@kungfu-tech/buildchain 4.1.3-alpha.0 → 4.1.3-alpha.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (278) hide show
  1. package/AGENTS.md +41 -75
  2. package/CONTRIBUTING.md +19 -26
  3. package/architecture/action-taxonomy.json +24 -0
  4. package/architecture/agent-change-map.md +272 -12
  5. package/architecture/capability-state-machine-manifest.json +1 -4
  6. package/architecture/ci-lane-change-budget.json +190 -807
  7. package/architecture/core-mechanisms.json +3 -6
  8. package/architecture/decisions/0005-minimal-consumer-contract.md +122 -0
  9. package/architecture/decisions/0006-business-attempt-journal.md +89 -0
  10. package/architecture/decisions/0007-hosted-pipeline-controller.md +106 -0
  11. package/architecture/decisions/0008-pipeline-product-publication.md +120 -0
  12. package/architecture/decisions/0009-pipeline-version-preparation.md +186 -0
  13. package/architecture/internal-capabilities.json +371 -9
  14. package/architecture/maintainability-debt.json +50 -34
  15. package/architecture/maintainability-policy.json +8 -8
  16. package/architecture/minimal-consumer-migration.json +5670 -0
  17. package/architecture/platform-stage-checkpoints.json +31 -7
  18. package/architecture/product-upstreams.json +20 -0
  19. package/architecture/release-topology.json +331 -74
  20. package/architecture/stage-capsule-qualification.json +3 -1
  21. package/architecture/universal-workflow-bootstrap.json +15 -1
  22. package/architecture/universal-workflow-capability-policy.json +9 -9
  23. package/architecture/universal-workflow-fault-campaign.json +3 -1
  24. package/architecture/workflow-taxonomy.json +77 -328
  25. package/contracts/release-discussion-v1.schema.json +3 -0
  26. package/dist/readers/business-attempt.cjs +809 -0
  27. package/dist/readers/release-discussion.cjs +4 -0
  28. package/dist/site/buildchain-contract.json +16 -68
  29. package/dist/site/buildchain-site.json +47 -27
  30. package/dist/site/capability-registry.json +4 -4
  31. package/dist/site/controller-registry.json +1 -47
  32. package/dist/site/kfd-claims.json +499 -494
  33. package/dist/site/kfd-upstream-aggregate.json +1 -1
  34. package/dist/site/manual-registry.json +3 -3
  35. package/dist/site/node-api-registry.json +56 -56
  36. package/dist/site/page-registry.json +40 -20
  37. package/dist/site/public-surface-audit.json +286 -349
  38. package/dist/site/publication-authority-registry.json +203 -523
  39. package/dist/site/publication-registry.json +4 -4
  40. package/dist/site/site-manifest.json +7 -7
  41. package/dist/site/workflow-registry.json +590 -940
  42. package/docs/code-organization.md +9 -6
  43. package/docs/node-api-reference.md +103 -103
  44. package/docs/release-discussions.md +44 -5
  45. package/docs/release-governance.md +10 -12
  46. package/docs/runtime-entry.md +73 -5
  47. package/docs/runtime-train-validation.md +39 -11
  48. package/docs/stable-candidate-patrol.md +6 -5
  49. package/docs/workflow-catalog.md +9 -32
  50. package/package.json +4 -3
  51. package/packages/core/adoption/buildchain-kfd-claims.js +7 -7
  52. package/packages/core/build/standalone/build.js +7 -1
  53. package/packages/core/consumer/buildchain-config.js +2 -21
  54. package/packages/core/consumer/contract/entries.js +85 -0
  55. package/packages/core/consumer/contract/examples.js +96 -0
  56. package/packages/core/consumer/contract/identity.js +65 -0
  57. package/packages/core/consumer/contract/inspection.js +45 -0
  58. package/packages/core/consumer/contract/plan.js +149 -0
  59. package/packages/core/consumer/contract/products.js +119 -0
  60. package/packages/core/consumer/contract/reader.js +47 -0
  61. package/packages/core/consumer/contract/shape.js +46 -0
  62. package/packages/core/dev-delivery/candidate/admission.js +9 -5
  63. package/packages/core/dev-delivery/candidate/reservation.js +11 -0
  64. package/packages/core/dev-delivery/candidate/source-paths.js +12 -4
  65. package/packages/core/dev-delivery/commands/project-cut-merge-queue-admission.mjs +47 -20
  66. package/packages/core/dev-delivery/dev-delivery-provider-heartbeat.js +18 -15
  67. package/packages/core/dev-delivery/native/actions.js +9 -1
  68. package/packages/core/dev-delivery/native/heartbeat-action.js +16 -0
  69. package/packages/core/dev-delivery/native/heartbeat.js +6 -4
  70. package/packages/core/dev-delivery/native/process-entry.js +19 -0
  71. package/packages/core/dev-delivery/queue/landing-action.js +53 -0
  72. package/packages/core/dev-delivery/warrant/failure-settlement.js +8 -6
  73. package/packages/core/dev-delivery/warrant/service.js +7 -0
  74. package/packages/core/governance/buildchain-publication-authority.js +8 -23
  75. package/packages/core/governance/github-governance-authority.js +1 -0
  76. package/packages/core/observability/controller-evidence.js +0 -8
  77. package/packages/core/paper/operations/bootstrap.js +2 -0
  78. package/packages/core/paper/paper-npm-bootstrap.js +2 -2
  79. package/packages/core/providers/github/attempt-index.js +60 -0
  80. package/packages/core/providers/github/attempt-journal.js +154 -0
  81. package/packages/core/providers/github/discussions/materials.js +35 -11
  82. package/packages/core/providers/github/discussions/transport.js +16 -5
  83. package/packages/core/providers/github/pipeline-checkout.js +49 -0
  84. package/packages/core/providers/github/pipeline-entry-runs.js +210 -0
  85. package/packages/core/providers/github/pipeline-events.js +131 -0
