@kungfu-tech/buildchain 4.1.3-alpha.0 → 4.1.3-alpha.10

package/architecture/release-topology.json

@@ -10,14 +10,21 @@
   "closedWorld": {
     "workflowPaths": [
       ".github/workflows/.build.yml",
+      ".github/workflows/.ops-pipeline-execute.yml",
       ".github/workflows/.release-authority.yml",
       ".github/workflows/.release-binary-assets.yml",
+      ".github/workflows/.release-pipeline-products.yml",
+      ".github/workflows/.release-pipeline-version.yml",
       ".github/workflows/.release-promote.yml",
       ".github/workflows/build.yml",
+      ".github/workflows/buildchain-recover.yml",
+      ".github/workflows/buildchain.yml",
       ".github/workflows/public-build-demo.yml",
       ".github/workflows/public-ops-alpha-candidate-patrol.yml",
       ".github/workflows/public-ops-dev-auto-merge.yml",
       ".github/workflows/public-ops-observed-evidence.yml",
+      ".github/workflows/public-ops-pipeline.yml",
+      ".github/workflows/public-ops-recover.yml",
       ".github/workflows/public-ops-stable-candidate-patrol.yml",
       ".github/workflows/public-release-artifact-attestation.yml",
       ".github/workflows/public-release-oci-compose-preview.yml",
@@ -25,41 +32,22 @@
       ".github/workflows/public-release-promote.yml",
       ".github/workflows/public-release-propagation.yml",
       ".github/workflows/public-release-tail.yml",
-      ".github/workflows/public-release-web.yml",
-      ".github/workflows/self-build-alpha-dogfood.yml",
-      ".github/workflows/self-build-demo-dogfood.yml",
-      ".github/workflows/self-build-fixture.yml",
-      ".github/workflows/self-build-stable-dogfood.yml",
-      ".github/workflows/self-ops-dev-delivery.yml",
-      ".github/workflows/self-ops-patrol-daily.yml",
-      ".github/workflows/self-ops-patrol-monthly.yml",
-      ".github/workflows/self-ops-patrol-weekly.yml",
-      ".github/workflows/self-ops-promotion-recovery.yml",
-      ".github/workflows/self-ops-stable-candidate-patrol.yml",
-      ".github/workflows/self-release-binary-assets.yml",
-      ".github/workflows/self-release-line-open.yml",
-      ".github/workflows/self-release-next-development.yml",
-      ".github/workflows/self-release-npm-dry-run.yml",
-      ".github/workflows/self-release-promote.yml",
-      ".github/workflows/self-release-rehearsal-dogfood.yml",
-      ".github/workflows/self-release-tail-dogfood.yml"
+      ".github/workflows/public-release-web.yml"
     ],
     "unknownTopologyPolicy": "fail-closed"
   },
   "semanticScope": {
     "workflowPaths": [
       ".github/workflows/.release-promote.yml",
-      ".github/workflows/self-ops-promotion-recovery.yml",
-      ".github/workflows/self-release-promote.yml",
-      ".github/workflows/public-release-promote.yml",
-      ".github/workflows/self-release-tail-dogfood.yml"
+      ".github/workflows/public-release-promote.yml"
     ],
     "excludedMechanisms": [
       "Paper product release",
       "npm dry-run",
       "Protected generated version review: no package, tag or Release mutation; independently inventoried in closedWorld and privilegedExecutableClosure. Stable finalization review consumes the exact tag and regenerates the rooted version state before protected auto-merge.",
       "Post-publication protected development review: no package, tag or Release mutation; independently inventoried in closedWorld and privilegedExecutableClosure.",
-      "Post-publication OCI Compose preview activation is measured separately in postPublicationScope; it consumes completed publication and qualification, copies one manifest to the sealed alias, and cannot materialize versions or release refs."
+      "Post-publication OCI Compose preview activation is measured separately in postPublicationScope; it consumes completed publication and qualification, copies one manifest to the sealed alias, and cannot materialize versions or release refs.",
+      "Generated normal and recovery callers delegate to the public pipeline; their authority is measured in pipelinePublicationScope, including the product publisher."
