@kungfu-tech/buildchain 4.1.3 → 4.1.4

package/dist/site/public-surface-audit.json

@@ -3,11 +3,11 @@
   "contract": "kungfu-buildchain-public-surface-reverse-audit",
   "status": "passed",
   "summary": {
-    "cliCommandCount": 117,
+    "cliCommandCount": 113,
     "workflowCount": 44,
     "actionCount": 283,
     "sitePageCount": 94,
-    "docCommandRefCount": 1036,
+    "docCommandRefCount": 998,
     "failureCount": 0
   },
   "enumerated": {
@@ -145,7 +145,7 @@
       {
         "id": "init",
         "source": "bin/buildchain.mjs",
-        "usage": "buildchain init [--cwd <dir>] [--type package|native|web-surface|infra-contract|publication-artifact|anchored-package] [--force]"
+        "usage": "buildchain init [--cwd <dir>] [--type npm|binary|paper|package|native|publication-artifact|anchored-package] [--force]"
       },
       {
         "id": "inspect",
@@ -392,21 +392,6 @@
         "source": "bin/buildchain.mjs",
         "usage": "buildchain paper agent verify [--cwd <dir>] [--offline] [--json]"
       },
-      {
-        "id": "paper-alpha",
-        "source": "bin/buildchain.mjs",
-        "usage": "buildchain paper alpha [--cwd <dir>] [--source-ref <ref>] [--target-ref <ref>]"
-      },
-      {
-        "id": "paper-bootstrap-npm",
-        "source": "bin/buildchain.mjs",
-        "usage": "buildchain paper bootstrap npm [--cwd <dir>] [--execute]"
-      },
-      {
-        "id": "paper-build",
-        "source": "bin/buildchain.mjs",
-        "usage": "buildchain paper build [--cwd <dir>] [--execute] [--json]"
-      },
       {
         "id": "paper-fleet-audit",
         "source": "bin/buildchain.mjs",
@@ -427,15 +412,10 @@
         "source": "bin/buildchain.mjs",
         "usage": "buildchain paper preflight [--cwd <dir>] [--offline] [--json]"
       },
-      {
-        "id": "paper-resume",
-        "source": "bin/buildchain.mjs",
-        "usage": "buildchain paper resume [--cwd <dir>] [--runtime-ref <ref>] [--execute] [--json]"
-      },
       {
         "id": "paper-scaffold",
         "source": "bin/buildchain.mjs",
-        "usage": "buildchain paper scaffold --package <name> --repository <owner/repo> [--write] [--json]"
+        "usage": "buildchain paper scaffold --repository <owner/repo> [--package <name>] [--write] [--json]"
       },
       {
         "id": "paper-status",
@@ -588,392 +568,40 @@
         "usage": "buildchain verify release-passport <file-or-url> [--json]"
       },
       {
-        "id": "version",
-        "source": "bin/buildchain.mjs",
-        "usage": "buildchain version"
-      },
-      {
-        "id": "web-surface",
-        "source": "bin/buildchain.mjs",
-        "usage": "buildchain web-surface ..."
-      }
-    ],
-    "workflowInputs": [
-      {
-        "id": ".build-demo-adapter",
-        "path": ".github/workflows/.build-demo-adapter.yml",
-        "reusable": true,
-        "inputs": [
-          "adapter-arguments-json",
-          "adapter-path",
-          "artifact-retention-days",
-          "contract-lock",
-          "media-profile",
-          "render-media",
-          "renderer-image",
-          "require-trusted-event",
-          "runtime-ref",
-          "runtime-selection",
-          "source-artifact-digest",
-          "source-artifact-name",
-          "source-ref"
-        ],
-        "inputCount": 13,
-        "secrets": [],
-        "secretCount": 0,
-        "outputs": [
-          "gate-artifact-digest",
-          "gate-artifact-id",
-          "gate-artifact-name",
-          "gate-artifact-url",
-          "gate-root",
-          "media-artifact-digest",
-          "media-artifact-id",
-          "media-artifact-name",
-          "media-artifact-url",
-          "media-profile",
-          "media-qualification-root",
-          "media-root",
-          "source-sha"
-        ],
-        "outputCount": 13
-      },
-      {
-        "id": ".build-gate-profile",
-        "path": ".github/workflows/.build-gate-profile.yml",
-        "reusable": true,
-        "inputs": [
-          "artifact-name",
-          "artifact-retention-days",
-          "cargo-registry-index",
-          "checkout-cache-fallback",
-          "checkout-cache-fetch-attempts",
-          "checkout-cache-github-timeout-seconds",
-          "checkout-cache-mirror-url-template",
-          "checkout-cache-mode",
-          "checkout-cache-reference-repository-template",
-          "checkout-cache-timeout-seconds",
-          "contract-lock",
-          "gate-command-json",
-          "gate-environment-json",
-          "gate-plan-command-json",
-          "gate-profile",
-          "gate-registry",
-          "include-advisory",
-          "node-version",
-          "platforms-json",
-          "require-trusted-event",
-          "runner-preset",
-          "runtime-ref",
-          "runtime-selection",
-          "rust-toolchain",
-          "rustup-dist-server",
-          "rustup-update-root",
-          "shifu-cache-profile-digest",
-          "shifu-cache-profile-ref",
-          "source-ref",
-          "untrusted-policy",
-          "working-directory"
-        ],
-        "inputCount": 31,
-        "secrets": [],
-        "secretCount": 0,
-        "outputs": [
-          "buildchain-runtime-sha",
-          "controller-plan-artifact",
-          "controller-plan-digest",
-          "controller-plan-json",
-          "controller-receipt-artifact",
-          "controller-receipt-digest",
-          "controller-receipt-json",
-          "controller-receipt-status",
-          "gate-aggregate-artifact",
-          "gate-aggregate-digest",
-          "gate-aggregate-json",
-          "gate-aggregate-status",
-          "gate-matrix-digest",
-          "source-sha"
-        ],
-        "outputCount": 14
-      },
-      {
-        "id": ".build",
-        "path": ".github/workflows/.build.yml",
-        "reusable": true,
-        "inputs": [
-          "config-path",
-          "contract-lock",
-          "resume-run-id",
-          "runtime-ref",
-          "runtime-selection"
-        ],
-        "inputCount": 5,
-        "secrets": [
