@kungfu-tech/buildchain 4.1.3-alpha.1 → 4.1.3-alpha.10

package/dist/site/workflow-registry.json

@@ -224,6 +224,78 @@
       "sunsetCondition": "explicit-contract-change-review",
       "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
     },
+    {
+      "id": ".ops-pipeline-delivery",
+      "path": ".github/workflows/.ops-pipeline-delivery.yml",
+      "reusable": true,
+      "inputs": [
+        "request",
+        "runtime-selection"
+      ],
+      "inputCount": 2,
+      "secrets": [
+        "BUILDCHAIN_AUTOMATION_TOKEN"
+      ],
+      "secretCount": 1,
+      "outputs": [],
+      "outputCount": 0,
+      "taxonomy": {
+        "id": ".pipeline-delivery",
+        "role": "component",
+        "category": "ops",
+        "purpose": "pipeline-delivery",
+        "status": "active",
+        "canonicalPath": ".github/workflows/.ops-pipeline-delivery.yml",
+        "compatibilityAlias": false
+      },
+      "surface": "reusable-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
+    },
+    {
+      "id": ".ops-pipeline-execute",
+      "path": ".github/workflows/.ops-pipeline-execute.yml",
+      "reusable": true,
+      "inputs": [
+        "attempt",
+        "context",
+        "matrix",
+        "operation",
+        "request",
+        "runtime-selection"
+      ],
+      "inputCount": 6,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [],
+      "outputCount": 0,
+      "taxonomy": {
+        "id": ".pipeline-execute",
+        "role": "component",
+        "category": "ops",
+        "purpose": "pipeline-execute",
+        "status": "active",
+        "canonicalPath": ".github/workflows/.ops-pipeline-execute.yml",
+        "compatibilityAlias": false
+      },
+      "surface": "reusable-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
+    },
     {
       "id": ".release-authority",
       "path": ".github/workflows/.release-authority.yml",
@@ -349,6 +421,89 @@
       "sunsetCondition": "explicit-contract-change-review",
       "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
     },
+    {
+      "id": ".release-pipeline-products",
+      "path": ".github/workflows/.release-pipeline-products.yml",
+      "reusable": true,
+      "inputs": [
+        "attempt",
+        "runtime-selection"
+      ],
+      "inputCount": 2,
+      "secrets": [
+        "BUILDCHAIN_APP_PRIVATE_KEY",
+        "BUILDCHAIN_AUTOMATION_TOKEN",
+        "BUILDCHAIN_NPM_TOKEN"
+      ],
+      "secretCount": 3,
+      "outputs": [
+        "stable-wait"
+      ],
+      "outputCount": 1,
+      "taxonomy": {
+        "id": ".pipeline-products",
+        "role": "component",
+        "category": "release",
+        "purpose": "pipeline-products",
+        "status": "active",
+        "canonicalPath": ".github/workflows/.release-pipeline-products.yml",
+        "compatibilityAlias": false
+      },
+      "surface": "reusable-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
+    },
+    {
+      "id": ".release-pipeline-version",
+      "path": ".github/workflows/.release-pipeline-version.yml",
+      "reusable": true,
+      "inputs": [
+        "context",
+        "matrix",
+        "operation",
+        "purpose",
+        "runtime-selection"
+      ],
+      "inputCount": 5,
+      "secrets": [
+        "BUILDCHAIN_APP_PRIVATE_KEY",
+        "BUILDCHAIN_AUTOMATION_TOKEN"
+      ],
+      "secretCount": 2,
+      "outputs": [
+        "context",
+        "matrix",
+        "operation",
+        "stable-wait"
+      ],
+      "outputCount": 4,
+      "taxonomy": {
+        "id": ".pipeline-version",
+        "role": "component",
+        "category": "release",
+        "purpose": "pipeline-version",
+        "status": "active",
+        "canonicalPath": ".github/workflows/.release-pipeline-version.yml",
+        "compatibilityAlias": false
+      },
+      "surface": "reusable-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
+    },
     {
       "id": ".release-promote",
       "path": ".github/workflows/.release-promote.yml",
@@ -476,6 +631,66 @@
       "sunsetCondition": "explicit-contract-change-review",
       "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
     },
+    {
+      "id": "buildchain-recover",
+      "path": ".github/workflows/buildchain-recover.yml",
+      "reusable": false,
+      "inputs": [],
+      "inputCount": 0,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [],
+      "outputCount": 0,
+      "taxonomy": {
+        "id": "buildchain-recover",
+        "role": "self",
+        "category": "ops",
+        "purpose": "recovery",
+        "status": "active",
+        "canonicalPath": ".github/workflows/buildchain-recover.yml",
+        "compatibilityAlias": false
+      },
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
+    },
+    {
+      "id": "buildchain",
+      "path": ".github/workflows/buildchain.yml",
+      "reusable": false,
+      "inputs": [],
+      "inputCount": 0,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [],
+      "outputCount": 0,
+      "taxonomy": {
+        "id": "buildchain",
+        "role": "self",
