@kungfu-tech/buildchain 4.1.0-alpha.1 → 4.1.0-alpha.3

package/dist/site/buildchain-contract.json

@@ -4,7 +4,7 @@
   "product": {
     "name": "Buildchain",
     "package": "@kungfu-tech/buildchain",
-    "version": "4.1.0-alpha.1",
+    "version": "4.1.0-alpha.3",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "majorLine": "v4",
@@ -2404,5 +2404,5 @@
   "compatibilityFactCutRoot": "sha256:58f33e498596505a26b6fc3c7ae5acef847ff699eee6c7e17a7b318a40bdf0d6",
   "compatibilityProofRegistryRoot": "sha256:2f6477405c7891b754b33ad6515d55618bd320e7cdc59330d7cc645e17201e72",
   "compatibilityDigest": "sha256:b1088f1c224329b16cd23c285bc69334aa1ee102e5b44d5c09aaf156d76821b6",
-  "contractDigest": "sha256:97e6726c5da7dfa71ab81aff2ba94f02e5e37d67e3a76a87a98e3c5955609243"
+  "contractDigest": "sha256:5a95358562ed88a5d474e04e09dc6cf90cf76654c955c567c3290b8f25c234b6"
 }

package/dist/site/buildchain-site.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-bundle",
-  "generatedAt": "2026-09-10T15:50:04.000Z",
-  "publishedAt": "2026-09-10T15:50:04.000Z",
+  "generatedAt": "2026-09-11T11:19:20.000Z",
+  "publishedAt": "2026-09-11T11:19:20.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "5e72e4c65ea36761684da36abe4507ea818a881d",
+  "sourceRevision": "47b84ced56948e43530e933b4ba0a25a19a6ceeb",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.0-alpha.1",
+    "version": "4.1.0-alpha.3",
     "versionSource": "package.json#version"
   },
   "source": {
@@ -4607,7 +4607,7 @@
       ],
       "maturity": "stable",
       "sourcePath": "docs/runtime-entry.md",
-      "digest": "sha256:c783b66b5ce733b32177928c19807f2c65e3b52df5bc20d9dc1607a2341f23f1",
+      "digest": "sha256:474d9c7ad8718e2248e5792aa1aa1b64cf0bac2da368dfadf7a38d1b5982fab0",
       "headings": [
         {
           "level": 1,
@@ -4620,7 +4620,7 @@
           "anchor": "consumer-build-and-recovery"
         }
       ],
-      "markdown": "---\nstatus: draft\nperiod: ongoing\ntheme: unified-runtime-entry\ndoc_type: implementation-contract\nsource_level: user-consensus\nconfidence: high\nsensitivity: public\nevidence_grade: B\nreview_state: unreviewed\nlast_reviewed: 2026-09-11\nai_provenance:\n  model_family: GPT-6\n  product: Codex\n  generated_at: 2026-09-11\n  visible_context: Explicit user-approved runtime selection, recovery and alpha publication requirements.\n  invisible_context_boundary: This contract does not claim implementation or hosted qualification is complete.\n---\n\n# Runtime entry contract\n\nConsumers persist a public workflow reference at `@v4` or `@v4-alpha`.\nGitHub resolves that entry to a commit. The entry selects execution runtime X\nfrom an explicit transient parameter, the selected contract lock, or the entry\ncommit default, in that order. The entry commit and runtime commit may differ.\n\n`actions/runtime/environment/prepare` is the sole runtime preparation owner.\nSelection is resolved once per execution. Each executing job prepares that\nselected runtime through the same implementation. Business workflows and\nactions cannot acquire, replace, reselect or install their own Buildchain\nruntime. All business composites, JavaScript modules, WASM and resources come\nfrom X. Runtime identity is retained as provenance; subsequent business nodes\ndo not compare Buildchain SHAs or require equality with the workflow commit.\n\nA runtime failure can start a recovery execution through the same public\nentry with a transient repaired train branch or tag. The new execution selects\nruntime Y and retains the original task, source and evidence. Valid completed\nresults can be reused; provider effects require readback before further writes.\nSwitching runtimes does not automatically qualify all previous results for reuse.\nNeither the persisted caller nor its contract lock needs a train rewrite.\n\nAn entry failure is repaired by publishing and adopting a corrected entry and\nstarting a complete run. Recovering an invalid entry is not a runtime feature.\nBuildchain self-dogfood uses exactly the same consumer contract and has no\nrepository-specific execution or recovery route.\n\nSource checkouts are separate business inputs. Building Buildchain itself may\ncheck out its source, but that source cannot implicitly replace the selected\nexecution runtime. Source, artifact and publication-effect checks retain their\nbusiness meaning; they do not reintroduce downstream Buildchain SHA checks.\n\nAcceptance requires a complete workflow/action acquisition inventory, enforced\nsingle preparation ownership, different entry/runtime execution, train recovery,\nplatform and multi-job qualification, and validation of the published consumer\nentry. A source test or a successful package import alone is insufficient.