@kungfu-tech/buildchain 4.1.3-alpha.1 → 4.1.3-alpha.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (263) hide show
  1. package/AGENTS.md +41 -75
  2. package/CONTRIBUTING.md +19 -26
  3. package/architecture/action-taxonomy.json +24 -0
  4. package/architecture/agent-change-map.md +266 -10
  5. package/architecture/capability-state-machine-manifest.json +1 -4
  6. package/architecture/ci-lane-change-budget.json +190 -807
  7. package/architecture/core-mechanisms.json +3 -6
  8. package/architecture/decisions/0005-minimal-consumer-contract.md +122 -0
  9. package/architecture/decisions/0006-business-attempt-journal.md +89 -0
  10. package/architecture/decisions/0007-hosted-pipeline-controller.md +106 -0
  11. package/architecture/decisions/0008-pipeline-product-publication.md +120 -0
  12. package/architecture/decisions/0009-pipeline-version-preparation.md +186 -0
  13. package/architecture/internal-capabilities.json +362 -7
  14. package/architecture/maintainability-debt.json +50 -34
  15. package/architecture/maintainability-policy.json +8 -8
  16. package/architecture/minimal-consumer-migration.json +5670 -0
  17. package/architecture/platform-stage-checkpoints.json +31 -7
  18. package/architecture/product-upstreams.json +20 -0
  19. package/architecture/release-topology.json +328 -74
  20. package/architecture/stage-capsule-qualification.json +3 -1
  21. package/architecture/universal-workflow-bootstrap.json +15 -1
  22. package/architecture/universal-workflow-capability-policy.json +4 -4
  23. package/architecture/universal-workflow-fault-campaign.json +3 -1
  24. package/architecture/workflow-taxonomy.json +77 -328
  25. package/dist/readers/business-attempt.cjs +809 -0
  26. package/dist/site/buildchain-contract.json +16 -68
  27. package/dist/site/buildchain-site.json +40 -25
  28. package/dist/site/capability-registry.json +4 -4
  29. package/dist/site/controller-registry.json +1 -47
  30. package/dist/site/kfd-claims.json +499 -494
  31. package/dist/site/kfd-upstream-aggregate.json +1 -1
  32. package/dist/site/manual-registry.json +3 -3
  33. package/dist/site/node-api-registry.json +54 -54
  34. package/dist/site/page-registry.json +33 -18
  35. package/dist/site/public-surface-audit.json +286 -349
  36. package/dist/site/publication-authority-registry.json +203 -523
  37. package/dist/site/publication-registry.json +4 -4
  38. package/dist/site/site-manifest.json +7 -7
  39. package/dist/site/workflow-registry.json +590 -940
  40. package/docs/code-organization.md +9 -6
  41. package/docs/node-api-reference.md +102 -102
  42. package/docs/release-governance.md +10 -12
  43. package/docs/runtime-entry.md +73 -5
  44. package/docs/runtime-train-validation.md +39 -11
  45. package/docs/stable-candidate-patrol.md +6 -5
  46. package/docs/workflow-catalog.md +9 -32
  47. package/package.json +4 -3
  48. package/packages/core/adoption/buildchain-kfd-claims.js +7 -7
  49. package/packages/core/build/standalone/build.js +7 -1
  50. package/packages/core/consumer/buildchain-config.js +2 -21
  51. package/packages/core/consumer/contract/entries.js +85 -0
  52. package/packages/core/consumer/contract/examples.js +96 -0
  53. package/packages/core/consumer/contract/identity.js +65 -0
  54. package/packages/core/consumer/contract/inspection.js +45 -0
  55. package/packages/core/consumer/contract/plan.js +149 -0
  56. package/packages/core/consumer/contract/products.js +119 -0
  57. package/packages/core/consumer/contract/reader.js +47 -0
  58. package/packages/core/consumer/contract/shape.js +46 -0
  59. package/packages/core/dev-delivery/candidate/admission.js +9 -5
  60. package/packages/core/dev-delivery/candidate/reservation.js +11 -0
  61. package/packages/core/dev-delivery/candidate/source-paths.js +12 -4
  62. package/packages/core/dev-delivery/commands/project-cut-merge-queue-admission.mjs +47 -20
  63. package/packages/core/dev-delivery/dev-delivery-provider-heartbeat.js +18 -15
  64. package/packages/core/dev-delivery/native/actions.js +9 -1
  65. package/packages/core/dev-delivery/native/heartbeat-action.js +16 -0
  66. package/packages/core/dev-delivery/native/heartbeat.js +6 -4
  67. package/packages/core/dev-delivery/native/process-entry.js +19 -0
  68. package/packages/core/dev-delivery/queue/landing-action.js +53 -0
  69. package/packages/core/dev-delivery/warrant/failure-settlement.js +8 -6
  70. package/packages/core/dev-delivery/warrant/service.js +7 -0
  71. package/packages/core/governance/buildchain-publication-authority.js +8 -23
  72. package/packages/core/governance/github-governance-authority.js +1 -0
  73. package/packages/core/observability/controller-evidence.js +0 -8
  74. package/packages/core/paper/operations/bootstrap.js +2 -0
  75. package/packages/core/paper/paper-npm-bootstrap.js +2 -2
  76. package/packages/core/providers/github/attempt-index.js +60 -0
  77. package/packages/core/providers/github/attempt-journal.js +154 -0
  78. package/packages/core/providers/github/discussions/materials.js +19 -6
  79. package/packages/core/providers/github/pipeline-checkout.js +49 -0
  80. package/packages/core/providers/github/pipeline-entry-runs.js +210 -0
  81. package/packages/core/providers/github/pipeline-events.js +131 -0
  82. package/packages/core/providers/github/pipeline-integration.js +95 -0
  83. package/packages/core/providers/github/pipeline-policy.js +240 -0
  84. package/packages/core/providers/github/pipeline-product-payload.js +50 -0
  85. package/packages/core/providers/github/pipeline-product-release.js +198 -0
  86. package/packages/core/providers/github/pipeline-publication-artifacts.js +153 -0
  87. package/packages/core/providers/github/pipeline-release-evidence.js +30 -0
  88. package/packages/core/providers/github/pipeline-run-entry.js +86 -0
  89. package/packages/core/providers/github/pipeline-runs.js +132 -0
  90. package/packages/core/providers/github/pipeline-source.js +195 -0
  91. package/packages/core/providers/github/pipeline-stable-baseline.js +86 -0
  92. package/packages/core/providers/github/pipeline-stable-source.js +372 -0
  93. package/packages/core/providers/github/pipeline-version-artifacts.js +91 -0
  94. package/packages/core/providers/github/pipeline-version-readback.js +117 -0
  95. package/packages/core/providers/github/pipeline-version.js +199 -0
  96. package/packages/core/providers/github/pipeline-worker.js +108 -0
  97. package/packages/core/providers/github/release-evidence-assets.js +97 -0
  98. package/packages/core/publication/candidate/registry-hydration.js +2 -2
  99. package/packages/core/publication/npm/pack-preview.js +2 -2
  100. package/packages/core/publication/npm/pack-result.js +31 -0
  101. package/packages/core/publication/npm/package.js +3 -6
  102. package/packages/core/publication/npm/pipeline-channel.js +36 -0
  103. package/packages/core/publication/npm/pipeline-provider.js +137 -0
  104. package/packages/core/publication/npm/registry.js +12 -9
  105. package/packages/core/publication/pipeline/actions.js +116 -0
  106. package/packages/core/publication/pipeline/apply.js +189 -0
  107. package/packages/core/publication/pipeline/build-segments.js +107 -0
  108. package/packages/core/publication/pipeline/capsules.js +92 -0
  109. package/packages/core/publication/pipeline/context.js +39 -0
  110. package/packages/core/publication/pipeline/development-anchor.js +91 -0
  111. package/packages/core/publication/pipeline/development-current.js +63 -0
  112. package/packages/core/publication/pipeline/development-pr.js +112 -0
  113. package/packages/core/publication/pipeline/development-proof.js +76 -0
  114. package/packages/core/publication/pipeline/development-transition.js +112 -0
  115. package/packages/core/publication/pipeline/distribution.js +130 -0
  116. package/packages/core/publication/pipeline/documents.js +192 -0
  117. package/packages/core/publication/pipeline/effects.js +192 -0
  118. package/packages/core/publication/pipeline/files.js +66 -0
  119. package/packages/core/publication/pipeline/imported-materials.js +32 -0
  120. package/packages/core/publication/pipeline/journal.js +122 -0
  121. package/packages/core/publication/pipeline/next-development.js +117 -0
  122. package/packages/core/publication/pipeline/pack.js +180 -0
  123. package/packages/core/publication/pipeline/package-policy.js +22 -0
  124. package/packages/core/publication/pipeline/plan.js +136 -0
  125. package/packages/core/publication/pipeline/prepare.js +139 -0
  126. package/packages/core/publication/pipeline/qualification.js +175 -0
  127. package/packages/core/publication/pipeline/qualify.js +104 -0
  128. package/packages/core/publication/pipeline/recovery-admission.js +122 -0
  129. package/packages/core/publication/pipeline/recovery-build-download.js +80 -0
  130. package/packages/core/publication/pipeline/recovery-build-plan.js +122 -0
  131. package/packages/core/publication/pipeline/recovery-build-readback.js +68 -0
  132. package/packages/core/publication/pipeline/recovery-capsules.js +54 -0
  133. package/packages/core/publication/pipeline/recovery-import.js +80 -0
  134. package/packages/core/publication/pipeline/recovery-inspection.js +218 -0
