@kungfu-tech/buildchain 4.1.3-alpha.0 → 4.1.3-alpha.1

package/dist/site/public-surface-audit.json

@@ -10877,8 +10877,8 @@
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
     "cliRegistryDigest": "e43fdb0289df88871f3f0febbe04dcb9311a252a2b1df9b3a83a2d10c9d4a70f",
-    "workflowRegistryDigest": "cb8d12101109a846a0aeba5c5bf82078df437118e3cccbe9ab0d173112a6f88a",
-    "pageRegistryDigest": "6783dccba5aeb2044b6e2f7c7d78a3e47997a3163f7328a77ebdd0f4fdb087d4"
+    "workflowRegistryDigest": "3e137e0f54830a7be7976ac3a5d071fa05586d8011daab2eb149f40b4e535cf5",
+    "pageRegistryDigest": "56222fb3665c9bcd626a301d809db80ac8f8cb42b2a15b98d32241708f26b398"
   },
   "comparison": {
     "missingCliRegistry": [],

package/dist/site/publication-registry.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-publication-release-registry",
-  "generatedAt": "2026-09-11T23:17:50.000Z",
-  "publishedAt": "2026-09-11T23:17:50.000Z",
+  "generatedAt": "2026-09-12T06:35:54.000Z",
+  "publishedAt": "2026-09-12T06:35:54.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "8e1dcc5aba732fd253dbb50dc910a3187c1e688a",
+  "sourceRevision": "b06002db5210f70c8da3ad79357ac7d5ab3d6497",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -32,7 +32,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.3-alpha.0",
+    "version": "4.1.3-alpha.1",
     "versionSource": "package.json#version"
   },
   "sourceKind": "package-site-bundle",

package/dist/site/site-manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-site-manifest",
-  "generatedAt": "2026-09-11T23:17:50.000Z",
-  "publishedAt": "2026-09-11T23:17:50.000Z",
+  "generatedAt": "2026-09-12T06:35:54.000Z",
+  "publishedAt": "2026-09-12T06:35:54.000Z",
   "reproducible": true,
   "timestampPolicy": "ci-injected",
   "deterministicInputs": [
@@ -19,7 +19,7 @@
     "declared Buildchain surface manifest contract"
   ],
   "sourceDateEpoch": "0",
-  "sourceRevision": "8e1dcc5aba732fd253dbb50dc910a3187c1e688a",
+  "sourceRevision": "b06002db5210f70c8da3ad79357ac7d5ab3d6497",
   "timestampPolicyDetails": {
     "contract": "kungfu-buildchain-surface-timestamp-policy",
     "timestampFields": [
@@ -37,7 +37,7 @@
   },
   "package": {
     "name": "@kungfu-tech/buildchain",
-    "version": "4.1.3-alpha.0",
+    "version": "4.1.3-alpha.1",
     "versionSource": "package.json#version"
   },
   "entrypoint": "buildchain-site.json",
@@ -253,7 +253,7 @@
       "path": "docs/node-api-reference.md",
       "plane": "use",
       "exists": true,
-      "digest": "sha256:b37478c7c5f6a4c09a89bb7f4dfe70c3ebcfa4cae21f25e09d16f499bf526afb"
+      "digest": "sha256:0fc24661217d58302858cca49a5f11d49c894fc720f6735e11da2dba50300c91"
     },
     {
       "id": "build-facts",

package/dist/site/workflow-registry.json

@@ -1046,7 +1046,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.3-alpha.0",
+      "introducedVersion": "4.1.3-alpha.1",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",
@@ -2479,7 +2479,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.3-alpha.0",
+      "introducedVersion": "4.1.3-alpha.1",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",
@@ -2509,7 +2509,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.3-alpha.0",
+      "introducedVersion": "4.1.3-alpha.1",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",
@@ -2539,7 +2539,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.3-alpha.0",
+      "introducedVersion": "4.1.3-alpha.1",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",

package/docs/node-api-reference.md

@@ -2714,5 +2714,5 @@ Target: `./packages/core/release/discussion/reader.js`. Public symbols: 2.
 
