@kungfu-tech/kfd 1.0.0-alpha.13 → 1.0.0-alpha.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.buildchain/kfd-1/contract-world.witness.json +20 -20
- package/.buildchain/kfd-2/public-release-trust.claim.json +16 -16
- package/.buildchain/kfd-3/collaboration-interface.artifact.json +25 -25
- package/.buildchain/kfd-3/collaboration-interface.prebuild.json +8 -8
- package/README.md +8 -0
- package/docs/MAP.md +1 -0
- package/docs/release-governance.md +28 -0
- package/kfd.release.json +1 -1
- package/package.json +4 -1
- package/release-impact.json +9 -3
- package/scripts/check.mjs +647 -0
- package/scripts/npm-publish-transaction.mjs +220 -0
- package/scripts/update-kfd-1-witness.mjs +24 -0
- package/scripts/update-kfd-2-claim.mjs +82 -0
- package/scripts/update-kfd-3-witness.mjs +227 -0
- package/scripts/update-site-bundle.mjs +293 -0
- package/site/kfd-site.json +109 -2
|
@@ -24,9 +24,9 @@
|
|
|
24
24
|
{
|
|
25
25
|
"name": "readme",
|
|
26
26
|
"sourcePath": "README.md",
|
|
27
|
-
"sourceSha256": "
|
|
27
|
+
"sourceSha256": "9582e0d7062ababccc81af0020b8f9ae12b24368fd8a8b9ff4f12ef06300c088",
|
|
28
28
|
"artifactPath": "README.md",
|
|
29
|
-
"expectedSha256": "
|
|
29
|
+
"expectedSha256": "9582e0d7062ababccc81af0020b8f9ae12b24368fd8a8b9ff4f12ef06300c088",
|
|
30
30
|
"byteForByte": true
|
|
31
31
|
},
|
|
32
32
|
{
|
|
@@ -136,17 +136,17 @@
|
|
|
136
136
|
{
|
|
137
137
|
"name": "kfd-site-bundle",
|
|
138
138
|
"sourcePath": "site/kfd-site.json",
|
|
139
|
-
"sourceSha256": "
|
|
139
|
+
"sourceSha256": "0aefd5854a171ec8fe31c67d8601d77b1ac48eb693252aaa91423f8c69cb06ee",
|
|
140
140
|
"artifactPath": "site/kfd-site.json",
|
|
141
|
-
"expectedSha256": "
|
|
141
|
+
"expectedSha256": "0aefd5854a171ec8fe31c67d8601d77b1ac48eb693252aaa91423f8c69cb06ee",
|
|
142
142
|
"byteForByte": true
|
|
143
143
|
},
|
|
144
144
|
{
|
|
145
145
|
"name": "kfd-doc-map",
|
|
146
146
|
"sourcePath": "docs/MAP.md",
|
|
147
|
-
"sourceSha256": "
|
|
147
|
+
"sourceSha256": "abeae72bda8c0b2e2ae79a5caa1537961d4737188758e86be9d9d1a3f0c2188c",
|
|
148
148
|
"artifactPath": "docs/MAP.md",
|
|
149
|
-
"expectedSha256": "
|
|
149
|
+
"expectedSha256": "abeae72bda8c0b2e2ae79a5caa1537961d4737188758e86be9d9d1a3f0c2188c",
|
|
150
150
|
"byteForByte": true
|
|
151
151
|
},
|
|
152
152
|
{
|
|
@@ -168,17 +168,17 @@
|
|
|
168
168
|
{
|
|
169
169
|
"name": "release-impact-ledger",
|
|
170
170
|
"sourcePath": "release-impact.json",
|
|
171
|
-
"sourceSha256": "
|
|
171
|
+
"sourceSha256": "bb2048a66af9516e2b6cda37a46218e8306a6b1160e413b36379961660d34730",
|
|
172
172
|
"artifactPath": "release-impact.json",
|
|
173
|
-
"expectedSha256": "
|
|
173
|
+
"expectedSha256": "bb2048a66af9516e2b6cda37a46218e8306a6b1160e413b36379961660d34730",
|
|
174
174
|
"byteForByte": true
|
|
175
175
|
},
|
|
176
176
|
{
|
|
177
177
|
"name": "kfd-check-gate",
|
|
178
178
|
"sourcePath": "scripts/check.mjs",
|
|
179
|
-
"sourceSha256": "
|
|
179
|
+
"sourceSha256": "a72c478952ad8b08c2fdcd73838d4b816330bf075b99d9dac44450524217fdf6",
|
|
180
180
|
"artifactPath": "scripts/check.mjs",
|
|
181
|
-
"expectedSha256": "
|
|
181
|
+
