@kungfu-tech/kfd 1.0.0-alpha.17 → 1.0.0-alpha.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.buildchain/kfd-1/contract-world.witness.json +14 -14
- package/.buildchain/kfd-2/public-release-trust.claim.json +22 -16
- package/.buildchain/kfd-3/collaboration-interface.artifact.json +18 -13
- package/.buildchain/kfd-3/collaboration-interface.prebuild.json +10 -5
- package/buildchain.contract-lock.json +71 -0
- package/kfd.release.json +1 -1
- package/package.json +3 -1
- package/release-impact.json +8 -2
- package/scripts/check.mjs +2 -2
- package/scripts/update-kfd-2-claim.mjs +1 -0
- package/scripts/update-kfd-3-witness.mjs +1 -0
|
@@ -168,17 +168,17 @@
|
|
|
168
168
|
{
|
|
169
169
|
"name": "release-impact-ledger",
|
|
170
170
|
"sourcePath": "release-impact.json",
|
|
171
|
-
"sourceSha256": "
|
|
171
|
+
"sourceSha256": "41cf5821661af64f38dd782d5f9f5f9a857a01134afa1c06b3da5ceffcc817ed",
|
|
172
172
|
"artifactPath": "release-impact.json",
|
|
173
|
-
"expectedSha256": "
|
|
173
|
+
"expectedSha256": "41cf5821661af64f38dd782d5f9f5f9a857a01134afa1c06b3da5ceffcc817ed",
|
|
174
174
|
"byteForByte": true
|
|
175
175
|
},
|
|
176
176
|
{
|
|
177
177
|
"name": "kfd-check-gate",
|
|
178
178
|
"sourcePath": "scripts/check.mjs",
|
|
179
|
-
"sourceSha256": "
|
|
179
|
+
"sourceSha256": "ffccf0a401a75f49e85e7bfdb22e4d7d32a5c81e07e386a9c2e627872b05cf8a",
|
|
180
180
|
"artifactPath": "scripts/check.mjs",
|
|
181
|
-
"expectedSha256": "
|
|
181
|
+
"expectedSha256": "ffccf0a401a75f49e85e7bfdb22e4d7d32a5c81e07e386a9c2e627872b05cf8a",
|
|
182
182
|
"byteForByte": true
|
|
183
183
|
},
|
|
184
184
|
{
|
|
@@ -192,17 +192,17 @@
|
|
|
192
192
|
{
|
|
193
193
|
"name": "buildchain-build-workflow",
|
|
194
194
|
"sourcePath": ".github/workflows/build.yml",
|
|
195
|
-
"sourceSha256": "
|
|
195
|
+
"sourceSha256": "264cd15db6f872c72fc58bcd476d1a3a476ec54b520b05268e213f5b59692f5b",
|
|
196
196
|
"artifactPath": ".github/workflows/build.yml",
|
|
197
|
-
"expectedSha256": "
|
|
197
|
+
"expectedSha256": "264cd15db6f872c72fc58bcd476d1a3a476ec54b520b05268e213f5b59692f5b",
|
|
198
198
|
"byteForByte": true
|
|
199
199
|
},
|
|
200
200
|
{
|
|
201
201
|
"name": "buildchain-ref-promotion-workflow",
|
|
202
202
|
"sourcePath": ".github/workflows/buildchain-ref-promotion.yml",
|
|
203
|
-
"sourceSha256": "
|
|
203
|
+
"sourceSha256": "754a44cedfc174f35dcf54414c04b636bbc0a85e2272f5de8e899a70ee05d7bd",
|
|
204
204
|
"artifactPath": ".github/workflows/buildchain-ref-promotion.yml",
|
|
205
|
-
"expectedSha256": "
|
|
205
|
+
"expectedSha256": "754a44cedfc174f35dcf54414c04b636bbc0a85e2272f5de8e899a70ee05d7bd",
|
|
206
206
|
"byteForByte": true
|
|
207
207
|
},
|
|
208
208
|
{
|
|
@@ -224,25 +224,25 @@
|
|
|
224
224
|
{
|
|
225
