@kungfu-tech/kfd 1.0.0-alpha.1 → 1.0.0-alpha.13

package/.buildchain/kfd-3/collaboration-interface.prebuild.json

@@ -0,0 +1,897 @@
+{
+  "schemaVersion": 1,
+  "contract": "kungfu-buildchain-kfd-3-collaboration-interface-prebuild-witness",
+  "id": "kfd-repository",
+  "standard": "kfd-3",
+  "supportLevel": "release",
+  "source": {
+    "repo": "kungfu-systems/kfd"
+  },
+  "sourceRegistry": {
+    "id": "kfd-collaboration-interface",
+    "path": ".buildchain/kfd-3/collaboration-interface.json",
+    "sha256": "e32f2196399d37db202ccc656386bddc346871243c3db6782d26b5a88f831595"
+  },
+  "collaborationInterfaceDigest": "sha256:e32f2196399d37db202ccc656386bddc346871243c3db6782d26b5a88f831595",
+  "collaborationInterface": {
+    "schemaVersion": 1,
+    "contract": "kfd-3-collaboration-interface",
+    "standard": "kfd-3",
+    "product": {
+      "name": "KFD",
+      "version": "v1.0",
+      "repository": "kungfu-systems/kfd"
+    },
+    "sourceRegistry": {
+      "path": "registry.json"
+    },
+    "factSources": [
+      {
+        "id": "public-kfd-fact-source",
+        "kind": "git-repository",
+        "host": "github",
+        "repository": "kungfu-systems/kfd",
+        "url": "https://github.com/kungfu-systems/kfd",
+        "loadBearingCoordinate": "commit-addressed repository contents",
+        "stableRenderedIndex": "https://kfd.libkungfu.dev",
+        "canonicalPaths": [
+          "decisions/kfd-N.md",
+          "registry.json",
+          "standards.json"
+        ],
+        "projectionSurfaces": [
+          "https://kfd.libkungfu.dev/N",
+          "npm:@kungfu-tech/kfd",
+          "Buildchain release passports"
+        ],
+        "extensionRequestNote": "GitHub issues are extension request paths; KFD facts are created only by committed repository contents."
+      }
+    ],
+    "participants": [
+      {
+        "id": "human-reader",
+        "kind": "human",
+        "description": "A person reading KFD decisions, philosophy, and release evidence."
+      },
+      {
+        "id": "agent-reader",
+        "kind": "agent",
+        "description": "An agent consuming KFD registry, standards metadata, schemas, and package exports."
+      },
+      {
+        "id": "maintainer",
+        "kind": "maintainer",
+        "description": "A human or agent maintaining KFD decisions, metadata, package surfaces, and release evidence."
+      },
+      {
+        "id": "package-consumer",
+        "kind": "api-consumer",
+        "description": "A downstream repository consuming the @kungfu-tech/kfd package."
+      },
+      {
+        "id": "site-consumer",
+        "kind": "service-integrator",
+        "description": "A site repository consuming KFD's site bundle, registry, standards metadata, and decision text."
+      },
+      {
+        "id": "release-system",
+        "kind": "service-integrator",
+        "description": "A release system consuming KFD witnesses, impact ledgers, and release propagation contracts."
+      }
+    ],
+    "minimalEntrypoints": [
+      {
+        "id": "readme",
+        "surface": "README.md",
+        "participants": [
+          "human-reader",
+          "agent-reader"
+        ],
+        "purpose": "Start from the KFD worldview and current decision set."
+      },
+      {
+        "id": "docs-map",
+        "surface": "docs/MAP.md",
+        "participants": [
+          "human-reader",
+          "agent-reader",
+          "maintainer"
+        ],
+        "purpose": "Route readers and agents to the right KFD document or machine surface."