\n\n## Consumer build and recovery\n\n```yaml\non:\n  push:\n  workflow_dispatch:\n    inputs:\n      runtime-ref:\n        description: Optional repaired train for this execution\n        default: \"\"\n        type: string\n      resume-run-id:\n        description: Original failed build run to recover\n        default: \"\"\n        type: string\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/build.yml@v4\n    with:\n      runtime-ref: ${{ inputs.runtime-ref || '' }}\n      resume-run-id: ${{ inputs.resume-run-id || '' }}\n```\n\nOrdinary executions use `.buildchain/contract-lock.json`; the alpha entry defaults\nto `.buildchain/alpha-contract-lock.json`. `contract-lock` selects another relative\nlock path. A missing default lock falls back to the entry commit; an invalid lock\nor an unreadable source fails preparation. A supplied runtime parameter overrides\nthe lock and requires a caller repository actor with write, maintain or admin access.\nBranches and tags are resolved to an immutable commit during selection.\n\nFor a Buildchain runtime fault, dispatch the same consumer workflow with\n`runtime-ref: train/v4/v4.1/<repair>` and the original `resume-run-id`. The entry\nretains the original source commit and rejects unrelated workflows or fork runs.\nInstall hydrates the new workspace; completed build outputs are restored only\nwhen source, configuration, platform, tools, artifact producer and all retained\nbytes qualify. The remaining verification runs with the repaired runtime.\nExisting provider effects use their transaction evidence and live readbacks.\nA failed-job rerun cannot supply new inputs; recovery therefore starts a new run.\n\n`runtime-selection` is an internal reusable-workflow transport for an already\nselected runtime. Components forward it unchanged instead of resolving another\nreference. Consumers normally supply `runtime-ref` or a lock, not this transport.\n\nNested components preserve the selected runtime and contract metadata without\nre-reading the lock or comparing the runtime SHA. The internal transport carries\na trusted entry output; consumer source binding and override authorization remain\nentry concerns. Recovery selectors request `actions: read` to read the original\nrun in private repositories as well as public repositories.\n\nBusiness adapters also keep the runtime installation directory separate from the\nconsumer workspace. Queue reconciliation, npm preview, runner qualification and\nbinary packaging read consumer source from the workspace while executing selected\nruntime code. Directory equality is not an admission rule; source SHA and artifact\ncontainment checks still apply. The architecture gate parses business JavaScript\nand rejects direct or aliased runtime/source directory equality comparisons."
+      "markdown": "---\nstatus: draft\nperiod: ongoing\ntheme: unified-runtime-entry\ndoc_type: implementation-contract\nsource_level: user-consensus\nconfidence: high\nsensitivity: public\nevidence_grade: B\nreview_state: unreviewed\nlast_reviewed: 2026-09-11\nai_provenance:\n  model_family: GPT-6\n  product: Codex\n  generated_at: 2026-09-11\n  visible_context: Explicit user-approved runtime selection, recovery and alpha publication requirements.\n  invisible_context_boundary: This contract does not claim implementation or hosted qualification is complete.\n---\n\n# Runtime entry contract\n\nConsumers persist a public workflow reference at `@v4` or `@v4-alpha`.\nGitHub resolves that entry to a commit. The entry selects execution runtime X\nfrom an explicit transient parameter, the selected contract lock, or the entry\ncommit default, in that order. The entry commit and runtime commit may differ.\n\n`actions/runtime/environment/prepare` is the sole runtime preparation owner.\nSelection is resolved once per execution. Each executing job prepares that\nselected runtime through the same implementation. Business workflows and\nactions cannot acquire, replace, reselect or install their own Buildchain\nruntime. All business composites, JavaScript modules, WASM and resources come\nfrom X. Runtime identity is retained as provenance; subsequent business nodes\ndo not compare Buildchain SHAs or require equality with the workflow commit.\n\nA runtime failure can start a recovery execution through the same public\nentry with a transient repaired train branch or tag. The new execution selects\nruntime Y and retains the original task, source and evidence. Valid completed\nresults can be reused; provider effects require readback before further writes.\nSwitching runtimes does not automatically qualify all previous results for reuse.