@kungfu-tech/buildchain 4.1.0-alpha.0 → 4.1.0-alpha.2

package/architecture/release-topology.json

@@ -85,28 +85,11 @@
       "packages/core/release/settle/action.js"
     ],
     "runtimeSelectors": [
-      ".github/workflows/.release-promote.yml",
-      ".github/workflows/public-release-promote.yml",
-      ".github/workflows/self-ops-promotion-recovery.yml",
-      ".github/workflows/self-release-promote.yml",
-      "packages/core/build/commands/aggregate-build-summary.mjs",
-      "packages/core/build/commands/artifact-signing-controller.mjs",
-      "packages/core/build/plan/environment.js",
-      "packages/core/consumer/runtime-ref-resume-authority.js",
-      "packages/core/consumer/runtime-selector-persistence.js",
-      "packages/core/contracts/buildchain-contract.js",
-      "packages/core/contracts/commands/buildchain-contract-lock.mjs",
-      "packages/core/paper/cli/dispatch.mjs",
-      "packages/core/publication/commands/generate-release-candidate-passport.mjs",
-      "packages/core/release/commands/release-candidate-resolver.mjs",
-      "packages/core/release/commands/resume-from-candidate-run.mjs",
-      "packages/core/release/promotion-request.js",
-      "packages/core/release/promotion/candidate.js",
-      "packages/core/release/promotion/qualification-action.js",
-      "packages/core/release/promotion/routing.js",
-      "packages/core/release/recovery/runtime.js",
-      "packages/core/release/runtime-override-authorization.js",
-      "scripts/generate-channel-promotion-workflow.mjs"
+      "packages/core/runtime/entry/actions.js",
+      "packages/core/runtime/entry/activation.js",
+      "packages/core/runtime/entry/github.js",
+      "packages/core/runtime/entry/recovery.js",
+      "packages/core/runtime/entry/selection.js"
     ],
     "runtimeEngines": ["packages/core/release/promote-candidate/action.js"],
     "terminalProjections": [
@@ -134,16 +117,11 @@
         "packages/core/build/build-configuration.js",
         "packages/core/build/github-artifact-attestation.js",
         "packages/core/build/package-manager.js",
-        "packages/core/build/standalone/identity.js",
         "packages/core/consumer/buildchain-channel-identity.js",
         "packages/core/consumer/buildchain-config.js",
         "packages/core/consumer/floating-consumer-evidence.js",
         "packages/core/consumer/floating-consumer-policy.js",
         "packages/core/consumer/floating-consumer-release-passport.js",
-        "packages/core/consumer/invocation-selector.js",
-        "packages/core/consumer/runtime-ref-resume-authority.js",
-        "packages/core/consumer/runtime-selector-persistence.js",
-        "packages/core/consumer/workflow-definition-authority.js",
         "packages/core/contracts/action-inventory.js",
         "packages/core/contracts/buildchain-contract.js",
         "packages/core/contracts/buildchain-layout.js",
@@ -233,6 +211,7 @@
         "packages/core/release/promote-candidate/transaction.js",
         "packages/core/release/protected-publication-source.js",
         "packages/core/release/publish-transaction.js",
+        "packages/core/release/recovery/lineage.js",
         "packages/core/release/release-candidate-recovery.js",
         "packages/core/release/release-candidate.js",
         "packages/core/release/release-invocation.js",
@@ -252,13 +231,13 @@
         "packages/core/runtime/spawn-command.js",
         "packages/core/web/web-surface-publication-candidate.js"
       ],
-      "root": "sha256:b5384e938df8bae003a3f01c419c31c3713b6e0d8409e305485604dba055dd1e"
+      "root": "sha256:5e4bc19b8e377bde5257297f15ac8376fbe8a7fc23ce8f5f897cf25130b4ae2d"
     },
     "rustWasmAuthority": {
       "loader": "packages/core/runtime/domain-wasm.js",
       "metadata": "packages/core/runtime/domain-wasm-artifact.js",
       "artifact": "packages/core/runtime/buildchain-domain.wasm",
-      "artifactRoot": "sha256:d1b4a91dfb0bee972b0460fc22d784840226b9bc116de44c823f6d504465aebb",