"expectedSha256": "a72c478952ad8b08c2fdcd73838d4b816330bf075b99d9dac44450524217fdf6",
|
|
182
182
|
"byteForByte": true
|
|
183
183
|
},
|
|
184
184
|
{
|
|
@@ -192,17 +192,17 @@
|
|
|
192
192
|
{
|
|
193
193
|
"name": "buildchain-build-workflow",
|
|
194
194
|
"sourcePath": ".github/workflows/build.yml",
|
|
195
|
-
"sourceSha256": "
|
|
195
|
+
"sourceSha256": "02606915b1d3b3006e6c2e0b7977d7329c9f2ace12319c097d413aa93a7c39c6",
|
|
196
196
|
"artifactPath": ".github/workflows/build.yml",
|
|
197
|
-
"expectedSha256": "
|
|
197
|
+
"expectedSha256": "02606915b1d3b3006e6c2e0b7977d7329c9f2ace12319c097d413aa93a7c39c6",
|
|
198
198
|
"byteForByte": true
|
|
199
199
|
},
|
|
200
200
|
{
|
|
201
201
|
"name": "buildchain-ref-promotion-workflow",
|
|
202
202
|
"sourcePath": ".github/workflows/buildchain-ref-promotion.yml",
|
|
203
|
-
"sourceSha256": "
|
|
203
|
+
"sourceSha256": "0e0afb510b9a59ed771b17a3671301f02fa8abe85c1562a1013988a0e835b251",
|
|
204
204
|
"artifactPath": ".github/workflows/buildchain-ref-promotion.yml",
|
|
205
|
-
"expectedSha256": "
|
|
205
|
+
"expectedSha256": "0e0afb510b9a59ed771b17a3671301f02fa8abe85c1562a1013988a0e835b251",
|
|
206
206
|
"byteForByte": true
|
|
207
207
|
},
|
|
208
208
|
{
|
|
@@ -224,25 +224,25 @@
|
|
|
224
224
|
{
|
|
225
225
|
"name": "kfd-package-manifest",
|
|
226
226
|
"sourcePath": "package.json",
|
|
227
|
-
"sourceSha256": "
|
|
227
|
+
"sourceSha256": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f",
|
|
228
228
|
"artifactPath": "package.json",
|
|
229
|
-
"expectedSha256": "
|
|
229
|
+
"expectedSha256": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f",
|
|
230
230
|
"byteForByte": true
|
|
231
231
|
},
|
|
232
232
|
{
|
|
233
233
|
"name": "kfd-release-anchor",
|
|
234
234
|
"sourcePath": "kfd.release.json",
|
|
235
|
-
"sourceSha256": "
|
|
235
|
+
"sourceSha256": "fd86ca7289259a860bf69e733504095b567fb078951268b8667f638030b9d15f",
|
|
236
236
|
"artifactPath": "kfd.release.json",
|
|
237
|
-
"expectedSha256": "
|
|
237
|
+
"expectedSha256": "fd86ca7289259a860bf69e733504095b567fb078951268b8667f638030b9d15f",
|
|
238
238
|
"byteForByte": true
|
|
239
239
|
},
|
|
240
240
|
{
|
|
241
241
|
"name": "kfd-2-public-release-trust-claim",
|
|
242
242
|
"sourcePath": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
243
|
-
"sourceSha256": "
|
|
243
|
+
"sourceSha256": "63435b7f5af99d29a4a49168c98344f1cfd121f0c7ca5b1845462dcdd7f69459",
|
|
244
244
|
"artifactPath": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
245
|
-
"expectedSha256": "
|
|
245
|
+
"expectedSha256": "63435b7f5af99d29a4a49168c98344f1cfd121f0c7ca5b1845462dcdd7f69459",
|
|
246
246
|
"byteForByte": true
|
|
247
247
|
}
|
|
248
248
|
]
|
|
@@ -5,12 +5,12 @@
|
|
|
5
5
|
"sourceBindings": [
|
|
6
6
|
{
|
|
7
7
|
"path": "package.json",
|
|
8
|
-
"sha256": "
|
|
8
|
+
"sha256": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f",
|
|
9
9
|
"id": "package-version-and-exports"
|
|
10
10
|
},
|
|
11
11
|
{
|
|
12
12
|
"path": "kfd.release.json",
|
|
13
|
-
"sha256": "
|
|
13
|
+
"sha256": "fd86ca7289259a860bf69e733504095b567fb078951268b8667f638030b9d15f",
|
|
14
14
|
"id": "anchored-release-version"