 | Symbol | Kind and signature | Parameters | Return | Errors | Side effects | Example | Source |
 | --- | --- | --- | --- | --- | --- | --- | --- |
-| `discussionStatus` | function: function discussionStatus(state) | state | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discussionStatus } from "@kungfu-tech/buildchain/release-discussion-reader";` | `packages/core/release/discussion/reader.js:151` |
+| `discussionStatus` | function: function discussionStatus(state) | state | unknown | Errors from called operations may propagate; no narrower throw contract is declared in source. | none-detected-by-static-source-scan | `import { discussionStatus } from "@kungfu-tech/buildchain/release-discussion-reader";` | `packages/core/release/discussion/reader.js:155` |
 | `readReleaseDiscussion` | function: function readReleaseDiscussion({ body, records }) | { body, records } | unknown | May throw an Error on rejected input or failed operations; follow the linked source contract. | none-detected-by-static-source-scan | `import { readReleaseDiscussion } from "@kungfu-tech/buildchain/release-discussion-reader";` | `packages/core/release/discussion/reader.js:11` |

package/docs/release-discussions.md

@@ -52,14 +52,16 @@ and [Discussions API guide](https://docs.github.com/en/graphql/guides/using-the-
 
 ## Records and concurrency
 
-The body is not a mutable global status document. Workflows append bounded JSON
-envelopes in comments. Each record contains an intent ID, workflow attempt,
+The body is not a mutable global status document. New intents declare `organization: attempt-threads/v1`. Each attempt owns exactly
+one top-level root comment; node events, checkpoints and diagnostics are appended
+as replies using that root comment ID. Workflows append bounded JSON envelopes
+with readable context and evidence links. Each record contains an intent ID, workflow attempt,
 predecessor, semantic node, sequence, status, payload schema, and the selected
 runtime's exact repository and revision. These are provenance; downstream nodes
 do not compare the runtime revision with the workflow entry revision.
 
 Node owners serialize their own sequences. Different node owners append
-independent comments. Recovery explicitly selects the predecessor in the same
+independent replies under the same attempt root. Recovery explicitly selects the predecessor in the same
 Discussion. A late result from an older attempt remains history; it cannot
 complete or overwrite the recovering attempt. Success requires every declared
 node, including nodes whose records have not appeared. Reusing completed work
@@ -71,12 +73,47 @@ Initialization scans complete repository category pages, reuses the matching
 intent, and refuses duplicate owners. A mutation whose response was lost is read
 back before another write. If its outcome remains unknown, execution stops with
 an explicit diagnosis. `clientMutationId` is not used as an idempotency guarantee.
+The attempt owner creates the root before dispatching independent node writers.
+Root creation is serialized and response-loss recovery reads it back. Different
+roots for one attempt, nested roots and events attached to the wrong attempt are
+rejected. Root and reply connections are both completely paginated; individual
+page and total byte bounds fail closed. Community conversation is ignored.
+
 Exact IDs carry the transaction through execution; search indexing is not an
 execution dependency. Pagination limits fail closed instead of silently hiding
 records. Only records from the original workflow writer are authoritative;
 ordinary community replies are excluded and edited transaction records are
 reported as integrity failures.
 
