@kungfu-tech/buildchain 4.0.9 → 4.1.0-alpha.0

package/dist/site/controller-registry.json

@@ -8,8 +8,8 @@
       "id": "source-check",
       "version": 1,
       "workflow": {
-        "id": "check",
-        "path": ".github/workflows/check.yml"
+        "id": "public-build-check",
+        "path": ".github/workflows/public-build-check.yml"
       },
       "inputs": {
         "buildchain-ref": {
@@ -52,10 +52,6 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "universal-request-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
         "upload-artifacts": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -98,7 +94,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:cdb7dc4e69031dcd2c590789c666ececbad6bcc9cb916ae5b7f4cee4cda6d63e"
+      "digest": "sha256:25fcc6b11e90a837bfc42a0eb7eaaf35eb17d6bc2a183a7e3d8d69a26fd9dbc6"
     },
     {
       "schemaVersion": 1,
@@ -110,18 +106,6 @@
         "path": ".github/workflows/.build.yml"
       },
       "inputs": {
-        "BUILDCHAIN_ARTIFACT_RELAY_S3_DOWNLOAD_ROLE_ARN": {
-          "classification": "redacted",
-          "source": "workflow-call-secret"
-        },
-        "BUILDCHAIN_ARTIFACT_RELAY_S3_ROLE_ARN": {
-          "classification": "redacted",
-          "source": "workflow-call-secret"
-        },
-        "BUILDCHAIN_ARTIFACT_RELAY_S3_UPLOAD_ROLE_ARN": {
-          "classification": "redacted",
-          "source": "workflow-call-secret"
-        },
         "BUILDCHAIN_MACOS_CERTIFICATE_P12_BASE64": {
           "classification": "redacted",
           "source": "workflow-call-secret"
@@ -158,15 +142,11 @@
       "expected": {
         "stages": [
           {
-            "id": "resolve-runtime",
-            "required": true
-          },
-          {
-            "id": "resolve-source",
+            "id": "plan",
             "required": true
           },
           {
-            "id": "anchored-release-preflight",
+            "id": "install",
             "required": false
           },
           {
@@ -174,19 +154,19 @@
             "required": true
           },
           {
-            "id": "signing-finalization",
-            "required": true
-          },
-          {
-            "id": "credential-island",
+            "id": "verify",
             "required": false
           },
           {
-            "id": "verify",
+            "id": "sign",
             "required": true
           },
           {
-            "id": "aggregate",
+            "id": "attest",
+            "required": false
+          },
+          {
+            "id": "deliver",
             "required": true
           }
         ],
@@ -204,7 +184,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:af4bb7f0d036f1719cf28242f4e50471bb11ba26d90e8af6f2f03d2d293ff9ce"
+      "digest": "sha256:4a6897900f70c1353ea8b6fb3379186d50a4f221d3c000f91436d6785d34d876"
     },
     {
       "schemaVersion": 1,
@@ -212,8 +192,8 @@
       "id": "shifu-gate-profile-envelope",
       "version": 1,
       "workflow": {
-        "id": ".gate-profile",
-        "path": ".github/workflows/.gate-profile.yml"
+        "id": ".build-gate-profile",
+        "path": ".github/workflows/.build-gate-profile.yml"
       },
       "inputs": {
         "artifact-name": {
@@ -328,10 +308,6 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "universal-request-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
         "untrusted-policy": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -365,7 +341,7 @@
         ]
       },
       "semanticBoundary": "References the Shifu aggregate digest and status without copying project Gate identifiers or Gate policy.",
-      "digest": "sha256:76c8da1ca1d7c6014cbda3ae3c82b2e28dafda45ddc7d3b4d6fccb6d3fd4853e"
+      "digest": "sha256:73b51ef36d39740f72d0e71f521a411dbcbccc149fa4b34e97fa863be6300bde"
     },
     {
       "schemaVersion": 1,
@@ -373,8 +349,8 @@
       "id": "web-surface",
       "version": 1,
       "workflow": {
-        "id": ".web-surface",
-        "path": ".github/workflows/.web-surface.yml"
+        "id": "public-release-web",
+        "path": ".github/workflows/public-release-web.yml"
       },
       "inputs": {
         "artifact-path": {
@@ -469,10 +445,6 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "production-release-app-id": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
         "production-release-app-private-key": {
           "classification": "redacted",
           "source": "workflow-call-secret"
@@ -499,7 +471,7 @@
         },
         "production-release-pr-token": {
           "classification": "redacted",
-          "source": "workflow-call-input"
+          "source": "workflow-call-secret"
         },
         "production-source-sha": {
           "classification": "included",
@@ -545,10 +517,6 @@
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
-        "universal-request-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
         "verify-command": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -601,7 +569,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:8977c5222c4e30ee2d22e6519add1760cbbd917097b57f576d249001918217c8"
+      "digest": "sha256:f203ed816826d4da70d1538c26301ff56389c0f46b0df4e896bf05bce9b6b047"
     },
     {
       "schemaVersion": 1,
@@ -609,8 +577,8 @@
       "id": "publication-artifact",
       "version": 1,
       "workflow": {
-        "id": "publication-artifact",
-        "path": ".github/workflows/publication-artifact.yml"
+        "id": "public-build-publication",
+        "path": ".github/workflows/public-build-publication.yml"
       },
       "inputs": {
         "artifact-name": {
@@ -697,10 +665,6 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "universal-request-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
         "verify-command": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -744,7 +708,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:6768756f1a1855ffec164c9745a45805b775741d2ef72f464bfac093efffee7d"
+      "digest": "sha256:7d36457df757062d7dbcc08cff600ec12f76e7177e15916a6d32dd1440dfa2ac"
     },
     {
       "schemaVersion": 1,
@@ -752,39 +716,39 @@
       "id": "paper-release",
       "version": 1,
       "workflow": {
-        "id": "paper-release",
-        "path": ".github/workflows/paper-release.yml"
+        "id": "public-release-paper",
+        "path": ".github/workflows/public-release-paper.yml"
       },
       "inputs": {
-        "artifact-name": {
-          "classification": "included",
-          "source": "workflow-call-input"
+        "BUILDCHAIN_GENERATED_WRITE_APP_CLIENT_ID": {
+          "classification": "redacted",
+          "source": "workflow-call-secret"
         },
-        "artifact-retention-days": {
-          "classification": "included",
-          "source": "workflow-call-input"
+        "BUILDCHAIN_GENERATED_WRITE_APP_PRIVATE_KEY": {
+          "classification": "redacted",
+          "source": "workflow-call-secret"