|
|
15
15
|
},
|
|
16
16
|
{
|
|
@@ -25,7 +25,7 @@
|
|
|
25
25
|
},
|
|
26
26
|
{
|
|
27
27
|
"path": "release-impact.json",
|
|
28
|
-
"sha256": "
|
|
28
|
+
"sha256": "bb2048a66af9516e2b6cda37a46218e8306a6b1160e413b36379961660d34730",
|
|
29
29
|
"id": "release-impact-ledger"
|
|
30
30
|
},
|
|
31
31
|
{
|
|
@@ -37,17 +37,17 @@
|
|
|
37
37
|
"machineEvidence": [
|
|
38
38
|
{
|
|
39
39
|
"path": "scripts/check.mjs",
|
|
40
|
-
"sha256": "
|
|
40
|
+
"sha256": "a72c478952ad8b08c2fdcd73838d4b816330bf075b99d9dac44450524217fdf6",
|
|
41
41
|
"id": "self-verification-command"
|
|
42
42
|
},
|
|
43
43
|
{
|
|
44
44
|
"path": ".github/workflows/build.yml",
|
|
45
|
-
"sha256": "
|
|
45
|
+
"sha256": "02606915b1d3b3006e6c2e0b7977d7329c9f2ace12319c097d413aa93a7c39c6",
|
|
46
46
|
"id": "buildchain-build-workflow"
|
|
47
47
|
},
|
|
48
48
|
{
|
|
49
49
|
"path": ".github/workflows/buildchain-ref-promotion.yml",
|
|
50
|
-
"sha256": "
|
|
50
|
+
"sha256": "0e0afb510b9a59ed771b17a3671301f02fa8abe85c1562a1013988a0e835b251",
|
|
51
51
|
"id": "buildchain-promotion-workflow"
|
|
52
52
|
},
|
|
53
53
|
{
|
|
@@ -67,15 +67,15 @@
|
|
|
67
67
|
}
|
|
68
68
|
],
|
|
69
69
|
"hashes": {
|
|
70
|
-
"package-version-and-exports": "
|
|
71
|
-
"anchored-release-version": "
|
|
70
|
+
"package-version-and-exports": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f",
|
|
71
|
+
"anchored-release-version": "fd86ca7289259a860bf69e733504095b567fb078951268b8667f638030b9d15f",
|
|
72
72
|
"decision-registry": "f58ec6929da6a5daada78265b937b9d0aebec7cbfb42325b279bb6ae77df830f",
|
|
73
73
|
"standards-metadata": "7ac1410e182f5e66e5723c46f914ab652b2b4fad5b8fe5411172230c9ef146fc",
|
|
74
|
-
"release-impact-ledger": "
|
|
74
|
+
"release-impact-ledger": "bb2048a66af9516e2b6cda37a46218e8306a6b1160e413b36379961660d34730",
|
|
75
75
|
"buildchain-release-contract": "0dc1179d59b634df364871ea18a66251781321c80a6f7bcb9e3fcf5a48ef738a",
|
|
76
|
-
"self-verification-command": "
|
|
77
|
-
"buildchain-build-workflow": "
|
|
78
|
-
"buildchain-promotion-workflow": "
|
|
76
|
+
"self-verification-command": "a72c478952ad8b08c2fdcd73838d4b816330bf075b99d9dac44450524217fdf6",
|
|
77
|
+
"buildchain-build-workflow": "02606915b1d3b3006e6c2e0b7977d7329c9f2ace12319c097d413aa93a7c39c6",
|
|
78
|
+
"buildchain-promotion-workflow": "0e0afb510b9a59ed771b17a3671301f02fa8abe85c1562a1013988a0e835b251",
|
|
79
79
|
"kfd-2-trust-taxonomy-schema": "a663d301a663cadb8567e3010361f5a630b76b6518ed7603dfd58cbd4e64a658",
|
|
80
80
|
"kfd-2-release-claims-schema": "0f52c4a9949f62163a0fbe14fefc2f2f93f548ae18b6b5c07eb87aedca4c0be0",
|
|
81
81
|
"kfd-2-release-trust-passport-schema": "df7f828605f680f3ff52fe3468cbf8f5e20151fac0d5c31cd9a0de9765efecc1"
|
|
@@ -83,15 +83,15 @@
|
|
|
83
83
|
"artifacts": [
|
|
84
84
|
{
|
|
85
85
|
"name": "@kungfu-tech/kfd",
|
|
86
|
-
"version": "1.0.0-alpha.
|
|
86
|
+
"version": "1.0.0-alpha.15",
|
|
87
87
|
"path": "package.json",
|
|
88
|
-
"sha256": "
|
|
88
|
+
"sha256": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f"
|
|
89
89
|
},
|
|
90
90
|
{
|
|
91
91
|
"name": "kfd-release-anchor",
|
|
92
|
-
"version": "1.0.0-alpha.