+## Human-readable information hub
+
+The Discussion body declares the release intent and expected nodes. Each root
+links its workflow execution, selected runtime and predecessor attempt. Replies
+name the semantic node, distinguish checkpoint sequence from execution status,
+and expose bounded details. An independent binary workflow links its own run but
+replies to the release attempt it observed before starting; a late completion
+cannot migrate into a successor attempt.
+
+Checkpoint replies include downloadable JSON attachments with file names, media
+types, byte counts and SHA-256 digests. On node failures, the same thread receives
+JSON diagnostics and a text `.log` containing the recorded event timeline and
+bounded failure classification. Raw exceptions, environment variables and HTTP
+credentials are not copied into diagnostics. Complete execution logs remain
+linked through their Actions runs. Qualification also exercises JSON/log downloads.
+
+Automation uploads these files through the documented GitHub Release asset API
+and embeds the provider's download links in the owning comment. This does not
+use GitHub's browser-only drag-and-drop upload implementation. The existing draft
+material archive is private to users with the required repository access; a
+public Discussion does not make draft attachments publicly downloadable. Download
+links require that permission and files remain outside the source Git database.
+
+Root comments and event replies are immutable execution facts. The latest state
+is computed from records, not from an overwritten status summary. Historical flat
+intents remain readable as historical data; all new writes use an attempt root
+and replies, and new intents enforce that organization. No historical Discussion
+body or comment is rewritten to change its layout.
+
 ## Recovery bytes and historical readers
 
 Large sealed inputs and provider checkpoints are retained as immutable,
@@ -111,8 +148,10 @@ same Discussion. It neither rewrites X's records nor changes the release intent.
 ## Ownership
 
 `actions/release/transaction/{open,record,inspect}` are reusable Node adapters.
-`packages/core/release/discussion` owns envelopes, projections, sessions and
-recovery contracts. `packages/core/providers/github/discussions` owns GitHub
+`packages/core/release/discussion` owns envelopes, pure state projections, sessions, thread organization,
+presentation, declared evidence and recovery contracts. `threads.js` checks
+provider placement; `presentation.js` renders contextual Markdown; `evidence.js`
+builds bounded attachment descriptors and diagnostic reports. `packages/core/providers/github/discussions` owns GitHub
 transport and immutable material IO. The existing public promotion workflow
 owns job boundaries; the Rust publication state machine still owns publication
 decisions and provider-effect ordering.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kungfu-tech/buildchain",
-  "version": "4.1.3-alpha.0",
+  "version": "4.1.3-alpha.1",
   "private": false,
   "description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
   "repository": "https://github.com/kungfu-systems/buildchain",

package/packages/core/providers/github/discussions/materials.js

@@ -72,11 +72,13 @@ export function discussionMaterials({ octokit, repository, intentId }) {
       );
     return bytes;
   }
-  async function put(bytes) {
+  async function put(bytes, descriptor = {}) {
+    const extension =
+      descriptor.name?.match(/\.([a-zA-Z0-9]{1,8})$/u)?.[1] || "";
     if (bytes.length > 256 * 1024 * 1024)
       throw new Error("Transaction material exceeds the supported file bound");
     const digest = materialDigest(bytes),
-      name = digest.replace(":", "-");
+      name = digest.replace(":", "-") + (extension ? `.${extension}` : "");
     const release = await archive();
     const find = async () => {
       const assets = await octokit.paginate(repos.listReleaseAssets, {
@@ -101,7 +103,8 @@ export function discussionMaterials({ octokit, repository, intentId }) {
             name,
             data: bytes,
             headers: {
-              "content-type": "application/octet-stream",
+              "content-type":
+                descriptor.mediaType || "application/octet-stream",
             },
           })
         ).data;
@@ -113,7 +116,15 @@ export function discussionMaterials({ octokit, repository, intentId }) {
           });
       }
     }
-    const handle = { id: asset.id, digest, size: bytes.length };
+    const handle = {
+      id: asset.id,
+      digest,
+      size: bytes.length,
+      ...(asset.browser_download_url
+        ? { downloadUrl: asset.browser_download_url }
+        : {}),
+      ...(release.html_url ? { archiveUrl: release.html_url } : {}),
+    };
     await read(handle);
     return handle;
   }
@@ -140,7 +151,7 @@ export function discussionMaterials({ octokit, repository, intentId }) {
     }
   }
   return {
-    put: (bytes) => diagnose("put", () => put(bytes)),
+    put: (bytes, descriptor) => diagnose("put", () => put(bytes, descriptor)),
     read: (handle) => diagnose("read", () => read(handle)),
   };
 }

