@kungfu-tech/buildchain 4.0.9 → 4.1.0-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1536) hide show
  1. package/AGENTS.md +35 -5
  2. package/CONTRIBUTING.md +18 -29
  3. package/README.md +55 -29
  4. package/actions/build/artifact/prepare-attestation/README.md +26 -0
  5. package/actions/build/artifact/seal-attestation/README.md +26 -0
  6. package/actions/build/lifecycle/run/README.md +71 -0
  7. package/actions/build/lifecycle/validate/README.md +52 -0
  8. package/actions/governance/incident/report/README.md +107 -0
  9. package/actions/release/promotion/ref/README.md +92 -0
  10. package/architecture/action-taxonomy.json +543 -0
  11. package/architecture/agent-change-map.md +2061 -431
  12. package/architecture/build-environments.json +18 -2
  13. package/architecture/build-orchestration.json +58 -9
  14. package/architecture/capability-state-machine-manifest.json +15 -16
  15. package/architecture/capability-state-machine-manifest.schema.json +2 -2
  16. package/architecture/ci-lane-change-budget.json +2105 -225
  17. package/architecture/code-layout.json +55 -0
  18. package/architecture/core-mechanisms.json +1160 -0
  19. package/architecture/cross-platform-adopter-qualification.json +4 -14
  20. package/architecture/delivery-authority-parity.json +46 -46
  21. package/architecture/delivery-warrant-shadow-bootstrap-plan.json +4 -4
  22. package/architecture/delivery-warrant-shadow-bootstrap-plan.md +3 -3
  23. package/architecture/dev-delivery-orchestration.json +175 -0
  24. package/architecture/floating-consumer-policy.json +15 -11
  25. package/architecture/history/warrant-shadow-observations.json +900 -0
  26. package/architecture/internal-capabilities.json +2332 -358
  27. package/architecture/layered-transition.json +32 -0
  28. package/architecture/maintainability-debt.json +883 -1840
  29. package/architecture/maintainability-policy.json +63 -1438
  30. package/architecture/partial-mutation-recovery-qualification.json +4 -4
  31. package/architecture/platform-stage-checkpoints.json +1 -1
  32. package/architecture/promotion-job-topology.json +85 -0
  33. package/architecture/provider-operation-journal-contract.json +5 -5
  34. package/architecture/publication-facade-patches.json +5 -5
  35. package/architecture/release-activation-shadow-domain.json +4 -4
  36. package/architecture/release-invocation-fixtures.json +31 -16
  37. package/architecture/release-tail-contract-inventory.json +1 -9
  38. package/architecture/release-tail-contract.json +273 -0
  39. package/architecture/release-topology.json +245 -215
  40. package/architecture/runtime-ref-resume-authority.json +1 -1
  41. package/architecture/runtime-semantic-closure.json +27 -17
  42. package/architecture/rust-libnode-bridge-evaluation.json +1 -1
  43. package/architecture/rust-wasm-production-authority.json +7 -7
  44. package/architecture/stable-publication-fence.json +4 -4
  45. package/architecture/stage-capsule-qualification.json +4 -4
  46. package/architecture/stage-capsule-resume-planner.json +1 -1
  47. package/architecture/stage-capsule-store-contract.json +2 -2
  48. package/architecture/tail-reseal-parity.json +22 -17
  49. package/architecture/universal-workflow-bootstrap.json +121 -102
  50. package/architecture/universal-workflow-fault-campaign.json +11 -11
  51. package/architecture/universal-workflow-train-admission.json +44 -8
  52. package/architecture/workflow-taxonomy.json +81 -798
  53. package/bin/buildchain.mjs +2 -1820
  54. package/contracts/buildchain-v2-residuals-v1.json +2 -138
  55. package/contracts/dev-delivery-authority-v2.schema.json +509 -231
  56. package/contracts/fixtures/v4-tail-reseal-v1/valid.json +1 -1
  57. package/contracts/promotion-invocation-v1.schema.json +547 -0
  58. package/contracts/promotion-request-v1.schema.json +472 -0
  59. package/contracts/v4-adopter-delivery-v1.schema.json +1 -1
  60. package/contracts/v4-compatibility-facts-v1.schema.json +4 -4
  61. package/contracts/v4-floating-consumer-policy-receipt-v1.schema.json +124 -21
  62. package/contracts/v4-release-invocation-v1.schema.json +1 -1
  63. package/crates/buildchain-host-bridge/src/main.rs +1 -1
  64. package/dist/site/buildchain-contract.json +145 -2206
  65. package/dist/site/buildchain-site.json +350 -326
  66. package/dist/site/capability-registry.json +17 -17
  67. package/dist/site/cli-registry.json +354 -365
  68. package/dist/site/controller-registry.json +142 -715
  69. package/dist/site/kfd-claims.json +5871 -3138
  70. package/dist/site/kfd-upstream-aggregate.json +1 -1
  71. package/dist/site/manual-registry.json +26 -26
  72. package/dist/site/node-api-registry.json +12561 -16063
  73. package/dist/site/page-registry.json +312 -292
  74. package/dist/site/public-surface-audit.json +3844 -3601
  75. package/dist/site/publication-authority-registry.json +295 -1117
  76. package/dist/site/publication-registry.json +5 -5
  77. package/dist/site/release-provenance.json +80 -90
  78. package/dist/site/schemas/dev-delivery-authority-v2.schema.json +509 -231
  79. package/dist/site/schemas/v4-adopter-delivery-v1.schema.json +1 -1
  80. package/dist/site/schemas/v4-compatibility-facts-v1.schema.json +4 -4
  81. package/dist/site/site-manifest.json +31 -31
  82. package/dist/site/workflow-registry.json +7274 -5321
  83. package/docs/MAP.md +8 -6
  84. package/docs/auditable-demo.md +4 -4
  85. package/docs/aws-us-elastic-runner-burst-plane.md +5 -5
  86. package/docs/binary-distribution.md +2 -2
  87. package/docs/bootstrap-recovery.md +50 -0
  88. package/docs/cli-reference.md +2 -35
  89. package/docs/cli.md +6 -6
  90. package/docs/code-organization.md +131 -0
  91. package/docs/consumer-issue-reporting.md +1 -1
  92. package/docs/dev-alpha-candidate-patrol.md +1 -1
  93. package/docs/dev-delivery-orchestration.md +116 -0
  94. package/docs/dev-delivery-qualification-landing-adr.md +1 -1
  95. package/docs/dev-delivery-warrant.md +5 -2
  96. package/docs/dev-qualification-patrol.md +1 -1
  97. package/docs/engineering-housekeeper.md +3 -3
  98. package/docs/github-artifact-attestation.md +3 -3
  99. package/docs/kfd-support.md +1 -1
  100. package/docs/lifecycle-protocol.md +8 -8
  101. package/docs/migration-inventory.md +6 -6
  102. package/docs/next-development-transition.md +4 -4
  103. package/docs/node-api-reference.md +2273 -2644
  104. package/docs/ownership.md +3 -3
  105. package/docs/publication-artifacts.md +5 -5
  106. package/docs/publication-authority.md +4 -4
  107. package/docs/publish-transaction.md +10 -10
  108. package/docs/release-activation-transaction.md +1 -1
  109. package/docs/release-candidate.md +4 -4
  110. package/docs/release-governance.md +25 -25
  111. package/docs/release-passport.md +2 -2
  112. package/docs/release-promotion-request.md +64 -0
  113. package/docs/release-propagation.md +19 -18
  114. package/docs/release-tail-contract.md +40 -76
  115. package/docs/release-tail-provider-plane.md +17 -26
  116. package/docs/reusable-build-surface.md +34 -21
  117. package/docs/shifu-gate-profiles.md +4 -4
  118. package/docs/site-bundle-contract.md +1 -1
  119. package/docs/stable-candidate-patrol.md +1 -1
  120. package/docs/v4-adopter-delivery.md +50 -121
  121. package/docs/v4-canonical-contracts.md +3 -3
  122. package/docs/v4-compatibility-facts.md +1 -1
  123. package/docs/v4-declarative-release-tail-migration.md +24 -29
  124. package/docs/v4-production-release.md +16 -1
  125. package/docs/v4-publication-rehearsal.md +1 -1
  126. package/docs/v4-runtime-ref-resume-authority.md +2 -2
  127. package/docs/v4-rust-wasm-production-authority.md +2 -2
  128. package/docs/v4-stage-capsule.md +1 -1
  129. package/docs/web-surface-deployments.md +22 -28
  130. package/docs/workflow-catalog.md +82 -127
  131. package/docs/workflow-path-migration.md +1 -5
  132. package/package.json +99 -102
  133. package/packages/core/README.md +41 -164
  134. package/packages/core/adoption/adopter-delivery-parity.js +219 -0
  135. package/packages/core/adoption/adopter-delivery.js +210 -0
  136. package/packages/core/adoption/buildchain-kfd-claims.js +733 -0
  137. package/packages/core/adoption/cli/delivery.mjs +39 -0
  138. package/packages/core/adoption/cli/dispatch.mjs +5 -0
  139. package/packages/core/adoption/cli/kfd-aggregate.mjs +20 -0
  140. package/packages/core/adoption/cli/kfd-hub.mjs +53 -0
  141. package/packages/core/adoption/cli/kfd-migrate-layout.mjs +27 -0
  142. package/packages/core/adoption/cli/kfd-schema.mjs +55 -0
  143. package/packages/core/adoption/cli/kfd-status.mjs +21 -0
  144. package/packages/core/adoption/cli/kfd-upstream.mjs +69 -0
  145. package/packages/core/adoption/cli/kfd.mjs +63 -0
  146. package/packages/core/adoption/cli/output.mjs +18 -0
  147. package/packages/core/adoption/cli/product-gate.mjs +110 -0
  148. package/packages/core/adoption/cli/project.mjs +38 -0
  149. package/packages/core/adoption/cli/standards.mjs +282 -0
  150. package/packages/core/adoption/cli/support.mjs +101 -0
  151. package/packages/core/adoption/cli/surface-register.mjs +172 -0
  152. package/packages/core/adoption/commands/cross-platform-adopter-qualification.mjs +28 -0
  153. package/packages/core/adoption/commands/init-repo.mjs +518 -0
  154. package/packages/core/adoption/cross-platform-adopter-qualification.js +217 -0
  155. package/packages/core/adoption/kfd-agent-hub.js +496 -0
  156. package/packages/core/adoption/kfd.js +966 -0
  157. package/packages/core/adoption/kfd2-product-claims.js +454 -0
  158. package/packages/core/adoption/kfd3-surface-register.js +924 -0
  159. package/packages/core/adoption/qualification/actions.js +106 -0
  160. package/packages/core/adoption/qualification/admission.js +96 -0
  161. package/packages/core/adoption/qualification/aggregate.js +10 -0
  162. package/packages/core/adoption/qualification/io.js +51 -0
  163. package/packages/core/adoption/qualification/platform.js +120 -0
  164. package/packages/core/build/anchored-version-material.js +281 -0
  165. package/packages/core/build/artifact/actions.js +47 -0
  166. package/packages/core/build/artifact/attestation.js +166 -0
  167. package/packages/core/build/artifact/contracts.js +168 -0
  168. package/packages/core/build/artifact/coordinates.js +113 -0
  169. package/packages/core/build/artifact/credential-transport.js +68 -0
  170. package/packages/core/build/artifact/expectations.js +94 -0
  171. package/packages/core/build/artifact/files.js +14 -0
  172. package/packages/core/build/artifact/naming.js +65 -0
  173. package/packages/core/build/artifact/services.js +17 -0
  174. package/packages/core/build/artifact/store.js +119 -0
  175. package/packages/core/build/artifact/summary.js +20 -0
  176. package/packages/core/build/artifact/transfer-policy.js +34 -0
  177. package/packages/core/build/artifact/transport.js +112 -0
  178. package/packages/core/build/artifact/upload.js +178 -0
  179. package/packages/core/build/artifact-coordinate-action.js +46 -0
  180. package/packages/core/build/artifact-coordinate.js +58 -0
  181. package/packages/core/build/artifact-integrity.js +10 -0
  182. package/packages/core/build/artifact-passport.js +842 -0
  183. package/packages/core/build/artifact-verification-envelope.js +500 -0
  184. package/packages/core/build/binary/actions.js +77 -0
  185. package/packages/core/build/binary/checksums.js +33 -0
  186. package/packages/core/build/binary/distribution.js +271 -0
  187. package/packages/core/build/binary-publication-dispatch.js +49 -0
  188. package/packages/core/build/build-facts.js +518 -0
  189. package/packages/core/build/cache/compiler-evidence.js +287 -0
  190. package/packages/core/build/cli/cache.mjs +77 -0
  191. package/packages/core/build/cli/facts.mjs +120 -0
  192. package/packages/core/build/cli/homebrew.mjs +101 -0
  193. package/packages/core/build/cli/lifecycle.mjs +66 -0
  194. package/packages/core/build/commands/aggregate-build-summary.mjs +75 -0
  195. package/packages/core/build/commands/anchored-version-material.mjs +42 -0
  196. package/packages/core/build/commands/artifact-signing-controller.mjs +112 -0
  197. package/packages/core/build/commands/artifact-signing-delegation.mjs +34 -0
  198. package/packages/core/build/commands/auditable-demo-platform.mjs +77 -0
  199. package/packages/core/build/commands/auditable-demo-transport-smoke.mjs +24 -0
  200. package/packages/core/build/commands/auditable-demo.mjs +63 -0
  201. package/packages/core/build/commands/compiler-cache-evidence.mjs +39 -0
  202. package/packages/core/build/commands/dispatch-artifact-signing-authority.mjs +19 -0
  203. package/packages/core/build/commands/import-artifact-signing-results.mjs +10 -0
  204. package/packages/core/build/commands/lifecycle-substage-evidence.mjs +42 -0
  205. package/packages/core/build/commands/resolve-artifact-coordinates.mjs +58 -0
  206. package/packages/core/build/commands/resolve-artifact-transfer-mode.mjs +54 -0
  207. package/packages/core/build/commands/resolve-build-configuration.mjs +23 -0
  208. package/packages/core/build/commands/resolve-build-contract.mjs +94 -0
  209. package/packages/core/build/commands/run-candidate-body-prefix-renderer.mjs +24 -0
  210. package/packages/core/build/commands/run-lifecycle.mjs +56 -0
  211. package/packages/core/build/commands/seal-artifact-signing-requests.mjs +10 -0
  212. package/packages/core/build/commands/seal-macos-credential-input.mjs +4 -0
  213. package/packages/core/build/commands/shifu-gate-profile.mjs +43 -0
  214. package/packages/core/build/commands/source-verification-evidence.mjs +14 -0
  215. package/packages/core/build/commands/stage-capsule-qualification.mjs +79 -0
  216. package/packages/core/build/commands/validate-package-manager-contract.mjs +24 -0
  217. package/packages/core/build/credential/seal-input.js +109 -0
  218. package/packages/core/build/demo/action-context.js +25 -0
  219. package/packages/core/build/demo/adapter-actions.js +35 -0
  220. package/packages/core/build/demo/adapter-transactions.js +66 -0
  221. package/packages/core/build/demo/adapter.js +272 -0
  222. package/packages/core/build/demo/binary-action.js +29 -0
  223. package/packages/core/build/demo/bundle-verification.js +211 -0
  224. package/packages/core/build/demo/capture-adaptation.js +37 -0
  225. package/packages/core/build/demo/capture.js +377 -0
  226. package/packages/core/build/demo/collection-actions.js +62 -0
  227. package/packages/core/build/demo/collection-containers.js +136 -0
  228. package/packages/core/build/demo/collection-context.js +40 -0
  229. package/packages/core/build/demo/collection.js +129 -0
  230. package/packages/core/build/demo/composition.js +319 -0
  231. package/packages/core/build/demo/container.js +113 -0
  232. package/packages/core/build/demo/gate.js +297 -0
  233. package/packages/core/build/demo/inspection-worker.js +4 -0
  234. package/packages/core/build/demo/io.js +220 -0
  235. package/packages/core/build/demo/materialization.js +350 -0
  236. package/packages/core/build/demo/media-bundle.js +112 -0
  237. package/packages/core/build/demo/media-inspection.js +332 -0
  238. package/packages/core/build/demo/media-profile.js +399 -0
  239. package/packages/core/build/demo/media-qualification-action.js +37 -0
  240. package/packages/core/build/demo/media-qualification.js +117 -0
  241. package/packages/core/build/demo/presentation.js +222 -0
  242. package/packages/core/build/demo/publication.js +118 -0
  243. package/packages/core/build/demo/renderer-evidence.js +193 -0
  244. package/packages/core/build/demo/renditions.js +398 -0
  245. package/packages/core/build/demo/scenario.js +493 -0
  246. package/packages/core/build/demo/schema.js +278 -0
  247. package/packages/core/build/demo/transport-smoke.js +149 -0
  248. package/packages/core/build/demo/values.js +137 -0
  249. package/packages/core/build/environment/action.js +17 -0
  250. package/packages/core/build/environment/provision.js +121 -0
  251. package/packages/core/build/gate/actions.js +99 -0
  252. package/packages/core/build/gate/aggregate.js +21 -0
  253. package/packages/core/build/gate/commands.js +66 -0
  254. package/packages/core/build/gate/controller.js +43 -0
  255. package/packages/core/build/gate/environment.js +18 -0
  256. package/packages/core/build/gate/execution.js +88 -0
  257. package/packages/core/build/gate/files.js +46 -0
  258. package/packages/core/build/gate/outputs.js +31 -0
  259. package/packages/core/build/gate/plan.js +61 -0
  260. package/packages/core/build/github-artifact-attestation.js +642 -0
  261. package/packages/core/build/github-attestation/action.js +26 -0
  262. package/packages/core/build/github-attestation/admission.js +34 -0
  263. package/packages/core/build/github-attestation/transaction.js +83 -0
  264. package/packages/core/build/homebrew.js +416 -0
  265. package/packages/core/build/lifecycle/action.js +65 -0
  266. package/packages/core/build/lifecycle/artifacts.js +123 -0
  267. package/packages/core/build/lifecycle/context.js +202 -0
  268. package/packages/core/build/lifecycle/diagnostics.js +254 -0
  269. package/packages/core/build/lifecycle/errors.js +44 -0
  270. package/packages/core/build/lifecycle/execution.js +221 -0
  271. package/packages/core/build/lifecycle/files.js +61 -0
  272. package/packages/core/build/lifecycle/manifest.js +107 -0
  273. package/packages/core/build/lifecycle/sampling.js +209 -0
  274. package/packages/core/build/lifecycle/stage-action.js +18 -0
  275. package/packages/core/build/lifecycle/stage.js +143 -0
  276. package/packages/core/build/lifecycle/substage-evidence.js +232 -0
  277. package/packages/core/build/lifecycle/transaction.js +13 -0
  278. package/packages/core/build/macos-credential-island/action.js +704 -0
  279. package/packages/core/build/macos-credential-island/cleanup.js +48 -0
  280. package/packages/core/build/macos-credential-island/dmg-assembly.js +443 -0
  281. package/packages/core/build/macos-credential-island/lib.js +816 -0
  282. package/packages/core/build/package-manager.js +315 -0
  283. package/packages/core/build/plan/action-context.js +30 -0
  284. package/packages/core/build/plan/action.js +79 -0
  285. package/packages/core/build/plan/admission.js +93 -0
  286. package/packages/core/build/plan/configuration.js +196 -0
  287. package/packages/core/build/plan/environment.js +18 -0
  288. package/packages/core/build/plan/identity.js +49 -0
  289. package/packages/core/build/plan/lifecycle.js +38 -0
  290. package/packages/core/build/plan/matrices.js +58 -0
  291. package/packages/core/build/plan/resolve.js +76 -0
  292. package/packages/core/build/plan/runners.js +48 -0
  293. package/packages/core/build/plan/source.js +58 -0
  294. package/packages/core/build/plan/stage-order.js +10 -0
  295. package/packages/core/build/plan/values.js +10 -0
  296. package/packages/core/build/platform-stage-checkpoints.js +471 -0
  297. package/packages/core/build/release-evidence-bundle.js +156 -0
  298. package/packages/core/build/runner/matrix.js +266 -0
  299. package/packages/core/build/runner/presets.js +115 -0
  300. package/packages/core/build/signing/actions.js +54 -0
  301. package/packages/core/build/signing/authority-actions.js +147 -0
  302. package/packages/core/build/signing/authority-transaction.js +82 -0
  303. package/packages/core/build/signing/control.js +223 -0
  304. package/packages/core/build/signing/controller-transaction.js +110 -0
  305. package/packages/core/build/signing/credential-transaction.js +66 -0
  306. package/packages/core/build/signing/delegation.js +281 -0
  307. package/packages/core/build/signing/detached.js +170 -0
  308. package/packages/core/build/signing/dispatch.js +307 -0
  309. package/packages/core/build/signing/environment.js +13 -0
  310. package/packages/core/build/signing/files.js +53 -0
  311. package/packages/core/build/signing/import-results.js +151 -0
  312. package/packages/core/build/signing/intake.js +113 -0
  313. package/packages/core/build/signing/materialize.js +54 -0
  314. package/packages/core/build/signing/merge-results.js +82 -0
  315. package/packages/core/build/signing/native-result.js +244 -0
  316. package/packages/core/build/signing/prepare.js +44 -0
  317. package/packages/core/build/signing/request.js +519 -0
  318. package/packages/core/build/signing/seal-requests.js +402 -0
  319. package/packages/core/build/signing/transaction.js +158 -0
  320. package/packages/core/build/signing/verify-results.js +118 -0
  321. package/packages/core/build/source/checkout-action.js +16 -0
  322. package/packages/core/build/source/controller-actions.js +52 -0
  323. package/packages/core/build/source/controller.js +182 -0
  324. package/packages/core/build/source/lifecycle-action.js +32 -0
  325. package/packages/core/build/source/lifecycle.js +134 -0
  326. package/packages/core/build/source/proof-actions.js +57 -0
  327. package/packages/core/build/source/proof-lookup.js +82 -0
  328. package/packages/core/build/source/proof.js +134 -0
  329. package/packages/core/build/source-admission.js +35 -0
  330. package/packages/core/build/stage-capsule/actions.js +53 -0
  331. package/packages/core/build/stage-capsule/campaign/aggregate.js +51 -0
  332. package/packages/core/build/stage-capsule/campaign/context.js +51 -0
  333. package/packages/core/build/stage-capsule/campaign/resume.js +240 -0
  334. package/packages/core/build/stage-capsule/campaign/run.js +47 -0
  335. package/packages/core/build/stage-capsule/campaign/seed.js +124 -0
  336. package/packages/core/build/stage-capsule/campaign/worker.js +17 -0
  337. package/packages/core/build/stage-capsule/canary.js +62 -0
  338. package/packages/core/build/stage-capsule/rehearsal/checkpoint.js +110 -0
  339. package/packages/core/build/stage-capsule/rehearsal/files.js +36 -0
  340. package/packages/core/build/stage-capsule/rehearsal/macos-tail.js +104 -0
  341. package/packages/core/build/stage-capsule/rehearsal/resume.js +38 -0
  342. package/packages/core/build/stage-capsule/rehearsal/run.js +46 -0
  343. package/packages/core/build/stage-capsule/rehearsal/verify.js +56 -0
  344. package/packages/core/build/stage-capsule/rehearsal/worker.js +11 -0
  345. package/packages/core/build/stage-capsule-local-store.js +428 -0
  346. package/packages/core/build/stage-capsule-qualification-campaign.js +511 -0
  347. package/packages/core/build/stage-capsule-qualification.js +455 -0
  348. package/packages/core/build/stage-capsule-resume-planner.js +397 -0
  349. package/packages/core/build/stage-capsule-store.js +404 -0
  350. package/packages/core/build/stage-capsule.js +319 -0
  351. package/packages/core/build/standalone/build.js +266 -0
  352. package/packages/core/build/standalone/bundle.js +69 -0
  353. package/packages/core/build/standalone/identity.js +47 -0
  354. package/packages/core/build/standalone/logging.js +72 -0
  355. package/packages/core/build/standalone/process.js +50 -0
  356. package/packages/core/build/summary/action.js +33 -0
  357. package/packages/core/build/summary/aggregation.js +120 -0
  358. package/packages/core/build/summary/artifacts.js +165 -0
  359. package/packages/core/build/summary/controller-receipt.js +50 -0
  360. package/packages/core/build/summary/execution.js +39 -0
  361. package/packages/core/build/summary/finalization.js +133 -0
  362. package/packages/core/build/summary/payloads.js +80 -0
  363. package/packages/core/build/validate-config/action.js +58 -0
  364. package/packages/core/build/validate-config/lib.js +42 -0
  365. package/packages/core/build/verification/actions.js +54 -0
  366. package/packages/core/build/verification/discovery.js +115 -0
  367. package/packages/core/build/verification/identity.js +123 -0
  368. package/packages/core/build/verification/proof.js +8 -0
  369. package/packages/core/build/verification/repository.js +4 -0
  370. package/packages/core/build/verification/runner.js +69 -0
  371. package/packages/core/build/verification/source.js +169 -0
  372. package/packages/core/consumer/buildchain-config.js +1825 -0
  373. package/packages/core/consumer/channel-selection.js +211 -0
  374. package/packages/core/consumer/cli/infrastructure.mjs +6 -0
  375. package/packages/core/consumer/commands/buildchain-channel-router.mjs +81 -0
  376. package/packages/core/consumer/commands/consumer-policy.mjs +229 -0
  377. package/packages/core/consumer/floating-consumer-evidence.js +341 -0
  378. package/packages/core/consumer/floating-consumer-policy.js +596 -0
  379. package/packages/core/consumer/invocation-selector.js +4 -0
  380. package/packages/core/consumer/policy-admission.js +103 -0
  381. package/packages/core/consumer/policy-scan.js +33 -0
  382. package/packages/core/consumer/runtime-selector-persistence.js +291 -0
  383. package/packages/core/consumer/workflow-definition-authority.js +64 -0
  384. package/packages/core/contracts/action-inventory.js +78 -0
  385. package/packages/core/contracts/action-taxonomy.js +46 -0
  386. package/packages/core/contracts/buildchain-contract.js +1038 -0
  387. package/packages/core/contracts/canonical-contracts.js +239 -0
  388. package/packages/core/contracts/cli/context.mjs +28 -0
  389. package/packages/core/contracts/cli/introspection.mjs +47 -0
  390. package/packages/core/contracts/cli/options.mjs +85 -0
  391. package/packages/core/contracts/cli-reference.js +192 -0
  392. package/packages/core/contracts/commands/buildchain-contract-lock.mjs +120 -0
  393. package/packages/core/contracts/commands/workflow-call-contract.mjs +133 -0
  394. package/packages/core/contracts/public-surface-audit.js +274 -0
  395. package/packages/core/contracts/public-surface-cli.js +134 -0
  396. package/packages/core/contracts/runtime-contract-action.js +48 -0
  397. package/packages/core/contracts/runtime-contract-inspection.js +115 -0
  398. package/packages/core/contracts/structured-values.js +29 -0
  399. package/packages/core/contracts/workflow-yaml-contract.js +373 -0
  400. package/packages/core/dev-delivery/admission/gh-cli-client.js +110 -0
  401. package/packages/core/dev-delivery/admission/github-client.js +274 -0
  402. package/packages/core/dev-delivery/admission/policy.js +177 -0
  403. package/packages/core/dev-delivery/admission/queue.js +554 -0
  404. package/packages/core/dev-delivery/admission/readiness.js +222 -0
  405. package/packages/core/dev-delivery/admission/report.js +27 -0
  406. package/packages/core/dev-delivery/admission/request.js +34 -0
  407. package/packages/core/dev-delivery/admission/targeted.js +375 -0
  408. package/packages/core/dev-delivery/admission/transaction.js +47 -0
  409. package/packages/core/dev-delivery/buildchain-delivery-bootstrap.js +240 -0
  410. package/packages/core/dev-delivery/buildchain-delivery-infrastructure.js +164 -0
  411. package/packages/core/dev-delivery/buildchain-delivery-self-dogfood.js +395 -0
  412. package/packages/core/dev-delivery/candidate/admission-actions.js +34 -0
  413. package/packages/core/dev-delivery/candidate/admission.js +172 -0
  414. package/packages/core/dev-delivery/candidate/coordinates.js +46 -0
  415. package/packages/core/dev-delivery/candidate/evidence.js +20 -0
  416. package/packages/core/dev-delivery/candidate/request.js +39 -0
  417. package/packages/core/dev-delivery/candidate/reservation-action.js +21 -0
  418. package/packages/core/dev-delivery/candidate/reservation.js +98 -0
  419. package/packages/core/dev-delivery/candidate/source-paths.js +102 -0
  420. package/packages/core/dev-delivery/candidate/submission.js +41 -0
  421. package/packages/core/dev-delivery/cli/dispatch.mjs +54 -0