|
|
92
|
+
"version": "1.0.0-alpha.15",
|
|
93
93
|
"path": "kfd.release.json",
|
|
94
|
-
"sha256": "
|
|
94
|
+
"sha256": "fd86ca7289259a860bf69e733504095b567fb078951268b8667f638030b9d15f"
|
|
95
95
|
}
|
|
96
96
|
],
|
|
97
97
|
"verification": {
|
|
@@ -243,7 +243,7 @@
|
|
|
243
243
|
{
|
|
244
244
|
"id": "doc:readme",
|
|
245
245
|
"sourcePath": "README.md",
|
|
246
|
-
"sha256": "
|
|
246
|
+
"sha256": "9582e0d7062ababccc81af0020b8f9ae12b24368fd8a8b9ff4f12ef06300c088"
|
|
247
247
|
},
|
|
248
248
|
{
|
|
249
249
|
"id": "doc:trademarks",
|
|
@@ -253,7 +253,7 @@
|
|
|
253
253
|
{
|
|
254
254
|
"id": "doc:docs-map",
|
|
255
255
|
"sourcePath": "docs/MAP.md",
|
|
256
|
-
"sha256": "
|
|
256
|
+
"sha256": "abeae72bda8c0b2e2ae79a5caa1537961d4737188758e86be9d9d1a3f0c2188c"
|
|
257
257
|
},
|
|
258
258
|
{
|
|
259
259
|
"id": "doc:kfd-2-release-trust",
|
|
@@ -337,36 +337,36 @@
|
|
|
337
337
|
{
|
|
338
338
|
"id": "metadata:release-impact",
|
|
339
339
|
"sourcePath": "release-impact.json",
|
|
340
|
-
"sha256": "
|
|
340
|
+
"sha256": "bb2048a66af9516e2b6cda37a46218e8306a6b1160e413b36379961660d34730"
|
|
341
341
|
},
|
|
342
342
|
{
|
|
343
343
|
"id": "metadata:release-anchor",
|
|
344
344
|
"sourcePath": "kfd.release.json",
|
|
345
|
-
"sha256": "
|
|
345
|
+
"sha256": "fd86ca7289259a860bf69e733504095b567fb078951268b8667f638030b9d15f"
|
|
346
346
|
},
|
|
347
347
|
{
|
|
348
348
|
"id": "metadata:kfd-2-public-release-trust-claim",
|
|
349
349
|
"sourcePath": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
350
|
-
"sha256": "
|
|
350
|
+
"sha256": "63435b7f5af99d29a4a49168c98344f1cfd121f0c7ca5b1845462dcdd7f69459"
|
|
351
351
|
}
|
|
352
352
|
],
|
|
353
353
|
"packageExports": [
|
|
354
354
|
{
|
|
355
355
|
"id": "export:package-json",
|
|
356
356
|
"sourcePath": "package.json#exports",
|
|
357
|
-
"sha256": "
|
|
357
|
+
"sha256": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f"
|
|
358
358
|
},
|
|
359
359
|
{
|
|
360
360
|
"id": "export:npm-files",
|
|
361
361
|
"sourcePath": "package.json#files",
|
|
362
|
-
"sha256": "
|
|
362
|
+
"sha256": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f"
|
|
363
363
|
}
|
|
364
364
|
],
|
|
365
365
|
"siteConsumptionContracts": [
|
|
366
366
|
{
|
|
367
367
|
"id": "site:kfd-site-bundle",
|
|
368
368
|
"sourcePath": "site/kfd-site.json",
|
|
369
|
-
"sha256": "
|
|
369
|
+
"sha256": "0aefd5854a171ec8fe31c67d8601d77b1ac48eb693252aaa91423f8c69cb06ee"
|
|
370
370
|
},
|
|
371
371
|
{
|
|
372
372
|
"id": "site:release-propagation",
|
|
@@ -378,12 +378,12 @@
|
|
|
378
378
|
"minimalEntrypoints": [
|
|
379
379
|
{
|
|
380
380
|
"path": "README.md",
|
|
381
|
-
"sha256": "
|
|
381
|
+
"sha256": "9582e0d7062ababccc81af0020b8f9ae12b24368fd8a8b9ff4f12ef06300c088",
|
|
382
382
|
"description": "Start from the KFD worldview and current decision set."
|
|
383
383
|
},
|
|
384
384
|
{
|
|
385
385
|
"path": "docs/MAP.md",
|
|
386
|
-
"sha256": "
|
|
386
|
+
"sha256": "abeae72bda8c0b2e2ae79a5caa1537961d4737188758e86be9d9d1a3f0c2188c",
|
|
387
387
|
"description": "Route readers and agents to the right KFD document or machine surface."
|
|
388
388
|
},
|
|
389
389
|
{
|
|
@@ -403,29 +403,29 @@
|
|
|
403
403
|
},
|
|
404
404
|
{
|
|
405
405
|
"path": "package.json#exports",
|
|
406
|
-
"sha256": "
|
|
406
|
+
"sha256": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f",
|
|
407
407
|
"description": "Consume the shipped npm package surfaces."