+        "category": "ops",
+        "purpose": "pipeline",
+        "status": "active",
+        "canonicalPath": ".github/workflows/buildchain.yml",
+        "compatibilityAlias": false
+      },
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
+    },
     {
       "id": "public-build-adopter-qualification",
       "path": ".github/workflows/public-build-adopter-qualification.yml",
@@ -873,7 +1088,9 @@
         "native-command",
         "native-command-root",
         "native-heartbeat-seconds",
+        "native-platform",
         "native-proof-json",
+        "pipeline-attempt",
         "plan-root",
         "project-cut-proof-json",
         "queue-admission-context",
@@ -893,7 +1110,7 @@
         "toolchain-root",
         "warrant-lease-seconds"
       ],
-      "inputCount": 42,
+      "inputCount": 44,
       "secrets": [
         "github-token"
       ],
@@ -1046,7 +1263,7 @@
       "status": "preview",
       "owner": "buildchain-workflows",
       "maturity": "preview",
-      "introducedVersion": "4.1.3-alpha.1",
+      "introducedVersion": "4.1.3-alpha.10",
       "compatibilityPromise": "current-contract-only",
       "deprecationReplacement": "",
       "sunsetCondition": "explicit-contract-change-review",
@@ -1296,6 +1513,71 @@
       "sunsetCondition": "explicit-contract-change-review",
       "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
     },
+    {
+      "id": "public-ops-pipeline",
+      "path": ".github/workflows/public-ops-pipeline.yml",
+      "reusable": true,
+      "inputs": [
+        "config-path"
+      ],
+      "inputCount": 1,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [],
+      "outputCount": 0,
+      "taxonomy": {
+        "id": "pipeline",
+        "role": "public",
+        "category": "ops",
+        "purpose": "pipeline",
+        "status": "active",
+        "canonicalPath": ".github/workflows/public-ops-pipeline.yml",
+        "compatibilityAlias": false
+      },
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
+    },
+    {
+      "id": "public-ops-recover",
+      "path": ".github/workflows/public-ops-recover.yml",
+      "reusable": true,
+      "inputs": [
+        "attempt",
+        "runtime-ref"
+      ],
+      "inputCount": 2,
+      "secrets": [],
+      "secretCount": 0,
+      "outputs": [],
+      "outputCount": 0,
+      "taxonomy": {
+        "id": "recover",
+        "role": "public",
+        "category": "ops",
+        "purpose": "recover",
+        "status": "active",
+        "canonicalPath": ".github/workflows/public-ops-recover.yml",
+        "compatibilityAlias": false
+      },
+      "surface": "repository-workflow",
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-workflows",
+      "maturity": "active",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
+    },
     {
       "id": "public-ops-release-governance",
       "path": ".github/workflows/public-ops-release-governance.yml",
@@ -2014,944 +2296,14 @@
         "web-surface-url",
         "web-surface-urls-json"
       ],
-      "outputCount": 23,
-      "taxonomy": {
-        "id": ".web-surface",
-        "role": "public",
-        "category": "release",
-        "purpose": "web",
-        "status": "active",
-        "canonicalPath": ".github/workflows/public-release-web.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-build-adopter-dogfood",
-      "path": ".github/workflows/self-build-adopter-dogfood.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "v4-adopter-delivery-dogfood",
-        "role": "self",
-        "category": "build",
-        "purpose": "adopter-dogfood",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-build-adopter-dogfood.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-build-alpha-dogfood",
-      "path": ".github/workflows/self-build-alpha-dogfood.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "buildchain-alpha-self-dogfood",
-        "role": "self",
-        "category": "build",
-        "purpose": "alpha-dogfood",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-build-alpha-dogfood.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-build-binary-distribution",
-      "path": ".github/workflows/self-build-binary-distribution.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "binary-distribution",
-        "role": "self",
-        "category": "build",
-        "purpose": "binary-distribution",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-build-binary-distribution.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "release-passport",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-build-channel-verify",
-      "path": ".github/workflows/self-build-channel-verify.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "channel-verify",
-        "role": "self",
-        "category": "build",
-        "purpose": "channel-verify",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-build-channel-verify.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-build-demo-dogfood",
-      "path": ".github/workflows/self-build-demo-dogfood.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "auditable-demo",