+      },
+      {
+        "id": "official-status-and-trademarks",
+        "surface": "TRADEMARKS.md",
+        "participants": [
+          "human-reader",
+          "agent-reader",
+          "package-consumer"
+        ],
+        "purpose": "Understand what Apache-2.0 covers and what remains official, trademark-bound, or endorsement-bound."
+      },
+      {
+        "id": "registry",
+        "surface": "registry.json",
+        "participants": [
+          "agent-reader",
+          "package-consumer",
+          "site-consumer"
+        ],
+        "purpose": "Consume the authoritative decision index."
+      },
+      {
+        "id": "standards",
+        "surface": "standards.json",
+        "participants": [
+          "agent-reader",
+          "package-consumer",
+          "release-system"
+        ],
+        "purpose": "Discover KFD schema IDs, schema paths, concepts, and interface contracts."
+      },
+      {
+        "id": "package-exports",
+        "surface": "package.json#exports",
+        "participants": [
+          "package-consumer",
+          "agent-reader"
+        ],
+        "purpose": "Consume the shipped npm package surfaces."
+      },
+      {
+        "id": "release-anchor",
+        "surface": "kfd.release.json",
+        "participants": [
+          "release-system",
+          "agent-reader"
+        ],
+        "purpose": "Inspect the explicit KFD package version anchor for the current Buildchain release line."
+      },
+      {
+        "id": "kfd-2-public-release-trust-claim",
+        "surface": ".buildchain/kfd-2/public-release-trust.claim.json",
+        "participants": [
+          "release-system",
+          "agent-reader",
+          "package-consumer"
+        ],
+        "purpose": "Inspect the explicit public KFD-2 claim passed into Buildchain release passport generation."
+      },
+      {
+        "id": "site-bundle",
+        "surface": "site/kfd-site.json",
+        "participants": [
+          "site-consumer",
+          "agent-reader"
+        ],
+        "purpose": "Render KFD-owned site text and decision pages without duplicating extraction logic."
+      }
+    ],
+    "surfaces": [
+      {
+        "id": "readme",
+        "kind": "markdown-doc",
+        "participants": [
+          "human-reader",
+          "agent-reader"
+        ],
+        "value": "KFD's public worldview entrypoint and site homepage text source.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "README.md"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "docs-map",
+        "kind": "markdown-doc",
+        "participants": [
+          "human-reader",
+          "agent-reader",
+          "maintainer"
+        ],
+        "value": "Document map for routing questions to KFD decisions and machine surfaces.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "docs/MAP.md"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "official-status-and-trademarks",
+        "kind": "markdown-doc",
+        "participants": [
+          "human-reader",
+          "agent-reader",
+          "package-consumer"
+        ],
+        "value": "Apache-2.0 reuse boundary, trademark boundary, official source boundary, fork/derivative guidance, and agent-facing authority rule.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "TRADEMARKS.md"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "decision-texts",
+        "kind": "markdown-doc",
+        "participants": [
+          "human-reader",
+          "agent-reader",
+          "maintainer"
+        ],
+        "value": "Append-only authoritative KFD decision texts.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "decisions/*.md"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "registry-json",
+        "kind": "json-api",
+        "participants": [
+          "agent-reader",
+          "package-consumer",
+          "site-consumer"
+        ],
+        "value": "Authoritative machine-readable KFD decision index.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "registry.json"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "standards-json",
+        "kind": "json-api",
+        "participants": [
+          "agent-reader",
+          "package-consumer",
+          "release-system"
+        ],
+        "value": "Machine-readable KFD standards metadata and schema/interface registry.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "standards.json"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "schemas",
+        "kind": "json-api",
+        "participants": [
+          "agent-reader",
+          "package-consumer",
+          "release-system"
+        ],
+        "value": "KFD-owned JSON schemas for standards metadata and KFD-1/2/3 interfaces.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "schemas/**/*.json"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "package-exports",
+        "kind": "package",
+        "participants": [
+          "package-consumer",
+          "agent-reader"
+        ],
+        "value": "The npm package export map for KFD registry, standards, decisions, docs, schemas, and witnesses.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "package.json#exports"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "site-bundle-json",