|
|
408
408
|
},
|
|
409
409
|
{
|
|
410
410
|
"path": "kfd.release.json",
|
|
411
|
-
"sha256": "
|
|
411
|
+
"sha256": "fd86ca7289259a860bf69e733504095b567fb078951268b8667f638030b9d15f",
|
|
412
412
|
"description": "Inspect the explicit KFD package version anchor for the current Buildchain release line."
|
|
413
413
|
},
|
|
414
414
|
{
|
|
415
415
|
"path": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
416
|
-
"sha256": "
|
|
416
|
+
"sha256": "63435b7f5af99d29a4a49168c98344f1cfd121f0c7ca5b1845462dcdd7f69459",
|
|
417
417
|
"description": "Inspect the explicit public KFD-2 claim passed into Buildchain release passport generation."
|
|
418
418
|
},
|
|
419
419
|
{
|
|
420
420
|
"path": "site/kfd-site.json",
|
|
421
|
-
"sha256": "
|
|
421
|
+
"sha256": "0aefd5854a171ec8fe31c67d8601d77b1ac48eb693252aaa91423f8c69cb06ee",
|
|
422
422
|
"description": "Render KFD-owned site text and decision pages without duplicating extraction logic."
|
|
423
423
|
}
|
|
424
424
|
],
|
|
425
425
|
"discoverability": [
|
|
426
426
|
{
|
|
427
427
|
"path": "README.md",
|
|
428
|
-
"sha256": "
|
|
428
|
+
"sha256": "9582e0d7062ababccc81af0020b8f9ae12b24368fd8a8b9ff4f12ef06300c088",
|
|
429
429
|
"description": "Human and agent entrypoint"
|
|
430
430
|
},
|
|
431
431
|
{
|
|
@@ -435,7 +435,7 @@
|
|
|
435
435
|
},
|
|
436
436
|
{
|
|
437
437
|
"path": "docs/MAP.md",
|
|
438
|
-
"sha256": "
|
|
438
|
+
"sha256": "abeae72bda8c0b2e2ae79a5caa1537961d4737188758e86be9d9d1a3f0c2188c",
|
|
439
439
|
"description": "Documentation routing entrypoint"
|
|
440
440
|
},
|
|
441
441
|
{
|
|
@@ -450,17 +450,17 @@
|
|
|
450
450
|
},
|
|
451
451
|
{
|
|
452
452
|
"path": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
453
|
-
"sha256": "
|
|
453
|
+
"sha256": "63435b7f5af99d29a4a49168c98344f1cfd121f0c7ca5b1845462dcdd7f69459",
|
|
454
454
|
"description": "KFD-2 public release trust claim"
|
|
455
455
|
},
|
|
456
456
|
{
|
|
457
457
|
"path": "package.json",
|
|
458
|
-
"sha256": "
|
|
458
|
+
"sha256": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f",
|
|
459
459
|
"description": "Package export map"
|
|
460
460
|
},
|
|
461
461
|
{
|
|
462
462
|
"path": "site/kfd-site.json",
|
|
463
|
-
"sha256": "
|
|
463
|
+
"sha256": "0aefd5854a171ec8fe31c67d8601d77b1ac48eb693252aaa91423f8c69cb06ee",
|
|
464
464
|
"description": "Site content projection"
|
|
465
465
|
}
|
|
466
466
|
],
|
|
@@ -477,19 +477,19 @@
|
|
|
477
477
|
},
|
|
478
478
|
{
|
|
479
479
|
"path": "scripts/check.mjs",
|
|
480
|
-
"sha256": "
|
|
480
|
+
"sha256": "a72c478952ad8b08c2fdcd73838d4b816330bf075b99d9dac44450524217fdf6",
|
|
481
481
|
"description": "Repository self-verification gate"
|
|
482
482
|
},
|
|
483
483
|
{
|
|
484
484
|
"path": "site/kfd-site.json",
|
|
485
|
-
"sha256": "
|
|
485
|
+
"sha256": "0aefd5854a171ec8fe31c67d8601d77b1ac48eb693252aaa91423f8c69cb06ee",
|
|
486
486
|
"description": "Site rendering boundary"
|
|
487
487
|
}
|
|
488
488
|
],
|
|
489
489
|
"choicePaths": [
|
|
490
490
|
{
|
|
491
491
|
"path": "README.md",
|
|
492
|
-
"sha256": "
|
|
492
|
+
"sha256": "9582e0d7062ababccc81af0020b8f9ae12b24368fd8a8b9ff4f12ef06300c088",
|
|
493
493
|
"description": "Human reading path"
|
|
494
494
|
},
|
|
495
495
|
{
|
|
@@ -504,19 +504,19 @@
|
|
|
504
504
|
},
|
|
505
505
|
{
|
|
506
506
|
