@kungfu-tech/buildchain 4.1.3-alpha.1 → 4.1.3-alpha.10

package/dist/site/kfd-claims.json

@@ -14,18 +14,18 @@
   },
   "runtimeContract": {
     "contract": "kungfu-buildchain-runtime-contract-world",
-    "compatibilityDigest": "sha256:14368a3f99f38a8c9c1e053f7ec3651766e3535237f4c551cc75417cf7ef97b3",
+    "compatibilityDigest": "sha256:81e32696723fe82fe29d2b2214cd56cf6c87bbeae5cff1a201de7ee7fd10ee9c",
     "majorLine": "v4"
   },
   "publicSurfaceReverseAudit": {
     "contract": "kungfu-buildchain-public-surface-reverse-audit",
     "path": "dist/site/public-surface-audit.json",
     "status": "passed",
-    "sha256": "84a65aecde602d74e6e25fba7bf418e77e421d05e863ef70ee69b58a088c43b5",
+    "sha256": "ae916786e0e6b5139735e0bbcf8eaf1536d4a78a0c6676769ebc790435951c46",
     "summary": {
       "cliCommandCount": 117,
-      "workflowCount": 67,
-      "actionCount": 268,
+      "workflowCount": 44,
+      "actionCount": 283,
       "sitePageCount": 94,
       "docCommandRefCount": 1036,
       "failureCount": 0
@@ -246,11 +246,11 @@
       "contract": "kungfu-buildchain-public-surface-reverse-audit",
       "path": "dist/site/public-surface-audit.json",
       "status": "passed",
-      "sha256": "84a65aecde602d74e6e25fba7bf418e77e421d05e863ef70ee69b58a088c43b5",
+      "sha256": "ae916786e0e6b5139735e0bbcf8eaf1536d4a78a0c6676769ebc790435951c46",
       "summary": {
         "cliCommandCount": 117,
-        "workflowCount": 67,
-        "actionCount": 268,
+        "workflowCount": 44,
+        "actionCount": 283,
         "sitePageCount": 94,
         "docCommandRefCount": 1036,
         "failureCount": 0
@@ -3864,6 +3864,44 @@
           ],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:.ops-pipeline-delivery",
+          "name": "workflow:.ops-pipeline-delivery",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/.ops-pipeline-delivery.yml",
+          "evidencePath": ".github/workflows/.ops-pipeline-delivery.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 2,
+          "inputs": [
+            "request",
+            "runtime-selection"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
+        {
+          "id": "workflow:.ops-pipeline-execute",
+          "name": "workflow:.ops-pipeline-execute",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/.ops-pipeline-execute.yml",
+          "evidencePath": ".github/workflows/.ops-pipeline-execute.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 6,
+          "inputs": [
+            "attempt",
+            "context",
+            "matrix",
+            "operation",
+            "request",
+            "runtime-selection"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:.release-authority",
           "name": "workflow:.release-authority",
@@ -3948,6 +3986,43 @@
           ],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:.release-pipeline-products",
+          "name": "workflow:.release-pipeline-products",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/.release-pipeline-products.yml",
+          "evidencePath": ".github/workflows/.release-pipeline-products.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 2,
+          "inputs": [
+            "attempt",
+            "runtime-selection"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
+        {
+          "id": "workflow:.release-pipeline-version",
+          "name": "workflow:.release-pipeline-version",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/.release-pipeline-version.yml",
+          "evidencePath": ".github/workflows/.release-pipeline-version.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 5,
+          "inputs": [
+            "context",
+            "matrix",
+            "operation",
+            "purpose",
+            "runtime-selection"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:.release-promote",
           "name": "workflow:.release-promote",
@@ -3987,6 +4062,34 @@
           ],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:buildchain-recover",
+          "name": "workflow:buildchain-recover",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/buildchain-recover.yml",
+          "evidencePath": ".github/workflows/buildchain-recover.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 0,
+          "inputs": [],
+          "reverseAuditSource": ".github/workflows"
+        },
+        {
+          "id": "workflow:buildchain",
+          "name": "workflow:buildchain",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/buildchain.yml",
+          "evidencePath": ".github/workflows/buildchain.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 0,
+          "inputs": [],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:public-build-adopter-qualification",
           "name": "workflow:public-build-adopter-qualification",
@@ -4186,7 +4289,7 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 42,
+          "inputCount": 44,
           "inputs": [
             "active-lease-context",
             "affected-paths-json",
@@ -4211,7 +4314,9 @@
             "native-command",
             "native-command-root",