  86. package/packages/core/providers/github/pipeline-integration.js +95 -0
  87. package/packages/core/providers/github/pipeline-policy.js +240 -0
  88. package/packages/core/providers/github/pipeline-product-payload.js +50 -0
  89. package/packages/core/providers/github/pipeline-product-release.js +198 -0
  90. package/packages/core/providers/github/pipeline-publication-artifacts.js +153 -0
  91. package/packages/core/providers/github/pipeline-release-evidence.js +30 -0
  92. package/packages/core/providers/github/pipeline-run-entry.js +86 -0
  93. package/packages/core/providers/github/pipeline-runs.js +132 -0
  94. package/packages/core/providers/github/pipeline-source.js +195 -0
  95. package/packages/core/providers/github/pipeline-stable-baseline.js +86 -0
  96. package/packages/core/providers/github/pipeline-stable-source.js +372 -0
  97. package/packages/core/providers/github/pipeline-version-artifacts.js +91 -0
  98. package/packages/core/providers/github/pipeline-version-readback.js +117 -0
  99. package/packages/core/providers/github/pipeline-version.js +199 -0
  100. package/packages/core/providers/github/pipeline-worker.js +108 -0
  101. package/packages/core/providers/github/release-evidence-assets.js +97 -0
  102. package/packages/core/publication/candidate/registry-hydration.js +2 -2
  103. package/packages/core/publication/npm/pack-preview.js +2 -2
  104. package/packages/core/publication/npm/pack-result.js +31 -0
  105. package/packages/core/publication/npm/package.js +3 -6
  106. package/packages/core/publication/npm/pipeline-channel.js +36 -0
  107. package/packages/core/publication/npm/pipeline-provider.js +137 -0
  108. package/packages/core/publication/npm/registry.js +12 -9
  109. package/packages/core/publication/pipeline/actions.js +116 -0
  110. package/packages/core/publication/pipeline/apply.js +189 -0
  111. package/packages/core/publication/pipeline/build-segments.js +107 -0
  112. package/packages/core/publication/pipeline/capsules.js +92 -0
  113. package/packages/core/publication/pipeline/context.js +39 -0
  114. package/packages/core/publication/pipeline/development-anchor.js +91 -0
  115. package/packages/core/publication/pipeline/development-current.js +63 -0
  116. package/packages/core/publication/pipeline/development-pr.js +112 -0
  117. package/packages/core/publication/pipeline/development-proof.js +76 -0
  118. package/packages/core/publication/pipeline/development-transition.js +112 -0
  119. package/packages/core/publication/pipeline/distribution.js +130 -0
  120. package/packages/core/publication/pipeline/documents.js +192 -0
  121. package/packages/core/publication/pipeline/effects.js +192 -0
  122. package/packages/core/publication/pipeline/files.js +66 -0
  123. package/packages/core/publication/pipeline/imported-materials.js +32 -0
  124. package/packages/core/publication/pipeline/journal.js +122 -0
  125. package/packages/core/publication/pipeline/next-development.js +117 -0
  126. package/packages/core/publication/pipeline/pack.js +180 -0
  127. package/packages/core/publication/pipeline/package-policy.js +22 -0
  128. package/packages/core/publication/pipeline/plan.js +136 -0
  129. package/packages/core/publication/pipeline/prepare.js +139 -0
  130. package/packages/core/publication/pipeline/qualification.js +175 -0
  131. package/packages/core/publication/pipeline/qualify.js +104 -0
  132. package/packages/core/publication/pipeline/recovery-admission.js +122 -0
  133. package/packages/core/publication/pipeline/recovery-build-download.js +80 -0
  134. package/packages/core/publication/pipeline/recovery-build-plan.js +122 -0
  135. package/packages/core/publication/pipeline/recovery-build-readback.js +68 -0
  136. package/packages/core/publication/pipeline/recovery-capsules.js +54 -0
  137. package/packages/core/publication/pipeline/recovery-import.js +80 -0
  138. package/packages/core/publication/pipeline/recovery-inspection.js +218 -0
  139. package/packages/core/publication/pipeline/recovery-materials.js +104 -0
  140. package/packages/core/publication/pipeline/recovery-plan.js +46 -0
  141. package/packages/core/publication/pipeline/recovery-prepare.js +73 -0
  142. package/packages/core/publication/pipeline/recovery-qualification.js +128 -0
  143. package/packages/core/publication/pipeline/recovery-readback.js +56 -0
  144. package/packages/core/publication/pipeline/recovery-signing.js +58 -0
  145. package/packages/core/publication/pipeline/sealed-products.js +79 -0
  146. package/packages/core/publication/pipeline/settle.js +42 -0
  147. package/packages/core/publication/pipeline/signing.js +140 -0
  148. package/packages/core/publication/pipeline/source-plan.js +83 -0
  149. package/packages/core/publication/pipeline/stable-entry.js +219 -0
  150. package/packages/core/publication/pipeline/stable-products.js +317 -0
  151. package/packages/core/publication/pipeline/stable-wait.js +170 -0
  152. package/packages/core/publication/pipeline/stable.js +82 -0
  153. package/packages/core/publication/pipeline/version-actions.js +93 -0
  154. package/packages/core/publication/pipeline/version-build.js +130 -0
  155. package/packages/core/publication/pipeline/version-context.js +143 -0
  156. package/packages/core/publication/pipeline/version-material.js +36 -0
  157. package/packages/core/publication/pipeline/version-preparation.js +69 -0
  158. package/packages/core/publication/pipeline/version-regeneration.js +162 -0