-          "BUILDCHAIN_MACOS_CERTIFICATE_P12_BASE64",
-          "BUILDCHAIN_MACOS_CERTIFICATE_PASSWORD",
-          "BUILDCHAIN_MACOS_NOTARY_API_ISSUER",
-          "BUILDCHAIN_MACOS_NOTARY_API_KEY_ID",
-          "BUILDCHAIN_MACOS_NOTARY_API_KEY_P8_BASE64",
-          "BUILDCHAIN_PROMOTION_TOKEN"
-        ],
-        "secretCount": 6,
-        "outputs": [
-          "result"
-        ],
-        "outputCount": 1
-      },
-      {
-        "id": ".ops-git-sync",
-        "path": ".github/workflows/.ops-git-sync.yml",
-        "reusable": true,
-        "inputs": [
-          "contract-lock",
-          "force",
-          "remote-host",
-          "remote-path",
-          "remote-repo",
-          "runtime-ref",
-          "runtime-selection"
-        ],
-        "inputCount": 7,
-        "secrets": [
-          "REMOTE_CREDENTIAL",
-          "REMOTE_USER"
-        ],
-        "secretCount": 2,
-        "outputs": [],
-        "outputCount": 0
-      },
-      {
-        "id": ".ops-pipeline-delivery",
-        "path": ".github/workflows/.ops-pipeline-delivery.yml",
-        "reusable": true,
-        "inputs": [
-          "request",
-          "runtime-selection"
-        ],
-        "inputCount": 2,
-        "secrets": [
-          "BUILDCHAIN_AUTOMATION_TOKEN"
-        ],
-        "secretCount": 1,
-        "outputs": [],
-        "outputCount": 0
-      },
-      {
-        "id": ".ops-pipeline-execute",
-        "path": ".github/workflows/.ops-pipeline-execute.yml",
-        "reusable": true,
-        "inputs": [
-          "attempt",
-          "context",
-          "matrix",
-          "operation",
-          "request",
-          "runtime-selection"
-        ],
-        "inputCount": 6,
-        "secrets": [],
-        "secretCount": 0,
-        "outputs": [],
-        "outputCount": 0
-      },
-      {
-        "id": ".release-authority",
-        "path": ".github/workflows/.release-authority.yml",
-        "reusable": true,
-        "inputs": [
-          "admission-json",
-          "authority-workflow-path",
-          "auto-admission",
-          "auto-admission-kind",
-          "auto-no-gate",
-          "consumer-gate-command",
-          "consumer-gate-controller-sha",
-          "consumer-gate-evidence-source-sha",
-          "consumer-gate-evidence-source-tree",
-          "consumer-predicate-digest",
-          "consumer-predicate-id",
-          "consumer-qualification-required",
-          "contract-lock",
-          "control-plane-audit-json",
-          "dry-run",
-          "evidence-controller-artifact",
-          "evidence-manifest-pattern",
-          "evidence-passport-artifact",
-          "evidence-payload-pattern",
-          "evidence-publication-artifact",
-          "evidence-repository",
-          "evidence-run-id",
-          "evidence-summary-artifact",
-          "expected-json",
-          "gate-aggregate-json",
-          "github-governance-receipt-json",
-          "package-name",
-          "product",
-          "publication-target",
-          "publication-version",
-          "publisher-workflow-path",
-          "required-status-check",
-          "runner-provenance-json",
-          "runtime-ref",
-          "runtime-selection",
-          "source-sha",
-          "target-ref",
-          "used-nonces-json"
-        ],
-        "inputCount": 38,
-        "secrets": [
-          "BUILDCHAIN_GOVERNANCE_READ_TOKEN",
-          "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
-        ],
-        "secretCount": 2,
-        "outputs": [
-          "capability-artifact",
-          "capability-digest",
-          "capability-json",
-          "gate-aggregate-digest",
-          "gate-aggregate-json"
-        ],
-        "outputCount": 5
-      },
-      {
-        "id": ".release-binary-assets",
-        "path": ".github/workflows/.release-binary-assets.yml",
-        "reusable": true,
-        "inputs": [
-          "auto-admission",
-          "contract-lock",
-          "evidence-run-id",
-          "github-governance-receipt-json",
-          "publication-admission-json",
-          "publication-control-plane-audit-json",
-          "publication-expected-json",
-          "publication-gate-aggregate-json",
-          "publication-runner-provenance-json",
-          "publication-used-nonces-json",
-          "publication-version",
-          "release-tag",
-          "runtime-ref",
-          "runtime-selection",
-          "source-sha",
-          "target-ref"
-        ],
-        "inputCount": 16,
-        "secrets": [],
-        "secretCount": 0,
-        "outputs": [],
-        "outputCount": 0
-      },
-      {
-        "id": ".release-pipeline-products",
-        "path": ".github/workflows/.release-pipeline-products.yml",
-        "reusable": true,
-        "inputs": [
-          "attempt",
-          "runtime-selection"
-        ],
-        "inputCount": 2,
-        "secrets": [
-          "BUILDCHAIN_APP_PRIVATE_KEY",
-          "BUILDCHAIN_AUTOMATION_TOKEN",
-          "BUILDCHAIN_NPM_TOKEN"
-        ],
-        "secretCount": 3,
-        "outputs": [
-          "stable-wait"
-        ],
-        "outputCount": 1
-      },
-      {
-        "id": ".release-pipeline-version",
-        "path": ".github/workflows/.release-pipeline-version.yml",
-        "reusable": true,
-        "inputs": [
-          "context",
-          "matrix",
-          "operation",
-          "purpose",
-          "runtime-selection"
-        ],
-        "inputCount": 5,
-        "secrets": [
-          "BUILDCHAIN_APP_PRIVATE_KEY",
-          "BUILDCHAIN_AUTOMATION_TOKEN"
-        ],
-        "secretCount": 2,
-        "outputs": [
-          "context",
-          "matrix",
-          "operation",
-          "stable-wait"
-        ],
-        "outputCount": 4
-      },
-      {
-        "id": ".release-promote",
-        "path": ".github/workflows/.release-promote.yml",
+        "id": "version",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain version"
+      },
+      {
+        "id": "web-surface",
+        "source": "bin/buildchain.mjs",
+        "usage": "buildchain web-surface ..."