  422. package/packages/core/dev-delivery/commands/dev-delivery-authority-command-adapters.mjs +193 -0
  423. package/packages/core/dev-delivery/commands/dev-delivery-authority-provider.mjs +28 -0
  424. package/packages/core/dev-delivery/commands/dev-delivery-authority.mjs +454 -0
  425. package/packages/core/dev-delivery/commands/dev-delivery-process-boundary.mjs +93 -0
  426. package/packages/core/dev-delivery/commands/dev-delivery-proof.mjs +258 -0
  427. package/packages/core/dev-delivery/commands/dev-delivery-provider-heartbeat.mjs +76 -0
  428. package/packages/core/dev-delivery/commands/dev-delivery-request.sh +160 -0
  429. package/packages/core/dev-delivery/commands/dev-delivery-source-proof-reuse.mjs +128 -0
  430. package/packages/core/dev-delivery/commands/dev-delivery-two-phase.mjs +180 -0
  431. package/packages/core/dev-delivery/commands/dev-delivery-warrant-options.mjs +283 -0
  432. package/packages/core/dev-delivery/commands/dev-delivery-warrant.mjs +65 -0
  433. package/packages/core/dev-delivery/commands/dev-merge-queue.mjs +98 -0
  434. package/packages/core/dev-delivery/commands/dev-pr-auto-merge.mjs +111 -0
  435. package/packages/core/dev-delivery/commands/dev-pr-delivery-warrant.mjs +467 -0
  436. package/packages/core/dev-delivery/commands/dev-pr-prequeue-guard.mjs +381 -0
  437. package/packages/core/dev-delivery/commands/dev-qualification-patrol.mjs +21 -0
  438. package/packages/core/dev-delivery/delivery-warrant-fixture-runner.js +375 -0
  439. package/packages/core/dev-delivery/delivery-warrant-read-candidate.js +281 -0
  440. package/packages/core/dev-delivery/delivery-warrant-semantic-diff-gate.js +351 -0
  441. package/packages/core/dev-delivery/delivery-warrant-shadow-adapter.js +444 -0
  442. package/packages/core/dev-delivery/dev-delivery-authority-candidate.js +197 -0
  443. package/packages/core/dev-delivery/dev-delivery-authority-landing.js +459 -0
  444. package/packages/core/dev-delivery/dev-delivery-authority-state.js +424 -0
  445. package/packages/core/dev-delivery/dev-delivery-candidate-identity.js +152 -0
  446. package/packages/core/dev-delivery/dev-delivery-contract-surface.js +74 -0
  447. package/packages/core/dev-delivery/dev-delivery-native-proof.js +509 -0
  448. package/packages/core/dev-delivery/dev-delivery-proof.js +282 -0
  449. package/packages/core/dev-delivery/dev-delivery-warrant-native-requirements.js +7 -0
  450. package/packages/core/dev-delivery/dev-delivery-warrant-state.js +580 -0
  451. package/packages/core/dev-delivery/dev-delivery-warrant.js +588 -0
  452. package/packages/core/dev-delivery/merge-queue-policy.js +543 -0
  453. package/packages/core/dev-delivery/native/action-context.js +59 -0
  454. package/packages/core/dev-delivery/native/actions.js +74 -0
  455. package/packages/core/dev-delivery/native/attempt.js +93 -0
  456. package/packages/core/dev-delivery/native/candidate.js +101 -0
  457. package/packages/core/dev-delivery/native/context-record.js +26 -0
  458. package/packages/core/dev-delivery/native/execution.js +176 -0
  459. package/packages/core/dev-delivery/native/failure.js +105 -0
  460. package/packages/core/dev-delivery/native/files.js +11 -0
  461. package/packages/core/dev-delivery/native/finalizer-admission.js +93 -0
  462. package/packages/core/dev-delivery/native/heartbeat-action.js +29 -0
  463. package/packages/core/dev-delivery/native/heartbeat.js +137 -0
  464. package/packages/core/dev-delivery/native/provider-boundary.js +71 -0
  465. package/packages/core/dev-delivery/native/qualification.js +228 -0
  466. package/packages/core/dev-delivery/native/readback.js +32 -0
  467. package/packages/core/dev-delivery/native/reuse.js +60 -0
  468. package/packages/core/dev-delivery/native/seal-action.js +19 -0
  469. package/packages/core/dev-delivery/native/transactions.js +156 -0
  470. package/packages/core/dev-delivery/native/transfer.js +122 -0
  471. package/packages/core/dev-delivery/published-delivery-authority.js +266 -0
  472. package/packages/core/dev-delivery/qualification/action.js +60 -0
  473. package/packages/core/dev-delivery/qualification/controller.js +218 -0
  474. package/packages/core/dev-delivery/qualification/github-client.js +108 -0
  475. package/packages/core/dev-delivery/qualification/model.js +186 -0
  476. package/packages/core/dev-delivery/qualification/report.js +25 -0
  477. package/packages/core/dev-delivery/queue/completion.js +52 -0
  478. package/packages/core/dev-delivery/queue/landing-action.js +60 -0
  479. package/packages/core/dev-delivery/queue/reconciliation-action.js +45 -0
  480. package/packages/core/dev-delivery/source-proof/evidence.js +92 -0
  481. package/packages/core/dev-delivery/source-proof/io.js +97 -0
  482. package/packages/core/dev-delivery/source-proof/predicates.js +88 -0
  483. package/packages/core/dev-delivery/source-proof/replay.js +143 -0
  484. package/packages/core/dev-delivery/source-proof/reuse.js +116 -0
  485. package/packages/core/dev-delivery/source-proof/seal.js +32 -0
  486. package/packages/core/dev-delivery/warrant/actions.js +78 -0
  487. package/packages/core/dev-delivery/warrant/cancellation.js +49 -0
  488. package/packages/core/dev-delivery/warrant/failure-settlement.js +93 -0
  489. package/packages/core/dev-delivery/warrant/handoff.js +107 -0
  490. package/packages/core/dev-delivery/warrant/observation.js +59 -0
  491. package/packages/core/dev-delivery/warrant/persistence.js +109 -0
  492. package/packages/core/dev-delivery/warrant/reservation-readback.js +72 -0
  493. package/packages/core/dev-delivery/warrant/service.js +134 -0
  494. package/packages/core/dev-delivery/warrant/terminal-policy.js +53 -0
  495. package/packages/core/dev-delivery/warrant/terminal.js +89 -0
  496. package/packages/core/dev-delivery/warrant/transitions.js +222 -0
  497. package/packages/core/dev-delivery/warrant/values.js +102 -0
  498. package/packages/core/governance/alpha-candidate/action.js +96 -0
  499. package/packages/core/governance/alpha-candidate/controller.js +490 -0
  500. package/packages/core/governance/alpha-candidate/lifecycle.js +121 -0
  501. package/packages/core/governance/alpha-candidate/options.js +60 -0
  502. package/packages/core/governance/alpha-candidate/outputs.js +23 -0
  503. package/packages/core/governance/alpha-candidate/provider.js +192 -0
  504. package/packages/core/governance/alpha-candidate/report.js +56 -0
  505. package/packages/core/governance/alpha-candidate/state.js +184 -0
  506. package/packages/core/governance/alpha-candidate/values.js +90 -0
  507. package/packages/core/governance/architecture-graph.js +24 -0
  508. package/packages/core/governance/audit/actions.js +57 -0
  509. package/packages/core/governance/audit/collection.js +259 -0
  510. package/packages/core/governance/audit/github-reader.js +204 -0
  511. package/packages/core/governance/audit/identity.js +86 -0
  512. package/packages/core/governance/audit/incident.mjs +39 -0
  513. package/packages/core/governance/audit/transactions.js +75 -0
  514. package/packages/core/governance/buildchain-compatibility-authority.js +335 -0
  515. package/packages/core/governance/buildchain-compatibility-fact.js +386 -0
  516. package/packages/core/governance/buildchain-compatibility-facts.json +18 -0
  517. package/packages/core/governance/buildchain-compatibility-proof.js +523 -0
  518. package/packages/core/governance/buildchain-publication-authority.js +117 -0
  519. package/packages/core/governance/candidate/body-action.js +18 -0
  520. package/packages/core/governance/candidate/body-renderer.js +160 -0
  521. package/packages/core/governance/ci-lane-change-budget.js +260 -0
  522. package/packages/core/governance/cli/compatibility-facts.mjs +101 -0
  523. package/packages/core/governance/cli/dispatch.mjs +19 -0
  524. package/packages/core/governance/cli/doctor.mjs +144 -0
  525. package/packages/core/governance/commands/architecture.mjs +594 -0
  526. package/packages/core/governance/commands/audit-github-governance.mjs +43 -0
  527. package/packages/core/governance/commands/audit-publication-control-plane.mjs +26 -0
  528. package/packages/core/governance/commands/buildchain-patrol.mjs +32 -0
  529. package/packages/core/governance/commands/create-github-artifact-attestation-policy.mjs +62 -0
  530. package/packages/core/governance/commands/engineering-housekeeper-workflow.mjs +23 -0
  531. package/packages/core/governance/commands/reconcile-github-governance.mjs +689 -0
  532. package/packages/core/governance/commands/reconcile-release-governance.mjs +77 -0
  533. package/packages/core/governance/commands/workflow-friction-report.mjs +375 -0
  534. package/packages/core/governance/github-governance-authority.js +1367 -0
  535. package/packages/core/governance/housekeeping/action.js +45 -0
  536. package/packages/core/governance/housekeeping/execution.js +75 -0
  537. package/packages/core/governance/housekeeping/options.js +103 -0
  538. package/packages/core/governance/housekeeping/report.js +53 -0
  539. package/packages/core/governance/housekeeping/transactions.js +96 -0
  540. package/packages/core/governance/patrol/action.js +41 -0
  541. package/packages/core/governance/patrol/controller.js +125 -0
  542. package/packages/core/governance/patrol/options.js +121 -0
  543. package/packages/core/governance/patrol/report.js +53 -0
  544. package/packages/core/governance/patrol/transaction.js +30 -0
  545. package/packages/core/governance/publication/audit.js +26 -0
  546. package/packages/core/governance/publication/collection.js +396 -0
  547. package/packages/core/governance/publication/policy-values.js +227 -0
  548. package/packages/core/governance/publication/source-authorization.js +293 -0
  549. package/packages/core/governance/receipt-admission-action.js +12 -0
  550. package/packages/core/governance/receipt-admission.js +34 -0
  551. package/packages/core/governance/release-check-policy.js +179 -0
  552. package/packages/core/governance/release-reconciliation-action.js +25 -0
  553. package/packages/core/governance/release-reconciliation.js +122 -0
  554. package/packages/core/governance/report-issue/action.js +201 -0
  555. package/packages/core/index.js +85 -117
  556. package/packages/core/observability/cli/candidate.mjs +42 -0
  557. package/packages/core/observability/cli/context.mjs +47 -0
  558. package/packages/core/observability/cli/diagnostics.mjs +88 -0
  559. package/packages/core/observability/cli/events.mjs +126 -0
  560. package/packages/core/observability/cli/process-sample.mjs +71 -0
  561. package/packages/core/observability/commands/aggregate-diagnostics-summary.mjs +45 -0
  562. package/packages/core/observability/commands/controller-evidence.mjs +109 -0
  563. package/packages/core/observability/commands/observed-evidence.mjs +27 -0
  564. package/packages/core/observability/controller/identity-action.js +11 -0
  565. package/packages/core/observability/controller/identity.js +32 -0
  566. package/packages/core/observability/controller-actions.js +63 -0
  567. package/packages/core/observability/controller-evidence-io.js +112 -0
  568. package/packages/core/observability/controller-evidence.js +555 -0
  569. package/packages/core/observability/controller-input-boundary.js +47 -0
  570. package/packages/core/observability/diagnostics/aggregate.js +25 -0
  571. package/packages/core/observability/diagnostics.js +1904 -0
  572. package/packages/core/observability/evidence/actions.js +20 -0
  573. package/packages/core/observability/evidence/bundle.js +163 -0
  574. package/packages/core/observability/evidence/publication.js +360 -0
  575. package/packages/core/observability/evidence/transactions.js +62 -0
  576. package/packages/core/observability/process/sampling.js +128 -0
  577. package/packages/core/observability/publisher-admission.js +26 -0
  578. package/packages/core/observability/transaction-journal.js +40 -0
  579. package/packages/core/paper/cli/dispatch.mjs +17 -0
  580. package/packages/core/paper/commands/paper-agent-cli.mjs +35 -0
  581. package/packages/core/paper/commands/paper-work-fleet-cli.mjs +577 -0
  582. package/packages/core/paper/commands/paper.mjs +632 -0
  583. package/packages/core/paper/operations/bootstrap.js +73 -0
  584. package/packages/core/paper/operations/files.js +48 -0
  585. package/packages/core/paper/operations/github-observation.js +136 -0
  586. package/packages/core/paper/operations/identity.js +59 -0
  587. package/packages/core/paper/operations/npm-observation.js +118 -0
  588. package/packages/core/paper/operations/plans.js +213 -0
  589. package/packages/core/paper/operations/preflight-checks.js +269 -0
  590. package/packages/core/paper/operations/provisioning-validation.js +155 -0
  591. package/packages/core/paper/operations/provisioning.js +113 -0
  592. package/packages/core/paper/operations/runtime-observation.js +25 -0
  593. package/packages/core/paper/operations/runtime.js +84 -0
  594. package/packages/core/paper/operations/scaffold-config.js +77 -0
  595. package/packages/core/paper/operations/scaffold-workflows.js +99 -0
  596. package/packages/core/paper/operations/scaffold.js +370 -0
  597. package/packages/core/paper/operations/status-facts.js +264 -0
  598. package/packages/core/paper/operations/status.js +353 -0
  599. package/packages/core/paper/operations/toolchain-observation.js +49 -0
  600. package/packages/core/paper/operations/workspace.js +60 -0
  601. package/packages/core/paper/paper-agent-entry.js +396 -0
  602. package/packages/core/paper/paper-fleet.js +310 -0
  603. package/packages/core/paper/paper-npm-bootstrap.js +492 -0
  604. package/packages/core/paper/paper-repository.js +214 -0
  605. package/packages/core/paper/paper-runtime-channels.js +344 -0
  606. package/packages/core/paper/paper-scaffold-content.js +574 -0
  607. package/packages/core/paper/paper.js +308 -0
  608. package/packages/core/paper/publication/actions.js +109 -0
  609. package/packages/core/paper/publication/candidate.js +140 -0
  610. package/packages/core/paper/publication/controller.js +117 -0
  611. package/packages/core/paper/publication/envelope.js +118 -0
  612. package/packages/core/paper/publication/propagation.js +135 -0
  613. package/packages/core/paper/publication/readback.js +89 -0
  614. package/packages/core/paper/publication/target.js +54 -0
  615. package/packages/core/paper/publication-controller.js +144 -0
  616. package/packages/core/providers/artifact-relay/files.js +71 -0
  617. package/packages/core/providers/artifact-relay/s3-client.js +259 -0
  618. package/packages/core/providers/artifact-relay/transactions.js +258 -0
  619. package/packages/core/providers/commands/artifact-relay-s3.mjs +62 -0
  620. package/packages/core/providers/commands/aws-codebuild-toolchain.mjs +15 -0
  621. package/packages/core/providers/commands/aws-macos-jit-controller-runtime.mjs +82 -0
  622. package/packages/core/providers/commands/aws-runner-burst-core.mjs +249 -0
  623. package/packages/core/providers/commands/aws-runner-burst.mjs +80 -0
  624. package/packages/core/providers/commands/aws-windows-jit-campaign.mjs +202 -0
  625. package/packages/core/providers/commands/aws-windows-jit-controller.mjs +578 -0
  626. package/packages/core/providers/commands/aws-windows-jit-operator.sh +506 -0
  627. package/packages/core/providers/commands/infra-contract-core.mjs +1032 -0
  628. package/packages/core/providers/commands/infra-contract.mjs +345 -0
  629. package/packages/core/providers/commands/locked-source-checkout.mjs +9 -0
  630. package/packages/core/providers/commands/route-offline-runners.mjs +30 -0
  631. package/packages/core/providers/demo/capture-worker.py +541 -0
  632. package/packages/core/providers/dev-delivery/candidate.js +112 -0
  633. package/packages/core/providers/dev-delivery/protection.js +29 -0
  634. package/packages/core/providers/dev-delivery/store.js +292 -0
  635. package/packages/core/providers/git/fetch-process.js +27 -0
  636. package/packages/core/providers/git/fetch-worker.js +146 -0
  637. package/packages/core/providers/git/patch-root.js +54 -0
  638. package/packages/core/providers/git-ref-readback.mjs +22 -0
  639. package/packages/core/providers/github/artifact-attestation.js +32 -0
  640. package/packages/core/providers/github/commits.js +32 -0
  641. package/packages/core/providers/github/json-client.js +65 -0
  642. package/packages/core/providers/github/product-publication.js +44 -0
  643. package/packages/core/providers/github/publication-control-plane.js +116 -0
  644. package/packages/core/providers/github/pull-requests.js +24 -0
  645. package/packages/core/providers/github/qualification.js +181 -0
  646. package/packages/core/providers/github/release-assets.js +91 -0
  647. package/packages/core/providers/github/signing-request.js +81 -0
  648. package/packages/core/providers/github/source-lock.js +98 -0
  649. package/packages/core/providers/github-cli-api.js +35 -0
  650. package/packages/core/providers/github-issue-comment.js +83 -0
  651. package/packages/core/providers/github-permission.js +11 -0
  652. package/packages/core/providers/github-token.js +121 -0
  653. package/packages/core/providers/process/sample-worker.mjs +14 -0
  654. package/packages/core/providers/runner/observation.js +30 -0
  655. package/packages/core/providers/runner/offline-routing.js +205 -0
  656. package/packages/core/providers/signing/detached-key.js +20 -0
  657. package/packages/core/providers/signing/macos/compound-archive.py +434 -0
  658. package/packages/core/providers/signing/macos/sign-request.sh +145 -0
  659. package/packages/core/providers/signing/native.js +77 -0
  660. package/packages/core/providers/signing/windows/sign-request.ps1 +48 -0
  661. package/packages/core/providers/source-checkout/action.js +31 -0
  662. package/packages/core/providers/source-checkout/auth.js +32 -0
  663. package/packages/core/providers/source-checkout/fetch.js +135 -0
  664. package/packages/core/providers/source-checkout/git.js +220 -0
  665. package/packages/core/providers/source-checkout/transaction.js +360 -0
  666. package/packages/core/providers/source-checkout/values.js +115 -0
  667. package/packages/core/providers/source-checkout/workspace.js +50 -0
  668. package/packages/core/providers/sync-git/action.mjs +16 -0
  669. package/packages/core/providers/sync-git/transfer.mjs +86 -0
  670. package/packages/core/providers/toolchain/codebuild-policy.js +36 -0
  671. package/packages/core/providers/toolchain/codebuild.js +220 -0
  672. package/packages/core/publication/authority/actions.js +156 -0
  673. package/packages/core/publication/authority/admission.js +113 -0
  674. package/packages/core/publication/authority/assembly.js +77 -0
  675. package/packages/core/publication/authority/binary-evidence.js +77 -0
  676. package/packages/core/publication/authority/candidate-evidence.js +42 -0
  677. package/packages/core/publication/authority/consumer-gate.js +80 -0
  678. package/packages/core/publication/authority/control-plane.js +38 -0
  679. package/packages/core/publication/authority/evidence.js +113 -0
  680. package/packages/core/publication/authority/gate.js +39 -0
  681. package/packages/core/publication/authority/governance.js +61 -0
  682. package/packages/core/publication/authority/paper-evidence.js +24 -0
  683. package/packages/core/publication/authority/request.js +13 -0
  684. package/packages/core/publication/authority/result.js +37 -0
  685. package/packages/core/publication/authority/runner.js +26 -0
  686. package/packages/core/publication/authority/seal.js +97 -0
  687. package/packages/core/publication/authority/verification-evidence.js +80 -0
  688. package/packages/core/publication/authority/verification.js +94 -0
  689. package/packages/core/publication/binary/action.js +33 -0
  690. package/packages/core/publication/binary/capability.js +55 -0
  691. package/packages/core/publication/binary/evidence.js +109 -0
  692. package/packages/core/publication/binary/transaction.js +38 -0
  693. package/packages/core/publication/candidate/artifact.js +71 -0
  694. package/packages/core/publication/candidate/collection-action.js +24 -0
  695. package/packages/core/publication/candidate/collection.js +70 -0
  696. package/packages/core/publication/candidate/kind.js +93 -0
  697. package/packages/core/publication/candidate/manifest.js +35 -0
  698. package/packages/core/publication/candidate/package-binding.js +42 -0
  699. package/packages/core/publication/candidate/package.js +50 -0
  700. package/packages/core/publication/candidate/paper-package.js +120 -0
  701. package/packages/core/publication/candidate/passport.js +36 -0
  702. package/packages/core/publication/candidate/qualification-action.js +41 -0
  703. package/packages/core/publication/candidate/qualification.js +56 -0
  704. package/packages/core/publication/candidate/registry-hydration.js +204 -0
  705. package/packages/core/publication/candidate/reproducibility.js +29 -0
  706. package/packages/core/publication/candidate/sealing.js +184 -0
  707. package/packages/core/publication/candidate/stage-capsules.js +205 -0
  708. package/packages/core/publication/candidate/toolchain.js +80 -0
  709. package/packages/core/publication/cli/dispatch.mjs +107 -0
  710. package/packages/core/publication/commands/create-release-bundle.mjs +32 -0
  711. package/packages/core/publication/commands/generate-release-candidate-passport.mjs +80 -0
  712. package/packages/core/publication/commands/installer-publication.mjs +45 -0
  713. package/packages/core/publication/commands/npm-publish-dry-run.mjs +48 -0
  714. package/packages/core/publication/commands/npm-publish-transaction.mjs +55 -0
  715. package/packages/core/publication/commands/publication-artifact-candidate.mjs +48 -0
  716. package/packages/core/publication/commands/publication-artifact.mjs +67 -0
  717. package/packages/core/publication/commands/publication-package.mjs +38 -0
  718. package/packages/core/publication/commands/publication-registry-hydrate.mjs +19 -0
  719. package/packages/core/publication/commands/publication-reproducibility.mjs +62 -0
  720. package/packages/core/publication/installer/evidence.js +319 -0
  721. package/packages/core/publication/npm/environment.js +18 -0
  722. package/packages/core/publication/npm/evidence.js +57 -0
  723. package/packages/core/publication/npm/pack-preview.js +22 -0
  724. package/packages/core/publication/npm/package-plan.js +82 -0
  725. package/packages/core/publication/npm/package.js +120 -0
  726. package/packages/core/publication/npm/preview-action.js +30 -0
  727. package/packages/core/publication/npm/preview.js +92 -0
  728. package/packages/core/publication/npm/registry.js +61 -0
  729. package/packages/core/publication/npm/transaction.js +115 -0
  730. package/packages/core/publication/oci/preview-actions.js +48 -0
  731. package/packages/core/publication/oci/preview-admission.js +93 -0
  732. package/packages/core/publication/oci/preview-promotion.js +64 -0
  733. package/packages/core/publication/oci/preview-registry.js +36 -0
  734. package/packages/core/publication/oci/preview-transaction.js +42 -0
  735. package/packages/core/publication/oci/preview-values.js +8 -0
  736. package/packages/core/publication/oci-compose-qualification.js +143 -0
  737. package/packages/core/publication/oci-publication-bundle.js +281 -0
  738. package/packages/core/publication/publication-artifact-candidate.js +128 -0
  739. package/packages/core/publication/publication-artifact.js +641 -0
  740. package/packages/core/publication/publication-authority.js +1163 -0
  741. package/packages/core/publication/publication-development.js +72 -0
  742. package/packages/core/publication/publication-package.js +252 -0
  743. package/packages/core/publication/publication-rehearsal-capsule.js +468 -0
  744. package/packages/core/publication/publication-rehearsal-projection.js +104 -0
  745. package/packages/core/publication/publication-rehearsal-runtime.js +190 -0
  746. package/packages/core/publication/publication-rehearsal.js +481 -0
  747. package/packages/core/publication/publication-reproducibility.js +947 -0
  748. package/packages/core/publication/settlement/actions.js +63 -0
  749. package/packages/core/publication/settlement/transaction.js +197 -0
  750. package/packages/core/release/binary/coordinates-action.js +25 -0
  751. package/packages/core/release/binary/coordinates.js +76 -0
  752. package/packages/core/release/candidate/download.js +64 -0
  753. package/packages/core/release/candidate/lineage.js +72 -0
  754. package/packages/core/release/candidate/materialize.js +155 -0
  755. package/packages/core/release/candidate/payloads.js +330 -0
  756. package/packages/core/release/candidate/publication-intent.js +89 -0
  757. package/packages/core/release/candidate/resolve.js +132 -0
  758. package/packages/core/release/candidate/run-selection.js +88 -0
  759. package/packages/core/release/candidate/selection.js +181 -0
  760. package/packages/core/release/candidate/transport.js +143 -0
  761. package/packages/core/release/cli/command-handlers.mjs +14 -0
  762. package/packages/core/release/cli/dispatch.mjs +39 -0
  763. package/packages/core/release/cli/inspection-handlers.mjs +178 -0
  764. package/packages/core/release/cli/release-handlers.mjs +332 -0
  765. package/packages/core/release/cli/trust-release.mjs +19 -0
  766. package/packages/core/release/cli/verification-handlers.mjs +303 -0
  767. package/packages/core/release/commands/dev-alpha-candidate-patrol.mjs +42 -0
  768. package/packages/core/release/commands/ensure-github-release.mjs +199 -0
  769. package/packages/core/release/commands/next-development-review.mjs +77 -0
  770. package/packages/core/release/commands/next-development-transition.mjs +47 -0
  771. package/packages/core/release/commands/promotion-channel-router.mjs +62 -0
  772. package/packages/core/release/commands/promotion-identity-resolver.mjs +77 -0
  773. package/packages/core/release/commands/publish-source-ref-resolver.mjs +113 -0
  774. package/packages/core/release/commands/release-candidate-resolver.mjs +122 -0
  775. package/packages/core/release/commands/release-line-dry-run.mjs +53 -0
  776. package/packages/core/release/commands/release-propagation.mjs +411 -0
  777. package/packages/core/release/commands/release-tail.mjs +169 -0
  778. package/packages/core/release/commands/release-transaction.mjs +212 -0
  779. package/packages/core/release/commands/resolve-publish-gate.mjs +34 -0
  780. package/packages/core/release/commands/resolve-publish-source.mjs +96 -0
  781. package/packages/core/release/commands/resume-from-candidate-run.mjs +107 -0
  782. package/packages/core/release/commands/stable-candidate-patrol.mjs +31 -0
  783. package/packages/core/release/commands/stable-candidate-qualification.mjs +24 -0
  784. package/packages/core/release/commands/stable-release-gate.mjs +351 -0
  785. package/packages/core/release/commands/tail-reseal.mjs +148 -0
  786. package/packages/core/release/commands/verify-promotion-router-binding.sh +36 -0
  787. package/packages/core/release/commands/verify-publish-channel-ref.mjs +83 -0
  788. package/packages/core/release/commands/verify-publish-source-lock.mjs +37 -0
  789. package/packages/core/release/commands/verify-release-pr.mjs +6 -0
  790. package/packages/core/release/commands/verify-version-state-delta.mjs +21 -0
  791. package/packages/core/release/github-provider-plane.js +319 -0
  792. package/packages/core/release/github-release.js +385 -0