225
|
"name": "kfd-package-manifest",
|
|
226
226
|
"sourcePath": "package.json",
|
|
227
|
-
"sourceSha256": "
|
|
227
|
+
"sourceSha256": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963",
|
|
228
228
|
"artifactPath": "package.json",
|
|
229
|
-
"expectedSha256": "
|
|
229
|
+
"expectedSha256": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963",
|
|
230
230
|
"byteForByte": true
|
|
231
231
|
},
|
|
232
232
|
{
|
|
233
233
|
"name": "kfd-release-anchor",
|
|
234
234
|
"sourcePath": "kfd.release.json",
|
|
235
|
-
"sourceSha256": "
|
|
235
|
+
"sourceSha256": "d12c4c4c3bb9cf750b14ef5f72aae7aa7f44ca5197e55739251b587fc3a8df8e",
|
|
236
236
|
"artifactPath": "kfd.release.json",
|
|
237
|
-
"expectedSha256": "
|
|
237
|
+
"expectedSha256": "d12c4c4c3bb9cf750b14ef5f72aae7aa7f44ca5197e55739251b587fc3a8df8e",
|
|
238
238
|
"byteForByte": true
|
|
239
239
|
},
|
|
240
240
|
{
|
|
241
241
|
"name": "kfd-2-public-release-trust-claim",
|
|
242
242
|
"sourcePath": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
243
|
-
"sourceSha256": "
|
|
243
|
+
"sourceSha256": "46de9b13ea95c08de46c8653eb28edeb686f08e2e9374f2256d8e21221522861",
|
|
244
244
|
"artifactPath": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
245
|
-
"expectedSha256": "
|
|
245
|
+
"expectedSha256": "46de9b13ea95c08de46c8653eb28edeb686f08e2e9374f2256d8e21221522861",
|
|
246
246
|
"byteForByte": true
|
|
247
247
|
}
|
|
248
248
|
]
|
|
@@ -5,12 +5,12 @@
|
|
|
5
5
|
"sourceBindings": [
|
|
6
6
|
{
|
|
7
7
|
"path": "package.json",
|
|
8
|
-
"sha256": "
|
|
8
|
+
"sha256": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963",
|
|
9
9
|
"id": "package-version-and-exports"
|
|
10
10
|
},
|
|
11
11
|
{
|
|
12
12
|
"path": "kfd.release.json",
|
|
13
|
-
"sha256": "
|
|
13
|
+
"sha256": "d12c4c4c3bb9cf750b14ef5f72aae7aa7f44ca5197e55739251b587fc3a8df8e",
|
|
14
14
|
"id": "anchored-release-version"
|
|
15
15
|
},
|
|
16
16
|
{
|
|
@@ -25,29 +25,34 @@
|
|
|
25
25
|
},
|
|
26
26
|
{
|
|
27
27
|
"path": "release-impact.json",
|
|
28
|
-
"sha256": "
|
|
28
|
+
"sha256": "41cf5821661af64f38dd782d5f9f5f9a857a01134afa1c06b3da5ceffcc817ed",
|
|
29
29
|
"id": "release-impact-ledger"
|
|
30
30
|
},
|
|
31
31
|
{
|
|
32
32
|
"path": "buildchain.toml",
|
|
33
33
|
"sha256": "0dc1179d59b634df364871ea18a66251781321c80a6f7bcb9e3fcf5a48ef738a",
|
|
34
34
|
"id": "buildchain-release-contract"
|
|
35
|
+
},
|
|
36
|
+
{
|
|
37
|
+
"path": "buildchain.contract-lock.json",
|
|
38
|
+
"sha256": "9ee8b4d7e8544ffceaf067d29582f8d6b67c4a133b5a0e0d7798b3e467dcd628",
|
|
39
|
+
"id": "buildchain-runtime-contract-lock"
|
|
35
40
|
}
|
|
36
41
|
],
|
|
37
42
|
"machineEvidence": [
|
|
38
43
|
{
|
|
39
44
|
"path": "scripts/check.mjs",
|
|
40
|
-
"sha256": "