"path": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
507
|
-
"sha256": "
|
|
507
|
+
"sha256": "63435b7f5af99d29a4a49168c98344f1cfd121f0c7ca5b1845462dcdd7f69459",
|
|
508
508
|
"description": "Agent release trust claim path"
|
|
509
509
|
},
|
|
510
510
|
{
|
|
511
511
|
"path": "package.json",
|
|
512
|
-
"sha256": "
|
|
512
|
+
"sha256": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f",
|
|
513
513
|
"description": "Package consumption path"
|
|
514
514
|
}
|
|
515
515
|
],
|
|
516
516
|
"manuals": [
|
|
517
517
|
{
|
|
518
518
|
"path": "docs/MAP.md",
|
|
519
|
-
"sha256": "
|
|
519
|
+
"sha256": "abeae72bda8c0b2e2ae79a5caa1537961d4737188758e86be9d9d1a3f0c2188c"
|
|
520
520
|
},
|
|
521
521
|
{
|
|
522
522
|
"path": "TRADEMARKS.md",
|
|
@@ -725,7 +725,7 @@
|
|
|
725
725
|
{
|
|
726
726
|
"id": "doc:readme",
|
|
727
727
|
"sourcePath": "README.md",
|
|
728
|
-
"sha256": "
|
|
728
|
+
"sha256": "9582e0d7062ababccc81af0020b8f9ae12b24368fd8a8b9ff4f12ef06300c088"
|
|
729
729
|
},
|
|
730
730
|
{
|
|
731
731
|
"id": "doc:trademarks",
|
|
@@ -735,7 +735,7 @@
|
|
|
735
735
|
{
|
|
736
736
|
"id": "doc:docs-map",
|
|
737
737
|
"sourcePath": "docs/MAP.md",
|
|
738
|
-
"sha256": "
|
|
738
|
+
"sha256": "abeae72bda8c0b2e2ae79a5caa1537961d4737188758e86be9d9d1a3f0c2188c"
|
|
739
739
|
},
|
|
740
740
|
{
|
|
741
741
|
"id": "doc:kfd-2-release-trust",
|
|
@@ -819,36 +819,36 @@
|
|
|
819
819
|
{
|
|
820
820
|
"id": "metadata:release-impact",
|
|
821
821
|
"sourcePath": "release-impact.json",
|
|
822
|
-
"sha256": "
|
|
822
|
+
"sha256": "bb2048a66af9516e2b6cda37a46218e8306a6b1160e413b36379961660d34730"
|
|
823
823
|
},
|
|
824
824
|
{
|
|
825
825
|
"id": "metadata:release-anchor",
|
|
826
826
|
"sourcePath": "kfd.release.json",
|
|
827
|
-
"sha256": "
|
|
827
|
+
"sha256": "fd86ca7289259a860bf69e733504095b567fb078951268b8667f638030b9d15f"
|
|
828
828
|
},
|
|
829
829
|
{
|
|
830
830
|
"id": "metadata:kfd-2-public-release-trust-claim",
|
|
831
831
|
"sourcePath": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
832
|
-
"sha256": "
|
|
832
|
+
"sha256": "63435b7f5af99d29a4a49168c98344f1cfd121f0c7ca5b1845462dcdd7f69459"
|
|
833
833
|
}
|
|
834
834
|
],
|
|
835
835
|
"packageExports": [
|
|
836
836
|
{
|
|
837
837
|
"id": "export:package-json",
|
|
838
838
|
"sourcePath": "package.json#exports",
|
|
839
|
-
"sha256": "
|
|
839
|
+
"sha256": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f"
|
|
840
840
|
},
|
|
841
841
|
{
|
|
842
842
|
"id": "export:npm-files",
|
|
843
843
|
"sourcePath": "package.json#files",
|
|
844
|
-
"sha256": "
|
|
844
|
+
"sha256": "f3d2860963974757e48e014d34e9b1f1c161ce15bfbbbf8a3117401f18ee198f"
|
|
845
845
|
}
|
|
846
846
|
],
|
|
847
847
|
"siteConsumptionContracts": [
|
|
848
848
|
{
|
|
849
849
|
"id": "site:kfd-site-bundle",
|
|
850
850
|
"sourcePath": "site/kfd-site.json",
|
|
851
|
-
"sha256": "
|
|
851
|
+
"sha256": "0aefd5854a171ec8fe31c67d8601d77b1ac48eb693252aaa91423f8c69cb06ee"
|
|
852
852
|
},
|
|
853
853
|
{
|
|
854
854
|
"id": "site:release-propagation",
|
package/README.md
CHANGED
|
@@ -99,6 +99,14 @@ proof path, decision routes, and rendering boundary. A site renderer may adapt
|
|
|
99
99
|
layout, navigation, typography, and visual assets, but it should not maintain
|
|
100
100
|
separate homepage wording that can drift from this package.