  793. package/packages/core/release/line/action.js +49 -0
  794. package/packages/core/release/line/governance.js +96 -0
  795. package/packages/core/release/line/plan.js +56 -0
  796. package/packages/core/release/line/policy.js +320 -0
  797. package/packages/core/release/line/protection.js +35 -0
  798. package/packages/core/release/line/request.js +22 -0
  799. package/packages/core/release/line/source.js +79 -0
  800. package/packages/core/release/line/transaction.js +33 -0
  801. package/packages/core/release/line/verification-action.js +13 -0
  802. package/packages/core/release/line/verification.js +13 -0
  803. package/packages/core/release/next-development/actions.js +122 -0
  804. package/packages/core/release/next-development/approval.js +59 -0
  805. package/packages/core/release/next-development/enqueue.js +51 -0
  806. package/packages/core/release/next-development/finalization.js +127 -0
  807. package/packages/core/release/next-development/observation.js +41 -0
  808. package/packages/core/release/next-development/review-policy.js +56 -0
  809. package/packages/core/release/next-development/verification.js +89 -0
  810. package/packages/core/release/next-development-projection.js +310 -0
  811. package/packages/core/release/next-development-transition.js +737 -0
  812. package/packages/core/release/partial-mutation-recovery-qualification.js +18 -0
  813. package/packages/core/release/passport/artifact-index.js +65 -0
  814. package/packages/core/release/passport/assembly-artifacts.js +43 -0
  815. package/packages/core/release/passport/assembly-inputs.js +107 -0
  816. package/packages/core/release/passport/assembly-material.js +261 -0
  817. package/packages/core/release/passport/assembly-render.js +320 -0
  818. package/packages/core/release/passport/assembly.js +12 -0
  819. package/packages/core/release/passport/assets.js +46 -0
  820. package/packages/core/release/passport/attachments.js +88 -0
  821. package/packages/core/release/passport/authoritative-base.js +123 -0
  822. package/packages/core/release/passport/build.js +39 -0
  823. package/packages/core/release/passport/collection-inputs.js +383 -0
  824. package/packages/core/release/passport/collection-material.js +199 -0
  825. package/packages/core/release/passport/collection-options.js +97 -0
  826. package/packages/core/release/passport/collection-output.js +303 -0
  827. package/packages/core/release/passport/collection.js +10 -0
  828. package/packages/core/release/passport/commands.js +44 -0
  829. package/packages/core/release/passport/consumer-input.js +18 -0
  830. package/packages/core/release/passport/consumer-validation.js +83 -0
  831. package/packages/core/release/passport/discovery.js +36 -0
  832. package/packages/core/release/passport/documents.js +116 -0
  833. package/packages/core/release/passport/evidence-validation.js +280 -0
  834. package/packages/core/release/passport/files.js +43 -0
  835. package/packages/core/release/passport/fixture.js +19 -0
  836. package/packages/core/release/passport/identity.js +46 -0
  837. package/packages/core/release/passport/impact-validation.js +230 -0
  838. package/packages/core/release/passport/impact.js +149 -0
  839. package/packages/core/release/passport/inputs.js +55 -0
  840. package/packages/core/release/passport/invariants.js +93 -0
  841. package/packages/core/release/passport/issues.js +29 -0
  842. package/packages/core/release/passport/json.js +16 -0
  843. package/packages/core/release/passport/locations.js +82 -0
  844. package/packages/core/release/passport/packages.js +123 -0
  845. package/packages/core/release/passport/publish-validation.js +279 -0
  846. package/packages/core/release/passport/publish.js +58 -0
  847. package/packages/core/release/passport/report.js +154 -0
  848. package/packages/core/release/passport/state-validation.js +163 -0
  849. package/packages/core/release/passport/transaction.js +69 -0
  850. package/packages/core/release/passport/trust-claims.js +365 -0
  851. package/packages/core/release/passport/trust-validation.js +528 -0
  852. package/packages/core/release/product-publication.js +59 -0
  853. package/packages/core/release/promote-candidate/action.js +9 -0
  854. package/packages/core/release/promote-candidate/development-source.js +39 -0
  855. package/packages/core/release/promote-candidate/evidence-binding.js +142 -0
  856. package/packages/core/release/promote-candidate/evidence-inputs.js +99 -0
  857. package/packages/core/release/promote-candidate/files.js +10 -0
  858. package/packages/core/release/promote-candidate/next-development-provider.js +300 -0
  859. package/packages/core/release/promote-candidate/next-development-queue.js +63 -0
  860. package/packages/core/release/promote-candidate/oci-provider.js +241 -0
  861. package/packages/core/release/promote-candidate/oci-registry-client.js +67 -0
  862. package/packages/core/release/promote-candidate/outputs.js +29 -0
  863. package/packages/core/release/promote-candidate/product-finalization-wait.js +52 -0
  864. package/packages/core/release/promote-candidate/product-provider-adapters.js +462 -0
  865. package/packages/core/release/promote-candidate/product-provider-github-adapters.js +595 -0
  866. package/packages/core/release/promote-candidate/product-provider.js +188 -0
  867. package/packages/core/release/promote-candidate/provider-request.js +51 -0
  868. package/packages/core/release/promote-candidate/provider-settlement.js +83 -0
  869. package/packages/core/release/promote-candidate/publication-completion.js +56 -0
  870. package/packages/core/release/promote-candidate/release-documents.js +156 -0
  871. package/packages/core/release/promote-candidate/transaction.js +130 -0
  872. package/packages/core/release/promote-ref/action-environment.js +2 -0
  873. package/packages/core/release/promote-ref/action-inputs.js +285 -0
  874. package/packages/core/release/promote-ref/action-outputs.js +140 -0
  875. package/packages/core/release/promote-ref/action-request.js +205 -0
  876. package/packages/core/release/promote-ref/action.js +92 -0
  877. package/packages/core/release/promote-ref/internal/branch-protection.js +218 -0
  878. package/packages/core/release/promote-ref/internal/candidate-admission.js +149 -0
  879. package/packages/core/release/promote-ref/internal/channel-governance.js +297 -0
  880. package/packages/core/release/promote-ref/internal/channel-resume.js +198 -0
  881. package/packages/core/release/promote-ref/internal/channel-tags.js +207 -0
  882. package/packages/core/release/promote-ref/internal/contained-published-version-state.js +80 -0
  883. package/packages/core/release/promote-ref/internal/durable-transaction-operations.js +463 -0
  884. package/packages/core/release/promote-ref/internal/durable-transaction-store.js +395 -0
  885. package/packages/core/release/promote-ref/internal/generated-branch.js +16 -0
  886. package/packages/core/release/promote-ref/internal/generated-identity.js +12 -0
  887. package/packages/core/release/promote-ref/internal/generated-ref.js +93 -0
  888. package/packages/core/release/promote-ref/internal/github-adapter.js +312 -0
  889. package/packages/core/release/promote-ref/internal/npm-distribution.js +185 -0
  890. package/packages/core/release/promote-ref/internal/npm-existing-evidence.js +61 -0
  891. package/packages/core/release/promote-ref/internal/passport-files.js +116 -0
  892. package/packages/core/release/promote-ref/internal/passport-generation.js +567 -0
  893. package/packages/core/release/promote-ref/internal/promote-alpha-channel.js +588 -0
  894. package/packages/core/release/promote-ref/internal/promote-major-channel.js +476 -0
  895. package/packages/core/release/promote-ref/internal/promote-release-channel.js +573 -0
  896. package/packages/core/release/promote-ref/internal/promotion-operations.js +1170 -0
  897. package/packages/core/release/promote-ref/internal/promotion-options.js +101 -0
  898. package/packages/core/release/promote-ref/internal/promotion-policy.js +218 -0
  899. package/packages/core/release/promote-ref/internal/publish-command.js +211 -0
  900. package/packages/core/release/promote-ref/internal/publish-contract.js +181 -0
  901. package/packages/core/release/promote-ref/internal/publish-transaction.js +510 -0
  902. package/packages/core/release/promote-ref/internal/tag-selection.js +159 -0
  903. package/packages/core/release/promote-ref/internal/transaction-context.js +506 -0
  904. package/packages/core/release/promote-ref/internal/transaction-recovery.js +379 -0
  905. package/packages/core/release/promote-ref/internal/version-state-operations.js +545 -0
  906. package/packages/core/release/promote-ref/lib.js +600 -0
  907. package/packages/core/release/promote-ref/release-tail.js +102 -0
  908. package/packages/core/release/promote-ref/source-lock.js +91 -0
  909. package/packages/core/release/promotion/actions.js +133 -0
  910. package/packages/core/release/promotion/admission.js +52 -0
  911. package/packages/core/release/promotion/candidate.js +71 -0
  912. package/packages/core/release/promotion/channel.js +104 -0
  913. package/packages/core/release/promotion/identities.js +56 -0
  914. package/packages/core/release/promotion/product-state.js +68 -0
  915. package/packages/core/release/promotion/publish-gate.js +128 -0
  916. package/packages/core/release/promotion/qualification-action.js +72 -0
  917. package/packages/core/release/promotion/qualification.js +95 -0
  918. package/packages/core/release/promotion/routing.js +94 -0
  919. package/packages/core/release/promotion/selection.js +55 -0
  920. package/packages/core/release/promotion/source-intent.js +35 -0
  921. package/packages/core/release/promotion-request.js +148 -0
  922. package/packages/core/release/propagation/actions.js +75 -0
  923. package/packages/core/release/propagation/delivery.js +202 -0
  924. package/packages/core/release/propagation/planning.js +197 -0
  925. package/packages/core/release/propagation/report.js +97 -0
  926. package/packages/core/release/propagation/store.js +26 -0
  927. package/packages/core/release/propagation/transactions.js +213 -0
  928. package/packages/core/release/propagation/work.js +146 -0
  929. package/packages/core/release/protected-publication-source.js +91 -0
  930. package/packages/core/release/provider-operation-journal.js +62 -0
  931. package/packages/core/release/provider-readback-idempotency.js +309 -0
  932. package/packages/core/release/qualification/actions.js +51 -0
  933. package/packages/core/release/qualification/campaign.js +154 -0
  934. package/packages/core/release/qualification/options.js +102 -0
  935. package/packages/core/release/qualification/public-build.js +109 -0
  936. package/packages/core/release/recovery/artifacts.js +161 -0
  937. package/packages/core/release/recovery/candidate.js +529 -0
  938. package/packages/core/release/recovery/capsules.js +102 -0
  939. package/packages/core/release/recovery/download.js +191 -0
  940. package/packages/core/release/recovery/files.js +39 -0
  941. package/packages/core/release/recovery/provenance.js +199 -0
  942. package/packages/core/release/recovery/publication.js +193 -0
  943. package/packages/core/release/recovery/readback.js +169 -0
  944. package/packages/core/release/recovery/runtime.js +224 -0
  945. package/packages/core/release/recovery/transactions.js +139 -0
  946. package/packages/core/release/release-activation-shadow.js +32 -0
  947. package/packages/core/release/release-blocker-priority.js +183 -0
  948. package/packages/core/release/release-candidate-recovery.js +595 -0
  949. package/packages/core/release/release-candidate.js +591 -0
  950. package/packages/core/release/release-invocation.js +64 -0
  951. package/packages/core/release/release-line-bootstrap.js +292 -0
  952. package/packages/core/release/release-line-dry-run.js +302 -0
  953. package/packages/core/release/release-passport-contract.js +479 -0
  954. package/packages/core/release/release-passport.js +74 -0
  955. package/packages/core/release/release-tail-provider-adapters.js +460 -0
  956. package/packages/core/release/release-tail-provider-plane.js +248 -0
  957. package/packages/core/release/reseal/actions.js +84 -0
  958. package/packages/core/release/reseal/admission.js +75 -0
  959. package/packages/core/release/reseal/files.js +39 -0
  960. package/packages/core/release/reseal/finalize-platform.js +65 -0
  961. package/packages/core/release/reseal/outputs.js +21 -0
  962. package/packages/core/release/reseal/plan.js +24 -0
  963. package/packages/core/release/reseal/platform.js +135 -0
  964. package/packages/core/release/reseal/readbacks.js +36 -0
  965. package/packages/core/release/reseal/seal.js +125 -0
  966. package/packages/core/release/reuse-complete-release.js +240 -0
  967. package/packages/core/release/runtime-override-authorization.js +242 -0
  968. package/packages/core/release/settle/action.js +412 -0
  969. package/packages/core/release/source/channel.js +45 -0
  970. package/packages/core/release/source/coordinates.js +160 -0
  971. package/packages/core/release/source/lineage.js +144 -0
  972. package/packages/core/release/source/manifest.js +114 -0
  973. package/packages/core/release/stable-patrol/action.js +87 -0
  974. package/packages/core/release/stable-patrol/controller.js +346 -0
  975. package/packages/core/release/stable-patrol/coordinates.js +16 -0
  976. package/packages/core/release/stable-patrol/github-client.js +181 -0
  977. package/packages/core/release/stable-patrol/options.js +87 -0
  978. package/packages/core/release/stable-patrol/report.js +28 -0
  979. package/packages/core/release/stable-publication-fence.js +28 -0
  980. package/packages/core/release/tail-reseal-github.js +175 -0
  981. package/packages/core/release/tail-reseal-receipt.js +228 -0
  982. package/packages/core/release/tail-reseal.js +594 -0
  983. package/packages/core/release/version-state/verification.js +164 -0
  984. package/packages/core/release/version-state.js +458 -0
  985. package/packages/core/runtime/action-host.js +19 -0
  986. package/packages/core/runtime/action-process.mjs +23 -0
  987. package/packages/core/runtime/buildchain-domain.wasm +0 -0
  988. package/packages/core/runtime/checkout-identity.js +27 -0
  989. package/packages/core/runtime/commands/bridge-bootstrap.mjs +147 -0
  990. package/packages/core/runtime/commands/host-adapter.mjs +185 -0
  991. package/packages/core/runtime/commands/runtime-ref-core.mjs +171 -0
  992. package/packages/core/runtime/consumer-shell.js +174 -0
  993. package/packages/core/runtime/domain-wasm-artifact.js +7 -0
  994. package/packages/core/runtime/installation-root.js +29 -0
  995. package/packages/core/runtime/locked-dependencies.js +74 -0
  996. package/packages/core/runtime/provider-closure.js +60 -0
  997. package/packages/core/runtime/runtime-selection-action.js +34 -0
  998. package/packages/core/runtime/runtime-selection.js +136 -0
  999. package/packages/core/runtime/toolchain/actions.js +14 -0
  1000. package/packages/core/runtime/toolchain/user-paths.js +9 -0
  1001. package/packages/core/runtime/toolchain/windows-rust.js +67 -0
  1002. package/packages/core/runtime/workflow-runtime.js +11 -0
  1003. package/packages/core/web/apply-admission-action.js +20 -0
  1004. package/packages/core/web/apply-admission.js +44 -0
  1005. package/packages/core/web/cli/badges.mjs +100 -0
  1006. package/packages/core/web/cli/surface.mjs +6 -0
  1007. package/packages/core/web/commands/web-surface-core.mjs +2603 -0
  1008. package/packages/core/web/commands/web-surface-production-release-pr.mjs +126 -0
  1009. package/packages/core/web/commands/web-surface.mjs +294 -0
  1010. package/packages/core/web/controller-actions.js +45 -0
  1011. package/packages/core/web/controller.js +145 -0
  1012. package/packages/core/web/deployment/apply-action.js +31 -0
  1013. package/packages/core/web/deployment/apply-evidence.js +134 -0
  1014. package/packages/core/web/deployment/apply.js +118 -0
  1015. package/packages/core/web/deployment/cloudfront-wait.js +88 -0
  1016. package/packages/core/web/deployment/plan-files.js +41 -0
  1017. package/packages/core/web/deployment/planning-action.js +28 -0
  1018. package/packages/core/web/deployment/planning.js +126 -0
  1019. package/packages/core/web/deployment/report-action.js +74 -0
  1020. package/packages/core/web/deployment/summary.js +44 -0
  1021. package/packages/core/web/preview-feedback-action.js +26 -0
  1022. package/packages/core/web/preview-feedback.js +40 -0
  1023. package/packages/core/web/production-decision-action.js +42 -0
  1024. package/packages/core/web/production-decision.js +85 -0
  1025. package/packages/core/web/production-intent-action.js +14 -0
  1026. package/packages/core/web/production-intent.js +167 -0
  1027. package/packages/core/web/publication-admission-action.js +92 -0
  1028. package/packages/core/web/publication-admission.js +183 -0
  1029. package/packages/core/web/publication-capability-action.js +22 -0
  1030. package/packages/core/web/publication-capability.js +73 -0
  1031. package/packages/core/web/readme-badges.js +891 -0
  1032. package/packages/core/web/release-feedback.js +414 -0
  1033. package/packages/core/web/release-pr-action.js +47 -0
  1034. package/packages/core/web/release-pr-handoff.js +176 -0
  1035. package/packages/core/web/release-pr-provider.js +295 -0
  1036. package/packages/core/web/release-pr-summary.js +42 -0
  1037. package/packages/core/web/release-pr-transaction.js +158 -0
  1038. package/packages/core/web/release-review-action.js +21 -0
  1039. package/packages/core/web/release-review.js +130 -0
  1040. package/packages/core/web/web-surface-publication-candidate.js +162 -0
  1041. package/packages/core/workflow/admission/actions.js +56 -0
  1042. package/packages/core/workflow/admission/recovery.js +47 -0
  1043. package/packages/core/workflow/admission/review.js +188 -0
  1044. package/packages/core/workflow/admission/transactions.js +60 -0
  1045. package/packages/core/workflow/cli/main.mjs +131 -0
  1046. package/packages/core/workflow/cli/process.mjs +16 -0
  1047. package/packages/core/workflow/commands/buildchain-cli-help.mjs +318 -0
  1048. package/packages/core/workflow/commands/universal-workflow-backflow.mjs +26 -0
  1049. package/packages/core/workflow/commands/universal-workflow-engine.mjs +73 -0
  1050. package/packages/core/workflow/dogfood/actions.js +62 -0
  1051. package/packages/core/workflow/dogfood/readiness.js +74 -0
  1052. package/packages/core/workflow/dogfood/transactions.js +90 -0
  1053. package/packages/core/workflow/engine/action.js +42 -0
  1054. package/packages/core/workflow/engine/conformance.js +93 -0
  1055. package/packages/core/workflow/engine/execution.js +77 -0
  1056. package/packages/core/workflow/engine/identity.js +34 -0
  1057. package/packages/core/workflow/engine/provider-context.js +16 -0
  1058. package/packages/core/workflow/engine/release-environment.js +57 -0
  1059. package/packages/core/workflow/engine/release-evidence.js +39 -0
  1060. package/packages/core/workflow/engine/release-observation.js +97 -0
  1061. package/packages/core/workflow/engine/release-promotion.js +227 -0
  1062. package/packages/core/workflow/event-trust.js +25 -0
  1063. package/packages/core/workflow/installation.js +33 -0
  1064. package/packages/core/workflow/request-rejection.js +3 -0
  1065. package/packages/core/workflow/settlement/actions.js +34 -0
  1066. package/packages/core/workflow/settlement/backflow.js +187 -0
  1067. package/packages/core/workflow/universal-self-dogfood.js +163 -0
  1068. package/packages/core/workflow/universal-workflow-bootstrap.js +586 -0
  1069. package/packages/core/workflow/workflow-taxonomy.mjs +351 -0
  1070. package/scripts/bridge-evidence.mjs +9 -2
  1071. package/scripts/build-domain-wasm.mjs +15 -3
  1072. package/scripts/build-standalone-binary.mjs +1 -375
  1073. package/scripts/check-action-bundles.mjs +14 -25
  1074. package/scripts/check-ci-lane-change-budget.mjs +3 -3
  1075. package/scripts/check-code-layout.mjs +386 -0
  1076. package/scripts/check-core-mechanism-inventory.mjs +17 -16
  1077. package/scripts/check-dev-delivery-actions.mjs +35 -0
  1078. package/scripts/check-floating-consumer-policy-contract.mjs +33 -59
  1079. package/scripts/check-implementation-naming.mjs +2 -23
  1080. package/scripts/check-internal-architecture.mjs +3 -3
  1081. package/scripts/check-inventory.mjs +160 -318
  1082. package/scripts/check-javascript-syntax.mjs +1 -1
  1083. package/scripts/check-maintainability.mjs +25 -21
  1084. package/scripts/check-project-cut-merge-queue-admission.mjs +1 -1
  1085. package/scripts/check-public-dogfood-contract.mjs +166 -43
  1086. package/scripts/check-release-tail-contract.mjs +62 -71
  1087. package/scripts/check-release-topology.mjs +101 -77
  1088. package/scripts/check-runtime-semantic-closure.mjs +5 -8
  1089. package/scripts/check-source-bindings.mjs +54 -0
  1090. package/scripts/check-universal-workflow-bootstrap.mjs +136 -124
  1091. package/scripts/check-workflow-taxonomy.mjs +1 -1
  1092. package/scripts/check-workflows.sh +11 -0
  1093. package/scripts/generate-bootstrap-admission.mjs +32 -0
  1094. package/scripts/generate-bootstrap-recovery.mjs +94 -0
  1095. package/scripts/generate-buildchain-kfd-witnesses.mjs +3 -3
  1096. package/scripts/generate-channel-promotion-workflow.mjs +39 -518
  1097. package/scripts/generate-next-development-guidance.mjs +1 -1
  1098. package/scripts/generate-public-reference.mjs +2 -2
  1099. package/scripts/generate-site-bundle.mjs +42 -43
  1100. package/scripts/generate-tail-reseal-fixture.mjs +108 -0
  1101. package/scripts/generate-workflow-taxonomy.mjs +2 -2
  1102. package/scripts/inventory/binary.mjs +36 -0
  1103. package/scripts/inventory/promotion.mjs +72 -0
  1104. package/scripts/maintainability-domain-metrics.mjs +1 -1
  1105. package/scripts/maintainability-metrics.mjs +37 -37
  1106. package/scripts/maintainability-public-surface.mjs +19 -95
  1107. package/scripts/next-development-self-dogfood-harness.mjs +2 -2
  1108. package/scripts/next-development-self-dogfood.mjs +2 -2
  1109. package/scripts/platform-stage-checkpoint-rehearsal.mjs +33 -201
  1110. package/scripts/public-reference.mjs +0 -187
  1111. package/scripts/publication-rehearsal-fixture.mjs +1 -1
  1112. package/scripts/release-train-self-dogfood.mjs +9 -14
  1113. package/scripts/site-action-audit.mjs +16 -0
  1114. package/scripts/site-capability-metadata.mjs +3 -7
  1115. package/scripts/source-metric-lineage.mjs +17 -0
  1116. package/scripts/stage-capsule-resume-rehearsal.mjs +19 -55
  1117. package/scripts/tail-reseal-macos-rehearsal.mjs +1 -109
  1118. package/scripts/tsup-action.config.mjs +21 -0
  1119. package/scripts/verify-golden-path.mjs +1 -1
  1120. package/scripts/warrant-shadow-plan.mjs +49 -243
  1121. package/scripts/workflow-action-graph.mjs +149 -0
  1122. package/templates/bootstrap-recovery/actions/build/source/admit/action.yml +17 -0
  1123. package/templates/bootstrap-recovery/actions/build/source/admit/dist/index.js +63 -0
  1124. package/templates/bootstrap-recovery/actions/runtime/dependencies/install/action.yml +18 -0
  1125. package/templates/bootstrap-recovery/actions/runtime/dependencies/install/dist/index.js +63 -0
  1126. package/templates/bootstrap-recovery/actions/runtime/environment/prepare/action.yml +21 -0
  1127. package/templates/bootstrap-recovery/actions/workflow/admission/inspect/action.yml +27 -0
  1128. package/templates/bootstrap-recovery/actions/workflow/admission/inspect/dist/index.js +64 -0
  1129. package/templates/bootstrap-recovery/actions/workflow/admission/review/action.yml +15 -0
  1130. package/templates/bootstrap-recovery/actions/workflow/admission/review/dist/index.js +65 -0
  1131. package/templates/bootstrap-recovery/actions/workflow/recovery/admit/action.yml +47 -0
  1132. package/templates/bootstrap-recovery/actions/workflow/recovery/execute/action.yml +48 -0
  1133. package/templates/bootstrap-recovery/actions/workflow/recovery/settle/action.yml +54 -0
  1134. package/templates/bootstrap-recovery/actions/workflow/settlement/seal/action.yml +17 -0
  1135. package/templates/bootstrap-recovery/actions/workflow/settlement/seal/dist/index.js +65 -0
  1136. package/templates/bootstrap-recovery/manifest.json +68 -0
  1137. package/templates/bootstrap-recovery/package.json +9 -0
  1138. package/templates/native-dev-delivery.yml +28 -41
  1139. package/templates/universal-buildchain-bootstrap-recovery.yml +46 -213
  1140. package/templates/universal-buildchain-bootstrap.yml +1 -1
  1141. package/actions/github-artifact-attestation/README.md +0 -10
  1142. package/actions/promote-buildchain-ref/README.md +0 -549
  1143. package/actions/report-buildchain-issue/README.md +0 -107
  1144. package/actions/run-lifecycle/README.md +0 -71
  1145. package/actions/validate-config/README.md +0 -52
  1146. package/architecture/implementation-naming.json +0 -1273
  1147. package/bin/internal/adopter-delivery-cli.mjs +0 -70
  1148. package/bin/internal/cli-options.mjs +0 -79
  1149. package/bin/internal/compatibility-facts-cli.mjs +0 -101
  1150. package/bin/internal/trust-release-cli.mjs +0 -19
  1151. package/bin/internal/trust-release-command-handlers.mjs +0 -14
  1152. package/bin/internal/trust-release-inspection-handlers.mjs +0 -175
  1153. package/bin/internal/trust-release-release-handlers.mjs +0 -332
  1154. package/bin/internal/trust-release-verification-handlers.mjs +0 -306
  1155. package/contracts/fixtures/v4-adopter-delivery-v1/archive-template.json +0 -19
  1156. package/contracts/fixtures/v4-adopter-delivery-v1/bootstrap-positive.json +0 -93
  1157. package/packages/compatibility/adopter-delivery.js +0 -16
  1158. package/packages/compatibility/cross-platform-adopter-qualification.js +0 -12
  1159. package/packages/compatibility/floating-consumer-policy.js +0 -14
  1160. package/packages/compatibility/publication-qualification.js +0 -11
  1161. package/packages/compatibility/publication-rehearsal.js +0 -18
  1162. package/packages/compatibility/runtime-ref-resume-authority.js +0 -13
  1163. package/packages/compatibility/tail-reseal-receipt.js +0 -7
  1164. package/packages/compatibility/tail-reseal.js +0 -11
  1165. package/packages/core/adopter-delivery-parity.js +0 -219
  1166. package/packages/core/adopter-delivery.js +0 -359
  1167. package/packages/core/anchored-version-material.js +0 -281
  1168. package/packages/core/artifact-passport.js +0 -847
  1169. package/packages/core/artifact-verification-envelope.js +0 -500
  1170. package/packages/core/build-facts.js +0 -575
  1171. package/packages/core/buildchain-compatibility-authority.js +0 -336
  1172. package/packages/core/buildchain-compatibility-fact.js +0 -394
  1173. package/packages/core/buildchain-compatibility-facts.json +0 -217
  1174. package/packages/core/buildchain-compatibility-proof.js +0 -566
  1175. package/packages/core/buildchain-config.js +0 -1887
  1176. package/packages/core/buildchain-contract.js +0 -1048
  1177. package/packages/core/buildchain-delivery-bootstrap.js +0 -240
  1178. package/packages/core/buildchain-delivery-infrastructure.js +0 -164
  1179. package/packages/core/buildchain-delivery-self-dogfood.js +0 -395
  1180. package/packages/core/buildchain-domain.wasm +0 -0
  1181. package/packages/core/buildchain-kfd-claims.js +0 -733
  1182. package/packages/core/buildchain-publication-authority.js +0 -118
  1183. package/packages/core/canonical-contracts.js +0 -239