     ]
   },
   "authorityClosure": {
@@ -68,6 +56,7 @@
       "packages/core/index.js",
       "packages/core/publication/oci-compose-qualification.js",
       "packages/core/publication/oci/preview-promotion.js",
+      "packages/core/publication/pipeline/documents.js",
       "packages/core/publication/publication-rehearsal-capsule.js",
       "packages/core/publication/publication-rehearsal-runtime.js",
       "packages/core/publication/publication-rehearsal.js",
@@ -87,14 +76,21 @@
     "runtimeSelectors": [
       "packages/core/runtime/entry/actions.js",
       "packages/core/runtime/entry/activation.js",
+      "packages/core/runtime/entry/attempt.js",
       "packages/core/runtime/entry/github.js",
       "packages/core/runtime/entry/recovery.js",
-      "packages/core/runtime/entry/selection.js"
+      "packages/core/runtime/entry/selection.js",
+      "packages/core/runtime/entry/source.js"
+    ],
+    "runtimeEngines": [
+      "packages/core/release/promote-candidate/action.js",
+      "packages/core/publication/pipeline/apply.js"
     ],
-    "runtimeEngines": ["packages/core/release/promote-candidate/action.js"],
     "terminalProjections": [
       "actions/release/promotion/apply/action.yml",
       "actions/release/promotion/settle/action.yml",
+      "packages/core/publication/pipeline/apply.js",
+      "packages/core/publication/pipeline/recovery-admission.js",
       "packages/core/publication/settlement/transaction.js",
       "packages/core/release/promote-candidate/provider-settlement.js",
       "packages/core/release/release-invocation.js",
@@ -106,7 +102,9 @@
         "packages/core/publication/binary/action.js",
         "packages/core/release/next-development/actions.js",
         "packages/core/publication/oci/preview-actions.js",
-        "packages/core/publication/settlement/actions.js"
+        "packages/core/publication/settlement/actions.js",
+        "packages/core/publication/pipeline/actions.js",
+        "packages/core/publication/pipeline/version-actions.js"
       ],
       "modules": [
         "packages/core/adoption/kfd-adopter-manifest.js",
@@ -117,8 +115,15 @@
         "packages/core/build/build-configuration.js",
         "packages/core/build/github-artifact-attestation.js",
         "packages/core/build/package-manager.js",
+        "packages/core/build/stage-capsule.js",
         "packages/core/consumer/buildchain-channel-identity.js",
         "packages/core/consumer/buildchain-config.js",
+        "packages/core/consumer/contract/entries.js",
+        "packages/core/consumer/contract/identity.js",
+        "packages/core/consumer/contract/plan.js",
+        "packages/core/consumer/contract/products.js",
+        "packages/core/consumer/contract/reader.js",
+        "packages/core/consumer/contract/shape.js",
         "packages/core/consumer/floating-consumer-evidence.js",
         "packages/core/consumer/floating-consumer-policy.js",
         "packages/core/consumer/floating-consumer-release-passport.js",
@@ -130,22 +135,76 @@
         "packages/core/contracts/public-surface-audit.js",
         "packages/core/contracts/public-surface-cli.js",
         "packages/core/contracts/workflow-yaml-contract.js",
+        "packages/core/dev-delivery/admission/github-client.js",
+        "packages/core/dev-delivery/delivery-warrant-fixture-runner.js",
+        "packages/core/dev-delivery/delivery-warrant-read-candidate.js",
+        "packages/core/dev-delivery/delivery-warrant-semantic-diff-gate.js",
+        "packages/core/dev-delivery/delivery-warrant-shadow-adapter.js",
+        "packages/core/dev-delivery/dev-delivery-authority-candidate.js",
+        "packages/core/dev-delivery/dev-delivery-authority-state.js",
+        "packages/core/dev-delivery/dev-delivery-candidate-identity.js",
         "packages/core/dev-delivery/dev-delivery-common.js",
         "packages/core/dev-delivery/dev-delivery-contract-surface.js",
+        "packages/core/dev-delivery/dev-delivery-execution-failure.js",
+        "packages/core/dev-delivery/dev-delivery-execution-transfer.js",
+        "packages/core/dev-delivery/dev-delivery-native-execution.js",
