@kungfu-tech/buildchain 4.1.2 → 4.1.3-alpha.0

package/dist/site/public-surface-audit.json

@@ -5,8 +5,8 @@
   "summary": {
     "cliCommandCount": 117,
     "workflowCount": 67,
-    "actionCount": 265,
-    "sitePageCount": 93,
+    "actionCount": 268,
+    "sitePageCount": 94,
     "docCommandRefCount": 1036,
     "failureCount": 0
   },
@@ -864,6 +864,8 @@
           "controller-receipt-digest",
           "controller-receipt-json",
           "controller-receipt-status",
+          "discussion-id",
+          "discussion-url",
           "github-artifact-attestation-evidence-root",
           "github-artifact-attestation-id",
           "github-artifact-attestation-publication-receipt-digest",
@@ -888,7 +890,7 @@
           "release-tail-transaction-state",
           "release-transaction-root"
         ],
-        "outputCount": 31
+        "outputCount": 33
       },
       {
         "id": "build",
@@ -1740,6 +1742,8 @@
           "controller-receipt-digest",
           "controller-receipt-json",
           "controller-receipt-status",
+          "discussion-id",
+          "discussion-url",
           "github-artifact-attestation-evidence-root",
           "github-artifact-attestation-id",
           "github-artifact-attestation-publication-receipt-digest",
@@ -1775,7 +1779,7 @@
           "release-tail-transaction-state",
           "release-transaction-root"
         ],
-        "outputCount": 43
+        "outputCount": 45
       },
       {
         "id": "public-release-propagation",
@@ -4435,6 +4439,7 @@
           "repository",
           "required-artifacts-path",
           "required-status-check",
+          "resume-discussion-id",
           "resume-transaction-id",
           "runtime-commit",
           "runtime-tree",
@@ -4442,12 +4447,13 @@
           "sealed-bundle-root",
           "source-sha",
           "stage-capsules-path",
+          "standalone-binary-distribution",
           "state-path",
           "target-ref",
           "target-sha",
           "token"
         ],
-        "inputCount": 32
+        "inputCount": 34
       },
       {
         "id": "release/promotion/classify",
@@ -4837,6 +4843,42 @@
         ],
         "inputCount": 11
       },
+      {
+        "id": "release/transaction/inspect",
+        "path": "actions/release/transaction/inspect/action.yml",
+        "inputs": [
+          "session-json",
+          "token"
+        ],
+        "inputCount": 2
+      },
+      {
+        "id": "release/transaction/open",
+        "path": "actions/release/transaction/open/action.yml",
+        "inputs": [
+          "discussion-id",
+          "dry-run",
+          "expected-nodes-json",
+          "intent-key",
+          "predecessor",
+          "source-json",
+          "token"
+        ],
+        "inputCount": 7
+      },
+      {
+        "id": "release/transaction/record",
+        "path": "actions/release/transaction/record/action.yml",
+        "inputs": [
+          "node",
+          "payload-json",
+          "sequence",
+          "session-json",
+          "status",
+          "token"
+        ],
+        "inputCount": 6
+      },
       {
         "id": "runtime/dependencies/install",
         "path": "actions/runtime/dependencies/install/action.yml",
@@ -5518,6 +5560,10 @@
         "id": "manual:release-candidate",
         "category": "manual"
       },
+      {
+        "id": "manual:release-discussions",
+        "category": "manual"
+      },
       {
         "id": "manual:release-flow",
         "category": "manual"
@@ -10831,8 +10877,8 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "e43fdb0289df88871f3f0febbe04dcb9311a252a2b1df9b3a83a2d10c9d4a70f",
-    "workflowRegistryDigest": "36c67c70f168b8a727bd53c594e93e635c8df370078dc1e8ba537023e99a0fa1",
-    "pageRegistryDigest": "db7e6d4ea151259ee3cfc863d9f928d77db783548788771097a94f148d5f9a0a"
+    "workflowRegistryDigest": "cb8d12101109a846a0aeba5c5bf82078df437118e3cccbe9ab0d173112a6f88a",
+    "pageRegistryDigest": "6783dccba5aeb2044b6e2f7c7d78a3e47997a3163f7328a77ebdd0f4fdb087d4"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-registry.json

@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "b76388c9a5a82d956edac123d08a72945424a84e",
+  "sourceRevision": "8e1dcc5aba732fd253dbb50dc910a3187c1e688a",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.2",