-        "role": "self",
-        "category": "build",
-        "purpose": "demo-dogfood",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-build-demo-dogfood.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-build-demo-media-qualification",
-      "path": ".github/workflows/self-build-demo-media-qualification.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "auditable-demo-media-profile-qualification",
-        "role": "self",
-        "category": "build",
-        "purpose": "demo-media-qualification",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-build-demo-media-qualification.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-build-fixture",
-      "path": ".github/workflows/self-build-fixture.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "build-surface-fixture",
-        "role": "self",
-        "category": "build",
-        "purpose": "fixture",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-build-fixture.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "repository-internal",
-      "owner": "buildchain-workflows",
-      "maturity": "repository-internal",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-build-public-consumer-dogfood",
-      "path": ".github/workflows/self-build-public-consumer-dogfood.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "v4-public-consumer-dogfood",
-        "role": "self",
-        "category": "build",
-        "purpose": "public-consumer-dogfood",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-build-public-consumer-dogfood.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-build-stable-candidate-qualification",
-      "path": ".github/workflows/self-build-stable-candidate-qualification.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "buildchain-stable-candidate-qualification",
-        "role": "self",
-        "category": "build",
-        "purpose": "stable-candidate-qualification",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-build-stable-candidate-qualification.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-patrol",
-      "capabilityGroup": "api-cli-reference",
-      "status": "repository-internal",
-      "owner": "buildchain-workflows",
-      "maturity": "repository-internal",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-build-stable-dogfood",
-      "path": ".github/workflows/self-build-stable-dogfood.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "buildchain-stable-self-dogfood",
-        "role": "self",
-        "category": "build",
-        "purpose": "stable-dogfood",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-build-stable-dogfood.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-build-verify",
-      "path": ".github/workflows/self-build-verify.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "verify",
-        "role": "self",
-        "category": "build",
-        "purpose": "verify",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-build-verify.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-ops-bootstrap-dogfood",
-      "path": ".github/workflows/self-ops-bootstrap-dogfood.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "universal-bootstrap-dogfood",
-        "role": "self",
-        "category": "ops",
-        "purpose": "bootstrap-dogfood",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-ops-dev-delivery",
-      "path": ".github/workflows/self-ops-dev-delivery.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "buildchain-dev-delivery",
-        "role": "self",
-        "category": "ops",
-        "purpose": "dev-delivery",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-dev-delivery.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "dev-governance",
-      "capabilityGroup": "governance-versioning",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-ops-governance-audit",
-      "path": ".github/workflows/self-ops-governance-audit.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "github-governance-audit",
-        "role": "self",
-        "category": "ops",
-        "purpose": "governance-audit",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-governance-audit.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "dev-governance",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-ops-housekeeping-daily",
-      "path": ".github/workflows/self-ops-housekeeping-daily.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "engineering-housekeeper-daily",
-        "role": "self",
-        "category": "ops",
-        "purpose": "housekeeping-daily",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-housekeeping-daily.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-patrol",
-      "capabilityGroup": "governance-versioning",
-      "status": "preview",
-      "owner": "buildchain-workflows",
-      "maturity": "preview",
-      "introducedVersion": "4.1.3-alpha.1",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "One reusable policy and evidence boundary owns Engineering Housekeeper execution; scheduled callers contain cadence values only."