+      "artifactRoot": "sha256:504e23c9241f43611813f0fbd213b7a694946328b00e23d22f6ba678e7b0c841",
       "distributedArtifacts": [
         "actions/release/promotion/ref/dist/buildchain-domain.wasm",
         "actions/release/tail/settle/dist/buildchain-domain.wasm",
@@ -338,6 +317,7 @@
         "triggers": ["workflow_call"],
         "jobs": [
           "apply|runner|-|inherited|inherited|artifactDownload,artifactUpload,jobOutput|contents-write,oidc-write,promotion-runtime",
+          "execution-runtime|runner|-|read|-|jobOutput|-",
           "qualify|runner|-|read|-|artifactUpload,jobOutput|-",
           "settle|runner|-|read|-|artifactDownload,artifactUpload,jobOutput|-"
         ],
@@ -348,6 +328,7 @@
         "triggers": ["workflow_call"],
         "jobs": [
           "consumer-admission|runner|-|read|-|artifactUpload,jobOutput|-",
+          "execution-runtime|runner|-|read|-|jobOutput|-",
           "invoke|reusable-call|./.github/workflows/.release-promote.yml|-|-|-|-",
           "resolve-promotion|runner|-|read|-|jobOutput|-"
         ],
@@ -357,34 +338,41 @@
         "path": ".github/workflows/self-ops-promotion-recovery.yml",
         "triggers": ["workflow_dispatch"],
         "jobs": [
-          "resume|reusable-call|./.github/workflows/public-release-promote.yml|write|write|-|contents-write,oidc-write"
+          "resume|reusable-call|kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4|write|write|-|contents-write,oidc-write"
         ],
-        "reusableEdges": ["./.github/workflows/public-release-promote.yml"]
+        "reusableEdges": [
+          "kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4"
+        ]
       },
       {
         "path": ".github/workflows/self-release-promote.yml",
         "triggers": ["workflow_dispatch", "workflow_run"],
         "jobs": [
           "classify-workflow-run|runner|-|read|-|jobOutput|-",
-          "promote|reusable-call|./.github/workflows/public-release-promote.yml|write|write|-|contents-write,oidc-write",
+          "execution-runtime|runner|-|read|-|jobOutput|-",
+          "promote|reusable-call|kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4|write|write|-|contents-write,oidc-write",
           "reject-invalid-candidate-recovery|runner|-|read|-|-|-",
           "reject-invalid-durable-recovery|runner|-|read|-|-|-",
           "reject-manual-apply|runner|-|read|-|-|-"
         ],
-        "reusableEdges": ["./.github/workflows/public-release-promote.yml"]
+        "reusableEdges": [
+          "kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4"
+        ]
       },
       {
         "path": ".github/workflows/self-release-tail-dogfood.yml",
         "triggers": ["workflow_dispatch"],
         "jobs": [
-          "publish|reusable-call|./.github/workflows/public-release-promote.yml|write|write|-|contents-write,oidc-write"
+          "publish|reusable-call|kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4|write|write|-|contents-write,oidc-write"
         ],
-        "reusableEdges": ["./.github/workflows/public-release-promote.yml"]
+        "reusableEdges": [
+          "kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4"
+        ]
       }
     ],
     "metrics": {
       "workflowCount": 34,
-      "jobCount": 73,
+      "jobCount": 95,
       "reusableEdgeCount": 20,
       "mutationRelevantNodeCount": 61,
       "contentsWriteJobCount": 22,
@@ -417,6 +405,7 @@
           "path": ".github/workflows/public-release-oci-compose-preview.yml",
           "triggers": ["workflow_call"],
           "jobs": [
+            "execution-runtime|runner|-|read|-|jobOutput|-",
             "promote|runner|-|write|-|artifactDownload,artifactUpload|contents-write"
           ],
           "reusableEdges": []
@@ -424,7 +413,7 @@
       ],
       "metrics": {
         "workflowCount": 1,
-        "jobCount": 1,
+        "jobCount": 2,
         "reusableEdgeCount": 0,
         "mutationRelevantNodeCount": 1,
         "contentsWriteJobCount": 1,