|
|
45
|
+
"sha256": "ffccf0a401a75f49e85e7bfdb22e4d7d32a5c81e07e386a9c2e627872b05cf8a",
|
|
41
46
|
"id": "self-verification-command"
|
|
42
47
|
},
|
|
43
48
|
{
|
|
44
49
|
"path": ".github/workflows/build.yml",
|
|
45
|
-
"sha256": "
|
|
50
|
+
"sha256": "264cd15db6f872c72fc58bcd476d1a3a476ec54b520b05268e213f5b59692f5b",
|
|
46
51
|
"id": "buildchain-build-workflow"
|
|
47
52
|
},
|
|
48
53
|
{
|
|
49
54
|
"path": ".github/workflows/buildchain-ref-promotion.yml",
|
|
50
|
-
"sha256": "
|
|
55
|
+
"sha256": "754a44cedfc174f35dcf54414c04b636bbc0a85e2272f5de8e899a70ee05d7bd",
|
|
51
56
|
"id": "buildchain-promotion-workflow"
|
|
52
57
|
},
|
|
53
58
|
{
|
|
@@ -67,15 +72,16 @@
|
|
|
67
72
|
}
|
|
68
73
|
],
|
|
69
74
|
"hashes": {
|
|
70
|
-
"package-version-and-exports": "
|
|
71
|
-
"anchored-release-version": "
|
|
75
|
+
"package-version-and-exports": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963",
|
|
76
|
+
"anchored-release-version": "d12c4c4c3bb9cf750b14ef5f72aae7aa7f44ca5197e55739251b587fc3a8df8e",
|
|
72
77
|
"decision-registry": "15f58f95ab1d42972206399b2e2b2e9268ab20fcdb599098e2822097ee84a8db",
|
|
73
78
|
"standards-metadata": "7cd61143eabec5b83c5ba37312d791935f2321d246f61bec790c4a6d5d4cf839",
|
|
74
|
-
"release-impact-ledger": "
|
|
79
|
+
"release-impact-ledger": "41cf5821661af64f38dd782d5f9f5f9a857a01134afa1c06b3da5ceffcc817ed",
|
|
75
80
|
"buildchain-release-contract": "0dc1179d59b634df364871ea18a66251781321c80a6f7bcb9e3fcf5a48ef738a",
|
|
76
|
-
"
|
|
77
|
-
"
|
|
78
|
-
"buildchain-
|
|
81
|
+
"buildchain-runtime-contract-lock": "9ee8b4d7e8544ffceaf067d29582f8d6b67c4a133b5a0e0d7798b3e467dcd628",
|
|
82
|
+
"self-verification-command": "ffccf0a401a75f49e85e7bfdb22e4d7d32a5c81e07e386a9c2e627872b05cf8a",
|
|
83
|
+
"buildchain-build-workflow": "264cd15db6f872c72fc58bcd476d1a3a476ec54b520b05268e213f5b59692f5b",
|
|
84
|
+
"buildchain-promotion-workflow": "754a44cedfc174f35dcf54414c04b636bbc0a85e2272f5de8e899a70ee05d7bd",
|
|
79
85
|
"kfd-2-trust-taxonomy-schema": "a663d301a663cadb8567e3010361f5a630b76b6518ed7603dfd58cbd4e64a658",
|
|
80
86
|
"kfd-2-release-claims-schema": "0f52c4a9949f62163a0fbe14fefc2f2f93f548ae18b6b5c07eb87aedca4c0be0",
|
|
81
87
|
"kfd-2-release-trust-passport-schema": "df7f828605f680f3ff52fe3468cbf8f5e20151fac0d5c31cd9a0de9765efecc1"
|
|
@@ -83,15 +89,15 @@
|
|
|
83
89
|
"artifacts": [
|
|
84
90
|
{
|
|
85
91
|
"name": "@kungfu-tech/kfd",
|
|
86
|
-
"version": "1.0.0-alpha.
|
|
92
|
+
"version": "1.0.0-alpha.18",
|
|
87
93
|
"path": "package.json",
|
|
88
|
-
"sha256": "
|
|
94
|
+
"sha256": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963"
|
|
89
95
|
},
|
|
90
96
|
{
|
|
91
97
|
"name": "kfd-release-anchor",
|
|
92
|
-
"version": "1.0.0-alpha.