  1184. package/packages/core/ci-lane-change-budget.js +0 -260
  1185. package/packages/core/controller-evidence.js +0 -553
  1186. package/packages/core/cross-platform-adopter-qualification.js +0 -343
  1187. package/packages/core/delivery-warrant-fixture-runner.js +0 -375
  1188. package/packages/core/delivery-warrant-read-candidate.js +0 -286
  1189. package/packages/core/delivery-warrant-semantic-diff-gate.js +0 -351
  1190. package/packages/core/delivery-warrant-shadow-adapter.js +0 -447
  1191. package/packages/core/dev-delivery-authority-candidate.js +0 -270
  1192. package/packages/core/dev-delivery-authority-landing.js +0 -461
  1193. package/packages/core/dev-delivery-authority-state.js +0 -583
  1194. package/packages/core/dev-delivery-candidate-identity.js +0 -169
  1195. package/packages/core/dev-delivery-contract-surface.js +0 -76
  1196. package/packages/core/dev-delivery-native-proof.js +0 -566
  1197. package/packages/core/dev-delivery-proof.js +0 -286
  1198. package/packages/core/dev-delivery-warrant-legacy-recovery.js +0 -248
  1199. package/packages/core/dev-delivery-warrant-native-compatibility.js +0 -33
  1200. package/packages/core/dev-delivery-warrant-state.js +0 -599
  1201. package/packages/core/dev-delivery-warrant.js +0 -598
  1202. package/packages/core/diagnostics.js +0 -1904
  1203. package/packages/core/domain-wasm-artifact.js +0 -7
  1204. package/packages/core/floating-consumer-evidence.js +0 -338
  1205. package/packages/core/floating-consumer-policy.js +0 -571
  1206. package/packages/core/github-artifact-attestation.js +0 -642
  1207. package/packages/core/github-governance-authority.js +0 -1369
  1208. package/packages/core/homebrew.js +0 -414
  1209. package/packages/core/kfd-agent-hub.js +0 -496
  1210. package/packages/core/kfd.js +0 -966
  1211. package/packages/core/kfd2-product-claims.js +0 -454
  1212. package/packages/core/kfd3-surface-register.js +0 -924
  1213. package/packages/core/legacy-kfd-adopter-driver.js +0 -167
  1214. package/packages/core/next-development-projection.js +0 -310
  1215. package/packages/core/next-development-transition.js +0 -737
  1216. package/packages/core/oci-compose-qualification.js +0 -143
  1217. package/packages/core/oci-publication-bundle.js +0 -281
  1218. package/packages/core/package-manager.js +0 -323
  1219. package/packages/core/paper-agent-entry.js +0 -396
  1220. package/packages/core/paper-fleet.js +0 -313
  1221. package/packages/core/paper-npm-bootstrap.js +0 -492
  1222. package/packages/core/paper-repository.js +0 -214
  1223. package/packages/core/paper-runtime-channels.js +0 -348
  1224. package/packages/core/paper-scaffold-content.js +0 -574
  1225. package/packages/core/paper.js +0 -2478
  1226. package/packages/core/partial-mutation-recovery-qualification.js +0 -18
  1227. package/packages/core/platform-stage-checkpoints.js +0 -471
  1228. package/packages/core/product-publication.js +0 -59
  1229. package/packages/core/protected-publication-source.js +0 -91
  1230. package/packages/core/provider-operation-journal.js +0 -62
  1231. package/packages/core/provider-readback-idempotency.js +0 -309
  1232. package/packages/core/public-export-compatibility.js +0 -33
  1233. package/packages/core/public-surface-audit.js +0 -273
  1234. package/packages/core/public-surface-cli.js +0 -128
  1235. package/packages/core/publication-artifact-candidate.js +0 -128
  1236. package/packages/core/publication-artifact.js +0 -641
  1237. package/packages/core/publication-authority.js +0 -1163
  1238. package/packages/core/publication-development.js +0 -72
  1239. package/packages/core/publication-package.js +0 -252
  1240. package/packages/core/publication-rehearsal-capsule.js +0 -468
  1241. package/packages/core/publication-rehearsal-projection.js +0 -104
  1242. package/packages/core/publication-rehearsal-runtime.js +0 -190
  1243. package/packages/core/publication-rehearsal.js +0 -481
  1244. package/packages/core/publication-reproducibility.js +0 -947
  1245. package/packages/core/published-delivery-authority.js +0 -266
  1246. package/packages/core/readme-badges.js +0 -893
  1247. package/packages/core/release-activation-shadow.js +0 -32
  1248. package/packages/core/release-blocker-priority.js +0 -192
  1249. package/packages/core/release-candidate-recovery.js +0 -595
  1250. package/packages/core/release-candidate.js +0 -591
  1251. package/packages/core/release-invocation.js +0 -64
  1252. package/packages/core/release-line-bootstrap.js +0 -297
  1253. package/packages/core/release-line-dry-run.js +0 -303
  1254. package/packages/core/release-passport-contract.js +0 -479
  1255. package/packages/core/release-passport.js +0 -2884
  1256. package/packages/core/release-tail-compatibility.js +0 -60
  1257. package/packages/core/release-tail-provider-adapters.js +0 -461
  1258. package/packages/core/release-tail-provider-plane.js +0 -248
  1259. package/packages/core/runtime-selector-persistence.js +0 -228
  1260. package/packages/core/stable-publication-fence.js +0 -28
  1261. package/packages/core/stage-capsule-local-store.js +0 -428
  1262. package/packages/core/stage-capsule-qualification-campaign.js +0 -511
  1263. package/packages/core/stage-capsule-qualification.js +0 -455
  1264. package/packages/core/stage-capsule-resume-planner.js +0 -397
  1265. package/packages/core/stage-capsule-store.js +0 -404
  1266. package/packages/core/stage-capsule.js +0 -319
  1267. package/packages/core/tail-reseal-github.js +0 -178
  1268. package/packages/core/tail-reseal-receipt.js +0 -225
  1269. package/packages/core/tail-reseal.js +0 -594
  1270. package/packages/core/universal-workflow-bootstrap.js +0 -586
  1271. package/packages/core/web-surface-publication-candidate.js +0 -162
  1272. package/packages/core/workflow-yaml-contract.js +0 -342
  1273. package/scripts/aggregate-build-summary.mjs +0 -187
  1274. package/scripts/aggregate-diagnostics-summary.mjs +0 -54
  1275. package/scripts/anchored-version-material.mjs +0 -42
  1276. package/scripts/architecture.mjs +0 -610
  1277. package/scripts/artifact-relay-s3.mjs +0 -539
  1278. package/scripts/artifact-signing-controller-core.mjs +0 -525
  1279. package/scripts/artifact-signing-controller.mjs +0 -302
  1280. package/scripts/artifact-signing-delegation.mjs +0 -316
  1281. package/scripts/assemble-binary-release-admission.mjs +0 -213
  1282. package/scripts/assemble-publication-artifact-admission.mjs +0 -200
  1283. package/scripts/assemble-self-publication-admission.mjs +0 -201
  1284. package/scripts/assemble-web-surface-publication-admission.mjs +0 -204
  1285. package/scripts/audit-github-governance.mjs +0 -493
  1286. package/scripts/audit-publication-control-plane.mjs +0 -527
  1287. package/scripts/auditable-demo-bundle-verification.mjs +0 -148
  1288. package/scripts/auditable-demo-platform.mjs +0 -600
  1289. package/scripts/auditable-demo-presentation.mjs +0 -83
  1290. package/scripts/auditable-demo-renditions.mjs +0 -399
  1291. package/scripts/auditable-demo-transport-smoke.mjs +0 -176
  1292. package/scripts/auditable-demo.mjs +0 -1324
  1293. package/scripts/aws-codebuild-toolchain.mjs +0 -285
  1294. package/scripts/aws-macos-jit-controller-runtime.mjs +0 -82
  1295. package/scripts/aws-runner-burst-core.mjs +0 -248
  1296. package/scripts/aws-runner-burst.mjs +0 -79
  1297. package/scripts/aws-windows-jit-campaign.mjs +0 -202
  1298. package/scripts/aws-windows-jit-controller.mjs +0 -578
  1299. package/scripts/binary-publication-evidence.mjs +0 -133
  1300. package/scripts/bridge-bootstrap.mjs +0 -137
  1301. package/scripts/build-contract-core.mjs +0 -1216
  1302. package/scripts/buildchain-channel-router.mjs +0 -249
  1303. package/scripts/buildchain-cli-help.mjs +0 -321
  1304. package/scripts/buildchain-contract-lock.mjs +0 -184
  1305. package/scripts/buildchain-patrol.mjs +0 -280
  1306. package/scripts/compiler-cache-evidence.mjs +0 -304
  1307. package/scripts/consumer-policy.mjs +0 -231
  1308. package/scripts/controller-evidence.mjs +0 -208
  1309. package/scripts/copy-domain-wasm.mjs +0 -14
  1310. package/scripts/create-github-artifact-attestation-policy.mjs +0 -62
  1311. package/scripts/create-release-bundle.mjs +0 -167
  1312. package/scripts/cross-platform-adopter-qualification.mjs +0 -228
  1313. package/scripts/declarative-promotion-admission.mjs +0 -45
  1314. package/scripts/dev-alpha-candidate-patrol.mjs +0 -1197
  1315. package/scripts/dev-delivery-authority-command-adapters.mjs +0 -206
  1316. package/scripts/dev-delivery-authority-provider.mjs +0 -28
  1317. package/scripts/dev-delivery-authority.mjs +0 -490
  1318. package/scripts/dev-delivery-native-run.mjs +0 -177
  1319. package/scripts/dev-delivery-process-boundary.mjs +0 -260
  1320. package/scripts/dev-delivery-proof.mjs +0 -258
  1321. package/scripts/dev-delivery-provider-heartbeat.mjs +0 -215
  1322. package/scripts/dev-delivery-source-proof-replay.mjs +0 -153
  1323. package/scripts/dev-delivery-source-proof-reuse.mjs +0 -548
  1324. package/scripts/dev-delivery-two-phase-resume.mjs +0 -345
  1325. package/scripts/dev-delivery-two-phase.mjs +0 -573
  1326. package/scripts/dev-delivery-warrant-options.mjs +0 -298
  1327. package/scripts/dev-delivery-warrant-store.mjs +0 -316
  1328. package/scripts/dev-delivery-warrant-transition.mjs +0 -109
  1329. package/scripts/dev-delivery-warrant.mjs +0 -559
  1330. package/scripts/dev-merge-queue.mjs +0 -536
  1331. package/scripts/dev-pr-auto-merge.mjs +0 -1222
  1332. package/scripts/dev-pr-delivery-warrant.mjs +0 -467
  1333. package/scripts/dev-pr-prequeue-guard.mjs +0 -381
  1334. package/scripts/dev-qualification-patrol.mjs +0 -594
  1335. package/scripts/dispatch-artifact-signing-authority.mjs +0 -407
  1336. package/scripts/engineering-housekeeper-workflow.mjs +0 -401
  1337. package/scripts/ensure-github-release.mjs +0 -199
  1338. package/scripts/finalize-native-artifact-signing-result.mjs +0 -272
  1339. package/scripts/generate-channel-build-workflow.mjs +0 -69
  1340. package/scripts/generate-release-candidate-passport.mjs +0 -285
  1341. package/scripts/generate-universal-workflow-facades.mjs +0 -499
  1342. package/scripts/git-fetch-process-tree.mjs +0 -175
  1343. package/scripts/host-adapter.mjs +0 -182
  1344. package/scripts/implementation-references.mjs +0 -25
  1345. package/scripts/import-artifact-signing-results.mjs +0 -135
  1346. package/scripts/infra-contract-core.mjs +0 -1032
  1347. package/scripts/infra-contract.mjs +0 -345
  1348. package/scripts/init-repo.mjs +0 -518
  1349. package/scripts/inspect-artifact-signing-requests.mjs +0 -157
  1350. package/scripts/installer-publication.mjs +0 -361
  1351. package/scripts/lifecycle-substage-evidence.mjs +0 -274
  1352. package/scripts/locked-source-checkout.mjs +0 -595
  1353. package/scripts/materialize-artifact-signing-request.mjs +0 -66
  1354. package/scripts/merge-artifact-signing-results.mjs +0 -76
  1355. package/scripts/next-development-review.mjs +0 -331
  1356. package/scripts/next-development-transition.mjs +0 -47
  1357. package/scripts/npm-publish-dry-run.mjs +0 -182
  1358. package/scripts/npm-publish-transaction.mjs +0 -331
  1359. package/scripts/observed-evidence.mjs +0 -311
  1360. package/scripts/oci-compose-preview.mjs +0 -261
  1361. package/scripts/paper-agent-cli.mjs +0 -35
  1362. package/scripts/paper-work-fleet-cli.mjs +0 -594
  1363. package/scripts/paper.mjs +0 -644
  1364. package/scripts/product-publication-intent.mjs +0 -129
  1365. package/scripts/promotion-channel-router.mjs +0 -139
  1366. package/scripts/promotion-identity-resolver.mjs +0 -129
  1367. package/scripts/publication-artifact-candidate.mjs +0 -122
  1368. package/scripts/publication-artifact.mjs +0 -67
  1369. package/scripts/publication-candidate-kind.mjs +0 -93
  1370. package/scripts/publication-candidate-sealer.mjs +0 -119
  1371. package/scripts/publication-package.mjs +0 -38
  1372. package/scripts/publication-registry-hydrate.mjs +0 -216
  1373. package/scripts/publication-reproducibility.mjs +0 -62
  1374. package/scripts/publication-settlement.mjs +0 -217
  1375. package/scripts/publish-source-ref-resolver.mjs +0 -113
  1376. package/scripts/reconcile-github-governance.mjs +0 -689
  1377. package/scripts/reconcile-release-governance.mjs +0 -368
  1378. package/scripts/release-asset-client.mjs +0 -91
  1379. package/scripts/release-candidate-adapter.mjs +0 -41
  1380. package/scripts/release-candidate-anchor-provenance.mjs +0 -99
  1381. package/scripts/release-candidate-resolver.mjs +0 -842
  1382. package/scripts/release-finalization-review.mjs +0 -53
  1383. package/scripts/release-line-dry-run.mjs +0 -53
  1384. package/scripts/release-line-policy.mjs +0 -231
  1385. package/scripts/release-propagation.mjs +0 -411
  1386. package/scripts/release-tail.mjs +0 -178
  1387. package/scripts/release-transaction.mjs +0 -212
  1388. package/scripts/resolve-artifact-coordinates.mjs +0 -174
  1389. package/scripts/resolve-artifact-transfer-mode.mjs +0 -126
  1390. package/scripts/resolve-build-configuration.mjs +0 -105
  1391. package/scripts/resolve-build-contract.mjs +0 -96
  1392. package/scripts/resolve-publish-gate.mjs +0 -33
  1393. package/scripts/resolve-publish-source.mjs +0 -99
  1394. package/scripts/resume-from-candidate-run.mjs +0 -1117
  1395. package/scripts/route-offline-runners.mjs +0 -237
  1396. package/scripts/run-candidate-body-prefix-renderer.mjs +0 -187
  1397. package/scripts/run-lifecycle-core.mjs +0 -850
  1398. package/scripts/run-lifecycle.mjs +0 -56
  1399. package/scripts/runtime-ref-core.mjs +0 -171
  1400. package/scripts/seal-artifact-signing-requests.mjs +0 -431
  1401. package/scripts/seal-macos-credential-input.mjs +0 -135
  1402. package/scripts/shifu-gate-profile.mjs +0 -374
  1403. package/scripts/sign-detached-artifact-requests.mjs +0 -237
  1404. package/scripts/source-verification-evidence.mjs +0 -344
  1405. package/scripts/stable-candidate-patrol.mjs +0 -527
  1406. package/scripts/stable-candidate-policy.mjs +0 -25
  1407. package/scripts/stable-candidate-qualification.mjs +0 -358
  1408. package/scripts/stable-release-gate.mjs +0 -351
  1409. package/scripts/stage-capsule-qualification.mjs +0 -528
  1410. package/scripts/tail-reseal.mjs +0 -416
  1411. package/scripts/universal-facade-maintainability.mjs +0 -91
  1412. package/scripts/universal-workflow-backflow.mjs +0 -212
  1413. package/scripts/universal-workflow-engine.mjs +0 -620
  1414. package/scripts/universal-workflow-self-dogfood.mjs +0 -212
  1415. package/scripts/validate-package-manager-contract.mjs +0 -24
  1416. package/scripts/verify-artifact-signing-results.mjs +0 -124
  1417. package/scripts/verify-publish-channel-ref.mjs +0 -125
  1418. package/scripts/verify-publish-source-lock.mjs +0 -37
  1419. package/scripts/verify-release-pr.mjs +0 -34
  1420. package/scripts/verify-version-state-delta.mjs +0 -175
  1421. package/scripts/verify-web-surface-publication-capability.mjs +0 -78
  1422. package/scripts/web-surface-core.mjs +0 -2603
  1423. package/scripts/web-surface-production-decision.mjs +0 -158
  1424. package/scripts/web-surface-production-release-pr.mjs +0 -712
  1425. package/scripts/web-surface-release-feedback.mjs +0 -358
  1426. package/scripts/web-surface-release-pr-review.mjs +0 -187
  1427. package/scripts/web-surface.mjs +0 -460
  1428. package/scripts/workflow-call-contract.mjs +0 -133
  1429. package/scripts/workflow-friction-report.mjs +0 -375
  1430. package/scripts/workflow-taxonomy.mjs +0 -507
  1431. /package/actions/{macos-credential-island → build/credential/macos-island}/README.md +0 -0
  1432. /package/actions/{release-candidate-promote → release/promotion/candidate}/README.md +0 -0
  1433. /package/actions/{release-tail → release/tail/settle}/README.md +0 -0
  1434. /package/packages/core/{adopter-delivery-gate.js → adoption/adopter-delivery-gate.js} +0 -0
  1435. /package/packages/core/{adopter-delivery-json.js → adoption/adopter-delivery-json.js} +0 -0
  1436. /package/packages/core/{adopter-delivery-passport.js → adoption/adopter-delivery-passport.js} +0 -0
  1437. /package/packages/core/{adopter-delivery-vectors.js → adoption/adopter-delivery-vectors.js} +0 -0
  1438. /package/packages/core/{adopter-delivery-vectors.json → adoption/adopter-delivery-vectors.json} +0 -0
  1439. /package/packages/core/{buildchain-agent-manuals.js → adoption/buildchain-agent-manuals.js} +0 -0
  1440. /package/packages/core/{kfd-adopter-category-driver.js → adoption/kfd-adopter-category-driver.js} +0 -0
  1441. /package/packages/core/{kfd-adopter-manifest.js → adoption/kfd-adopter-manifest.js} +0 -0
  1442. /package/packages/core/{kfd-gate.js → adoption/kfd-gate.js} +0 -0
  1443. /package/packages/core/{kfd-product-gates.js → adoption/kfd-product-gates.js} +0 -0
  1444. /package/packages/core/{artifact-signing-result.js → build/artifact-signing-result.js} +0 -0
  1445. /package/packages/core/{artifact-signing.js → build/artifact-signing.js} +0 -0
  1446. /package/packages/core/{build-configuration.js → build/build-configuration.js} +0 -0
  1447. /package/{scripts → packages/core/build/commands}/resolve-artifact-signing-upload-route.mjs +0 -0
  1448. /package/packages/core/{detached-artifact-signature.js → build/detached-artifact-signature.js} +0 -0
  1449. /package/{scripts/gate-profile-core.mjs → packages/core/build/gate/contracts.js} +0 -0
  1450. /package/packages/core/{portable-dev-cache.js → build/portable-dev-cache.js} +0 -0
  1451. /package/packages/core/{buildchain-channel-identity.js → consumer/buildchain-channel-identity.js} +0 -0
  1452. /package/packages/core/{floating-consumer-release-passport.js → consumer/floating-consumer-release-passport.js} +0 -0
  1453. /package/packages/core/{runtime-ref-resume-authority.js → consumer/runtime-ref-resume-authority.js} +0 -0
  1454. /package/packages/core/{buildchain-layout.js → contracts/buildchain-layout.js} +0 -0
  1455. /package/{bin/internal → packages/core/contracts}/command-registry.mjs +0 -0
  1456. /package/packages/core/{kungfu-temporal-fact.js → contracts/kungfu-temporal-fact.js} +0 -0
  1457. /package/packages/core/{surface-manifest.js → contracts/surface-manifest.js} +0 -0
  1458. /package/packages/core/{workflow-call-contract.js → contracts/workflow-call-contract.js} +0 -0
  1459. /package/{scripts → packages/core/dev-delivery/commands}/project-cut-merge-queue-admission.mjs +0 -0
  1460. /package/packages/core/{dev-delivery-authority-evidence.js → dev-delivery/dev-delivery-authority-evidence.js} +0 -0
  1461. /package/packages/core/{dev-delivery-authority-observation.js → dev-delivery/dev-delivery-authority-observation.js} +0 -0
  1462. /package/packages/core/{dev-delivery-authority-qualification.js → dev-delivery/dev-delivery-authority-qualification.js} +0 -0
  1463. /package/packages/core/{dev-delivery-authority-settlement.js → dev-delivery/dev-delivery-authority-settlement.js} +0 -0
  1464. /package/packages/core/{dev-delivery-common.js → dev-delivery/dev-delivery-common.js} +0 -0
  1465. /package/packages/core/{dev-delivery-execution-failure.js → dev-delivery/dev-delivery-execution-failure.js} +0 -0
  1466. /package/packages/core/{dev-delivery-execution-transfer.js → dev-delivery/dev-delivery-execution-transfer.js} +0 -0
  1467. /package/packages/core/{dev-delivery-landing-admission-core.js → dev-delivery/dev-delivery-landing-admission-core.js} +0 -0
  1468. /package/packages/core/{dev-delivery-landing-readback.js → dev-delivery/dev-delivery-landing-readback.js} +0 -0
  1469. /package/packages/core/{dev-delivery-landing-terminal-evidence.js → dev-delivery/dev-delivery-landing-terminal-evidence.js} +0 -0
  1470. /package/packages/core/{dev-delivery-landing-testing-port.js → dev-delivery/dev-delivery-landing-testing-port.js} +0 -0
  1471. /package/packages/core/{dev-delivery-native-execution.js → dev-delivery/dev-delivery-native-execution.js} +0 -0
  1472. /package/packages/core/{dev-delivery-process-boundary.js → dev-delivery/dev-delivery-process-boundary.js} +0 -0
  1473. /package/packages/core/{dev-delivery-provider-attempt.js → dev-delivery/dev-delivery-provider-attempt.js} +0 -0
  1474. /package/packages/core/{dev-delivery-provider-heartbeat.js → dev-delivery/dev-delivery-provider-heartbeat.js} +0 -0
  1475. /package/packages/core/{dev-delivery-warrant-cancellation.js → dev-delivery/dev-delivery-warrant-cancellation.js} +0 -0
  1476. /package/packages/core/{dev-delivery-warrant-qualification.js → dev-delivery/dev-delivery-warrant-qualification.js} +0 -0
  1477. /package/packages/core/{dev-delivery-warrant-settlement.js → dev-delivery/dev-delivery-warrant-settlement.js} +0 -0
  1478. /package/packages/core/{dev-delivery-writer-protocol-transition.js → dev-delivery/dev-delivery-writer-protocol-transition.js} +0 -0
  1479. /package/packages/core/{engineering-housekeeper-github-client.js → governance/engineering-housekeeper-github-client.js} +0 -0
  1480. /package/packages/core/{engineering-housekeeper-github.js → governance/engineering-housekeeper-github.js} +0 -0
  1481. /package/packages/core/{engineering-housekeeper.js → governance/engineering-housekeeper.js} +0 -0
  1482. /package/packages/core/{issue-reporting.js → governance/issue-reporting.js} +0 -0
  1483. /package/packages/core/{cache-evidence.js → observability/cache-evidence.js} +0 -0
  1484. /package/packages/core/{candidate-timeline.js → observability/candidate-timeline.js} +0 -0
  1485. /package/packages/core/{logging.js → observability/logging.js} +0 -0
  1486. /package/packages/core/{paper-work.js → paper/paper-work.js} +0 -0
  1487. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-controller-core.mjs +0 -0
  1488. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-controller.mjs +0 -0
  1489. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-core.mjs +0 -0
  1490. /package/{scripts → packages/core/providers/commands}/aws-macos-jit-job-controller.mjs +0 -0
  1491. /package/{scripts → packages/core/providers/commands}/aws-macos-jit.mjs +0 -0
  1492. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-campaign-core.mjs +0 -0
  1493. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-controller-core.mjs +0 -0
  1494. /package/{scripts → packages/core/providers/commands}/aws-windows-jit-core.mjs +0 -0
  1495. /package/{scripts → packages/core/providers/commands}/aws-windows-jit.mjs +0 -0
  1496. /package/{scripts → packages/core/providers/commands}/github-output.mjs +0 -0
  1497. /package/packages/core/{oci-publication-graph.js → publication/oci-publication-graph.js} +0 -0
  1498. /package/packages/core/{publication-control-plane-audit.js → publication/publication-control-plane-audit.js} +0 -0
  1499. /package/packages/core/{publication-qualification.js → publication/publication-qualification.js} +0 -0
  1500. /package/packages/core/{publication-rehearsal-provider-bindings.js → publication/publication-rehearsal-provider-bindings.js} +0 -0
  1501. /package/packages/core/{publication-sealed-bundle.js → publication/publication-sealed-bundle.js} +0 -0
  1502. /package/packages/core/{channel-candidate.js → release/channel-candidate.js} +0 -0
  1503. /package/packages/core/{channel-promotion-baseline.js → release/channel-promotion-baseline.js} +0 -0
  1504. /package/{scripts → packages/core/release/commands}/promotion-routing-evidence.mjs +0 -0
  1505. /package/packages/core/{dev-alpha-active-release-train.js → release/dev-alpha-active-release-train.js} +0 -0
  1506. /package/packages/core/{dev-alpha-candidate-selection.js → release/dev-alpha-candidate-selection.js} +0 -0
  1507. /package/packages/core/{next-development-candidate-reservation.js → release/next-development-candidate-reservation.js} +0 -0
  1508. /package/packages/core/{next-development-controller.js → release/next-development-controller.js} +0 -0
  1509. /package/packages/core/{publish-transaction.js → release/publish-transaction.js} +0 -0
  1510. /package/packages/core/{release-activation-transaction.js → release/release-activation-transaction.js} +0 -0
  1511. /package/packages/core/{release-propagation-agent-entry.js → release/release-propagation-agent-entry.js} +0 -0
  1512. /package/packages/core/{release-propagation-capture.js → release/release-propagation-capture.js} +0 -0
  1513. /package/packages/core/{release-propagation-common.js → release/release-propagation-common.js} +0 -0
  1514. /package/packages/core/{release-propagation-execution-profile.js → release/release-propagation-execution-profile.js} +0 -0
  1515. /package/packages/core/{release-propagation-pickup.js → release/release-propagation-pickup.js} +0 -0
  1516. /package/packages/core/{release-propagation-push.js → release/release-propagation-push.js} +0 -0
  1517. /package/packages/core/{release-propagation-release.js → release/release-propagation-release.js} +0 -0
  1518. /package/packages/core/{release-propagation-stage-evidence.js → release/release-propagation-stage-evidence.js} +0 -0
  1519. /package/packages/core/{release-propagation-work-capture.js → release/release-propagation-work-capture.js} +0 -0
  1520. /package/packages/core/{release-propagation-work-constants.js → release/release-propagation-work-constants.js} +0 -0
  1521. /package/packages/core/{release-propagation-work-control.js → release/release-propagation-work-control.js} +0 -0
  1522. /package/packages/core/{release-propagation-work-transitions.js → release/release-propagation-work-transitions.js} +0 -0
  1523. /package/packages/core/{release-propagation-work.js → release/release-propagation-work.js} +0 -0
  1524. /package/packages/core/{release-propagation.js → release/release-propagation.js} +0 -0
  1525. /package/packages/core/{release-tail-product-capabilities.js → release/release-tail-product-capabilities.js} +0 -0
  1526. /package/packages/core/{release-train.js → release/release-train.js} +0 -0
  1527. /package/packages/core/{self-dogfood-version.js → release/self-dogfood-version.js} +0 -0
  1528. /package/packages/core/{stable-candidate-ledger.js → release/stable-candidate-ledger.js} +0 -0
  1529. /package/packages/core/{stable-release-gate.js → release/stable-release-gate.js} +0 -0
  1530. /package/packages/core/{tail-reseal-contract.js → release/tail-reseal-contract.js} +0 -0
  1531. /package/packages/core/{domain-wasm.js → runtime/domain-wasm.js} +0 -0
  1532. /package/packages/core/{spawn-command.js → runtime/spawn-command.js} +0 -0
  1533. /package/packages/core/{badges.js → web/badges.js} +0 -0
  1534. /package/{scripts → packages/core/web/commands}/web-surface-cloudfront-rewrite.mjs +0 -0
  1535. /package/{scripts → packages/core/web/commands}/web-surface-immutable-object.mjs +0 -0
  1536. /package/{scripts → packages/core/web/commands}/web-surface-routing.mjs +0 -0
@@ -185,557 +185,553 @@
185
185
  },
186
186
  "declarations": [
187
187
  {
188
- "laneId": ".github/workflows/.release-candidate-promote.yml#qualify",
188
+ "laneId": ".github/workflows/.build-demo-adapter.yml#gate",
189
189
  "authorityClass": "evidence",
190
190
  "triggerClass": "reusable",
191
191
  "concurrencyPolicy": {
192
- "mode": "serialized",
192
+ "mode": "ref-scoped",
193
193
  "cancelInProgress": false
194
194
  },
195
- "expectedRunnerMinutes": 30,
195
+ "expectedRunnerMinutes": 20,
196
196
  "cancellationBehavior": "finish-started",
197
197
  "sloImpact": {
198
198
  "mergeCritical": false,
199
- "metric": "protected release qualification latency",
199
+ "metric": "capability execution budget",
200
200
  "expectedContributionSeconds": 0,
201
- "rationale": "QUALIFY is the read-only exact-runtime and sealed-candidate admission boundary."