+        "kind": "json-api",
+        "participants": [
+          "site-consumer",
+          "agent-reader"
+        ],
+        "value": "KFD-owned content projection consumed by the public site renderer, including decision metadata and the public KFD fact-source boundary.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "site/kfd-site.json"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "release-impact-json",
+        "kind": "json-api",
+        "participants": [
+          "release-system",
+          "maintainer",
+          "agent-reader"
+        ],
+        "value": "Release impact declaration consumed by Buildchain release passports.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "release-impact.json"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "release-anchor-json",
+        "kind": "json-api",
+        "participants": [
+          "release-system",
+          "agent-reader",
+          "maintainer"
+        ],
+        "value": "Anchored/manual release manifest that declares the exact npm version as a release fact.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "kfd.release.json"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "release-propagation-json",
+        "kind": "json-api",
+        "participants": [
+          "release-system",
+          "site-consumer"
+        ],
+        "value": "Release propagation graph from KFD to downstream site surfaces.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": "buildchain.release-propagation.json"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "kfd-1-witness",
+        "kind": "json-api",
+        "participants": [
+          "release-system",
+          "maintainer",
+          "agent-reader"
+        ],
+        "value": "KFD-1 contract-world witness for source-to-artifact drift checks.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": ".buildchain/kfd-1/contract-world.witness.json"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "kfd-2-public-release-trust-claim",
+        "kind": "json-api",
+        "participants": [
+          "release-system",
+          "maintainer",
+          "agent-reader",
+          "package-consumer"
+        ],
+        "value": "Explicit public KFD-2 claim that binds KFD package release trust to declared source facts, machine evidence, artifacts, verification, responsibility, and residual risk.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": ".buildchain/kfd-2/public-release-trust.claim.json"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "kfd-3-self-witnesses",
+        "kind": "json-api",
+        "participants": [
+          "release-system",
+          "maintainer",
+          "agent-reader"
+        ],
+        "value": "KFD-3 self collaboration-interface witnesses for pre-build and artifact-side closure checks.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": ".buildchain/kfd-3/*.json"
+        },
+        "maturity": "stable"
+      },
+      {
+        "id": "release-workflows",
+        "kind": "config",
+        "participants": [
+          "release-system",
+          "maintainer"
+        ],
+        "value": "GitHub Actions workflows that invoke Buildchain verification, promotion, and propagation.",
+        "discoverability": {
+          "fromMinimalEntrypoint": true,
+          "path": ".github/workflows/*.yml"
+        },
+        "maturity": "stable"
+      }
+    ],
+    "transparentConstraints": [
+      {
+        "id": "append-only-decisions",
+        "surface": "decisions/*.md",
+        "constraint": "Substantive semantic changes supersede older KFD numbers instead of rewriting them.",
+        "reason": "Decision history must remain inspectable by humans and agents.",
+        "review": "CONTRIBUTING.md and node scripts/check.mjs"
+      },
+      {
+        "id": "kfd-site-boundary",
+        "surface": "site/kfd-site.json",
+        "constraint": "KFD owns homepage text, decision text, registry, and standards metadata; the site owns rendering style and layout.",
+        "reason": "Text remains a single fact source while the site stays free to render it.",
+        "review": "site/kfd-site.json renderingBoundary"
+      },
+      {
+        "id": "package-export-boundary",
+        "surface": "package.json#exports",
+        "constraint": "Public package surfaces must be explicitly exported and verified.",
+        "reason": "Agents and downstream repositories should not rely on hidden package internals.",
+        "review": "node scripts/check.mjs"
+      },
+      {
+        "id": "standard-not-runtime",
+        "surface": "README.md",
+        "constraint": "KFD provides decisions, standards metadata, schemas, and witnesses; it does not provide the Kungfu runtime, GUI, or CLI.",
+        "reason": "KFD should remain a standard/decision package, not a product runtime.",
+        "review": "docs/MAP.md"
+      }
+    ],
+    "choicePaths": [
+      {
+        "id": "read-human-docs",
+        "participants": [
+          "human-reader"
+        ],
+        "choice": "Read README.md, docs/MAP.md, and decisions/*.md directly."