  159. package/packages/core/publication/pipeline/version-source-guard.js +69 -0
  160. package/packages/core/publication/pipeline/version.js +81 -0
  161. package/packages/core/publication/pipeline/worker.js +72 -0
  162. package/packages/core/publication/publication-reproducibility.js +2 -2
  163. package/packages/core/release/discussion/binary.js +11 -0
  164. package/packages/core/release/discussion/checkpoints.js +45 -4
  165. package/packages/core/release/discussion/envelope.js +1 -0
  166. package/packages/core/release/discussion/evidence.js +51 -0
  167. package/packages/core/release/discussion/presentation.js +92 -0
  168. package/packages/core/release/discussion/publication.js +3 -1
  169. package/packages/core/release/discussion/qualification.js +1 -0
  170. package/packages/core/release/discussion/reader.js +9 -0
  171. package/packages/core/release/discussion/session.js +2 -0
  172. package/packages/core/release/discussion/store.js +28 -31
  173. package/packages/core/release/discussion/threads.js +83 -0
  174. package/packages/core/release/next-development-transition.js +15 -15
  175. package/packages/core/release/promote-candidate/product-provider-adapters.js +4 -3
  176. package/packages/core/release/promote-ref/internal/npm-existing-evidence.js +2 -1
  177. package/packages/core/release/promote-ref/internal/publish-command.js +16 -5
  178. package/packages/core/release/stable-release-gate.js +11 -0
  179. package/packages/core/runtime/buildchain-domain.wasm +0 -0
  180. package/packages/core/runtime/domain-wasm-artifact.js +2 -2
  181. package/packages/core/runtime/entry/actions.js +27 -25
  182. package/packages/core/runtime/entry/attempt.js +25 -0
  183. package/packages/core/runtime/entry/selection.js +14 -0
  184. package/packages/core/runtime/entry/source.js +62 -0
  185. package/packages/core/workflow/attempt/identity.js +170 -0
  186. package/packages/core/workflow/attempt/journal.js +89 -0
  187. package/packages/core/workflow/attempt/materials.js +72 -0
  188. package/packages/core/workflow/attempt/reader-entry.js +12 -0
  189. package/packages/core/workflow/attempt/reader.js +149 -0
  190. package/packages/core/workflow/attempt/records.js +153 -0
  191. package/packages/core/workflow/attempt/store.js +75 -0
  192. package/packages/core/workflow/commands/pipeline-build.mjs +23 -0
  193. package/packages/core/workflow/pipeline/action-output.js +11 -0
  194. package/packages/core/workflow/pipeline/actions.js +52 -0
  195. package/packages/core/workflow/pipeline/build-control.js +140 -0
  196. package/packages/core/workflow/pipeline/build-evidence.js +210 -0
  197. package/packages/core/workflow/pipeline/build-qualification.js +145 -0
  198. package/packages/core/workflow/pipeline/build-result.js +78 -0
  199. package/packages/core/workflow/pipeline/build.js +142 -0
  200. package/packages/core/workflow/pipeline/cancellation.js +169 -0
  201. package/packages/core/workflow/pipeline/channel-control.js +157 -0
  202. package/packages/core/workflow/pipeline/channel-source.js +53 -0
  203. package/packages/core/workflow/pipeline/controller.js +141 -0
  204. package/packages/core/workflow/pipeline/delivery-control.js +249 -0
  205. package/packages/core/workflow/pipeline/delivery-observation.js +124 -0
  206. package/packages/core/workflow/pipeline/delivery-request.js +198 -0
  207. package/packages/core/workflow/pipeline/events.js +84 -0
  208. package/packages/core/workflow/pipeline/fence.js +42 -0
  209. package/packages/core/workflow/pipeline/group-control.js +59 -0
  210. package/packages/core/workflow/pipeline/guard-build.js +74 -0
  211. package/packages/core/workflow/pipeline/guard.js +158 -0
  212. package/packages/core/workflow/pipeline/host.js +144 -0
  213. package/packages/core/workflow/pipeline/integration-status.js +113 -0
  214. package/packages/core/workflow/pipeline/materials.js +58 -0
  215. package/packages/core/workflow/pipeline/notifications.js +36 -0
  216. package/packages/core/workflow/pipeline/parent-notification.js +27 -0
  217. package/packages/core/workflow/pipeline/platforms.js +21 -0
  218. package/packages/core/workflow/pipeline/progress.js +108 -0
  219. package/packages/core/workflow/pipeline/projection.js +20 -0
  220. package/packages/core/workflow/pipeline/reconcile.js +194 -0
  221. package/packages/core/workflow/pipeline/record-action.js +27 -0
  222. package/packages/core/workflow/pipeline/recorder-status.js +69 -0
  223. package/packages/core/workflow/pipeline/recovery-action.js +30 -0
  224. package/packages/core/workflow/pipeline/recovery-admission.js +122 -0
  225. package/packages/core/workflow/pipeline/recovery-build-control.js +95 -0
  226. package/packages/core/workflow/pipeline/recovery-build-evidence.js +71 -0
  227. package/packages/core/workflow/pipeline/recovery-build.js +121 -0
  228. package/packages/core/workflow/pipeline/recovery-controller.js +91 -0
  229. package/packages/core/workflow/pipeline/recovery-integration.js +79 -0
  230. package/packages/core/workflow/pipeline/recovery-merge-proof.js +90 -0
  231. package/packages/core/workflow/pipeline/recovery-ownership-settlement.js +150 -0
  232. package/packages/core/workflow/pipeline/recovery-ownership.js +91 -0
  233. package/packages/core/workflow/pipeline/recovery-plan.js +126 -0
  234. package/packages/core/workflow/pipeline/recovery-runtime.js +68 -0
  235. package/packages/core/workflow/pipeline/recovery-session.js +129 -0
  236. package/packages/core/workflow/pipeline/recovery-transition.js +135 -0