+        "packages/core/dev-delivery/dev-delivery-native-proof.js",
+        "packages/core/dev-delivery/dev-delivery-process-boundary.js",
+        "packages/core/dev-delivery/dev-delivery-proof.js",
+        "packages/core/dev-delivery/dev-delivery-provider-attempt.js",
+        "packages/core/dev-delivery/dev-delivery-warrant-cancellation.js",
+        "packages/core/dev-delivery/dev-delivery-warrant-native-requirements.js",
+        "packages/core/dev-delivery/dev-delivery-warrant-qualification.js",
+        "packages/core/dev-delivery/dev-delivery-warrant-settlement.js",
+        "packages/core/dev-delivery/dev-delivery-warrant-state.js",
+        "packages/core/dev-delivery/dev-delivery-warrant.js",
+        "packages/core/dev-delivery/dev-delivery-writer-protocol-transition.js",
+        "packages/core/dev-delivery/native/execution.js",
+        "packages/core/dev-delivery/warrant/observation.js",
+        "packages/core/dev-delivery/warrant/persistence.js",
+        "packages/core/dev-delivery/warrant/service.js",
+        "packages/core/dev-delivery/warrant/transitions.js",
+        "packages/core/dev-delivery/warrant/values.js",
         "packages/core/governance/buildchain-compatibility-authority.js",
         "packages/core/governance/buildchain-compatibility-fact.js",
         "packages/core/governance/buildchain-compatibility-facts.json",
         "packages/core/governance/buildchain-compatibility-proof.js",
         "packages/core/observability/controller-evidence.js",
+        "packages/core/providers/dev-delivery/store.js",
         "packages/core/providers/github-cli-api.js",
+        "packages/core/providers/github/attempt-index.js",
+        "packages/core/providers/github/attempt-journal.js",
         "packages/core/providers/github/discussions/materials.js",
         "packages/core/providers/github/discussions/transport.js",
         "packages/core/providers/github/graphql-errors.js",
+        "packages/core/providers/github/json-client.js",
+        "packages/core/providers/github/pipeline-entry-runs.js",
+        "packages/core/providers/github/pipeline-integration.js",
+        "packages/core/providers/github/pipeline-policy.js",
+        "packages/core/providers/github/pipeline-product-payload.js",
+        "packages/core/providers/github/pipeline-product-release.js",
+        "packages/core/providers/github/pipeline-publication-artifacts.js",
+        "packages/core/providers/github/pipeline-release-evidence.js",
+        "packages/core/providers/github/pipeline-run-entry.js",
+        "packages/core/providers/github/pipeline-runs.js",
+        "packages/core/providers/github/pipeline-source.js",
+        "packages/core/providers/github/pipeline-stable-baseline.js",
+        "packages/core/providers/github/pipeline-stable-source.js",
+        "packages/core/providers/github/pipeline-version-artifacts.js",
+        "packages/core/providers/github/pipeline-version-readback.js",
+        "packages/core/providers/github/pipeline-version.js",
+        "packages/core/providers/github/pipeline-worker.js",
         "packages/core/providers/github/release-assets.js",
+        "packages/core/providers/github/release-evidence-assets.js",
         "packages/core/publication/binary/action.js",
         "packages/core/publication/binary/capability.js",
         "packages/core/publication/binary/evidence.js",
         "packages/core/publication/binary/transaction.js",
+        "packages/core/publication/npm/pack-result.js",
+        "packages/core/publication/npm/package.js",
+        "packages/core/publication/npm/pipeline-channel.js",
+        "packages/core/publication/npm/pipeline-provider.js",
+        "packages/core/publication/npm/registry.js",
         "packages/core/publication/oci-compose-qualification.js",
         "packages/core/publication/oci-publication-bundle.js",
         "packages/core/publication/oci-publication-graph.js",
@@ -155,6 +214,59 @@
         "packages/core/publication/oci/preview-registry.js",
         "packages/core/publication/oci/preview-transaction.js",
         "packages/core/publication/oci/preview-values.js",