+    "version": "4.1.3-alpha.0",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/release-provenance.json

@@ -119,7 +119,8 @@
       "./publication-rehearsal": "./packages/core/publication/publication-rehearsal.js",
       "./publication-qualification": "./packages/core/publication/publication-qualification.js",
       "./adopter-delivery": "./packages/core/adoption/adopter-delivery.js",
-      "./cross-platform-adopter-qualification": "./packages/core/adoption/cross-platform-adopter-qualification.js"
+      "./cross-platform-adopter-qualification": "./packages/core/adoption/cross-platform-adopter-qualification.js",
+      "./release-discussion-reader": "./packages/core/release/discussion/reader.js"
     }
   },
   "repository": "https://github.com/kungfu-systems/buildchain",

package/dist/site/site-manifest.json

@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "b76388c9a5a82d956edac123d08a72945424a84e",
+  "sourceRevision": "8e1dcc5aba732fd253dbb50dc910a3187c1e688a",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.2",
+    "version": "4.1.3-alpha.0",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -253,7 +253,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:ba1b9db61750646d507f086f0f267965a94b6c1276ab6d9f958ca4645b2a5073"
+      "digest": "sha256:b37478c7c5f6a4c09a89bb7f4dfe70c3ebcfa4cae21f25e09d16f499bf526afb"
     },
     {
       "id": "build-facts",

package/dist/site/workflow-registry.json

@@ -382,6 +382,8 @@
         "controller-receipt-digest",
         "controller-receipt-json",
         "controller-receipt-status",
+        "discussion-id",
+        "discussion-url",
         "github-artifact-attestation-evidence-root",
         "github-artifact-attestation-id",
         "github-artifact-attestation-publication-receipt-digest",
@@ -406,7 +408,7 @@
         "release-tail-transaction-state",
         "release-transaction-root"
       ],
-      "outputCount": 31,
+      "outputCount": 33,
       "taxonomy": {
         "id": ".release-candidate-promote",
         "role": "component",
@@ -1044,7 +1046,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.2",
+      "introducedVersion": "4.1.3-alpha.0",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",
@@ -1733,6 +1735,8 @@
         "controller-receipt-digest",
         "controller-receipt-json",
         "controller-receipt-status",
+        "discussion-id",
+        "discussion-url",
         "github-artifact-attestation-evidence-root",
         "github-artifact-attestation-id",
         "github-artifact-attestation-publication-receipt-digest",
@@ -1768,7 +1772,7 @@
         "release-tail-transaction-state",
         "release-transaction-root"
       ],
-      "outputCount": 43,
+      "outputCount": 45,
       "taxonomy": {
         "id": "release-candidate-promote",
         "role": "public",
@@ -2475,7 +2479,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.2",
+      "introducedVersion": "4.1.3-alpha.0",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",
@@ -2505,7 +2509,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.2",
+      "introducedVersion": "4.1.3-alpha.0",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",
@@ -2535,7 +2539,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.2",
+      "introducedVersion": "4.1.3-alpha.0",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",
@@ -7044,6 +7048,7 @@
         "repository",
         "required-artifacts-path",
         "required-status-check",
+        "resume-discussion-id",
         "resume-transaction-id",
         "runtime-commit",
         "runtime-tree",
@@ -7051,12 +7056,13 @@
         "sealed-bundle-root",
         "source-sha",
         "stage-capsules-path",
+        "standalone-binary-distribution",
         "state-path",
         "target-ref",
         "target-sha",
         "token"
       ],
-      "inputCount": 32,
+      "inputCount": 34,
       "capabilityGroup": "release-passport-trust",
       "status": "active",
       "owner": "buildchain-actions",
@@ -7735,6 +7741,72 @@
       "sunsetCondition": "explicit-contract-change-review",
       "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
     },
+    {
+      "apiRole": "implementation",
+      "id": "release/transaction/inspect",
+      "path": "actions/release/transaction/inspect/action.yml",