  237. package/packages/core/workflow/pipeline/recovery-unrecorded-build.js +74 -0
  238. package/packages/core/workflow/pipeline/runtime-source.js +111 -0
  239. package/packages/core/workflow/pipeline/selection.js +111 -0
  240. package/packages/core/workflow/pipeline/session.js +72 -0
  241. package/packages/core/workflow/pipeline/settlement.js +137 -0
  242. package/packages/core/workflow/pipeline/wake.js +38 -0
  243. package/packages/core/workflow/pipeline/web-status.js +108 -0
  244. package/packages/core/workflow/workflow-taxonomy.mjs +67 -47
  245. package/scripts/build-release-discussion-reader.mjs +11 -7
  246. package/scripts/check-inventory.mjs +7 -70
  247. package/scripts/check-pipeline-publication-topology.mjs +50 -0
  248. package/scripts/check-public-dogfood-contract.mjs +38 -51
  249. package/scripts/check-release-topology.mjs +15 -8
  250. package/scripts/check-self-consumer-contract.mjs +133 -0
  251. package/scripts/check-universal-workflow-bootstrap.mjs +4 -6
  252. package/scripts/generate-minimal-consumer-contract.mjs +155 -0
  253. package/scripts/generate-site-bundle.mjs +1 -1
  254. package/scripts/inventory/binary.mjs +9 -19
  255. package/scripts/inventory/promotion.mjs +2 -13
  256. package/scripts/prepare-product-toolchain.mjs +10 -0
  257. package/scripts/verify-golden-path.mjs +5 -1
  258. package/scripts/verify-product-platform.mjs +65 -0
  259. package/scripts/verify-standalone-product.mjs +42 -0
  260. package/templates/minimal-consumer/binary/.buildchain/buildchain.toml +45 -0
  261. package/templates/minimal-consumer/binary/.github/workflows/buildchain-recover.yml +30 -0
  262. package/templates/minimal-consumer/binary/.github/workflows/buildchain.yml +28 -0
  263. package/templates/minimal-consumer/binary/package.json +6 -0
  264. package/templates/minimal-consumer/binary/src/build.mjs +5 -0
  265. package/templates/minimal-consumer/binary/src/hello.c +2 -0
  266. package/templates/minimal-consumer/binary/src/verify.mjs +3 -0
  267. package/templates/minimal-consumer/npm/.buildchain/buildchain.toml +46 -0
  268. package/templates/minimal-consumer/npm/.github/workflows/buildchain-recover.yml +30 -0
  269. package/templates/minimal-consumer/npm/.github/workflows/buildchain.yml +28 -0
  270. package/templates/minimal-consumer/npm/package.json +6 -0
  271. package/templates/minimal-consumer/npm/src/build.mjs +5 -0
  272. package/templates/minimal-consumer/npm/src/verify.mjs +3 -0
  273. package/templates/minimal-consumer/paper/.buildchain/buildchain.toml +45 -0
  274. package/templates/minimal-consumer/paper/.github/workflows/buildchain-recover.yml +30 -0
  275. package/templates/minimal-consumer/paper/.github/workflows/buildchain.yml +28 -0
  276. package/templates/minimal-consumer/paper/package.json +6 -0
  277. package/templates/minimal-consumer/paper/src/build.mjs +12 -0
  278. package/templates/minimal-consumer/paper/src/verify.mjs +3 -0
@@ -81,6 +81,36 @@
81
81
  "runnerPolicy": "unqualified",
82
82
  "notes": ""
83
83
  },
84
+ {
85
+ "workflowPath": ".github/workflows/.ops-pipeline-delivery.yml",
86
+ "authorityClass": "governance-write",
87
+ "publicationCapable": false,
88
+ "capabilityIds": [],
89
+ "credentialMode": "none",
90
+ "publisherWorkflowMode": "fixed",
91
+ "publisherWorkflowPath": ".github/workflows/.ops-pipeline-delivery.yml",
92
+ "environment": "",
93
+ "environmentMode": "fixed",
94
+ "runnerPolicy": "unqualified",
95
+ "notes": ""
96
+ },
97
+ {
98
+ "workflowPath": ".github/workflows/.ops-pipeline-execute.yml",
99
+ "authorityClass": "product-publication",
100
+ "publicationCapable": true,
101
+ "capabilityIds": [
102
+ "channel-ref",
103
+ "github-release",
104
+ "npm-publish"
105
+ ],
106
+ "credentialMode": "trusted-publishing",
107
+ "publisherWorkflowMode": "fixed",
108
+ "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
109
+ "environment": "none",
110
+ "environmentMode": "fixed",
111
+ "runnerPolicy": "qualified-measured",
112
+ "notes": ""
113
+ },
84
114
  {
85
115
  "workflowPath": ".github/workflows/.release-authority.yml",
86
116
  "authorityClass": "evidence-publication",
@@ -109,6 +139,36 @@
109
139
  "runnerPolicy": "qualified-measured",
110
140
  "notes": ""
111
141
  },
142
+ {
143
+ "workflowPath": ".github/workflows/.release-pipeline-products.yml",
144
+ "authorityClass": "product-publication",
145
+ "publicationCapable": true,
146
+ "capabilityIds": [
147
+ "channel-ref",
148
+ "github-release",
149
+ "npm-publish"
150
+ ],
151
+ "credentialMode": "trusted-publishing",
152
+ "publisherWorkflowMode": "fixed",
153
+ "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
154
+ "environment": "none",
155
+ "environmentMode": "fixed",
156
+ "runnerPolicy": "qualified-measured",
157
+ "notes": ""
158
+ },
159
+ {
160
+ "workflowPath": ".github/workflows/.release-pipeline-version.yml",
161
+ "authorityClass": "governance-write",
162
+ "publicationCapable": false,
163
+ "capabilityIds": [],
164
+ "credentialMode": "none",
165
+ "publisherWorkflowMode": "fixed",
166
+ "publisherWorkflowPath": ".github/workflows/.release-pipeline-version.yml",
167
+ "environment": "",
168
+ "environmentMode": "fixed",
169
+ "runnerPolicy": "unqualified",
170
+ "notes": ""
171
+ },
112
172
  {
113
173
  "workflowPath": ".github/workflows/.release-promote.yml",
114
174
  "authorityClass": "product-publication",
@@ -139,6 +199,40 @@
139
199
  "runnerPolicy": "unqualified",
140
200
  "notes": ""
141
201
  },
202
+ {
203