package/architecture/runtime-entry.json

@@ -0,0 +1,26 @@
+{
+  "schema": "buildchain.runtime-entry/v1",
+  "protocol": 1,
+  "repository": "kungfu-systems/buildchain",
+  "prepareAction": "actions/runtime/environment/prepare",
+  "directory": ".buildchain/runtime",
+  "selection": {
+    "precedence": ["runtime-parameter", "contract-lock", "workflow-default"],
+    "persistedEntryRefs": ["v4", "v4-alpha"],
+    "workflowEqualityRequired": false,
+    "businessIdentityChecks": false
+  },
+  "execution": {
+    "implementation": "selected-runtime",
+    "preparePerJob": true,
+    "selectionPerExecution": true,
+    "dogfood": "public-consumer"
+  },
+  "recovery": {
+    "runtimeFailure": "new-attempt-with-transient-train",
+    "entryFailure": "upgrade-entry-and-run-from-start",
+    "preserveSource": true,
+    "reuseRequiresValidEvidence": true,
+    "providerEffectsRequireReadback": true
+  }
+}

package/architecture/runtime-resume-lineage.json

@@ -0,0 +1,23 @@
+{
+  "schema": "buildchain.runtime-resume-lineage-contract/v2",
+  "entryAuthority": "architecture/runtime-entry.json",
+  "schemaAuthority": "contracts/runtime-resume-lineage-v2.schema.json",
+  "implementation": "packages/core/release/recovery/lineage.js",
+  "fixtureAuthority": "contracts/fixtures/runtime-resume-lineage-v2/scenario.json",
+  "continuation": "new-run-through-same-public-entry",
+  "runtime": "provenance-only",
+  "reuseIdentity": [
+    "source-sha",
+    "source-tree-sha",
+    "platform",
+    "policy-root",
+    "capsule-root",
+    "identity-root",
+    "artifact-digest"
+  ],
+  "reuse": "valid-unaffected-platforms",
+  "missing": "rebuild",
+  "staleOrAmbiguous": "reject",
+  "publicationEffects": "provider-readback-required",
+  "credentialsInEvidence": false
+}

package/architecture/stage-capsule-qualification.json

@@ -26,9 +26,9 @@
   "publicConsumerDogfood": {
     "callerWorkflow": ".github/workflows/self-build-public-consumer-dogfood.yml",
     "reusableWorkflow": "kungfu-systems/buildchain/.github/workflows/public-build-stage-capsule-canary.yml",
-    "validationRef": "v4-alpha",
+    "validationRef": "v4",
     "invocation": "workflow_call",
-    "runtimeBinding": "job.workflow_sha",
+    "runtimeBinding": "entry-selected-runtime",
     "consumerSourceBinding": "github.sha",
     "configPath": ".buildchain/buildchain.toml",
     "executableStages": ["install", "build", "verify"],