+      "inputs": [
+        "session-json",
+        "token"
+      ],
+      "inputCount": 2,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "release/transaction/open",
+      "path": "actions/release/transaction/open/action.yml",
+      "inputs": [
+        "discussion-id",
+        "dry-run",
+        "expected-nodes-json",
+        "intent-key",
+        "predecessor",
+        "source-json",
+        "token"
+      ],
+      "inputCount": 7,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "release/transaction/record",
+      "path": "actions/release/transaction/record/action.yml",
+      "inputs": [
+        "node",
+        "payload-json",
+        "sequence",
+        "session-json",
+        "status",
+        "token"
+      ],
+      "inputCount": 6,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
     {
       "apiRole": "implementation",
       "id": "runtime/dependencies/install",

package/docs/node-api-reference.md

@@ -2707,3 +2707,12 @@ Target: `./packages/core/adoption/cross-platform-adopter-qualification.js`. Publ
 | `CROSS_PLATFORM_NEUTRAL_DRIVER` | constant: const CROSS_PLATFORM_NEUTRAL_DRIVER | none | value | Import does not declare a throw contract. | none-on-import | `import { CROSS_PLATFORM_NEUTRAL_DRIVER } from "@kungfu-tech/buildchain/cross-platform-adopter-qualification";` | `packages/core/adoption/cross-platform-adopter-qualification.js:12` |
 | `qualifyCrossPlatformAdopters` | function: function qualifyCrossPlatformAdopters({ reports, consumers }) | { reports, consumers } | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | may-write-or-invoke-external-actions | `import { qualifyCrossPlatformAdopters } from "@kungfu-tech/buildchain/cross-platform-adopter-qualification";` | `packages/core/adoption/cross-platform-adopter-qualification.js:143` |
 | `validateCrossPlatformAdopterReport` | function: function validateCrossPlatformAdopterReport(report) | report | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { validateCrossPlatformAdopterReport } from "@kungfu-tech/buildchain/cross-platform-adopter-qualification";` | `packages/core/adoption/cross-platform-adopter-qualification.js:97` |
+
+## `@kungfu-tech/buildchain/release-discussion-reader`
+
+Target: `./packages/core/release/discussion/reader.js`. Public symbols: 2.
+
+| Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `discussionStatus` | function: function discussionStatus(state) | state | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discussionStatus } from "@kungfu-tech/buildchain/release-discussion-reader";` | `packages/core/release/discussion/reader.js:151` |
+| `readReleaseDiscussion` | function: function readReleaseDiscussion({ body, records }) | { body, records } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleaseDiscussion } from "@kungfu-tech/buildchain/release-discussion-reader";` | `packages/core/release/discussion/reader.js:11` |

package/docs/release-discussions.md

@@ -0,0 +1,154 @@
+---
+status: draft
+period: ongoing
+theme: release-discussion-transactions
+doc_type: implementation-contract
+source_level: user-consensus
+confidence: medium
+sensitivity: public
+evidence_grade: B
+review_state: unreviewed
+last_reviewed: 2026-09-12
+ai_provenance:
+  model_family: GPT-6
+  product: Codex
+  generated_at: 2026-09-12
+  visible_context: Release workflow implementation and agreed consumer Discussion transaction model.
+  invisible_context_boundary: Hosted token qualification and alpha publication are not claimed by this document.
+---
+
+# Release Discussion transactions
+
+One release intent owns one Discussion in the consumer repository. Its immutable
+body declares the intent and the complete expected semantic node list. The
+Announcements category is resolved by the initialization service; subsequent
+operations receive the exact Discussion ID. Categories have repository-specific
+IDs. Enable Discussions and retain the Announcements category before executing a
+release. A preview performs no Discussion reads or writes.
+
+The caller grants `discussions: write` to the reusable workflow job alongside its
+existing release permissions. The called workflow uses the consumer's automatic
+`GITHUB_TOKEN`. Checking out Buildchain does not change that repository or token.
+A reusable workflow cannot elevate the permissions granted by its caller.