             "native-heartbeat-seconds",
+            "native-platform",
             "native-proof-json",
+            "pipeline-attempt",
             "plan-root",
             "project-cut-proof-json",
             "queue-admission-context",
@@ -4419,6 +4524,39 @@
           ],
           "reverseAuditSource": ".github/workflows"
         },
+        {
+          "id": "workflow:public-ops-pipeline",
+          "name": "workflow:public-ops-pipeline",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/public-ops-pipeline.yml",
+          "evidencePath": ".github/workflows/public-ops-pipeline.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 1,
+          "inputs": [
+            "config-path"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
+        {
+          "id": "workflow:public-ops-recover",
+          "name": "workflow:public-ops-recover",
+          "kind": "workflow",
+          "sourcePath": ".github/workflows/public-ops-recover.yml",
+          "evidencePath": ".github/workflows/public-ops-recover.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 2,
+          "inputs": [
+            "attempt",
+            "runtime-ref"
+          ],
+          "reverseAuditSource": ".github/workflows"
+        },
         {
           "id": "workflow:public-ops-release-governance",
           "name": "workflow:public-ops-release-governance",
@@ -4733,488 +4871,54 @@
         },
         {
           "id": "workflow:public-release-web",
-          "name": "workflow:public-release-web",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/public-release-web.yml",
-          "evidencePath": ".github/workflows/public-release-web.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 37,
-          "inputs": [
-            "artifact-path",
-            "aws-region",
-            "build-command",
-            "contract-lock",
-            "fail-on-release-pr-error",
-            "github-governance-receipt-json",
-            "node-version",
-            "preview-apply",
-            "preview-aws-role-arn",
-            "preview-cleanup-apply",
-            "preview-comment",
-            "preview-environment",
-            "production-apply",
-            "production-approved",
-            "production-aws-role-arn",
-            "production-environment",
-            "production-release-app-client-id",
-            "production-release-branch-channel",
-            "production-release-head-prefix",
-            "production-release-label",
-            "production-release-on-main",
-            "production-release-pr-mode",
-            "production-source-sha",
-            "publication-admission-json",
-            "publication-control-plane-audit-json",
-            "publication-expected-json",
-            "publication-gate-aggregate-json",
-            "publication-runner-provenance-json",
-            "publication-used-nonces-json",
-            "release-feedback-actor-privacy",
-            "runtime-ref",
-            "runtime-selection",
-            "staging-apply",
-            "staging-aws-role-arn",
-            "staging-environment",
-            "verify-command",
-            "working-directory"
-          ],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-build-adopter-dogfood",
-          "name": "workflow:self-build-adopter-dogfood",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-build-adopter-dogfood.yml",
-          "evidencePath": ".github/workflows/self-build-adopter-dogfood.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-build-alpha-dogfood",
-          "name": "workflow:self-build-alpha-dogfood",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-build-alpha-dogfood.yml",
-          "evidencePath": ".github/workflows/self-build-alpha-dogfood.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-build-binary-distribution",
-          "name": "workflow:self-build-binary-distribution",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-build-binary-distribution.yml",
-          "evidencePath": ".github/workflows/self-build-binary-distribution.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-build-channel-verify",
-          "name": "workflow:self-build-channel-verify",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-build-channel-verify.yml",
-          "evidencePath": ".github/workflows/self-build-channel-verify.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-build-demo-dogfood",
-          "name": "workflow:self-build-demo-dogfood",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-build-demo-dogfood.yml",
-          "evidencePath": ".github/workflows/self-build-demo-dogfood.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-build-demo-media-qualification",
-          "name": "workflow:self-build-demo-media-qualification",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-build-demo-media-qualification.yml",
-          "evidencePath": ".github/workflows/self-build-demo-media-qualification.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-build-fixture",
-          "name": "workflow:self-build-fixture",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-build-fixture.yml",