|
|
101
101
|
|
|
102
|
+
`site/kfd-site.json` is generated from this README by
|
|
103
|
+
`scripts/update-site-bundle.mjs`. The generated bundle exposes both compatible
|
|
104
|
+
top-level homepage fields and ordered `homepage.sections` entries. The
|
|
105
|
+
`homepage.displayPlan` tells renderers which sections belong in the first
|
|
106
|
+
screen, primary narrative, support area, and renderer-contract area. Site
|
|
107
|
+
repositories should consume that bundle instead of parsing this README
|
|
108
|
+
themselves.
|
|
109
|
+
|
|
102
110
|
## Product proof path
|
|
103
111
|
|
|
104
112
|
KFDs are not a detached manifesto, but they are not a demand that readers adopt
|
package/docs/MAP.md
CHANGED
|
@@ -22,5 +22,6 @@
|
|
|
22
22
|
| How do decisions change over time? | [`../CONTRIBUTING.md`](../CONTRIBUTING.md) — append-only; explicit supersession mints a new number |
|
|
23
23
|
| How is this package versioned and released? | [KFD-1](../decisions/kfd-1.md) applied to itself; Buildchain governs releases |
|
|
24
24
|
| What release impact ledger should Buildchain consume for production passports? | [`../release-impact.json`](../release-impact.json) |
|
|
25
|
+
| What release provenance path must alpha promotion use? | [`release-governance.md`](release-governance.md) |
|
|
25
26
|
| How do I verify registry/document agreement? | `node scripts/check.mjs` |
|
|
26
27
|
| How do I report a vulnerability? | [`../SECURITY.md`](../SECURITY.md) |
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
# Release Governance Notes
|
|
2
|
+
|
|
3
|
+
KFD releases are governed by Buildchain channel promotion. The package version
|
|
4
|
+
line stays fixed at `v1.0`; alpha and production releases move through
|
|
5
|
+
protected channel branches.
|
|
6
|
+
|
|
7
|
+
For alpha promotion, Buildchain treats the provenance path as part of the
|
|
8
|
+
release contract:
|
|
9
|
+
|
|
10
|
+
```text
|
|
11
|
+
dev/v1/v1.0 -> alpha/v1/v1.0
|
|
12
|
+
```
|
|
13
|
+
|
|
14
|
+
The alpha branch must be updated by a merged same-repository pull request whose
|
|
15
|
+
head is `dev/v1/v1.0` and whose base is `alpha/v1/v1.0`. A temporary promotion
|
|
16
|
+
branch may satisfy GitHub freshness rules, but it is not a valid Buildchain
|
|
17
|
+
release source for KFD alpha publishing.
|
|
18
|
+
|
|
19
|
+
The protected branch required status check must also name the status emitted by
|
|
20
|
+
the current Verify workflow. As of the alpha.14 line, that required check is:
|
|
21
|
+
|
|
22
|
+
```text
|
|
23
|
+
check / check
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
Keeping the branch protection rule and the workflow-emitted status name aligned
|
|
27
|
+
is part of KFD-1's "facts must not drift" requirement: the release gate cannot
|
|
28
|
+
depend on a stale status context that no current workflow can produce.
|
package/kfd.release.json
CHANGED
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@kungfu-tech/kfd",
|
|
3
|
-
"version": "1.0.0-alpha.