+      },
+      {
+        "id": "consume-machine-metadata",
+        "participants": [
+          "agent-reader",
+          "package-consumer",
+          "release-system"
+        ],
+        "choice": "Consume registry.json, standards.json, schemas, and package exports."
+      },
+      {
+        "id": "render-site",
+        "participants": [
+          "site-consumer"
+        ],
+        "choice": "Consume site/kfd-site.json and own rendering/style decisions downstream."
+      },
+      {
+        "id": "maintain-through-pr",
+        "participants": [
+          "maintainer"
+        ],
+        "choice": "Change KFD through PR review, node scripts/check.mjs, and Buildchain release gates."
+      }
+    ],
+    "extensionRequests": [
+      {
+        "id": "kfd-2-trust-taxonomy-extension",
+        "participants": [
+          "agent-reader",
+          "maintainer",
+          "release-system",
+          "package-consumer"
+        ],
+        "trigger": "A human or agent needs a residual-risk, trust-impact, machine-provability, agent-action, or downgrade-reason value that is not present in schemas/kfd-2/trust-taxonomy.schema.json.",
+        "requestPath": {
+          "kind": "github-issue",
+          "target": "https://github.com/kungfu-systems/kfd/issues/new?title=KFD-2%20trust%20taxonomy%20extension%20request",
+          "template": "State the missing value, the taxonomy field, the product or release scenario, and why existing KFD-2 values cannot express the case."
+        },
+        "expectedOutcome": "KFD maintainers either add the value to the KFD-2 trust taxonomy schema or explain which existing value should be used."
+      }
+    ],
+    "closure": {
+      "classificationMode": "closed-world",
+      "unclassifiedEntrypointsPolicy": "fail",
+      "reachableSurfaceSource": "This file plus package.json#exports, docs/MAP.md, registry.json, standards.json, and Buildchain witness files."
+    }
+  },
+  "participantProfiles": [
+    "human-reader",
+    "agent-reader",
+    "maintainer",
+    "package-consumer",
+    "site-consumer",
+    "release-system"
+  ],
+  "surfaces": [
+    {
+      "id": "readme",
+      "name": "readme",
+      "kind": "markdown-doc",
+      "participantProfile": "human-reader,agent-reader",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "README.md"
+    },
+    {
+      "id": "docs-map",
+      "name": "docs-map",
+      "kind": "markdown-doc",
+      "participantProfile": "human-reader,agent-reader,maintainer",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "docs/MAP.md"
+    },
+    {
+      "id": "official-status-and-trademarks",
+      "name": "official-status-and-trademarks",
+      "kind": "markdown-doc",
+      "participantProfile": "human-reader,agent-reader,package-consumer",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "TRADEMARKS.md"
+    },
+    {
+      "id": "decision-texts",
+      "name": "decision-texts",
+      "kind": "markdown-doc",
+      "participantProfile": "human-reader,agent-reader,maintainer",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "decisions/*.md"
+    },
+    {
+      "id": "registry-json",
+      "name": "registry-json",
+      "kind": "json-api",
+      "participantProfile": "agent-reader,package-consumer,site-consumer",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "registry.json"
+    },
+    {
+      "id": "standards-json",
+      "name": "standards-json",
+      "kind": "json-api",