+      }
+    ],
+    "workflowInputs": [
+      {
+        "id": ".build-adopter-qualification",
+        "path": ".github/workflows/.build-adopter-qualification.yml",
         "reusable": true,
         "inputs": [
+          "consumer",
+          "consumer-ref",
+          "consumer-repository",
           "contract-lock",
-          "request-json",
+          "input-path",
+          "invocation-source-path",
           "runtime-ref",
           "runtime-selection"
         ],
-        "inputCount": 4,
-        "secrets": [
-          "BUILDCHAIN_ISSUE_APP_ID",
-          "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
-          "BUILDCHAIN_ISSUE_TOKEN",
-          "BUILDCHAIN_PROMOTION_TOKEN",
-          "BUILDCHAIN_PUBLICATION_COMMIT_SIGNING_KEY",
-          "BUILDCHAIN_PUBLICATION_COMMIT_TOKEN",
-          "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY",
-          "buildchain-issue-app-id",
-          "buildchain-issue-app-private-key",
-          "buildchain-issue-token"
-        ],
-        "secretCount": 10,
-        "outputs": [
-          "built-source-sha",
-          "controller-plan-artifact",
-          "controller-plan-digest",
-          "controller-plan-json",
-          "controller-receipt-artifact",
-          "controller-receipt-digest",
-          "controller-receipt-json",
-          "controller-receipt-status",
-          "discussion-id",
-          "discussion-url",
-          "github-artifact-attestation-evidence-root",
-          "github-artifact-attestation-id",
-          "github-artifact-attestation-publication-receipt-digest",
-          "github-artifact-attestation-url",
-          "promoted-sha",
-          "publication-capability-digest",
-          "publication-commit-evidence-digest",
-          "publication-commit-evidence-path",
-          "publication-commit-payload-root",
-          "publication-commit-url",
-          "release-candidate-action",
-          "release-candidate-artifact",
-          "release-candidate-recovery-receipt-artifact",
-          "release-candidate-recovery-root",
-          "release-invocation-root",
-          "release-propagation-work-artifact",
-          "release-receipt-root",
-          "release-tail-declaration-root",
-          "release-tail-receipt-roots-json",
-          "release-tail-state-root",
-          "release-tail-transaction-root",
-          "release-tail-transaction-state",
-          "release-transaction-root"
-        ],
-        "outputCount": 33
+        "inputCount": 8,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
       },
       {
-        "id": "build",
-        "path": ".github/workflows/build.yml",
+        "id": ".build-candidate",
+        "path": ".github/workflows/.build-candidate.yml",
         "reusable": true,
         "inputs": [
           "config-path",
@@ -1000,50 +628,8 @@
         "outputCount": 3
       },
       {
-        "id": "buildchain-recover",
-        "path": ".github/workflows/buildchain-recover.yml",
-        "reusable": false,
-        "inputs": [],
-        "inputCount": 0,
-        "secrets": [],
-        "secretCount": 0,
-        "outputs": [],
-        "outputCount": 0
-      },
-      {
-        "id": "buildchain",
-        "path": ".github/workflows/buildchain.yml",
-        "reusable": false,
-        "inputs": [],
-        "inputCount": 0,
-        "secrets": [],
-        "secretCount": 0,
-        "outputs": [],
-        "outputCount": 0
-      },
-      {
-        "id": "public-build-adopter-qualification",
-        "path": ".github/workflows/public-build-adopter-qualification.yml",
-        "reusable": true,
-        "inputs": [
-          "consumer",
-          "consumer-ref",
-          "consumer-repository",
-          "contract-lock",
-          "input-path",
-          "invocation-source-path",
-          "runtime-ref",
-          "runtime-selection"
-        ],
-        "inputCount": 8,
-        "secrets": [],
-        "secretCount": 0,
-        "outputs": [],
-        "outputCount": 0
-      },
-      {
-        "id": "public-build-check",
-        "path": ".github/workflows/public-build-check.yml",
+        "id": ".build-check",
+        "path": ".github/workflows/.build-check.yml",
         "reusable": true,
         "inputs": [
           "contract-lock",
@@ -1080,8 +666,47 @@
         "outputCount": 12
       },
       {
-        "id": "public-build-demo",
-        "path": ".github/workflows/public-build-demo.yml",
+        "id": ".build-demo-adapter",
+        "path": ".github/workflows/.build-demo-adapter.yml",
+        "reusable": true,
+        "inputs": [
+          "adapter-arguments-json",
+          "adapter-path",
+          "artifact-retention-days",
+          "contract-lock",
+          "media-profile",
+          "render-media",
+          "renderer-image",
+          "require-trusted-event",
+          "runtime-ref",
+          "runtime-selection",
+          "source-artifact-digest",
+          "source-artifact-name",
+          "source-ref"
+        ],
+        "inputCount": 13,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [
+          "gate-artifact-digest",
+          "gate-artifact-id",
+          "gate-artifact-name",
+          "gate-artifact-url",
+          "gate-root",
+          "media-artifact-digest",
+          "media-artifact-id",
+          "media-artifact-name",
+          "media-artifact-url",
+          "media-profile",
+          "media-qualification-root",
+          "media-root",
+          "source-sha"
+        ],
+        "outputCount": 13
+      },
+      {
+        "id": ".build-demo",
+        "path": ".github/workflows/.build-demo.yml",
         "reusable": true,
         "inputs": [
           "artifact-retention-days",
@@ -1116,8 +741,66 @@
         "outputCount": 7
       },
       {
-        "id": "public-build-publication",
-        "path": ".github/workflows/public-build-publication.yml",
+        "id": ".build-gate-profile",
+        "path": ".github/workflows/.build-gate-profile.yml",
+        "reusable": true,
+        "inputs": [
+          "artifact-name",
+          "artifact-retention-days",
+          "cargo-registry-index",
+          "checkout-cache-fallback",
+          "checkout-cache-fetch-attempts",
+          "checkout-cache-github-timeout-seconds",
+          "checkout-cache-mirror-url-template",
+          "checkout-cache-mode",
+          "checkout-cache-reference-repository-template",
+          "checkout-cache-timeout-seconds",
+          "contract-lock",
+          "gate-command-json",
+          "gate-environment-json",
+          "gate-plan-command-json",
+          "gate-profile",
+          "gate-registry",
+          "include-advisory",
+          "node-version",
+          "platforms-json",
+          "require-trusted-event",
+          "runner-preset",
+          "runtime-ref",
+          "runtime-selection",
+          "rust-toolchain",
+          "rustup-dist-server",
+          "rustup-update-root",
+          "shifu-cache-profile-digest",
+          "shifu-cache-profile-ref",
+          "source-ref",
+          "untrusted-policy",