\nNeither the persisted caller nor its contract lock needs a train rewrite.\n\nAn entry failure is repaired by publishing and adopting a corrected entry and\nstarting a complete run. Recovering an invalid entry is not a runtime feature.\nBuildchain self-dogfood uses exactly the same consumer contract and has no\nrepository-specific execution or recovery route.\n\nSource checkouts are separate business inputs. Building Buildchain itself may\ncheck out its source, but that source cannot implicitly replace the selected\nexecution runtime. Source, artifact and publication-effect checks retain their\nbusiness meaning; they do not reintroduce downstream Buildchain SHA checks.\n\nAcceptance requires a complete workflow/action acquisition inventory, enforced\nsingle preparation ownership, different entry/runtime execution, train recovery,\nplatform and multi-job qualification, and validation of the published consumer\nentry. A source test or a successful package import alone is insufficient.\n\n## Consumer build and recovery\n\n```yaml\non:\n  push:\n  workflow_dispatch:\n    inputs:\n      runtime-ref:\n        description: Optional repaired train for this execution\n        default: \"\"\n        type: string\n      resume-run-id:\n        description: Original failed build run to recover\n        default: \"\"\n        type: string\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/build.yml@v4\n    with:\n      runtime-ref: ${{ inputs.runtime-ref || '' }}\n      resume-run-id: ${{ inputs.resume-run-id || '' }}\n```\n\nOrdinary executions use `.buildchain/contract-lock.json`; the alpha entry defaults\nto `.buildchain/alpha-contract-lock.json`. `contract-lock` selects another relative\nlock path. A missing default lock falls back to the entry commit; an invalid lock\nor an unreadable source fails preparation. A supplied runtime parameter overrides\nthe lock and requires caller repository write authority. For `workflow_dispatch`,\nGitHub enforces repository Actions write permission before creating the run,\nincluding calls using installation tokens. The entry uses that authorization;\nan installation bot does not need to be a human repository collaborator.\nOther event types retain the entry's write, maintain or admin collaborator check.\nSee GitHub's [workflow dispatch authorization](https://docs.github.com/en/rest/actions/workflows#create-a-workflow-dispatch-event).\nBranches and tags are resolved to an immutable commit during selection.\n\nFor a Buildchain runtime fault, dispatch the same consumer workflow with\n`runtime-ref: train/v4/v4.1/<repair>` and the original `resume-run-id`. The entry\nretains the original source commit and rejects unrelated workflows or fork runs.\nInstall hydrates the new workspace; completed build outputs are restored only\nwhen source, configuration, platform, tools, artifact producer and all retained\nbytes qualify. The remaining verification runs with the repaired runtime.\nExisting provider effects use their transaction evidence and live readbacks.\nA failed-job rerun cannot supply new inputs; recovery therefore starts a new run.\n\n`runtime-selection` is an internal reusable-workflow transport for an already\nselected runtime. Components forward it unchanged instead of resolving another\nreference. Consumers normally supply `runtime-ref` or a lock, not this transport.\n\nNested components preserve the selected runtime and contract metadata without\nre-reading the lock or comparing the runtime SHA. The internal transport carries\na trusted entry output; consumer source binding and override authorization remain\nentry concerns. Recovery selectors request `actions: read` to read the original\nrun in private repositories as well as public repositories.\n\nBusiness adapters also keep the runtime installation directory separate from the\nconsumer workspace. Queue reconciliation, npm preview, runner qualification and\nbinary packaging read consumer source from the workspace while executing selected\nruntime code. Directory equality is not an admission rule; source SHA and artifact\ncontainment checks still apply. The architecture gate parses business JavaScript\nand rejects direct or aliased runtime/source directory equality comparisons.\n\nPublication authority adapters take runtime repository and revision provenance\nfrom the prepared entry selection. Consumer requests provide source, artifact\nand effect authority; they do not supply or readmit a Buildchain SHA. Governance\nand sealed publication evidence retain the selected runtime as provenance while\nvalidating their own source, policy and provider bindings."
     },
     {
       "id": "manual:runtime-train-validation",