+      "participantProfile": "agent-reader,package-consumer,release-system",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "standards.json"
+    },
+    {
+      "id": "schemas",
+      "name": "schemas",
+      "kind": "json-api",
+      "participantProfile": "agent-reader,package-consumer,release-system",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "schemas/**/*.json"
+    },
+    {
+      "id": "package-exports",
+      "name": "package-exports",
+      "kind": "package",
+      "participantProfile": "package-consumer,agent-reader",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "package.json#exports"
+    },
+    {
+      "id": "site-bundle-json",
+      "name": "site-bundle-json",
+      "kind": "json-api",
+      "participantProfile": "site-consumer,agent-reader",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "site/kfd-site.json"
+    },
+    {
+      "id": "release-impact-json",
+      "name": "release-impact-json",
+      "kind": "json-api",
+      "participantProfile": "release-system,maintainer,agent-reader",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "release-impact.json"
+    },
+    {
+      "id": "release-anchor-json",
+      "name": "release-anchor-json",
+      "kind": "json-api",
+      "participantProfile": "release-system,agent-reader,maintainer",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "kfd.release.json"
+    },
+    {
+      "id": "release-propagation-json",
+      "name": "release-propagation-json",
+      "kind": "json-api",
+      "participantProfile": "release-system,site-consumer",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "buildchain.release-propagation.json"
+    },
+    {
+      "id": "kfd-1-witness",
+      "name": "kfd-1-witness",
+      "kind": "json-api",
+      "participantProfile": "release-system,maintainer,agent-reader",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": ".buildchain/kfd-1/contract-world.witness.json"
+    },
+    {
+      "id": "kfd-2-public-release-trust-claim",
+      "name": "kfd-2-public-release-trust-claim",
+      "kind": "json-api",
+      "participantProfile": "release-system,maintainer,agent-reader,package-consumer",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": ".buildchain/kfd-2/public-release-trust.claim.json"
+    },
+    {
+      "id": "kfd-3-self-witnesses",
+      "name": "kfd-3-self-witnesses",
+      "kind": "json-api",
+      "participantProfile": "release-system,maintainer,agent-reader",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": ".buildchain/kfd-3/*.json"
+    },
+    {
+      "id": "release-workflows",
+      "name": "release-workflows",
+      "kind": "config",
+      "participantProfile": "release-system,maintainer",
+      "availability": "stable",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": ".github/workflows/*.yml"
+    },
+    {
+      "id": "registry",
+      "name": "registry",
+      "kind": "entrypoint",
+      "participantProfile": "agent-reader,package-consumer,site-consumer",
+      "availability": "shipped",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "registry.json"
+    },
+    {
+      "id": "standards",
+      "name": "standards",
+      "kind": "entrypoint",
+      "participantProfile": "agent-reader,package-consumer,release-system",
+      "availability": "shipped",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "standards.json"
+    },
+    {
+      "id": "release-anchor",
+      "name": "release-anchor",
+      "kind": "entrypoint",
+      "participantProfile": "release-system,agent-reader",