  135. package/packages/core/publication/pipeline/recovery-materials.js +104 -0
  136. package/packages/core/publication/pipeline/recovery-plan.js +46 -0
  137. package/packages/core/publication/pipeline/recovery-prepare.js +73 -0
  138. package/packages/core/publication/pipeline/recovery-qualification.js +128 -0
  139. package/packages/core/publication/pipeline/recovery-readback.js +56 -0
  140. package/packages/core/publication/pipeline/recovery-signing.js +58 -0
  141. package/packages/core/publication/pipeline/sealed-products.js +79 -0
  142. package/packages/core/publication/pipeline/settle.js +42 -0
  143. package/packages/core/publication/pipeline/signing.js +140 -0
  144. package/packages/core/publication/pipeline/source-plan.js +83 -0
  145. package/packages/core/publication/pipeline/stable-entry.js +219 -0
  146. package/packages/core/publication/pipeline/stable-products.js +317 -0
  147. package/packages/core/publication/pipeline/stable-wait.js +170 -0
  148. package/packages/core/publication/pipeline/stable.js +82 -0
  149. package/packages/core/publication/pipeline/version-actions.js +93 -0
  150. package/packages/core/publication/pipeline/version-build.js +130 -0
  151. package/packages/core/publication/pipeline/version-context.js +143 -0
  152. package/packages/core/publication/pipeline/version-material.js +36 -0
  153. package/packages/core/publication/pipeline/version-preparation.js +69 -0
  154. package/packages/core/publication/pipeline/version-regeneration.js +162 -0
  155. package/packages/core/publication/pipeline/version-source-guard.js +69 -0
  156. package/packages/core/publication/pipeline/version.js +81 -0
  157. package/packages/core/publication/pipeline/worker.js +72 -0
  158. package/packages/core/publication/publication-reproducibility.js +2 -2
  159. package/packages/core/release/next-development-transition.js +15 -15
  160. package/packages/core/release/promote-candidate/product-provider-adapters.js +4 -3
  161. package/packages/core/release/promote-ref/internal/npm-existing-evidence.js +2 -1
  162. package/packages/core/release/promote-ref/internal/publish-command.js +16 -5
  163. package/packages/core/release/stable-release-gate.js +11 -0
  164. package/packages/core/runtime/buildchain-domain.wasm +0 -0
  165. package/packages/core/runtime/domain-wasm-artifact.js +2 -2
  166. package/packages/core/runtime/entry/actions.js +27 -25
  167. package/packages/core/runtime/entry/attempt.js +25 -0
  168. package/packages/core/runtime/entry/selection.js +14 -0
  169. package/packages/core/runtime/entry/source.js +62 -0
  170. package/packages/core/workflow/attempt/identity.js +170 -0
  171. package/packages/core/workflow/attempt/journal.js +89 -0
  172. package/packages/core/workflow/attempt/materials.js +72 -0
  173. package/packages/core/workflow/attempt/reader-entry.js +12 -0
  174. package/packages/core/workflow/attempt/reader.js +149 -0
  175. package/packages/core/workflow/attempt/records.js +153 -0
  176. package/packages/core/workflow/attempt/store.js +75 -0
  177. package/packages/core/workflow/commands/pipeline-build.mjs +23 -0
  178. package/packages/core/workflow/pipeline/action-output.js +11 -0
  179. package/packages/core/workflow/pipeline/actions.js +52 -0
  180. package/packages/core/workflow/pipeline/build-control.js +140 -0
  181. package/packages/core/workflow/pipeline/build-evidence.js +210 -0
  182. package/packages/core/workflow/pipeline/build-qualification.js +145 -0
  183. package/packages/core/workflow/pipeline/build-result.js +78 -0
  184. package/packages/core/workflow/pipeline/build.js +142 -0
  185. package/packages/core/workflow/pipeline/cancellation.js +169 -0
  186. package/packages/core/workflow/pipeline/channel-control.js +157 -0
  187. package/packages/core/workflow/pipeline/channel-source.js +53 -0
  188. package/packages/core/workflow/pipeline/controller.js +141 -0
  189. package/packages/core/workflow/pipeline/delivery-control.js +249 -0
  190. package/packages/core/workflow/pipeline/delivery-observation.js +124 -0
  191. package/packages/core/workflow/pipeline/delivery-request.js +198 -0
  192. package/packages/core/workflow/pipeline/events.js +84 -0
  193. package/packages/core/workflow/pipeline/fence.js +42 -0
  194. package/packages/core/workflow/pipeline/group-control.js +59 -0
  195. package/packages/core/workflow/pipeline/guard-build.js +74 -0
  196. package/packages/core/workflow/pipeline/guard.js +158 -0
  197. package/packages/core/workflow/pipeline/host.js +144 -0
  198. package/packages/core/workflow/pipeline/integration-status.js +113 -0
  199. package/packages/core/workflow/pipeline/materials.js +58 -0
  200. package/packages/core/workflow/pipeline/notifications.js +36 -0
  201. package/packages/core/workflow/pipeline/parent-notification.js +27 -0
  202. package/packages/core/workflow/pipeline/platforms.js +21 -0
  203. package/packages/core/workflow/pipeline/progress.js +108 -0
  204. package/packages/core/workflow/pipeline/projection.js +20 -0
  205. package/packages/core/workflow/pipeline/reconcile.js +194 -0
  206. package/packages/core/workflow/pipeline/record-action.js +27 -0
  207. package/packages/core/workflow/pipeline/recorder-status.js +69 -0
  208. package/packages/core/workflow/pipeline/recovery-action.js +30 -0
  209. package/packages/core/workflow/pipeline/recovery-admission.js +122 -0
  210. package/packages/core/workflow/pipeline/recovery-build-control.js +95 -0
  211. package/packages/core/workflow/pipeline/recovery-build-evidence.js +71 -0
  212. package/packages/core/workflow/pipeline/recovery-build.js +121 -0
  213. package/packages/core/workflow/pipeline/recovery-controller.js +91 -0
  214. package/packages/core/workflow/pipeline/recovery-integration.js +79 -0
  215. package/packages/core/workflow/pipeline/recovery-merge-proof.js +90 -0
  216. package/packages/core/workflow/pipeline/recovery-ownership-settlement.js +150 -0
  217. package/packages/core/workflow/pipeline/recovery-ownership.js +91 -0
  218. package/packages/core/workflow/pipeline/recovery-plan.js +126 -0
  219. package/packages/core/workflow/pipeline/recovery-runtime.js +68 -0
  220. package/packages/core/workflow/pipeline/recovery-session.js +129 -0
  221. package/packages/core/workflow/pipeline/recovery-transition.js +135 -0
  222. package/packages/core/workflow/pipeline/recovery-unrecorded-build.js +74 -0
  223. package/packages/core/workflow/pipeline/runtime-source.js +111 -0
  224. package/packages/core/workflow/pipeline/selection.js +111 -0
  225. package/packages/core/workflow/pipeline/session.js +72 -0
  226. package/packages/core/workflow/pipeline/settlement.js +137 -0
  227. package/packages/core/workflow/pipeline/wake.js +38 -0
  228. package/packages/core/workflow/pipeline/web-status.js +108 -0
  229. package/packages/core/workflow/workflow-taxonomy.mjs +67 -47
  230. package/scripts/build-release-discussion-reader.mjs +11 -7
  231. package/scripts/check-inventory.mjs +7 -70
  232. package/scripts/check-pipeline-publication-topology.mjs +50 -0
  233. package/scripts/check-public-dogfood-contract.mjs +38 -51
  234. package/scripts/check-release-topology.mjs +15 -8
  235. package/scripts/check-self-consumer-contract.mjs +133 -0
  236. package/scripts/check-universal-workflow-bootstrap.mjs +4 -6
  237. package/scripts/generate-minimal-consumer-contract.mjs +155 -0
  238. package/scripts/generate-site-bundle.mjs +1 -1
  239. package/scripts/inventory/binary.mjs +9 -19
  240. package/scripts/inventory/promotion.mjs +2 -13
  241. package/scripts/prepare-product-toolchain.mjs +10 -0
  242. package/scripts/verify-golden-path.mjs +5 -1
  243. package/scripts/verify-product-platform.mjs +65 -0
  244. package/scripts/verify-standalone-product.mjs +42 -0
  245. package/templates/minimal-consumer/binary/.buildchain/buildchain.toml +45 -0
  246. package/templates/minimal-consumer/binary/.github/workflows/buildchain-recover.yml +30 -0
  247. package/templates/minimal-consumer/binary/.github/workflows/buildchain.yml +28 -0
  248. package/templates/minimal-consumer/binary/package.json +6 -0
  249. package/templates/minimal-consumer/binary/src/build.mjs +5 -0
  250. package/templates/minimal-consumer/binary/src/hello.c +2 -0
  251. package/templates/minimal-consumer/binary/src/verify.mjs +3 -0
  252. package/templates/minimal-consumer/npm/.buildchain/buildchain.toml +46 -0
  253. package/templates/minimal-consumer/npm/.github/workflows/buildchain-recover.yml +30 -0
  254. package/templates/minimal-consumer/npm/.github/workflows/buildchain.yml +28 -0
  255. package/templates/minimal-consumer/npm/package.json +6 -0
  256. package/templates/minimal-consumer/npm/src/build.mjs +5 -0
  257. package/templates/minimal-consumer/npm/src/verify.mjs +3 -0
  258. package/templates/minimal-consumer/paper/.buildchain/buildchain.toml +45 -0
  259. package/templates/minimal-consumer/paper/.github/workflows/buildchain-recover.yml +30 -0
  260. package/templates/minimal-consumer/paper/.github/workflows/buildchain.yml +28 -0
  261. package/templates/minimal-consumer/paper/package.json +6 -0
  262. package/templates/minimal-consumer/paper/src/build.mjs +12 -0
  263. package/templates/minimal-consumer/paper/src/verify.mjs +3 -0
@@ -1613,925 +1613,381 @@
1613
1613
  }
1614
1614
