@kungfu-tech/buildchain 4.1.3-alpha.1 → 4.1.3-alpha.2

package/architecture/action-taxonomy.json

@@ -341,6 +341,18 @@
         "settlement": {
           "responsibility": "Retain immutable publication completion and verify its terminal receipt independently.",
           "operations": ["retain", "verify"]
+        },
+        "pipeline": {
+          "responsibility": "Prepare, independently qualify, publish and settle declared products inside one business attempt.",
+          "operations": [
+            "prepare",
+            "build",
+            "qualify",
+            "prepare-qualification",
+            "seal-qualification",
+            "apply",
+            "settle"
+          ]
         }
       }
     },
@@ -516,6 +528,10 @@
         "settlement": {
           "responsibility": "Seal candidate terminal evidence and reconcile successful protected backflow.",
           "operations": ["seal"]
+        },
+        "pipeline": {
+          "responsibility": "Reconcile source-bound business attempts through protected delivery and product verification.",
+          "operations": ["control", "build", "record-build", "wake", "recover"]
         }
       }
     },

package/architecture/agent-change-map.md

@@ -135,6 +135,8 @@ Safe change route: Reduce one declared responsibility in its owning module, run
 - `.github/workflows/self-build-verify.yml`
 - `.github/workflows/self-release-promote.yml`
 - `.github/workflows/.release-binary-assets.yml`
+- `.github/workflows/public-ops-dev-auto-merge.yml`
+- `tests/release-topology.test.mjs`
 
 ## action-process-runtime
 
@@ -439,6 +441,38 @@ Owner: Buildchain build signing transactions maintainers
 
 - `node --test tests/signing-authority-transactions.test.mjs tests/native-artifact-signing-authority.test.mjs`
 
+## business-attempt-journal
+
+Owner: Buildchain pipeline maintainers
+
+### Implementation
+
+- `packages/core/workflow/attempt/identity.js`
+- `packages/core/workflow/attempt/materials.js`
+- `packages/core/workflow/attempt/reader-entry.js`
+- `packages/core/workflow/attempt/reader.js`
+- `packages/core/workflow/attempt/records.js`
+- `packages/core/workflow/attempt/store.js`
+
+### Contracts
+
+- `architecture/decisions/0006-business-attempt-journal.md`
+
+### Tests
+
+- `tests/business-attempt-materials.test.mjs`
+- `tests/business-attempt-store.test.mjs`
+- `tests/business-attempt.test.mjs`
+
+### Generated outputs
+
+- `dist/readers/business-attempt.cjs`
+
+### Minimal validation
+
+- `node --test tests/business-attempt*.test.mjs`
+- `node scripts/build-release-discussion-reader.mjs --check`
+
 ## cli-capability-adapters
 
 Owner: Buildchain CLI maintainers
@@ -1006,6 +1040,206 @@ Owner: Buildchain architecture maintainers
 
 - `node --test tests/internal-architecture.test.mjs tests/maintainability.test.mjs tests/maintainability-governance.test.mjs`
 