|
|
3
|
+
"version": "1.0.0-alpha.15",
|
|
4
4
|
"description": "Kung Fu Decisions (KFD): the kungfu-systems organization-wide decision registry, as a consumable artifact",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"files": [
|
|
@@ -12,6 +12,7 @@
|
|
|
12
12
|
"kfd.release.json",
|
|
13
13
|
"schemas",
|
|
14
14
|
"site",
|
|
15
|
+
"scripts",
|
|
15
16
|
"buildchain.release-propagation.json",
|
|
16
17
|
"release-impact.json",
|
|
17
18
|
".buildchain/kfd-1/contract-world.witness.json",
|
|
@@ -29,6 +30,7 @@
|
|
|
29
30
|
"./site/kfd-site.json": "./site/kfd-site.json",
|
|
30
31
|
"./buildchain.release-propagation.json": "./buildchain.release-propagation.json",
|
|
31
32
|
"./release-impact.json": "./release-impact.json",
|
|
33
|
+
"./scripts/*.mjs": "./scripts/*.mjs",
|
|
32
34
|
"./buildchain/kfd-1/contract-world.witness.json": "./.buildchain/kfd-1/contract-world.witness.json",
|
|
33
35
|
"./buildchain/kfd-2/public-release-trust.claim.json": "./.buildchain/kfd-2/public-release-trust.claim.json",
|
|
34
36
|
"./buildchain/kfd-3/collaboration-interface.json": "./.buildchain/kfd-3/collaboration-interface.json",
|
|
@@ -41,6 +43,7 @@
|
|
|
41
43
|
},
|
|
42
44
|
"scripts": {
|
|
43
45
|
"check": "node scripts/check.mjs",
|
|
46
|
+
"update:site-bundle": "node scripts/update-site-bundle.mjs",
|
|
44
47
|
"update:kfd-1-witness": "node scripts/update-kfd-1-witness.mjs",
|
|
45
48
|
"update:kfd-2-claim": "node scripts/update-kfd-2-claim.mjs",
|
|
46
49
|
"update:kfd-3-witness": "node scripts/update-kfd-3-witness.mjs"
|
package/release-impact.json
CHANGED
|
@@ -9,7 +9,7 @@
|
|
|
9
9
|
"versionImpact": {
|
|
10
10
|
"final": "minor",
|
|
11
11
|
"source": "kfd-surface-register",
|
|
12
|
-
"rationale": "This change additively registers KFD-owned standards metadata, the KFD-2 trust taxonomy, KFD-2 release trust schemas, KFD-3 collaboration-interface schemas, KFD-3 self-verification witnesses,
|
|
12
|
+
"rationale": "This change additively registers KFD-owned standards metadata, the KFD-2 trust taxonomy, KFD-2 release trust schemas, KFD-3 collaboration-interface schemas, KFD-3 self-verification witnesses, KFD-1 document/interface integrity bindings, and the README-backed KFD site homepage projection while keeping existing registry and decision surfaces compatible."
|
|
13
13
|
},
|
|
14
14
|
"surfaceImpacts": [
|
|
15
15
|
{
|
|
@@ -34,7 +34,13 @@
|
|
|
34
34
|
"id": "kfd-package-structure",
|
|
35
35
|
"impact": "minor",
|
|
36
36
|
"class": "additive",
|
|
37
|
-
"rationale": "The npm package now publishes the KFD-2 trust taxonomy, KFD-2 schemas, KFD-2 documentation, KFD-3 self collaboration-interface witnesses, TRADEMARKS.md, public fact-source metadata,
|
|
37
|
+
"rationale": "The npm package now publishes the KFD-2 trust taxonomy, KFD-2 schemas, KFD-2 documentation, KFD-3 self collaboration-interface witnesses, TRADEMARKS.md, public fact-source metadata, agent quickstart/self-proof documentation, and repository verification scripts through existing schemas/, docs/, standards.json, site/, scripts/, .buildchain/, and subpath exports while preserving existing README.md, decisions/, registry.json, and site/ paths."
|
|
38
|
+
},
|
|
39
|
+
{
|
|
40
|
+
"id": "kfd-site-homepage-bundle",
|
|
41
|
+
"impact": "minor",
|
|
42
|
+
"class": "additive",
|
|
43
|
+
"rationale": "site/kfd-site.json now exposes generated README-backed homepage.sections and homepage.displayPlan fields, and scripts/check.mjs verifies the checked-in bundle matches the README projection so downstream sites can render KFD-owned homepage content without maintaining their own README parser or drifting copy."
|
|
38
44
|
},
|
|
39
45
|
{
|
|
40
46
|
"id": "kfd-3-self-collaboration",
|
|
@@ -61,5 +67,5 @@
|
|
|
61
67
|
"rationale": "The KFD to site-libkungfu-dev propagation graph now targets the downstream site's actual main branch and documents the exact KFD package surfaces consumed by kfd.libkungfu.dev, without changing the release propagation graph contract."
|
|
62
68
|
}
|
|
63
69
|
],
|
|
64
|
-
"summary": "KFD v1.0 production promotion is minor-impact because it additively exposes KFD-2 trust taxonomy and release trust metadata, KFD-1/2/3 interface version metadata, KFD-3 self-verification witnesses, document integrity bindings, and a corrected site release-propagation target for Buildchain and other consumers; existing registry, decision text, site bundle, and propagation graph contracts remain compatible."
|
|
70
|
+
"summary": "KFD v1.0 production promotion is minor-impact because it additively exposes KFD-2 trust taxonomy and release trust metadata, KFD-1/2/3 interface version metadata, KFD-3 self-verification witnesses, document integrity bindings, a README-backed homepage bundle/display plan, and a corrected site release-propagation target for Buildchain and other consumers; existing registry, decision text, site bundle, and propagation graph contracts remain compatible."
|
|
65
71
|
}
|