+      "availability": "shipped",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "kfd.release.json"
+    },
+    {
+      "id": "site-bundle",
+      "name": "site-bundle",
+      "kind": "entrypoint",
+      "participantProfile": "site-consumer,agent-reader",
+      "availability": "shipped",
+      "visibility": "public",
+      "participantFacing": true,
+      "public": true,
+      "sourcePath": "site/kfd-site.json"
+    }
+  ],
+  "docs": [
+    {
+      "id": "doc:readme",
+      "sourcePath": "README.md",
+      "sha256": "25d733aa98a62dad100df10b9a3393364442f0cd06c2daab08e4a99471dd447b"
+    },
+    {
+      "id": "doc:trademarks",
+      "sourcePath": "TRADEMARKS.md",
+      "sha256": "c59e3e936c2a0f2e3598fc7f8977c734dfc1c23df506c8c8360eb39e8e2ee3e1"
+    },
+    {
+      "id": "doc:docs-map",
+      "sourcePath": "docs/MAP.md",
+      "sha256": "c53b0d7bdc83c7e7c335e4aa23f54a76c9874908ea4d9e5d7861be3b0875bd8d"
+    },
+    {
+      "id": "doc:kfd-2-release-trust",
+      "sourcePath": "docs/kfd-2-release-trust.md",
+      "sha256": "9ba323334750cf285f08de21286f58c04b872189febf38a4e8fd50c0791020b3"
+    },
+    {
+      "id": "doc:kfd-3-collaboration-interface",
+      "sourcePath": "docs/kfd-3-collaboration-interface.md",
+      "sha256": "d483ff6f8423a2e3f8e5dc547b62139d5c365678f9974d62063f8b523f14edb0"
+    },
+    {
+      "id": "decision:kfd-1",
+      "sourcePath": "decisions/kfd-1.md",
+      "sha256": "32016c0962edcea9286db04ba24dab6c55400e9b26ce16a9d4b4ad647e17e7df"
+    },
+    {
+      "id": "decision:kfd-2",
+      "sourcePath": "decisions/kfd-2.md",
+      "sha256": "0c2da2113df6ef2829592f7ba67593059cb06e195ea527ee742501939efb3b9b"
+    },
+    {
+      "id": "decision:kfd-3",
+      "sourcePath": "decisions/kfd-3.md",
+      "sha256": "f37320562b6d82630358663acc239a3ee84bdc930b287c6cb0b2fb0295110672"
+    }
+  ],
+  "schemas": [
+    {
+      "id": "schema:kfd-standards",
+      "sourcePath": "schemas/kfd-standards.schema.json",
+      "sha256": "2ecc7049d13463700f143f4e8c40488d6587484c94d26e827c239eeedc892336"
+    },
+    {
+      "id": "schema:kfd-1:contract-world",
+      "sourcePath": "schemas/kfd-1/contract-world.schema.json",
+      "sha256": "6be00cca75c80bf96429eb62336989d8931ea380d86388fcb8b834dcf8d3c13b"
+    },
+    {
+      "id": "schema:kfd-1:witness",
+      "sourcePath": "schemas/kfd-1/witness.schema.json",
+      "sha256": "50104a2962cb75cc1da634fa65553e993f87d8fb9b3c237f0609a2208ad4c1f3"
+    },
+    {
+      "id": "schema:kfd-2:trust-taxonomy",
+      "sourcePath": "schemas/kfd-2/trust-taxonomy.schema.json",
+      "sha256": "a663d301a663cadb8567e3010361f5a630b76b6518ed7603dfd58cbd4e64a658"
+    },
+    {
+      "id": "schema:kfd-2:release-claims",
+      "sourcePath": "schemas/kfd-2/release-claims.schema.json",
+      "sha256": "0f52c4a9949f62163a0fbe14fefc2f2f93f548ae18b6b5c07eb87aedca4c0be0"
+    },
+    {
+      "id": "schema:kfd-2:release-trust-passport",
+      "sourcePath": "schemas/kfd-2/release-trust-passport.schema.json",
+      "sha256": "df7f828605f680f3ff52fe3468cbf8f5e20151fac0d5c31cd9a0de9765efecc1"
+    },
+    {
+      "id": "schema:kfd-3:collaboration-interface",
+      "sourcePath": "schemas/kfd-3/collaboration-interface.schema.json",
+      "sha256": "e8d1f67914751b956c5a075eddbcc1ba482ddd21ce7298ab3a8b9df359a0ae44"
+    },
+    {
+      "id": "schema:kfd-3:witness",
+      "sourcePath": "schemas/kfd-3/witness.schema.json",
+      "sha256": "95c25c7967e5d40a2aa2312e3cdfe984ce00e85db2457a370ce3d863cfa82c84"
