@xemahq/xema 0.55.0 → 0.57.0

package/dist/edition/verify-image-evidence.bundle.mjs

@@ -69773,8 +69773,11 @@ function assessTrustPolicyArming(policy, schemas2, channel, { consumesCatalogue
       stages.push(["edition-catalogue", schemas2.EDITION_CATALOGUE_PREDICATE_TYPE]);
     }
   }
-  const onChannel = policy.policies.filter((candidate) => candidate.channel === channel);
-  const authorized = stages.filter(([, predicateType]) => onChannel.some((candidate) => candidate.predicateTypes.includes(predicateType)));
+  const stagePredicateTypes = stages.map(([, predicateType]) => predicateType);
+  const stageRows = policy.policies.filter(
+    (candidate) => candidate.channel === channel && candidate.predicateTypes.some((predicateType) => stagePredicateTypes.includes(predicateType))
+  );
+  const authorized = stages.filter(([, predicateType]) => stageRows.some((candidate) => candidate.predicateTypes.includes(predicateType)));
   if (policy.policies.length === 0) {
     unmet.push(
       'policies[] is empty — no signer identity is authorized, so verifySigstoreEvidenceDescriptor throws "offline trust policy authorizes no signer" for every predicate before reading any bundle.'
@@ -69798,8 +69801,8 @@ function assessTrustPolicyArming(policy, schemas2, channel, { consumesCatalogue
   }
   const armed = unmet.length === 0;
   const bootstrap = policy.policies.length === 0 && policy.trustedCosignBinaryDigests.length === 0 && policy.trustedGitBinaryDigests.length === 0;
-  const anotherChannelOnly = onChannel.length === 0 && policy.policies.length > 0;
-  const state = armed ? TrustPolicyArmingState.ARMED : bootstrap || anotherChannelOnly ? TrustPolicyArmingState.UNARMED : TrustPolicyArmingState.PARTIAL;
+  const noStageRow = stageRows.length === 0 && policy.policies.length > 0;
+  const state = armed ? TrustPolicyArmingState.ARMED : bootstrap || noStageRow ? TrustPolicyArmingState.UNARMED : TrustPolicyArmingState.PARTIAL;
   return { state, armed, unmet };
 }
 

package/dist/edition/verify-image-evidence.bundle.provenance.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "artifactSha256": "sha256:db80b90f2ec9229ade463711e69cb2bf271dcd40b14208166c2d58623dc51f86",
+  "artifactSha256": "sha256:da9d5bed0e7286a885aa8475ed43c7d008c6e571241607a3d42ca8abdab46dbf",
   "esbuild": {
     "version": "0.28.2"
   },
@@ -2599,355 +2599,355 @@
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/adapter-host-versions.mjs",
       "sha256": "sha256:1b7ebd3592f4da1225fba74aaba912e7d85fbceeb1626f7dcdac83491cbb4d69"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/authorization-base.mjs",
       "sha256": "sha256:815c9be9f71731dcc805d85da2d733350ddb6fbdf32b6f1cf34f228ce6381c7c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/build-ledger.mjs",
       "sha256": "sha256:05202cbdd606aee086c8e9c62d28be68c429653a8b1d73a289ed0fe4ff14da85"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/canonical-evidence-json.mjs",
       "sha256": "sha256:3b32f6786c9fb1c0deadf2f687077356a503b0db766392d2e0254aa1ab78feec"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/canonical-repository-url.mjs",
       "sha256": "sha256:f36e4f7cbe7849789422ec2f0ebce2d62f7dc3684afecc3ac51a32560e72d8a1"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/collected-refusals.mjs",
       "sha256": "sha256:ae21c069dbff0afa9aca18b7b909d5de405df2277f6431bc3fda20528115bcd1"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/connector-source-authority.mjs",
       "sha256": "sha256:ea94475f4324737673accd7de1303c44db1cbc4dac61a865a06cd83abe310164"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/cosign-certificate-constraints.mjs",
       "sha256": "sha256:bb9ba7038f1de9211c9cbcf99f02255f3623ce72d86c71fdcfa146a4e0edbd9a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/develop-graph.mjs",
       "sha256": "sha256:decebd437c9f4c8bdd6bee3baabfdc340fd7b9d175aca7e702cb330e912708d5"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/dispatched-runtime-components.mjs",
       "sha256": "sha256:9712823d183a60108cd002b2d36a9e5c0867b9d576dd02825264a18f7b8ece69"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/distribution-paths.mjs",