  },
1615
1615
  {
1616
- "laneId": ".github/workflows/self-build-adopter-dogfood.yml#dogfood",
1617
- "authorityClass": "governed-delegation",
1618
- "triggerClass": "manual",
1619
- "concurrencyPolicy": {
1620
- "mode": "none",
1621
- "cancelInProgress": false
1622
- },
1623
- "expectedRunnerMinutes": 360,
1624
- "cancellationBehavior": "provider-default",
1625
- "sloImpact": {
1626
- "mergeCritical": false,
1627
- "metric": "capability execution budget",
1628
- "expectedContributionSeconds": 0,
1629
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1630
- }
1631
- },
1632
- {
1633
- "laneId": ".github/workflows/self-build-alpha-dogfood.yml#alpha-consumer",
1634
- "authorityClass": "governed-delegation",
1635
- "triggerClass": "mixed",
1636
- "concurrencyPolicy": {
1637
- "mode": "ref-scoped",
1638
- "cancelInProgress": false
1639
- },
1640
- "expectedRunnerMinutes": 360,
1641
- "cancellationBehavior": "finish-started",
1642
- "sloImpact": {
1643
- "mergeCritical": false,
1644
- "metric": "capability execution budget",
1645
- "expectedContributionSeconds": 0,
1646
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1647
- }
1648
- },
1649
- {
1650
- "laneId": ".github/workflows/self-build-binary-distribution.yml#binary",
1651
- "authorityClass": "evidence",
1652
- "triggerClass": "mixed",
1653
- "concurrencyPolicy": {
1654
- "mode": "none",
1655
- "cancelInProgress": false
1656
- },
1657
- "expectedRunnerMinutes": 360,
1658
- "cancellationBehavior": "provider-default",
1659
- "sloImpact": {
1660
- "mergeCritical": false,
1661
- "metric": "capability execution budget",
1662
- "expectedContributionSeconds": 0,
1663
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1664
- }
1665
- },
1666
- {
1667
- "laneId": ".github/workflows/self-build-binary-distribution.yml#dispatch-publication",
1668
- "authorityClass": "evidence",
1669
- "triggerClass": "mixed",
1670
- "concurrencyPolicy": {
1671
- "mode": "none",
1672
- "cancelInProgress": false
1673
- },
1674
- "expectedRunnerMinutes": 360,
1675
- "cancellationBehavior": "provider-default",
1676
- "sloImpact": {
1677
- "mergeCritical": false,
1678
- "metric": "capability execution budget",
1679
- "expectedContributionSeconds": 0,
1680
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1681
- }
1682
- },
1683
- {
1684
- "laneId": ".github/workflows/self-build-binary-distribution.yml#passport",
1685
- "authorityClass": "evidence",
1686
- "triggerClass": "mixed",
1687
- "concurrencyPolicy": {
1688
- "mode": "none",
1689
- "cancelInProgress": false
1690
- },
1691
- "expectedRunnerMinutes": 45,
1692
- "cancellationBehavior": "provider-default",
1693
- "sloImpact": {
1694
- "mergeCritical": false,
1695
- "metric": "capability execution budget",
1696
- "expectedContributionSeconds": 0,
1697
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1698
- }
1699
- },
1700
- {
1701
- "laneId": ".github/workflows/self-build-binary-distribution.yml#preflight",
1702
- "authorityClass": "evidence",
1703
- "triggerClass": "mixed",
1704
- "concurrencyPolicy": {
1705
- "mode": "none",
1706
- "cancelInProgress": false
1707
- },
1708
- "expectedRunnerMinutes": 360,
1709
- "cancellationBehavior": "provider-default",
1710
- "sloImpact": {
1711
- "mergeCritical": false,
1712
- "metric": "capability execution budget",
1713
- "expectedContributionSeconds": 0,
1714
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1715
- }
1716
- },
1717
- {
1718
- "laneId": ".github/workflows/self-build-channel-verify.yml#verify",
1616
+ "laneId": ".github/workflows/.ops-pipeline-delivery.yml#delivery",
1719
1617
  "authorityClass": "merge-critical-admission",
1720
- "triggerClass": "pull-request",
1618
+ "triggerClass": "reusable",
1721
1619
  "concurrencyPolicy": {
1722
1620
  "mode": "none",
1723
1621
  "cancelInProgress": false
1724
1622
  },
1725
1623
  "expectedRunnerMinutes": 360,
1726
- "cancellationBehavior": "provider-default",
1727
- "sloImpact": {
1728
- "mergeCritical": true,
1729
- "metric": "protected delivery dependency budget",
1730
- "expectedContributionSeconds": 21600,
1731
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1732
- }
1733
- },
1734
- {
1735
- "laneId": ".github/workflows/self-build-demo-dogfood.yml#dogfood",
1736
- "authorityClass": "governed-delegation",
1737
- "triggerClass": "mixed",
1738
- "concurrencyPolicy": {
1739
- "mode": "ref-scoped",
1740
- "cancelInProgress": false
1741
- },
1742
- "expectedRunnerMinutes": 360,
1743
- "cancellationBehavior": "finish-started",
1744
- "sloImpact": {
1745
- "mergeCritical": false,
1746
- "metric": "capability execution budget",
1747
- "expectedContributionSeconds": 0,
1748
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1749
- }
1750
- },
1751
- {
1752
- "laneId": ".github/workflows/self-build-demo-dogfood.yml#exact-binary",
1753
- "authorityClass": "evidence",
1754
- "triggerClass": "mixed",
1755
- "concurrencyPolicy": {
1756
- "mode": "ref-scoped",
1757
- "cancelInProgress": false
1758
- },
1759
- "expectedRunnerMinutes": 20,
1760
1624
  "cancellationBehavior": "finish-started",
1761
- "sloImpact": {
1762
- "mergeCritical": false,
1763
- "metric": "capability execution budget",
1764
- "expectedContributionSeconds": 0,
1765
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1766
- }
1767
- },
1768
- {
1769
- "laneId": ".github/workflows/self-build-demo-media-qualification.yml#qualify",
1770
- "authorityClass": "merge-critical-admission",
1771
- "triggerClass": "mixed",
1772
- "concurrencyPolicy": {
1773
- "mode": "none",
1774
- "cancelInProgress": false
1775
- },
1776
- "expectedRunnerMinutes": 20,
1777
- "cancellationBehavior": "provider-default",
1778
- "sloImpact": {
1779
- "mergeCritical": true,
1780
- "metric": "protected delivery dependency budget",
1781
- "expectedContributionSeconds": 1200,
1782
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1783
- }
1784
- },
1785
- {
1786
- "laneId": ".github/workflows/self-build-fixture.yml#buildchain-package-candidate",
1787
- "authorityClass": "merge-critical-admission",
1788
- "triggerClass": "mixed",
1789
- "concurrencyPolicy": {
1790
- "mode": "none",
1791
- "cancelInProgress": false
1792
- },
1793
- "expectedRunnerMinutes": 360,
1794
- "cancellationBehavior": "provider-default",
1795
- "sloImpact": {
1796
- "mergeCritical": true,
1797
- "metric": "protected delivery dependency budget",
1798
- "expectedContributionSeconds": 21600,
1799
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1800
- }
1801
- },
1802
- {
1803
- "laneId": ".github/workflows/self-build-fixture.yml#libnode-shaped",
1804
- "authorityClass": "governed-delegation",
1805
- "triggerClass": "mixed",
1806
- "concurrencyPolicy": {
1807
- "mode": "none",
1808
- "cancelInProgress": false
1809
- },
1810
- "expectedRunnerMinutes": 360,
1811
- "cancellationBehavior": "provider-default",
1812
- "sloImpact": {
1813
- "mergeCritical": true,
1814
- "metric": "protected delivery dependency budget",
1815
- "expectedContributionSeconds": 21600,
1816
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1817
- }
1818
- },
1819
- {
1820
- "laneId": ".github/workflows/self-build-public-consumer-dogfood.yml#dogfood",
1821
- "authorityClass": "governed-delegation",
1822
- "triggerClass": "mixed",
1823
- "concurrencyPolicy": {
1824
- "mode": "none",
1825
- "cancelInProgress": false
1826
- },
1827
- "expectedRunnerMinutes": 360,
1828
- "cancellationBehavior": "provider-default",
1829
1625
  "sloImpact": {
1830
1626
  "mergeCritical": true,
1831
- "metric": "protected delivery dependency budget",
1627
+ "metric": "minimal pipeline bounded hosted execution",
1832
1628
  "expectedContributionSeconds": 21600,
1833
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1629
+ "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
1834
1630
  }
1835
1631
  },
1836
1632
  {
1837
- "laneId": ".github/workflows/self-build-stable-candidate-qualification.yml#qualify",
1633
+ "laneId": ".github/workflows/public-ops-pipeline.yml#runtime",
1838
1634
  "authorityClass": "evidence",
1839
- "triggerClass": "mixed",
1840
- "concurrencyPolicy": {
1841
- "mode": "ref-scoped",
1842
- "cancelInProgress": false
1843
- },
1844
- "expectedRunnerMinutes": 360,
1845
- "cancellationBehavior": "finish-started",
1846
- "sloImpact": {
1847
- "mergeCritical": false,
1848
- "metric": "capability execution budget",
1849
- "expectedContributionSeconds": 0,
1850
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1851
- }
1852
- },
1853
- {
1854
- "laneId": ".github/workflows/self-build-stable-dogfood.yml#stable-consumer",
1855
- "authorityClass": "governed-delegation",
1856
- "triggerClass": "mixed",
1635
+ "triggerClass": "reusable",
1857
1636
  "concurrencyPolicy": {
1858
- "mode": "ref-scoped",
1637
+ "mode": "none",
1859
1638
  "cancelInProgress": false
1860
1639
  },
1861
- "expectedRunnerMinutes": 20,
1640
+ "expectedRunnerMinutes": 5,
1862
1641
  "cancellationBehavior": "finish-started",
1863
1642
  "sloImpact": {
1864
1643
  "mergeCritical": false,
1865
- "metric": "Published stable TOML build qualification latency",
1866
- "expectedContributionSeconds": 0,
1867
- "rationale": "Independent thin public stable fixture caller permits producer-first channel upgrades without duplicating build orchestration."