-    },
-    {
-      "id": "self-ops-housekeeping-monthly",
-      "path": ".github/workflows/self-ops-housekeeping-monthly.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "engineering-housekeeper-monthly",
-        "role": "self",
-        "category": "ops",
-        "purpose": "housekeeping-monthly",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-patrol",
-      "capabilityGroup": "governance-versioning",
-      "status": "preview",
-      "owner": "buildchain-workflows",
-      "maturity": "preview",
-      "introducedVersion": "4.1.3-alpha.1",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "One reusable policy and evidence boundary owns Engineering Housekeeper execution; scheduled callers contain cadence values only."
-    },
-    {
-      "id": "self-ops-housekeeping-weekly",
-      "path": ".github/workflows/self-ops-housekeeping-weekly.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "engineering-housekeeper-weekly",
-        "role": "self",
-        "category": "ops",
-        "purpose": "housekeeping-weekly",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-patrol",
-      "capabilityGroup": "governance-versioning",
-      "status": "preview",
-      "owner": "buildchain-workflows",
-      "maturity": "preview",
-      "introducedVersion": "4.1.3-alpha.1",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "One reusable policy and evidence boundary owns Engineering Housekeeper execution; scheduled callers contain cadence values only."
-    },
-    {
-      "id": "self-ops-merge-queue",
-      "path": ".github/workflows/self-ops-merge-queue.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "dev-merge-queue-governance",
-        "role": "self",
-        "category": "ops",
-        "purpose": "merge-queue",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-merge-queue.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-ops-patrol-daily",
-      "path": ".github/workflows/self-ops-patrol-daily.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "buildchain-patrol-daily",
-        "role": "self",
-        "category": "ops",
-        "purpose": "patrol-daily",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-patrol-daily.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-patrol",
-      "capabilityGroup": "governance-versioning",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-ops-patrol-monthly",
-      "path": ".github/workflows/self-ops-patrol-monthly.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "buildchain-patrol-monthly",
-        "role": "self",
-        "category": "ops",
-        "purpose": "patrol-monthly",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-patrol-monthly.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-patrol",
-      "capabilityGroup": "governance-versioning",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-ops-patrol-weekly",
-      "path": ".github/workflows/self-ops-patrol-weekly.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "buildchain-patrol-weekly",
-        "role": "self",
-        "category": "ops",
-        "purpose": "patrol-weekly",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-patrol-weekly.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-patrol",
-      "capabilityGroup": "governance-versioning",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-ops-promotion-recovery",
-      "path": ".github/workflows/self-ops-promotion-recovery.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "buildchain-ref-promotion-recovery",
-        "role": "self",
-        "category": "ops",
-        "purpose": "promotion-recovery",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-promotion-recovery.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-ops-runner-smoke",
-      "path": ".github/workflows/self-ops-runner-smoke.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "self-hosted-runner-smoke",
-        "role": "self",
-        "category": "ops",
-        "purpose": "runner-smoke",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-runner-smoke.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "compatibility-fixture",
-      "owner": "buildchain-workflows",
-      "maturity": "compatibility-fixture",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-ops-stable-candidate-patrol",
-      "path": ".github/workflows/self-ops-stable-candidate-patrol.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "buildchain-stable-candidate-patrol",
-        "role": "self",
-        "category": "ops",
-        "purpose": "stable-candidate-patrol",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-patrol",
-      "capabilityGroup": "governance-versioning",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-release-binary-assets",
-      "path": ".github/workflows/self-release-binary-assets.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "binary-release-assets",
-        "role": "self",
-        "category": "release",
-        "purpose": "binary-assets",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-release-binary-assets.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-release-line-open",