+## minimal-consumer-contract
+
+Owner: Buildchain consumer contract maintainers
+
+### Implementation
+
+- `packages/core/consumer/contract/entries.js`
+- `packages/core/consumer/contract/examples.js`
+- `packages/core/consumer/contract/identity.js`
+- `packages/core/consumer/contract/inspection.js`
+- `packages/core/consumer/contract/plan.js`
+- `packages/core/consumer/contract/products.js`
+- `packages/core/consumer/contract/shape.js`
+- `scripts/generate-minimal-consumer-contract.mjs`
+
+### Contracts
+
+- `architecture/decisions/0005-minimal-consumer-contract.md`
+
+### Tests
+
+- `tests/minimal-consumer-contract.test.mjs`
+
+### Generated outputs
+
+- `architecture/minimal-consumer-migration.json`
+- `templates/minimal-consumer`
+
+### Minimal validation
+
+- `node --test tests/minimal-consumer-contract.test.mjs`
+- `node scripts/generate-minimal-consumer-contract.mjs --check`
+
+## minimal-consumer-pipeline
+
+Owner: Buildchain pipeline maintainers
+
+### Implementation
+
+- `packages/core/providers/github/attempt-index.js`
+- `packages/core/providers/github/attempt-journal.js`
+- `packages/core/providers/github/pipeline-checkout.js`
+- `packages/core/providers/github/pipeline-events.js`
+- `packages/core/providers/github/pipeline-integration.js`
+- `packages/core/providers/github/pipeline-policy.js`
+- `packages/core/providers/github/pipeline-run-entry.js`
+- `packages/core/providers/github/pipeline-runs.js`
+- `packages/core/providers/github/pipeline-source.js`
+- `packages/core/providers/github/pipeline-worker.js`
+- `packages/core/publication/pipeline/actions.js`
+- `packages/core/publication/pipeline/apply.js`
+- `packages/core/publication/pipeline/build-segments.js`
+- `packages/core/publication/pipeline/capsules.js`
+- `packages/core/publication/pipeline/context.js`
+- `packages/core/publication/pipeline/development-anchor.js`
+- `packages/core/publication/pipeline/development-current.js`
+- `packages/core/publication/pipeline/development-pr.js`
+- `packages/core/publication/pipeline/development-proof.js`
+- `packages/core/publication/pipeline/development-transition.js`
+- `packages/core/publication/pipeline/distribution.js`
+- `packages/core/publication/pipeline/documents.js`
+- `packages/core/publication/pipeline/effects.js`
+- `packages/core/publication/pipeline/files.js`
+- `packages/core/publication/pipeline/imported-materials.js`
+- `packages/core/publication/pipeline/journal.js`
+- `packages/core/publication/pipeline/next-development.js`
+- `packages/core/publication/pipeline/pack.js`
+- `packages/core/publication/pipeline/package-policy.js`
+- `packages/core/publication/pipeline/plan.js`
+- `packages/core/publication/pipeline/prepare.js`
+- `packages/core/publication/pipeline/qualification.js`
+- `packages/core/publication/pipeline/qualify.js`
+- `packages/core/publication/pipeline/recovery-admission.js`
+- `packages/core/publication/pipeline/recovery-build-download.js`
+- `packages/core/publication/pipeline/recovery-build-plan.js`
+- `packages/core/publication/pipeline/recovery-build-readback.js`
+- `packages/core/publication/pipeline/recovery-capsules.js`
+- `packages/core/publication/pipeline/recovery-import.js`
+- `packages/core/publication/pipeline/recovery-inspection.js`
+- `packages/core/publication/pipeline/recovery-materials.js`
+- `packages/core/publication/pipeline/recovery-plan.js`
+- `packages/core/publication/pipeline/recovery-prepare.js`
+- `packages/core/publication/pipeline/recovery-qualification.js`
+- `packages/core/publication/pipeline/recovery-readback.js`
+- `packages/core/publication/pipeline/recovery-signing.js`
+- `packages/core/publication/pipeline/sealed-products.js`
+- `packages/core/publication/pipeline/settle.js`
+- `packages/core/publication/pipeline/signing.js`
+- `packages/core/publication/pipeline/source-plan.js`
+- `packages/core/publication/pipeline/version.js`
+- `packages/core/workflow/attempt/journal.js`
+- `packages/core/workflow/commands/pipeline-build.mjs`
+- `packages/core/workflow/pipeline/action-output.js`
+- `packages/core/workflow/pipeline/actions.js`
+- `packages/core/workflow/pipeline/build-control.js`
+- `packages/core/workflow/pipeline/build-evidence.js`
+- `packages/core/workflow/pipeline/build-qualification.js`
+- `packages/core/workflow/pipeline/build-result.js`
+- `packages/core/workflow/pipeline/build.js`
+- `packages/core/workflow/pipeline/cancellation.js`