1644
+ "metric": "minimal pipeline bounded hosted execution",
1645
+ "expectedContributionSeconds": 300,
1646
+ "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
1868
1647
  }
1869
1648
  },
1870
1649
  {
1871
- "laneId": ".github/workflows/self-build-verify.yml#build-backbone",
1650
+ "laneId": ".github/workflows/public-ops-pipeline.yml#control",
1872
1651
  "authorityClass": "merge-critical-admission",
1873
- "triggerClass": "mixed",
1652
+ "triggerClass": "reusable",
1874
1653
  "concurrencyPolicy": {
1875
1654
  "mode": "none",
1876
1655
  "cancelInProgress": false
1877
1656
  },
1878
1657
  "expectedRunnerMinutes": 20,
1879
- "cancellationBehavior": "provider-default",
1658
+ "cancellationBehavior": "finish-started",
1880
1659
  "sloImpact": {
1881
1660
  "mergeCritical": true,
1882
- "metric": "protected delivery dependency budget",
1661
+ "metric": "minimal pipeline bounded hosted execution",
1883
1662
  "expectedContributionSeconds": 1200,
1884
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1663
+ "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
1885
1664
  }
1886
1665
  },
1887
1666
  {
1888
- "laneId": ".github/workflows/self-build-verify.yml#check",
1889
- "authorityClass": "merge-critical-admission",
1890
- "triggerClass": "mixed",
1667
+ "laneId": ".github/workflows/.ops-pipeline-execute.yml#build",
1668
+ "authorityClass": "merge-critical-required",
1669
+ "triggerClass": "reusable",
1891
1670
  "concurrencyPolicy": {
1892
1671
  "mode": "none",
1893
1672
  "cancelInProgress": false
1894
1673
  },
1895
- "expectedRunnerMinutes": 360,
1896
- "cancellationBehavior": "provider-default",
1674
+ "expectedRunnerMinutes": 60,
1675
+ "cancellationBehavior": "finish-started",
1897
1676
  "sloImpact": {
1898
1677
  "mergeCritical": true,
1899
- "metric": "protected delivery dependency budget",
1900
- "expectedContributionSeconds": 21600,
1901
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1678
+ "metric": "minimal pipeline bounded hosted execution",
1679
+ "expectedContributionSeconds": 3600,
1680
+ "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
1902
1681
  }
1903
1682
  },
1904
1683
  {
1905
- "laneId": ".github/workflows/self-build-verify.yml#stage-capsule-checkpoints",
1906
- "authorityClass": "merge-critical-admission",
1907
- "triggerClass": "mixed",
1684
+ "laneId": ".github/workflows/.ops-pipeline-execute.yml#record-build",
1685
+ "authorityClass": "merge-critical-required",
1686
+ "triggerClass": "reusable",
1908
1687
  "concurrencyPolicy": {
1909
1688
  "mode": "none",
1910
1689
  "cancelInProgress": false
1911
1690
  },
1912
- "expectedRunnerMinutes": 360,
1913
- "cancellationBehavior": "provider-default",
1691
+ "expectedRunnerMinutes": 15,
1692
+ "cancellationBehavior": "finish-started",
1914
1693
  "sloImpact": {
1915
1694
  "mergeCritical": true,
1916
- "metric": "protected delivery dependency budget",
1917
- "expectedContributionSeconds": 21600,
1918
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1695
+ "metric": "minimal pipeline bounded hosted execution",
1696
+ "expectedContributionSeconds": 900,
1697
+ "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
1919
1698
  }
1920
1699
  },
1921
1700
  {
1922
- "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#prepare",
1701
+ "laneId": ".github/workflows/.ops-pipeline-execute.yml#delivery",
1923
1702
  "authorityClass": "merge-critical-admission",
1924
- "triggerClass": "mixed",
1925
- "concurrencyPolicy": {
1926
- "mode": "none",
1927
- "cancelInProgress": false
1928
- },
1929
- "expectedRunnerMinutes": 360,
1930
- "cancellationBehavior": "provider-default",
1931
- "sloImpact": {
1932
- "mergeCritical": true,
1933
- "metric": "protected delivery dependency budget",
1934
- "expectedContributionSeconds": 21600,
1935
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1936
- }
1937
- },
1938
- {
1939
- "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-alpha",
1940
- "authorityClass": "governed-delegation",
1941
- "triggerClass": "mixed",
1703
+ "triggerClass": "reusable",
1942
1704
  "concurrencyPolicy": {
1943
1705
  "mode": "none",
1944
1706
  "cancelInProgress": false
1945
1707
  },
1946
1708
  "expectedRunnerMinutes": 360,
1947
- "cancellationBehavior": "provider-default",
1948
- "sloImpact": {
1949
- "mergeCritical": true,
1950
- "metric": "protected delivery dependency budget",
1951
- "expectedContributionSeconds": 21600,
1952
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1953
- }
1954
- },
1955
- {
1956
- "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-conformance",
1957
- "authorityClass": "governed-delegation",
1958
- "triggerClass": "mixed",
1959
- "concurrencyPolicy": {
1960
- "mode": "none",
1961
- "cancelInProgress": false
1962
- },
1963
- "expectedRunnerMinutes": 360,
1964
- "cancellationBehavior": "provider-default",
1965
- "sloImpact": {
1966
- "mergeCritical": true,
1967
- "metric": "protected delivery dependency budget",
1968
- "expectedContributionSeconds": 21600,
1969
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1970
- }
1971
- },
1972
- {
1973
- "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#primary-stable",
1974
- "authorityClass": "governed-delegation",
1975
- "triggerClass": "mixed",
1976
- "concurrencyPolicy": {
1977
- "mode": "none",
1978
- "cancelInProgress": false
1979
- },
1980
- "expectedRunnerMinutes": 360,
1981
- "cancellationBehavior": "provider-default",
1982
- "sloImpact": {
1983
- "mergeCritical": true,
1984
- "metric": "protected delivery dependency budget",
1985
- "expectedContributionSeconds": 21600,
1986
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1987
- }
1988
- },
1989
- {
1990
- "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#reconcile",
1991
- "authorityClass": "merge-critical-admission",
1992
- "triggerClass": "mixed",
1993
- "concurrencyPolicy": {
1994
- "mode": "none",
1995
- "cancelInProgress": false
1996
- },
1997
- "expectedRunnerMinutes": 360,
1998
- "cancellationBehavior": "provider-default",
1999
- "sloImpact": {
2000
- "mergeCritical": true,
2001
- "metric": "protected delivery dependency budget",
2002
- "expectedContributionSeconds": 21600,
2003
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2004
- }
2005
- },
2006
- {
2007
- "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-alpha",
2008
- "authorityClass": "governed-delegation",
2009
- "triggerClass": "mixed",
2010
- "concurrencyPolicy": {
2011
- "mode": "none",
2012
- "cancelInProgress": false
2013
- },
2014
- "expectedRunnerMinutes": 360,
2015
- "cancellationBehavior": "provider-default",
2016
- "sloImpact": {
2017
- "mergeCritical": true,
2018
- "metric": "protected delivery dependency budget",
2019
- "expectedContributionSeconds": 21600,
2020
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2021
- }
2022
- },
2023
- {
2024
- "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-conformance",
2025
- "authorityClass": "governed-delegation",
2026
- "triggerClass": "mixed",
2027
- "concurrencyPolicy": {
2028
- "mode": "none",
2029
- "cancelInProgress": false
2030
- },
2031
- "expectedRunnerMinutes": 360,
2032
- "cancellationBehavior": "provider-default",
2033
- "sloImpact": {
2034
- "mergeCritical": true,
2035
- "metric": "protected delivery dependency budget",
2036
- "expectedContributionSeconds": 21600,
2037
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2038
- }
2039
- },
2040
- {
2041
- "laneId": ".github/workflows/self-ops-bootstrap-dogfood.yml#recovery-stable",
2042
- "authorityClass": "governed-delegation",
2043
- "triggerClass": "mixed",
2044
- "concurrencyPolicy": {
2045
- "mode": "none",
2046
- "cancelInProgress": false
2047
- },
2048
- "expectedRunnerMinutes": 360,
2049
- "cancellationBehavior": "provider-default",
2050
- "sloImpact": {
2051
- "mergeCritical": true,
2052
- "metric": "protected delivery dependency budget",
2053
- "expectedContributionSeconds": 21600,
2054
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2055
- }
2056
- },
2057
- {
2058
- "laneId": ".github/workflows/self-ops-dev-delivery.yml#deliver",
2059
- "authorityClass": "governed-delegation",
2060
- "triggerClass": "mixed",
2061
- "concurrencyPolicy": {
2062
- "mode": "none",
2063
- "cancelInProgress": false
2064