package/dist/site/kfd-claims.json

@@ -21,7 +21,7 @@
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "29c7c510d81c9e6117f9486c347e9feae966fb858d7155c71c07b743e2297b54",
+    "sha256": "4d6268c7dd75edc6f6af2a9bf9e6fba6bacf65ca0b552ddcae356cf63a80b988",
     "summary": {
       "cliCommandCount": 117,
       "workflowCount": 67,
@@ -246,7 +246,7 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "29c7c510d81c9e6117f9486c347e9feae966fb858d7155c71c07b743e2297b54",
+      "sha256": "4d6268c7dd75edc6f6af2a9bf9e6fba6bacf65ca0b552ddcae356cf63a80b988",
       "summary": {
         "cliCommandCount": 117,
         "workflowCount": 67,

package/dist/site/kfd-upstream-aggregate.json

@@ -4,7 +4,7 @@
   "product": {
     "id": "kungfu-tech-buildchain",
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.0-alpha.1",
+    "version": "4.1.0-alpha.3",
     "repository": "https://github.com/kungfu-systems/buildchain"
   },
   "source": {

package/dist/site/page-registry.json

@@ -4541,7 +4541,7 @@
       ],
       "maturity": "stable",
       "sourcePath": "docs/runtime-entry.md",
-      "digest": "sha256:c783b66b5ce733b32177928c19807f2c65e3b52df5bc20d9dc1607a2341f23f1",
+      "digest": "sha256:474d9c7ad8718e2248e5792aa1aa1b64cf0bac2da368dfadf7a38d1b5982fab0",
       "headings": [
         {
           "level": 1,
@@ -4554,7 +4554,7 @@
           "anchor": "consumer-build-and-recovery"
         }
       ],
-      "markdown": "---\nstatus: draft\nperiod: ongoing\ntheme: unified-runtime-entry\ndoc_type: implementation-contract\nsource_level: user-consensus\nconfidence: high\nsensitivity: public\nevidence_grade: B\nreview_state: unreviewed\nlast_reviewed: 2026-09-11\nai_provenance:\n  model_family: GPT-6\n  product: Codex\n  generated_at: 2026-09-11\n  visible_context: Explicit user-approved runtime selection, recovery and alpha publication requirements.\n  invisible_context_boundary: This contract does not claim implementation or hosted qualification is complete.\n---\n\n# Runtime entry contract\n\nConsumers persist a public workflow reference at `@v4` or `@v4-alpha`.\nGitHub resolves that entry to a commit. The entry selects execution runtime X\nfrom an explicit transient parameter, the selected contract lock, or the entry\ncommit default, in that order. The entry commit and runtime commit may differ.\n\n`actions/runtime/environment/prepare` is the sole runtime preparation owner.\nSelection is resolved once per execution. Each executing job prepares that\nselected runtime through the same implementation. Business workflows and\nactions cannot acquire, replace, reselect or install their own Buildchain\nruntime. All business composites, JavaScript modules, WASM and resources come\nfrom X. Runtime identity is retained as provenance; subsequent business nodes\ndo not compare Buildchain SHAs or require equality with the workflow commit.\n\nA runtime failure can start a recovery execution through the same public\nentry with a transient repaired train branch or tag. The new execution selects\nruntime Y and retains the original task, source and evidence. Valid completed\nresults can be reused; provider effects require readback before further writes.\nSwitching runtimes does not automatically qualify all previous results for reuse.\nNeither the persisted caller nor its contract lock needs a train rewrite.\n\nAn entry failure is repaired by publishing and adopting a corrected entry and\nstarting a complete run. Recovering an invalid entry is not a runtime feature.\nBuildchain self-dogfood uses exactly the same consumer contract and has no\nrepository-specific execution or recovery route.\n\nSource checkouts are separate business inputs. Building Buildchain itself may\ncheck out its source, but that source cannot implicitly replace the selected\nexecution runtime. Source, artifact and publication-effect checks retain their\nbusiness meaning; they do not reintroduce downstream Buildchain SHA checks.\n\nAcceptance requires a complete workflow/action acquisition inventory, enforced\nsingle preparation ownership, different entry/runtime execution, train recovery,\nplatform and multi-job qualification, and validation of the published consumer\nentry. A source test or a successful package import alone is insufficient.\n\n## Consumer build and recovery\n\n```yaml\non:\n  push:\n  workflow_dispatch:\n    inputs:\n      runtime-ref:\n        description: Optional repaired train for this execution\n        default: \"\"\n        type: string\n      resume-run-id:\n        description: Original failed build run to recover\n        default: \"\"\n        type: string\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/build.yml@v4\n    with:\n      runtime-ref: ${{ inputs.runtime-ref || '' }}\n      resume-run-id: ${{ inputs.resume-run-id || '' }}\n```\n\nOrdinary executions use `.buildchain/contract-lock.json`; the alpha entry defaults\nto `.buildchain/alpha-contract-lock.json`. `contract-lock` selects another relative\nlock path. A missing default lock falls back to the entry commit; an invalid lock\nor an unreadable source fails preparation. A supplied runtime parameter overrides\nthe lock and requires a caller repository actor with write, maintain or admin access.\nBranches and tags are resolved to an immutable commit during selection.\n\nFor a Buildchain runtime fault, dispatch the same consumer workflow with\n`runtime-ref: train/v4/v4.1/<repair>` and the original `resume-run-id`. The entry\nretains the original source commit and rejects unrelated workflows or fork runs.\nInstall hydrates the new workspace; completed build outputs are restored only\nwhen source, configuration, platform, tools, artifact producer and all retained\nbytes qualify. The remaining verification runs with the repaired runtime.\nExisting provider effects use their transaction evidence and live readbacks.\nA failed-job rerun cannot supply new inputs; recovery therefore starts a new run.\n\n`runtime-selection` is an internal reusable-workflow transport for an already\nselected runtime. Components forward it unchanged instead of resolving another\nreference. Consumers normally supply `runtime-ref` or a lock, not this transport.\n\nNested components preserve the selected runtime and contract metadata without\nre-reading the lock or comparing the runtime SHA. The internal transport carries\na trusted entry output; consumer source binding and override authorization remain\nentry concerns. Recovery selectors request `actions: read` to read the original\nrun in private repositories as well as public repositories.\n\nBusiness adapters also keep the runtime installation directory separate from the\nconsumer workspace. Queue reconciliation, npm preview, runner qualification and\nbinary packaging read consumer source from the workspace while executing selected\nruntime code. Directory equality is not an admission rule; source SHA and artifact\ncontainment checks still apply. The architecture gate parses business JavaScript\nand rejects direct or aliased runtime/source directory equality comparisons."