+- `packages/core/workflow/pipeline/channel-control.js`
+- `packages/core/workflow/pipeline/controller.js`
+- `packages/core/workflow/pipeline/delivery-control.js`
+- `packages/core/workflow/pipeline/delivery-observation.js`
+- `packages/core/workflow/pipeline/delivery-request.js`
+- `packages/core/workflow/pipeline/events.js`
+- `packages/core/workflow/pipeline/fence.js`
+- `packages/core/workflow/pipeline/group-control.js`
+- `packages/core/workflow/pipeline/guard-build.js`
+- `packages/core/workflow/pipeline/guard.js`
+- `packages/core/workflow/pipeline/host.js`
+- `packages/core/workflow/pipeline/materials.js`
+- `packages/core/workflow/pipeline/notifications.js`
+- `packages/core/workflow/pipeline/parent-notification.js`
+- `packages/core/workflow/pipeline/platforms.js`
+- `packages/core/workflow/pipeline/progress.js`
+- `packages/core/workflow/pipeline/projection.js`
+- `packages/core/workflow/pipeline/reconcile.js`
+- `packages/core/workflow/pipeline/recovery-action.js`
+- `packages/core/workflow/pipeline/recovery-admission.js`
+- `packages/core/workflow/pipeline/recovery-build-control.js`
+- `packages/core/workflow/pipeline/recovery-build-evidence.js`
+- `packages/core/workflow/pipeline/recovery-build.js`
+- `packages/core/workflow/pipeline/recovery-controller.js`
+- `packages/core/workflow/pipeline/recovery-integration.js`
+- `packages/core/workflow/pipeline/recovery-merge-proof.js`
+- `packages/core/workflow/pipeline/recovery-ownership-settlement.js`
+- `packages/core/workflow/pipeline/recovery-ownership.js`
+- `packages/core/workflow/pipeline/recovery-plan.js`
+- `packages/core/workflow/pipeline/recovery-runtime.js`
+- `packages/core/workflow/pipeline/recovery-session.js`
+- `packages/core/workflow/pipeline/recovery-transition.js`
+- `packages/core/workflow/pipeline/recovery-unrecorded-build.js`
+- `packages/core/workflow/pipeline/runtime-source.js`
+- `packages/core/workflow/pipeline/selection.js`
+- `packages/core/workflow/pipeline/session.js`
+- `packages/core/workflow/pipeline/settlement.js`
+- `packages/core/workflow/pipeline/wake.js`
+- `packages/core/workflow/pipeline/web-status.js`
+
+### Contracts
+
+- `architecture/decisions/0007-hosted-pipeline-controller.md`
+
+### Tests
+
+- `tests/business-attempt-journal.test.mjs`
+- `tests/github-attempt-journal.test.mjs`
+- `tests/pipeline-build-qualification.test.mjs`
+- `tests/pipeline-build.test.mjs`
+- `tests/pipeline-cancellation.test.mjs`
+- `tests/pipeline-channel.test.mjs`
+- `tests/pipeline-controller.test.mjs`
+- `tests/pipeline-delivery-request.test.mjs`
+- `tests/pipeline-distribution.test.mjs`
+- `tests/pipeline-events.test.mjs`
+- `tests/pipeline-fence.test.mjs`
+- `tests/pipeline-guard.test.mjs`
+- `tests/pipeline-index.test.mjs`
+- `tests/pipeline-integration.test.mjs`
+- `tests/pipeline-next-development.test.mjs`
+- `tests/pipeline-npm-channel.test.mjs`
+- `tests/pipeline-policy.test.mjs`
+- `tests/pipeline-progress.test.mjs`
+- `tests/pipeline-projection.test.mjs`
+- `tests/pipeline-publication-artifacts.test.mjs`
+- `tests/pipeline-publication-effects.test.mjs`
+- `tests/pipeline-publication-journal.test.mjs`
+- `tests/pipeline-publication-pack.test.mjs`
+- `tests/pipeline-publication-plan.test.mjs`
+- `tests/pipeline-publication-providers.test.mjs`
+- `tests/pipeline-publication-recovery-admission.test.mjs`
+- `tests/pipeline-publication-recovery-apply.test.mjs`
+- `tests/pipeline-publication-recovery-build.test.mjs`
+- `tests/pipeline-publication-recovery-signing.test.mjs`
+- `tests/pipeline-publication-version.test.mjs`
+- `tests/pipeline-reconcile.test.mjs`
+- `tests/pipeline-recovery-admission.test.mjs`
+- `tests/pipeline-recovery-build.test.mjs`
+- `tests/pipeline-recovery-controller.test.mjs`
+- `tests/pipeline-recovery-delivery.test.mjs`
+- `tests/pipeline-recovery-interruption.test.mjs`
+- `tests/pipeline-recovery-ownership.test.mjs`
+- `tests/pipeline-recovery-runtime-continuation.test.mjs`
+- `tests/pipeline-recovery-session.test.mjs`
+- `tests/pipeline-runs.test.mjs`
+- `tests/pipeline-runtime.test.mjs`
+- `tests/pipeline-settlement.test.mjs`
+- `tests/pipeline-source.test.mjs`
+- `tests/pipeline-web-status.test.mjs`
+- `tests/pipeline-worker.test.mjs`
+
+### Generated outputs
+
+- None.
+
+### Minimal validation
+
+- `node --test tests/pipeline-*.test.mjs tests/business-attempt-journal.test.mjs tests/github-attempt-journal.test.mjs`
+
 ## npm-publication-transaction
 