-          "evidencePath": ".github/workflows/self-build-fixture.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-build-public-consumer-dogfood",
-          "name": "workflow:self-build-public-consumer-dogfood",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-build-public-consumer-dogfood.yml",
-          "evidencePath": ".github/workflows/self-build-public-consumer-dogfood.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-build-stable-candidate-qualification",
-          "name": "workflow:self-build-stable-candidate-qualification",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-build-stable-candidate-qualification.yml",
-          "evidencePath": ".github/workflows/self-build-stable-candidate-qualification.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-build-stable-dogfood",
-          "name": "workflow:self-build-stable-dogfood",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-build-stable-dogfood.yml",
-          "evidencePath": ".github/workflows/self-build-stable-dogfood.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-build-verify",
-          "name": "workflow:self-build-verify",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-build-verify.yml",
-          "evidencePath": ".github/workflows/self-build-verify.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-bootstrap-dogfood",
-          "name": "workflow:self-ops-bootstrap-dogfood",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
-          "evidencePath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-dev-delivery",
-          "name": "workflow:self-ops-dev-delivery",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-dev-delivery.yml",
-          "evidencePath": ".github/workflows/self-ops-dev-delivery.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-governance-audit",
-          "name": "workflow:self-ops-governance-audit",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-governance-audit.yml",
-          "evidencePath": ".github/workflows/self-ops-governance-audit.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-housekeeping-daily",
-          "name": "workflow:self-ops-housekeeping-daily",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-housekeeping-daily.yml",
-          "evidencePath": ".github/workflows/self-ops-housekeeping-daily.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-housekeeping-monthly",
-          "name": "workflow:self-ops-housekeeping-monthly",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-housekeeping-monthly.yml",
-          "evidencePath": ".github/workflows/self-ops-housekeeping-monthly.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-housekeeping-weekly",
-          "name": "workflow:self-ops-housekeeping-weekly",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-housekeeping-weekly.yml",
-          "evidencePath": ".github/workflows/self-ops-housekeeping-weekly.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-merge-queue",
-          "name": "workflow:self-ops-merge-queue",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-merge-queue.yml",
-          "evidencePath": ".github/workflows/self-ops-merge-queue.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-patrol-daily",
-          "name": "workflow:self-ops-patrol-daily",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-patrol-daily.yml",
-          "evidencePath": ".github/workflows/self-ops-patrol-daily.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-patrol-monthly",
-          "name": "workflow:self-ops-patrol-monthly",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-patrol-monthly.yml",
-          "evidencePath": ".github/workflows/self-ops-patrol-monthly.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-patrol-weekly",
-          "name": "workflow:self-ops-patrol-weekly",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-patrol-weekly.yml",
-          "evidencePath": ".github/workflows/self-ops-patrol-weekly.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-promotion-recovery",
-          "name": "workflow:self-ops-promotion-recovery",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-promotion-recovery.yml",
-          "evidencePath": ".github/workflows/self-ops-promotion-recovery.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-runner-smoke",
-          "name": "workflow:self-ops-runner-smoke",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-runner-smoke.yml",
-          "evidencePath": ".github/workflows/self-ops-runner-smoke.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-ops-stable-candidate-patrol",
-          "name": "workflow:self-ops-stable-candidate-patrol",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
-          "evidencePath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-release-binary-assets",
-          "name": "workflow:self-release-binary-assets",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-release-binary-assets.yml",
-          "evidencePath": ".github/workflows/self-release-binary-assets.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-release-line-open",