package/packages/core/providers/github/discussions/transport.js

@@ -1,7 +1,7 @@
 const fields =
   "id number url body author { __typename login ... on Node { id } } lastEditedAt repository { nameWithOwner }";
 const commentFields =
-  "id url body author { __typename login ... on Node { id } } lastEditedAt";
+  "id url body author { __typename login ... on Node { id } } lastEditedAt replyTo { id }";
 
 export function discussionTransport(graphql) {
   async function request(query, variables) {
@@ -66,13 +66,22 @@ export function discussionTransport(graphql) {
   }
   async function comments(id, after = null) {
     const result = await request(
-      `query($id:ID!,$after:String){node(id:$id){... on Discussion{comments(first:100,after:$after){nodes{${commentFields}} pageInfo{hasNextPage endCursor}}}}}`,
+      `query($id:ID!,$after:String){node(id:$id){... on Discussion{comments(first:100,after:$after){nodes{${commentFields} replies{totalCount}} pageInfo{hasNextPage endCursor}}}}}`,
       { id, after },
     );
     if (!result.node?.comments)
       throw new Error("Release Discussion comments are unavailable");
     return result.node.comments;
   }
+  async function replies(id, after = null) {
+    const result = await request(
+      `query($id:ID!,$after:String){node(id:$id){... on DiscussionComment{replies(first:100,after:$after){nodes{${commentFields}} pageInfo{hasNextPage endCursor}}}}}`,
+      { id, after },
+    );
+    if (!result.node?.replies)
+      throw new Error("Release Discussion replies are unavailable");
+    return result.node.replies;
+  }
   async function create({ repositoryId, categoryId, title, body }) {
     const result = await request(
       `mutation($input:CreateDiscussionInput!){createDiscussion(input:$input){discussion{${fields}}}}`,
@@ -80,14 +89,16 @@ export function discussionTransport(graphql) {
     );
     return result.createDiscussion.discussion;
   }
-  async function append(id, body) {
+  async function append(id, body, replyToId = null) {
     const result = await request(
       `mutation($input:AddDiscussionCommentInput!){addDiscussionComment(input:$input){comment{${commentFields}}}}`,
-      { input: { discussionId: id, body } },
+      {
+        input: { discussionId: id, body, ...(replyToId ? { replyToId } : {}) },
+      },
     );
     return result.addDiscussionComment.comment;
   }
-  return { repository, list, get, comments, create, append };
+  return { repository, list, get, comments, replies, create, append };
 }
 
 export async function collectDiscussionPages(readPage, limit = 100) {

package/packages/core/release/discussion/binary.js

@@ -1,3 +1,4 @@
+import { releaseCheckpoints } from "./checkpoints.js";
 import { discussionTransport } from "../../providers/github/discussions/transport.js";
 import { releaseDiscussionStore } from "./store.js";
 import { createProgress, decodeRecord } from "./envelope.js";
@@ -46,6 +47,12 @@ export async function observeBinaryDistribution(
   const attemptRecord = state.records.find(
     (record) => record.attempt === state.attempt,
   );
+  Object.assign(session, {
+    attempt: state.attempt,
+    predecessor: attemptRecord.predecessor,
+    runtime,
+    writer,
+  });
   const sequence =
     Math.max(
       -1,
@@ -82,6 +89,10 @@ export async function observeBinaryDistribution(
       await record("failure", 1, {
         code: String(error.code || "execution-failed"),
       });
+      await releaseCheckpoints({ session, store, octokit }).diagnostics(
+        "binary-distribution",
+        error.code,
+      );
     } catch (recordError) {
       error.discussionRecordingError = recordError.message;
     }