package/architecture/universal-workflow-bootstrap.json

@@ -3,51 +3,35 @@
   "status": "active",
   "bootstrap": {
     "publicWorkflow": ".github/workflows/public-ops-bootstrap.yml",
-    "requestSchema": "kungfu-buildchain-v4-universal-workflow-request/v1",
-    "admissionSchema": "kungfu-buildchain-v4-universal-workflow-admission/v1",
-    "terminalReceiptSchema": "kungfu-buildchain-v4-universal-workflow-terminal-receipt/v1",
+    "requestSchema": "buildchain.universal-workflow-request/v2",
+    "admissionSchema": "buildchain.universal-workflow-admission/v2",
+    "terminalReceiptSchema": "buildchain.universal-workflow-terminal-receipt/v2",
     "candidateRepository": "kungfu-systems/buildchain",
     "candidateEnginePath": "packages/core/workflow/commands/universal-workflow-engine.mjs",
     "consumerTemplate": "templates/universal-buildchain-bootstrap.yml",
-    "consumerRecoveryTemplate": "templates/universal-buildchain-bootstrap-recovery.yml",
-    "consumerRecoveryWorkflow": ".github/workflows/public-ops-bootstrap-recovery.yml",
-    "consumerRecoveryMode": "separate-pre-positioned-consumer-owned-shell",
-    "recoveryDependsOnPublishedBuildchain": false,
     "selfDogfoodWorkflow": ".github/workflows/self-ops-bootstrap-dogfood.yml",
     "faultCampaign": "architecture/universal-workflow-fault-campaign.json",
-    "discoveryRefExecutionAuthority": false,
-    "exactShaExecutionAuthority": true,
     "consumerSourceMutationPerIncident": false,
     "consumerAdmission": "verified-caller-exact-repository-workflow-and-source",
-    "reviewRuntimeBinding": "reviewed-head-or-protected-alpha-merge-to-exact-runtime",
     "buildchainReleasePromotionPerIncident": false,
     "selfDogfoodUsesPublicContract": true,
-    "consumerRecoveryDistribution": "templates/bootstrap-recovery",
     "admissionPolicySources": [
-      ".github/workflows/public-ops-bootstrap-recovery.yml",
       ".github/workflows/public-ops-bootstrap.yml",
       "actions/workflow/admission/admit/action.yml",
       "actions/workflow/admission/inspect/action.yml",
       "actions/workflow/admission/reject/action.yml",
-      "actions/workflow/admission/review/action.yml",
       "actions/workflow/bootstrap/admit/action.yml",
       "actions/workflow/bootstrap/execute/action.yml",
       "actions/workflow/bootstrap/settle/action.yml",
       "actions/workflow/dogfood/prepare/action.yml",
       "actions/workflow/dogfood/reconcile/action.yml",
       "actions/workflow/engine/execute/action.yml",
-      "actions/workflow/recovery/admit/action.yml",
-      "actions/workflow/recovery/execute/action.yml",
-      "actions/workflow/recovery/settle/action.yml",
-      "actions/workflow/settlement/backflow/action.yml",
       "actions/workflow/settlement/seal/action.yml",
       "architecture/universal-workflow-bootstrap.json",
       "architecture/universal-workflow-fault-campaign.json",
       "packages/core/workflow/admission/actions.js",
       "packages/core/workflow/admission/recovery.js",
-      "packages/core/workflow/admission/review.js",
       "packages/core/workflow/admission/transactions.js",
-      "packages/core/workflow/commands/universal-workflow-backflow.mjs",
       "packages/core/workflow/commands/universal-workflow-engine.mjs",
       "packages/core/workflow/dogfood/actions.js",
       "packages/core/workflow/dogfood/readiness.js",
@@ -61,13 +45,15 @@
       "packages/core/workflow/engine/release-evidence.js",
       "packages/core/workflow/engine/release-observation.js",
       "packages/core/workflow/engine/release-promotion.js",
-      "packages/core/workflow/installation.js",
       "packages/core/workflow/settlement/actions.js",
-      "packages/core/workflow/settlement/backflow.js",
       "packages/core/workflow/universal-self-dogfood.js",
-      "packages/core/workflow/universal-workflow-bootstrap.js",
-      "templates/bootstrap-recovery/manifest.json"
-    ]
+      "packages/core/workflow/universal-workflow-bootstrap.js"
+    ],
+    "runtimeEntry": "architecture/runtime-entry.json",
+    "runtimeRecovery": "same-public-entry-with-transient-runtime",
+    "entryRecovery": "upgrade-public-entry-and-full-rerun",
+    "executionAuthority": "selected-runtime",
+    "entryRepairRequiresNewRelease": true
   },
   "capabilityAdapters": [
     {
@@ -129,7 +115,6 @@
     ".github/workflows/public-build-publication.yml",
     ".github/workflows/public-build-stage-capsule-canary.yml",
     ".github/workflows/public-ops-alpha-candidate-patrol.yml",
-    ".github/workflows/public-ops-bootstrap-recovery.yml",
     ".github/workflows/public-ops-bootstrap.yml",
     ".github/workflows/public-ops-dev-auto-merge.yml",
     ".github/workflows/public-ops-dev-qualification-patrol.yml",