- },
2065
- "expectedRunnerMinutes": 360,
2066
- "cancellationBehavior": "provider-default",
2067
- "sloImpact": {
2068
- "mergeCritical": false,
2069
- "metric": "capability execution budget",
2070
- "expectedContributionSeconds": 0,
2071
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2072
- }
2073
- },
2074
- {
2075
- "laneId": ".github/workflows/self-ops-governance-audit.yml#audit",
2076
- "authorityClass": "merge-critical-admission",
2077
- "triggerClass": "mixed",
2078
- "concurrencyPolicy": {
2079
- "mode": "ref-scoped",
2080
- "cancelInProgress": false
2081
- },
2082
- "expectedRunnerMinutes": 20,
2083
1709
  "cancellationBehavior": "finish-started",
2084
1710
  "sloImpact": {
2085
- "mergeCritical": true,
2086
- "metric": "protected delivery dependency budget",
2087
- "expectedContributionSeconds": 1200,
2088
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2089
- }
2090
- },
2091
- {
2092
- "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#apply",
2093
- "authorityClass": "governed-delegation",
2094
- "triggerClass": "mixed",
2095
- "concurrencyPolicy": {
2096
- "mode": "none",
2097
- "cancelInProgress": false
2098
- },
2099
- "expectedRunnerMinutes": 360,
2100
- "cancellationBehavior": "provider-default",
2101
- "sloImpact": {
2102
- "mergeCritical": false,
2103
- "metric": "capability execution budget",
2104
- "expectedContributionSeconds": 0,
2105
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2106
- }
2107
- },
2108
- {
2109
- "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#invalid-apply-gate",
2110
- "authorityClass": "post-merge-advisory",
2111
- "triggerClass": "mixed",
2112
- "concurrencyPolicy": {
2113
- "mode": "none",
2114
- "cancelInProgress": false
2115
- },
2116
- "expectedRunnerMinutes": 360,
2117
- "cancellationBehavior": "provider-default",
2118
- "sloImpact": {
2119
- "mergeCritical": false,
2120
- "metric": "capability execution budget",
2121
- "expectedContributionSeconds": 0,
2122
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2123
- }
2124
- },
2125
- {
2126
- "laneId": ".github/workflows/self-ops-housekeeping-daily.yml#report",
2127
- "authorityClass": "governed-delegation",
2128
- "triggerClass": "mixed",
2129
- "concurrencyPolicy": {
2130
- "mode": "none",
2131
- "cancelInProgress": false
2132
- },
2133
- "expectedRunnerMinutes": 360,
2134
- "cancellationBehavior": "provider-default",
2135
- "sloImpact": {
2136
- "mergeCritical": false,
2137
- "metric": "capability execution budget",
2138
- "expectedContributionSeconds": 0,
2139
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2140
- }
2141
- },
2142
- {
2143
- "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#apply",
2144
- "authorityClass": "governed-delegation",
2145
- "triggerClass": "mixed",
2146
- "concurrencyPolicy": {
2147
- "mode": "none",
2148
- "cancelInProgress": false
2149
- },
2150
- "expectedRunnerMinutes": 360,
2151
- "cancellationBehavior": "provider-default",
2152
- "sloImpact": {
2153
- "mergeCritical": false,
2154
- "metric": "capability execution budget",
2155
- "expectedContributionSeconds": 0,
2156
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2157
- }
2158
- },
2159
- {
2160
- "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#invalid-apply-gate",
2161
- "authorityClass": "post-merge-advisory",
2162
- "triggerClass": "mixed",
2163
- "concurrencyPolicy": {
2164
- "mode": "none",
2165
- "cancelInProgress": false
2166
- },
2167
- "expectedRunnerMinutes": 360,
2168
- "cancellationBehavior": "provider-default",
2169
- "sloImpact": {
2170
- "mergeCritical": false,
2171
- "metric": "capability execution budget",
2172
- "expectedContributionSeconds": 0,
2173
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2174
- }
2175
- },
2176
- {
2177
- "laneId": ".github/workflows/self-ops-housekeeping-monthly.yml#report",
2178
- "authorityClass": "governed-delegation",
2179
- "triggerClass": "mixed",
2180
- "concurrencyPolicy": {
2181
- "mode": "none",
2182
- "cancelInProgress": false
2183
- },
2184
- "expectedRunnerMinutes": 360,
2185
- "cancellationBehavior": "provider-default",
2186
- "sloImpact": {
2187
- "mergeCritical": false,
2188
- "metric": "capability execution budget",
2189
- "expectedContributionSeconds": 0,
2190
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2191
- }
2192
- },
2193
- {
2194
- "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#apply",
2195
- "authorityClass": "governed-delegation",
2196
- "triggerClass": "mixed",
2197
- "concurrencyPolicy": {
2198
- "mode": "none",
2199
- "cancelInProgress": false
2200
- },
2201
- "expectedRunnerMinutes": 360,
2202
- "cancellationBehavior": "provider-default",
2203
- "sloImpact": {
2204
- "mergeCritical": false,
2205
- "metric": "capability execution budget",
2206
- "expectedContributionSeconds": 0,
2207
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2208
- }
2209
- },
2210
- {
2211
- "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#invalid-apply-gate",
2212
- "authorityClass": "post-merge-advisory",
2213
- "triggerClass": "mixed",
2214
- "concurrencyPolicy": {
2215
- "mode": "none",
2216
- "cancelInProgress": false
2217
- },
2218
- "expectedRunnerMinutes": 360,
2219
- "cancellationBehavior": "provider-default",
2220
- "sloImpact": {
2221
- "mergeCritical": false,
2222
- "metric": "capability execution budget",
2223
- "expectedContributionSeconds": 0,
2224
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2225
- }
2226
- },
2227
- {
2228
- "laneId": ".github/workflows/self-ops-housekeeping-weekly.yml#report",
2229
- "authorityClass": "governed-delegation",
2230
- "triggerClass": "mixed",
2231
- "concurrencyPolicy": {
2232
- "mode": "none",
2233
- "cancelInProgress": false
2234
- },
2235
- "expectedRunnerMinutes": 360,
2236
- "cancellationBehavior": "provider-default",
2237
- "sloImpact": {
2238
- "mergeCritical": false,
2239
- "metric": "capability execution budget",
2240
- "expectedContributionSeconds": 0,
2241
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2242
- }
2243
- },
2244
- {
2245
- "laneId": ".github/workflows/self-ops-merge-queue.yml#reconcile",
2246
- "authorityClass": "evidence",
2247
- "triggerClass": "mixed",
2248
- "concurrencyPolicy": {
2249
- "mode": "none",
2250
- "cancelInProgress": false
2251
- },
2252
- "expectedRunnerMinutes": 360,
2253
- "cancellationBehavior": "provider-default",
2254
- "sloImpact": {
2255
- "mergeCritical": false,
2256
- "metric": "capability execution budget",
2257
- "expectedContributionSeconds": 0,
2258
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2259
- }
2260
- },
2261
- {
2262
- "laneId": ".github/workflows/self-ops-patrol-daily.yml#patrol",
2263
- "authorityClass": "governed-delegation",
2264
- "triggerClass": "mixed",
2265
- "concurrencyPolicy": {
2266
- "mode": "none",
2267
- "cancelInProgress": false
2268
- },
2269
- "expectedRunnerMinutes": 360,
2270
- "cancellationBehavior": "provider-default",
2271
- "sloImpact": {
2272
- "mergeCritical": false,
2273
- "metric": "capability execution budget",
2274
- "expectedContributionSeconds": 0,
2275
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1711
+ "mergeCritical": true,
1712
+ "metric": "minimal pipeline bounded hosted execution",
1713
+ "expectedContributionSeconds": 21600,
1714
+ "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
2276
1715
  }
2277
1716
  },
2278
1717
  {
2279
- "laneId": ".github/workflows/self-ops-patrol-monthly.yml#patrol",
2280
- "authorityClass": "governed-delegation",
2281
- "triggerClass": "mixed",
1718
+ "laneId": ".github/workflows/.ops-pipeline-execute.yml#record-delivery",
1719
+ "authorityClass": "evidence",
1720
+ "triggerClass": "reusable",
2282
1721
  "concurrencyPolicy": {
2283
1722
  "mode": "none",
2284
1723
  "cancelInProgress": false
2285
1724
  },
2286
- "expectedRunnerMinutes": 360,
2287
- "cancellationBehavior": "provider-default",
1725
+ "expectedRunnerMinutes": 5,
1726
+ "cancellationBehavior": "finish-started",
2288
1727
  "sloImpact": {
2289
1728
  "mergeCritical": false,
2290
- "metric": "capability execution budget",
2291
- "expectedContributionSeconds": 0,
2292
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1729
+ "metric": "minimal pipeline bounded hosted execution",
1730