|
|
98
|
+
"version": "1.0.0-alpha.18",
|
|
93
99
|
"path": "kfd.release.json",
|
|
94
|
-
"sha256": "
|
|
100
|
+
"sha256": "d12c4c4c3bb9cf750b14ef5f72aae7aa7f44ca5197e55739251b587fc3a8df8e"
|
|
95
101
|
}
|
|
96
102
|
],
|
|
97
103
|
"verification": {
|
|
@@ -337,29 +337,34 @@
|
|
|
337
337
|
{
|
|
338
338
|
"id": "metadata:release-impact",
|
|
339
339
|
"sourcePath": "release-impact.json",
|
|
340
|
-
"sha256": "
|
|
340
|
+
"sha256": "41cf5821661af64f38dd782d5f9f5f9a857a01134afa1c06b3da5ceffcc817ed"
|
|
341
341
|
},
|
|
342
342
|
{
|
|
343
343
|
"id": "metadata:release-anchor",
|
|
344
344
|
"sourcePath": "kfd.release.json",
|
|
345
|
-
"sha256": "
|
|
345
|
+
"sha256": "d12c4c4c3bb9cf750b14ef5f72aae7aa7f44ca5197e55739251b587fc3a8df8e"
|
|
346
|
+
},
|
|
347
|
+
{
|
|
348
|
+
"id": "metadata:buildchain-contract-lock",
|
|
349
|
+
"sourcePath": "buildchain.contract-lock.json",
|
|
350
|
+
"sha256": "9ee8b4d7e8544ffceaf067d29582f8d6b67c4a133b5a0e0d7798b3e467dcd628"
|
|
346
351
|
},
|
|
347
352
|
{
|
|
348
353
|
"id": "metadata:kfd-2-public-release-trust-claim",
|
|
349
354
|
"sourcePath": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
350
|
-
"sha256": "
|
|
355
|
+
"sha256": "46de9b13ea95c08de46c8653eb28edeb686f08e2e9374f2256d8e21221522861"
|
|
351
356
|
}
|
|
352
357
|
],
|
|
353
358
|
"packageExports": [
|
|
354
359
|
{
|
|
355
360
|
"id": "export:package-json",
|
|
356
361
|
"sourcePath": "package.json#exports",
|
|
357
|
-
"sha256": "
|
|
362
|
+
"sha256": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963"
|
|
358
363
|
},
|
|
359
364
|
{
|
|
360
365
|
"id": "export:npm-files",
|
|
361
366
|
"sourcePath": "package.json#files",
|
|
362
|
-
"sha256": "
|
|
367
|
+
"sha256": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963"
|
|
363
368
|
}
|
|
364
369
|
],
|
|
365
370
|
"siteConsumptionContracts": [
|
|
@@ -403,17 +408,17 @@
|
|
|
403
408
|
},
|
|
404
409
|
{
|
|
405
410
|
"path": "package.json#exports",
|
|
406
|
-
"sha256": "
|
|
411
|
+
"sha256": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963",
|
|
407
412
|
"description": "Consume the shipped npm package surfaces."
|
|
408
413
|
},
|
|
409
414
|
{
|
|
410
415
|
"path": "kfd.release.json",
|
|
411
|
-
"sha256": "
|
|
416
|
+
"sha256": "d12c4c4c3bb9cf750b14ef5f72aae7aa7f44ca5197e55739251b587fc3a8df8e",
|
|
412
417
|
"description": "Inspect the explicit KFD package version anchor for the current Buildchain release line."
|
|
413
418
|
},
|
|
414
419
|
{
|
|
415
420
|
"path": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
416
|
-
"sha256": "
|
|
421
|
+
"sha256": "46de9b13ea95c08de46c8653eb28edeb686f08e2e9374f2256d8e21221522861",
|
|
417
422
|
"description": "Inspect the explicit public KFD-2 claim passed into Buildchain release passport generation."