package/architecture/universal-workflow-capability-policy.json

@@ -0,0 +1,61 @@
+{
+  "schema": "buildchain.universal-workflow-admission-policy/v2",
+  "sourceRepository": "kungfu-systems/buildchain",
+  "consumerAdmission": "verified-caller",
+  "allowedCapabilities": [
+    "bootstrap-conformance",
+    "release-candidate-promote",
+    "release-invocation"
+  ],
+  "permissionCeiling": {
+    "actions": "write",
+    "artifact-metadata": "write",
+    "attestations": "write",
+    "checks": "write",
+    "contents": "write",
+    "deployments": "write",
+    "id-token": "write",
+    "issues": "write",
+    "packages": "write",
+    "pages": "write",
+    "pull-requests": "write",
+    "security-events": "write",
+    "statuses": "write"
+  },
+  "contractRoots": [
+    "sha256:025e2a4a37bb9364c03aa3c9ab6bad773f78a541203a23791e2d7afd70d773ca",
+    "sha256:02e8b51faabbc960e9c70b090426272b720f3e1438b69a0f683b21257bed6302",
+    "sha256:13dea813a98cb2cc1a51cafb880127ee2c022f3c5aae5144818aec17e9cb7498",
+    "sha256:17c5fc05f8599662cd061a94add5313dc0fcea58404f9a92ee632c98abce24c6",
+    "sha256:24cbb86e8fb198f7a949372291e712dd83ff12ba667c7049775ef497261bc62e",
+    "sha256:265ccc9da3d84b8bf50746b6722b18c680dcc65bd322a5170e81bd5d0fa5b2b0",
+    "sha256:2c5a19fe5ebe2550336c42f7de0c71b0e736776758b404716a5f77e0236920dc",
+    "sha256:314995fa2c18fb8d3eacc5791d57dafe758a1d226a36abcb260577b19f067384",
+    "sha256:34829b6e556284ef7c3f342fafcf92588a94761534e5f19ea12131f389ad4f50",
+    "sha256:3d6119d1295ea7083d44a1b82fde5cb5dca910e427d1aee119d3ffbf421810f3",
+    "sha256:40fdce377a9b02cb53f41e822cfc5d96c2f7e57a86a7574bf8ee39f3e0f0e12e",
+    "sha256:428467c6ac1d768609ff12e72a190462bab9b5bc7dd2ea491553a364aa4c6ef6",
+    "sha256:49065b4b7f0e4fd1760e808e310edfea3bd7333c8407c4b419a097ea3d908adc",
+    "sha256:4916bb48f509f3e4db3626ae676e735253ad3aace8b54c20aca6f084ce70802b",
+    "sha256:5e4788c95b22cbade1323070c03fc6c613cb6086dee8364a7f3805ce95482397",
+    "sha256:73105a379642c9515eae73f2a0b4917f440b2fa7ecab25bfce87b37fd1c30c35",
+    "sha256:74782cada7ad52a4cd2f6bdf59d288d7514d6647f8f27aaeb70e4b2b41f83d60",
+    "sha256:75ffaac849069d8d646830d6704ba6f44e93b19724a82d5f67d94befce4b5a49",
+    "sha256:9a8c11b4787f24447df76a5ee0f31ed7d7cf0284a1251d4d4bdccc895571d4fe",
+    "sha256:9d1c6a36f814360123ea2647962df1bbd7fcba33b9e987d34364894b836ff90c",
+    "sha256:9ef9093a7116ad05a7430c60e9164644f47af2a085a60c6043cf46c16bce3479",
+    "sha256:a2a553a0e774224b398e5bccde811f8354638547656453adf7734f416f011a2b",
+    "sha256:b727204daaae0e09dd94801f1fcd80902fc9e3f1103870e98df379e33094f52a",
+    "sha256:c38bc9f7518940df764203a0f18e307c13196e19e91492914a3a36e9cde4ba73",
+    "sha256:c4f78152640f7fbe20d90c9fbb1b746028ee7063cf6baa4d6d80486d476571aa",
+    "sha256:c5405d4d13e92c910654ef7880e7447e79770121476ffc9899544cfa016834cf",
+    "sha256:cf0b38a5fbbab2ed8aa7998a3c6d3fa48a058de43b6850612294058d263a24c1",
+    "sha256:dd9ae24a7a586c616a7b3b2b733eb38bfd3f8b19e5faec9e16851719be6abd61",
+    "sha256:deee1c61c9731de6e2120abd4c30d3ce760df2ff3f7afb4dd84973543b353660",
+    "sha256:e207436baa946b3d25d0159a510b7da474cac8d33701c2e66c089117c05f473d",
+    "sha256:f46974d0756344344b6b77c3d1e2a871220435c1cfe880a67edbcb88c8828741",
+    "sha256:f780070e235bffdee96fc355d7ed5e2fd4188482c41b24e2558a32086634a87c"
+  ],
+  "validFrom": "2026-08-30T00:00:00.000Z",
+  "expiresAt": "2026-09-15T00:00:00.000Z"
+}