-          "name": "workflow:self-release-line-open",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-release-line-open.yml",
-          "evidencePath": ".github/workflows/self-release-line-open.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-release-next-development",
-          "name": "workflow:self-release-next-development",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-release-next-development.yml",
-          "evidencePath": ".github/workflows/self-release-next-development.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-release-npm-dry-run",
-          "name": "workflow:self-release-npm-dry-run",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-release-npm-dry-run.yml",
-          "evidencePath": ".github/workflows/self-release-npm-dry-run.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-release-promote",
-          "name": "workflow:self-release-promote",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-release-promote.yml",
-          "evidencePath": ".github/workflows/self-release-promote.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-release-rehearsal-dogfood",
-          "name": "workflow:self-release-rehearsal-dogfood",
-          "kind": "workflow",
-          "sourcePath": ".github/workflows/self-release-rehearsal-dogfood.yml",
-          "evidencePath": ".github/workflows/self-release-rehearsal-dogfood.yml",
-          "availability": "shipped",
-          "visibility": "public",
-          "participantFacing": true,
-          "public": true,
-          "inputCount": 0,
-          "inputs": [],
-          "reverseAuditSource": ".github/workflows"
-        },
-        {
-          "id": "workflow:self-release-tail-dogfood",
-          "name": "workflow:self-release-tail-dogfood",
+          "name": "workflow:public-release-web",
           "kind": "workflow",
-          "sourcePath": ".github/workflows/self-release-tail-dogfood.yml",
-          "evidencePath": ".github/workflows/self-release-tail-dogfood.yml",
+          "sourcePath": ".github/workflows/public-release-web.yml",
+          "evidencePath": ".github/workflows/public-release-web.yml",
           "availability": "shipped",
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 0,
-          "inputs": [],
+          "inputCount": 37,
+          "inputs": [
+            "artifact-path",
+            "aws-region",
+            "build-command",
+            "contract-lock",
+            "fail-on-release-pr-error",
+            "github-governance-receipt-json",
+            "node-version",
+            "preview-apply",
+            "preview-aws-role-arn",
+            "preview-cleanup-apply",
+            "preview-comment",
+            "preview-environment",
+            "production-apply",
+            "production-approved",
+            "production-aws-role-arn",
+            "production-environment",
+            "production-release-app-client-id",
+            "production-release-branch-channel",
+            "production-release-head-prefix",
+            "production-release-label",
+            "production-release-on-main",
+            "production-release-pr-mode",
+            "production-source-sha",
+            "publication-admission-json",
+            "publication-control-plane-audit-json",
+            "publication-expected-json",
+            "publication-gate-aggregate-json",
+            "publication-runner-provenance-json",
+            "publication-used-nonces-json",
+            "release-feedback-actor-privacy",
+            "runtime-ref",
+            "runtime-selection",
+            "staging-apply",
+            "staging-aws-role-arn",
+            "staging-environment",
+            "verify-command",
+            "working-directory"
+          ],
           "reverseAuditSource": ".github/workflows"
         },
         {
@@ -6983,11 +6687,12 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 5,
+          "inputCount": 6,
           "inputs": [
             "branch",
             "heartbeat-seconds",
             "lease-seconds",
+            "pipeline-attempt",
             "runtime-sha",
             "token"
           ],
@@ -7079,12 +6784,13 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 5,
+          "inputCount": 6,
           "inputs": [
             "branch",
             "project-cut-proof-root",
             "request-json",
             "runtime-sha",
+            "status-token",
             "token"
           ],
           "reverseAuditSource": "actions/*/action.yml"
@@ -8537,6 +8243,128 @@
           ],
           "reverseAuditSource": "actions/*/action.yml"
         },
+        {
+          "id": "action:publication/pipeline/apply",
+          "name": "action:publication/pipeline/apply",
+          "kind": "action",
+          "sourcePath": "actions/publication/pipeline/apply/action.yml",
+          "evidencePath": "actions/publication/pipeline/apply/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 2,
+          "inputs": [
+            "context",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:publication/pipeline/build",