+
+```yaml
+jobs:
+  release:
+    permissions:
+      contents: write
+      discussions: write
+      actions: write
+      id-token: write
+    uses: kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4
+    with:
+      request-json: ${{ inputs.request-json }}
+      runtime-ref: ${{ inputs.runtime-ref || '' }}
+```
+
+This fragment illustrates the additional Discussion permission; retain other
+permissions required by the consumer's publication provider. The platform
+contracts are documented in GitHub's [reusable workflow reference](https://docs.github.com/en/actions/reference/workflows-and-actions/reusing-workflow-configurations)
+and [Discussions API guide](https://docs.github.com/en/graphql/guides/using-the-graphql-api-for-discussions).
+
+## Records and concurrency
+
+The body is not a mutable global status document. Workflows append bounded JSON
+envelopes in comments. Each record contains an intent ID, workflow attempt,
+predecessor, semantic node, sequence, status, payload schema, and the selected
+runtime's exact repository and revision. These are provenance; downstream nodes
+do not compare the runtime revision with the workflow entry revision.
+
+Node owners serialize their own sequences. Different node owners append
+independent comments. Recovery explicitly selects the predecessor in the same
+Discussion. A late result from an older attempt remains history; it cannot
+complete or overwrite the recovering attempt. Success requires every declared
+node, including nodes whose records have not appeared. Reusing completed work
+requires explicit qualification by the recovering runtime.
+
+The release controller must serialize initialization for one intent. GitHub does
+not supply a unique constraint, compare-and-swap or exactly-once mutation API.
+Initialization scans complete repository category pages, reuses the matching
+intent, and refuses duplicate owners. A mutation whose response was lost is read
+back before another write. If its outcome remains unknown, execution stops with
+an explicit diagnosis. `clientMutationId` is not used as an idempotency guarantee.
+Exact IDs carry the transaction through execution; search indexing is not an
+execution dependency. Pagination limits fail closed instead of silently hiding
+records. Only records from the original workflow writer are authoritative;
+ordinary community replies are excluded and edited transaction records are
+reported as integrity failures.
+
+## Recovery bytes and historical readers
+
+Large sealed inputs and provider checkpoints are retained as immutable,
+content-addressed assets in a draft material archive associated with the intent.
+The archive is storage, not publication state. A Discussion checkpoint commits
+the exact material manifest after upload and byte readback. Failed uploads can
+leave unreferenced material but cannot commit an incomplete checkpoint. No
+transaction-log history is added to the consumer's source Git object database.
+Actual version-code commits and publication refs retain their existing roles.
+
+Each runtime distributes the standalone `dist/readers/release-discussion.cjs`.
+The same pure reader is available as the versioned Node API
+`@kungfu-tech/buildchain/release-discussion-reader`. Records carry the standalone
+reader byte digest. The recovery archive retains the exact reader bytes and the public
+release includes the first retained reader asset. Recovery preserves those public
+bytes while retaining each later writer's decoder in the archive. The standalone reader accepts captured JSON
+on standard input and emits a projection and a small
+`buildchain.release-handoff/v1` document. It performs no provider effects.
+
+```sh
+node --permission --allow-fs-read=/absolute/path/release-discussion.cjs \
+  /absolute/path/release-discussion.cjs < captured-discussion.json
+```
+
+A payload with a different schema belongs to its recorded historical reader.
+The current runtime does not silently reinterpret it. Historical decoding and
+new execution are separate: the recovering runtime consumes a supported handoff,
+qualifies original source and material, and reads providers before issuing any
+remaining effects. Switching runtime X to Y creates new attempt records in the
+same Discussion. It neither rewrites X's records nor changes the release intent.
+
+## Ownership
+
+`actions/release/transaction/{open,record,inspect}` are reusable Node adapters.
+`packages/core/release/discussion` owns envelopes, projections, sessions and
+recovery contracts. `packages/core/providers/github/discussions` owns GitHub
+transport and immutable material IO. The existing public promotion workflow
+owns job boundaries; the Rust publication state machine still owns publication
+decisions and provider-effect ordering.
+
+The public Bootstrap API also exposes the `release-discussion` capability for
+consumer transport qualification and read-only diagnosis. Buildchain's existing
+Bootstrap dogfood caller accepts this request through its manual
+`request-json` input, preserving the same public entry and central
+runtime preparation as other consumers.