201
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
202
202
  }
203
203
  },
204
204
  {
205
- "laneId": ".github/workflows/.release-candidate-promote.yml#apply",
206
- "authorityClass": "release",
205
+ "laneId": ".github/workflows/.build-demo-adapter.yml#render",
206
+ "authorityClass": "evidence",
207
207
  "triggerClass": "reusable",
208
208
  "concurrencyPolicy": {
209
- "mode": "serialized",
209
+ "mode": "ref-scoped",
210
210
  "cancelInProgress": false
211
211
  },
212
- "expectedRunnerMinutes": 30,
212
+ "expectedRunnerMinutes": 40,
213
213
  "cancellationBehavior": "finish-started",
214
214
  "sloImpact": {
215
215
  "mergeCritical": false,
216
- "metric": "protected release APPLY latency",
216
+ "metric": "capability execution budget",
217
217
  "expectedContributionSeconds": 0,
218
- "rationale": "APPLY is the sole contents-write and provider-mutation OIDC authority boundary."
218
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
219
219
  }
220
220
  },
221
221
  {
222
- "laneId": ".github/workflows/.release-candidate-promote.yml#settle",
222
+ "laneId": ".github/workflows/.build-gate-profile.yml#aggregate",
223
223
  "authorityClass": "evidence",
224
224
  "triggerClass": "reusable",
225
225
  "concurrencyPolicy": {
226
- "mode": "serialized",
226
+ "mode": "none",
227
227
  "cancelInProgress": false
228
228
  },
229
- "expectedRunnerMinutes": 10,
230
- "cancellationBehavior": "finish-started",
229
+ "expectedRunnerMinutes": 360,
230
+ "cancellationBehavior": "provider-default",
231
231
  "sloImpact": {
232
232
  "mergeCritical": false,
233
- "metric": "terminal receipt projection latency",
233
+ "metric": "capability execution budget",
234
234
  "expectedContributionSeconds": 0,
235
- "rationale": "SETTLE verifies and projects the already durable terminal ReleaseReceipt without mutation authority."
235
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
236
236
  }
237
237
  },
238
238
  {
239
- "laneId": ".github/workflows/buildchain-ref-promotion-recovery.yml#resume",
240
- "authorityClass": "release",
241
- "triggerClass": "manual",
239
+ "laneId": ".github/workflows/.build-gate-profile.yml#plan",
240
+ "authorityClass": "evidence",
241
+ "triggerClass": "reusable",
242
242
  "concurrencyPolicy": {
243
243
  "mode": "none",
244
244
  "cancelInProgress": false
245
245
  },
246
- "expectedRunnerMinutes": 35,
247
- "cancellationBehavior": "finish-started",
246
+ "expectedRunnerMinutes": 360,
247
+ "cancellationBehavior": "provider-default",
248
248
  "sloImpact": {
249
249
  "mergeCritical": false,
250
- "metric": "manual recovery adapter latency",
250
+ "metric": "capability execution budget",
251
251
  "expectedContributionSeconds": 0,
252
- "rationale": "The recovery surface is a one-way adapter into the same canonical publisher."
252
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
253
253
  }
254
254
  },
255
255
  {
256
- "laneId": ".github/workflows/buildchain-ref-promotion.yml#classify-workflow-run",
256
+ "laneId": ".github/workflows/.build-gate-profile.yml#run-gates",
257
257
  "authorityClass": "evidence",
258
- "triggerClass": "mixed",
258
+ "triggerClass": "reusable",
259
259
  "concurrencyPolicy": {
260
260
  "mode": "none",
261
261
  "cancelInProgress": false
262
262
  },
263
- "expectedRunnerMinutes": 2,
264
- "cancellationBehavior": "finish-started",
263
+ "expectedRunnerMinutes": 360,
264
+ "cancellationBehavior": "provider-default",
265
265
  "sloImpact": {
266
266
  "mergeCritical": false,
267
- "metric": "Alpha finalization classification latency",
267
+ "metric": "capability execution budget",
268
268
  "expectedContributionSeconds": 0,
269
- "rationale": "The read-only classifier binds the verified head to exact product state before suppressing a duplicate publication transaction."
269
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
270
270
  }
271
271
  },
272
272
  {
273
- "laneId": ".github/workflows/buildchain-ref-promotion.yml#promote",
274
- "authorityClass": "release",
275
- "triggerClass": "mixed",
273
+ "laneId": ".github/workflows/.build.yml#attest",
274
+ "authorityClass": "evidence",
275
+ "triggerClass": "reusable",
276
276
  "concurrencyPolicy": {
277
277
  "mode": "none",
278
278
  "cancelInProgress": false
279
279
  },
280
- "expectedRunnerMinutes": 35,
280
+ "expectedRunnerMinutes": 15,
281
281
  "cancellationBehavior": "finish-started",
282
282
  "sloImpact": {
283
283
  "mergeCritical": false,
284
- "metric": "Buildchain alpha promotion adapter latency",
284
+ "metric": "build orchestration latency",
285
285
  "expectedContributionSeconds": 0,
286
- "rationale": "The Buildchain-owned alpha entry delegates to the single v4 publisher."
286
+ "rationale": "Attest only the verified final artifact identity."
287
287
  }
288
288
  },
289
289
  {
290
- "laneId": ".github/workflows/buildchain-ref-promotion.yml#universal-bootstrap",
291
- "authorityClass": "governed-delegation",
292
- "triggerClass": "mixed",
290
+ "laneId": ".github/workflows/.build.yml#build-container",
291
+ "authorityClass": "evidence",
292
+ "triggerClass": "reusable",
293
293
  "concurrencyPolicy": {
294
294
  "mode": "none",
295
295
  "cancelInProgress": false
296
296
  },
297
- "expectedRunnerMinutes": 60,
297
+ "expectedRunnerMinutes": 180,
298
298
  "cancellationBehavior": "finish-started",
299
299
  "sloImpact": {
300
300
  "mergeCritical": false,
301
- "metric": "canonical exact-candidate self-promotion latency",
301
+ "metric": "build orchestration latency",
302
302
  "expectedContributionSeconds": 0,
303
- "rationale": "The canonical publisher delegates one closed request to the exact reviewed candidate and keeps the compatibility path mutually exclusive."
303
+ "rationale": "Run ordered project stages on the governed Linux container."
304
304
  }
305
305
  },
306
306
  {
307
- "laneId": ".github/workflows/release-candidate-promote.yml#invoke",
308
- "authorityClass": "release",
307
+ "laneId": ".github/workflows/.build.yml#deliver",
308
+ "authorityClass": "evidence",
309
309
  "triggerClass": "reusable",
310
310
  "concurrencyPolicy": {
311
311
  "mode": "none",
312
312
  "cancelInProgress": false
313
313
  },
314
- "expectedRunnerMinutes": 35,
314
+ "expectedRunnerMinutes": 15,
315
315
  "cancellationBehavior": "finish-started",
316
316
  "sloImpact": {
317
317
  "mergeCritical": false,
318
- "metric": "public promotion adapter latency",
318
+ "metric": "build orchestration latency",
319
319
  "expectedContributionSeconds": 0,
320
- "rationale": "The public compatibility surface resolves discovery facts and invokes one fixed v4 publisher."
320
+ "rationale": "Verify every required producer and publish rooted final references."
321
321
  }
322
322
  },
323
323
  {
324
- "laneId": ".github/workflows/v4-declarative-release-tail-dogfood.yml#publish",
325
- "authorityClass": "release",
326
- "triggerClass": "manual",
324
+ "laneId": ".github/workflows/.build.yml#plan",
325
+ "authorityClass": "evidence",
326
+ "triggerClass": "reusable",
327
327
  "concurrencyPolicy": {
328
328
  "mode": "none",
329
329
  "cancelInProgress": false
330
330
  },
331
- "expectedRunnerMinutes": 35,
331
+ "expectedRunnerMinutes": 10,
332
332
  "cancellationBehavior": "finish-started",
333
333
  "sloImpact": {
334
334
  "mergeCritical": false,
335
- "metric": "manual dogfood release completion latency",
335
+ "metric": "build orchestration latency",
336
336
  "expectedContributionSeconds": 0,
337
- "rationale": "The explicit dogfood run proves hosted provider publication and checkpoint resume without joining pull-request checks."
337
+ "rationale": "Admit the source and runtime and resolve the read-only project plan."
338
338
  }
339
339
  },
340
340
  {
341
- "laneId": ".github/workflows/v4-adopter-delivery.yml#qualification",
342
- "authorityClass": "evidence",
343
- "triggerClass": "mixed",
341
+ "laneId": ".github/workflows/.build.yml#sign",
342
+ "authorityClass": "governed-delegation",
343
+ "triggerClass": "reusable",
344
344
  "concurrencyPolicy": {
345
345
  "mode": "none",
346
346
  "cancelInProgress": false
347
347
  },
348
- "expectedRunnerMinutes": 5,
348
+ "expectedRunnerMinutes": 180,
349
349
  "cancellationBehavior": "finish-started",
350
350
  "sloImpact": {
351
351
  "mergeCritical": false,
352
- "metric": "public adopter qualification completion latency",
352
+ "metric": "build orchestration latency",
353
353
  "expectedContributionSeconds": 0,
354
- "rationale": "The lane only reconciles already-produced rooted platform reports and grants no provider, release, or stable publication authority."
354
+ "rationale": "Keep detached signing and certificate instances separate from source execution."
355
355
  }
356
356
  },
357
357
  {
358
- "laneId": ".github/workflows/bootstrap.yml#admit",
358
+ "laneId": ".github/workflows/.ops-git-sync.yml#sync",
359
359
  "authorityClass": "evidence",
360
360
  "triggerClass": "reusable",
361
361
  "concurrencyPolicy": {
362
362
  "mode": "none",
363
363
  "cancelInProgress": false
364
364
  },
365
- "expectedRunnerMinutes": 10,
366
- "cancellationBehavior": "finish-started",
365
+ "expectedRunnerMinutes": 360,
366
+ "cancellationBehavior": "provider-default",
367
367
  "sloImpact": {
368
368
  "mergeCritical": false,
369
- "metric": "exact-candidate admission latency",
369
+ "metric": "capability execution budget",
370
370
  "expectedContributionSeconds": 0,
371
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
371
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
372
372
  }
373
373
  },
374
374
  {
375
- "laneId": ".github/workflows/bootstrap.yml#execute",
376
- "authorityClass": "governed-delegation",
375
+ "laneId": ".github/workflows/.release-authority.yml#verify",
376
+ "authorityClass": "release",
377
377
  "triggerClass": "reusable",
378
378
  "concurrencyPolicy": {
379
379
  "mode": "none",
380
380
  "cancelInProgress": false
381
381
  },
382
- "expectedRunnerMinutes": 60,
383
- "cancellationBehavior": "finish-started",
382
+ "expectedRunnerMinutes": 360,
383
+ "cancellationBehavior": "provider-default",
384
384
  "sloImpact": {
385
385
  "mergeCritical": false,
386
- "metric": "exact-candidate execution latency",
386
+ "metric": "capability execution budget",
387
387
  "expectedContributionSeconds": 0,
388
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
388
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
389
389
  }
390
390
  },
391
391
  {
392
- "laneId": ".github/workflows/bootstrap.yml#settle",
393
- "authorityClass": "evidence",
392
+ "laneId": ".github/workflows/.release-binary-assets.yml#publication-authority",
393
+ "authorityClass": "governed-delegation",
394
394
  "triggerClass": "reusable",
395
395
  "concurrencyPolicy": {
396
396
  "mode": "none",
397
397
  "cancelInProgress": false
398
398
  },
399
- "expectedRunnerMinutes": 10,
400
- "cancellationBehavior": "finish-started",
399
+ "expectedRunnerMinutes": 360,
400
+ "cancellationBehavior": "provider-default",
401
401
  "sloImpact": {
402
402
  "mergeCritical": false,
403
- "metric": "universal terminal settlement latency",
403
+ "metric": "capability execution budget",
404
404
  "expectedContributionSeconds": 0,
405
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
405
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
406
406
  }
407
407
  },
408
408
  {
409
- "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-admit",
410
- "authorityClass": "evidence",
409
+ "laneId": ".github/workflows/.release-binary-assets.yml#publish",
410
+ "authorityClass": "release",
411
411
  "triggerClass": "reusable",
412
412
  "concurrencyPolicy": {
413
413
  "mode": "none",
414
414
  "cancelInProgress": false
415
415
  },
416
- "expectedRunnerMinutes": 10,
417
- "cancellationBehavior": "finish-started",
416
+ "expectedRunnerMinutes": 360,
417
+ "cancellationBehavior": "provider-default",
418
418
  "sloImpact": {
419
419
  "mergeCritical": false,
420
- "metric": "consumer-owned exact-candidate admission latency",
420
+ "metric": "capability execution budget",
421
421
  "expectedContributionSeconds": 0,
422
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
422
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
423
423
  }
424
424
  },
425
425
  {
426
- "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-execute",
427
- "authorityClass": "governed-delegation",
426
+ "laneId": ".github/workflows/.release-promote.yml#apply",
427
+ "authorityClass": "release",
428
428
  "triggerClass": "reusable",
429
429
  "concurrencyPolicy": {
430
- "mode": "none",
430
+ "mode": "serialized",
431
431
  "cancelInProgress": false
432
432
  },
433
- "expectedRunnerMinutes": 60,
433
+ "expectedRunnerMinutes": 30,
434
434
  "cancellationBehavior": "finish-started",
435
435
  "sloImpact": {
436
436
  "mergeCritical": false,
437
- "metric": "consumer-owned exact-candidate execution latency",
437
+ "metric": "protected release APPLY latency",
438
438
  "expectedContributionSeconds": 0,
439
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
439
+ "rationale": "APPLY is the sole contents-write and provider-mutation OIDC authority boundary."
440
440
  }
441
441
  },
442
442
  {
443
- "laneId": ".github/workflows/universal-bootstrap-recovery.yml#recovery-settle",
443
+ "laneId": ".github/workflows/.release-promote.yml#qualify",
444
444
  "authorityClass": "evidence",
445
445
  "triggerClass": "reusable",
446
446
  "concurrencyPolicy": {
447
- "mode": "none",
447
+ "mode": "serialized",
448
448
  "cancelInProgress": false
449
449
  },
450
- "expectedRunnerMinutes": 10,
450
+ "expectedRunnerMinutes": 30,
451
451
  "cancellationBehavior": "finish-started",
452
452
  "sloImpact": {
453
453
  "mergeCritical": false,
454
- "metric": "consumer-owned terminal settlement latency",
454
+ "metric": "protected release qualification latency",
455
455
  "expectedContributionSeconds": 0,
456
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
456
+ "rationale": "QUALIFY is the read-only exact-runtime and sealed-candidate admission boundary."
457
457
  }
458
458
  },
459
459
  {
460
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#prepare",
460
+ "laneId": ".github/workflows/.release-promote.yml#settle",
461
461
  "authorityClass": "evidence",
462
- "triggerClass": "mixed",
462
+ "triggerClass": "reusable",
463
463
  "concurrencyPolicy": {
464
- "mode": "none",
464
+ "mode": "serialized",
465
465
  "cancelInProgress": false
466
466
  },
467
467
  "expectedRunnerMinutes": 10,
468
468
  "cancellationBehavior": "finish-started",
469
469
  "sloImpact": {
470
470
  "mergeCritical": false,
471
- "metric": "Train-first self-dogfood admission latency",
471
+ "metric": "terminal receipt projection latency",
472
472
  "expectedContributionSeconds": 0,
473
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
473
+ "rationale": "SETTLE verifies and projects the already durable terminal ReleaseReceipt without mutation authority."
474
474
  }
475
475
  },
476
476
  {
477
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-conformance",
477
+ "laneId": ".github/workflows/build.yml#build",
478
478
  "authorityClass": "governed-delegation",
479
- "triggerClass": "mixed",
479
+ "triggerClass": "reusable",
480
480
  "concurrencyPolicy": {
481
481
  "mode": "none",
482
482
  "cancelInProgress": false
483
483
  },
484
- "expectedRunnerMinutes": 60,
484
+ "expectedRunnerMinutes": 120,
485
485
  "cancellationBehavior": "finish-started",
486
486
  "sloImpact": {
487
487
  "mergeCritical": false,
488
- "metric": "Train-first exact-candidate self-dogfood latency",
488
+ "metric": "configured build planning and execution latency",
489
489
  "expectedContributionSeconds": 0,
490
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
490
+ "rationale": "The public facade delegates once to the backbone; no additional build or controller runs."
491
491
  }
492
492
  },
493
493
  {
494
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-conformance",
495
- "authorityClass": "governed-delegation",
494
+ "laneId": ".github/workflows/public-build-adopter-qualification.yml#conformance",
495
+ "authorityClass": "evidence",
496
496
  "triggerClass": "mixed",
497
497
  "concurrencyPolicy": {
498
498
  "mode": "none",
499
499
  "cancelInProgress": false
500
500
  },
501
- "expectedRunnerMinutes": 60,
502
- "cancellationBehavior": "finish-started",
501
+ "expectedRunnerMinutes": 360,
502
+ "cancellationBehavior": "provider-default",
503
503
  "sloImpact": {
504
504
  "mergeCritical": false,
505
- "metric": "Train-first exact-candidate self-dogfood latency",
505
+ "metric": "capability execution budget",
506
506
  "expectedContributionSeconds": 0,
507
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
507
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
508
508
  }
509
509
  },
510
510
  {
511
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-alpha",
512
- "authorityClass": "governed-delegation",
511
+ "laneId": ".github/workflows/public-build-adopter-qualification.yml#consumer-admission",
512
+ "authorityClass": "evidence",
513
513
  "triggerClass": "mixed",
514
514
  "concurrencyPolicy": {
515
515
  "mode": "none",
516
516
  "cancelInProgress": false
517
517
  },
518
- "expectedRunnerMinutes": 60,
519
- "cancellationBehavior": "finish-started",
518
+ "expectedRunnerMinutes": 360,
519
+ "cancellationBehavior": "provider-default",
520
520
  "sloImpact": {
521
521
  "mergeCritical": false,
522
- "metric": "Train-first exact-candidate self-dogfood latency",
522
+ "metric": "capability execution budget",
523
523
  "expectedContributionSeconds": 0,
524
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
524
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
525
525
  }
526
526
  },
527
527
  {
528
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-alpha",
529
- "authorityClass": "governed-delegation",
528
+ "laneId": ".github/workflows/public-build-adopter-qualification.yml#qualification",
529
+ "authorityClass": "evidence",
530
530
  "triggerClass": "mixed",
531
531
  "concurrencyPolicy": {
532
532
  "mode": "none",
533
533
  "cancelInProgress": false
534
534
  },
535
- "expectedRunnerMinutes": 60,
535
+ "expectedRunnerMinutes": 5,
536
536
  "cancellationBehavior": "finish-started",
537
537
  "sloImpact": {
538
538
  "mergeCritical": false,
539
- "metric": "Train-first exact-candidate self-dogfood latency",
539
+ "metric": "public adopter qualification completion latency",
540
540
  "expectedContributionSeconds": 0,
541
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
541
+ "rationale": "The lane only reconciles already-produced rooted platform reports and grants no provider, release, or stable publication authority."
542
542
  }
543
543
  },
544
544
  {
545
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#primary-stable",
546
- "authorityClass": "governed-delegation",
547
- "triggerClass": "mixed",
545
+ "laneId": ".github/workflows/public-build-check.yml#check",
546
+ "authorityClass": "evidence",
547
+ "triggerClass": "reusable",
548
548
  "concurrencyPolicy": {
549
549
  "mode": "none",
550
550
  "cancelInProgress": false
551
551
  },
552
- "expectedRunnerMinutes": 60,
553
- "cancellationBehavior": "finish-started",
552
+ "expectedRunnerMinutes": 360,
553
+ "cancellationBehavior": "provider-default",
554
554
  "sloImpact": {
555
555
  "mergeCritical": false,
556
- "metric": "Train-first exact-candidate self-dogfood latency",
556
+ "metric": "capability execution budget",
557
557
  "expectedContributionSeconds": 0,
558
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
558
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
559
559
  }
560
560
  },
561
561
  {
562
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#recovery-stable",
563
- "authorityClass": "governed-delegation",
564
- "triggerClass": "mixed",
562
+ "laneId": ".github/workflows/public-build-demo.yml#capture",
563
+ "authorityClass": "evidence",
564
+ "triggerClass": "reusable",
565
565
  "concurrencyPolicy": {
566
- "mode": "none",
566
+ "mode": "ref-scoped",
567
567
  "cancelInProgress": false
568
568
  },
569
- "expectedRunnerMinutes": 60,
569
+ "expectedRunnerMinutes": 20,
570
570
  "cancellationBehavior": "finish-started",
571
571
  "sloImpact": {
572
572
  "mergeCritical": false,
573
- "metric": "Train-first exact-candidate self-dogfood latency",
573
+ "metric": "capability execution budget",
574
574
  "expectedContributionSeconds": 0,
575
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
575
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
576
576
  }
577
577
  },
578
578
  {
579
- "laneId": ".github/workflows/universal-bootstrap-dogfood.yml#reconcile",
579
+ "laneId": ".github/workflows/public-build-demo.yml#publish",
580
580
  "authorityClass": "evidence",
581
- "triggerClass": "mixed",
581
+ "triggerClass": "reusable",
582
582
  "concurrencyPolicy": {
583
- "mode": "none",
583
+ "mode": "ref-scoped",
584
584
  "cancelInProgress": false
585
585
  },
586
- "expectedRunnerMinutes": 10,
586
+ "expectedRunnerMinutes": 15,
587
587
  "cancellationBehavior": "finish-started",
588
588
  "sloImpact": {
589
589
  "mergeCritical": false,
590
- "metric": "primary and recovery equivalence latency",
590
+ "metric": "capability execution budget",
591
591
  "expectedContributionSeconds": 0,
592
- "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
592
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
593
593
  }
594
594
  },
595
595
  {
596
- "laneId": ".github/workflows/self-release-next-development.yml#review",
597
- "authorityClass": "merge-critical-admission",
598
- "triggerClass": "mixed",
596
+ "laneId": ".github/workflows/public-build-demo.yml#qualify",
597
+ "authorityClass": "evidence",
598
+ "triggerClass": "reusable",
599
599
  "concurrencyPolicy": {
600
600
  "mode": "ref-scoped",
601
601
  "cancelInProgress": false
602
602
  },
603
- "expectedRunnerMinutes": 3,
603
+ "expectedRunnerMinutes": 120,
604
604
  "cancellationBehavior": "finish-started",
605
605
  "sloImpact": {
606
- "mergeCritical": true,
607
- "metric": "generated next-development independent review latency",
608
- "expectedContributionSeconds": 180,
609
- "rationale": "Only successful same-repository version PRs regenerate from the protected base and read completed publication evidence; ordinary source PRs skip the lane. Native queue checks remain final merge authority."