|
|
418
423
|
},
|
|
419
424
|
{
|
|
@@ -450,12 +455,12 @@
|
|
|
450
455
|
},
|
|
451
456
|
{
|
|
452
457
|
"path": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
453
|
-
"sha256": "
|
|
458
|
+
"sha256": "46de9b13ea95c08de46c8653eb28edeb686f08e2e9374f2256d8e21221522861",
|
|
454
459
|
"description": "KFD-2 public release trust claim"
|
|
455
460
|
},
|
|
456
461
|
{
|
|
457
462
|
"path": "package.json",
|
|
458
|
-
"sha256": "
|
|
463
|
+
"sha256": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963",
|
|
459
464
|
"description": "Package export map"
|
|
460
465
|
},
|
|
461
466
|
{
|
|
@@ -477,7 +482,7 @@
|
|
|
477
482
|
},
|
|
478
483
|
{
|
|
479
484
|
"path": "scripts/check.mjs",
|
|
480
|
-
"sha256": "
|
|
485
|
+
"sha256": "ffccf0a401a75f49e85e7bfdb22e4d7d32a5c81e07e386a9c2e627872b05cf8a",
|
|
481
486
|
"description": "Repository self-verification gate"
|
|
482
487
|
},
|
|
483
488
|
{
|
|
@@ -504,12 +509,12 @@
|
|
|
504
509
|
},
|
|
505
510
|
{
|
|
506
511
|
"path": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
507
|
-
"sha256": "
|
|
512
|
+
"sha256": "46de9b13ea95c08de46c8653eb28edeb686f08e2e9374f2256d8e21221522861",
|
|
508
513
|
"description": "Agent release trust claim path"
|
|
509
514
|
},
|
|
510
515
|
{
|
|
511
516
|
"path": "package.json",
|
|
512
|
-
"sha256": "
|
|
517
|
+
"sha256": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963",
|
|
513
518
|
"description": "Package consumption path"
|
|
514
519
|
}
|
|
515
520
|
],
|
|
@@ -819,29 +819,34 @@
|
|
|
819
819
|
{
|
|
820
820
|
"id": "metadata:release-impact",
|
|
821
821
|
"sourcePath": "release-impact.json",
|
|
822
|
-
"sha256": "
|
|
822
|
+
"sha256": "41cf5821661af64f38dd782d5f9f5f9a857a01134afa1c06b3da5ceffcc817ed"
|
|
823
823
|
},
|
|
824
824
|
{
|
|
825
825
|
"id": "metadata:release-anchor",
|
|
826
826
|
"sourcePath": "kfd.release.json",
|
|
827
|
-
"sha256": "
|
|
827
|
+
"sha256": "d12c4c4c3bb9cf750b14ef5f72aae7aa7f44ca5197e55739251b587fc3a8df8e"
|
|
828
|
+
},
|
|
829
|
+
{
|
|
830
|
+
"id": "metadata:buildchain-contract-lock",
|
|
831
|
+
"sourcePath": "buildchain.contract-lock.json",
|
|
832
|
+
"sha256": "9ee8b4d7e8544ffceaf067d29582f8d6b67c4a133b5a0e0d7798b3e467dcd628"
|
|
828
833
|
},
|
|
829
834
|
{
|
|
830
835
|
"id": "metadata:kfd-2-public-release-trust-claim",
|
|
831
836
|
"sourcePath": ".buildchain/kfd-2/public-release-trust.claim.json",
|
|
832
|
-
"sha256": "
|
|
837
|
+
"sha256": "46de9b13ea95c08de46c8653eb28edeb686f08e2e9374f2256d8e21221522861"
|
|
833
838
|
}
|
|
834
839
|
],
|
|
835
840
|
"packageExports": [
|
|
836
841
|
{
|
|
837
842
|
"id": "export:package-json",
|
|
838
843
|
"sourcePath": "package.json#exports",
|
|
839
|
-
"sha256": "
|
|
844
|
+
"sha256": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963"
|
|
840
845
|
},
|
|
841
846
|
{
|
|
842
847
|
"id": "export:npm-files",
|
|
843
848
|
"sourcePath": "package.json#files",
|
|
844
|
-
"sha256": "
|
|
849
|
+
"sha256": "356c5da4cf6c3bcbd0369d19e12570c9208c351dbd4728ec6795bae98b38b963"
|
|
845
850
|
}
|
|
846
851
|
],
|
|
847