+
+## First publication with a selected runtime
+
+For Buildchain self-publication, dispatch `self-release-promote.yml` with the exact
+protected alpha `sha`, its `target-ref`, `dry-run: "false"`, and the desired
+`runtime-ref`. Leave recovery selectors empty for a first publication. The public
+publisher still verifies the protected source and obtains fresh hosted admission.
+`recover-durable-transaction` is reserved for an existing partial publication;
+it is not required merely because the selected runtime differs from the entry.
+
+## Resume by Discussion
+
+Pass `resume-discussion-id` in the public promotion request and select the repaired
+train through `runtime-ref`. Keep the protected target ref and source coordinates.
+The qualifier restores content-addressed candidate material, verifies original
+qualification, then re-observes providers before any remaining publication effect.
+Do not combine this selector with candidate-run or transaction-id recovery.
+
+When standalone binary distribution is requested, the intent also requires the
+`binary-distribution` node. Its separate workflow resolves the immutable locator
+from the public release, captures the active attempt, and appends provider readback
+to that attempt. A result arriving after recovery stays on the older attempt.
+The terminal publication receipt remains independently verifiable even while
+next-development or binary distribution is incomplete.
+
+The manual Bootstrap caller inherits the declared repository workflow permissions;
+the typed capability request must declare its own subset. `verifyMaterials: true`
+on a qualification request additionally tests draft Release asset retention using
+`contents: write`. The initial injected failure is intentional and leaves durable
+records for a subsequent runtime recovery probe.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "4.1.2",
+  "version": "4.1.3-alpha.0",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",
@@ -122,7 +122,8 @@
     "./publication-rehearsal": "./packages/core/publication/publication-rehearsal.js",
     "./publication-qualification": "./packages/core/publication/publication-qualification.js",
     "./adopter-delivery": "./packages/core/adoption/adopter-delivery.js",
-    "./cross-platform-adopter-qualification": "./packages/core/adoption/cross-platform-adopter-qualification.js"
+    "./cross-platform-adopter-qualification": "./packages/core/adoption/cross-platform-adopter-qualification.js",
+    "./release-discussion-reader": "./packages/core/release/discussion/reader.js"
   },
   "files": [
     "AGENTS.md",
@@ -142,7 +143,8 @@
     "docs/*.md",
     "fixtures/*/README.md",
     "scripts/",
-    "actions/*/*/*/README.md"
+    "actions/*/*/*/README.md",
+    "dist/readers/"
   ],
   "engines": {
     "node": ">=22.14.0"
@@ -155,7 +157,7 @@
   "scripts": {
     "precheck:static": "prettier --check architecture/decisions/0003-two-phase-delivery-warrant.md architecture/delivery-authority-parity.json contracts/dev-delivery-authority-v2.schema.json dist/site/schemas/dev-delivery-authority-v2.schema.json docs/dev-delivery-qualification-landing-adr.md packages/core/dev-delivery/dev-delivery-authority-candidate.js packages/core/dev-delivery/dev-delivery-authority-evidence.js packages/core/dev-delivery/dev-delivery-authority-landing.js packages/core/dev-delivery/dev-delivery-authority-observation.js packages/core/dev-delivery/dev-delivery-authority-qualification.js packages/core/dev-delivery/dev-delivery-authority-settlement.js packages/core/dev-delivery/dev-delivery-authority-state.js packages/core/dev-delivery/dev-delivery-execution-failure.js packages/core/dev-delivery/dev-delivery-execution-transfer.js packages/core/dev-delivery/dev-delivery-landing-readback.js packages/core/dev-delivery/dev-delivery-landing-terminal-evidence.js packages/core/dev-delivery/dev-delivery-landing-testing-port.js packages/core/dev-delivery/dev-delivery-native-execution.js