_COMMIT_SIGNING_KEY",
         "BUILDCHAIN_PUBLICATION_COMMIT_TOKEN",
         "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY",
-        "allow-repository",
-        "artifact-name",
-        "artifact-patterns",
-        "branch-protection-bypass-apps",
-        "branch-protection-bypass-teams",
-        "branch-protection-bypass-users",
-        "buildchain-alpha-contract-lock-path",
-        "buildchain-contract-compatibility-policy",
-        "buildchain-contract-drift-issue-mode",
-        "buildchain-contract-lock-path",
-        "buildchain-expected-channel",
-        "buildchain-expected-major",
         "buildchain-issue-app-id",
         "buildchain-issue-app-private-key",
         "buildchain-issue-token",
-        "buildchain-ref",
-        "buildchain-repository",
-        "buildchain-stable-contract-lock-path",
-        "channel",
-        "declarative-release-tail",
-        "dry-run",
-        "github-artifact-attestation-environment",
-        "github-artifact-attestation-policy-json",
-        "github-artifact-attestation-retention-days",
-        "github-governance-receipt-json",
-        "github-release",
-        "github-release-notes",
-        "github-release-payload-patterns",
-        "github-release-title",
-        "package-manager",
-        "promotion-contract-lock-digest",
-        "promotion-contract-lock-path",
-        "promotion-override-used",
-        "promotion-publication-channel",
-        "promotion-router-ref",
-        "promotion-router-sha",
-        "promotion-runtime-authorization-json",
-        "promotion-runtime-authorization-root",
-        "promotion-runtime-ref",
-        "promotion-runtime-sha",
-        "promotion-shell-ref",
-        "promotion-shell-sha",
-        "promotion-target-ref",
-        "provider-failure-after-capability",
-        "publication-admission-json",
-        "publication-authority-workflow-path",
-        "publication-auto-admission",
-        "publication-auto-no-gate",
-        "publication-commit-command",
-        "publication-commit-evidence-path",
-        "publication-consumer-predicate-id",
-        "publication-consumer-qualification-command",
-        "publication-consumer-qualification-controller-sha",
-        "publication-control-plane-audit-json",
-        "publication-expected-json",
-        "publication-gate-aggregate-json",
-        "publication-gate-command",
-        "publication-gate-controller-sha",
-        "publication-package-name",
-        "publication-product",
-        "publication-publisher-workflow-path",
-        "publication-runner-provenance-json",
-        "publication-target",
-        "publication-used-nonces-json",
-        "publication-used-qualification-nonces-json",
-        "publish-artifact-kind",
-        "publish-command",
-        "publish-dist-tag",
-        "publish-mode",
-        "publish-package-main",
-        "publish-package-set-order",
-        "publish-rematerialize-on-resume",
-        "publish-required-artifacts-json",
-        "publish-target",
-        "publish-transaction-override",
-        "release-activation-command",
-        "release-activation-receipt-set-path",
-        "release-candidate-family-assignment-id",
-        "release-candidate-family-evidence-required",
-        "release-candidate-family-evidence-root",
-        "release-candidate-family-initiative-id",
-        "release-candidate-wait-seconds",
-        "release-candidate-workflow-file",
-        "release-candidate-workflow-name",
-        "release-passport",
-        "release-passport-adopter-delivery-json",
-        "release-passport-attachment-command",
-        "release-passport-buildchain-self-kfd",
-        "release-passport-evidence-command",
-        "release-passport-evidence-jsons",
-        "release-passport-evidence-path",
-        "release-passport-impact-json",
-        "release-passport-invariant-passport-command",
-        "release-passport-invariant-passport-jsons",
-        "release-passport-kfd-1-witness-jsons",
-        "release-passport-kfd-2-claim-jsons",
-        "release-passport-kfd-3-artifact-verify-command",
-        "release-passport-kfd-3-artifact-witness-jsons",
-        "release-passport-kfd-3-prebuild-witness-jsons",
-        "release-passport-kfd-adopter-manifest-gate-json",
-        "release-passport-kfd-adopter-manifest-json",
-        "release-passport-kfd-product-gate-jsons",
-        "release-passport-kfd-support-matrix-json",
-        "release-passport-output-dir",
-        "release-passport-platform-manifest-paths",
-        "release-passport-product-name",
-        "release-passport-v4-runtime-resume-evidence-json",
-        "release-propagation-config-path",
-        "required-artifact-count",
-        "required-status-check",
-        "resume-buildchain-runtime-sha",
-        "resume-candidate-repository",
-        "resume-candidate-run-id",
-        "resume-expected-candidate-root",
-        "resume-expected-candidate-runtime-sha",
-        "resume-expected-source-tree",
-        "resume-expected-workflow-file",
-        "resume-expected-workflow-name",
-        "resume-transaction-id",
-        "runner-preset",
-        "standalone-binary-distribution",
-        "target-ref",
-        "target-sha",
-        "trusted-publishing",
-        "universal-request-json"
+        "request-json"
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:13a70da4c3234954c2acf5ff96c077e00b06297316bb2287ce28661ce1e62ef1",
-        "registryDigest": "sha256:8dd5d9aa36ae676582a1ccf19d0f1deab351e8cb55a5f15202375aedad954cb6",