852
|
"siteConsumptionContracts": [
|
|
@@ -0,0 +1,71 @@
|
|
|
1
|
+
{
|
|
2
|
+
"schemaVersion": 1,
|
|
3
|
+
"contract": "kungfu-buildchain-contract-lock",
|
|
4
|
+
"buildchain": {
|
|
5
|
+
"ref": "v2",
|
|
6
|
+
"resolvedSha": "93a42bdfbf60f32fc24e5cc6640f5352eec97224",
|
|
7
|
+
"contract": "kungfu-buildchain-runtime-contract-world",
|
|
8
|
+
"contractDigest": "sha256:7b2fed2dacdf37234ca03e656904611b9c3dd48a4f229be387c7c1393f57fc5b",
|
|
9
|
+
"compatibilityDigest": "sha256:36421b592a782decbfe31a7d8d42d70ce1100a56a2c4f4a0ccc21f0617dc72bf",
|
|
10
|
+
"majorLine": "v2",
|
|
11
|
+
"compatibilityPolicy": "major-compatible",
|
|
12
|
+
"acceptedAt": "2026-07-07T09:29:33.317Z",
|
|
13
|
+
"surfaces": [
|
|
14
|
+
{
|
|
15
|
+
"id": "reusable-build",
|
|
16
|
+
"kind": "workflow",
|
|
17
|
+
"breakingDigest": "sha256:6303aa2c2cb8c2cef4301ceea95cc3c426c2aa81d98714aa9bdf2471d63faee1"
|
|
18
|
+
},
|
|
19
|
+
{
|
|
20
|
+
"id": "release-candidate-promote",
|
|
21
|
+
"kind": "workflow",
|
|
22
|
+
"breakingDigest": "sha256:403d2fcdb0c5eabe749e89102defad69745f70a1556707bec7831fcc2e9fa8f8"
|
|
23
|
+
},
|
|
24
|
+
{
|
|
25
|
+
"id": "promote-buildchain-ref-action",
|
|
26
|
+
"kind": "action",
|
|
27
|
+
"breakingDigest": "sha256:347b65aecd38bc671d8f697eabd15254f905b6f745389d7b26d7595a904a720c"
|
|
28
|
+
},
|
|
29
|
+
{
|
|
30
|
+
"id": "report-buildchain-issue-action",
|
|
31
|
+
"kind": "action",
|
|
32
|
+
"breakingDigest": "sha256:575a2cb02cdb2e61bb2e84d5bbaaf64b430aa5d7936645660b592de4549d81b0"
|
|
33
|
+
},
|
|
34
|
+
{
|
|
35
|
+
"id": "release-passport-schema",
|
|
36
|
+
"kind": "schema",
|
|
37
|
+
"breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad"
|
|
38
|
+
},
|
|
39
|
+
{
|
|
40
|
+
"id": "kfd-1-release-gate",
|
|
41
|
+
"kind": "schema",
|
|
42
|
+
"breakingDigest": "sha256:f46c1f67b94957ad956cf70db59a73fd5690bd67c91edf9c2d0eb8f3d1e3cf8d"
|
|
43
|
+
},
|
|
44
|
+
{
|
|
45
|
+
"id": "kfd-2-release-trust-passport-audit",
|
|
46
|
+
"kind": "schema",
|
|
47
|
+
"breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16"
|
|
48
|
+
},
|
|
49
|
+
{
|
|
50
|
+
"id": "kfd-3-collaboration-interface-release-gate",
|
|
51
|
+
"kind": "schema",
|
|
52
|
+
"breakingDigest": "sha256:33654f3444c893754aacc42dde3051f0a371bd17c6ef7c657c579a07159cd7c1"
|
|
53
|
+
},
|
|
54
|
+
{
|
|
55
|
+
"id": "buildchain-cli",
|
|
56
|
+
"kind": "cli",
|
|
57
|
+
"breakingDigest": "sha256:097db3e67509bedda8c6548bf1edfbfcf57f7b5510520b6a7b7e078d7ec087c8"
|
|
58
|
+
},
|
|
59
|
+
{
|
|
60
|
+
"id": "agent-manual-registry",
|
|
61
|
+
"kind": "site-contract",
|
|
62
|
+
"breakingDigest": "sha256:7d0d2819e3a3e72989d9c57b5efe9d0bc0a79bc0f2c82a0c7b9d6c5a211a91f2"
|
|
63
|
+
},
|
|
64
|
+
{
|
|
65
|
+
"id": "node-api-registry",
|
|
66
|
+
"kind": "site-contract",
|
|
67
|
+
"breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945"
|
|
68
|
+
}
|
|
69
|
+
]
|
|
70
|
+
}
|
|
71
|
+
}
|
package/kfd.release.json
CHANGED
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@kungfu-tech/kfd",
|
|
3
|
-
"version": "1.0.0-alpha.