         },
-        "branch-protection-bypass-apps": {
-          "classification": "included",
-          "source": "workflow-call-input"
+        "BUILDCHAIN_GENERATED_WRITE_TOKEN": {
+          "classification": "redacted",
+          "source": "workflow-call-secret"
         },
-        "branch-protection-bypass-teams": {
-          "classification": "included",
-          "source": "workflow-call-input"
+        "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY": {
+          "classification": "redacted",
+          "source": "workflow-call-secret"
         },
-        "branch-protection-bypass-users": {
+        "artifact-name": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "build-command": {
+        "artifact-paths": {
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
-        "buildchain-contract-compatibility-policy": {
+        "artifact-retention-days": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "buildchain-contract-drift-issue-mode": {
+        "branch-protection-bypass-apps": {
           "classification": "included",
           "source": "workflow-call-input"
         },
@@ -812,48 +776,16 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "github-release-notes": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "github-release-title": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "node-version": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
         "package-name": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "publication-admission-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-control-plane-audit-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-expected-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-runner-provenance-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-used-nonces-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
         "publish-dist-tag": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "publish-package-set-order": {
-          "classification": "included",
+        "publisher-workflow-path": {
+          "classification": "digest-only",
           "source": "workflow-call-input"
         },
         "release-passport-impact-json": {
@@ -872,10 +804,6 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "setup-node": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
         "target-ref": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -884,26 +812,10 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "toolchain-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "toolchain-digest": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "toolchain-image": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
         "toolchain-type": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "universal-request-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
         "verify-command": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -911,6 +823,10 @@
         "working-directory": {
           "classification": "digest-only",
           "source": "workflow-call-input"
+        },
+        "candidate-receipt-digest": {
+          "classification": "included",
+          "source": "admitted-publication-candidate"
         }
       },
       "expected": {
@@ -961,7 +877,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:24602f0ed35bbfb794051921b90686c9eed2434b17fd5da14e9ad95355c01634"
+      "digest": "sha256:a15783c73506eab77c388bd3bbfc7d9c7948cd8f8ce2c05b433f8f1be0dbe781"
     },
     {
       "schemaVersion": 1,
@@ -969,8 +885,8 @@
       "id": "release-candidate-promotion",
       "version": 1,
       "workflow": {
-        "id": ".release-candidate-promote",
-        "path": ".github/workflows/.release-candidate-promote.yml"
+        "id": ".release-promote",
+        "path": ".github/workflows/.release-promote.yml"
       },
       "inputs": {
         "BUILDCHAIN_ISSUE_APP_ID": {
@@ -1001,54 +917,6 @@
           "classification": "redacted",
           "source": "workflow-call-secret"
         },
-        "allow-repository": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "artifact-name": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "artifact-patterns": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "branch-protection-bypass-apps": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "branch-protection-bypass-teams": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "branch-protection-bypass-users": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "buildchain-alpha-contract-lock-path": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "buildchain-contract-compatibility-policy": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "buildchain-contract-drift-issue-mode": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "buildchain-contract-lock-path": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "buildchain-expected-channel": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "buildchain-expected-major": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
         "buildchain-issue-app-id": {
           "classification": "redacted",
           "source": "workflow-call-secret"
@@ -1061,6 +929,72 @@
           "classification": "redacted",
           "source": "workflow-call-secret"
         },
+        "request-json": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        }
+      },
+      "expected": {
+        "stages": [
+          {
+            "id": "preflight",
+            "required": true
+          },
+          {
+            "id": "admit-release-candidate",
+            "required": true
+          },
+          {
+            "id": "publication-authority",
+            "required": true
+          },
+          {
+            "id": "publish",
+            "required": true
+          },
+          {
+            "id": "passport",
+            "required": true
+          },
+          {
+            "id": "aggregate",
+            "required": true
+          }
+        ],
+        "capabilities": [
+          "promotion-preflight",
+          "artifact-admission",
+          "publication-authority",
+          "publish-transaction",
+          "release-passport"
+        ],
+        "evidence": [
+          "release-candidate-passport",
+          "publish-evidence",
+          "release-passport",
+          "controller-receipt"
+        ]
+      },
+      "digest": "sha256:4ac0eaf0f2cddf04deef9d4264667a9258c30a394eea3709201cbeabc433f044"
+    },
+    {
+      "schemaVersion": 1,
+      "contract": "buildchain.controller-descriptor/v1",
+      "id": "release-propagation",
+      "version": 1,
+      "workflow": {
+        "id": "public-release-propagation",
+        "path": ".github/workflows/public-release-propagation.yml"
+      },
+      "inputs": {
+        "agent-work-context-json": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
+        "agent-work-mode": {
+          "classification": "included",
+          "source": "workflow-call-input"