+ "workflowPath": ".github/workflows/buildchain-recover.yml",
204
+ "authorityClass": "product-publication",
205
+ "publicationCapable": true,
206
+ "capabilityIds": [
207
+ "channel-ref",
208
+ "github-release",
209
+ "npm-publish"
210
+ ],
211
+ "credentialMode": "trusted-publishing",
212
+ "publisherWorkflowMode": "fixed",
213
+ "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
214
+ "environment": "none",
215
+ "environmentMode": "fixed",
216
+ "runnerPolicy": "qualified-measured",
217
+ "notes": ""
218
+ },
219
+ {
220
+ "workflowPath": ".github/workflows/buildchain.yml",
221
+ "authorityClass": "product-publication",
222
+ "publicationCapable": true,
223
+ "capabilityIds": [
224
+ "channel-ref",
225
+ "github-release",
226
+ "npm-publish"
227
+ ],
228
+ "credentialMode": "trusted-publishing",
229
+ "publisherWorkflowMode": "fixed",
230
+ "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
231
+ "environment": "none",
232
+ "environmentMode": "fixed",
233
+ "runnerPolicy": "qualified-measured",
234
+ "notes": ""
235
+ },
142
236
  {
143
237
  "workflowPath": ".github/workflows/public-build-demo.yml",
144
238
  "authorityClass": "governance-write",
@@ -299,6 +393,40 @@
299
393
  "runnerPolicy": "unqualified",
300
394
  "notes": ""
301
395
  },
396
+ {
397
+ "workflowPath": ".github/workflows/public-ops-pipeline.yml",
398
+ "authorityClass": "product-publication",
399
+ "publicationCapable": true,
400
+ "capabilityIds": [
401
+ "channel-ref",
402
+ "github-release",
403
+ "npm-publish"
404
+ ],
405
+ "credentialMode": "trusted-publishing",
406
+ "publisherWorkflowMode": "fixed",
407
+ "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
408
+ "environment": "none",
409
+ "environmentMode": "fixed",
410
+ "runnerPolicy": "qualified-measured",
411
+ "notes": ""
412
+ },
413
+ {
414
+ "workflowPath": ".github/workflows/public-ops-recover.yml",
415
+ "authorityClass": "product-publication",
416
+ "publicationCapable": true,
417
+ "capabilityIds": [
418
+ "channel-ref",
419
+ "github-release",
420
+ "npm-publish"
421
+ ],
422
+ "credentialMode": "trusted-publishing",
423
+ "publisherWorkflowMode": "fixed",
424
+ "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
425
+ "environment": "none",
426
+ "environmentMode": "fixed",
427
+ "runnerPolicy": "qualified-measured",
428
+ "notes": ""
429
+ },
302
430
  {
303
431
  "workflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
304
432
  "authorityClass": "governance-write",
@@ -459,359 +587,99 @@
459
587
  "environmentMode": "caller-bound",
460
588
  "runnerPolicy": "qualified-measured",
461
589
  "notes": ""
590
+ }
591
+ ],
592
+ "workflowFacts": [
593
+ {
594
+ "path": ".github/workflows/.build-demo-adapter.yml",
595
+ "signals": [],
596
+ "classified": true
462
597
  },
463
598
  {
464
- "workflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
465
- "authorityClass": "non-publication-oidc",
466
- "publicationCapable": false,
467
- "capabilityIds": [],
468
- "credentialMode": "none",
469
- "publisherWorkflowMode": "fixed",
470
- "publisherWorkflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
471
- "environment": "",
472
- "environmentMode": "fixed",
473
- "runnerPolicy": "unqualified",
474
- "notes": ""
599
+ "path": ".github/workflows/.build-gate-profile.yml",
600
+ "signals": [],
601
+ "classified": false
475
602
  },
476
603
  {
477
- "workflowPath": ".github/workflows/self-build-binary-distribution.yml",
478
- "authorityClass": "evidence-publication",
479
- "publicationCapable": false,
480
- "capabilityIds": [],
481
- "credentialMode": "none",
482
- "publisherWorkflowMode": "fixed",
483
- "publisherWorkflowPath": ".github/workflows/self-build-binary-distribution.yml",
484
- "environment": "",
485
- "environmentMode": "fixed",
486
- "runnerPolicy": "unqualified",
487
- "notes": ""
604
+ "path": ".github/workflows/.build.yml",
605
+ "signals": [
606
+ "write-permission",
607
+ "oidc",
608
+ "environment"
609
+ ],
610
+ "classified": true
488
611
  },
489
612
  {
490
- "workflowPath": ".github/workflows/self-build-demo-dogfood.yml",
491
- "authorityClass": "governance-write",
492
- "publicationCapable": false,
493
- "capabilityIds": [],
494
- "credentialMode": "none",
495
- "publisherWorkflowMode": "fixed",
496
- "publisherWorkflowPath": ".github/workflows/self-build-demo-dogfood.yml",
497
- "environment": "",
498
- "environmentMode": "fixed",
499
- "runnerPolicy": "unqualified",
500
- "notes": ""
613
+ "path": ".github/workflows/.ops-git-sync.yml",
614
+ "signals": [],
615
+ "classified": true
501
616
  },
502
617
  {
503
- "workflowPath": ".github/workflows/self-build-fixture.yml",
504
- "authorityClass": "non-publication-oidc",
505
- "publicationCapable": false,
506
- "capabilityIds": [],
507
- "credentialMode": "none",
508
- "publisherWorkflowMode": "fixed",
509
- "publisherWorkflowPath": ".github/workflows/self-build-fixture.yml",
510
- "environment": "",
511
- "environmentMode": "fixed",
512
- "runnerPolicy": "unqualified",
513
- "notes": ""
618
+ "path": ".github/workflows/.ops-pipeline-delivery.yml",
619
+ "signals": [
620
+ "write-permission"
621
+ ],
622
+ "classified": true
514
623
  },
515
624
  {
516
- "workflowPath": ".github/workflows/self-build-release-verify-compat.yml",
517
- "authorityClass": "governance-write",
518
- "publicationCapable": false,
519
- "capabilityIds": [],
520
- "credentialMode": "none",
521
- "publisherWorkflowMode": "fixed",
522
- "publisherWorkflowPath": ".github/workflows/self-build-release-verify-compat.yml",
523