package/packages/core/release/discussion/checkpoints.js

@@ -1,3 +1,8 @@
+import {
+  retainAttachment,
+  diagnosticReport,
+  diagnosticLog,
+} from "./evidence.js";
 import fs from "node:fs";
 import path from "node:path";
 import { createProgress, recordDigest } from "./envelope.js";
@@ -10,7 +15,11 @@ export function releaseCheckpoints({ session, store, octokit }) {
     repository: session.intent.repository,
     intentId: session.intent.id,
   });
-  async function checkpoint(node, value) {
+  async function checkpoint(
+    node,
+    value,
+    { attachments = [], label = value.schema || "Recovery checkpoint" } = {},
+  ) {
     const observed = await store.read(session);
     const records = observed.records.filter(
       (record) =>
@@ -21,20 +30,29 @@ export function releaseCheckpoints({ session, store, octokit }) {
     const root = recordDigest(value);
     const duplicate = records.find((record) => record.payload.root === root);
     if (duplicate) return duplicate;
-    const handle = await materials.put(Buffer.from(JSON.stringify(value)));
+    const sequence =
+      Math.max(-1, ...records.map((record) => record.sequence)) + 1;
+    const handle = await retainAttachment(materials, {
+      name: `${node}-checkpoint-${sequence}.json`,
+      mediaType: "application/json",
+      bytes: Buffer.from(JSON.stringify(value, null, 2) + "\n"),
+    });
     const record = createProgress({
       intent: session.intent,
       runtime: session.runtime,
       attempt: session.attempt,
+      writer: session.writer || session.attempt,
       predecessor: session.predecessor,
       kind: "checkpoint",
       node,
       status: "running",
-      sequence: Math.max(-1, ...records.map((record) => record.sequence)) + 1,
+      sequence,
       payload: {
         schema: "buildchain.release-checkpoint/v1",
         root,
         material: handle,
+        label,
+        attachments: [handle, ...attachments],
       },
     });
     await store.append(session, record);
@@ -69,7 +87,30 @@ export function releaseCheckpoints({ session, store, octokit }) {
       throw new Error("Unsupported retained publication reader manifest");
     return materials.read(manifest.reader);
   }
-  return { checkpoint, readCheckpoint, materials, publicationReader };
+  async function diagnostics(node, code) {
+    const report = diagnosticReport(
+      session,
+      await store.read(session),
+      node,
+      code,
+    );
+    const log = await retainAttachment(materials, {
+      name: `${node}-diagnostics.log`,
+      mediaType: "text/plain",
+      bytes: diagnosticLog(report),
+    });
+    return checkpoint(node, report, {
+      attachments: [log],
+      label: `Execution diagnostics: ${report.code}`,
+    });
+  }
+  return {
+    checkpoint,
+    readCheckpoint,
+    materials,
+    publicationReader,
+    diagnostics,
+  };
 }
 
 function assertNoSymlink(file, base) {

package/packages/core/release/discussion/envelope.js

@@ -94,6 +94,7 @@ export function createIntent({
     id: recordDigest(identity),
     ...identity,
     expectedNodes,
+    organization: "attempt-threads/v1",
     runtime,
     source,
   };

package/packages/core/release/discussion/evidence.js

@@ -0,0 +1,51 @@
+// Evidence is declared transaction data, never an implicit upload of workspace
+// files, environment variables, raw exceptions or authenticated HTTP responses.
+export async function retainAttachment(materials, { name, mediaType, bytes }) {
+  if (
+    !/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,159}$/u.test(name) ||
+    !["application/json", "text/plain", "application/octet-stream"].includes(
+      mediaType,
+    )
+  )
+    throw new Error("Invalid transaction attachment descriptor");
+  const handle = await materials.put(bytes, { name, mediaType });
+  if (!handle.downloadUrl)
+    throw new Error("Retained attachment is missing its provider download URL");
+  return { name, mediaType, ...handle };
+}
+
+export function diagnosticReport(session, state, node, code) {
+  return {
+    schema: "buildchain.release-diagnostics/v1",
+    intent: session.intent.id,
+    attempt: session.attempt,
+    node,
+    code: String(code || "execution-failed")
+      .replace(/[^a-zA-Z0-9._-]/gu, "-")
+      .slice(0, 160),
+    events: state.records
+      .filter((record) => record.attempt === session.attempt)
+      .map(({ id, node, kind, status, sequence, writer }) => ({
+        id,
+        node,
+        kind,
+        status,
+        sequence,
+        writer,
+      })),
+  };
+}
+
+export function diagnosticLog(report) {
+  return Buffer.from(
+    [
+      `Release intent ${report.intent}`,
+      `Attempt ${report.attempt}: ${report.node} ${report.code}`,
+      ...report.events.map(
+        (event) =>
+          `${event.node} ${event.kind} ${event.sequence} ${event.status} writer=${event.writer} record=${event.id}`,
+      ),
+      "",
+    ].join("\n"),
+  );
+}