+        "packages/core/publication/pipeline/actions.js",
+        "packages/core/publication/pipeline/apply.js",
+        "packages/core/publication/pipeline/build-segments.js",
+        "packages/core/publication/pipeline/capsules.js",
+        "packages/core/publication/pipeline/context.js",
+        "packages/core/publication/pipeline/development-anchor.js",
+        "packages/core/publication/pipeline/development-current.js",
+        "packages/core/publication/pipeline/development-pr.js",
+        "packages/core/publication/pipeline/development-proof.js",
+        "packages/core/publication/pipeline/development-transition.js",
+        "packages/core/publication/pipeline/distribution.js",
+        "packages/core/publication/pipeline/documents.js",
+        "packages/core/publication/pipeline/effects.js",
+        "packages/core/publication/pipeline/files.js",
+        "packages/core/publication/pipeline/imported-materials.js",
+        "packages/core/publication/pipeline/journal.js",
+        "packages/core/publication/pipeline/next-development.js",
+        "packages/core/publication/pipeline/pack.js",
+        "packages/core/publication/pipeline/package-policy.js",
+        "packages/core/publication/pipeline/plan.js",
+        "packages/core/publication/pipeline/prepare.js",
+        "packages/core/publication/pipeline/qualification.js",
+        "packages/core/publication/pipeline/qualify.js",
+        "packages/core/publication/pipeline/recovery-admission.js",
+        "packages/core/publication/pipeline/recovery-build-download.js",
+        "packages/core/publication/pipeline/recovery-build-plan.js",
+        "packages/core/publication/pipeline/recovery-build-readback.js",
+        "packages/core/publication/pipeline/recovery-capsules.js",
+        "packages/core/publication/pipeline/recovery-import.js",
+        "packages/core/publication/pipeline/recovery-inspection.js",
+        "packages/core/publication/pipeline/recovery-materials.js",
+        "packages/core/publication/pipeline/recovery-plan.js",
+        "packages/core/publication/pipeline/recovery-prepare.js",
+        "packages/core/publication/pipeline/recovery-qualification.js",
+        "packages/core/publication/pipeline/recovery-readback.js",
+        "packages/core/publication/pipeline/recovery-signing.js",
+        "packages/core/publication/pipeline/sealed-products.js",
+        "packages/core/publication/pipeline/settle.js",
+        "packages/core/publication/pipeline/signing.js",
+        "packages/core/publication/pipeline/source-plan.js",
+        "packages/core/publication/pipeline/stable-entry.js",
+        "packages/core/publication/pipeline/stable-products.js",
+        "packages/core/publication/pipeline/stable-wait.js",
+        "packages/core/publication/pipeline/stable.js",
+        "packages/core/publication/pipeline/version-actions.js",
+        "packages/core/publication/pipeline/version-build.js",
+        "packages/core/publication/pipeline/version-context.js",
+        "packages/core/publication/pipeline/version-material.js",
+        "packages/core/publication/pipeline/version-preparation.js",
+        "packages/core/publication/pipeline/version-regeneration.js",
+        "packages/core/publication/pipeline/version-source-guard.js",
+        "packages/core/publication/pipeline/version.js",
+        "packages/core/publication/pipeline/worker.js",
         "packages/core/publication/publication-artifact-candidate.js",
         "packages/core/publication/publication-authority.js",
         "packages/core/publication/publication-development.js",
@@ -162,14 +274,20 @@
         "packages/core/publication/publication-sealed-bundle.js",
         "packages/core/publication/settlement/actions.js",
         "packages/core/publication/settlement/transaction.js",
+        "packages/core/release/candidate/payloads.js",
+        "packages/core/release/candidate/selection.js",
+        "packages/core/release/candidate/transport.js",
         "packages/core/release/commands/ensure-github-release.mjs",
         "packages/core/release/discussion/binary.js",