+          "working-directory"
+        ],
+        "inputCount": 31,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [
+          "buildchain-runtime-sha",
+          "controller-plan-artifact",
+          "controller-plan-digest",
+          "controller-plan-json",
+          "controller-receipt-artifact",
+          "controller-receipt-digest",
+          "controller-receipt-json",
+          "controller-receipt-status",
+          "gate-aggregate-artifact",
+          "gate-aggregate-digest",
+          "gate-aggregate-json",
+          "gate-aggregate-status",
+          "gate-matrix-digest",
+          "source-sha"
+        ],
+        "outputCount": 14
+      },
+      {
+        "id": ".build-publication",
+        "path": ".github/workflows/.build-publication.yml",
         "reusable": true,
         "inputs": [
           "artifact-name",
@@ -1166,8 +849,8 @@
         "outputCount": 16
       },
       {
-        "id": "public-build-stage-capsule-canary",
-        "path": ".github/workflows/public-build-stage-capsule-canary.yml",
+        "id": ".build-stage-capsule-canary",
+        "path": ".github/workflows/.build-stage-capsule-canary.yml",
         "reusable": true,
         "inputs": [
           "build-artifact-path",
@@ -1187,8 +870,34 @@
         "outputCount": 0
       },
       {
-        "id": "public-ops-alpha-candidate-patrol",
-        "path": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
+        "id": ".build",
+        "path": ".github/workflows/.build.yml",
+        "reusable": true,
+        "inputs": [
+          "config-path",
+          "contract-lock",
+          "resume-run-id",
+          "runtime-ref",
+          "runtime-selection"
+        ],
+        "inputCount": 5,
+        "secrets": [
+          "BUILDCHAIN_MACOS_CERTIFICATE_P12_BASE64",
+          "BUILDCHAIN_MACOS_CERTIFICATE_PASSWORD",
+          "BUILDCHAIN_MACOS_NOTARY_API_ISSUER",
+          "BUILDCHAIN_MACOS_NOTARY_API_KEY_ID",
+          "BUILDCHAIN_MACOS_NOTARY_API_KEY_P8_BASE64",
+          "BUILDCHAIN_PROMOTION_TOKEN"
+        ],
+        "secretCount": 6,
+        "outputs": [
+          "result"
+        ],
+        "outputCount": 1
+      },
+      {
+        "id": ".ops-alpha-candidate-patrol",
+        "path": ".github/workflows/.ops-alpha-candidate-patrol.yml",
         "reusable": true,
         "inputs": [
           "alpha-workflow-path",
@@ -1234,8 +943,8 @@
         "outputCount": 17
       },
       {
-        "id": "public-ops-bootstrap",
-        "path": ".github/workflows/public-ops-bootstrap.yml",
+        "id": ".ops-bootstrap",
+        "path": ".github/workflows/.ops-bootstrap.yml",
         "reusable": true,
         "inputs": [
           "contract-lock",
@@ -1258,8 +967,8 @@
         "outputCount": 7
       },
       {
-        "id": "public-ops-dev-auto-merge",
-        "path": ".github/workflows/public-ops-dev-auto-merge.yml",
+        "id": ".ops-dev-auto-merge",
+        "path": ".github/workflows/.ops-dev-auto-merge.yml",
         "reusable": true,
         "inputs": [
           "active-lease-context",
@@ -1336,8 +1045,8 @@
         "outputCount": 19
       },
       {
-        "id": "public-ops-dev-qualification-patrol",
-        "path": ".github/workflows/public-ops-dev-qualification-patrol.yml",
+        "id": ".ops-dev-qualification-patrol",
+        "path": ".github/workflows/.ops-dev-qualification-patrol.yml",
         "reusable": true,
         "inputs": [
           "contract-lock",
@@ -1366,11 +1075,33 @@
           "source-sha",
           "state"
         ],
-        "outputCount": 7
+        "outputCount": 7
+      },
+      {
+        "id": ".ops-git-sync",
+        "path": ".github/workflows/.ops-git-sync.yml",
+        "reusable": true,
+        "inputs": [
+          "contract-lock",
+          "force",
+          "remote-host",
+          "remote-path",
+          "remote-repo",
+          "runtime-ref",
+          "runtime-selection"
+        ],
+        "inputCount": 7,
+        "secrets": [
+          "REMOTE_CREDENTIAL",
+          "REMOTE_USER"
+        ],
+        "secretCount": 2,
+        "outputs": [],
+        "outputCount": 0
       },
       {
-        "id": "public-ops-housekeeping",
-        "path": ".github/workflows/public-ops-housekeeping.yml",
+        "id": ".ops-housekeeping",
+        "path": ".github/workflows/.ops-housekeeping.yml",
         "reusable": true,
         "inputs": [
           "apply-enabled",
@@ -1410,8 +1141,8 @@
         "outputCount": 9
       },
       {
-        "id": "public-ops-observed-evidence",
-        "path": ".github/workflows/public-ops-observed-evidence.yml",
+        "id": ".ops-observed-evidence",
+        "path": ".github/workflows/.ops-observed-evidence.yml",
         "reusable": true,
         "inputs": [
           "artifact-path",
@@ -1438,8 +1169,8 @@
         "outputCount": 1
       },
       {
-        "id": "public-ops-patrol-daily",
-        "path": ".github/workflows/public-ops-patrol-daily.yml",
+        "id": ".ops-patrol-daily",
+        "path": ".github/workflows/.ops-patrol-daily.yml",
         "reusable": true,
         "inputs": [
           "allowed-head-prefixes",
@@ -1472,8 +1203,8 @@
         "outputCount": 5
       },
       {
-        "id": "public-ops-patrol-monthly",
-        "path": ".github/workflows/public-ops-patrol-monthly.yml",
+        "id": ".ops-patrol-monthly",
+        "path": ".github/workflows/.ops-patrol-monthly.yml",
         "reusable": true,
         "inputs": [
           "contract-lock",
@@ -1497,8 +1228,8 @@
         "outputCount": 5
       },
       {
-        "id": "public-ops-patrol-weekly",
-        "path": ".github/workflows/public-ops-patrol-weekly.yml",
+        "id": ".ops-patrol-weekly",
+        "path": ".github/workflows/.ops-patrol-weekly.yml",
         "reusable": true,
         "inputs": [
           "contract-lock",
@@ -1522,8 +1253,8 @@
         "outputCount": 5
       },
       {
-        "id": "public-ops-patrol",
-        "path": ".github/workflows/public-ops-patrol.yml",
+        "id": ".ops-patrol",
+        "path": ".github/workflows/.ops-patrol.yml",
         "reusable": true,
         "inputs": [
           "allowed-head-prefixes",
@@ -1559,35 +1290,42 @@
         "outputCount": 5
       },
       {
-        "id": "public-ops-pipeline",
-        "path": ".github/workflows/public-ops-pipeline.yml",
+        "id": ".ops-pipeline-delivery",
+        "path": ".github/workflows/.ops-pipeline-delivery.yml",
         "reusable": true,
         "inputs": [
-          "config-path"
+          "request",
+          "runtime-selection"
         ],
-        "inputCount": 1,
-        "secrets": [],
-        "secretCount": 0,
+        "inputCount": 2,
+        "secrets": [
+          "BUILDCHAIN_AUTOMATION_TOKEN"
+        ],
+        "secretCount": 1,
         "outputs": [],
         "outputCount": 0
       },
       {
-        "id": "public-ops-recover",
-        "path": ".github/workflows/public-ops-recover.yml",
+        "id": ".ops-pipeline-execute",
+        "path": ".github/workflows/.ops-pipeline-execute.yml",