+          "name": "action:publication/pipeline/build",
+          "kind": "action",
+          "sourcePath": "actions/publication/pipeline/build/action.yml",
+          "evidencePath": "actions/publication/pipeline/build/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 2,
+          "inputs": [
+            "context",
+            "platform"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:publication/pipeline/prepare",
+          "name": "action:publication/pipeline/prepare",
+          "kind": "action",
+          "sourcePath": "actions/publication/pipeline/prepare/action.yml",
+          "evidencePath": "actions/publication/pipeline/prepare/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 3,
+          "inputs": [
+            "attempt",
+            "definition-sha",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:publication/pipeline/prepare-qualification",
+          "name": "action:publication/pipeline/prepare-qualification",
+          "kind": "action",
+          "sourcePath": "actions/publication/pipeline/prepare-qualification/action.yml",
+          "evidencePath": "actions/publication/pipeline/prepare-qualification/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 2,
+          "inputs": [
+            "context",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:publication/pipeline/qualify",
+          "name": "action:publication/pipeline/qualify",
+          "kind": "action",
+          "sourcePath": "actions/publication/pipeline/qualify/action.yml",
+          "evidencePath": "actions/publication/pipeline/qualify/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 2,
+          "inputs": [
+            "context",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:publication/pipeline/seal-qualification",
+          "name": "action:publication/pipeline/seal-qualification",
+          "kind": "action",
+          "sourcePath": "actions/publication/pipeline/seal-qualification/action.yml",
+          "evidencePath": "actions/publication/pipeline/seal-qualification/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 3,
+          "inputs": [
+            "bundle-path",
+            "context",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:publication/pipeline/settle",
+          "name": "action:publication/pipeline/settle",
+          "kind": "action",
+          "sourcePath": "actions/publication/pipeline/settle/action.yml",
+          "evidencePath": "actions/publication/pipeline/settle/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 3,
+          "inputs": [
+            "context",
+            "pr-token",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
         {
           "id": "action:publication/settlement/retain",
           "name": "action:publication/settlement/retain",
@@ -8573,6 +8401,59 @@
           ],
           "reverseAuditSource": "actions/*/action.yml"
         },
+        {
+          "id": "action:publication/version/build",
+          "name": "action:publication/version/build",
+          "kind": "action",
+          "sourcePath": "actions/publication/version/build/action.yml",
+          "evidencePath": "actions/publication/version/build/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 2,
+          "inputs": [
+            "context",
+            "platform"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:publication/version/materialize-development",
+          "name": "action:publication/version/materialize-development",
+          "kind": "action",
+          "sourcePath": "actions/publication/version/materialize-development/action.yml",
+          "evidencePath": "actions/publication/version/materialize-development/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 3,
+          "inputs": [
+            "context",
+            "pr-token",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:publication/version/materialize-publication",
+          "name": "action:publication/version/materialize-publication",
+          "kind": "action",
+          "sourcePath": "actions/publication/version/materialize-publication/action.yml",
+          "evidencePath": "actions/publication/version/materialize-publication/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 3,
+          "inputs": [
+            "context",
+            "operation",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
         {
           "id": "action:release/binary/coordinates",
           "name": "action:release/binary/coordinates",
@@ -9667,9 +9548,11 @@
           "visibility": "public",
           "participantFacing": true,
           "public": true,
-          "inputCount": 9,
+          "inputCount": 11,
           "inputs": [
             "contract-lock",
+            "pipeline-attempt",
+            "recovery-attempt",
             "resume-run-id",
             "runtime-ref",
             "selection",
@@ -10364,6 +10247,95 @@
           ],
           "reverseAuditSource": "actions/*/action.yml"
         },
+        {
+          "id": "action:workflow/pipeline/build",