-      "path": ".github/workflows/self-release-line-open.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "release-line-bootstrap",
-        "role": "self",
-        "category": "release",
-        "purpose": "line-open",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-release-line-open.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "release-governance",
-      "capabilityGroup": "release-passport-trust",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-release-next-development",
-      "path": ".github/workflows/self-release-next-development.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "next-development-review",
-        "role": "self",
-        "category": "release",
-        "purpose": "next-development",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-release-next-development.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-release-npm-dry-run",
-      "path": ".github/workflows/self-release-npm-dry-run.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "npm-publish",
-        "role": "self",
-        "category": "release",
-        "purpose": "npm-dry-run",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-release-npm-dry-run.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-release-promote",
-      "path": ".github/workflows/self-release-promote.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "buildchain-ref-promotion",
-        "role": "self",
-        "category": "release",
-        "purpose": "promote",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-release-promote.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "release-governance",
-      "capabilityGroup": "release-passport-trust",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-release-rehearsal-dogfood",
-      "path": ".github/workflows/self-release-rehearsal-dogfood.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
-      "taxonomy": {
-        "id": "v4-publication-rehearsal-dogfood",
-        "role": "self",
-        "category": "release",
-        "purpose": "rehearsal-dogfood",
-        "status": "active",
-        "canonicalPath": ".github/workflows/self-release-rehearsal-dogfood.yml",
-        "compatibilityAlias": false
-      },
-      "surface": "repository-workflow",
-      "capabilityGroup": "api-cli-reference",
-      "status": "active",
-      "owner": "buildchain-workflows",
-      "maturity": "active",
-      "introducedVersion": "4.1.0-alpha.0",
-      "compatibilityPromise": "current-contract-only",
-      "deprecationReplacement": "",
-      "sunsetCondition": "explicit-contract-change-review",
-      "nonDuplicationRationale": "Canonical workflow owns one declared API or orchestration responsibility."
-    },
-    {
-      "id": "self-release-tail-dogfood",
-      "path": ".github/workflows/self-release-tail-dogfood.yml",
-      "reusable": false,
-      "inputs": [],
-      "inputCount": 0,
-      "secrets": [],
-      "secretCount": 0,
-      "outputs": [],
-      "outputCount": 0,
+      "outputCount": 23,
       "taxonomy": {
-        "id": "v4-declarative-release-tail-dogfood",
-        "role": "self",
+        "id": ".web-surface",
+        "role": "public",
         "category": "release",
-        "purpose": "tail-dogfood",
+        "purpose": "web",
         "status": "active",
-        "canonicalPath": ".github/workflows/self-release-tail-dogfood.yml",
+        "canonicalPath": ".github/workflows/public-release-web.yml",
         "compatibilityAlias": false
       },
       "surface": "repository-workflow",
@@ -4920,10 +4272,11 @@
         "branch",
         "heartbeat-seconds",
         "lease-seconds",
+        "pipeline-attempt",
         "runtime-sha",
         "token"
       ],
-      "inputCount": 5,
+      "inputCount": 6,
       "capabilityGroup": "release-passport-trust",
       "status": "active",
       "owner": "buildchain-actions",
@@ -5027,9 +4380,10 @@
         "project-cut-proof-root",
         "request-json",
         "runtime-sha",
+        "status-token",
         "token"
       ],
-      "inputCount": 5,
+      "inputCount": 6,
       "capabilityGroup": "release-passport-trust",
       "status": "active",
       "owner": "buildchain-actions",
@@ -6636,6 +5990,142 @@
       "sunsetCondition": "explicit-contract-change-review",
       "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
     },
+    {
+      "apiRole": "implementation",
+      "id": "publication/pipeline/apply",
+      "path": "actions/publication/pipeline/apply/action.yml",
+      "inputs": [
+        "context",
+        "token"
+      ],
+      "inputCount": 2,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "publication/pipeline/build",
+      "path": "actions/publication/pipeline/build/action.yml",
+      "inputs": [
+        "context",
+        "platform"
+      ],
+      "inputCount": 2,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "publication/pipeline/prepare",
+      "path": "actions/publication/pipeline/prepare/action.yml",