package/architecture/universal-workflow-fault-campaign.json

@@ -11,62 +11,56 @@
     {
       "id": "primary-facade",
       "injectionTarget": "templates/universal-buildchain-bootstrap.yml",
-      "recoveryRoute": "pre-positioned-recovery-shell",
-      "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
+      "recoveryRoute": "upgrade-entry-and-full-rerun",
+      "recoveryTarget": "templates/universal-buildchain-bootstrap.yml"
     },
     {
       "id": "typed-input-adapter",
       "injectionTarget": "packages/core/workflow/universal-workflow-bootstrap.js",
-      "recoveryRoute": "exact-train-candidate",
-      "recoveryTarget": "packages/core/workflow/commands/universal-workflow-engine.mjs"
+      "recoveryRoute": "same-entry-transient-runtime",
+      "recoveryTarget": ".github/workflows/public-ops-bootstrap.yml"
     },
     {
       "id": "route-selector",
       "injectionTarget": ".github/workflows/public-ops-bootstrap.yml",
-      "recoveryRoute": "pre-positioned-recovery-shell",
-      "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
+      "recoveryRoute": "upgrade-entry-and-full-rerun",
+      "recoveryTarget": "templates/universal-buildchain-bootstrap.yml"
     },
     {
       "id": "ordinary-candidate-loader",
       "injectionTarget": ".github/workflows/public-ops-bootstrap.yml",
-      "recoveryRoute": "pre-positioned-recovery-shell",
-      "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
+      "recoveryRoute": "upgrade-entry-and-full-rerun",
+      "recoveryTarget": "templates/universal-buildchain-bootstrap.yml"
     },
     {
       "id": "router",
       "injectionTarget": "packages/core/release/release-invocation.js",
-      "recoveryRoute": "exact-train-candidate",
-      "recoveryTarget": "packages/core/workflow/commands/universal-workflow-engine.mjs"
+      "recoveryRoute": "same-entry-transient-runtime",
+      "recoveryTarget": ".github/workflows/public-ops-bootstrap.yml"
     },
     {
       "id": "action",
       "injectionTarget": "actions/release/promotion/candidate/action.yml",
-      "recoveryRoute": "exact-train-candidate",
-      "recoveryTarget": "actions/release/promotion/candidate/dist/index.js"
+      "recoveryRoute": "same-entry-transient-runtime",
+      "recoveryTarget": ".github/workflows/public-ops-bootstrap.yml"
     },
     {
       "id": "cli-runtime",
       "injectionTarget": "packages/core/workflow/commands/universal-workflow-engine.mjs",
-      "recoveryRoute": "exact-train-candidate",
-      "recoveryTarget": "packages/core/workflow/commands/universal-workflow-engine.mjs"
-    },
-    {
-      "id": "recovery-logic",
-      "injectionTarget": "templates/universal-buildchain-bootstrap-recovery.yml",
-      "recoveryRoute": "primary-bootstrap-shell",
-      "recoveryTarget": "templates/universal-buildchain-bootstrap.yml"
+      "recoveryRoute": "same-entry-transient-runtime",
+      "recoveryTarget": ".github/workflows/public-ops-bootstrap.yml"
     },
     {
       "id": "result-projection",
       "injectionTarget": ".github/workflows/public-ops-bootstrap.yml",
-      "recoveryRoute": "pre-positioned-recovery-shell",
-      "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
+      "recoveryRoute": "upgrade-entry-and-full-rerun",
+      "recoveryTarget": "templates/universal-buildchain-bootstrap.yml"
     },
     {
       "id": "self-dogfood-caller",
       "injectionTarget": ".github/workflows/self-ops-bootstrap-dogfood.yml",
-      "recoveryRoute": "consumer-equivalent-recovery-shell",
-      "recoveryTarget": "templates/universal-buildchain-bootstrap-recovery.yml"
+      "recoveryRoute": "upgrade-entry-and-full-rerun",
+      "recoveryTarget": "templates/universal-buildchain-bootstrap.yml"
     }
   ]
 }