+      "markdown": "---\nstatus: draft\nperiod: ongoing\ntheme: unified-runtime-entry\ndoc_type: implementation-contract\nsource_level: user-consensus\nconfidence: high\nsensitivity: public\nevidence_grade: B\nreview_state: unreviewed\nlast_reviewed: 2026-09-11\nai_provenance:\n  model_family: GPT-6\n  product: Codex\n  generated_at: 2026-09-11\n  visible_context: Explicit user-approved runtime selection, recovery and alpha publication requirements.\n  invisible_context_boundary: This contract does not claim implementation or hosted qualification is complete.\n---\n\n# Runtime entry contract\n\nConsumers persist a public workflow reference at `@v4` or `@v4-alpha`.\nGitHub resolves that entry to a commit. The entry selects execution runtime X\nfrom an explicit transient parameter, the selected contract lock, or the entry\ncommit default, in that order. The entry commit and runtime commit may differ.\n\n`actions/runtime/environment/prepare` is the sole runtime preparation owner.\nSelection is resolved once per execution. Each executing job prepares that\nselected runtime through the same implementation. Business workflows and\nactions cannot acquire, replace, reselect or install their own Buildchain\nruntime. All business composites, JavaScript modules, WASM and resources come\nfrom X. Runtime identity is retained as provenance; subsequent business nodes\ndo not compare Buildchain SHAs or require equality with the workflow commit.\n\nA runtime failure can start a recovery execution through the same public\nentry with a transient repaired train branch or tag. The new execution selects\nruntime Y and retains the original task, source and evidence. Valid completed\nresults can be reused; provider effects require readback before further writes.\nSwitching runtimes does not automatically qualify all previous results for reuse.\nNeither the persisted caller nor its contract lock needs a train rewrite.\n\nAn entry failure is repaired by publishing and adopting a corrected entry and\nstarting a complete run. Recovering an invalid entry is not a runtime feature.\nBuildchain self-dogfood uses exactly the same consumer contract and has no\nrepository-specific execution or recovery route.\n\nSource checkouts are separate business inputs. Building Buildchain itself may\ncheck out its source, but that source cannot implicitly replace the selected\nexecution runtime. Source, artifact and publication-effect checks retain their\nbusiness meaning; they do not reintroduce downstream Buildchain SHA checks.\n\nAcceptance requires a complete workflow/action acquisition inventory, enforced\nsingle preparation ownership, different entry/runtime execution, train recovery,\nplatform and multi-job qualification, and validation of the published consumer\nentry. A source test or a successful package import alone is insufficient.\n\n## Consumer build and recovery\n\n```yaml\non:\n  push:\n  workflow_dispatch:\n    inputs:\n      runtime-ref:\n        description: Optional repaired train for this execution\n        default: \"\"\n        type: string\n      resume-run-id:\n        description: Original failed build run to recover\n        default: \"\"\n        type: string\njobs:\n  build:\n    uses: kungfu-systems/buildchain/.github/workflows/build.yml@v4\n    with:\n      runtime-ref: ${{ inputs.runtime-ref || '' }}\n      resume-run-id: ${{ inputs.resume-run-id || '' }}\n```\n\nOrdinary executions use `.buildchain/contract-lock.json`; the alpha entry defaults\nto `.buildchain/alpha-contract-lock.json`. `contract-lock` selects another relative\nlock path. A missing default lock falls back to the entry commit; an invalid lock\nor an unreadable source fails preparation. A supplied runtime parameter overrides\nthe lock and requires caller repository write authority. For `workflow_dispatch`,\nGitHub enforces repository Actions write permission before creating the run,\nincluding calls using installation tokens. The entry uses that authorization;\nan installation bot does not need to be a human repository collaborator.\nOther event types retain the entry's write, maintain or admin collaborator check.\nSee GitHub's [workflow dispatch authorization](https://docs.github.com/en/rest/actions/workflows#create-a-workflow-dispatch-event).\nBranches and tags are resolved to an immutable commit during selection.\n\nFor a Buildchain runtime fault, dispatch the same consumer workflow with\n`runtime-ref: train/v4/v4.1/<repair>` and the original `resume-run-id`. The entry\nretains the original source commit and rejects unrelated workflows or fork runs.\nInstall hydrates the new workspace; completed build outputs are restored only\nwhen source, configuration, platform, tools, artifact producer and all retained\nbytes qualify. The remaining verification runs with the repaired runtime.\nExisting provider effects use their transaction evidence and live readbacks.\nA failed-job rerun cannot supply new inputs; recovery therefore starts a new run.\n\n`runtime-selection` is an internal reusable-workflow transport for an already\nselected runtime. Components forward it unchanged instead of resolving another\nreference. Consumers normally supply `runtime-ref` or a lock, not this transport.\n\nNested components preserve the selected runtime and contract metadata without\nre-reading the lock or comparing the runtime SHA. The internal transport carries\na trusted entry output; consumer source binding and override authorization remain\nentry concerns. Recovery selectors request `actions: read` to read the original\nrun in private repositories as well as public repositories.\n\nBusiness adapters also keep the runtime installation directory separate from the\nconsumer workspace. Queue reconciliation, npm preview, runner qualification and\nbinary packaging read consumer source from the workspace while executing selected\nruntime code. Directory equality is not an admission rule; source SHA and artifact\ncontainment checks still apply. The architecture gate parses business JavaScript\nand rejects direct or aliased runtime/source directory equality comparisons.\n\nPublication authority adapters take runtime repository and revision provenance\nfrom the prepared entry selection. Consumer requests provide source, artifact\nand effect authority; they do not supply or readmit a Buildchain SHA. Governance\nand sealed publication evidence retain the selected runtime as provenance while\nvalidating their own source, policy and provider bindings."
     },
     {
       "id": "manual:runtime-train-validation",