       "sha256": "sha256:d78a5c8405bc6c25d36fcec61b0030e1fdacac7d528e698adb96f906f4b70279"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-artifact.mjs",
       "sha256": "sha256:3b588c9c50f64f3e7a45b954fe7b5fc67e11fc8ce3e7b323727af4541d29ae7f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-channel.mjs",
       "sha256": "sha256:3c0c1564dc50be133cad500452d953353aa5beb703142c05a17bbce8175ba9f3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-chart-set.mjs",
       "sha256": "sha256:f9f16b58279c8c2619a39c5cc92bdbc334543d1a324304cd5d3b120d66dc8f3a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-config.mjs",
       "sha256": "sha256:58af55e9a2b36ca23485246d44a295260afa240bcdc0649c697563b36085ddaa"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-constants.mjs",
       "sha256": "sha256:217fa5b1fa25cb50ee4e1b46ea5e086061ff1f44e00198e1dc28f52376f236a0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-contract-parse.mjs",
       "sha256": "sha256:e2c6e66378f878499f44b62d060ae50197f40757b2044d9ce05290e367dfe21d"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-contract.json",
       "sha256": "sha256:566a17301ad15b94a06fef12b26bbe39e292ed2bf30a2659a9bf07ce5ce487e0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-kind.mjs",
       "sha256": "sha256:b4f3358ffa81bbafb8c37d158b9e01032a7358c38b9d6e5aca409091f989e47a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-protocol.mjs",
       "sha256": "sha256:f02ea6427e2fd7ceea2c3cb49f3fa6d85b982870e487082a7466f8037cd2bed9"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-publisher.mjs",
       "sha256": "sha256:8803b41067d81acbc35a8974426f606b5b8168b7a9c2581c16586a86f36db50f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-source-pins.mjs",
       "sha256": "sha256:b141474fff33b06734fb62cd2552752b991c8267bb1c9bccb22a81dd80e91c6c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/edition-workspace.mjs",
       "sha256": "sha256:892b360f9f80d2308b0b12f9b99658ae06173878d9b71cf5d6fc8bd717b3c86e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/evidence-checkout.mjs",
       "sha256": "sha256:31fb669769b31de4c6f2b2501bb96959548172ef166e7568edbbfed7f5079a11"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/evidence-grammars.mjs",
       "sha256": "sha256:4bea69437af5a36c139b5b41d0ecf2d1ddcf3f871e10c78e3d351f608eedca3b"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/evidence-trust-pin.mjs",
       "sha256": "sha256:eb46e4d6a79dfac5536b7a439ab9df7dd4b03af369bdcfa9fcdd522aa1aab8dd"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/first-party-source-ids.mjs",
       "sha256": "sha256:20cb1ad7cfb8c6e6686a6be5a51289da4bba76c20b58d9c1b5b6b3813a38dc1c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/fulcio-certificate-extensions.mjs",
       "sha256": "sha256:6f1f5a8ea110a489f7aff4bfb8e0b2d058919fe3e8ba4a1e5e8396fca24861b7"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/git-json.mjs",
       "sha256": "sha256:d0d25cda0c19007becabc9a2827c3dcf759b295cd0b41596eb4480c9549a1f21"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/git-source-auth.mjs",
       "sha256": "sha256:c1b32aa6f7d59798db58238d632cafeadbd4f07376396a31acdeb5f0ac56dcac"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/image-delivery-entitlement-descriptor.mjs",
       "sha256": "sha256:4726b66116f01bf2523fafe2b7a356591eca8fb5ca6bd8b154dd4821873e921b"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/image-evidence-replay-state.mjs",
       "sha256": "sha256:eba0cf1d38af0ab2f00c5099fa8bc2edc543136ce92f895544d4d284b3d6af0f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/image-evidence.mjs",
       "sha256": "sha256:c6a202f3fc8efe97f00c7e69532c656646bdc5c93365d68676046c3aabd33233"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/image-subject-identity.mjs",
       "sha256": "sha256:6a64e44f9865f68484540e3264a1d87040ae021dfa6ee4b79239e66805754ac1"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/kernel-capability-domain.mjs",
       "sha256": "sha256:3ecf887dd8d399e91a8285f6f115f6e418fb59bbf3f004539fe65ec667219356"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/kernel-contract-authority.mjs",