+ "expectedContributionSeconds": 300,
1731
+ "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
2293
1732
  }
2294
1733
  },
2295
1734
  {
2296
- "laneId": ".github/workflows/self-ops-patrol-weekly.yml#patrol",
2297
- "authorityClass": "governed-delegation",
2298
- "triggerClass": "mixed",
1735
+ "laneId": ".github/workflows/.release-pipeline-products.yml#prepare",
1736
+ "authorityClass": "evidence",
1737
+ "triggerClass": "reusable",
2299
1738
  "concurrencyPolicy": {
2300
- "mode": "none",
1739
+ "mode": "ref-scoped",
2301
1740
  "cancelInProgress": false
2302
1741
  },
2303
- "expectedRunnerMinutes": 360,
2304
- "cancellationBehavior": "provider-default",
1742
+ "expectedRunnerMinutes": 15,
1743
+ "cancellationBehavior": "finish-started",
2305
1744
  "sloImpact": {
2306
1745
  "mergeCritical": false,
2307
- "metric": "capability execution budget",
2308
- "expectedContributionSeconds": 0,
2309
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1746
+ "metric": "declared product publication and retained follow-ups",
1747
+ "expectedContributionSeconds": 900,
1748
+ "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
2310
1749
  }
2311
1750
  },
2312
1751
  {
2313
- "laneId": ".github/workflows/self-ops-promotion-recovery.yml#resume",
2314
- "authorityClass": "governed-delegation",
2315
- "triggerClass": "manual",
1752
+ "laneId": ".github/workflows/.release-pipeline-products.yml#build",
1753
+ "authorityClass": "evidence",
1754
+ "triggerClass": "reusable",
2316
1755
  "concurrencyPolicy": {
2317
- "mode": "none",
1756
+ "mode": "ref-scoped",
2318
1757
  "cancelInProgress": false
2319
1758
  },
2320
- "expectedRunnerMinutes": 360,
2321
- "cancellationBehavior": "provider-default",
1759
+ "expectedRunnerMinutes": 300,
1760
+ "cancellationBehavior": "finish-started",
2322
1761
  "sloImpact": {
2323
1762
  "mergeCritical": false,
2324
- "metric": "capability execution budget",
2325
- "expectedContributionSeconds": 0,
2326
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1763
+ "metric": "declared product publication and retained follow-ups",
1764
+ "expectedContributionSeconds": 18000,
1765
+ "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
2327
1766
  }
2328
1767
  },
2329
1768
  {
2330
- "laneId": ".github/workflows/self-ops-runner-smoke.yml#smoke",
1769
+ "laneId": ".github/workflows/.release-pipeline-products.yml#qualify",
2331
1770
  "authorityClass": "evidence",
2332
- "triggerClass": "manual",
1771
+ "triggerClass": "reusable",
2333
1772
  "concurrencyPolicy": {
2334
- "mode": "none",
1773
+ "mode": "ref-scoped",
2335
1774
  "cancelInProgress": false
2336
1775
  },
2337
- "expectedRunnerMinutes": 360,
2338
- "cancellationBehavior": "provider-default",
1776
+ "expectedRunnerMinutes": 20,
1777
+ "cancellationBehavior": "finish-started",
2339
1778
  "sloImpact": {
2340
1779
  "mergeCritical": false,
2341
- "metric": "capability execution budget",
2342
- "expectedContributionSeconds": 0,
2343
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1780
+ "metric": "declared product publication and retained follow-ups",
1781
+ "expectedContributionSeconds": 1200,
1782
+ "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
2344
1783
  }
2345
1784
  },
2346
1785
  {
2347
- "laneId": ".github/workflows/self-ops-stable-candidate-patrol.yml#patrol",
1786
+ "laneId": ".github/workflows/.release-pipeline-products.yml#apply",
2348
1787
  "authorityClass": "governed-delegation",
2349
- "triggerClass": "mixed",
1788
+ "triggerClass": "reusable",
2350
1789
  "concurrencyPolicy": {
2351
- "mode": "none",
1790
+ "mode": "ref-scoped",
2352
1791
  "cancelInProgress": false
2353
1792
  },
2354
- "expectedRunnerMinutes": 360,
2355
- "cancellationBehavior": "provider-default",
1793
+ "expectedRunnerMinutes": 30,
1794
+ "cancellationBehavior": "finish-started",
2356
1795
  "sloImpact": {
2357
1796
  "mergeCritical": false,
2358
- "metric": "capability execution budget",
2359
- "expectedContributionSeconds": 0,
2360
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1797
+ "metric": "declared product publication and retained follow-ups",
1798
+ "expectedContributionSeconds": 1800,
1799
+ "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
2361
1800
  }
2362
1801
  },
2363
1802
  {
2364
- "laneId": ".github/workflows/self-release-binary-assets.yml#publish",
1803
+ "laneId": ".github/workflows/.release-pipeline-products.yml#settle",
2365
1804
  "authorityClass": "governed-delegation",
2366
- "triggerClass": "manual",
1805
+ "triggerClass": "reusable",
2367
1806
  "concurrencyPolicy": {
2368
- "mode": "none",
1807
+ "mode": "ref-scoped",
2369
1808
  "cancelInProgress": false
2370
1809
  },
2371
- "expectedRunnerMinutes": 360,
2372
- "cancellationBehavior": "provider-default",
1810
+ "expectedRunnerMinutes": 20,
1811
+ "cancellationBehavior": "finish-started",
2373
1812
  "sloImpact": {
2374
1813
  "mergeCritical": false,
2375
- "metric": "capability execution budget",
2376
- "expectedContributionSeconds": 0,
2377
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1814
+ "metric": "declared product publication and retained follow-ups",
1815
+ "expectedContributionSeconds": 1200,
1816
+ "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
2378
1817
  }
2379
1818
  },
2380
1819
  {
2381
- "laneId": ".github/workflows/self-release-binary-assets.yml#resolve",
2382
- "authorityClass": "release",
2383
- "triggerClass": "manual",
1820
+ "laneId": ".github/workflows/.ops-pipeline-execute.yml#publication",
1821
+ "authorityClass": "governed-delegation",
1822
+ "triggerClass": "reusable",
2384
1823
  "concurrencyPolicy": {
2385
1824
  "mode": "none",
2386
1825
  "cancelInProgress": false
2387
1826
  },
2388
- "expectedRunnerMinutes": 360,
2389
- "cancellationBehavior": "provider-default",
1827
+ "expectedRunnerMinutes": 385,
1828
+ "cancellationBehavior": "finish-started",
2390
1829
  "sloImpact": {
2391
1830
  "mergeCritical": false,
2392
- "metric": "capability execution budget",
2393
- "expectedContributionSeconds": 0,
2394
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1831
+ "metric": "declared product publication and retained follow-ups",
1832
+ "expectedContributionSeconds": 23100,
1833
+ "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
2395
1834
  }
2396
1835
  },
2397
1836
  {
2398
- "laneId": ".github/workflows/self-release-line-open.yml#bootstrap",
2399
- "authorityClass": "release",
2400
- "triggerClass": "manual",
1837
+ "laneId": ".github/workflows/public-ops-recover.yml#runtime",
1838
+ "authorityClass": "evidence",
1839
+ "triggerClass": "reusable",
2401
1840
  "concurrencyPolicy": {
2402
1841
  "mode": "none",
2403
1842
  "cancelInProgress": false
2404
1843
  },
2405
- "expectedRunnerMinutes": 360,
2406
- "cancellationBehavior": "provider-default",
1844
+ "expectedRunnerMinutes": 5,
1845
+ "cancellationBehavior": "finish-started",
2407
1846
  "sloImpact": {
2408
1847
  "mergeCritical": false,
2409
- "metric": "capability execution budget",
2410
- "expectedContributionSeconds": 0,
2411
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1848
+ "metric": "minimal pipeline bounded hosted execution",
1849
+ "expectedContributionSeconds": 300,
1850
+ "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
2412
1851
  }
2413
1852
  },
2414
1853
  {
2415
- "laneId": ".github/workflows/self-release-next-development.yml#review",
1854
+ "laneId": ".github/workflows/public-ops-recover.yml#control",
2416
1855
  "authorityClass": "merge-critical-admission",
2417
- "triggerClass": "mixed",
1856
+ "triggerClass": "reusable",
2418
1857
  "concurrencyPolicy": {
2419
- "mode": "ref-scoped",
1858
+ "mode": "none",
2420
1859
  "cancelInProgress": false
2421
1860
  },
2422
- "expectedRunnerMinutes": 3,
1861
+ "expectedRunnerMinutes": 20,
2423
1862
  "cancellationBehavior": "finish-started",
2424
1863
  "sloImpact": {
2425
1864
  "mergeCritical": true,
2426
- "metric": "generated next-development independent review latency",
2427
- "expectedContributionSeconds": 180,
2428
- "rationale": "Only successful same-repository version PRs regenerate from the protected base and read completed publication evidence; ordinary source PRs skip the lane. Native queue checks remain final merge authority."