packages/core/dev-delivery/dev-delivery-native-proof.js packages/core/dev-delivery/dev-delivery-process-boundary.js packages/core/dev-delivery/dev-delivery-warrant-qualification.js packages/core/dev-delivery/dev-delivery-warrant-state.js packages/core/dev-delivery/commands/dev-delivery-authority-command-adapters.mjs packages/core/dev-delivery/commands/dev-delivery-authority-provider.mjs packages/core/dev-delivery/commands/dev-delivery-authority.mjs packages/core/dev-delivery/native/execution.js packages/core/dev-delivery/commands/dev-delivery-process-boundary.mjs packages/core/dev-delivery/native/transactions.js packages/core/dev-delivery/commands/dev-delivery-two-phase.mjs packages/core/dev-delivery/commands/dev-delivery-warrant-options.mjs packages/core/dev-delivery/warrant/persistence.js templates/native-dev-delivery.yml",
     "operator:windows-jit": "bash packages/core/providers/commands/aws-windows-jit-operator.sh",
-    "check": "pnpm run check:layout && node scripts/check-runtime-entry.mjs && pnpm run check:implementation-naming && pnpm run check:static && node scripts/check-ci-lane-change-budget.mjs && node scripts/check-public-dogfood-contract.mjs && node scripts/check-floating-consumer-policy-contract.mjs && node scripts/check-release-topology.mjs && node scripts/check-universal-workflow-bootstrap.mjs && pnpm run check:bridge && pnpm run check:contracts:rust && pnpm run check:wasm && node scripts/check-maintainability.mjs && node scripts/check-internal-architecture.mjs && node scripts/generate-agent-change-map.mjs && node scripts/check-inventory.mjs && node scripts/check-core-mechanism-inventory.mjs && node scripts/check-runtime-semantic-closure.mjs && node scripts/check-capability-parity-inventory.mjs && node scripts/check-release-tail-contract.mjs && node scripts/publication-rehearsal-fixture.mjs --check && node packages/core/governance/commands/architecture.mjs validate && node scripts/warrant-shadow-plan.mjs validate && pnpm run check:site && pnpm run check:workflows && pnpm run test:unit && pnpm run check:golden-path && node scripts/check-action-bundles.mjs",
+    "check": "pnpm run check:discussion-reader && pnpm run check:layout && node scripts/check-runtime-entry.mjs && pnpm run check:implementation-naming && pnpm run check:static && node scripts/check-ci-lane-change-budget.mjs && node scripts/check-public-dogfood-contract.mjs && node scripts/check-floating-consumer-policy-contract.mjs && node scripts/check-release-topology.mjs && node scripts/check-universal-workflow-bootstrap.mjs && pnpm run check:bridge && pnpm run check:contracts:rust && pnpm run check:wasm && node scripts/check-maintainability.mjs && node scripts/check-internal-architecture.mjs && node scripts/generate-agent-change-map.mjs && node scripts/check-inventory.mjs && node scripts/check-core-mechanism-inventory.mjs && node scripts/check-runtime-semantic-closure.mjs && node scripts/check-capability-parity-inventory.mjs && node scripts/check-release-tail-contract.mjs && node scripts/publication-rehearsal-fixture.mjs --check && node packages/core/governance/commands/architecture.mjs validate && node scripts/warrant-shadow-plan.mjs validate && pnpm run check:site && pnpm run check:workflows && pnpm run test:unit && pnpm run check:golden-path && node scripts/check-action-bundles.mjs",
     "check:static": "node scripts/check-javascript-syntax.mjs && node scripts/check-source-bindings.mjs && prettier --check architecture/*.json contracts/release-tail-provider-bindings-v1.schema.json contracts/v4-canonical-contracts-v1.schema.json contracts/v4-compatibility-facts-v1.schema.json contracts/v4-delivery-warrant-semantic-diff-report-v1.schema.json contracts/v4-delivery-warrant-trace-v1.schema.json contracts/v4-floating-consumer-policy-receipt-v1.schema.json contracts/runtime-resume-lineage-v2.schema.json contracts/v4-tail-reseal-v1.schema.json contracts/v4-host-contract-v1.schema.json