+      "inputs": [
+        "attempt",
+        "definition-sha",
+        "token"
+      ],
+      "inputCount": 3,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "publication/pipeline/prepare-qualification",
+      "path": "actions/publication/pipeline/prepare-qualification/action.yml",
+      "inputs": [
+        "context",
+        "token"
+      ],
+      "inputCount": 2,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "publication/pipeline/qualify",
+      "path": "actions/publication/pipeline/qualify/action.yml",
+      "inputs": [
+        "context",
+        "token"
+      ],
+      "inputCount": 2,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "publication/pipeline/seal-qualification",
+      "path": "actions/publication/pipeline/seal-qualification/action.yml",
+      "inputs": [
+        "bundle-path",
+        "context",
+        "token"
+      ],
+      "inputCount": 3,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "publication/pipeline/settle",
+      "path": "actions/publication/pipeline/settle/action.yml",
+      "inputs": [
+        "context",
+        "pr-token",
+        "token"
+      ],
+      "inputCount": 3,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
     {
       "apiRole": "implementation",
       "id": "publication/settlement/retain",
@@ -6676,6 +6166,65 @@
       "sunsetCondition": "explicit-contract-change-review",
       "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
     },
+    {
+      "apiRole": "implementation",
+      "id": "publication/version/build",
+      "path": "actions/publication/version/build/action.yml",
+      "inputs": [
+        "context",
+        "platform"
+      ],
+      "inputCount": 2,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "publication/version/materialize-development",
+      "path": "actions/publication/version/materialize-development/action.yml",
+      "inputs": [
+        "context",
+        "pr-token",
+        "token"
+      ],
+      "inputCount": 3,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "publication/version/materialize-publication",
+      "path": "actions/publication/version/materialize-publication/action.yml",
+      "inputs": [
+        "context",
+        "operation",
+        "token"
+      ],
+      "inputCount": 3,
+      "capabilityGroup": "release-passport-trust",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
     {
       "apiRole": "implementation",
       "id": "release/binary/coordinates",
@@ -7870,6 +7419,8 @@
       "path": "actions/runtime/selection/resolve/action.yml",
       "inputs": [
         "contract-lock",
+        "pipeline-attempt",
+        "recovery-attempt",
         "resume-run-id",
         "runtime-ref",
         "selection",
@@ -7879,7 +7430,7 @@
         "workflow-ref",
         "workflow-sha"
       ],
-      "inputCount": 9,
+      "inputCount": 11,
       "capabilityGroup": "api-cli-reference",
       "status": "active",
       "owner": "buildchain-actions",
@@ -8649,6 +8200,105 @@
       "sunsetCondition": "explicit-contract-change-review",
       "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
     },
+    {
+      "apiRole": "implementation",
+      "id": "workflow/pipeline/build",
+      "path": "actions/workflow/pipeline/build/action.yml",
+      "inputs": [
+        "context",
+        "platform"
+      ],
+      "inputCount": 2,
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "workflow/pipeline/control",
+      "path": "actions/workflow/pipeline/control/action.yml",
+      "inputs": [
+        "config-path",
+        "queue-token",
+        "token"
+      ],
+      "inputCount": 3,
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "workflow/pipeline/record-build",
+      "path": "actions/workflow/pipeline/record-build/action.yml",
+      "inputs": [
+        "context",
+        "token"
+      ],
+      "inputCount": 2,
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "workflow/pipeline/recover",
+      "path": "actions/workflow/pipeline/recover/action.yml",
+      "inputs": [
+        "attempt",
+        "definition-sha",
+        "queue-token",
+        "token"
+      ],
+      "inputCount": 4,
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
+    {
+      "apiRole": "implementation",
+      "id": "workflow/pipeline/wake",
+      "path": "actions/workflow/pipeline/wake/action.yml",
+      "inputs": [
+        "attempt",
+        "stable-wait",
+        "token"
+      ],
+      "inputCount": 3,
+      "capabilityGroup": "api-cli-reference",
+      "status": "active",
+      "owner": "buildchain-actions",
+      "maturity": "stable",
+      "introducedVersion": "4.1.0-alpha.0",
+      "compatibilityPromise": "current-contract-only",
+      "deprecationReplacement": "",
+      "sunsetCondition": "explicit-contract-change-review",
+      "nonDuplicationRationale": "One capability node owns the composite or JavaScript adapter boundary."
+    },
     {
       "apiRole": "implementation",
       "id": "workflow/settlement/seal",