606
+ "mergeCritical": false,
607
+ "metric": "capability execution budget",
608
+ "expectedContributionSeconds": 0,
609
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
610
610
  }
611
611
  },
612
612
  {
613
- "laneId": ".github/workflows/public-release-oci-compose-preview.yml#promote",
614
- "authorityClass": "release",
613
+ "laneId": ".github/workflows/public-build-publication.yml#publication",
614
+ "authorityClass": "evidence",
615
615
  "triggerClass": "reusable",
616
616
  "concurrencyPolicy": {
617
- "mode": "serialized",
617
+ "mode": "none",
618
618
  "cancelInProgress": false
619
619
  },
620
- "expectedRunnerMinutes": 8,
621
- "cancellationBehavior": "finish-started",
620
+ "expectedRunnerMinutes": 360,
621
+ "cancellationBehavior": "provider-default",
622
622
  "sloImpact": {
623
623
  "mergeCritical": false,
624
- "metric": "qualified Compose preview promotion",
624
+ "metric": "capability execution budget",
625
625
  "expectedContributionSeconds": 0,
626
- "rationale": "Runs only after completed exact-source public installation qualification; no merge-critical runner lane is added."
626
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
627
627
  }
628
628
  },
629
629
  {
630
- "laneId": ".github/workflows/.build.yml#configure",
630
+ "laneId": ".github/workflows/public-build-stage-capsule-canary.yml#consumer-admission",
631
631
  "authorityClass": "evidence",
632
632
  "triggerClass": "reusable",
633
633
  "concurrencyPolicy": {
634
634
  "mode": "none",
635
635
  "cancelInProgress": false
636
636
  },
637
- "expectedRunnerMinutes": 5,
638
- "cancellationBehavior": "finish-started",
637
+ "expectedRunnerMinutes": 360,
638
+ "cancellationBehavior": "provider-default",
639
639
  "sloImpact": {
640
640
  "mergeCritical": false,
641
- "metric": "configured build planning and execution latency",
642
- "expectedContributionSeconds": 20,
643
- "rationale": "Resolve exact source TOML and runtime-owned environment before admission or matrix scheduling."
641
+ "metric": "capability execution budget",
642
+ "expectedContributionSeconds": 0,
643
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
644
644
  }
645
645
  },
646
646
  {
647
- "laneId": ".github/workflows/build.yml#build",
648
- "authorityClass": "governed-delegation",
647
+ "laneId": ".github/workflows/public-build-stage-capsule-canary.yml#qualify",
648
+ "authorityClass": "evidence",
649
649
  "triggerClass": "reusable",
650
650
  "concurrencyPolicy": {
651
651
  "mode": "none",
652
652
  "cancelInProgress": false
653
653
  },
654
- "expectedRunnerMinutes": 120,
654
+ "expectedRunnerMinutes": 360,
655
+ "cancellationBehavior": "provider-default",
656
+ "sloImpact": {
657
+ "mergeCritical": false,
658
+ "metric": "capability execution budget",
659
+ "expectedContributionSeconds": 0,
660
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
661
+ }
662
+ },
663
+ {
664
+ "laneId": ".github/workflows/public-build-stage-capsule-canary.yml#reconcile",
665
+ "authorityClass": "evidence",
666
+ "triggerClass": "reusable",
667
+ "concurrencyPolicy": {
668
+ "mode": "none",
669
+ "cancelInProgress": false
670
+ },
671
+ "expectedRunnerMinutes": 360,
672
+ "cancellationBehavior": "provider-default",
673
+ "sloImpact": {
674
+ "mergeCritical": false,
675
+ "metric": "capability execution budget",
676
+ "expectedContributionSeconds": 0,
677
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
678
+ }
679
+ },
680
+ {
681
+ "laneId": ".github/workflows/public-ops-alpha-candidate-patrol.yml#observe",
682
+ "authorityClass": "evidence",
683
+ "triggerClass": "reusable",
684
+ "concurrencyPolicy": {
685
+ "mode": "ref-scoped",
686
+ "cancelInProgress": false
687
+ },
688
+ "expectedRunnerMinutes": 360,
655
689
  "cancellationBehavior": "finish-started",
656
690
  "sloImpact": {
657
691
  "mergeCritical": false,
658
- "metric": "configured build planning and execution latency",
692
+ "metric": "capability execution budget",
659
693
  "expectedContributionSeconds": 0,
660
- "rationale": "The public facade delegates once to the backbone; no additional build or controller runs."
694
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
661
695
  }
662
696
  },
663
697
  {
664
- "laneId": ".github/workflows/self-build-stable-dogfood.yml#stable-consumer",
665
- "authorityClass": "governed-delegation",
666
- "triggerClass": "mixed",
698
+ "laneId": ".github/workflows/public-ops-alpha-candidate-patrol.yml#settle",
699
+ "authorityClass": "evidence",
700
+ "triggerClass": "reusable",
667
701
  "concurrencyPolicy": {
668
702
  "mode": "ref-scoped",
669
703
  "cancelInProgress": false
670
704
  },
671
- "expectedRunnerMinutes": 20,
705
+ "expectedRunnerMinutes": 360,
672
706
  "cancellationBehavior": "finish-started",
673
707
  "sloImpact": {
674
708
  "mergeCritical": false,
675
- "metric": "Published stable TOML build qualification latency",
709
+ "metric": "capability execution budget",
676
710
  "expectedContributionSeconds": 0,
677
- "rationale": "Independent thin public stable fixture caller permits producer-first channel upgrades without duplicating build orchestration."
711
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
678
712
  }
679
- }
680
- ],
681
- "declarationFamilies": [
713
+ },
682
714
  {
683
- "authorityClass": "governed-delegation",
715
+ "laneId": ".github/workflows/public-ops-bootstrap-recovery.yml#recovery-admit",
716
+ "authorityClass": "evidence",
684
717
  "triggerClass": "reusable",
685
718
  "concurrencyPolicy": {
686
719
  "mode": "none",
687
720
  "cancelInProgress": false
688
721
  },
689
- "expectedRunnerMinutes": 60,
722
+ "expectedRunnerMinutes": 10,
690
723
  "cancellationBehavior": "finish-started",
691
724
  "sloImpact": {
692
725
  "mergeCritical": false,
693
- "metric": "opt-in exact-candidate execution latency",
726
+ "metric": "consumer-owned exact-candidate admission latency",
694
727
  "expectedContributionSeconds": 0,
695
728
  "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
696
- },
697
- "laneIds": [
698
- ".github/workflows/.auditable-demo.yml#universal-bootstrap",
699
- ".github/workflows/.binary-release-assets.yml#universal-bootstrap",
700
- ".github/workflows/.bump-minor-version.yml#universal-bootstrap",
701
- ".github/workflows/.declarative-auditable-demo.yml#universal-bootstrap",
702
- ".github/workflows/.gate-profile.yml#universal-bootstrap",
703
- ".github/workflows/.publication-authority.yml#universal-bootstrap",
704
- ".github/workflows/.release-candidate-promote.yml#universal-bootstrap",
705
- ".github/workflows/.release-verify.yml#universal-bootstrap",
706
- ".github/workflows/.sam-verify.yml#universal-bootstrap",
707
- ".github/workflows/.sync-release-page.yml#universal-bootstrap",
708
- ".github/workflows/.sync-remote-git.yml#universal-bootstrap",
709
- ".github/workflows/.web-surface.yml#universal-bootstrap",
710
- ".github/workflows/.wheel-verify.yml#universal-bootstrap",
711
- ".github/workflows/buildchain-patrol.yml#universal-bootstrap",
712
- ".github/workflows/check.yml#universal-bootstrap",
713
- ".github/workflows/dev-alpha-candidate-patrol.yml#universal-bootstrap",
714
- ".github/workflows/dev-delivery-warrant-cancel.yml#universal-bootstrap",
715
- ".github/workflows/dev-delivery-warrant-close.yml#universal-bootstrap",
716
- ".github/workflows/dev-pr-auto-merge.yml#universal-bootstrap",
717
- ".github/workflows/dev-qualification-patrol.yml#universal-bootstrap",
718
- ".github/workflows/engineering-housekeeper.yml#universal-bootstrap",
719
- ".github/workflows/github-artifact-attestation.yml#universal-bootstrap",
720
- ".github/workflows/paper-release-sealed.yml#universal-bootstrap",
721
- ".github/workflows/paper-release.yml#universal-bootstrap",
722
- ".github/workflows/patrol-daily.yml#universal-bootstrap",
723
- ".github/workflows/patrol-monthly.yml#universal-bootstrap",
724
- ".github/workflows/patrol-observed-evidence.yml#universal-bootstrap",
725
- ".github/workflows/patrol-weekly.yml#universal-bootstrap",
726
- ".github/workflows/public-release-oci-compose-preview.yml#universal-bootstrap",
727
- ".github/workflows/publication-artifact.yml#universal-bootstrap",
728
- ".github/workflows/release-candidate-promote.yml#universal-bootstrap",
729
- ".github/workflows/release-propagation.yml#universal-bootstrap",
730
- ".github/workflows/release-tail.yml#universal-bootstrap",
731
- ".github/workflows/stable-candidate-patrol.yml#universal-bootstrap",
732
- ".github/workflows/v4-stage-capsule-canary.yml#universal-bootstrap",
733
- ".github/workflows/v4-tail-reseal.yml#universal-bootstrap"
734
- ]
729
+ }
735
730
  },
736
731
  {
732
+ "laneId": ".github/workflows/public-ops-bootstrap-recovery.yml#recovery-execute",
737
733
  "authorityClass": "governed-delegation",
738
- "triggerClass": "mixed",
734
+ "triggerClass": "reusable",
739
735
  "concurrencyPolicy": {
740
736
  "mode": "none",
741
737
  "cancelInProgress": false
@@ -744,14 +740,1898 @@
744
740
  "cancellationBehavior": "finish-started",
745
741
  "sloImpact": {
746
742
  "mergeCritical": false,
747
- "metric": "mixed-trigger exact-candidate execution latency",
743
+ "metric": "consumer-owned exact-candidate execution latency",
748
744
  "expectedContributionSeconds": 0,
749
745
  "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
746
+ }
747
+ },
748
+ {
749
+ "laneId": ".github/workflows/public-ops-bootstrap-recovery.yml#recovery-settle",
750
+ "authorityClass": "evidence",
751
+ "triggerClass": "reusable",
752
+ "concurrencyPolicy": {
753
+ "mode": "none",
754
+ "cancelInProgress": false
750
755
  },
751
- "laneIds": [
752
- ".github/workflows/release-governance-reconcile.yml#universal-bootstrap",
753
- ".github/workflows/v4-adopter-delivery.yml#universal-bootstrap"
754
- ]
755
- }
756
- ]
756
+ "expectedRunnerMinutes": 10,
757
+ "cancellationBehavior": "finish-started",
758
+ "sloImpact": {
759
+ "mergeCritical": false,
760
+ "metric": "consumer-owned terminal settlement latency",
761
+ "expectedContributionSeconds": 0,
762
+ "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
763
+ }
764
+ },
765
+ {
766
+ "laneId": ".github/workflows/public-ops-bootstrap.yml#admit",
767
+ "authorityClass": "evidence",
768
+ "triggerClass": "reusable",
769
+ "concurrencyPolicy": {
770
+ "mode": "none",
771
+ "cancelInProgress": false
772
+ },
773
+ "expectedRunnerMinutes": 10,
774
+ "cancellationBehavior": "finish-started",
775
+ "sloImpact": {
776
+ "mergeCritical": false,
777
+ "metric": "exact-candidate admission latency",
778
+ "expectedContributionSeconds": 0,
779
+ "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
780
+ }
781
+ },
782
+ {
783
+ "laneId": ".github/workflows/public-ops-bootstrap.yml#execute",
784
+ "authorityClass": "governed-delegation",
785
+ "triggerClass": "reusable",
786
+ "concurrencyPolicy": {
787
+ "mode": "none",
788
+ "cancelInProgress": false
789
+ },
790
+ "expectedRunnerMinutes": 60,
791
+ "cancellationBehavior": "finish-started",
792
+ "sloImpact": {
793
+ "mergeCritical": false,
794
+ "metric": "exact-candidate execution latency",
795
+ "expectedContributionSeconds": 0,
796
+ "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
797
+ }
798
+ },
799
+ {
800
+ "laneId": ".github/workflows/public-ops-bootstrap.yml#settle",
801
+ "authorityClass": "evidence",
802
+ "triggerClass": "reusable",
803
+ "concurrencyPolicy": {
804
+ "mode": "none",
805
+ "cancelInProgress": false
806
+ },
807
+ "expectedRunnerMinutes": 10,
808
+ "cancellationBehavior": "finish-started",
809
+ "sloImpact": {
810
+ "mergeCritical": false,
811
+ "metric": "universal terminal settlement latency",
812
+ "expectedContributionSeconds": 0,
813
+ "rationale": "The opt-in universal path preserves the default compatibility lane and executes only an exact admitted runtime."
814
+ }
815
+ },
816
+ {
817
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#admission",
818
+ "authorityClass": "evidence",
819
+ "triggerClass": "reusable",
820
+ "concurrencyPolicy": {
821
+ "mode": "ref-scoped",
822
+ "cancelInProgress": false
823
+ },
824
+ "expectedRunnerMinutes": 360,
825
+ "cancellationBehavior": "finish-started",
826
+ "sloImpact": {
827
+ "mergeCritical": false,
828
+ "metric": "capability execution budget",
829
+ "expectedContributionSeconds": 0,
830
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
831
+ }
832
+ },
833
+ {
834
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#delivery-heartbeat",
835
+ "authorityClass": "evidence",
836
+ "triggerClass": "reusable",
837
+ "concurrencyPolicy": {
838
+ "mode": "ref-scoped",
839
+ "cancelInProgress": false
840
+ },
841
+ "expectedRunnerMinutes": 360,
842
+ "cancellationBehavior": "finish-started",
843
+ "sloImpact": {
844
+ "mergeCritical": false,
845
+ "metric": "capability execution budget",
846
+ "expectedContributionSeconds": 0,
847
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
848
+ }
849
+ },
850
+ {
851
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#merge-dev-prs",
852
+ "authorityClass": "evidence",
853
+ "triggerClass": "reusable",
854
+ "concurrencyPolicy": {
855
+ "mode": "ref-scoped",
856
+ "cancelInProgress": false
857
+ },
858
+ "expectedRunnerMinutes": 360,
859
+ "cancellationBehavior": "finish-started",
860
+ "sloImpact": {
861
+ "mergeCritical": false,
862
+ "metric": "capability execution budget",
863
+ "expectedContributionSeconds": 0,
864
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
865
+ }
866
+ },
867
+ {
868
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#native-execution",
869
+ "authorityClass": "evidence",
870
+ "triggerClass": "reusable",
871
+ "concurrencyPolicy": {
872
+ "mode": "ref-scoped",
873
+ "cancelInProgress": false
874
+ },
875
+ "expectedRunnerMinutes": 360,
876
+ "cancellationBehavior": "finish-started",
877
+ "sloImpact": {
878
+ "mergeCritical": false,
879
+ "metric": "capability execution budget",
880
+ "expectedContributionSeconds": 0,
881
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
882
+ }
883
+ },
884
+ {
885
+ "laneId": ".github/workflows/public-ops-dev-auto-merge.yml#seal-native-execution",
886
+ "authorityClass": "evidence",
887
+ "triggerClass": "reusable",
888
+ "concurrencyPolicy": {
889
+ "mode": "ref-scoped",
890
+ "cancelInProgress": false
891
+ },
892
+ "expectedRunnerMinutes": 360,
893
+ "cancellationBehavior": "finish-started",
894
+ "sloImpact": {
895
+ "mergeCritical": false,
896
+ "metric": "capability execution budget",
897
+ "expectedContributionSeconds": 0,
898
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
899
+ }
900
+ },
901
+ {
902
+ "laneId": ".github/workflows/public-ops-dev-qualification-patrol.yml#mutate",
903
+ "authorityClass": "evidence",
904
+ "triggerClass": "reusable",
905
+ "concurrencyPolicy": {
906
+ "mode": "ref-scoped",
907
+ "cancelInProgress": false
908
+ },
909
+ "expectedRunnerMinutes": 360,
910
+ "cancellationBehavior": "finish-started",
911
+ "sloImpact": {
912
+ "mergeCritical": false,
913
+ "metric": "capability execution budget",
914
+ "expectedContributionSeconds": 0,
915
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
916
+ }
917
+ },
918
+ {
919
+ "laneId": ".github/workflows/public-ops-dev-qualification-patrol.yml#observe",
920
+ "authorityClass": "evidence",
921
+ "triggerClass": "reusable",
922
+ "concurrencyPolicy": {
923
+ "mode": "ref-scoped",
924
+ "cancelInProgress": false
925
+ },
926
+ "expectedRunnerMinutes": 360,
927
+ "cancellationBehavior": "finish-started",
928
+ "sloImpact": {
929
+ "mergeCritical": false,
930
+ "metric": "capability execution budget",
931
+ "expectedContributionSeconds": 0,
932
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
933
+ }
934
+ },
935
+ {
936
+ "laneId": ".github/workflows/public-ops-housekeeping.yml#delete-branches",
937
+ "authorityClass": "evidence",
938
+ "triggerClass": "reusable",
939
+ "concurrencyPolicy": {
940
+ "mode": "ref-scoped",
941
+ "cancelInProgress": false
942
+ },
943
+ "expectedRunnerMinutes": 360,
944
+ "cancellationBehavior": "finish-started",
945
+ "sloImpact": {
946
+ "mergeCritical": false,
947
+ "metric": "capability execution budget",
948
+ "expectedContributionSeconds": 0,
949
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
950
+ }
951
+ },
952
+ {
953
+ "laneId": ".github/workflows/public-ops-housekeeping.yml#label-pull-requests",
954
+ "authorityClass": "evidence",
955
+ "triggerClass": "reusable",
956
+ "concurrencyPolicy": {
957
+ "mode": "ref-scoped",
958
+ "cancelInProgress": false
959
+ },
960
+ "expectedRunnerMinutes": 360,
961
+ "cancellationBehavior": "finish-started",
962
+ "sloImpact": {
963
+ "mergeCritical": false,
964
+ "metric": "capability execution budget",
965
+ "expectedContributionSeconds": 0,
966
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
967
+ }
968
+ },
969
+ {
970
+ "laneId": ".github/workflows/public-ops-housekeeping.yml#plan",
971
+ "authorityClass": "evidence",
972
+ "triggerClass": "reusable",
973
+ "concurrencyPolicy": {
974
+ "mode": "ref-scoped",
975
+ "cancelInProgress": false
976
+ },
977
+ "expectedRunnerMinutes": 360,
978
+ "cancellationBehavior": "finish-started",
979
+ "sloImpact": {
980
+ "mergeCritical": false,
981
+ "metric": "capability execution budget",
982
+ "expectedContributionSeconds": 0,
983
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
984
+ }
985
+ },
986
+ {
987
+ "laneId": ".github/workflows/public-ops-observed-evidence.yml#publish",
988
+ "authorityClass": "evidence",
989
+ "triggerClass": "reusable",
990
+ "concurrencyPolicy": {
991
+ "mode": "ref-scoped",
992
+ "cancelInProgress": false
993
+ },
994
+ "expectedRunnerMinutes": 360,
995
+ "cancellationBehavior": "finish-started",
996
+ "sloImpact": {
997
+ "mergeCritical": false,
998
+ "metric": "capability execution budget",
999
+ "expectedContributionSeconds": 0,
1000
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1001
+ }
1002
+ },
1003
+ {
1004
+ "laneId": ".github/workflows/public-ops-patrol-daily.yml#patrol",
1005
+ "authorityClass": "governed-delegation",
1006
+ "triggerClass": "reusable",
1007
+ "concurrencyPolicy": {
1008
+ "mode": "none",
1009
+ "cancelInProgress": false
1010
+ },
1011
+ "expectedRunnerMinutes": 360,
1012
+ "cancellationBehavior": "provider-default",
1013
+ "sloImpact": {
1014
+ "mergeCritical": false,
1015
+ "metric": "capability execution budget",
1016
+ "expectedContributionSeconds": 0,
1017
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1018
+ }
1019
+ },
1020
+ {
1021
+ "laneId": ".github/workflows/public-ops-patrol-monthly.yml#patrol",
1022
+ "authorityClass": "governed-delegation",
1023
+ "triggerClass": "reusable",
1024
+ "concurrencyPolicy": {
1025
+ "mode": "none",
1026
+ "cancelInProgress": false
1027
+ },
1028
+ "expectedRunnerMinutes": 360,
1029
+ "cancellationBehavior": "provider-default",
1030
+ "sloImpact": {
1031
+ "mergeCritical": false,
1032
+ "metric": "capability execution budget",
1033
+ "expectedContributionSeconds": 0,
1034
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1035
+ }
1036
+ },
1037
+ {
1038
+ "laneId": ".github/workflows/public-ops-patrol-weekly.yml#patrol",
1039
+ "authorityClass": "governed-delegation",
1040
+ "triggerClass": "reusable",
1041
+ "concurrencyPolicy": {
1042
+ "mode": "none",
1043
+ "cancelInProgress": false
1044
+ },
1045
+ "expectedRunnerMinutes": 360,
1046
+ "cancellationBehavior": "provider-default",
1047
+ "sloImpact": {
1048
+ "mergeCritical": false,
1049
+ "metric": "capability execution budget",
1050
+ "expectedContributionSeconds": 0,
1051
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1052
+ }
1053
+ },
1054
+ {
1055
+ "laneId": ".github/workflows/public-ops-patrol.yml#patrol",
1056
+ "authorityClass": "evidence",
1057
+ "triggerClass": "reusable",
1058
+ "concurrencyPolicy": {
1059
+ "mode": "ref-scoped",
1060
+ "cancelInProgress": false
1061
+ },
1062
+ "expectedRunnerMinutes": 360,
1063
+ "cancellationBehavior": "finish-started",
1064
+ "sloImpact": {
1065
+ "mergeCritical": false,
1066
+ "metric": "capability execution budget",
1067
+ "expectedContributionSeconds": 0,
1068
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1069
+ }
1070
+ },
1071
+ {
1072
+ "laneId": ".github/workflows/public-ops-release-governance.yml#reconcile",
1073
+ "authorityClass": "release",
1074
+ "triggerClass": "mixed",
1075
+ "concurrencyPolicy": {
1076
+ "mode": "none",
1077
+ "cancelInProgress": false
1078
+ },
1079
+ "expectedRunnerMinutes": 360,
1080
+ "cancellationBehavior": "provider-default",
1081
+ "sloImpact": {
1082
+ "mergeCritical": false,
1083
+ "metric": "capability execution budget",
1084
+ "expectedContributionSeconds": 0,
1085
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1086
+ }
1087
+ },
1088
+ {
1089
+ "laneId": ".github/workflows/public-ops-stable-candidate-patrol.yml#patrol",
1090
+ "authorityClass": "evidence",
1091
+ "triggerClass": "reusable",
1092
+ "concurrencyPolicy": {
1093
+ "mode": "ref-scoped",
1094
+ "cancelInProgress": false
1095
+ },
1096
+ "expectedRunnerMinutes": 360,
1097
+ "cancellationBehavior": "finish-started",
1098
+ "sloImpact": {
1099
+ "mergeCritical": false,
1100
+ "metric": "capability execution budget",
1101
+ "expectedContributionSeconds": 0,
1102
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1103
+ }
1104
+ },
1105
+ {
1106
+ "laneId": ".github/workflows/public-ops-tail-reseal.yml#plan",
1107
+ "authorityClass": "evidence",
1108
+ "triggerClass": "reusable",
1109
+ "concurrencyPolicy": {
1110
+ "mode": "none",
1111
+ "cancelInProgress": false
1112
+ },
1113
+ "expectedRunnerMinutes": 360,
1114
+ "cancellationBehavior": "provider-default",
1115
+ "sloImpact": {
1116
+ "mergeCritical": false,
1117
+ "metric": "capability execution budget",
1118
+ "expectedContributionSeconds": 0,
1119
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1120
+ }
1121
+ },
1122
+ {
1123
+ "laneId": ".github/workflows/public-ops-tail-reseal.yml#platforms",
1124
+ "authorityClass": "evidence",
1125
+ "triggerClass": "reusable",
1126
+ "concurrencyPolicy": {
1127
+ "mode": "none",
1128
+ "cancelInProgress": false
1129
+ },
1130
+ "expectedRunnerMinutes": 360,
1131
+ "cancellationBehavior": "provider-default",
1132
+ "sloImpact": {
1133
+ "mergeCritical": false,
1134
+ "metric": "capability execution budget",
1135
+ "expectedContributionSeconds": 0,
1136
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1137
+ }
1138
+ },
1139
+ {
1140
+ "laneId": ".github/workflows/public-ops-tail-reseal.yml#seal",
1141
+ "authorityClass": "evidence",
1142
+ "triggerClass": "reusable",
1143
+ "concurrencyPolicy": {
1144
+ "mode": "none",
1145
+ "cancelInProgress": false
1146
+ },
1147
+ "expectedRunnerMinutes": 360,
1148
+ "cancellationBehavior": "provider-default",
1149
+ "sloImpact": {
1150
+ "mergeCritical": false,
1151
+ "metric": "capability execution budget",
1152
+ "expectedContributionSeconds": 0,
1153
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1154
+ }
1155
+ },
1156
+ {
1157
+ "laneId": ".github/workflows/public-ops-warrant-cancel.yml#cancel",
1158
+ "authorityClass": "evidence",
1159
+ "triggerClass": "reusable",
1160
+ "concurrencyPolicy": {
1161
+ "mode": "none",
1162
+ "cancelInProgress": false
1163
+ },
1164
+ "expectedRunnerMinutes": 360,
1165
+ "cancellationBehavior": "provider-default",
1166
+ "sloImpact": {
1167
+ "mergeCritical": false,
1168
+ "metric": "capability execution budget",
1169
+ "expectedContributionSeconds": 0,
1170
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1171
+ }
1172
+ },
1173
+ {
1174
+ "laneId": ".github/workflows/public-ops-warrant-close.yml#close",
1175
+ "authorityClass": "evidence",
1176
+ "triggerClass": "reusable",
1177
+ "concurrencyPolicy": {
1178
+ "mode": "none",
1179
+ "cancelInProgress": false
1180
+ },
1181
+ "expectedRunnerMinutes": 360,
1182
+ "cancellationBehavior": "provider-default",
1183
+ "sloImpact": {
1184
+ "mergeCritical": false,
1185
+ "metric": "capability execution budget",
1186
+ "expectedContributionSeconds": 0,
1187
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1188
+ }
1189
+ },
1190
+ {
1191
+ "laneId": ".github/workflows/public-release-artifact-attestation.yml#attest",
1192
+ "authorityClass": "release",
1193
+ "triggerClass": "reusable",
1194
+ "concurrencyPolicy": {
1195
+ "mode": "none",
1196
+ "cancelInProgress": false
1197
+ },
1198
+ "expectedRunnerMinutes": 360,
1199
+ "cancellationBehavior": "provider-default",
1200
+ "sloImpact": {
1201
+ "mergeCritical": false,
1202
+ "metric": "capability execution budget",
1203
+ "expectedContributionSeconds": 0,
1204
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1205
+ }
1206
+ },
1207
+ {
1208
+ "laneId": ".github/workflows/public-release-oci-compose-preview.yml#promote",
1209
+ "authorityClass": "release",
1210
+ "triggerClass": "reusable",
1211
+ "concurrencyPolicy": {
1212
+ "mode": "serialized",
1213
+ "cancelInProgress": false
1214
+ },
1215
+ "expectedRunnerMinutes": 8,
1216
+ "cancellationBehavior": "finish-started",
1217
+ "sloImpact": {
1218
+ "mergeCritical": false,
1219
+ "metric": "qualified Compose preview promotion",
1220
+ "expectedContributionSeconds": 0,
1221
+ "rationale": "Runs only after completed exact-source public installation qualification; no merge-critical runner lane is added."