         "packages/core/release/discussion/checkpoints.js",
         "packages/core/release/discussion/envelope.js",
+        "packages/core/release/discussion/evidence.js",
+        "packages/core/release/discussion/presentation.js",
         "packages/core/release/discussion/publication.js",
         "packages/core/release/discussion/reader.js",
         "packages/core/release/discussion/session.js",
         "packages/core/release/discussion/store.js",
+        "packages/core/release/discussion/threads.js",
         "packages/core/release/github-provider-plane.js",
         "packages/core/release/github-release.js",
         "packages/core/release/next-development-transition.js",
@@ -224,6 +342,7 @@
         "packages/core/release/protected-publication-source.js",
         "packages/core/release/publish-transaction.js",
         "packages/core/release/recovery/lineage.js",
+        "packages/core/release/release-blocker-priority.js",
         "packages/core/release/release-candidate-recovery.js",
         "packages/core/release/release-candidate.js",
         "packages/core/release/release-invocation.js",
@@ -232,24 +351,61 @@
         "packages/core/release/release-tail-product-capabilities.js",
         "packages/core/release/release-tail-provider-adapters.js",
         "packages/core/release/release-tail-provider-plane.js",
+        "packages/core/release/release-train.js",
         "packages/core/release/reuse-complete-release.js",
+        "packages/core/release/stable-release-gate.js",
         "packages/core/release/version-state.js",
         "packages/core/release/version-state/verification.js",
         "packages/core/runtime/action-process.mjs",
         "packages/core/runtime/checkout-identity.js",
+        "packages/core/runtime/consumer-shell.js",
         "packages/core/runtime/domain-wasm-artifact.js",
         "packages/core/runtime/domain-wasm.js",
+        "packages/core/runtime/entry/selection.js",
         "packages/core/runtime/installation-root.js",
         "packages/core/runtime/spawn-command.js",
-        "packages/core/web/web-surface-publication-candidate.js"
+        "packages/core/web/web-surface-publication-candidate.js",
+        "packages/core/workflow/attempt/identity.js",
+        "packages/core/workflow/attempt/journal.js",
+        "packages/core/workflow/attempt/materials.js",
+        "packages/core/workflow/attempt/reader.js",
+        "packages/core/workflow/attempt/records.js",
+        "packages/core/workflow/pipeline/build-evidence.js",
+        "packages/core/workflow/pipeline/build-qualification.js",
+        "packages/core/workflow/pipeline/build.js",
+        "packages/core/workflow/pipeline/channel-control.js",
+        "packages/core/workflow/pipeline/channel-source.js",
+        "packages/core/workflow/pipeline/delivery-observation.js",
+        "packages/core/workflow/pipeline/events.js",
+        "packages/core/workflow/pipeline/fence.js",
+        "packages/core/workflow/pipeline/group-control.js",
+        "packages/core/workflow/pipeline/host.js",
+        "packages/core/workflow/pipeline/materials.js",
+        "packages/core/workflow/pipeline/notifications.js",
+        "packages/core/workflow/pipeline/parent-notification.js",
+        "packages/core/workflow/pipeline/platforms.js",
+        "packages/core/workflow/pipeline/progress.js",
+        "packages/core/workflow/pipeline/projection.js",
+        "packages/core/workflow/pipeline/reconcile.js",
+        "packages/core/workflow/pipeline/recovery-integration.js",
+        "packages/core/workflow/pipeline/recovery-merge-proof.js",
+        "packages/core/workflow/pipeline/recovery-ownership-settlement.js",
+        "packages/core/workflow/pipeline/recovery-ownership.js",
+        "packages/core/workflow/pipeline/recovery-plan.js",
+        "packages/core/workflow/pipeline/recovery-runtime.js",
+        "packages/core/workflow/pipeline/recovery-session.js",
+        "packages/core/workflow/pipeline/session.js",
+        "packages/core/workflow/pipeline/settlement.js",
+        "packages/core/workflow/pipeline/wake.js",
+        "packages/core/workflow/pipeline/web-status.js"