- "environment": "",
524
- "environmentMode": "fixed",
525
- "runnerPolicy": "unqualified",
526
- "notes": ""
625
+ "path": ".github/workflows/.ops-pipeline-execute.yml",
626
+ "signals": [
627
+ "write-permission",
628
+ "oidc"
629
+ ],
630
+ "classified": true
527
631
  },
528
632
  {
529
- "workflowPath": ".github/workflows/self-build-stable-dogfood.yml",
530
- "authorityClass": "non-publication-oidc",
531
- "publicationCapable": false,
532
- "capabilityIds": [],
533
- "credentialMode": "none",
534
- "publisherWorkflowMode": "fixed",
535
- "publisherWorkflowPath": ".github/workflows/self-build-stable-dogfood.yml",
536
- "environment": "",
537
- "environmentMode": "fixed",
538
- "runnerPolicy": "unqualified",
539
- "notes": ""
633
+ "path": ".github/workflows/.release-authority.yml",
634
+ "signals": [],
635
+ "classified": true
540
636
  },
541
637
  {
542
- "workflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
543
- "authorityClass": "product-publication",
544
- "publicationCapable": true,
545
- "capabilityIds": [
546
- "universal-candidate-execution"
638
+ "path": ".github/workflows/.release-binary-assets.yml",
639
+ "signals": [
640
+ "write-permission",
641
+ "environment"
547
642
  ],
548
- "credentialMode": "caller-secrets",
549
- "publisherWorkflowMode": "caller-bound",
550
- "publisherWorkflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
551
- "environment": "none",
552
- "environmentMode": "fixed",
553
- "runnerPolicy": "qualified-measured",
554
- "notes": ""
643
+ "classified": true
555
644
  },
556
645
  {
557
- "workflowPath": ".github/workflows/self-ops-dev-delivery.yml",
558
- "authorityClass": "governance-write",
559
- "publicationCapable": false,
560
- "capabilityIds": [],
561
- "credentialMode": "none",
562
- "publisherWorkflowMode": "fixed",
563
- "publisherWorkflowPath": ".github/workflows/self-ops-dev-delivery.yml",
564
- "environment": "",
565
- "environmentMode": "fixed",
566
- "runnerPolicy": "unqualified",
567
- "notes": ""
646
+ "path": ".github/workflows/.release-pipeline-products.yml",
647
+ "signals": [
648
+ "write-permission",
649
+ "oidc"
650
+ ],
651
+ "classified": true
568
652
  },
569
653
  {
570
- "workflowPath": ".github/workflows/self-ops-governance-audit.yml",
571
- "authorityClass": "governance-write",
572
- "publicationCapable": false,
573
- "capabilityIds": [],
574
- "credentialMode": "none",
575
- "publisherWorkflowMode": "fixed",
576
- "publisherWorkflowPath": ".github/workflows/self-ops-governance-audit.yml",
577
- "environment": "",
578
- "environmentMode": "fixed",
579
- "runnerPolicy": "unqualified",
580
- "notes": ""
654
+ "path": ".github/workflows/.release-pipeline-version.yml",
655
+ "signals": [
656
+ "write-permission"
657
+ ],
658
+ "classified": true
581
659
  },
582
660
  {
583
- "workflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
584
- "authorityClass": "governance-write",
585
- "publicationCapable": false,
586
- "capabilityIds": [],
587
- "credentialMode": "none",
588
- "publisherWorkflowMode": "fixed",
589
- "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
590
- "environment": "",
591
- "environmentMode": "fixed",
592
- "runnerPolicy": "unqualified",
593
- "notes": ""
661
+ "path": ".github/workflows/.release-promote.yml",
662
+ "signals": [],
663
+ "classified": true
594
664
  },
595
665
  {
596
- "workflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
597
- "authorityClass": "governance-write",
598
- "publicationCapable": false,
599
- "capabilityIds": [],
600
- "credentialMode": "none",
601
- "publisherWorkflowMode": "fixed",
602
- "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
603
- "environment": "",
604
- "environmentMode": "fixed",
605
- "runnerPolicy": "unqualified",
606
- "notes": ""
607
- },
608
- {
609
- "workflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
610
- "authorityClass": "governance-write",
611
- "publicationCapable": false,
612
- "capabilityIds": [],
613
- "credentialMode": "none",
614
- "publisherWorkflowMode": "fixed",
615
- "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
616
- "environment": "",
617
- "environmentMode": "fixed",
618
- "runnerPolicy": "unqualified",
619
- "notes": ""
620
- },
621
- {
622
- "workflowPath": ".github/workflows/self-ops-merge-queue.yml",
623
- "authorityClass": "governance-write",
624
- "publicationCapable": false,
625
- "capabilityIds": [],
626
- "credentialMode": "none",
627
- "publisherWorkflowMode": "fixed",
628
- "publisherWorkflowPath": ".github/workflows/self-ops-merge-queue.yml",
629
- "environment": "",
630
- "environmentMode": "fixed",
631
- "runnerPolicy": "unqualified",
632
- "notes": ""
633
- },
634
- {
635
- "workflowPath": ".github/workflows/self-ops-patrol-daily.yml",
636
- "authorityClass": "governance-write",
637
- "publicationCapable": false,
638
- "capabilityIds": [],
639
- "credentialMode": "none",
640
- "publisherWorkflowMode": "fixed",
641
- "publisherWorkflowPath": ".github/workflows/self-ops-patrol-daily.yml",
642
- "environment": "",
643
- "environmentMode": "fixed",
644
- "runnerPolicy": "unqualified",
645
- "notes": ""
646
- },
647
- {
648
- "workflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
649
- "authorityClass": "governance-write",
650
- "publicationCapable": false,
651
- "capabilityIds": [],
652
- "credentialMode": "none",
653
- "publisherWorkflowMode": "fixed",
654
- "publisherWorkflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
655
- "environment": "",
656
- "environmentMode": "fixed",