1222
+ }
1223
+ },
1224
+ {
1225
+ "laneId": ".github/workflows/public-release-paper.yml#publication-authority",
1226
+ "authorityClass": "governed-delegation",
1227
+ "triggerClass": "reusable",
1228
+ "concurrencyPolicy": {
1229
+ "mode": "none",
1230
+ "cancelInProgress": false
1231
+ },
1232
+ "expectedRunnerMinutes": 360,
1233
+ "cancellationBehavior": "provider-default",
1234
+ "sloImpact": {
1235
+ "mergeCritical": false,
1236
+ "metric": "capability execution budget",
1237
+ "expectedContributionSeconds": 0,
1238
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1239
+ }
1240
+ },
1241
+ {
1242
+ "laneId": ".github/workflows/public-release-paper.yml#publication-candidate",
1243
+ "authorityClass": "governed-delegation",
1244
+ "triggerClass": "reusable",
1245
+ "concurrencyPolicy": {
1246
+ "mode": "none",
1247
+ "cancelInProgress": false
1248
+ },
1249
+ "expectedRunnerMinutes": 360,
1250
+ "cancellationBehavior": "provider-default",
1251
+ "sloImpact": {
1252
+ "mergeCritical": false,
1253
+ "metric": "capability execution budget",
1254
+ "expectedContributionSeconds": 0,
1255
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1256
+ }
1257
+ },
1258
+ {
1259
+ "laneId": ".github/workflows/public-release-paper.yml#publish",
1260
+ "authorityClass": "release",
1261
+ "triggerClass": "reusable",
1262
+ "concurrencyPolicy": {
1263
+ "mode": "none",
1264
+ "cancelInProgress": false
1265
+ },
1266
+ "expectedRunnerMinutes": 360,
1267
+ "cancellationBehavior": "provider-default",
1268
+ "sloImpact": {
1269
+ "mergeCritical": false,
1270
+ "metric": "capability execution budget",
1271
+ "expectedContributionSeconds": 0,
1272
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1273
+ }
1274
+ },
1275
+ {
1276
+ "laneId": ".github/workflows/public-release-promote.yml#consumer-admission",
1277
+ "authorityClass": "release",
1278
+ "triggerClass": "reusable",
1279
+ "concurrencyPolicy": {
1280
+ "mode": "none",
1281
+ "cancelInProgress": false
1282
+ },
1283
+ "expectedRunnerMinutes": 360,
1284
+ "cancellationBehavior": "provider-default",
1285
+ "sloImpact": {
1286
+ "mergeCritical": false,
1287
+ "metric": "capability execution budget",
1288
+ "expectedContributionSeconds": 0,
1289
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1290
+ }
1291
+ },
1292
+ {
1293
+ "laneId": ".github/workflows/public-release-promote.yml#invoke",
1294
+ "authorityClass": "release",
1295
+ "triggerClass": "reusable",
1296
+ "concurrencyPolicy": {
1297
+ "mode": "none",
1298
+ "cancelInProgress": false
1299
+ },
1300
+ "expectedRunnerMinutes": 35,
1301
+ "cancellationBehavior": "finish-started",
1302
+ "sloImpact": {
1303
+ "mergeCritical": false,
1304
+ "metric": "public promotion adapter latency",
1305
+ "expectedContributionSeconds": 0,
1306
+ "rationale": "The public compatibility surface resolves discovery facts and invokes one fixed v4 publisher."
1307
+ }
1308
+ },
1309
+ {
1310
+ "laneId": ".github/workflows/public-release-promote.yml#resolve-promotion",
1311
+ "authorityClass": "release",
1312
+ "triggerClass": "reusable",
1313
+ "concurrencyPolicy": {
1314
+ "mode": "none",
1315
+ "cancelInProgress": false
1316
+ },
1317
+ "expectedRunnerMinutes": 360,
1318
+ "cancellationBehavior": "provider-default",
1319
+ "sloImpact": {
1320
+ "mergeCritical": false,
1321
+ "metric": "capability execution budget",
1322
+ "expectedContributionSeconds": 0,
1323
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1324
+ }
1325
+ },
1326
+ {
1327
+ "laneId": ".github/workflows/public-release-propagation.yml#propagate",
1328
+ "authorityClass": "release",
1329
+ "triggerClass": "reusable",
1330
+ "concurrencyPolicy": {
1331
+ "mode": "ref-scoped",
1332
+ "cancelInProgress": false
1333
+ },
1334
+ "expectedRunnerMinutes": 360,
1335
+ "cancellationBehavior": "finish-started",
1336
+ "sloImpact": {
1337
+ "mergeCritical": false,
1338
+ "metric": "capability execution budget",
1339
+ "expectedContributionSeconds": 0,
1340
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1341
+ }
1342
+ },
1343
+ {
1344
+ "laneId": ".github/workflows/public-release-signing-authority.yml#deliver",
1345
+ "authorityClass": "release",
1346
+ "triggerClass": "manual",
1347
+ "concurrencyPolicy": {
1348
+ "mode": "ref-scoped",
1349
+ "cancelInProgress": false
1350
+ },
1351
+ "expectedRunnerMinutes": 360,
1352
+ "cancellationBehavior": "finish-started",
1353
+ "sloImpact": {
1354
+ "mergeCritical": false,
1355
+ "metric": "capability execution budget",
1356
+ "expectedContributionSeconds": 0,
1357
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1358
+ }
1359
+ },
1360
+ {
1361
+ "laneId": ".github/workflows/public-release-signing-authority.yml#detached",
1362
+ "authorityClass": "release",
1363
+ "triggerClass": "manual",
1364
+ "concurrencyPolicy": {
1365
+ "mode": "ref-scoped",
1366
+ "cancelInProgress": false
1367
+ },
1368
+ "expectedRunnerMinutes": 360,
1369
+ "cancellationBehavior": "finish-started",
1370
+ "sloImpact": {
1371
+ "mergeCritical": false,
1372
+ "metric": "capability execution budget",
1373
+ "expectedContributionSeconds": 0,
1374
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1375
+ }
1376
+ },
1377
+ {
1378
+ "laneId": ".github/workflows/public-release-signing-authority.yml#intake",
1379
+ "authorityClass": "release",
1380
+ "triggerClass": "manual",
1381
+ "concurrencyPolicy": {
1382
+ "mode": "ref-scoped",
1383
+ "cancelInProgress": false
1384
+ },
1385
+ "expectedRunnerMinutes": 360,
1386
+ "cancellationBehavior": "finish-started",
1387
+ "sloImpact": {
1388
+ "mergeCritical": false,
1389
+ "metric": "capability execution budget",
1390
+ "expectedContributionSeconds": 0,
1391
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1392
+ }
1393
+ },
1394
+ {
1395
+ "laneId": ".github/workflows/public-release-signing-authority.yml#macos",
1396
+ "authorityClass": "release",
1397
+ "triggerClass": "manual",
1398
+ "concurrencyPolicy": {
1399
+ "mode": "ref-scoped",
1400
+ "cancelInProgress": false
1401
+ },
1402
+ "expectedRunnerMinutes": 360,
1403
+ "cancellationBehavior": "finish-started",
1404
+ "sloImpact": {
1405
+ "mergeCritical": false,
1406
+ "metric": "capability execution budget",
1407
+ "expectedContributionSeconds": 0,
1408
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1409
+ }
1410
+ },
1411
+ {
1412
+ "laneId": ".github/workflows/public-release-signing-authority.yml#windows",
1413
+ "authorityClass": "release",
1414
+ "triggerClass": "manual",
1415
+ "concurrencyPolicy": {
1416
+ "mode": "ref-scoped",
1417
+ "cancelInProgress": false
1418
+ },
1419
+ "expectedRunnerMinutes": 360,
1420
+ "cancellationBehavior": "finish-started",
1421
+ "sloImpact": {
1422
+ "mergeCritical": false,
1423
+ "metric": "capability execution budget",
1424
+ "expectedContributionSeconds": 0,
1425
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1426
+ }
1427
+ },
1428
+ {
1429
+ "laneId": ".github/workflows/public-release-tail.yml#release-tail",
1430
+ "authorityClass": "release",
1431
+ "triggerClass": "reusable",
1432
+ "concurrencyPolicy": {
1433
+ "mode": "none",
1434
+ "cancelInProgress": false
1435
+ },
1436
+ "expectedRunnerMinutes": 360,
1437
+ "cancellationBehavior": "provider-default",
1438
+ "sloImpact": {
1439
+ "mergeCritical": false,
1440
+ "metric": "capability execution budget",
1441
+ "expectedContributionSeconds": 0,
1442
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1443
+ }
1444
+ },
1445
+ {
1446
+ "laneId": ".github/workflows/public-release-web.yml#apply-input-gate",
1447
+ "authorityClass": "release",
1448
+ "triggerClass": "reusable",
1449
+ "concurrencyPolicy": {
1450
+ "mode": "none",
1451
+ "cancelInProgress": false
1452
+ },
1453
+ "expectedRunnerMinutes": 360,
1454
+ "cancellationBehavior": "provider-default",
1455
+ "sloImpact": {
1456
+ "mergeCritical": false,
1457
+ "metric": "capability execution budget",
1458
+ "expectedContributionSeconds": 0,
1459
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1460
+ }
1461
+ },
1462
+ {
1463
+ "laneId": ".github/workflows/public-release-web.yml#controller-plan",
1464
+ "authorityClass": "release",
1465
+ "triggerClass": "reusable",
1466
+ "concurrencyPolicy": {
1467
+ "mode": "none",
1468
+ "cancelInProgress": false
1469
+ },
1470
+ "expectedRunnerMinutes": 360,
1471
+ "cancellationBehavior": "provider-default",
1472
+ "sloImpact": {
1473
+ "mergeCritical": false,
1474
+ "metric": "capability execution budget",
1475
+ "expectedContributionSeconds": 0,
1476
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1477
+ }
1478
+ },
1479
+ {
1480
+ "laneId": ".github/workflows/public-release-web.yml#controller-receipt",
1481
+ "authorityClass": "release",
1482
+ "triggerClass": "reusable",
1483
+ "concurrencyPolicy": {
1484
+ "mode": "none",
1485
+ "cancelInProgress": false
1486
+ },
1487
+ "expectedRunnerMinutes": 360,
1488
+ "cancellationBehavior": "provider-default",
1489
+ "sloImpact": {
1490
+ "mergeCritical": false,
1491
+ "metric": "capability execution budget",
1492
+ "expectedContributionSeconds": 0,
1493
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1494
+ }
1495
+ },
1496
+ {
1497
+ "laneId": ".github/workflows/public-release-web.yml#external-publication-authority",
1498
+ "authorityClass": "governed-delegation",
1499
+ "triggerClass": "reusable",
1500
+ "concurrencyPolicy": {
1501
+ "mode": "none",
1502
+ "cancelInProgress": false
1503
+ },
1504
+ "expectedRunnerMinutes": 360,
1505
+ "cancellationBehavior": "provider-default",
1506
+ "sloImpact": {
1507
+ "mergeCritical": false,
1508
+ "metric": "capability execution budget",
1509
+ "expectedContributionSeconds": 0,
1510
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1511
+ }
1512
+ },
1513
+ {
1514
+ "laneId": ".github/workflows/public-release-web.yml#open-production-release-pr",
1515
+ "authorityClass": "release",
1516
+ "triggerClass": "reusable",
1517
+ "concurrencyPolicy": {
1518
+ "mode": "none",
1519
+ "cancelInProgress": false
1520
+ },
1521
+ "expectedRunnerMinutes": 360,
1522
+ "cancellationBehavior": "provider-default",
1523
+ "sloImpact": {
1524
+ "mergeCritical": false,
1525
+ "metric": "capability execution budget",
1526
+ "expectedContributionSeconds": 0,
1527
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1528
+ }
1529
+ },
1530
+ {
1531
+ "laneId": ".github/workflows/public-release-web.yml#plan",
1532
+ "authorityClass": "release",
1533
+ "triggerClass": "reusable",
1534
+ "concurrencyPolicy": {
1535
+ "mode": "none",
1536
+ "cancelInProgress": false
1537
+ },
1538
+ "expectedRunnerMinutes": 360,
1539
+ "cancellationBehavior": "provider-default",
1540
+ "sloImpact": {
1541
+ "mergeCritical": false,
1542
+ "metric": "capability execution budget",
1543
+ "expectedContributionSeconds": 0,
1544
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1545
+ }
1546
+ },
1547
+ {
1548
+ "laneId": ".github/workflows/public-release-web.yml#preview-apply",
1549
+ "authorityClass": "release",
1550
+ "triggerClass": "reusable",
1551
+ "concurrencyPolicy": {
1552
+ "mode": "none",
1553
+ "cancelInProgress": false
1554
+ },
1555
+ "expectedRunnerMinutes": 360,
1556
+ "cancellationBehavior": "provider-default",
1557
+ "sloImpact": {
1558
+ "mergeCritical": false,
1559
+ "metric": "capability execution budget",
1560
+ "expectedContributionSeconds": 0,
1561
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1562
+ }
1563
+ },
1564
+ {
1565
+ "laneId": ".github/workflows/public-release-web.yml#preview-cleanup",
1566
+ "authorityClass": "release",
1567
+ "triggerClass": "reusable",
1568
+ "concurrencyPolicy": {
1569
+ "mode": "none",
1570
+ "cancelInProgress": false
1571
+ },
1572
+ "expectedRunnerMinutes": 360,
1573
+ "cancellationBehavior": "provider-default",
1574
+ "sloImpact": {
1575
+ "mergeCritical": false,
1576
+ "metric": "capability execution budget",
1577
+ "expectedContributionSeconds": 0,
1578
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1579
+ }
1580
+ },
1581
+ {
1582
+ "laneId": ".github/workflows/public-release-web.yml#production-apply",
1583
+ "authorityClass": "release",
1584
+ "triggerClass": "reusable",
1585
+ "concurrencyPolicy": {
1586
+ "mode": "none",
1587
+ "cancelInProgress": false
1588
+ },
1589
+ "expectedRunnerMinutes": 360,
1590
+ "cancellationBehavior": "provider-default",
1591
+ "sloImpact": {
1592
+ "mergeCritical": false,
1593
+ "metric": "capability execution budget",
1594
+ "expectedContributionSeconds": 0,
1595
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1596
+ }
1597
+ },
1598
+ {
1599
+ "laneId": ".github/workflows/public-release-web.yml#publication-authority",
1600
+ "authorityClass": "release",
1601
+ "triggerClass": "reusable",
1602
+ "concurrencyPolicy": {
1603
+ "mode": "none",
1604
+ "cancelInProgress": false
1605
+ },
1606
+ "expectedRunnerMinutes": 360,
1607
+ "cancellationBehavior": "provider-default",
1608
+ "sloImpact": {
1609
+ "mergeCritical": false,
1610
+ "metric": "capability execution budget",
1611
+ "expectedContributionSeconds": 0,
1612
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1613
+ }
1614
+ },
1615
+ {
1616
+ "laneId": ".github/workflows/public-release-web.yml#publication-decision",
1617
+ "authorityClass": "release",
1618
+ "triggerClass": "reusable",
1619
+ "concurrencyPolicy": {
1620
+ "mode": "none",
1621
+ "cancelInProgress": false
1622
+ },
1623
+ "expectedRunnerMinutes": 360,
1624
+ "cancellationBehavior": "provider-default",
1625
+ "sloImpact": {
1626
+ "mergeCritical": false,
1627
+ "metric": "capability execution budget",
1628
+ "expectedContributionSeconds": 0,
1629
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1630
+ }
1631
+ },
1632
+ {
1633
+ "laneId": ".github/workflows/public-release-web.yml#release-intent",
1634
+ "authorityClass": "release",
1635
+ "triggerClass": "reusable",
1636
+ "concurrencyPolicy": {
1637
+ "mode": "none",
1638
+ "cancelInProgress": false
1639
+ },
1640
+ "expectedRunnerMinutes": 360,
1641
+ "cancellationBehavior": "provider-default",
1642
+ "sloImpact": {
1643
+ "mergeCritical": false,
1644
+ "metric": "capability execution budget",
1645
+ "expectedContributionSeconds": 0,
1646
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1647
+ }
1648
+ },
1649
+ {
1650
+ "laneId": ".github/workflows/public-release-web.yml#runtime",
1651
+ "authorityClass": "release",
1652
+ "triggerClass": "reusable",
1653
+ "concurrencyPolicy": {
1654
+ "mode": "none",
1655
+ "cancelInProgress": false
1656
+ },
1657
+ "expectedRunnerMinutes": 360,
1658
+ "cancellationBehavior": "provider-default",
1659
+ "sloImpact": {
1660
+ "mergeCritical": false,
1661
+ "metric": "capability execution budget",
1662
+ "expectedContributionSeconds": 0,
1663
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1664
+ }
1665
+ },
1666
+ {
1667
+ "laneId": ".github/workflows/public-release-web.yml#staging-apply",
1668
+ "authorityClass": "release",
1669
+ "triggerClass": "reusable",
1670
+ "concurrencyPolicy": {
1671
+ "mode": "none",
1672
+ "cancelInProgress": false
1673
+ },
1674
+ "expectedRunnerMinutes": 360,
1675
+ "cancellationBehavior": "provider-default",
1676
+ "sloImpact": {
1677
+ "mergeCritical": false,
1678
+ "metric": "capability execution budget",
1679
+ "expectedContributionSeconds": 0,
1680
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1681
+ }
1682
+ },
1683
+ {
1684
+ "laneId": ".github/workflows/self-build-adopter-dogfood.yml#dogfood",
1685
+ "authorityClass": "governed-delegation",
1686
+ "triggerClass": "manual",
1687
+ "concurrencyPolicy": {
1688
+ "mode": "none",
1689
+ "cancelInProgress": false
1690
+ },
1691
+ "expectedRunnerMinutes": 360,
1692
+ "cancellationBehavior": "provider-default",
1693
+ "sloImpact": {
1694
+ "mergeCritical": false,
1695
+ "metric": "capability execution budget",
1696
+ "expectedContributionSeconds": 0,
1697
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1698
+ }
1699
+ },
1700
+ {
1701
+ "laneId": ".github/workflows/self-build-alpha-dogfood.yml#alpha-consumer",
1702
+ "authorityClass": "governed-delegation",
1703
+ "triggerClass": "mixed",
1704
+ "concurrencyPolicy": {
1705
+ "mode": "ref-scoped",
1706
+ "cancelInProgress": false
1707
+ },
1708
+ "expectedRunnerMinutes": 360,
1709
+ "cancellationBehavior": "finish-started",
1710
+ "sloImpact": {
1711
+ "mergeCritical": false,
1712
+ "metric": "capability execution budget",
1713
+ "expectedContributionSeconds": 0,
1714
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1715
+ }
1716
+ },
1717
+ {
1718
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#binary",
1719
+ "authorityClass": "evidence",
1720
+ "triggerClass": "mixed",
1721
+ "concurrencyPolicy": {
1722
+ "mode": "none",
1723
+ "cancelInProgress": false
1724
+ },
1725
+ "expectedRunnerMinutes": 360,
1726
+ "cancellationBehavior": "provider-default",
1727
+ "sloImpact": {
1728
+ "mergeCritical": false,
1729
+ "metric": "capability execution budget",
1730
+ "expectedContributionSeconds": 0,
1731
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1732
+ }
1733
+ },
1734
+ {
1735
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#dispatch-publication",
1736
+ "authorityClass": "evidence",
1737
+ "triggerClass": "mixed",
1738
+ "concurrencyPolicy": {
1739
+ "mode": "none",
1740
+ "cancelInProgress": false
1741
+ },
1742
+ "expectedRunnerMinutes": 360,
1743
+ "cancellationBehavior": "provider-default",
1744
+ "sloImpact": {
1745
+ "mergeCritical": false,
1746
+ "metric": "capability execution budget",
1747
+ "expectedContributionSeconds": 0,
1748
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1749
+ }
1750
+ },
1751
+ {
1752
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#passport",
1753
+ "authorityClass": "evidence",
1754
+ "triggerClass": "mixed",
1755
+ "concurrencyPolicy": {
1756
+ "mode": "none",
1757
+ "cancelInProgress": false
1758
+ },
1759
+ "expectedRunnerMinutes": 45,
1760
+ "cancellationBehavior": "provider-default",
1761
+ "sloImpact": {
1762
+ "mergeCritical": false,
1763
+ "metric": "capability execution budget",
1764
+ "expectedContributionSeconds": 0,
1765
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1766
+ }
1767
+ },
1768
+ {
1769
+ "laneId": ".github/workflows/self-build-binary-distribution.yml#preflight",
1770
+ "authorityClass": "evidence",
1771
+ "triggerClass": "mixed",
1772
+ "concurrencyPolicy": {
1773
+ "mode": "none",
1774
+ "cancelInProgress": false
1775
+ },
1776
+ "expectedRunnerMinutes": 360,
1777
+ "cancellationBehavior": "provider-default",
1778
+ "sloImpact": {
1779
+ "mergeCritical": false,
1780
+ "metric": "capability execution budget",
1781
+ "expectedContributionSeconds": 0,
1782
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1783
+ }
1784
+ },
1785
+ {
1786
+ "laneId": ".github/workflows/self-build-channel-verify.yml#verify",
1787
+ "authorityClass": "merge-critical-admission",
1788
+ "triggerClass": "pull-request",
1789
+ "concurrencyPolicy": {
1790
+ "mode": "none",
1791
+ "cancelInProgress": false
1792
+ },
1793
+ "expectedRunnerMinutes": 360,
1794
+ "cancellationBehavior": "provider-default",
1795
+ "sloImpact": {
1796
+ "mergeCritical": true,
1797
+ "metric": "protected delivery dependency budget",
1798
+ "expectedContributionSeconds": 21600,
1799
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1800
+ }
1801
+ },
1802
+ {
1803
+ "laneId": ".github/workflows/self-build-demo-dogfood.yml#dogfood",
1804
+ "authorityClass": "governed-delegation",
1805
+ "triggerClass": "mixed",
1806
+ "concurrencyPolicy": {
1807
+ "mode": "ref-scoped",
1808
+ "cancelInProgress": false
1809
+ },
1810
+ "expectedRunnerMinutes": 360,
1811
+ "cancellationBehavior": "finish-started",
1812
+ "sloImpact": {
1813
+ "mergeCritical": false,
1814
+ "metric": "capability execution budget",
1815
+ "expectedContributionSeconds": 0,
1816
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1817
+ }
1818
+ },
1819
+ {
1820
+ "laneId": ".github/workflows/self-build-demo-dogfood.yml#exact-binary",
1821
+ "authorityClass": "evidence",
1822
+ "triggerClass": "mixed",
1823
+ "concurrencyPolicy": {
1824
+ "mode": "ref-scoped",
1825
+ "cancelInProgress": false
1826
+ },
1827
+ "expectedRunnerMinutes": 20,
1828
+ "cancellationBehavior": "finish-started",
1829
+ "sloImpact": {
1830
+ "mergeCritical": false,
1831
+ "metric": "capability execution budget",
1832
+ "expectedContributionSeconds": 0,
1833
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1834
+ }
1835
+ },
1836
+ {
1837
+ "laneId": ".github/workflows/self-build-demo-media-qualification.yml#qualify",
1838
+ "authorityClass": "merge-critical-admission",
1839
+ "triggerClass": "mixed",
1840
+ "concurrencyPolicy": {
1841
+ "mode": "none",
1842
+ "cancelInProgress": false
1843
+ },
1844
+ "expectedRunnerMinutes": 20,
1845
+ "cancellationBehavior": "provider-default",
1846
+ "sloImpact": {
1847
+ "mergeCritical": true,
1848
+ "metric": "protected delivery dependency budget",
1849
+ "expectedContributionSeconds": 1200,
1850
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1851
+ }
1852
+ },
1853
+ {
1854
+ "laneId": ".github/workflows/self-build-fixture.yml#buildchain-package-candidate",
1855
+ "authorityClass": "merge-critical-admission",
1856
+ "triggerClass": "mixed",
1857
+ "concurrencyPolicy": {
1858
+ "mode": "none",
1859
+ "cancelInProgress": false
1860
+ },
1861
+ "expectedRunnerMinutes": 360,
1862
+ "cancellationBehavior": "provider-default",
1863
+ "sloImpact": {
1864
+ "mergeCritical": true,
1865
+ "metric": "protected delivery dependency budget",
1866
+ "expectedContributionSeconds": 21600,
1867
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1868
+ }
1869
+ },
1870
+ {
1871
+ "laneId": ".github/workflows/self-build-fixture.yml#libnode-shaped",
1872
+ "authorityClass": "governed-delegation",
1873
+ "triggerClass": "mixed",
1874
+ "concurrencyPolicy": {
1875
+ "mode": "none",
1876
+ "cancelInProgress": false
1877
+ },
1878
+ "expectedRunnerMinutes": 360,
1879
+ "cancellationBehavior": "provider-default",
1880
+ "sloImpact": {
1881
+ "mergeCritical": true,
1882
+ "metric": "protected delivery dependency budget",
1883
+ "expectedContributionSeconds": 21600,
1884
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1885
+ }
1886
+ },
1887
+ {
1888
+ "laneId": ".github/workflows/self-build-public-consumer-dogfood.yml#dogfood",
1889
+ "authorityClass": "governed-delegation",
1890
+ "triggerClass": "mixed",
1891
+ "concurrencyPolicy": {
1892
+ "mode": "none",
1893
+ "cancelInProgress": false
1894
+ },
1895
+ "expectedRunnerMinutes": 360,
1896
+ "cancellationBehavior": "provider-default",
1897
+ "sloImpact": {
1898
+ "mergeCritical": true,
1899
+ "metric": "protected delivery dependency budget",
1900
+ "expectedContributionSeconds": 21600,
1901
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1902
+ }
1903
+ },
1904
+ {
1905
+ "laneId": ".github/workflows/self-build-stable-candidate-qualification.yml#qualify",
1906
+ "authorityClass": "evidence",
1907
+ "triggerClass": "mixed",
1908
+ "concurrencyPolicy": {
1909
+ "mode": "ref-scoped",
1910
+ "cancelInProgress": false
1911
+ },
1912
+ "expectedRunnerMinutes": 360,
1913
+ "cancellationBehavior": "finish-started",
1914
+ "sloImpact": {
1915
+ "mergeCritical": false,
1916
+ "metric": "capability execution budget",
1917
+ "expectedContributionSeconds": 0,
1918
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1919
+ }
1920
+ },
1921
+ {
1922
+ "laneId": ".github/workflows/self-build-stable-dogfood.yml#stable-consumer",
1923
+ "authorityClass": "governed-delegation",
1924
+ "triggerClass": "mixed",
1925
+ "concurrencyPolicy": {
1926
+ "mode": "ref-scoped",
1927
+ "cancelInProgress": false
1928
+ },
1929
+ "expectedRunnerMinutes": 20,
1930
+ "cancellationBehavior": "finish-started",
1931
+ "sloImpact": {
1932
+ "mergeCritical": false,
1933
+ "metric": "Published stable TOML build qualification latency",
1934
+ "expectedContributionSeconds": 0,
1935
+ "rationale": "Independent thin public stable fixture caller permits producer-first channel upgrades without duplicating build orchestration."