contracts/v4-provider-operation-journal-v1.schema.json contracts/v4-release-activation-shadow-v1.schema.json contracts/v4-stable-publication-fence-v1.schema.json contracts/v4-partial-mutation-recovery-v1.schema.json contracts/v4-stage-capsule-v1.schema.json contracts/v4-stage-capsule-store-v1.schema.json contracts/v4-stage-capsule-resume-v1.schema.json contracts/release-tail-capabilities-v1.schema.json contracts/fixtures/release-tail-capabilities-v1/*.json contracts/fixtures/v4-delivery-warrant-trace-v1/*.json contracts/fixtures/v4-floating-consumer-policy-v1/*.json contracts/fixtures/runtime-resume-lineage-v2/*.json contracts/fixtures/v4-tail-reseal-v1/*.json contracts/fixtures/v4-compatibility-facts-v1/*.json contracts/fixtures/v4-provider-operation-journal-v1/*.json contracts/fixtures/v4-provider-readback-idempotency-v1/*.json contracts/fixtures/v4-release-activation-shadow-v1/*.json contracts/fixtures/v4-stable-publication-fence-v1/*.json contracts/fixtures/v4-partial-mutation-recovery-v1/*.json contracts/fixtures/v4-stage-capsule-v1/*.json contracts/fixtures/v4-stage-capsule-store-v1/*.json contracts/fixtures/v4-stage-capsule-resume-v1/*.json packages/core/contracts/command-registry.mjs packages/core/governance/cli/compatibility-facts.mjs packages/core/contracts/canonical-contracts.js packages/core/contracts/kungfu-temporal-fact.js packages/core/governance/buildchain-compatibility-fact.js packages/core/governance/buildchain-compatibility-authority.js packages/core/governance/buildchain-compatibility-proof.js packages/core/consumer/floating-consumer-evidence.js packages/core/consumer/floating-consumer-policy.js packages/core/consumer/floating-consumer-release-passport.js packages/core/release/recovery/lineage.js packages/core/release/tail-reseal-contract.js packages/core/release/tail-reseal-github.js packages/core/release/tail-reseal-receipt.js packages/core/release/tail-reseal.js packages/core/consumer/runtime-selector-persistence.js packages/core/release/provider-operation-journal.js packages/core/release/provider-readback-idempotency.js packages/core/release/release-activation-shadow.js packages/core/release/stable-publication-fence.js packages/core/release/partial-mutation-recovery-qualification.js packages/core/build/stage-capsule.js packages/core/build/stage-capsule-store.js packages/core/build/stage-capsule-local-store.js packages/core/build/platform-stage-checkpoints.js packages/core/build/stage-capsule-resume-planner.js packages/core/build/stage-capsule-qualification.js packages/core/build/stage-capsule-qualification-campaign.js packages/core/dev-delivery/delivery-warrant-fixture-runner.js packages/core/dev-delivery/delivery-warrant-read-candidate.js packages/core/dev-delivery/delivery-warrant-semantic-diff-gate.js packages/core/dev-delivery/delivery-warrant-shadow-adapter.js scripts/check-core-mechanism-inventory.mjs scripts/check-runtime-semantic-closure.mjs scripts/check-release-tail-contract.mjs scripts/check-javascript-syntax.mjs scripts/check-maintainability.mjs packages/core/dev-delivery/commands/dev-pr-prequeue-guard.mjs scripts/check-public-dogfood-contract.mjs scripts/maintainability-metrics.mjs scripts/maintainability-domain-metrics.mjs scripts/maintainability-governance.mjs scripts/generate-agent-change-map.mjs scripts/public-reference.mjs scripts/site-reference-registry.mjs scripts/generate-public-reference.mjs packages/core/governance/commands/architecture.mjs packages/core/runtime/commands/bridge-bootstrap.mjs scripts/bridge-evidence.mjs packages/core/consumer/commands/consumer-policy.mjs packages/core/runtime/commands/host-adapter.mjs scripts/platform-stage-checkpoint-rehearsal.mjs scripts/stage-capsule-resume-rehearsal.mjs packages/core/build/commands/stage-capsule-qualification.mjs scripts/tail-reseal-macos-rehearsal.mjs packages/core/release/commands/tail-reseal.mjs scripts/warrant-shadow-plan.mjs scripts/verify-golden-path.mjs