         "reusable": true,
         "inputs": [
           "attempt",
-          "runtime-ref"
+          "context",
+          "matrix",
+          "operation",
+          "request",
+          "runtime-selection"
         ],
-        "inputCount": 2,
+        "inputCount": 6,
         "secrets": [],
         "secretCount": 0,
         "outputs": [],
         "outputCount": 0
       },
       {
-        "id": "public-ops-release-governance",
-        "path": ".github/workflows/public-ops-release-governance.yml",
+        "id": ".ops-release-governance",
+        "path": ".github/workflows/.ops-release-governance.yml",
         "reusable": true,
         "inputs": [
           "apply",
@@ -1607,8 +1345,8 @@
         "outputCount": 0
       },
       {
-        "id": "public-ops-stable-candidate-patrol",
-        "path": ".github/workflows/public-ops-stable-candidate-patrol.yml",
+        "id": ".ops-stable-candidate-patrol",
+        "path": ".github/workflows/.ops-stable-candidate-patrol.yml",
         "reusable": true,
         "inputs": [
           "auto-approve",
@@ -1646,8 +1384,8 @@
         "outputCount": 6
       },
       {
-        "id": "public-ops-tail-reseal",
-        "path": ".github/workflows/public-ops-tail-reseal.yml",
+        "id": ".ops-tail-reseal",
+        "path": ".github/workflows/.ops-tail-reseal.yml",
         "reusable": true,
         "inputs": [
           "artifact-retention-days",
@@ -1671,8 +1409,8 @@
         "outputCount": 2
       },
       {
-        "id": "public-ops-warrant-cancel",
-        "path": ".github/workflows/public-ops-warrant-cancel.yml",
+        "id": ".ops-warrant-cancel",
+        "path": ".github/workflows/.ops-warrant-cancel.yml",
         "reusable": true,
         "inputs": [
           "contract-lock",
@@ -1702,8 +1440,8 @@
         "outputCount": 3
       },
       {
-        "id": "public-ops-warrant-close",
-        "path": ".github/workflows/public-ops-warrant-close.yml",
+        "id": ".ops-warrant-close",
+        "path": ".github/workflows/.ops-warrant-close.yml",
         "reusable": true,
         "inputs": [
           "contract-lock",
@@ -1735,8 +1473,8 @@
         "outputCount": 4
       },
       {
-        "id": "public-release-artifact-attestation",
-        "path": ".github/workflows/public-release-artifact-attestation.yml",
+        "id": ".release-artifact-attestation",
+        "path": ".github/workflows/.release-artifact-attestation.yml",
         "reusable": true,
         "inputs": [
           "contract-lock",
@@ -1768,8 +1506,168 @@
         "outputCount": 5
       },
       {
-        "id": "public-release-oci-compose-preview",
-        "path": ".github/workflows/public-release-oci-compose-preview.yml",
+        "id": ".release-authority",
+        "path": ".github/workflows/.release-authority.yml",
+        "reusable": true,
+        "inputs": [
+          "admission-json",
+          "authority-workflow-path",
+          "auto-admission",
+          "auto-admission-kind",
+          "auto-no-gate",
+          "consumer-gate-command",
+          "consumer-gate-controller-sha",
+          "consumer-gate-evidence-source-sha",
+          "consumer-gate-evidence-source-tree",
+          "consumer-predicate-digest",
+          "consumer-predicate-id",
+          "consumer-qualification-required",
+          "contract-lock",
+          "control-plane-audit-json",
+          "dry-run",
+          "evidence-controller-artifact",
+          "evidence-manifest-pattern",
+          "evidence-passport-artifact",
+          "evidence-payload-pattern",
+          "evidence-publication-artifact",
+          "evidence-repository",
+          "evidence-run-id",
+          "evidence-summary-artifact",
+          "expected-json",
+          "gate-aggregate-json",
+          "github-governance-receipt-json",
+          "package-name",
+          "product",
+          "publication-target",
+          "publication-version",
+          "publisher-workflow-path",
+          "required-status-check",
+          "runner-provenance-json",
+          "runtime-ref",
+          "runtime-selection",
+          "source-sha",
+          "target-ref",
+          "used-nonces-json"
+        ],
+        "inputCount": 38,
+        "secrets": [
+          "BUILDCHAIN_GOVERNANCE_READ_TOKEN",
+          "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY"
+        ],
+        "secretCount": 2,
+        "outputs": [
+          "capability-artifact",
+          "capability-digest",
+          "capability-json",
+          "gate-aggregate-digest",
+          "gate-aggregate-json"
+        ],
+        "outputCount": 5
+      },
+      {
+        "id": ".release-binary-assets",
+        "path": ".github/workflows/.release-binary-assets.yml",
+        "reusable": true,
+        "inputs": [
+          "auto-admission",
+          "contract-lock",
+          "evidence-run-id",
+          "github-governance-receipt-json",
+          "publication-admission-json",
+          "publication-control-plane-audit-json",
+          "publication-expected-json",
+          "publication-gate-aggregate-json",
+          "publication-runner-provenance-json",
+          "publication-used-nonces-json",
+          "publication-version",
+          "release-tag",
+          "runtime-ref",
+          "runtime-selection",
+          "source-sha",
+          "target-ref"
+        ],
+        "inputCount": 16,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
+      {
+        "id": ".release-candidate-promote",
+        "path": ".github/workflows/.release-candidate-promote.yml",
+        "reusable": true,
+        "inputs": [
+          "contract-lock",
+          "request-json",
+          "runtime-ref",
+          "runtime-selection"
+        ],
+        "inputCount": 4,
+        "secrets": [
+          "BUILDCHAIN_ISSUE_APP_ID",
+          "BUILDCHAIN_ISSUE_APP_PRIVATE_KEY",
+          "BUILDCHAIN_ISSUE_TOKEN",
+          "BUILDCHAIN_PROMOTION_TOKEN",
+          "BUILDCHAIN_PUBLICATION_COMMIT_SIGNING_KEY",
+          "BUILDCHAIN_PUBLICATION_COMMIT_TOKEN",
+          "KUNGFU_GOVERNANCE_AUDITOR_APP_PRIVATE_KEY",
+          "buildchain-issue-app-id",
+          "buildchain-issue-app-private-key",
+          "buildchain-issue-token"
+        ],
+        "secretCount": 10,
+        "outputs": [
+          "buildchain-channel",
+          "built-source-sha",
+          "controller-plan-artifact",
+          "controller-plan-digest",
+          "controller-plan-json",
+          "controller-receipt-artifact",
+          "controller-receipt-digest",
+          "controller-receipt-json",
+          "controller-receipt-status",
+          "discussion-id",
+          "discussion-url",
+          "github-artifact-attestation-evidence-root",
+          "github-artifact-attestation-id",
+          "github-artifact-attestation-publication-receipt-digest",
+          "github-artifact-attestation-url",
+          "promoted-sha",
+          "promotion-contract-lock-digest",
+          "promotion-contract-lock-path",
+          "promotion-override-used",