package/packages/core/release/discussion/presentation.js

@@ -0,0 +1,92 @@
+import { isAttemptRoot } from "./threads.js";
+
+const text = (value) =>
+  String(value ?? "")
+    .replace(
+      /[&<>\[\]`*_\\|]/gu,
+      (character) => `&#${character.charCodeAt(0)};`,
+    )
+    .replace(/[\r\n]/gu, " ");
+const code = (value) => `\`${String(value).replace(/[`\r\n]/gu, " ")}\``;
+
+function runLink(repository, writer) {
+  const match = /^(\d+):(\d+)(?::.*)?$/u.exec(writer);
+  return match
+    ? `[${text(writer)}](https://github.com/${repository}/actions/runs/${match[1]}/attempts/${match[2]})`
+    : code(writer);
+}
+
+function runtimeLink(runtime) {
+  return `[${runtime.repository}@${runtime.sha.slice(0, 12)}](https://github.com/${runtime.repository}/commit/${runtime.sha})`;
+}
+
+export function renderIntent(intent) {
+  return [
+    `## ${intent.source?.qualification ? "Qualification" : "Release"}: ${text(intent.key)}`,
+    `Repository: ${code(intent.repository)}`,
+    "Each top-level transaction comment owns one attempt. Its replies contain node results, recovery checkpoints and downloadable evidence. Recovery attempts link to their predecessors.",
+    `Expected nodes: ${intent.expectedNodes.map(code).join(" → ")}`,
+    `Intent: ${code(intent.id)}`,
+  ].join("\n\n");
+}
+
+function attachmentRows(record, repository) {
+  return (record.payload?.attachments || []).map((attachment) => {
+    const url = new URL(attachment.downloadUrl);
+    if (
+      url.protocol !== "https:" ||
+      url.hostname !== "github.com" ||
+      !url.pathname.startsWith(`/${repository}/releases/download/`) ||
+      url.search ||
+      url.hash
+    )
+      throw new Error(
+        "Attachment download must belong to the consumer repository",
+      );
+    return `| [${text(attachment.name)}](${url.href}) | ${text(attachment.mediaType)} | ${attachment.size} | ${code(attachment.digest)} |`;
+  });
+}
+
+export function renderEvent(record, intent, state) {
+  if (isAttemptRoot(record)) {
+    const predecessor = state.roots.get(record.predecessor);
+    return [
+      `## Attempt ${text(record.attempt)}`,
+      `Execution: ${runLink(intent.repository, record.writer)}  \nRuntime: ${runtimeLink(record.runtime)}`,
+      record.predecessor
+        ? `Resumes: ${predecessor?.url ? `[${text(record.predecessor)}](${predecessor.url})` : code(record.predecessor)}`
+        : "Initial execution of this release intent.",
+      `Nodes: ${intent.expectedNodes.map(code).join(" → ")}`,
+      "Results and evidence are appended below. This root preserves the original execution context.",
+    ].join("\n\n");
+  }
+  const label =
+    record.kind === "checkpoint"
+      ? `checkpoint ${record.sequence}`
+      : record.status;
+  const lines = [
+    `### ${text(record.node)} · ${label}`,
+    `Attempt: ${code(record.attempt)} · Writer: ${runLink(intent.repository, record.writer)}`,
+    `Runtime: ${runtimeLink(record.runtime)}`,
+  ];
+  if (record.payload?.label) lines.push(text(record.payload.label));
+  if (record.payload?.code)
+    lines.push(`Failure code: ${code(record.payload.code)}`);
+  const attachments = attachmentRows(record, intent.repository);
+  if (attachments.length)
+    lines.push(
+      "| Attachment | Type | Bytes | SHA-256 |\n| --- | --- | ---: | --- |\n" +
+        attachments.join("\n"),
+      "Retained files use the transaction material archive. Access requires repository permission to read draft release assets.",
+    );
+  const { attachments: _attachments, ...details } = record.payload || {};
+  if (Object.keys(details).length) {
+    const json = JSON.stringify(details, null, 2);
+    // HTML escaping keeps payload strings from closing the presentation container.
+    lines.push(
+      `<details><summary>Record details</summary><pre>${json.slice(0, 6000).replace(/[&<>]/gu, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;" })[c])}${json.length > 6000 ? "\n… See the retained JSON attachment for the complete material." : ""}</pre></details>`,
+    );
+  }
+  lines.push(`Record: ${code(record.id)}`);
+  return lines.join("\n\n");
+}