1865
+ "metric": "minimal pipeline bounded hosted execution",
1866
+ "expectedContributionSeconds": 1200,
1867
+ "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
2429
1868
  }
2430
1869
  },
2431
1870
  {
2432
- "laneId": ".github/workflows/self-release-npm-dry-run.yml#dry-run",
2433
- "authorityClass": "release",
2434
- "triggerClass": "manual",
1871
+ "laneId": ".github/workflows/public-ops-pipeline.yml#execute",
1872
+ "authorityClass": "governed-delegation",
1873
+ "triggerClass": "reusable",
2435
1874
  "concurrencyPolicy": {
2436
1875
  "mode": "none",
2437
1876
  "cancelInProgress": false
2438
1877
  },
2439
- "expectedRunnerMinutes": 360,
2440
- "cancellationBehavior": "provider-default",
1878
+ "expectedRunnerMinutes": 825,
1879
+ "cancellationBehavior": "finish-started",
2441
1880
  "sloImpact": {
2442
1881
  "mergeCritical": false,
2443
- "metric": "capability execution budget",
2444
- "expectedContributionSeconds": 0,
2445
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1882
+ "metric": "shared normal or recovery execution timeout bound",
1883
+ "expectedContributionSeconds": 49500,
1884
+ "rationale": "Delegates to the same isolated product, native delivery and publication jobs. Recovery schedules only qualified missing work; this inherited conservative timeout sum is not measured latency or a new parallel lane family."
2446
1885
  }
2447
1886
  },
2448
1887
  {
2449
- "laneId": ".github/workflows/self-release-promote.yml#classify-workflow-run",
2450
- "authorityClass": "release",
2451
- "triggerClass": "mixed",
1888
+ "laneId": ".github/workflows/public-ops-recover.yml#execute",
1889
+ "authorityClass": "governed-delegation",
1890
+ "triggerClass": "reusable",
2452
1891
  "concurrencyPolicy": {
2453
1892
  "mode": "none",
2454
1893
  "cancelInProgress": false
2455
1894
  },
2456
- "expectedRunnerMinutes": 360,
2457
- "cancellationBehavior": "provider-default",
1895
+ "expectedRunnerMinutes": 825,
1896
+ "cancellationBehavior": "finish-started",
2458
1897
  "sloImpact": {
2459
1898
  "mergeCritical": false,
2460
- "metric": "capability execution budget",
2461
- "expectedContributionSeconds": 0,
2462
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1899
+ "metric": "shared normal or recovery execution timeout bound",
1900
+ "expectedContributionSeconds": 49500,
1901
+ "rationale": "Delegates to the same isolated product, native delivery and publication jobs. Recovery schedules only qualified missing work; this inherited conservative timeout sum is not measured latency or a new parallel lane family."
2463
1902
  }
2464
1903
  },
2465
1904
  {
2466
- "laneId": ".github/workflows/self-release-promote.yml#promote",
1905
+ "laneId": ".github/workflows/.release-pipeline-products.yml#materialize",
2467
1906
  "authorityClass": "governed-delegation",
2468
- "triggerClass": "mixed",
1907
+ "triggerClass": "reusable",
2469
1908
  "concurrencyPolicy": {
2470
- "mode": "none",
1909
+ "mode": "ref-scoped",
2471
1910
  "cancelInProgress": false
2472
1911
  },
2473
- "expectedRunnerMinutes": 360,
2474
- "cancellationBehavior": "provider-default",
1912
+ "expectedRunnerMinutes": 5,
1913
+ "cancellationBehavior": "finish-started",
2475
1914
  "sloImpact": {
2476
1915
  "mergeCritical": false,
2477
- "metric": "capability execution budget",
2478
- "expectedContributionSeconds": 0,
2479
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1916
+ "metric": "declared version regeneration before publication or next-development materialization",
1917
+ "expectedContributionSeconds": 300,
1918
+ "rationale": "One shared internal component executes each declared product platform for version-derived files, then independently verifies actual job completion and archive digests before Git writes. Up to five product runners each have a sixty-minute ceiling, and materialization has twenty minutes; the component can run once for publication and once for next development. Parent reusable jobs delegate without a separate product runner. Bounds are declared capacity, not measured latency; per-repository publication concurrency retains a single provider writer."
2480
1919
  }
2481
1920
  },
2482
1921
  {
2483
- "laneId": ".github/workflows/self-release-promote.yml#reject-invalid-candidate-recovery",
2484
- "authorityClass": "release",
2485
- "triggerClass": "mixed",
1922
+ "laneId": ".github/workflows/.release-pipeline-products.yml#development",
1923
+ "authorityClass": "governed-delegation",
1924
+ "triggerClass": "reusable",
2486
1925
  "concurrencyPolicy": {
2487
- "mode": "none",
1926
+ "mode": "ref-scoped",
2488
1927
  "cancelInProgress": false
2489
1928
  },
2490
- "expectedRunnerMinutes": 360,
2491
- "cancellationBehavior": "provider-default",
1929
+ "expectedRunnerMinutes": 5,
1930
+ "cancellationBehavior": "finish-started",
2492
1931
  "sloImpact": {
2493
1932
  "mergeCritical": false,
2494
- "metric": "capability execution budget",
2495
- "expectedContributionSeconds": 0,
2496
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1933
+ "metric": "declared version regeneration before publication or next-development materialization",
1934
+ "expectedContributionSeconds": 300,
1935
+ "rationale": "One shared internal component executes each declared product platform for version-derived files, then independently verifies actual job completion and archive digests before Git writes. Up to five product runners each have a sixty-minute ceiling, and materialization has twenty minutes; the component can run once for publication and once for next development. Parent reusable jobs delegate without a separate product runner. Bounds are declared capacity, not measured latency; per-repository publication concurrency retains a single provider writer."
2497
1936
  }
2498
1937
  },
2499
1938
  {
2500
- "laneId": ".github/workflows/self-release-promote.yml#reject-invalid-durable-recovery",
2501
- "authorityClass": "release",
2502
- "triggerClass": "mixed",
1939
+ "laneId": ".github/workflows/.release-pipeline-version.yml#build",
1940
+ "authorityClass": "evidence",
1941
+ "triggerClass": "reusable",
2503
1942
  "concurrencyPolicy": {
2504
- "mode": "none",
1943
+ "mode": "ref-scoped",
2505
1944
  "cancelInProgress": false
2506
1945
  },
2507
- "expectedRunnerMinutes": 360,
2508
- "cancellationBehavior": "provider-default",
1946
+ "expectedRunnerMinutes": 300,
1947
+ "cancellationBehavior": "finish-started",
2509
1948
  "sloImpact": {
2510
1949
  "mergeCritical": false,
2511
- "metric": "capability execution budget",
2512
- "expectedContributionSeconds": 0,
2513
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1950
+ "metric": "declared version regeneration before publication or next-development materialization",
1951
+ "expectedContributionSeconds": 18000,
1952
+ "rationale": "One shared internal component executes each declared product platform for version-derived files, then independently verifies actual job completion and archive digests before Git writes. Up to five product runners each have a sixty-minute ceiling, and materialization has twenty minutes; the component can run once for publication and once for next development. Parent reusable jobs delegate without a separate product runner. Bounds are declared capacity, not measured latency; per-repository publication concurrency retains a single provider writer."