+          "promotion-publication-channel",
+          "promotion-router-ref",
+          "promotion-router-sha",
+          "promotion-runtime-ref",
+          "promotion-runtime-sha",
+          "promotion-shell-ref",
+          "promotion-shell-sha",
+          "promotion-target-ref",
+          "publication-capability-digest",
+          "publication-commit-evidence-digest",
+          "publication-commit-evidence-path",
+          "publication-commit-payload-root",
+          "publication-commit-url",
+          "release-candidate-action",
+          "release-candidate-artifact",
+          "release-candidate-recovery-receipt-artifact",
+          "release-candidate-recovery-root",
+          "release-invocation-root",
+          "release-propagation-work-artifact",
+          "release-receipt-root",
+          "release-tail-declaration-root",
+          "release-tail-receipt-roots-json",
+          "release-tail-state-root",
+          "release-tail-transaction-root",
+          "release-tail-transaction-state",
+          "release-transaction-root"
+        ],
+        "outputCount": 45
+      },
+      {
+        "id": ".release-oci-compose-preview",
+        "path": ".github/workflows/.release-oci-compose-preview.yml",
         "reusable": true,
         "inputs": [
           "contract-lock",
@@ -1785,8 +1683,8 @@
         "outputCount": 0
       },
       {
-        "id": "public-release-paper",
-        "path": ".github/workflows/public-release-paper.yml",
+        "id": ".release-paper",
+        "path": ".github/workflows/.release-paper.yml",
         "reusable": true,
         "inputs": [
           "artifact-name",
@@ -1839,8 +1737,53 @@
         "outputCount": 14
       },
       {
-        "id": "public-release-promote",
-        "path": ".github/workflows/public-release-promote.yml",
+        "id": ".release-pipeline-products",
+        "path": ".github/workflows/.release-pipeline-products.yml",
+        "reusable": true,
+        "inputs": [
+          "attempt",
+          "runtime-selection"
+        ],
+        "inputCount": 2,
+        "secrets": [
+          "BUILDCHAIN_APP_PRIVATE_KEY",
+          "BUILDCHAIN_AUTOMATION_TOKEN",
+          "BUILDCHAIN_NPM_TOKEN"
+        ],
+        "secretCount": 3,
+        "outputs": [
+          "stable-wait"
+        ],
+        "outputCount": 1
+      },
+      {
+        "id": ".release-pipeline-version",
+        "path": ".github/workflows/.release-pipeline-version.yml",
+        "reusable": true,
+        "inputs": [
+          "context",
+          "matrix",
+          "operation",
+          "purpose",
+          "runtime-selection"
+        ],
+        "inputCount": 5,
+        "secrets": [
+          "BUILDCHAIN_APP_PRIVATE_KEY",
+          "BUILDCHAIN_AUTOMATION_TOKEN"
+        ],
+        "secretCount": 2,
+        "outputs": [
+          "context",
+          "matrix",
+          "operation",
+          "stable-wait"
+        ],
+        "outputCount": 4
+      },
+      {
+        "id": ".release-promote",
+        "path": ".github/workflows/.release-promote.yml",
         "reusable": true,
         "inputs": [
           "contract-lock",
@@ -1863,7 +1806,6 @@
         ],
         "secretCount": 10,
         "outputs": [
-          "buildchain-channel",
           "built-source-sha",
           "controller-plan-artifact",
           "controller-plan-digest",
@@ -1873,23 +1815,12 @@
           "controller-receipt-json",
           "controller-receipt-status",
           "discussion-id",
-          "discussion-url",
-          "github-artifact-attestation-evidence-root",
-          "github-artifact-attestation-id",
-          "github-artifact-attestation-publication-receipt-digest",
-          "github-artifact-attestation-url",
-          "promoted-sha",
-          "promotion-contract-lock-digest",
-          "promotion-contract-lock-path",
-          "promotion-override-used",
-          "promotion-publication-channel",
-          "promotion-router-ref",
-          "promotion-router-sha",
-          "promotion-runtime-ref",
-          "promotion-runtime-sha",
-          "promotion-shell-ref",
-          "promotion-shell-sha",
-          "promotion-target-ref",
+          "discussion-url",
+          "github-artifact-attestation-evidence-root",
+          "github-artifact-attestation-id",
+          "github-artifact-attestation-publication-receipt-digest",
+          "github-artifact-attestation-url",
+          "promoted-sha",
           "publication-capability-digest",
           "publication-commit-evidence-digest",
           "publication-commit-evidence-path",
@@ -1909,11 +1840,11 @@
           "release-tail-transaction-state",
           "release-transaction-root"
         ],
-        "outputCount": 45
+        "outputCount": 33
       },
       {
-        "id": "public-release-propagation",
-        "path": ".github/workflows/public-release-propagation.yml",
+        "id": ".release-propagation",
+        "path": ".github/workflows/.release-propagation.yml",
         "reusable": true,
         "inputs": [
           "agent-work-context-json",
@@ -1960,8 +1891,8 @@
         "outputCount": 13
       },
       {
-        "id": "public-release-signing-authority",
-        "path": ".github/workflows/public-release-signing-authority.yml",
+        "id": ".release-signing-authority",
+        "path": ".github/workflows/.release-signing-authority.yml",
         "reusable": false,
         "inputs": [],
         "inputCount": 0,
@@ -1971,8 +1902,8 @@
         "outputCount": 0
       },
       {
-        "id": "public-release-tail",
-        "path": ".github/workflows/public-release-tail.yml",
+        "id": ".release-tail",
+        "path": ".github/workflows/.release-tail.yml",
         "reusable": true,
         "inputs": [
           "candidate-root",
@@ -2002,8 +1933,8 @@
         "outputCount": 4
       },
       {
-        "id": "public-release-web",
-        "path": ".github/workflows/public-release-web.yml",
+        "id": ".release-web",
+        "path": ".github/workflows/.release-web.yml",
         "reusable": true,
         "inputs": [
           "artifact-path",
@@ -2076,6 +2007,55 @@
           "web-surface-urls-json"
         ],
         "outputCount": 23
+      },
+      {
+        "id": "buildchain-recover",
+        "path": ".github/workflows/buildchain-recover.yml",
+        "reusable": false,
+        "inputs": [],
+        "inputCount": 0,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
+      {
+        "id": "buildchain",
+        "path": ".github/workflows/buildchain.yml",
+        "reusable": false,
+        "inputs": [],
+        "inputCount": 0,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
+      {
+        "id": "public-ops-pipeline",
+        "path": ".github/workflows/public-ops-pipeline.yml",
+        "reusable": true,
+        "inputs": [
+          "config-path"
+        ],
+        "inputCount": 1,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
+      },
+      {
+        "id": "public-ops-recover",
+        "path": ".github/workflows/public-ops-recover.yml",