|
|
3
|
+
"version": "1.0.0-alpha.18",
|
|
4
4
|
"description": "Kung Fu Decisions (KFD): the kungfu-systems organization-wide decision registry, as a consumable artifact",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"files": [
|
|
@@ -13,6 +13,7 @@
|
|
|
13
13
|
"schemas",
|
|
14
14
|
"site",
|
|
15
15
|
"scripts",
|
|
16
|
+
"buildchain.contract-lock.json",
|
|
16
17
|
"buildchain.release-propagation.json",
|
|
17
18
|
"release-impact.json",
|
|
18
19
|
".buildchain/kfd-1/contract-world.witness.json",
|
|
@@ -28,6 +29,7 @@
|
|
|
28
29
|
"./standards.json": "./standards.json",
|
|
29
30
|
"./kfd.release.json": "./kfd.release.json",
|
|
30
31
|
"./site/kfd-site.json": "./site/kfd-site.json",
|
|
32
|
+
"./buildchain.contract-lock.json": "./buildchain.contract-lock.json",
|
|
31
33
|
"./buildchain.release-propagation.json": "./buildchain.release-propagation.json",
|
|
32
34
|
"./release-impact.json": "./release-impact.json",
|
|
33
35
|
"./scripts/*.mjs": "./scripts/*.mjs",
|
package/release-impact.json
CHANGED
|
@@ -34,7 +34,13 @@
|
|
|
34
34
|
"id": "kfd-package-structure",
|
|
35
35
|
"impact": "minor",
|
|
36
36
|
"class": "additive",
|
|
37
|
-
"rationale": "The npm package now publishes the KFD-2 trust taxonomy, KFD-2 schemas, KFD-2 documentation, KFD-3 self collaboration-interface witnesses, TRADEMARKS.md, public fact-source metadata, agent quickstart/self-proof documentation, and repository verification scripts through existing schemas/, docs/, standards.json, site/, scripts/, .buildchain/, and subpath exports while preserving existing README.md, decisions/, registry.json, and site/ paths."
|
|
37
|
+
"rationale": "The npm package now publishes the KFD-2 trust taxonomy, KFD-2 schemas, KFD-2 documentation, KFD-3 self collaboration-interface witnesses, TRADEMARKS.md, public fact-source metadata, agent quickstart/self-proof documentation, Buildchain contract lock metadata, and repository verification scripts through existing schemas/, docs/, standards.json, site/, scripts/, .buildchain/, and subpath exports while preserving existing README.md, decisions/, registry.json, and site/ paths."
|
|
38
|
+
},
|
|
39
|
+
{
|
|
40
|
+
"id": "kfd-buildchain-contract-lock",
|
|
41
|
+
"impact": "minor",
|
|
42
|
+
"class": "release-governance",
|
|
43
|
+
"rationale": "KFD now uses Buildchain v2 floating workflow refs with a consumer-owned buildchain.contract-lock.json, so Buildchain runtime contract drift is checked before heavy build or promotion work while retaining floating-ref upgrade flow."
|
|
38
44
|
},
|
|
39
45
|
{
|
|
40
46
|
"id": "kfd-site-homepage-bundle",
|
|
@@ -67,5 +73,5 @@
|
|
|
67
73
|
"rationale": "The KFD to site-libkungfu-dev propagation graph now targets the downstream site's actual main branch and documents the exact KFD package surfaces consumed by kfd.libkungfu.dev, without changing the release propagation graph contract."
|
|
68
74
|
}
|
|
69
75
|
],
|
|
70
|
-
"summary": "KFD v1.0 production promotion is minor-impact because it additively exposes KFD-2 trust taxonomy and release trust metadata, KFD-1/2/3 interface version metadata, KFD-3 self-verification witnesses, document integrity bindings, a README-backed homepage bundle/display plan, and a corrected site release-propagation target for Buildchain and other consumers; existing registry, decision text, site bundle, and propagation graph contracts remain compatible."
|
|
76
|
+
"summary": "KFD v1.0 production promotion is minor-impact because it additively exposes KFD-2 trust taxonomy and release trust metadata, KFD-1/2/3 interface version metadata, KFD-3 self-verification witnesses, Buildchain contract lock metadata, document integrity bindings, a README-backed homepage bundle/display plan, and a corrected site release-propagation target for Buildchain and other consumers; existing registry, decision text, site bundle, and propagation graph contracts remain compatible."