package/architecture/workflow-taxonomy.json

@@ -633,17 +633,6 @@
       "invocation": "repository",
       "rationale": "Universal Bootstrap Train-First Self-Dogfood: owned ops self workflow with one canonical implementation."
     },
-    {
-      "id": "universal-bootstrap-recovery",
-      "role": "public",
-      "category": "ops",
-      "purpose": "bootstrap-recovery",
-      "summary": "Universal Buildchain Bootstrap Recovery",
-      "owner": "kungfu-origin",
-      "status": "active",
-      "invocation": "reusable",
-      "rationale": "Universal Buildchain Bootstrap Recovery: owned ops public workflow with one canonical implementation."
-    },
     {
       "id": "v4-adopter-delivery",
       "role": "public",

package/contracts/fixtures/{v4-runtime-ref-resume-authority-v1 → runtime-resume-lineage-v2}/scenario.json

@@ -1,13 +1,12 @@
 {
-  "schemaVersion": 1,
-  "scenario": "floating-ref-moves-after-late-platform-failure",
+  "schemaVersion": 2,
+  "scenario": "runtime-repair-after-late-platform-failure",
   "sourceSha": "cccccccccccccccccccccccccccccccccccccccc",
   "sourceTreeSha": "dddddddddddddddddddddddddddddddddddddddd",
   "buildAttempt": "attempt-build-17",
   "resumeAttempt": "attempt-resume-18",
   "buildRuntimeSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
   "resumeRuntimeSha": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
-  "floatingRef": "v4-alpha",
   "requiredPlatforms": ["linux-x64", "macos-arm64", "windows-x64"],
   "reusedPlatforms": ["linux-x64", "macos-arm64"],
   "rebuildPlatforms": ["windows-x64"],

package/contracts/fixtures/v4-floating-consumer-policy-v1/cases.json

@@ -45,10 +45,10 @@
       "expected": "passed"
     },
     {
-      "id": "breaking-selected-lock",
+      "id": "surface-metadata-is-not-runtime-readmission",
       "selector": "v4-alpha",
       "breaking": "alpha",
-      "expectedCode": "selected-lock-runtime-incompatible"
+      "expected": "passed"
     },
     {
       "id": "nested-composite-exact-sha",

package/contracts/fixtures/v4-tail-reseal-v1/valid.json

@@ -22,7 +22,7 @@
     "ref": "v4-alpha",
     "sha": "dddddddddddddddddddddddddddddddddddddddd",
     "contractRoot": "sha256:2222222222222222222222222222222222222222222222222222222222222222",
-    "consumerPolicyReceiptRoot": "sha256:52622526c3fca475587e3a815f15281e5e84b5ec21467aea4a2a093103f4e050"
+    "consumerPolicyReceiptRoot": "sha256:8edea62958d1287a719a030da70b635d322e4a550f87f2f73614e82c8fc158d5"
   },
   "warrant": {
     "candidateId": "candidate-alpha-2",