657
- "runnerPolicy": "unqualified",
658
- "notes": ""
659
- },
660
- {
661
- "workflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
662
- "authorityClass": "governance-write",
663
- "publicationCapable": false,
664
- "capabilityIds": [],
665
- "credentialMode": "none",
666
- "publisherWorkflowMode": "fixed",
667
- "publisherWorkflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
668
- "environment": "",
669
- "environmentMode": "fixed",
670
- "runnerPolicy": "unqualified",
671
- "notes": ""
672
- },
673
- {
674
- "workflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
675
- "authorityClass": "governance-write",
676
- "publicationCapable": false,
677
- "capabilityIds": [],
678
- "credentialMode": "none",
679
- "publisherWorkflowMode": "fixed",
680
- "publisherWorkflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
681
- "environment": "",
682
- "environmentMode": "fixed",
683
- "runnerPolicy": "unqualified",
684
- "notes": ""
685
- },
686
- {
687
- "workflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
688
- "authorityClass": "governance-write",
689
- "publicationCapable": false,
690
- "capabilityIds": [],
691
- "credentialMode": "none",
692
- "publisherWorkflowMode": "fixed",
693
- "publisherWorkflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
694
- "environment": "",
695
- "environmentMode": "fixed",
696
- "runnerPolicy": "unqualified",
697
- "notes": ""
698
- },
699
- {
700
- "workflowPath": ".github/workflows/self-release-binary-assets.yml",
701
- "authorityClass": "governance-write",
702
- "publicationCapable": false,
703
- "capabilityIds": [],
704
- "credentialMode": "none",
705
- "publisherWorkflowMode": "fixed",
706
- "publisherWorkflowPath": ".github/workflows/self-release-binary-assets.yml",
707
- "environment": "",
708
- "environmentMode": "fixed",
709
- "runnerPolicy": "unqualified",
710
- "notes": ""
711
- },
712
- {
713
- "workflowPath": ".github/workflows/self-release-line-open.yml",
714
- "authorityClass": "governance-write",
715
- "publicationCapable": false,
716
- "capabilityIds": [],
717
- "credentialMode": "none",
718
- "publisherWorkflowMode": "fixed",
719
- "publisherWorkflowPath": ".github/workflows/self-release-line-open.yml",
720
- "environment": "",
721
- "environmentMode": "fixed",
722
- "runnerPolicy": "unqualified",
723
- "notes": ""
724
- },
725
- {
726
- "workflowPath": ".github/workflows/self-release-npm-dry-run.yml",
727
- "authorityClass": "dry-run-only",
728
- "publicationCapable": false,
729
- "capabilityIds": [],
730
- "credentialMode": "none",
731
- "publisherWorkflowMode": "fixed",
732
- "publisherWorkflowPath": ".github/workflows/self-release-npm-dry-run.yml",
733
- "environment": "",
734
- "environmentMode": "fixed",
735
- "runnerPolicy": "unqualified",
736
- "notes": ""
737
- },
738
- {
739
- "workflowPath": ".github/workflows/self-release-promote.yml",
740
- "authorityClass": "governance-write",
741
- "publicationCapable": false,
742
- "capabilityIds": [],
743
- "credentialMode": "none",
744
- "publisherWorkflowMode": "fixed",
745
- "publisherWorkflowPath": ".github/workflows/self-release-promote.yml",
746
- "environment": "",
747
- "environmentMode": "fixed",
748
- "runnerPolicy": "unqualified",
749
- "notes": ""
750
- },
751
- {
752
- "workflowPath": ".github/workflows/self-release-tail-dogfood.yml",
753
- "authorityClass": "product-publication",
754
- "publicationCapable": true,
755
- "capabilityIds": [
756
- "artifact.publish",
757
- "release.activate",
758
- "released-evidence.synthesize",
759
- "signed-channel.commit"
760
- ],
761
- "credentialMode": "caller-secrets",
762
- "publisherWorkflowMode": "fixed",
763
- "publisherWorkflowPath": ".github/workflows/self-release-tail-dogfood.yml",
764
- "environment": "none",
765
- "environmentMode": "fixed",
766
- "runnerPolicy": "qualified-measured",
767
- "notes": ""
768
- }
769
- ],
770
- "workflowFacts": [
771
- {
772
- "path": ".github/workflows/.build-demo-adapter.yml",
773
- "signals": [],
774
- "classified": true
775
- },
776
- {
777
- "path": ".github/workflows/.build-gate-profile.yml",
778
- "signals": [],
779
- "classified": false
780
- },
781
- {
782
- "path": ".github/workflows/.build.yml",
666
+ "path": ".github/workflows/build.yml",
783
667
  "signals": [
784
668
  "write-permission",
785
- "oidc",
786
- "environment"
669
+ "oidc"
787
670
  ],
788
671
  "classified": true
789
672
  },
790
673
  {
791
- "path": ".github/workflows/.ops-git-sync.yml",
792
- "signals": [],
793
- "classified": true
794
- },
795
- {
796
- "path": ".github/workflows/.release-authority.yml",
797
- "signals": [],
798
- "classified": true
799
- },
800
- {
801
- "path": ".github/workflows/.release-binary-assets.yml",
674
+ "path": ".github/workflows/buildchain-recover.yml",
802
675
  "signals": [
803
676
  "write-permission",
804
- "environment"
677
+ "oidc"
805
678
  ],
806
679
  "classified": true
807
680
  },
808
681
  {
809
- "path": ".github/workflows/.release-promote.yml",
810
- "signals": [],
811
- "classified": true
812
- },
813
- {
814
- "path": ".github/workflows/build.yml",
682
+ "path": ".github/workflows/buildchain.yml",
815
683
  "signals": [
816
684
  "write-permission",
817
685
  "oidc"
@@ -914,6 +782,22 @@
914
782
  ],
915
783
  "classified": true
916
784
  },
785
+ {
786
+ "path": ".github/workflows/public-ops-pipeline.yml",
787
+ "signals": [
788
+ "write-permission",
789
+ "oidc"
790
+ ],
791
+ "classified": true
792
+ },
793
+ {
794
+ "path": ".github/workflows/public-ops-recover.yml",