+        "digest": "sha256:4ac0eaf0f2cddf04deef9d4264667a9258c30a394eea3709201cbeabc433f044",
+        "registryDigest": "sha256:311b1b2bf86bafcac88628749d7ef47e051c6bb1a43afdd89f9ea82ed75dc89d",
         "inputClassifications": {
           "BUILDCHAIN_ISSUE_APP_ID": {
             "classification": "redacted",
@@ -3614,54 +2051,6 @@
             "classification": "redacted",
             "source": "workflow-call-secret"
           },
-          "allow-repository": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "artifact-name": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "artifact-patterns": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "branch-protection-bypass-apps": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "branch-protection-bypass-teams": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "branch-protection-bypass-users": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "buildchain-alpha-contract-lock-path": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "buildchain-contract-compatibility-policy": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "buildchain-contract-drift-issue-mode": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "buildchain-contract-lock-path": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "buildchain-expected-channel": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "buildchain-expected-major": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
           "buildchain-issue-app-id": {
             "classification": "redacted",
             "source": "workflow-call-secret"
@@ -3674,443 +2063,7 @@
             "classification": "redacted",
             "source": "workflow-call-secret"
           },
-          "buildchain-ref": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "buildchain-repository": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "buildchain-stable-contract-lock-path": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "channel": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "declarative-release-tail": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "dry-run": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "github-artifact-attestation-environment": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "github-artifact-attestation-policy-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "github-artifact-attestation-retention-days": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "github-governance-receipt-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "github-release": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "github-release-notes": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "github-release-payload-patterns": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "github-release-title": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "package-manager": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "promotion-contract-lock-digest": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "promotion-contract-lock-path": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "promotion-override-used": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "promotion-publication-channel": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "promotion-router-ref": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "promotion-router-sha": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "promotion-runtime-authorization-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "promotion-runtime-authorization-root": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "promotion-runtime-ref": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "promotion-runtime-sha": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "promotion-shell-ref": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "promotion-shell-sha": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "promotion-target-ref": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "provider-failure-after-capability": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publication-admission-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-authority-workflow-path": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-auto-admission": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publication-auto-no-gate": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publication-commit-command": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-commit-evidence-path": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-consumer-predicate-id": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publication-consumer-qualification-command": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-consumer-qualification-controller-sha": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publication-control-plane-audit-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-expected-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-gate-aggregate-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-gate-command": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-gate-controller-sha": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publication-package-name": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publication-product": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publication-publisher-workflow-path": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-runner-provenance-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-target": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publication-used-nonces-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publication-used-qualification-nonces-