package/contracts/promotion-invocation-v1.schema.json

@@ -12,15 +12,6 @@
       "const": "buildchain.promotion-invocation/v1",
       "type": "string"
     },
-    "buildchain-repository": {
-      "type": "string",
-      "default": "kungfu-systems/buildchain"
-    },
-    "buildchain-ref": {
-      "type": "string",
-      "description": "Optional explicit runtime ref. Empty binds the defining workflow SHA.",
-      "default": ""
-    },
     "buildchain-expected-channel": {
       "type": "string",
       "description": "Explicit stable or alpha lane expected when a bootstrap workflow shell ref is opaque",
@@ -86,31 +77,6 @@
       "description": "Whether a trusted train or exact-SHA runtime override was selected",
       "default": false
     },
-    "promotion-runtime-authorization-json": {
-      "type": "string",
-      "description": "Rooted transient runtime authorization receipt supplied by the public router",
-      "default": ""
-    },
-    "promotion-runtime-authorization-root": {
-      "type": "string",
-      "description": "sha256 root of the transient runtime authorization receipt",
-      "default": ""
-    },
-    "buildchain-contract-lock-path": {
-      "type": "string",
-      "description": "Consumer-owned Buildchain contract lock path",
-      "default": ".buildchain/contract-lock.json"
-    },
-    "buildchain-alpha-contract-lock-path": {
-      "type": "string",
-      "description": "Consumer-owned alpha contract lock path",
-      "default": ".buildchain/alpha-contract-lock.json"
-    },
-    "buildchain-stable-contract-lock-path": {
-      "type": "string",
-      "description": "Consumer-owned stable contract lock path",
-      "default": ".buildchain/contract-lock.json"
-    },
     "buildchain-contract-compatibility-policy": {
       "type": "string",
       "description": "Contract compatibility policy: major-compatible, allow-additive, or exact",
@@ -196,16 +162,6 @@
       "description": "Optional exact sha256 Release Candidate root; required when expected source tree is empty",
       "default": ""
     },
-    "resume-expected-candidate-runtime-sha": {
-      "type": "string",
-      "description": "Exact Buildchain runtime SHA recorded by the original candidate",
-      "default": ""
-    },
-    "resume-buildchain-runtime-sha": {
-      "type": "string",
-      "description": "Exact current Buildchain tooling SHA authorized to perform recovery",
-      "default": ""
-    },
     "resume-transaction-id": {
       "type": "string",
       "description": "Optional exact durable publication transaction identity to resume",

package/contracts/promotion-request-v1.schema.json

@@ -12,35 +12,6 @@
       "const": "buildchain.promotion-request/v1",
       "type": "string"
     },
-    "buildchain-channel": {
-      "type": "string",
-      "description": "Promotion workflow-shell/runtime channel: auto, alpha, or stable",
-      "default": "auto"
-    },
-    "buildchain-alpha-contract-lock-path": {
-      "type": "string",
-      "description": "Consumer-owned contract lock selected for alpha promotion",
-      "default": ".buildchain/alpha-contract-lock.json"
-    },
-    "buildchain-stable-contract-lock-path": {
-      "type": "string",
-      "description": "Consumer-owned contract lock selected for stable promotion",
-      "default": ".buildchain/contract-lock.json"
-    },
-    "buildchain-repository": {
-      "type": "string",
-      "default": "kungfu-systems/buildchain"
-    },
-    "buildchain-ref": {
-      "type": "string",
-      "description": "Optional explicit runtime ref. Empty binds the defining workflow SHA.",
-      "default": ""
-    },
-    "buildchain-contract-lock-path": {
-      "type": "string",
-      "description": "Consumer-owned Buildchain contract lock path",
-      "default": ".buildchain/contract-lock.json"
-    },
     "buildchain-contract-compatibility-policy": {
       "type": "string",
       "description": "Contract compatibility policy: major-compatible, allow-additive, or exact",
@@ -126,16 +97,6 @@
       "description": "Optional exact sha256 Release Candidate root; required when expected source tree is empty",
       "default": ""
     },
-    "resume-expected-candidate-runtime-sha": {
-      "type": "string",
-      "description": "Exact Buildchain runtime SHA recorded by the original candidate",
-      "default": ""
-    },
-    "resume-buildchain-runtime-sha": {
-      "type": "string",
-      "description": "Exact current Buildchain tooling SHA authorized to perform recovery",
-      "default": ""
-    },
     "resume-transaction-id": {
       "type": "string",
       "description": "Optional exact durable publication transaction identity to resume",