package/dist/site/public-surface-audit.json

@@ -10831,8 +10831,8 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "e43fdb0289df88871f3f0febbe04dcb9311a252a2b1df9b3a83a2d10c9d4a70f",
-    "workflowRegistryDigest": "f6c205601a9ee262363efaa672ff9190b7054f7d4ad98102825aca89dc545a4a",
-    "pageRegistryDigest": "b1ea92b4ac1d4d28f25b997d139f2295fa7a08485a2e1b03fc22942ccb9abcd1"
+    "workflowRegistryDigest": "df23a5fb26121ce1707ec4b255aa61eca74e8e3a8b910e93ee6855f1d658e97e",
+    "pageRegistryDigest": "3b91511808536de5ab38b69f63072b8b2c462a14961418ea871740443bc16ab7"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-09-10T15:50:04.000Z",
-  "publishedAt": "2026-09-10T15:50:04.000Z",
+  "generatedAt": "2026-09-11T11:19:20.000Z",
+  "publishedAt": "2026-09-11T11:19:20.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "5e72e4c65ea36761684da36abe4507ea818a881d",
+  "sourceRevision": "47b84ced56948e43530e933b4ba0a25a19a6ceeb",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.0-alpha.1",
+    "version": "4.1.0-alpha.3",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-09-10T15:50:04.000Z",
-  "publishedAt": "2026-09-10T15:50:04.000Z",
+  "generatedAt": "2026-09-11T11:19:20.000Z",
+  "publishedAt": "2026-09-11T11:19:20.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "5e72e4c65ea36761684da36abe4507ea818a881d",
+  "sourceRevision": "47b84ced56948e43530e933b4ba0a25a19a6ceeb",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.0-alpha.1",
+    "version": "4.1.0-alpha.3",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",

package/dist/site/workflow-registry.json

@@ -1044,7 +1044,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.0-alpha.1",
+      "introducedVersion": "4.1.0-alpha.3",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",
@@ -2475,7 +2475,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.0-alpha.1",
+      "introducedVersion": "4.1.0-alpha.3",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",
@@ -2505,7 +2505,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.0-alpha.1",
+      "introducedVersion": "4.1.0-alpha.3",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",
@@ -2535,7 +2535,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.0-alpha.1",
+      "introducedVersion": "4.1.0-alpha.3",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",