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publish-artifact-kind": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publish-command": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publish-dist-tag": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publish-mode": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publish-package-main": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publish-package-set-order": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publish-rematerialize-on-resume": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publish-required-artifacts-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "publish-target": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "publish-transaction-override": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-activation-command": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-activation-receipt-set-path": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-candidate-family-assignment-id": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-candidate-family-evidence-required": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-candidate-family-evidence-root": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-candidate-family-initiative-id": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-candidate-wait-seconds": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-candidate-workflow-file": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-candidate-workflow-name": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-passport": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-passport-adopter-delivery-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-attachment-command": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-buildchain-self-kfd": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-passport-evidence-command": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-evidence-jsons": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-evidence-path": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-impact-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-invariant-passport-command": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-invariant-passport-jsons": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-kfd-1-witness-jsons": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-kfd-2-claim-jsons": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-kfd-3-artifact-verify-command": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-kfd-3-artifact-witness-jsons": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-kfd-3-prebuild-witness-jsons": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-kfd-adopter-manifest-gate-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-kfd-adopter-manifest-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-kfd-product-gate-jsons": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-kfd-support-matrix-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-output-dir": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-passport-platform-manifest-paths": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-passport-product-name": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "release-passport-v4-runtime-resume-evidence-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "release-propagation-config-path": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "required-artifact-count": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "required-status-check": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "resume-buildchain-runtime-sha": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "resume-candidate-repository": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "resume-candidate-run-id": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "resume-expected-candidate-root": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "resume-expected-candidate-runtime-sha": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "resume-expected-source-tree": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "resume-expected-workflow-file": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "resume-expected-workflow-name": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "resume-transaction-id": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "runner-preset": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
-          "standalone-binary-distribution": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "target-ref": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "target-sha": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "trusted-publishing": {
-            "classification": "included",
-            "source": "workflow-call-input"
-          },
-          "universal-request-json": {
+          "request-json": {
             "classification": "digest-only",
             "source": "workflow-call-input"
           }
@@ -4122,8 +2075,8 @@
         "redacted input values are never serialized and digest-only input values are never emitted in plaintext",
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
-      "breakingDigest": "sha256:015d8de793adbd4c539416be7d7512e18cc92097e629b0203fa06d2c183e98bd",
-      "auditDigest": "sha256:b1755a45984fa324ef9eb2a29c73f31ff97560ff3c6e97bf100334e74bd8b76c"
+      "breakingDigest": "sha256:884bc7c4dccbc561b1d22a20cc5f7f50172c9691775aa2b84179e036a138cb20",
+      "auditDigest": "sha256:242b4b358e7da42d3f59abcb4e53460b3047027ec085795ed841792f31425dbf"
     },
     {
       "contractVersion": 1,
@@ -4131,7 +2084,7 @@