       ],
-      "root": "sha256:876e54a9240478ecd3bfa2b3cc386529e04bc818ca15844b9047832c9a9c4898"
+      "root": "sha256:d95f03e3906b482b6ab0486d531865162e62961f2398058f6aecb380500f5314"
     },
     "rustWasmAuthority": {
       "loader": "packages/core/runtime/domain-wasm.js",
       "metadata": "packages/core/runtime/domain-wasm-artifact.js",
       "artifact": "packages/core/runtime/buildchain-domain.wasm",
-      "artifactRoot": "sha256:504e23c9241f43611813f0fbd213b7a694946328b00e23d22f6ba678e7b0c841",
+      "artifactRoot": "sha256:d42ab5ae8d42253d40ab49057e460285a848925cece176c4d68e63e90ca86c72",
       "distributedArtifacts": [
         "actions/release/promotion/ref/dist/buildchain-domain.wasm",
         "actions/release/tail/settle/dist/buildchain-domain.wasm",
@@ -265,8 +421,8 @@
       "packages/core/release/promote-ref/internal/promote-release-channel.js",
       "packages/core/release/promote-ref/lib.js"
     ],
-    "freshEntry": ".github/workflows/public-release-promote.yml",
-    "recoveryEntry": ".github/workflows/self-ops-promotion-recovery.yml",
+    "freshEntry": ".github/workflows/public-ops-pipeline.yml",
+    "recoveryEntry": ".github/workflows/public-ops-recover.yml",
     "forbiddenPublisherPatterns": [
       "legacy-promote",
       "v4-declarative-promote",
@@ -345,54 +501,19 @@
           "resolve-promotion|runner|-|read|-|jobOutput|-"
         ],
         "reusableEdges": ["./.github/workflows/.release-promote.yml"]
-      },
-      {
-        "path": ".github/workflows/self-ops-promotion-recovery.yml",
-        "triggers": ["workflow_dispatch"],
-        "jobs": [
-          "resume|reusable-call|kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4|write|write|-|contents-write,oidc-write"
-        ],
-        "reusableEdges": [
-          "kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4"
-        ]
-      },
-      {
-        "path": ".github/workflows/self-release-promote.yml",
-        "triggers": ["workflow_dispatch", "workflow_run"],
-        "jobs": [
-          "classify-workflow-run|runner|-|read|-|jobOutput|-",
-          "execution-runtime|runner|-|read|-|jobOutput|-",
-          "promote|reusable-call|kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4|write|write|-|contents-write,oidc-write",
-          "reject-invalid-candidate-recovery|runner|-|read|-|-|-",
-          "reject-invalid-durable-recovery|runner|-|read|-|-|-",
-          "reject-manual-apply|runner|-|read|-|-|-"
-        ],
-        "reusableEdges": [
-          "kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4"
-        ]
-      },
-      {
-        "path": ".github/workflows/self-release-tail-dogfood.yml",
-        "triggers": ["workflow_dispatch"],
-        "jobs": [
-          "publish|reusable-call|kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4|write|write|-|contents-write,oidc-write"
-        ],
-        "reusableEdges": [
-          "kungfu-systems/buildchain/.github/workflows/public-release-promote.yml@v4"
-        ]
       }
     ],
     "metrics": {
-      "workflowCount": 34,
-      "jobCount": 95,
-      "reusableEdgeCount": 20,
-      "mutationRelevantNodeCount": 61,
-      "contentsWriteJobCount": 22,
-      "oidcWriteJobCount": 19
+      "workflowCount": 24,
+      "jobCount": 87,
+      "reusableEdgeCount": 14,
+      "mutationRelevantNodeCount": 60,
+      "contentsWriteJobCount": 29,
+      "oidcWriteJobCount": 21
     },
     "semanticMetrics": {
-      "workflowCount": 5,
-      "mutationRelevantNodeCount": 8,
+      "workflowCount": 2,
+      "mutationRelevantNodeCount": 5,
       "contentsWriteJobCount": 1,
       "oidcWriteJobCount": 1
     }
@@ -438,5 +559,141 @@
         "oidcWriteJobCount": 0
       }
     }
+  },
+  "pipelinePublicationScope": {
+    "workflowPaths": [
+      ".github/workflows/.release-pipeline-products.yml",
+      ".github/workflows/public-ops-pipeline.yml",
+      ".github/workflows/public-ops-recover.yml",
+      ".github/workflows/.ops-pipeline-execute.yml",
+      ".github/workflows/.release-pipeline-version.yml",
+      ".github/workflows/buildchain.yml",