package/docs/runtime-entry.md

@@ -81,7 +81,12 @@ Ordinary executions use `.buildchain/contract-lock.json`; the alpha entry defaul
 to `.buildchain/alpha-contract-lock.json`. `contract-lock` selects another relative
 lock path. A missing default lock falls back to the entry commit; an invalid lock
 or an unreadable source fails preparation. A supplied runtime parameter overrides
-the lock and requires a caller repository actor with write, maintain or admin access.
+the lock and requires caller repository write authority. For `workflow_dispatch`,
+GitHub enforces repository Actions write permission before creating the run,
+including calls using installation tokens. The entry uses that authorization;
+an installation bot does not need to be a human repository collaborator.
+Other event types retain the entry's write, maintain or admin collaborator check.
+See GitHub's [workflow dispatch authorization](https://docs.github.com/en/rest/actions/workflows#create-a-workflow-dispatch-event).
 Branches and tags are resolved to an immutable commit during selection.
 
 For a Buildchain runtime fault, dispatch the same consumer workflow with
@@ -109,3 +114,9 @@ binary packaging read consumer source from the workspace while executing selecte
 runtime code. Directory equality is not an admission rule; source SHA and artifact
 containment checks still apply. The architecture gate parses business JavaScript
 and rejects direct or aliased runtime/source directory equality comparisons.
+
+Publication authority adapters take runtime repository and revision provenance
+from the prepared entry selection. Consumer requests provide source, artifact
+and effect authority; they do not supply or readmit a Buildchain SHA. Governance
+and sealed publication evidence retain the selected runtime as provenance while
+validating their own source, policy and provider bindings.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "4.1.0-alpha.1",
+  "version": "4.1.0-alpha.3",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",

package/packages/core/build/verification/actions.js

@@ -39,6 +39,7 @@ export function qualifyBuildBackboneAction(_core, env) {
       "--test",
       "tests/build-orchestration.test.mjs",
       "tests/build-artifact-pipeline.test.mjs",
+      "tests/dev-delivery-minimal-request.test.mjs",
     ],
     { cwd: root, env },
   );

package/packages/core/dev-delivery/commands/dev-delivery-request.sh

@@ -65,11 +65,12 @@ qualified_base="$(jq -r --argjson number "$number" '.pull_requests[] | select(.n
 for revision in "$source_head" "$qualified_base"; do
   git cat-file -e "$revision^{commit}" 2>/dev/null || git fetch --no-tags origin "$revision"
 done
-affected_paths="$(git diff --name-only --no-renames "$qualified_base...$source_head" | jq -Rsc 'split("\n") | map(select(length > 0)) | sort')"
+affected_paths="$(git diff --name-only --no-renames "$qualified_base...$source_head" | jq -Rsc 'split("\n") | map(rtrimstr("\r")) | map(select(length > 0)) | sort')"
 [ "$(jq length <<<"$affected_paths")" -gt 0 ] || { echo "buildchain dev deliver: PR has no source changes" >&2; exit 1; }
 
 paths_at_head() {
   while IFS= read -r item; do
+    item="${item%$'\r'}"
     if git cat-file -e "$source_head:$item" 2>/dev/null; then printf '%s\n' "$item"; fi
   done | jq -Rsc 'split("\n") | map(select(length > 0)) | sort'
 }

package/packages/core/publication/authority/actions.js

@@ -12,6 +12,7 @@ const parse = (value) => (value ? JSON.parse(value) : undefined);
 function context(core, env) {
   const request = publicationAuthorityRequest(
     JSON.parse(core.getInput("request-json", { required: true })),
+    JSON.parse(env.BUILDCHAIN_RUNTIME_SELECTION),
   );
   return {
     request: { ...request, callerRepository: env.GITHUB_REPOSITORY },
@@ -22,12 +23,16 @@ function context(core, env) {
 export function inspectPublicationAuthorityAction(core, env) {
   admitPublicationAuthorityRequest(context(core, env).request);
 }
-export function verifyPublicationGovernanceAction(core, env) {
+export function verifyPublicationGovernanceAction(
+  core,
+  env,
+  { verify = verifyLivePublicationGovernance } = {},
+) {
   const { request, workspace, runtimeRoot } = context(core, env);
-  return verifyLivePublicationGovernance({
+  return verify({
     repository: request.evidenceRepository || env.GITHUB_REPOSITORY,
     targetRef: request.targetRef,
-    runtimeSha: request.buildchainRef,
+    runtimeSha: request.runtimeSha,
     runtimeRoot,
     outputRoot: path.join(workspace, ".buildchain/publication-authority"),
     token: core.getInput("token", { required: true }),

package/packages/core/publication/authority/admission.js

@@ -1,11 +1,5 @@
 import { requireValue } from "../../runtime/action-process.mjs";
 