|
|
71
77
|
}
|
package/scripts/check.mjs
CHANGED
|
@@ -123,12 +123,12 @@ for (const requiredPath of ["decisions/kfd-N.md", "registry.json", "standards.js
|
|
|
123
123
|
fail(`site bundle decision metadata publicFactSource.canonicalPaths must include ${requiredPath}`);
|
|
124
124
|
}
|
|
125
125
|
}
|
|
126
|
-
for (const requiredFile of ["README.md", "TRADEMARKS.md", "decisions", "registry.json", "standards.json", "kfd.release.json", "schemas", "site", "buildchain.release-propagation.json", "release-impact.json", ".buildchain/kfd-1/contract-world.witness.json", ".buildchain/kfd-2", ".buildchain/kfd-3", "docs"]) {
|
|
126
|
+
for (const requiredFile of ["README.md", "TRADEMARKS.md", "decisions", "registry.json", "standards.json", "kfd.release.json", "schemas", "site", "buildchain.contract-lock.json", "buildchain.release-propagation.json", "release-impact.json", ".buildchain/kfd-1/contract-world.witness.json", ".buildchain/kfd-2", ".buildchain/kfd-3", "docs"]) {
|
|
127
127
|
if (!Array.isArray(packageJson.files) || !packageJson.files.includes(requiredFile)) {
|
|
128
128
|
fail(`package.json files[] must include ${requiredFile}`);
|
|
129
129
|
}
|
|
130
130
|
}
|
|
131
|
-
for (const requiredExport of ["./TRADEMARKS.md", "./registry.json", "./standards.json", "./kfd.release.json", "./site/kfd-site.json", "./buildchain.release-propagation.json", "./release-impact.json", "./buildchain/kfd-1/contract-world.witness.json", "./buildchain/kfd-2/public-release-trust.claim.json", "./buildchain/kfd-3/collaboration-interface.json", "./buildchain/kfd-3/collaboration-interface.prebuild.json", "./buildchain/kfd-3/collaboration-interface.artifact.json", "./schemas/*.json", "./schemas/*/*.json"]) {
|
|
131
|
+
for (const requiredExport of ["./TRADEMARKS.md", "./registry.json", "./standards.json", "./kfd.release.json", "./site/kfd-site.json", "./buildchain.contract-lock.json", "./buildchain.release-propagation.json", "./release-impact.json", "./buildchain/kfd-1/contract-world.witness.json", "./buildchain/kfd-2/public-release-trust.claim.json", "./buildchain/kfd-3/collaboration-interface.json", "./buildchain/kfd-3/collaboration-interface.prebuild.json", "./buildchain/kfd-3/collaboration-interface.artifact.json", "./schemas/*.json", "./schemas/*/*.json"]) {
|
|
132
132
|
if (!packageJson.exports || !packageJson.exports[requiredExport]) {
|
|
133
133
|
fail(`package.json exports must include ${requiredExport}`);
|
|
134
134
|
}
|
|
@@ -22,6 +22,7 @@ const sourceBindings = [
|
|
|
22
22
|
pointer("standards.json", { id: "standards-metadata" }),
|
|
23
23
|
pointer("release-impact.json", { id: "release-impact-ledger" }),
|
|
24
24
|
pointer("buildchain.toml", { id: "buildchain-release-contract" }),
|
|
25
|
+
pointer("buildchain.contract-lock.json", { id: "buildchain-runtime-contract-lock" }),
|
|
25
26
|
];
|
|
26
27
|
|
|
27
28
|
const machineEvidence = [
|
|
@@ -62,6 +62,7 @@ const groupedSurfaces = {
|
|
|
62
62
|
{ id: "metadata:standards", sourcePath: "standards.json", sha256: sha256File("standards.json") },
|
|
63
63
|
{ id: "metadata:release-impact", sourcePath: "release-impact.json", sha256: sha256File("release-impact.json") },
|
|
64
64
|
{ id: "metadata:release-anchor", sourcePath: "kfd.release.json", sha256: sha256File("kfd.release.json") },
|
|
65
|
+
{ id: "metadata:buildchain-contract-lock", sourcePath: "buildchain.contract-lock.json", sha256: sha256File("buildchain.contract-lock.json") },
|
|
65
66
|
{ id: "metadata:kfd-2-public-release-trust-claim", sourcePath: ".buildchain/kfd-2/public-release-trust.claim.json", sha256: sha256File(".buildchain/kfd-2/public-release-trust.claim.json") },
|
|
66
67
|
],
|
|
67
68
|
packageExports: [
|