+      ".github/workflows/buildchain-recover.yml"
+    ],
+    "authority": "retained-protected-source-qualified-sealed-products-and-live-provider-readback",
+    "maximumMetrics": {
+      "workflowCount": 7,
+      "jobCount": 23,
+      "reusableEdgeCount": 8,
+      "mutationRelevantNodeCount": 18,
+      "contentsWriteJobCount": 18,
+      "oidcWriteJobCount": 8
+    },
+    "observedTopology": {
+      "jobRecordFields": [
+        "id",
+        "kind",
+        "uses",
+        "contentsPermission",
+        "oidcPermission",
+        "carriers",
+        "mutationSignals"
+      ],
+      "workflows": [
+        {
+          "path": ".github/workflows/.release-pipeline-products.yml",
+          "triggers": ["workflow_call"],
+          "jobs": [
+            "apply|runner|-|write|write|jobOutput|contents-write,oidc-write",
+            "build|runner|-|read|-|-|-",
+            "development|reusable-call|./.github/workflows/.release-pipeline-version.yml|write|-|-|contents-write",
+            "materialize|reusable-call|./.github/workflows/.release-pipeline-version.yml|write|-|-|contents-write",
+            "prepare|runner|-|write|-|jobOutput|contents-write",
+            "qualify|runner|-|write|write|-|contents-write,oidc-write",
+            "settle|runner|-|write|write|jobOutput|contents-write,oidc-write"
+          ],
+          "reusableEdges": [
+            "./.github/workflows/.release-pipeline-version.yml",
+            "./.github/workflows/.release-pipeline-version.yml"
+          ]
+        },
+        {
+          "path": ".github/workflows/public-ops-pipeline.yml",
+          "triggers": ["workflow_call"],
+          "jobs": [
+            "control|runner|-|write|-|jobOutput|contents-write",
+            "execute|reusable-call|./.github/workflows/.ops-pipeline-execute.yml|write|write|-|contents-write,oidc-write",
+            "runtime|runner|-|read|-|jobOutput|-"
+          ],
+          "reusableEdges": ["./.github/workflows/.ops-pipeline-execute.yml"]
+        },
+        {
+          "path": ".github/workflows/public-ops-recover.yml",
+          "triggers": ["workflow_call"],
+          "jobs": [
+            "control|runner|-|write|-|jobOutput|contents-write",
+            "execute|reusable-call|./.github/workflows/.ops-pipeline-execute.yml|write|write|-|contents-write,oidc-write",
+            "runtime|runner|-|read|-|jobOutput|-"
+          ],
+          "reusableEdges": ["./.github/workflows/.ops-pipeline-execute.yml"]
+        },
+        {
+          "path": ".github/workflows/.ops-pipeline-execute.yml",
+          "triggers": ["workflow_call"],
+          "jobs": [
+            "build|runner|-|read|-|-|-",
+            "delivery|reusable-call|./.github/workflows/.ops-pipeline-delivery.yml|write|-|-|contents-write",
+            "publication|reusable-call|./.github/workflows/.release-pipeline-products.yml|write|write|-|contents-write,oidc-write",
+            "record-build|runner|-|write|-|-|contents-write",
+            "record-delivery|runner|-|write|-|-|contents-write",
+            "stable-recheck|runner|-|write|-|-|contents-write"
+          ],
+          "reusableEdges": [
+            "./.github/workflows/.ops-pipeline-delivery.yml",
+            "./.github/workflows/.release-pipeline-products.yml"
+          ]
+        },
+        {
+          "path": ".github/workflows/.release-pipeline-version.yml",
+          "triggers": ["workflow_call"],
+          "jobs": [
+            "build|runner|-|read|-|-|-",
+            "materialize|runner|-|write|-|jobOutput|contents-write"
+          ],
+          "reusableEdges": []
+        },
+        {
+          "path": ".github/workflows/buildchain.yml",
+          "triggers": [
+            "merge_group",
+            "pull_request",
+            "pull_request_review",
+            "pull_request_target",
+            "push",
+            "repository_dispatch"
+          ],
+          "jobs": [
+            "buildchain|reusable-call|kungfu-systems/buildchain/.github/workflows/public-ops-pipeline.yml@v4-alpha|write|write|-|contents-write,oidc-write"
+          ],
+          "reusableEdges": [