1936
+ }
1937
+ },
1938
+ {
1939
+ "laneId": ".github/workflows/self-build-verify.yml#build-backbone",
1940
+ "authorityClass": "merge-critical-admission",
1941
+ "triggerClass": "mixed",
1942
+ "concurrencyPolicy": {
1943
+ "mode": "none",
1944
+ "cancelInProgress": false
1945
+ },
1946
+ "expectedRunnerMinutes": 20,
1947
+ "cancellationBehavior": "provider-default",
1948
+ "sloImpact": {
1949
+ "mergeCritical": true,
1950
+ "metric": "protected delivery dependency budget",
1951
+ "expectedContributionSeconds": 1200,
1952
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1953
+ }
1954
+ },
1955
+ {
1956
+ "laneId": ".github/workflows/self-build-verify.yml#check",
1957
+ "authorityClass": "merge-critical-admission",
1958
+ "triggerClass": "mixed",
1959
+ "concurrencyPolicy": {
1960
+ "mode": "none",
1961
+ "cancelInProgress": false
1962
+ },
1963
+ "expectedRunnerMinutes": 360,
1964
+ "cancellationBehavior": "provider-default",
1965
+ "sloImpact": {
1966
+ "mergeCritical": true,
1967
+ "metric": "protected delivery dependency budget",
1968
+ "expectedContributionSeconds": 21600,
1969
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1970
+ }
1971
+ },
1972
+ {
1973
+ "laneId": ".github/workflows/self-build-verify.yml#stage-capsule-checkpoints",
1974
+ "authorityClass": "merge-critical-admission",
1975
+ "triggerClass": "mixed",
1976
+ "concurrencyPolicy": {
1977
+ "mode": "none",
1978
+ "cancelInProgress": false
1979
+ },
1980
+ "expectedRunnerMinutes": 360,
1981
+ "cancellationBehavior": "provider-default",
1982
+ "sloImpact": {
1983
+ "mergeCritical": true,
1984
+ "metric": "protected delivery dependency budget",
1985
+ "expectedContributionSeconds": 21600,
1986
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1987
+ }
1988
+ },
1989
+ {
1990
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#prepare",
1991
+ "authorityClass": "merge-critical-admission",
1992
+ "triggerClass": "mixed",
1993
+ "concurrencyPolicy": {
1994
+ "mode": "none",
1995
+ "cancelInProgress": false
1996
+ },
1997
+ "expectedRunnerMinutes": 360,
1998
+ "cancellationBehavior": "provider-default",
1999
+ "sloImpact": {
2000
+ "mergeCritical": true,
2001
+ "metric": "protected delivery dependency budget",
2002
+ "expectedContributionSeconds": 21600,
2003
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2004
+ }
2005
+ },
2006
+ {
2007
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-alpha",
2008
+ "authorityClass": "governed-delegation",
2009
+ "triggerClass": "mixed",
2010
+ "concurrencyPolicy": {
2011
+ "mode": "none",
2012
+ "cancelInProgress": false
2013
+ },
2014
+ "expectedRunnerMinutes": 360,
2015
+ "cancellationBehavior": "provider-default",
2016
+ "sloImpact": {
2017
+ "mergeCritical": true,
2018
+ "metric": "protected delivery dependency budget",
2019
+ "expectedContributionSeconds": 21600,
2020
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2021
+ }
2022
+ },
2023
+ {
2024
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-conformance",
2025
+ "authorityClass": "governed-delegation",
2026
+ "triggerClass": "mixed",
2027
+ "concurrencyPolicy": {
2028
+ "mode": "none",
2029
+ "cancelInProgress": false
2030
+ },
2031
+ "expectedRunnerMinutes": 360,
2032
+ "cancellationBehavior": "provider-default",
2033
+ "sloImpact": {
2034
+ "mergeCritical": true,
2035
+ "metric": "protected delivery dependency budget",
2036
+ "expectedContributionSeconds": 21600,
2037
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2038
+ }
2039
+ },
2040
+ {
2041
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-stable",
2042
+ "authorityClass": "governed-delegation",
2043
+ "triggerClass": "mixed",
2044
+ "concurrencyPolicy": {
2045
+ "mode": "none",
2046
+ "cancelInProgress": false
2047
+ },
2048
+ "expectedRunnerMinutes": 360,
2049
+ "cancellationBehavior": "provider-default",
2050
+ "sloImpact": {
2051
+ "mergeCritical": true,
2052
+ "metric": "protected delivery dependency budget",
2053
+ "expectedContributionSeconds": 21600,
2054
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2055
+ }
2056
+ },
2057
+ {
2058
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#reconcile",
2059
+ "authorityClass": "merge-critical-admission",
2060
+ "triggerClass": "mixed",
2061
+ "concurrencyPolicy": {
2062
+ "mode": "none",
2063
+ "cancelInProgress": false
2064
+ },
2065
+ "expectedRunnerMinutes": 360,
2066
+ "cancellationBehavior": "provider-default",
2067
+ "sloImpact": {
2068
+ "mergeCritical": true,
2069
+ "metric": "protected delivery dependency budget",
2070
+ "expectedContributionSeconds": 21600,
2071
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2072
+ }
2073
+ },
2074
+ {
2075
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-alpha",
2076
+ "authorityClass": "governed-delegation",
2077
+ "triggerClass": "mixed",
2078
+ "concurrencyPolicy": {
2079
+ "mode": "none",
2080
+ "cancelInProgress": false
2081
+ },
2082
+ "expectedRunnerMinutes": 360,
2083
+ "cancellationBehavior": "provider-default",
2084
+ "sloImpact": {
2085
+ "mergeCritical": true,
2086
+ "metric": "protected delivery dependency budget",
2087
+ "expectedContributionSeconds": 21600,
2088
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2089
+ }
2090
+ },
2091
+ {
2092
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-conformance",
2093
+ "authorityClass": "governed-delegation",
2094
+ "triggerClass": "mixed",
2095
+ "concurrencyPolicy": {
2096
+ "mode": "none",
2097
+ "cancelInProgress": false
2098
+ },
2099
+ "expectedRunnerMinutes": 360,
2100
+ "cancellationBehavior": "provider-default",
2101
+ "sloImpact": {
2102
+ "mergeCritical": true,
2103
+ "metric": "protected delivery dependency budget",
2104
+ "expectedContributionSeconds": 21600,
2105
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2106
+ }
2107
+ },
2108
+ {
2109
+ "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-stable",
2110
+ "authorityClass": "governed-delegation",
2111
+ "triggerClass": "mixed",
2112
+ "concurrencyPolicy": {
2113
+ "mode": "none",
2114
+ "cancelInProgress": false
2115
+ },
2116
+ "expectedRunnerMinutes": 360,
2117
+ "cancellationBehavior": "provider-default",
2118
+ "sloImpact": {
2119
+ "mergeCritical": true,
2120
+ "metric": "protected delivery dependency budget",
2121
+ "expectedContributionSeconds": 21600,
2122
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2123
+ }
2124
+ },
2125
+ {
2126
+ "laneId": ".github/workflows/self-ops-dev-delivery.yml#deliver",
2127
+ "authorityClass": "governed-delegation",
2128
+ "triggerClass": "mixed",
2129
+ "concurrencyPolicy": {
2130
+ "mode": "none",
2131
+ "cancelInProgress": false
2132
+ },
2133
+ "expectedRunnerMinutes": 360,
2134
+ "cancellationBehavior": "provider-default",
2135
+ "sloImpact": {
2136
+ "mergeCritical": false,
2137
+ "metric": "capability execution budget",
2138
+ "expectedContributionSeconds": 0,
2139
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2140
+ }
2141
+ },
2142
+ {
2143
+ "laneId": ".github/workflows/self-ops-governance-audit.yml#audit",
2144
+ "authorityClass": "merge-critical-admission",
2145
+ "triggerClass": "mixed",
2146
+ "concurrencyPolicy": {
2147
+ "mode": "ref-scoped",
2148
+ "cancelInProgress": false
2149
+ },
2150
+ "expectedRunnerMinutes": 20,
2151
+ "cancellationBehavior": "finish-started",
2152
+ "sloImpact": {
2153
+ "mergeCritical": true,
2154
+ "metric": "protected delivery dependency budget",
2155
+ "expectedContributionSeconds": 1200,
2156
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2157
+ }
2158
+ },
2159
+ {
2160
+ "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#apply",
2161
+ "authorityClass": "governed-delegation",
2162
+ "triggerClass": "mixed",
2163
+ "concurrencyPolicy": {
2164
+ "mode": "none",
2165
+ "cancelInProgress": false
2166
+ },
2167
+ "expectedRunnerMinutes": 360,
2168
+ "cancellationBehavior": "provider-default",
2169
+ "sloImpact": {
2170
+ "mergeCritical": false,
2171
+ "metric": "capability execution budget",
2172
+ "expectedContributionSeconds": 0,
2173
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2174
+ }
2175
+ },
2176
+ {
2177
+ "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#invalid-apply-gate",
2178
+ "authorityClass": "post-merge-advisory",
2179
+ "triggerClass": "mixed",
2180
+ "concurrencyPolicy": {
2181
+ "mode": "none",
2182
+ "cancelInProgress": false
2183
+ },
2184
+ "expectedRunnerMinutes": 360,
2185
+ "cancellationBehavior": "provider-default",
2186
+ "sloImpact": {
2187
+ "mergeCritical": false,
2188
+ "metric": "capability execution budget",
2189
+ "expectedContributionSeconds": 0,
2190
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2191
+ }
2192
+ },
2193
+ {
2194
+ "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#report",
2195
+ "authorityClass": "governed-delegation",
2196
+ "triggerClass": "mixed",
2197
+ "concurrencyPolicy": {
2198
+ "mode": "none",
2199
+ "cancelInProgress": false
2200
+ },
2201
+ "expectedRunnerMinutes": 360,
2202
+ "cancellationBehavior": "provider-default",
2203
+ "sloImpact": {
2204
+ "mergeCritical": false,
2205
+ "metric": "capability execution budget",
2206
+ "expectedContributionSeconds": 0,
2207
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2208
+ }
2209
+ },
2210
+ {
2211
+ "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#apply",
2212
+ "authorityClass": "governed-delegation",
2213
+ "triggerClass": "mixed",
2214
+ "concurrencyPolicy": {
2215
+ "mode": "none",
2216
+ "cancelInProgress": false
2217
+ },
2218
+ "expectedRunnerMinutes": 360,
2219
+ "cancellationBehavior": "provider-default",
2220
+ "sloImpact": {
2221
+ "mergeCritical": false,
2222
+ "metric": "capability execution budget",
2223
+ "expectedContributionSeconds": 0,
2224
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2225
+ }
2226
+ },
2227
+ {
2228
+ "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#invalid-apply-gate",
2229
+ "authorityClass": "post-merge-advisory",
2230
+ "triggerClass": "mixed",
2231
+ "concurrencyPolicy": {
2232
+ "mode": "none",
2233
+ "cancelInProgress": false
2234
+ },
2235
+ "expectedRunnerMinutes": 360,
2236
+ "cancellationBehavior": "provider-default",
2237
+ "sloImpact": {
2238
+ "mergeCritical": false,
2239
+ "metric": "capability execution budget",
2240
+ "expectedContributionSeconds": 0,
2241
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2242
+ }
2243
+ },
2244
+ {
2245
+ "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#report",
2246
+ "authorityClass": "governed-delegation",
2247
+ "triggerClass": "mixed",
2248
+ "concurrencyPolicy": {
2249
+ "mode": "none",
2250
+ "cancelInProgress": false
2251
+ },
2252
+ "expectedRunnerMinutes": 360,
2253
+ "cancellationBehavior": "provider-default",
2254
+ "sloImpact": {
2255
+ "mergeCritical": false,
2256
+ "metric": "capability execution budget",
2257
+ "expectedContributionSeconds": 0,
2258
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2259
+ }
2260
+ },
2261
+ {
2262
+ "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#apply",
2263
+ "authorityClass": "governed-delegation",
2264
+ "triggerClass": "mixed",
2265
+ "concurrencyPolicy": {
2266
+ "mode": "none",
2267
+ "cancelInProgress": false
2268
+ },
2269
+ "expectedRunnerMinutes": 360,
2270
+ "cancellationBehavior": "provider-default",
2271
+ "sloImpact": {
2272
+ "mergeCritical": false,
2273
+ "metric": "capability execution budget",
2274
+ "expectedContributionSeconds": 0,
2275
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2276
+ }
2277
+ },
2278
+ {
2279
+ "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#invalid-apply-gate",
2280
+ "authorityClass": "post-merge-advisory",
2281
+ "triggerClass": "mixed",
2282
+ "concurrencyPolicy": {
2283
+ "mode": "none",
2284
+ "cancelInProgress": false
2285
+ },
2286
+ "expectedRunnerMinutes": 360,
2287
+ "cancellationBehavior": "provider-default",
2288
+ "sloImpact": {
2289
+ "mergeCritical": false,
2290
+ "metric": "capability execution budget",
2291
+ "expectedContributionSeconds": 0,
2292
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2293
+ }
2294
+ },
2295
+ {
2296
+ "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#report",
2297
+ "authorityClass": "governed-delegation",
2298
+ "triggerClass": "mixed",
2299
+ "concurrencyPolicy": {
2300
+ "mode": "none",
2301
+ "cancelInProgress": false
2302
+ },
2303
+ "expectedRunnerMinutes": 360,
2304
+ "cancellationBehavior": "provider-default",
2305
+ "sloImpact": {
2306
+ "mergeCritical": false,
2307
+ "metric": "capability execution budget",
2308
+ "expectedContributionSeconds": 0,
2309
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2310
+ }
2311
+ },
2312
+ {
2313
+ "laneId": ".github/workflows/self-ops-merge-queue.yml#reconcile",
2314
+ "authorityClass": "evidence",
2315
+ "triggerClass": "mixed",
2316
+ "concurrencyPolicy": {
2317
+ "mode": "none",
2318
+ "cancelInProgress": false
2319
+ },
2320
+ "expectedRunnerMinutes": 360,
2321
+ "cancellationBehavior": "provider-default",
2322
+ "sloImpact": {
2323
+ "mergeCritical": false,
2324
+ "metric": "capability execution budget",
2325
+ "expectedContributionSeconds": 0,
2326
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2327
+ }
2328
+ },
2329
+ {
2330
+ "laneId": ".github/workflows/self-ops-patrol-daily.yml#patrol",
2331
+ "authorityClass": "governed-delegation",
2332
+ "triggerClass": "mixed",
2333
+ "concurrencyPolicy": {
2334
+ "mode": "none",
2335
+ "cancelInProgress": false
2336
+ },
2337
+ "expectedRunnerMinutes": 360,
2338
+ "cancellationBehavior": "provider-default",
2339
+ "sloImpact": {
2340
+ "mergeCritical": false,
2341
+ "metric": "capability execution budget",
2342
+ "expectedContributionSeconds": 0,
2343
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2344
+ }
2345
+ },
2346
+ {
2347
+ "laneId": ".github/workflows/self-ops-patrol-monthly.yml#patrol",
2348
+ "authorityClass": "governed-delegation",
2349
+ "triggerClass": "mixed",
2350
+ "concurrencyPolicy": {
2351
+ "mode": "none",
2352
+ "cancelInProgress": false
2353
+ },
2354
+ "expectedRunnerMinutes": 360,
2355
+ "cancellationBehavior": "provider-default",
2356
+ "sloImpact": {
2357
+ "mergeCritical": false,
2358
+ "metric": "capability execution budget",
2359
+ "expectedContributionSeconds": 0,
2360
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2361
+ }
2362
+ },
2363
+ {
2364
+ "laneId": ".github/workflows/self-ops-patrol-weekly.yml#patrol",
2365
+ "authorityClass": "governed-delegation",
2366
+ "triggerClass": "mixed",
2367
+ "concurrencyPolicy": {
2368
+ "mode": "none",
2369
+ "cancelInProgress": false
2370
+ },
2371
+ "expectedRunnerMinutes": 360,
2372
+ "cancellationBehavior": "provider-default",
2373
+ "sloImpact": {
2374
+ "mergeCritical": false,
2375
+ "metric": "capability execution budget",
2376
+ "expectedContributionSeconds": 0,
2377
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2378
+ }
2379
+ },
2380
+ {
2381
+ "laneId": ".github/workflows/self-ops-promotion-recovery.yml#resume",
2382
+ "authorityClass": "governed-delegation",
2383
+ "triggerClass": "manual",
2384
+ "concurrencyPolicy": {
2385
+ "mode": "none",
2386
+ "cancelInProgress": false
2387
+ },
2388
+ "expectedRunnerMinutes": 360,
2389
+ "cancellationBehavior": "provider-default",
2390
+ "sloImpact": {
2391
+ "mergeCritical": false,
2392
+ "metric": "capability execution budget",
2393
+ "expectedContributionSeconds": 0,
2394
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2395
+ }
2396
+ },
2397
+ {
2398
+ "laneId": ".github/workflows/self-ops-runner-smoke.yml#smoke",
2399
+ "authorityClass": "evidence",
2400
+ "triggerClass": "manual",
2401
+ "concurrencyPolicy": {
2402
+ "mode": "none",
2403
+ "cancelInProgress": false
2404
+ },
2405
+ "expectedRunnerMinutes": 360,
2406
+ "cancellationBehavior": "provider-default",
2407
+ "sloImpact": {
2408
+ "mergeCritical": false,
2409
+ "metric": "capability execution budget",
2410
+ "expectedContributionSeconds": 0,
2411
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2412
+ }
2413
+ },
2414
+ {
2415
+ "laneId": ".github/workflows/self-ops-stable-candidate-patrol.yml#patrol",
2416
+ "authorityClass": "governed-delegation",
2417
+ "triggerClass": "mixed",
2418
+ "concurrencyPolicy": {
2419
+ "mode": "none",
2420
+ "cancelInProgress": false
2421
+ },
2422
+ "expectedRunnerMinutes": 360,
2423
+ "cancellationBehavior": "provider-default",
2424
+ "sloImpact": {
2425
+ "mergeCritical": false,
2426
+ "metric": "capability execution budget",
2427
+ "expectedContributionSeconds": 0,
2428
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2429
+ }
2430
+ },
2431
+ {
2432
+ "laneId": ".github/workflows/self-release-binary-assets.yml#publish",
2433
+ "authorityClass": "governed-delegation",
2434
+ "triggerClass": "manual",
2435
+ "concurrencyPolicy": {
2436
+ "mode": "none",
2437
+ "cancelInProgress": false
2438
+ },
2439
+ "expectedRunnerMinutes": 360,
2440
+ "cancellationBehavior": "provider-default",
2441
+ "sloImpact": {
2442
+ "mergeCritical": false,
2443
+ "metric": "capability execution budget",
2444
+ "expectedContributionSeconds": 0,
2445
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2446
+ }
2447
+ },
2448
+ {
2449
+ "laneId": ".github/workflows/self-release-binary-assets.yml#resolve",
2450
+ "authorityClass": "release",
2451
+ "triggerClass": "manual",
2452
+ "concurrencyPolicy": {
2453
+ "mode": "none",
2454
+ "cancelInProgress": false
2455
+ },
2456
+ "expectedRunnerMinutes": 360,
2457
+ "cancellationBehavior": "provider-default",
2458
+ "sloImpact": {
2459
+ "mergeCritical": false,
2460
+ "metric": "capability execution budget",
2461
+ "expectedContributionSeconds": 0,
2462
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2463
+ }
2464
+ },
2465
+ {
2466
+ "laneId": ".github/workflows/self-release-line-open.yml#bootstrap",
2467
+ "authorityClass": "release",
2468
+ "triggerClass": "manual",
2469
+ "concurrencyPolicy": {
2470
+ "mode": "none",
2471
+ "cancelInProgress": false
2472
+ },
2473
+ "expectedRunnerMinutes": 360,
2474
+ "cancellationBehavior": "provider-default",
2475
+ "sloImpact": {
2476
+ "mergeCritical": false,
2477
+ "metric": "capability execution budget",
2478
+ "expectedContributionSeconds": 0,
2479
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2480
+ }
2481
+ },
2482
+ {
2483
+ "laneId": ".github/workflows/self-release-next-development.yml#review",
2484
+ "authorityClass": "merge-critical-admission",
2485
+ "triggerClass": "mixed",
2486
+ "concurrencyPolicy": {
2487
+ "mode": "ref-scoped",
2488
+ "cancelInProgress": false
2489
+ },
2490
+ "expectedRunnerMinutes": 3,
2491
+ "cancellationBehavior": "finish-started",
2492
+ "sloImpact": {
2493
+ "mergeCritical": true,
2494
+ "metric": "generated next-development independent review latency",
2495
+ "expectedContributionSeconds": 180,
2496
+ "rationale": "Only successful same-repository version PRs regenerate from the protected base and read completed publication evidence; ordinary source PRs skip the lane. Native queue checks remain final merge authority."
2497
+ }
2498
+ },
2499
+ {
2500
+ "laneId": ".github/workflows/self-release-npm-dry-run.yml#dry-run",
2501
+ "authorityClass": "release",
2502
+ "triggerClass": "manual",
2503
+ "concurrencyPolicy": {
2504
+ "mode": "none",
2505
+ "cancelInProgress": false
2506
+ },
2507
+ "expectedRunnerMinutes": 360,
2508
+ "cancellationBehavior": "provider-default",
2509
+ "sloImpact": {
2510
+ "mergeCritical": false,
2511
+ "metric": "capability execution budget",
2512
+ "expectedContributionSeconds": 0,
2513
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2514
+ }
2515
+ },
2516
+ {
2517
+ "laneId": ".github/workflows/self-release-promote.yml#classify-workflow-run",
2518
+ "authorityClass": "release",
2519
+ "triggerClass": "mixed",
2520
+ "concurrencyPolicy": {
2521
+ "mode": "none",
2522
+ "cancelInProgress": false
2523
+ },
2524
+ "expectedRunnerMinutes": 360,
2525
+ "cancellationBehavior": "provider-default",
2526
+ "sloImpact": {
2527
+ "mergeCritical": false,
2528
+ "metric": "capability execution budget",
2529
+ "expectedContributionSeconds": 0,
2530
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2531
+ }
2532
+ },
2533
+ {
2534
+ "laneId": ".github/workflows/self-release-promote.yml#promote",
2535
+ "authorityClass": "governed-delegation",
2536
+ "triggerClass": "mixed",
2537
+ "concurrencyPolicy": {
2538
+ "mode": "none",
2539
+ "cancelInProgress": false
2540
+ },
2541
+ "expectedRunnerMinutes": 360,
2542
+ "cancellationBehavior": "provider-default",
2543
+ "sloImpact": {
2544
+ "mergeCritical": false,
2545
+ "metric": "capability execution budget",
2546
+ "expectedContributionSeconds": 0,
2547
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2548
+ }
2549
+ },
2550
+ {
2551
+ "laneId": ".github/workflows/self-release-promote.yml#reject-invalid-candidate-recovery",
2552
+ "authorityClass": "release",
2553
+ "triggerClass": "mixed",
2554
+ "concurrencyPolicy": {
2555
+ "mode": "none",
2556
+ "cancelInProgress": false
2557
+ },
2558
+ "expectedRunnerMinutes": 360,
2559
+ "cancellationBehavior": "provider-default",
2560
+ "sloImpact": {
2561
+ "mergeCritical": false,
2562
+ "metric": "capability execution budget",
2563
+ "expectedContributionSeconds": 0,
2564
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2565
+ }
2566
+ },
2567
+ {
2568
+ "laneId": ".github/workflows/self-release-promote.yml#reject-invalid-durable-recovery",
2569
+ "authorityClass": "release",
2570
+ "triggerClass": "mixed",
2571
+ "concurrencyPolicy": {
2572
+ "mode": "none",
2573
+ "cancelInProgress": false
2574
+ },
2575
+ "expectedRunnerMinutes": 360,
2576
+ "cancellationBehavior": "provider-default",
2577
+ "sloImpact": {
2578
+ "mergeCritical": false,
2579
+ "metric": "capability execution budget",
2580
+ "expectedContributionSeconds": 0,
2581
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2582
+ }
2583
+ },
2584
+ {
2585
+ "laneId": ".github/workflows/self-release-promote.yml#reject-manual-apply",
2586
+ "authorityClass": "release",
2587
+ "triggerClass": "mixed",
2588
+ "concurrencyPolicy": {
2589
+ "mode": "none",
2590
+ "cancelInProgress": false
2591
+ },
2592
+ "expectedRunnerMinutes": 360,
2593
+ "cancellationBehavior": "provider-default",
2594
+ "sloImpact": {
2595
+ "mergeCritical": false,
2596
+ "metric": "capability execution budget",
2597
+ "expectedContributionSeconds": 0,
2598
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2599
+ }
2600
+ },
2601
+ {
2602
+ "laneId": ".github/workflows/self-release-rehearsal-dogfood.yml#rehearsal",
2603
+ "authorityClass": "governed-delegation",
2604
+ "triggerClass": "mixed",
2605
+ "concurrencyPolicy": {
2606
+ "mode": "none",
2607
+ "cancelInProgress": false
2608
+ },
2609
+ "expectedRunnerMinutes": 360,
2610
+ "cancellationBehavior": "provider-default",
2611
+ "sloImpact": {
2612
+ "mergeCritical": true,
2613
+ "metric": "protected delivery dependency budget",
2614
+ "expectedContributionSeconds": 21600,
2615
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2616
+ }
2617
+ },
2618
+ {
2619
+ "laneId": ".github/workflows/self-release-tail-dogfood.yml#publish",
2620
+ "authorityClass": "governed-delegation",
2621
+ "triggerClass": "manual",
2622
+ "concurrencyPolicy": {
2623
+ "mode": "none",
2624
+ "cancelInProgress": false
2625
+ },
2626
+ "expectedRunnerMinutes": 360,
2627
+ "cancellationBehavior": "provider-default",
2628
+ "sloImpact": {
2629
+ "mergeCritical": false,
2630
+ "metric": "capability execution budget",
2631
+ "expectedContributionSeconds": 0,
2632
+ "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2633
+ }
2634
+ }
2635
+ ],
2636
+ "declarationFamilies": []
757
2637
  }