+        "reusable": true,
+        "inputs": [
+          "attempt",
+          "runtime-ref"
+        ],
+        "inputCount": 2,
+        "secrets": [],
+        "secretCount": 0,
+        "outputs": [],
+        "outputCount": 0
       }
     ],
     "actionInputs": [
@@ -5817,26 +5797,6 @@
         "path": "docs/github-governance-authority.md",
         "command": "buildchain audit github-governance"
       },
-      {
-        "id": "audit",
-        "path": "docs/publication-authority.md",
-        "command": "buildchain audit publication-control-plane"
-      },
-      {
-        "id": "audit",
-        "path": "docs/publication-authority.md",
-        "command": "buildchain audit publication-control-plane"
-      },
-      {
-        "id": "audit",
-        "path": "docs/publication-authority.md",
-        "command": "buildchain audit publication-control-plane"
-      },
-      {
-        "id": "audit",
-        "path": "docs/publication-authority.md",
-        "command": "buildchain audit publication-control-plane"
-      },
       {
         "id": "badges-bundle",
         "path": "docs/cli-reference.md",
@@ -7007,16 +6967,6 @@
         "path": "docs/dev-delivery-warrant.md",
         "command": "buildchain dev warrant"
       },
-      {
-        "id": "dev",
-        "path": "docs/release-governance.md",
-        "command": "buildchain dev merge-queue"
-      },
-      {
-        "id": "dev",
-        "path": "docs/release-governance.md",
-        "command": "buildchain dev pr-admit"
-      },
       {
         "id": "dev",
         "path": "docs/v4-delivery-warrant-read-candidate.md",
@@ -7500,11 +7450,11 @@
       {
         "id": "init",
         "path": "docs/cli.md",
-        "command": "buildchain init"
+        "command": "buildchain init --type paper"
       },
       {
         "id": "init",
-        "path": "docs/getting-started.md",
+        "path": "docs/cli.md",
         "command": "buildchain init"
       },
       {
@@ -7524,13 +7474,13 @@
       },
       {
         "id": "init",
-        "path": "README.md",
-        "command": "buildchain init --cwd"
+        "path": "docs/publication-artifacts.md",
+        "command": "buildchain init --type paper"
       },
       {
         "id": "init",
         "path": "README.md",
-        "command": "buildchain init --type package"
+        "command": "buildchain init --cwd"
       },
       {
         "id": "inspect-artifact",
@@ -8747,11 +8697,6 @@
         "path": "docs/kfd-support.md",
         "command": "buildchain kfd"
       },
-      {
-        "id": "kfd",
-        "path": "README.md",
-        "command": "buildchain kfd"
-      },
       {
         "id": "layout",
         "path": "docs/binary-distribution.md",
@@ -8847,11 +8792,6 @@
         "path": "docs/toolkit-observability.md",
         "command": "buildchain lifecycle run"
       },
-      {
-        "id": "lifecycle",
-        "path": "README.md",
-        "command": "buildchain lifecycle run"
-      },
       {
         "id": "log",
         "path": "docs/cli-reference.md",
@@ -9087,81 +9027,6 @@
         "path": "docs/cli-reference.md",
         "command": "buildchain paper agent verify"
       },
-      {
-        "id": "paper-agent",
-        "path": "docs/cli.md",
-        "command": "buildchain paper agent verify"
-      },
-      {
-        "id": "paper-alpha",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper alpha"
-      },
-      {
-        "id": "paper-alpha",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper alpha"
-      },
-      {
-        "id": "paper-alpha",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper alpha --help"
-      },
-      {
-        "id": "paper-alpha",
-        "path": "docs/cli.md",
-        "command": "buildchain paper alpha --json"
-      },
-      {
-        "id": "paper-bootstrap-npm",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper bootstrap npm"
-      },
-      {
-        "id": "paper-bootstrap-npm",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper bootstrap npm"
-      },
-      {
-        "id": "paper-bootstrap-npm",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper bootstrap npm"
-      },
-      {
-        "id": "paper-bootstrap-npm",
-        "path": "docs/cli.md",
-        "command": "buildchain paper bootstrap npm"
-      },
-      {
-        "id": "paper-bootstrap-npm",
-        "path": "docs/publication-artifacts.md",
-        "command": "buildchain paper bootstrap npm"
-      },
-      {
-        "id": "paper-bootstrap-npm",
-        "path": "docs/publication-artifacts.md",
-        "command": "buildchain paper bootstrap npm"
-      },
-      {
-        "id": "paper-build",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper build"
-      },
-      {
-        "id": "paper-build",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper build"
-      },
-      {
-        "id": "paper-build",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper build --help"
-      },
-      {
-        "id": "paper-build",
-        "path": "docs/cli.md",
-        "command": "buildchain paper build --json"
-      },
       {
         "id": "paper-fleet-audit",
         "path": "docs/cli-reference.md",
@@ -9177,16 +9042,6 @@
         "path": "docs/cli-reference.md",
         "command": "buildchain paper fleet audit"
       },
-      {
-        "id": "paper-fleet-audit",
-        "path": "docs/cli.md",
-        "command": "buildchain paper fleet audit"
-      },
-      {
-        "id": "paper-fleet-audit",
-        "path": "docs/publication-artifacts.md",
-        "command": "buildchain paper fleet audit"
-      },
       {
         "id": "paper-fleet-update",
         "path": "docs/cli-reference.md",
@@ -9202,16 +9057,6 @@
         "path": "docs/cli-reference.md",
         "command": "buildchain paper fleet update"
       },
-      {
-        "id": "paper-fleet-update",
-        "path": "docs/cli.md",
-        "command": "buildchain paper fleet update"
-      },
-      {
-        "id": "paper-fleet-update",
-        "path": "docs/publication-artifacts.md",
-        "command": "buildchain paper fleet update"
-      },
       {
         "id": "paper-migrate",
         "path": "docs/cli-reference.md",
@@ -9229,7 +9074,7 @@
       },
       {
         "id": "paper-migrate",
-        "path": "docs/cli.md",
+        "path": "docs/publication-artifacts.md",
         "command": "buildchain paper migrate --json"
       },
       {
@@ -9250,57 +9095,47 @@
       {
         "id": "paper-preflight",
         "path": "docs/cli.md",
-        "command": "buildchain paper preflight --offline"
+        "command": "buildchain paper preflight --json"
       },
       {
         "id": "paper-preflight",
         "path": "docs/publication-artifacts.md",
-        "command": "buildchain paper preflight --offline"
-      },
-      {
-        "id": "paper-resume",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper resume"
+        "command": "buildchain paper preflight --json"
       },
       {
-        "id": "paper-resume",
+        "id": "paper-scaffold",