package/packages/core/release/discussion/publication.js

@@ -40,8 +40,10 @@ export async function publishWithDiscussion(
     observe = () => {},
   },
 ) {
+  let retained;
   const journal = await openReleaseSession({
     graphql: octokit.graphql,
+    onFailure: (node, error) => retained.diagnostics(node, error.code),
     repository: request.repository,
     key: request.version,
     source: { version: request.version },
@@ -54,7 +56,7 @@ export async function publishWithDiscussion(
       request["publish-transaction-override"],
     ),
   });
-  const retained = releaseCheckpoints({
+  retained = releaseCheckpoints({
     session: journal.session,
     store: journal.store,
     octokit,

package/packages/core/release/discussion/qualification.js

@@ -79,6 +79,7 @@ export async function executeReleaseDiscussion(request, _admission, context) {
         store: journal.store,
         octokit: context.octokit,
       });
+      await retained.diagnostics("transport", "qualification-probe");
       const probe = await retained.checkpoint("transport", {
         schema: "buildchain.material-qualification/v1",
         value: payload.key,

package/packages/core/release/discussion/reader.js

@@ -23,6 +23,10 @@ export function readReleaseDiscussion({ body, records }) {
     new Set(intent.expectedNodes).size !== intent.expectedNodes.length
   )
     throw new Error("Missing or duplicate expected nodes");
+  if (intent.organization && intent.organization !== "attempt-threads/v1")
+    throw new Error(
+      "Discussion organization requires its historical runtime reader",
+    );
   const attempts = groupAttempts(validateRecords(intent, records));
   if (!attempts.size)
     return {
@@ -156,6 +160,11 @@ export function discussionStatus(state) {
     status: state.status,
     attempt: state.attempt || "",
     attempts: state.attempts,
+    threads: [...(state.roots || new Map())].map(([attempt, comment]) => ({
+      attempt,
+      commentId: comment.id,
+      url: comment.url,
+    })),
     missingNodes: state.missingNodes,
     handoff: state.handoff || null,
     nodes: Object.fromEntries(

package/packages/core/release/discussion/session.js

@@ -39,6 +39,7 @@ export async function openReleaseSession({
   dryRun = false,
   recover = false,
   expectedNodes = RELEASE_NODES,
+  onFailure = async () => {},
 }) {
   const intent = createIntent({
     repository,
@@ -101,6 +102,7 @@ export async function openReleaseSession({
           { code: String(error.code || "execution-failed") },
           1,
         );
+        await onFailure(node, error);
       } catch (recordError) {
         error.discussionRecordingError = recordError.message;
       }