 Owner: Buildchain npm publication transaction maintainers
@@ -1998,9 +2232,11 @@ Owner: Buildchain runtime maintainers
 
 - `packages/core/runtime/entry/actions.js`
 - `packages/core/runtime/entry/activation.js`
+- `packages/core/runtime/entry/attempt.js`
 - `packages/core/runtime/entry/github.js`
 - `packages/core/runtime/entry/recovery.js`
 - `packages/core/runtime/entry/selection.js`
+- `packages/core/runtime/entry/source.js`
 - `scripts/check-runtime-entry.mjs`
 
 ### Contracts
@@ -2010,10 +2246,11 @@ Owner: Buildchain runtime maintainers
 
 ### Tests
 
-- `tests/runtime-entry-selection.test.mjs`
+- `tests/pipeline-recovery-runtime-continuation.test.mjs`
 - `tests/runtime-entry-activation.test.mjs`
-- `tests/runtime-entry-provider.test.mjs`
 - `tests/runtime-entry-architecture.test.mjs`
+- `tests/runtime-entry-provider.test.mjs`
+- `tests/runtime-entry-selection.test.mjs`
 
 ### Generated outputs
 

package/architecture/ci-lane-change-budget.json

@@ -2563,6 +2563,295 @@
         "expectedContributionSeconds": 0,
         "rationale": "Current 4.1 capability node. Budget uses the declared job timeout or the conservative six-hour provider ceiling; it is not a measured latency or a new claim of required-check authority."
       }
+    },
+    {
+      "laneId": ".github/workflows/.ops-pipeline-delivery.yml#delivery",
+      "authorityClass": "merge-critical-admission",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 360,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": true,
+        "metric": "minimal pipeline bounded hosted execution",
+        "expectedContributionSeconds": 21600,
+        "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/public-ops-pipeline.yml#runtime",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 5,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "minimal pipeline bounded hosted execution",
+        "expectedContributionSeconds": 300,
+        "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/public-ops-pipeline.yml#control",
+      "authorityClass": "merge-critical-admission",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 20,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": true,
+        "metric": "minimal pipeline bounded hosted execution",
+        "expectedContributionSeconds": 1200,
+        "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.ops-pipeline-execute.yml#build",
+      "authorityClass": "merge-critical-required",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 60,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": true,
+        "metric": "minimal pipeline bounded hosted execution",
+        "expectedContributionSeconds": 3600,
+        "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.ops-pipeline-execute.yml#record-build",
+      "authorityClass": "merge-critical-required",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 15,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": true,
+        "metric": "minimal pipeline bounded hosted execution",
+        "expectedContributionSeconds": 900,
+        "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.ops-pipeline-execute.yml#delivery",
+      "authorityClass": "merge-critical-admission",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 360,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": true,
+        "metric": "minimal pipeline bounded hosted execution",
+        "expectedContributionSeconds": 21600,
+        "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.ops-pipeline-execute.yml#record-delivery",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 5,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "minimal pipeline bounded hosted execution",
+        "expectedContributionSeconds": 300,
+        "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.release-pipeline-products.yml#prepare",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "ref-scoped",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 15,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "declared product publication and retained follow-ups",
+        "expectedContributionSeconds": 900,
+        "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.release-pipeline-products.yml#build",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "ref-scoped",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 300,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "declared product publication and retained follow-ups",
+        "expectedContributionSeconds": 18000,
+        "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.release-pipeline-products.yml#qualify",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "ref-scoped",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 20,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "declared product publication and retained follow-ups",
+        "expectedContributionSeconds": 1200,
+        "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.release-pipeline-products.yml#apply",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "ref-scoped",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 30,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "declared product publication and retained follow-ups",
+        "expectedContributionSeconds": 1800,
+        "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.release-pipeline-products.yml#settle",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "ref-scoped",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 20,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "declared product publication and retained follow-ups",
+        "expectedContributionSeconds": 1200,
+        "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/.ops-pipeline-execute.yml#publication",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 385,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "declared product publication and retained follow-ups",
+        "expectedContributionSeconds": 23100,
+        "rationale": "Post-merge product publication serializes provider writers per repository. At most five declared hosted platforms each have a sixty-minute build limit; independent signing and publisher jobs have explicit timeouts. These are conservative bounds, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/public-ops-recover.yml#runtime",
+      "authorityClass": "evidence",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 5,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "minimal pipeline bounded hosted execution",
+        "expectedContributionSeconds": 300,
+        "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/public-ops-recover.yml#control",
+      "authorityClass": "merge-critical-admission",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 20,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": true,
+        "metric": "minimal pipeline bounded hosted execution",
+        "expectedContributionSeconds": 1200,
+        "rationale": "Owned runtime, metadata or product job boundary. Product matrix uses only declared platforms; native Warrant transfer waits for exact provider terminality. This is a conservative timeout budget, not measured latency."
+      }
+    },
+    {
+      "laneId": ".github/workflows/public-ops-pipeline.yml#execute",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 825,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "shared normal or recovery execution timeout bound",
+        "expectedContributionSeconds": 49500,
+        "rationale": "Delegates to the same isolated product, native delivery and publication jobs. Recovery schedules only qualified missing work; this inherited conservative timeout sum is not measured latency or a new parallel lane family."
+      }
+    },
+    {
+      "laneId": ".github/workflows/public-ops-recover.yml#execute",
+      "authorityClass": "governed-delegation",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "none",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 825,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "shared normal or recovery execution timeout bound",
+        "expectedContributionSeconds": 49500,
+        "rationale": "Delegates to the same isolated product, native delivery and publication jobs. Recovery schedules only qualified missing work; this inherited conservative timeout sum is not measured latency or a new parallel lane family."
+      }
     }
   ],
   "declarationFamilies": [