       "additiveChanges": "optional inputs, optional outputs, diagnostics, and documentation may be added within the same major line",
       "id": "controller:release-propagation",
       "kind": "controller",
-      "path": ".github/workflows/release-propagation.yml",
+      "path": ".github/workflows/public-release-propagation.yml",
       "requiredInputs": [],
       "requiredOutputs": [
         "controller-plan-json",
@@ -4143,7 +2096,7 @@
       "breakingDefaults": {
         "evidenceContract": "buildchain.controller-evidence/v1",
         "descriptorVersion": 1,
-        "workflowPath": ".github/workflows/release-propagation.yml",
+        "workflowPath": ".github/workflows/public-release-propagation.yml",
         "requiredStages": [
           "resolve-runtime",
           "plan",
@@ -4183,13 +2136,12 @@
         "propagation-token",
         "refresh-managed-readme-badges",
         "source-node",
-        "universal-request-json",
         "upstream-release-json"
       ],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:e5aca2f9ebac530742cae8aa1e5959179bc3eca29bba384dd8f7cdf5821f5648",
-        "registryDigest": "sha256:8dd5d9aa36ae676582a1ccf19d0f1deab351e8cb55a5f15202375aedad954cb6",
+        "digest": "sha256:6752a7a6973aa8edb28fb7abf1c1629d686933995851dc60b5e460fb9551f9b9",
+        "registryDigest": "sha256:311b1b2bf86bafcac88628749d7ef47e051c6bb1a43afdd89f9ea82ed75dc89d",
         "inputClassifications": {
           "agent-work-context-json": {
             "classification": "digest-only",
@@ -4267,10 +2219,6 @@
             "classification": "included",
             "source": "workflow-call-input"
           },
-          "universal-request-json": {
-            "classification": "digest-only",
-            "source": "workflow-call-input"
-          },
           "upstream-release-json": {
             "classification": "digest-only",
             "source": "workflow-call-input"
@@ -4283,17 +2231,8 @@
         "redacted input values are never serialized and digest-only input values are never emitted in plaintext",
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
-      "breakingDigest": "sha256:b873ceb65618972bea615afcb9c616c138ce834b3246ec7237ef87c1618d68bd",
-      "auditDigest": "sha256:5fc657f586de6f5a9ffa9e0be61c22b6f99318026d718bd518a04a40197faf97",
-      "compatibleBreakingDigests": [
-        "sha256:d7a1f15990ce8bd13149474888232c7d4451dd2a49bebf4d4ce1336695da430e"
-      ],
-      "compatibilityProofRoots": [
-        "sha256:8b98ff903d3abd8d9a9b6a0b250efd8fdf6fd5d4127aa4d0d0c4a5b3db87f353"
-      ],
-      "compatibilityFactRoots": [
-        "sha256:f6e89a46bb73e93583477eeb3bc3a8bd1f36bdafd040777fb3a999460191b360"
-      ]
+      "breakingDigest": "sha256:63cbc80ea892431ee4780c358a60f4357ba95553c632dd86e1d62c18e375ecca",
+      "auditDigest": "sha256:ad2088db2b783c7a3b5b3fea358ddd64971bda209f19d7f12f2d7cc4f18c6a60"
     },
     {
       "contractVersion": 1,
@@ -4313,7 +2252,7 @@
       "breakingDefaults": {
         "evidenceContract": "buildchain.controller-evidence/v1",
         "descriptorVersion": 1,
-        "workflowPath": ".github/workflows/binary-distribution.yml",
+        "workflowPath": ".github/workflows/self-build-binary-distribution.yml",
         "requiredStages": [
           "resolve-runtime",
           "build",
@@ -4336,8 +2275,8 @@
       "optionalInputs": [],
       "controllerDescriptor": {
         "contract": "buildchain.controller-descriptor/v1",
-        "digest": "sha256:79fcf0b55df11186a5096aca13eaa965768ce7ee84b1e979eb1463f0b3f4e05e",
-        "registryDigest": "sha256:8dd5d9aa36ae676582a1ccf19d0f1deab351e8cb55a5f15202375aedad954cb6",
+        "digest": "sha256:2e6bee5214be76d3f2b8088e23f3a61a79124696f2d69ec3cc86d793d2306ead",
+        "registryDigest": "sha256:311b1b2bf86bafcac88628749d7ef47e051c6bb1a43afdd89f9ea82ed75dc89d",
         "inputClassifications": {}
       },
       "guarantees": [
@@ -4346,13 +2285,13 @@
         "redacted input values are never serialized and digest-only input values are never emitted in plaintext",
         "missing receipts are non-qualifying and must not be represented as a successful controller run"
       ],
-      "breakingDigest": "sha256:7c18fdd3df180db9e1f043a2286ef3f02fae60b84e42b76cd50da9cfeb77883d",
-      "auditDigest": "sha256:f53bd6542ba64b6f8840ea3f85a4d172dce1b8439b7f45a4503cf4bfa0eae15e"
+      "breakingDigest": "sha256:c8dc1280b05fa2fc1e976292d7a3d31d6dfb99ce1a814834462e634b38671859",
+      "auditDigest": "sha256:5a8aec2be3f7a6b67b3a70bbd3e7d7816e7c60ddf67576c26abfedb641795f69"
     }
   ],
-  "compatibilityFactRegistryRoot": "sha256:232fd556a2372b29db586bbc2acbdfce6464a68c93902797ff527f75f7816c42",
-  "compatibilityFactCutRoot": "sha256:f61b975d4a96c921cc4bd37fb3ed9a0596b47004fe34dc7219979d697e3707f9",
-  "compatibilityProofRegistryRoot": "sha256:b7194b811e4d3af2df4390bc4d1731e16a86215bd64ee18cb630dd5492f4fb63",
-  "compatibilityDigest": "sha256:e398528e54509c05569630ffcc98a04d41e831479ab921df65943b49bf077719",
-  "contractDigest": "sha256:8fcc598c161f44a5e12cc277f59df709d611863c92e6abf26f8c7a36bf0a38dd"
+  "compatibilityFactRegistryRoot": "sha256:ea8f656c9fd74aa2d2fb9b7807e7daa39a708f6a7cd37ab7d154eac7be5605a6",
+  "compatibilityFactCutRoot": "sha256:58f33e498596505a26b6fc3c7ae5acef847ff699eee6c7e17a7b318a40bdf0d6",
+  "compatibilityProofRegistryRoot": "sha256:2f6477405c7891b754b33ad6515d55618bd320e7cdc59330d7cc645e17201e72",
+  "compatibilityDigest": "sha256:5cfe9b904da70a3a7194868aaef1f1b11957d8e0158ebb77a524f2ea7005083b",
+  "contractDigest": "sha256:c39174b294496d49bfdef4d18286b859574a110c81bd72d2c755653f095b183c"
 }