+            "kungfu-systems/buildchain/.github/workflows/public-ops-pipeline.yml@v4-alpha"
+          ]
+        },
+        {
+          "path": ".github/workflows/buildchain-recover.yml",
+          "triggers": ["workflow_dispatch"],
+          "jobs": [
+            "buildchain|reusable-call|kungfu-systems/buildchain/.github/workflows/public-ops-recover.yml@v4-alpha|write|write|-|contents-write,oidc-write"
+          ],
+          "reusableEdges": [
+            "kungfu-systems/buildchain/.github/workflows/public-ops-recover.yml@v4-alpha"
+          ]
+        }
+      ],
+      "metrics": {
+        "workflowCount": 7,
+        "jobCount": 23,
+        "reusableEdgeCount": 8,
+        "mutationRelevantNodeCount": 18,
+        "contentsWriteJobCount": 18,
+        "oidcWriteJobCount": 8
+      },
+      "semanticMetrics": {
+        "workflowCount": 7,
+        "mutationRelevantNodeCount": 18,
+        "contentsWriteJobCount": 10,
+        "oidcWriteJobCount": 3
+      }
+    }
   }
 }

package/architecture/stage-capsule-qualification.json

@@ -46,7 +46,9 @@
     "relativeOrSelfInvocationAllowed": false,
     "directQualificationInvocationAllowed": false,
     "candidateBranchOverrideAllowed": false,
-    "recursionRecovery": "floating-selector-with-trusted-runtime-input"
+    "recursionRecovery": "floating-selector-with-trusted-runtime-input",
+    "active": false,
+    "supersededBy": ".github/workflows/buildchain.yml"
   },
   "faultCampaign": [
     "corrupt",

package/architecture/universal-workflow-bootstrap.json

@@ -57,7 +57,9 @@
     "runtimeRecovery": "same-public-entry-with-transient-runtime",
     "entryRecovery": "upgrade-public-entry-and-full-rerun",
     "executionAuthority": "selected-runtime",
-    "entryRepairRequiresNewRelease": true
+    "entryRepairRequiresNewRelease": true,
+    "selfDogfoodActive": false,
+    "selfDogfoodSupersededBy": ".github/workflows/buildchain.yml"
   },
   "capabilityAdapters": [
     {
@@ -116,8 +118,12 @@
     ".github/workflows/.build-gate-profile.yml",
     ".github/workflows/.build.yml",
     ".github/workflows/.ops-git-sync.yml",
+    ".github/workflows/.ops-pipeline-delivery.yml",
+    ".github/workflows/.ops-pipeline-execute.yml",
     ".github/workflows/.release-authority.yml",
     ".github/workflows/.release-binary-assets.yml",
+    ".github/workflows/.release-pipeline-products.yml",
+    ".github/workflows/.release-pipeline-version.yml",
     ".github/workflows/.release-promote.yml",
     ".github/workflows/build.yml",
     ".github/workflows/public-build-adopter-qualification.yml",
@@ -135,6 +141,8 @@
     ".github/workflows/public-ops-patrol-monthly.yml",
     ".github/workflows/public-ops-patrol-weekly.yml",
     ".github/workflows/public-ops-patrol.yml",
+    ".github/workflows/public-ops-pipeline.yml",
+    ".github/workflows/public-ops-recover.yml",
     ".github/workflows/public-ops-release-governance.yml",
     ".github/workflows/public-ops-stable-candidate-patrol.yml",
     ".github/workflows/public-ops-tail-reseal.yml",
@@ -158,8 +166,12 @@
     ".github/workflows/.build-gate-profile.yml",
     ".github/workflows/.build.yml",
     ".github/workflows/.ops-git-sync.yml",
+    ".github/workflows/.ops-pipeline-delivery.yml",
+    ".github/workflows/.ops-pipeline-execute.yml",
     ".github/workflows/.release-authority.yml",
     ".github/workflows/.release-binary-assets.yml",
+    ".github/workflows/.release-pipeline-products.yml",
+    ".github/workflows/.release-pipeline-version.yml",
     ".github/workflows/.release-promote.yml",
     ".github/workflows/build.yml",
     ".github/workflows/public-build-adopter-qualification.yml",
@@ -176,6 +188,8 @@
     ".github/workflows/public-ops-patrol-monthly.yml",
     ".github/workflows/public-ops-patrol-weekly.yml",
     ".github/workflows/public-ops-patrol.yml",
+    ".github/workflows/public-ops-pipeline.yml",
+    ".github/workflows/public-ops-recover.yml",
     ".github/workflows/public-ops-release-governance.yml",
     ".github/workflows/public-ops-stable-candidate-patrol.yml",
     ".github/workflows/public-ops-tail-reseal.yml",