tests/runtime-entry-provider.test.mjs tests/command-registry.test.mjs tests/core-mechanism-inventory.test.mjs tests/release-tail-contract.test.mjs tests/maintainability.test.mjs tests/maintainability-governance.test.mjs tests/promotion-responsibilities.test.mjs tests/public-reference.test.mjs tests/architecture.test.mjs tests/bridge.test.mjs tests/canonical-contracts.test.mjs tests/delivery-warrant-fixture-runner.test.mjs tests/delivery-warrant-read-candidate.test.mjs tests/floating-consumer-policy.test.mjs tests/runtime-resume-lineage.test.mjs tests/runtime-semantic-closure.test.mjs tests/tail-reseal.test.mjs tests/tail-reseal-parity.test.mjs tests/compatibility-facts.test.mjs tests/platform-stage-checkpoints.test.mjs tests/provider-operation-journal.test.mjs tests/provider-readback-idempotency.test.mjs tests/public-dogfood-contract.test.mjs tests/release-activation-shadow.test.mjs tests/stable-publication-fence.test.mjs tests/partial-mutation-recovery-qualification.test.mjs tests/stage-capsule.test.mjs tests/stage-capsule-store.test.mjs tests/stage-capsule-resume-planner.test.mjs tests/stage-capsule-qualification.test.mjs tests/warrant-shadow-plan.test.mjs",
     "check:bridge": "cargo fmt --manifest-path crates/buildchain-host-bridge/Cargo.toml -- --check && cargo clippy --locked --manifest-path crates/buildchain-host-bridge/Cargo.toml -- -D warnings && cargo test --locked --manifest-path crates/buildchain-host-bridge/Cargo.toml",
     "check:contracts": "pnpm run check:contracts:rust && node --test tests/canonical-contracts.test.mjs tests/delivery-warrant-fixture-runner.test.mjs tests/delivery-warrant-read-candidate.test.mjs tests/domain-wasm.test.mjs tests/floating-consumer-policy-contract.test.mjs tests/floating-consumer-policy.test.mjs tests/runtime-resume-lineage.test.mjs tests/tail-reseal.test.mjs tests/tail-reseal-parity.test.mjs tests/compatibility-facts.test.mjs tests/publication-rehearsal.test.mjs tests/platform-stage-checkpoints.test.mjs tests/provider-operation-journal.test.mjs tests/provider-readback-idempotency.test.mjs tests/public-dogfood-contract.test.mjs tests/release-activation-shadow.test.mjs tests/stable-publication-fence.test.mjs tests/partial-mutation-recovery-qualification.test.mjs tests/stage-capsule.test.mjs tests/stage-capsule-store.test.mjs tests/stage-capsule-resume-planner.test.mjs tests/stage-capsule-qualification.test.mjs",
@@ -170,7 +172,7 @@
     "check:site": "pnpm run check:next-development && pnpm run check:reference && node scripts/generate-site-bundle.mjs --check",
     "check:golden-path": "node scripts/verify-golden-path.mjs",
     "test:unit": "node --test tests/*.test.mjs",
-    "build": "pnpm -r --filter \"./actions/**\" build",
+    "build": "pnpm run build:discussion-reader && pnpm -r --filter \"./actions/**\" build",
     "binary:build": "node scripts/build-standalone-binary.mjs",
     "package": "npm pack --dry-run --json --registry=https://registry.npmjs.org/",
     "pack:check": "npm pack --dry-run --json --registry=https://registry.npmjs.org/",
@@ -180,7 +182,9 @@
     "check:contracts:rust": "cargo fmt --manifest-path crates/buildchain-domain-contracts/Cargo.toml -- --check && cargo clippy --locked --manifest-path crates/buildchain-domain-contracts/Cargo.toml -- -D warnings && cargo test --locked --manifest-path crates/buildchain-domain-contracts/Cargo.toml",
     "generate:workflows": "node scripts/generate-workflow-taxonomy.mjs && node scripts/generate-bootstrap-admission.mjs",
     "check:implementation-naming": "node scripts/check-implementation-naming.mjs",
-    "check:layout": "node scripts/check-code-layout.mjs"
+    "check:layout": "node scripts/check-code-layout.mjs",
+    "build:discussion-reader": "node scripts/build-release-discussion-reader.mjs",
+    "check:discussion-reader": "node scripts/build-release-discussion-reader.mjs --check"
   },
   "devDependencies": {
     "@actions/expressions": "0.3.61",