2514
1953
  }
2515
1954
  },
2516
1955
  {
2517
- "laneId": ".github/workflows/self-release-promote.yml#reject-manual-apply",
2518
- "authorityClass": "release",
2519
- "triggerClass": "mixed",
1956
+ "laneId": ".github/workflows/.release-pipeline-version.yml#materialize",
1957
+ "authorityClass": "governed-delegation",
1958
+ "triggerClass": "reusable",
2520
1959
  "concurrencyPolicy": {
2521
- "mode": "none",
1960
+ "mode": "ref-scoped",
2522
1961
  "cancelInProgress": false
2523
1962
  },
2524
- "expectedRunnerMinutes": 360,
2525
- "cancellationBehavior": "provider-default",
1963
+ "expectedRunnerMinutes": 20,
1964
+ "cancellationBehavior": "finish-started",
2526
1965
  "sloImpact": {
2527
1966
  "mergeCritical": false,
2528
- "metric": "capability execution budget",
2529
- "expectedContributionSeconds": 0,
2530
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
1967
+ "metric": "declared version regeneration before publication or next-development materialization",
1968
+ "expectedContributionSeconds": 1200,
1969
+ "rationale": "One shared internal component executes each declared product platform for version-derived files, then independently verifies actual job completion and archive digests before Git writes. Up to five product runners each have a sixty-minute ceiling, and materialization has twenty minutes; the component can run once for publication and once for next development. Parent reusable jobs delegate without a separate product runner. Bounds are declared capacity, not measured latency; per-repository publication concurrency retains a single provider writer."
1970
+ }
1971
+ },
1972
+ {
1973
+ "laneId": ".github/workflows/.ops-pipeline-execute.yml#stable-recheck",
1974
+ "authorityClass": "evidence",
1975
+ "triggerClass": "reusable",
1976
+ "concurrencyPolicy": {
1977
+ "mode": "ref-scoped",
1978
+ "cancelInProgress": false
1979
+ },
1980
+ "expectedRunnerMinutes": 20,
1981
+ "cancellationBehavior": "finish-started",
1982
+ "sloImpact": {
1983
+ "mergeCritical": false,
1984
+ "metric": "bounded stable qualification recheck",
1985
+ "expectedContributionSeconds": 1200,
1986
+ "rationale": "Wait at most fifteen minutes outside the publication lock, then wake the same native Attempt through the normal entry to collect fresh qualification. Twenty minutes includes runtime preparation; this is a conservative timeout budget, not measured latency."
2531
1987
  }
2532
1988
  },
2533
1989
  {
2534
- "laneId": ".github/workflows/self-release-rehearsal-dogfood.yml#rehearsal",
1990
+ "laneId": ".github/workflows/buildchain.yml#buildchain",
2535
1991
  "authorityClass": "governed-delegation",
2536
1992
  "triggerClass": "mixed",
2537
1993
  "concurrencyPolicy": {
@@ -2539,16 +1995,16 @@
2539
1995
  "cancelInProgress": false
2540
1996
  },
2541
1997
  "expectedRunnerMinutes": 360,
2542
- "cancellationBehavior": "provider-default",
1998
+ "cancellationBehavior": "finish-started",
2543
1999
  "sloImpact": {
2544
2000
  "mergeCritical": true,
2545
- "metric": "protected delivery dependency budget",
2001
+ "metric": "delegated pipeline execution ceiling",
2546
2002
  "expectedContributionSeconds": 21600,
2547
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2003
+ "rationale": "Generated caller delegates to the published pipeline. Runtime jobs own bounded admission, execution, cancellation and provider settlement. Six-hour budget is conservative, not measured latency or an additional self controller."
2548
2004
  }
2549
2005
  },
2550
2006
  {
2551
- "laneId": ".github/workflows/self-release-tail-dogfood.yml#publish",
2007
+ "laneId": ".github/workflows/buildchain-recover.yml#buildchain",
2552
2008
  "authorityClass": "governed-delegation",
2553
2009
  "triggerClass": "manual",
2554
2010
  "concurrencyPolicy": {
@@ -2556,12 +2012,12 @@
2556
2012
  "cancelInProgress": false
2557
2013
  },
2558
2014
  "expectedRunnerMinutes": 360,
2559
- "cancellationBehavior": "provider-default",
2015
+ "cancellationBehavior": "finish-started",
2560
2016
  "sloImpact": {
2561
- "mergeCritical": false,
2562
- "metric": "capability execution budget",
2563
- "expectedContributionSeconds": 0,
2564
- "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
2017
+ "mergeCritical": true,
2018
+ "metric": "delegated pipeline execution ceiling",
2019
+ "expectedContributionSeconds": 21600,
2020
+ "rationale": "Generated caller delegates to the published pipeline. Runtime jobs own bounded admission, execution, cancellation and provider settlement. Six-hour budget is conservative, not measured latency or an additional self controller."
2565
2021
  }
2566
2022
  }
2567
2023
  ],
@@ -2634,17 +2090,7 @@
2634
2090
  {
2635
2091
  "laneIds": [
2636
2092
  ".github/workflows/public-build-adopter-qualification.yml#execution-runtime",
2637
- ".github/workflows/public-ops-release-governance.yml#execution-runtime",
2638
- ".github/workflows/self-build-binary-distribution.yml#execution-runtime",
2639
- ".github/workflows/self-build-demo-media-qualification.yml#execution-runtime",
2640
- ".github/workflows/self-build-fixture.yml#execution-runtime",
2641
- ".github/workflows/self-build-verify.yml#execution-runtime",
2642
- ".github/workflows/self-ops-bootstrap-dogfood.yml#execution-runtime",
2643
- ".github/workflows/self-ops-housekeeping-daily.yml#execution-runtime",
2644
- ".github/workflows/self-ops-housekeeping-monthly.yml#execution-runtime",
2645
- ".github/workflows/self-ops-housekeeping-weekly.yml#execution-runtime",
2646
- ".github/workflows/self-ops-merge-queue.yml#execution-runtime",
2647
- ".github/workflows/self-release-promote.yml#execution-runtime"
2093
+ ".github/workflows/public-ops-release-governance.yml#execution-runtime"
2648
2094
  ],
2649
2095
  "authorityClass": "governed-delegation",
2650
2096
  "triggerClass": "mixed",
@@ -2679,69 +2125,6 @@
2679
2125
  "expectedContributionSeconds": 300,
2680
2126
  "rationale": "Five-minute upper bound for central entry selection; no business execution or provider mutation."
2681
2127
  }
2682
- },
2683
- {
2684
- "laneIds": [
2685
- ".github/workflows/self-build-channel-verify.yml#execution-runtime"
2686
- ],
2687
- "authorityClass": "governed-delegation",
2688
- "triggerClass": "pull-request",
2689
- "concurrencyPolicy": {
2690
- "mode": "none",
2691
- "cancelInProgress": false
2692
- },
2693
- "expectedRunnerMinutes": 5,
2694
- "cancellationBehavior": "finish-started",
2695
- "sloImpact": {
2696
- "mergeCritical": false,
2697
- "metric": "runtime entry preparation",
2698
- "expectedContributionSeconds": 300,
2699
- "rationale": "Five-minute upper bound for central entry selection; no business execution or provider mutation."
2700
- }
2701
- },
2702
- {
2703
- "laneIds": [
2704
- ".github/workflows/self-build-demo-dogfood.yml#execution-runtime",
2705
- ".github/workflows/self-build-stable-candidate-qualification.yml#execution-runtime",
2706
- ".github/workflows/self-ops-governance-audit.yml#execution-runtime",
2707
- ".github/workflows/self-release-next-development.yml#execution-runtime"
2708
- ],
2709
- "authorityClass": "governed-delegation",
2710
- "triggerClass": "mixed",
2711
- "concurrencyPolicy": {
2712
- "mode": "ref-scoped",
2713
- "cancelInProgress": false
2714
- },
2715
- "expectedRunnerMinutes": 5,
2716
- "cancellationBehavior": "finish-started",
2717
- "sloImpact": {
2718
- "mergeCritical": false,
2719
- "metric": "runtime entry preparation",
2720
- "expectedContributionSeconds": 300,
2721
- "rationale": "Five-minute upper bound for central entry selection; no business execution or provider mutation."
2722
- }
2723
- },
2724
- {
2725
- "laneIds": [
2726
- ".github/workflows/self-ops-runner-smoke.yml#execution-runtime",
2727
- ".github/workflows/self-release-binary-assets.yml#execution-runtime",
2728
- ".github/workflows/self-release-line-open.yml#execution-runtime",
2729
- ".github/workflows/self-release-npm-dry-run.yml#execution-runtime"
2730
- ],
2731
- "authorityClass": "governed-delegation",
2732
- "triggerClass": "manual",
2733
- "concurrencyPolicy": {
2734
- "mode": "none",
2735
- "cancelInProgress": false
2736
- },
2737
- "expectedRunnerMinutes": 5,
2738
- "cancellationBehavior": "finish-started",
2739
- "sloImpact": {
2740
- "mergeCritical": false,
2741
- "metric": "runtime entry preparation",
2742
- "expectedContributionSeconds": 300,
2743
- "rationale": "Five-minute upper bound for central entry selection; no business execution or provider mutation."
2744
- }
2745
2128
  }
2746
2129
  ]
2747
2130
  }