-export function requireImmutableAuthority(request) {
-  requireValue(
-    /^[0-9a-f]{40}$/i.test(request.buildchainRef || ""),
-    "Publication authority requires an exact 40-character GitHub commit SHA",
-  );
-}
 export function requireSealedInputs(request) {
   const names = [
     "admissionJson",
@@ -21,10 +15,6 @@ export function requireSealedInputs(request) {
   );
 }
 export function requireManagedInputs(request) {
-  requireValue(
-    request.buildchainRepository === "kungfu-systems/buildchain",
-    "Automatic publication admission requires the canonical Buildchain authority repository",
-  );
   requireValue(
     /^[0-9a-f]{40}$/i.test(request.sourceSha),
     "Automatic publication admission requires an exact source SHA",
@@ -107,7 +97,6 @@ export function requireManagedInputs(request) {
 
 export function admitPublicationAuthorityRequest(request) {
   if (request.dryRun) return;
-  requireImmutableAuthority(request);
   if (request.autoAdmission) requireManagedInputs(request);
   else requireSealedInputs(request);
 }

package/packages/core/publication/authority/assembly.js

@@ -53,7 +53,7 @@ export async function assemblePublicationAdmission(
     repository: request.evidenceRepository,
     sourceSha: request.sourceSha,
     sourceTreeSha,
-    runtimeSha: request.buildchainRef,
+    runtimeSha: request.runtimeSha,
     publicationVersion: request.publicationVersion,
   });
   const bundle = sealManagedPublicationAdmission({

package/packages/core/publication/authority/control-plane.js

@@ -11,10 +11,10 @@ export function publicationControlPlaneRequest(request) {
     candidate = kind === "release-candidate";
   return {
     repository: request.evidenceRepository,
-    workflowRepository: request.buildchainRepository,
+    workflowRepository: request.runtimeRepository,
     branch: request.targetRef,
     sourceSha: request.sourceSha,
-    workflowRef: request.buildchainRef,
+    workflowRef: request.runtimeSha,
     publisherWorkflowPath: request.publisherWorkflowPath,
     requiredStatusCheck: request.requiredStatusCheck || "",
     workflowPath: request.authorityWorkflowPath || defaults[kind],

package/packages/core/publication/authority/request.js

@@ -1,10 +1,15 @@
-export function publicationAuthorityRequest(input) {
-  return Object.fromEntries(
+export function publicationAuthorityRequest(input, selectedRuntime) {
+  const request = Object.fromEntries(
     Object.entries(input).map(([key, value]) => [
       key.replace(/-([a-z])/g, (_, letter) => letter.toUpperCase()),
       value,
     ]),
   );
+  return {
+    ...request,
+    runtimeRepository: selectedRuntime.repository,
+    runtimeSha: selectedRuntime.sha,
+  };
 }
 export function requireAuthorityValue(value, label) {
   if (value === undefined || value === null || value === "")

package/packages/core/publication/authority/verification.js

@@ -29,7 +29,7 @@ export async function verifySealedAdmission(
     kind: request.autoAdmissionKind,
     evidenceRoot: path.join(workspace, ".buildchain/publication-evidence"),
     sourceTreeSha,
-    runtimeSha: request.buildchainRef,
+    runtimeSha: request.runtimeSha,
     admission,
     gateAggregate,
   });

package/packages/core/release/version-state.js

@@ -329,6 +329,18 @@ function runVersionVerification({
   if (!command && (!runLifecycleVerify || !lifecycleVerify) && !lifecycleVersionState) {
     return changedFiles;
   }
+  const lifecycleInstall = getLifecycleStage(loadedConfig, "install");
+  if (lifecycleVersionState && lifecycleInstall) {
+    // Source generators own their dependencies. Install against the original
+    // manifests before materializing the next version, independently of runtime X.
+    runLifecycleStage({
+      cwd,
+      loadedConfig,
+      name: "install",
+      stage: lifecycleInstall,
+      env: extraEnv,
+    });
+  }
   applyLocalVersionState(cwd, changedFiles);
   const lifecycleEnv = { BUILDCHAIN_VERSION: version, ...(extraEnv || {}) };
   if (lifecycleVersionState) {

package/packages/core/runtime/entry/github.js

@@ -39,6 +39,9 @@ export function runtimeEntryProvider(
       readJson(repository, sha, "architecture/runtime-entry.json"),
     authorize: async ({ origin }) => {
       if (origin !== "runtime-parameter") return;
+      // GitHub already authorizes workflow_dispatch using repository Actions
+      // write permission, including installation tokens without a collaborator.
+      if (eventName === "workflow_dispatch") return;
       const { data } = await github.rest.repos.getCollaboratorPermissionLevel({
         ...parts(sourceRepository),
         username: actor,