795
+ "signals": [
796
+ "write-permission",
797
+ "oidc"
798
+ ],
799
+ "classified": true
800
+ },
917
801
  {
918
802
  "path": ".github/workflows/public-ops-release-governance.yml",
919
803
  "signals": [],
@@ -1001,211 +885,7 @@
1001
885
  "environment"
1002
886
  ],
1003
887
  "classified": true
1004
- },
1005
- {
1006
- "path": ".github/workflows/self-build-adopter-dogfood.yml",
1007
- "signals": [],
1008
- "classified": false
1009
- },
1010
- {
1011
- "path": ".github/workflows/self-build-alpha-dogfood.yml",
1012
- "signals": [
1013
- "write-permission",
1014
- "oidc"
1015
- ],
1016
- "classified": true
1017
- },
1018
- {
1019
- "path": ".github/workflows/self-build-binary-distribution.yml",
1020
- "signals": [
1021
- "write-permission"
1022
- ],
1023
- "classified": true
1024
- },
1025
- {
1026
- "path": ".github/workflows/self-build-channel-verify.yml",
1027
- "signals": [],
1028
- "classified": false
1029
- },
1030
- {
1031
- "path": ".github/workflows/self-build-demo-dogfood.yml",
1032
- "signals": [
1033
- "write-permission"
1034
- ],
1035
- "classified": true
1036
- },
1037
- {
1038
- "path": ".github/workflows/self-build-demo-media-qualification.yml",
1039
- "signals": [],
1040
- "classified": false
1041
- },
1042
- {
1043
- "path": ".github/workflows/self-build-fixture.yml",
1044
- "signals": [
1045
- "write-permission",
1046
- "oidc"
1047
- ],
1048
- "classified": true
1049
- },
1050
- {
1051
- "path": ".github/workflows/self-build-public-consumer-dogfood.yml",
1052
- "signals": [],
1053
- "classified": false
1054
- },
1055
- {
1056
- "path": ".github/workflows/self-build-stable-candidate-qualification.yml",
1057
- "signals": [],
1058
- "classified": false
1059
- },
1060
- {
1061
- "path": ".github/workflows/self-build-stable-dogfood.yml",
1062
- "signals": [
1063
- "write-permission",
1064
- "oidc"
1065
- ],
1066
- "classified": true
1067
- },
1068
- {
1069
- "path": ".github/workflows/self-build-verify.yml",
1070
- "signals": [],
1071
- "classified": false
1072
- },
1073
- {
1074
- "path": ".github/workflows/self-ops-bootstrap-dogfood.yml",
1075
- "signals": [
1076
- "write-permission",
1077
- "oidc"
1078
- ],
1079
- "classified": true
1080
- },
1081
- {
1082
- "path": ".github/workflows/self-ops-dev-delivery.yml",
1083
- "signals": [
1084
- "write-permission"
1085
- ],
1086
- "classified": true
1087
- },
1088
- {
1089
- "path": ".github/workflows/self-ops-governance-audit.yml",
1090
- "signals": [
1091
- "write-permission"
1092
- ],
1093
- "classified": true
1094
- },
1095
- {
1096
- "path": ".github/workflows/self-ops-housekeeping-daily.yml",
1097
- "signals": [
1098
- "write-permission"
1099
- ],
1100
- "classified": true
1101
- },
1102
- {
1103
- "path": ".github/workflows/self-ops-housekeeping-monthly.yml",
1104
- "signals": [
1105
- "write-permission"
1106
- ],
1107
- "classified": true
1108
- },
1109
- {
1110
- "path": ".github/workflows/self-ops-housekeeping-weekly.yml",
1111
- "signals": [
1112
- "write-permission"
1113
- ],
1114
- "classified": true
1115
- },
1116
- {
1117
- "path": ".github/workflows/self-ops-merge-queue.yml",
1118
- "signals": [],
1119
- "classified": true
1120
- },
1121
- {
1122
- "path": ".github/workflows/self-ops-patrol-daily.yml",
1123
- "signals": [
1124
- "write-permission"
1125
- ],
1126
- "classified": true
1127
- },
1128
- {
1129
- "path": ".github/workflows/self-ops-patrol-monthly.yml",
1130
- "signals": [
1131
- "write-permission"
1132
- ],
1133
- "classified": true
1134
- },
1135
- {
1136
- "path": ".github/workflows/self-ops-patrol-weekly.yml",
1137
- "signals": [
1138
- "write-permission"
1139
- ],
1140
- "classified": true
1141
- },
1142
- {
1143
- "path": ".github/workflows/self-ops-promotion-recovery.yml",
1144
- "signals": [
1145
- "write-permission",
1146
- "oidc"
1147
- ],
1148
- "classified": true
1149
- },
1150
- {
1151
- "path": ".github/workflows/self-ops-runner-smoke.yml",
1152
- "signals": [],
1153
- "classified": false
1154
- },
1155
- {
1156
- "path": ".github/workflows/self-ops-stable-candidate-patrol.yml",
1157
- "signals": [
1158
- "write-permission"
1159
- ],
1160
- "classified": true
1161
- },
1162
- {
1163
- "path": ".github/workflows/self-release-binary-assets.yml",
1164
- "signals": [
1165
- "write-permission"
1166
- ],
1167
- "classified": true
1168
- },
1169
- {
1170
- "path": ".github/workflows/self-release-line-open.yml",
1171
- "signals": [
1172
- "write-permission"
1173
- ],
1174
- "classified": true
1175
- },
1176
- {
1177
- "path": ".github/workflows/self-release-next-development.yml",
1178
- "signals": [],
1179
- "classified": false
1180
- },
1181
- {
1182
- "path": ".github/workflows/self-release-npm-dry-run.yml",
1183
- "signals": [
1184
- "npm-publish"
1185
- ],
1186
- "classified": true
1187
- },
1188
- {
1189
- "path": ".github/workflows/self-release-promote.yml",
1190
- "signals": [
1191
- "write-permission",
1192
- "oidc"
1193
- ],
1194
- "classified": true
1195
- },
1196
- {
1197
- "path": ".github/workflows/self-release-rehearsal-dogfood.yml",
1198
- "signals": [],
1199
- "classified": false
1200
- },
1201
- {
1202
- "path": ".github/workflows/self-release-tail-dogfood.yml",
1203
- "signals": [
1204
- "write-permission",
1205
- "oidc"
1206
- ],
1207
- "classified": true
1208
888
  }
1209
889
  ],
1210
- "registryDigest": "536dca8dab8dd8e28018a6fd9ac023d0d116e0fdb612ecda870a0a2225a3f77b"
890
+ "registryDigest": "f4dde5fb7ed1779b121df1cac64b534ebd87d9bfab3db1c441e547953d0bfac5"
1211
891
  }