+        },
         "buildchain-ref": {
           "classification": "included",
           "source": "workflow-call-input"
@@ -1069,572 +1003,66 @@
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "buildchain-stable-contract-lock-path": {
-          "classification": "digest-only",
+        "downstream-base-ref": {
+          "classification": "included",
           "source": "workflow-call-input"
         },
-        "channel": {
+        "downstream-branch": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "declarative-release-tail": {
+        "downstream-prepare-command": {
+          "classification": "digest-only",
+          "source": "workflow-call-input"
+        },
+        "downstream-repository": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "dry-run": {
+        "downstream-target": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "github-artifact-attestation-environment": {
+        "downstream-update-command": {
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
-        "github-artifact-attestation-policy-json": {
+        "downstream-verify-command": {
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
-        "github-artifact-attestation-retention-days": {
+        "dry-run": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "github-governance-receipt-json": {
+        "graph-json": {
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
-        "github-release": {
-          "classification": "included",
+        "lock-path": {
+          "classification": "digest-only",
           "source": "workflow-call-input"
         },
-        "github-release-notes": {
+        "pr-body": {
           "classification": "digest-only",
           "source": "workflow-call-input"
         },
-        "github-release-payload-patterns": {
+        "pr-title": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "github-release-title": {
-          "classification": "included",
-          "source": "workflow-call-input"
+        "propagation-token": {
+          "classification": "redacted",
+          "source": "workflow-call-secret"
         },
-        "package-manager": {
+        "refresh-managed-readme-badges": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "promotion-contract-lock-digest": {
+        "source-node": {
           "classification": "included",
           "source": "workflow-call-input"
         },
-        "promotion-contract-lock-path": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "promotion-override-used": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "promotion-publication-channel": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "promotion-router-ref": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "promotion-router-sha": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "promotion-runtime-authorization-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "promotion-runtime-authorization-root": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "promotion-runtime-ref": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "promotion-runtime-sha": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "promotion-shell-ref": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "promotion-shell-sha": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "promotion-target-ref": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "provider-failure-after-capability": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publication-admission-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-authority-workflow-path": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-auto-admission": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publication-auto-no-gate": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publication-commit-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-commit-evidence-path": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-consumer-predicate-id": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publication-consumer-qualification-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-consumer-qualification-controller-sha": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publication-control-plane-audit-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-expected-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-gate-aggregate-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-gate-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-gate-controller-sha": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publication-package-name": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publication-product": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publication-publisher-workflow-path": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-runner-provenance-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-target": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publication-used-nonces-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publication-used-qualification-nonces-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publish-artifact-kind": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publish-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publish-dist-tag": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publish-mode": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publish-package-main": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publish-package-set-order": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publish-rematerialize-on-resume": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publish-required-artifacts-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "publish-target": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "publish-transaction-override": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-activation-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-activation-receipt-set-path": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-candidate-family-assignment-id": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-candidate-family-evidence-required": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-candidate-family-evidence-root": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-candidate-family-initiative-id": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-candidate-wait-seconds": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-candidate-workflow-file": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-candidate-workflow-name": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-passport": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-passport-adopter-delivery-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-attachment-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-buildchain-self-kfd": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-passport-evidence-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-evidence-jsons": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-evidence-path": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-impact-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-invariant-passport-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-invariant-passport-jsons": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-kfd-1-witness-jsons": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-kfd-2-claim-jsons": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-kfd-3-artifact-verify-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-kfd-3-artifact-witness-jsons": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-kfd-3-prebuild-witness-jsons": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-kfd-adopter-manifest-gate-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-kfd-adopter-manifest-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-kfd-product-gate-jsons": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-kfd-support-matrix-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-output-dir": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-passport-platform-manifest-paths": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-passport-product-name": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "release-passport-v4-runtime-resume-evidence-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "release-propagation-config-path": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "required-artifact-count": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "required-status-check": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "resume-buildchain-runtime-sha": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "resume-candidate-repository": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "resume-candidate-run-id": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "resume-expected-candidate-root": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "resume-expected-candidate-runtime-sha": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "resume-expected-source-tree": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "resume-expected-workflow-file": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "resume-expected-workflow-name": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "resume-transaction-id": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "runner-preset": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "standalone-binary-distribution": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "target-ref": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "target-sha": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "trusted-publishing": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "universal-request-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        }
-      },
-      "expected": {
-        "stages": [
-          {
-            "id": "preflight",
-            "required": true
-          },
-          {
-            "id": "admit-release-candidate",
-            "required": true
-          },
-          {
-            "id": "publication-authority",
-            "required": true
-          },
-          {
-            "id": "publish",
-            "required": true
-          },
-          {
-            "id": "passport",
-            "required": true
-          },
-          {
-            "id": "aggregate",
-            "required": true
-          }
-        ],
-        "capabilities": [
-          "promotion-preflight",
-          "artifact-admission",
-          "publication-authority",
-          "publish-transaction",
-          "release-passport"
-        ],
-        "evidence": [
-          "release-candidate-passport",
-          "publish-evidence",
-          "release-passport",
-          "controller-receipt"
-        ]
-      },
-      "digest": "sha256:13a70da4c3234954c2acf5ff96c077e00b06297316bb2287ce28661ce1e62ef1"
-    },
-    {
-      "schemaVersion": 1,
-      "contract": "buildchain.controller-descriptor/v1",
-      "id": "release-propagation",
-      "version": 1,
-      "workflow": {
-        "id": "release-propagation",
-        "path": ".github/workflows/release-propagation.yml"
-      },
-      "inputs": {
-        "agent-work-context-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "agent-work-mode": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "buildchain-ref": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "buildchain-repository": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "downstream-base-ref": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "downstream-branch": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "downstream-prepare-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "downstream-repository": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "downstream-target": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "downstream-update-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "downstream-verify-command": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "dry-run": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "graph-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "lock-path": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "pr-body": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
-        "pr-title": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "propagation-token": {
-          "classification": "redacted",
-          "source": "workflow-call-secret"
-        },
-        "refresh-managed-readme-badges": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "source-node": {
-          "classification": "included",
-          "source": "workflow-call-input"
-        },
-        "universal-request-json": {
-          "classification": "digest-only",
-          "source": "workflow-call-input"
-        },
         "upstream-release-json": {
           "classification": "digest-only",
           "source": "workflow-call-input"
@@ -1691,7 +1119,7 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:e5aca2f9ebac530742cae8aa1e5959179bc3eca29bba384dd8f7cdf5821f5648"
+      "digest": "sha256:6752a7a6973aa8edb28fb7abf1c1629d686933995851dc60b5e460fb9551f9b9"
     },
     {
       "schemaVersion": 1,
@@ -1700,8 +1128,7 @@
       "version": 1,
       "workflow": {
         "id": "self-build-binary-distribution",
-        "path": ".github/workflows/self-build-binary-distribution.yml",
-        "contractPath": ".github/workflows/binary-distribution.yml"
+        "path": ".github/workflows/self-build-binary-distribution.yml"
       },
       "inputs": {},
       "expected": {
@@ -1738,8 +1165,8 @@
           "controller-receipt"
         ]
       },
-      "digest": "sha256:79fcf0b55df11186a5096aca13eaa965768ce7ee84b1e979eb1463f0b3f4e05e"
+      "digest": "sha256:2e6bee5214be76d3f2b8088e23f3a61a79124696f2d69ec3cc86d793d2306ead"
     }
   ],
-  "digest": "sha256:8dd5d9aa36ae676582a1ccf19d0f1deab351e8cb55a5f15202375aedad954cb6"
+  "digest": "sha256:311b1b2bf86bafcac88628749d7ef47e051c6bb1a43afdd89f9ea82ed75dc89d"
 }