+          "name": "action:workflow/pipeline/build",
+          "kind": "action",
+          "sourcePath": "actions/workflow/pipeline/build/action.yml",
+          "evidencePath": "actions/workflow/pipeline/build/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 2,
+          "inputs": [
+            "context",
+            "platform"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:workflow/pipeline/control",
+          "name": "action:workflow/pipeline/control",
+          "kind": "action",
+          "sourcePath": "actions/workflow/pipeline/control/action.yml",
+          "evidencePath": "actions/workflow/pipeline/control/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 3,
+          "inputs": [
+            "config-path",
+            "queue-token",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:workflow/pipeline/record-build",
+          "name": "action:workflow/pipeline/record-build",
+          "kind": "action",
+          "sourcePath": "actions/workflow/pipeline/record-build/action.yml",
+          "evidencePath": "actions/workflow/pipeline/record-build/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 2,
+          "inputs": [
+            "context",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:workflow/pipeline/recover",
+          "name": "action:workflow/pipeline/recover",
+          "kind": "action",
+          "sourcePath": "actions/workflow/pipeline/recover/action.yml",
+          "evidencePath": "actions/workflow/pipeline/recover/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 4,
+          "inputs": [
+            "attempt",
+            "definition-sha",
+            "queue-token",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
+        {
+          "id": "action:workflow/pipeline/wake",
+          "name": "action:workflow/pipeline/wake",
+          "kind": "action",
+          "sourcePath": "actions/workflow/pipeline/wake/action.yml",
+          "evidencePath": "actions/workflow/pipeline/wake/action.yml",
+          "availability": "shipped",
+          "visibility": "public",
+          "participantFacing": true,
+          "public": true,
+          "inputCount": 3,
+          "inputs": [
+            "attempt",
+            "stable-wait",
+            "token"
+          ],
+          "reverseAuditSource": "actions/*/action.yml"
+        },
         {
           "id": "action:workflow/settlement/seal",
           "name": "action:workflow/settlement/seal",
@@ -11546,11 +11518,44 @@
         "public": true
       },
       {
-        "id": "control:.github/workflows/self-release-promote.yml",
-        "name": "control:.github/workflows/self-release-promote.yml",
+        "id": "control:.github/workflows/buildchain.yml",
+        "name": "control:.github/workflows/buildchain.yml",
+        "kind": "workflow",
+        "sourcePath": ".github/workflows/buildchain.yml",
+        "evidencePath": ".github/workflows/buildchain.yml",
+        "availability": "shipped",
+        "visibility": "public",
+        "participantFacing": true,
+        "public": true
+      },
+      {
+        "id": "control:.github/workflows/buildchain-recover.yml",
+        "name": "control:.github/workflows/buildchain-recover.yml",
+        "kind": "workflow",
+        "sourcePath": ".github/workflows/buildchain-recover.yml",
+        "evidencePath": ".github/workflows/buildchain-recover.yml",
+        "availability": "shipped",
+        "visibility": "public",
+        "participantFacing": true,
+        "public": true
+      },
+      {
+        "id": "control:.github/workflows/public-ops-pipeline.yml",
+        "name": "control:.github/workflows/public-ops-pipeline.yml",
+        "kind": "workflow",
+        "sourcePath": ".github/workflows/public-ops-pipeline.yml",
+        "evidencePath": ".github/workflows/public-ops-pipeline.yml",
+        "availability": "shipped",
+        "visibility": "public",
+        "participantFacing": true,
+        "public": true
+      },
+      {
+        "id": "control:.github/workflows/public-ops-recover.yml",
+        "name": "control:.github/workflows/public-ops-recover.yml",
         "kind": "workflow",
-        "sourcePath": ".github/workflows/self-release-promote.yml",
-        "evidencePath": ".github/workflows/self-release-promote.yml",
+        "sourcePath": ".github/workflows/public-ops-recover.yml",
+        "evidencePath": ".github/workflows/public-ops-recover.yml",
         "availability": "shipped",
         "visibility": "public",
         "participantFacing": true,
@@ -11649,7 +11654,7 @@
         "name": "Buildchain standalone binary distribution",
         "kind": "binary-distribution",
         "sourcePath": "scripts/build-standalone-binary.mjs",
-        "evidencePath": ".github/workflows/self-build-binary-distribution.yml",
+        "evidencePath": ".github/workflows/.release-pipeline-products.yml",
         "availability": "shipped",
         "visibility": "public",
         "participantFacing": true,
@@ -11680,6 +11685,6 @@
         }
       }
     ],
-    "publicSurfaceCount": 733
+    "publicSurfaceCount": 728
   }
 }