         "path": "docs/cli-reference.md",
-        "command": "buildchain paper resume"
+        "command": "buildchain paper scaffold --repository"
       },
       {
-        "id": "paper-resume",
+        "id": "paper-scaffold",
         "path": "docs/cli-reference.md",
-        "command": "buildchain paper resume --help"
-      },
-      {
-        "id": "paper-resume",
-        "path": "docs/cli.md",
-        "command": "buildchain paper resume --json"
+        "command": "buildchain paper scaffold"
       },
       {
         "id": "paper-scaffold",
         "path": "docs/cli-reference.md",
-        "command": "buildchain paper scaffold --package"
+        "command": "buildchain paper scaffold --help"
       },
       {
         "id": "paper-scaffold",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper scaffold"
+        "path": "docs/cli.md",
+        "command": "buildchain paper scaffold --name"
       },
       {
         "id": "paper-scaffold",
-        "path": "docs/cli-reference.md",
-        "command": "buildchain paper scaffold --help"
+        "path": "docs/cli.md",
+        "command": "buildchain paper scaffold --name"
       },
       {
         "id": "paper-scaffold",
-        "path": "docs/cli.md",
-        "command": "buildchain paper scaffold --package"
+        "path": "docs/publication-artifacts.md",
+        "command": "buildchain paper scaffold --name"
       },
       {
         "id": "paper-scaffold",
-        "path": "README.md",
-        "command": "buildchain paper scaffold"
+        "path": "docs/publication-artifacts.md",
+        "command": "buildchain paper scaffold --name"
       },
       {
         "id": "paper-status",
@@ -9342,11 +9177,6 @@
         "path": "docs/cli-reference.md",
         "command": "buildchain paper work start"
       },
-      {
-        "id": "paper-work-start",
-        "path": "docs/cli.md",
-        "command": "buildchain paper work start"
-      },
       {
         "id": "paper-work-submit",
         "path": "docs/cli-reference.md",
@@ -9362,11 +9192,6 @@
         "path": "docs/cli-reference.md",
         "command": "buildchain paper work submit"
       },
-      {
-        "id": "paper-work-submit",
-        "path": "docs/cli.md",
-        "command": "buildchain paper work submit"
-      },
       {
         "id": "paper",
         "path": "docs/cli-reference.md",
@@ -9377,16 +9202,6 @@
         "path": "docs/cli-reference.md",
         "command": "buildchain paper"
       },
-      {
-        "id": "paper",
-        "path": "docs/cli.md",
-        "command": "buildchain paper"
-      },
-      {
-        "id": "paper",
-        "path": "docs/publication-artifacts.md",
-        "command": "buildchain paper"
-      },
       {
         "id": "portable-cache",
         "path": "docs/cli-reference.md",
@@ -9507,11 +9322,6 @@
         "path": "docs/cli.md",
         "command": "buildchain publication-artifact manifest"
       },
-      {
-        "id": "publication-artifact-manifest",
-        "path": "docs/publication-artifacts.md",
-        "command": "buildchain publication-artifact manifest --source-sha"
-      },
       {
         "id": "publication-artifact-npm-package",
         "path": "docs/cli-reference.md",
@@ -9532,11 +9342,6 @@
         "path": "docs/cli.md",
         "command": "buildchain publication-artifact npm-package --json"
       },
-      {
-        "id": "publication-artifact-npm-package",
-        "path": "docs/publication-artifacts.md",
-        "command": "buildchain publication-artifact npm-package --json"
-      },
       {
         "id": "publication-artifact-reproducibility",
         "path": "docs/cli-reference.md",
@@ -9557,11 +9362,6 @@
         "path": "docs/cli.md",
         "command": "buildchain publication-artifact reproducibility"
       },
-      {
-        "id": "publication-artifact-reproducibility",
-        "path": "docs/publication-artifacts.md",
-        "command": "buildchain publication-artifact reproducibility"
-      },
       {
         "id": "publication-artifact",
         "path": "docs/cli-reference.md",
@@ -9807,11 +9607,6 @@
         "path": "docs/cli.md",
         "command": "buildchain release line open"
       },
-      {
-        "id": "release-line-open",
-        "path": "docs/release-flow.md",
-        "command": "buildchain release line open"
-      },
       {
         "id": "release-propagation",
         "path": "docs/cli-reference.md",
@@ -10087,11 +9882,6 @@
         "path": "docs/release-tail-provider-plane.md",
         "command": "buildchain release-tail verify --state"
       },
-      {
-        "id": "release-tail",
-        "path": "docs/release-tail-provider-plane.md",
-        "command": "buildchain release-tail plan"
-      },
       {
         "id": "release-tail",
         "path": "docs/v4-publication-rehearsal.md",
@@ -10422,6 +10212,11 @@
         "path": "docs/cli.md",
         "command": "buildchain validate --require-version-state"
       },
+      {
+        "id": "validate",
+        "path": "docs/cli.md",
+        "command": "buildchain validate --require-lifecycle-stages build"
+      },
       {
         "id": "validate",
         "path": "docs/cli.md",
@@ -10439,8 +10234,13 @@
       },
       {
         "id": "validate",
-        "path": "README.md",
-        "command": "buildchain validate --require-version-state npx"
+        "path": "docs/publication-artifacts.md",
+        "command": "buildchain validate --require-lifecycle-stages build"
+      },
+      {
+        "id": "validate",
+        "path": "docs/publication-artifacts.md",
+        "command": "buildchain validate --require-lifecycle-stages build"
       },
       {
         "id": "verify-artifact-envelope",
@@ -10722,16 +10522,6 @@
         "path": "docs/install.md",
         "command": "buildchain verify release-passport buildchain"
       },
-      {
-        "id": "verify-release-passport",
-        "path": "docs/install.md",
-        "command": "buildchain verify release-passport buildchain"
-      },
-      {
-        "id": "verify-release-passport",
-        "path": "docs/install.md",
-        "command": "buildchain verify release-passport buildchain"
-      },
       {
         "id": "verify-release-passport",
         "path": "docs/kfd-agent-hub.md",
@@ -10813,9 +10603,9 @@
     "cliRegistryPath": "dist/site/cli-registry.json",
     "workflowRegistryPath": "dist/site/workflow-registry.json",
     "pageRegistryPath": "dist/site/page-registry.json",
-    "cliRegistryDigest": "e43fdb0289df88871f3f0febbe04dcb9311a252a2b1df9b3a83a2d10c9d4a70f",
-    "workflowRegistryDigest": "b64f87652d2377f6f1cd192bb3e0983f6885af60f3522915649f6a2dc40610fc",
-    "pageRegistryDigest": "1e79a71c8f1d094ad1291b2d8b4bc983633245dcc104ae5ef7bae755fb733209"
+    "cliRegistryDigest": "b0cf6f05cea3a3730c2afc07fa767d913242387c9aca6674c7b1a7932d2de31d",
+    "workflowRegistryDigest": "ea94f5db65573126ff9ec44e9220c1ed138cc07dc327883aa6756513a6abfc67",
+    "pageRegistryDigest": "c55e8a3395da7962539c2c82039ba700bd132f1629b77c7363dc106e97eed8c3"
   },
   "comparison": {
     "missingCliRegistry": [],