+    }
+  ],
+  "standardsMetadata": [
+    {
+      "id": "metadata:registry",
+      "sourcePath": "registry.json",
+      "sha256": "f58ec6929da6a5daada78265b937b9d0aebec7cbfb42325b279bb6ae77df830f"
+    },
+    {
+      "id": "metadata:standards",
+      "sourcePath": "standards.json",
+      "sha256": "7ac1410e182f5e66e5723c46f914ab652b2b4fad5b8fe5411172230c9ef146fc"
+    },
+    {
+      "id": "metadata:release-impact",
+      "sourcePath": "release-impact.json",
+      "sha256": "ae55c7758d53f7e57593e0ddec72142babd9a8ff7c9003e98f8b468b953e0d7e"
+    },
+    {
+      "id": "metadata:release-anchor",
+      "sourcePath": "kfd.release.json",
+      "sha256": "fefebbaaac172609ce0a22b505d15556739c89971e7fdac2c9ef3c4ca4776a68"
+    },
+    {
+      "id": "metadata:kfd-2-public-release-trust-claim",
+      "sourcePath": ".buildchain/kfd-2/public-release-trust.claim.json",
+      "sha256": "71986f6fd5d73a1fd74c1b6b68bcf6fe16bf67c2cea9cb3595bdbeebee10182c"
+    }
+  ],
+  "packageExports": [
+    {
+      "id": "export:package-json",
+      "sourcePath": "package.json#exports",
+      "sha256": "c082af3754b3b382219e8fb1973a228f0f38ab8846178ade639488be2626cdb6"
+    },
+    {
+      "id": "export:npm-files",
+      "sourcePath": "package.json#files",
+      "sha256": "c082af3754b3b382219e8fb1973a228f0f38ab8846178ade639488be2626cdb6"
+    }
+  ],
+  "siteConsumptionContracts": [
+    {
+      "id": "site:kfd-site-bundle",
+      "sourcePath": "site/kfd-site.json",
+      "sha256": "cb837c81d6fe02700528c5111558597225414c0c4fd9ab7279c94c61a3b4390c"
+    },
+    {
+      "id": "site:release-propagation",
+      "sourcePath": "buildchain.release-propagation.json",
+      "sha256": "71f9b54b9e76111178635804615fb0b4600f3131a7871b7c7817395b708c6fb3"
+    }
+  ],
+  "auditBoundary": {
+    "mode": "closed-world",
+    "scope": "KFD participant-facing public collaboration/control surfaces shipped in the repository and npm package",
+    "reachableSurfaceMode": "declared-boundary",
+    "unclassifiedPolicy": "fail",
+    "nonExhaustivelyEnumerableSurfaces": [
+      {
+        "id": "human-language-interpretation",
+        "definedBy": "https://kfd.libkungfu.dev/schemas/kfd-2/trust-taxonomy.schema.json#/$defs/residualRisk",
+        "riskType": "natural-language-semantic-risk",
+        "trustImpact": "downgrade-warning",
+        "machineProvability": "not-exhaustively-enumerable",
+        "agentAction": "semantic-review-required",
+        "reason": "Natural-language standard interpretation is inspectable and reviewable but not exhaustively enumerable from package bytes.",
+        "owner": "KFD maintainers"
+      }
+    ]
+  },
+  "residualRisk": [
+    {
+      "id": "human-language-interpretation",
+      "definedBy": "https://kfd.libkungfu.dev/schemas/kfd-2/trust-taxonomy.schema.json#/$defs/residualRisk",
+      "riskType": "natural-language-semantic-risk",
+      "trustImpact": "downgrade-warning",
+      "machineProvability": "not-exhaustively-enumerable",
+      "agentAction": "semantic-review-required",
+      "reason": "Natural-language standard interpretation is inspectable and reviewable but not exhaustively enumerable from package bytes.",
+      "owner": "KFD maintainers"
+    }
+  ],
+  "responsibility": {
+    "registryFactsOwner": "KFD maintainers",
+    "artifactVerificationOwner": "KFD package self-verification",
+    "releasePassportProofOwner": "Buildchain"
+  },
+  "expectedArtifactVerification": {
+    "command": "node scripts/check.mjs"
+  }
+}