       "sha256": "sha256:9de2645dca22274cad9fa68d0364bf57e4de704e9d49a8bbadde0e322ae317df"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/kernel-contract-source-path-set.mjs",
       "sha256": "sha256:bc4756f217d80fd8f802932f47da71ab14e782873fa9fa977002a94e058d8a9e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/kernel-package.mjs",
       "sha256": "sha256:e97a9491991d8332a4feed14ac48fe393e44d12c63bdfec89fac8b5b4ea2a574"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/lib.mjs",
       "sha256": "sha256:a0695c1e1649da205f4e5d0e8d411079d6af4eb00c7d753bb2e9bf9a5ed1232e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/no-follow-file.mjs",
       "sha256": "sha256:c17bdf5e441f3c079aa06d4b48bbed05cad087855b9ad2a5e6dc43d5ee2b17c3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/operation-requirements.mjs",
       "sha256": "sha256:d3b6807953f162ab4204dcd1a0f752e0f9b447726fc17a12534d28abe8e570b0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/pin-source.mjs",
       "sha256": "sha256:32fa918729a83587b4d3bca6e5fe381f5a525397ebc49d52729ec1f8cf216c37"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/sigstore-bundle-media-type.mjs",
       "sha256": "sha256:e0aa5a3992f0385ddbbe69eb0307d642ac428ef516c8394816ac4fd52e0ac39c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/source-authority.mjs",
       "sha256": "sha256:9c351f60e8ea838f445f89c3709c60b7f13b021b78d6e40eaef91350a793f0ff"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/strict-json.mjs",
       "sha256": "sha256:f95778396df7f38b086f55d2ec4f3b6644a8aeff2b32282a62829145fb544562"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/string-order.mjs",
       "sha256": "sha256:b3210cd273e4b2e01fb8b1a91e28734cd211d4010c080d0ce95f5e5ff631cffb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/third-party-admission.mjs",
       "sha256": "sha256:7e32f631a8948e2b93a5cfa163390d52d2a8d9ade87a637c7fe1fc6351fe5974"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/third-party-certificate-extensions.mjs",
       "sha256": "sha256:3293267b09452199f605001d8c14070d1c822b77390caee4088e17b059b7b05d"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/third-party-source-pins.mjs",
       "sha256": "sha256:6f12feb9061bd4ea3e5aeab3f369c081ab58da335c0d281e21b250251e1c0dd9"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/trust-policy-arming.mjs",
-      "sha256": "sha256:6f6f192118407e71a744087caea988bcf3d33aca9803217bceb8134d7e2b9120"
+      "sha256": "sha256:f6ed96ee1d0b7698b1eea5066ba10abef1babeede8403a7c481bba53636cb1a5"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/trust-policy-image-ownership.mjs",
       "sha256": "sha256:be0c787c6a75124f0143fc0ce3b127a94e3bb7f6aa64e282c91dd84e566e550e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/trusted-executable.mjs",
       "sha256": "sha256:37d46cdbc999ddd55d4ea8aeed4850ddd1efde89ed7b532f5a2ddec87105d796"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/verifier-binding.mjs",
       "sha256": "sha256:80732658617f5255258c538eeb2383331ec8553b44b58d552b567845a7b916aa"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/verifier-files.mjs",
       "sha256": "sha256:cdd14a20a63f0f194a8abb55680a5a7e3ced1f09f8b210a90d349e655f6de0c0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/verifier-provenance.mjs",
       "sha256": "sha256:3e2fb8e07cf1f66b8ad6c7ac2555fe3af64ec7abeb07cecbaf1939a18c2b3663"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/verify-catalogue-evidence.mjs",
       "sha256": "sha256:156d0ee39210658ec489609629c5b9cddd3ce5b3938d8980dcf8282ae4be60bb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/verify-image-evidence.mjs",
       "sha256": "sha256:958360f7889985c48abb048852c5bbba349cd7353ce4b532c4511b4902380fac"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "edition/workspace-sections.mjs",
       "sha256": "sha256:1d2aff08bcd9e94b644c85c5b55c90c05b6b02bab662731fe3fcd53fcdf86e93"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.55.0",
+      "version": "0.57.0",
       "path": "scripts/build-evidence-verifier.mjs",
       "sha256": "sha256:5a688d20c47dc88aff37aa0c6cc02daf2c370a5bc610fef8446ce7be222d4c0b"
     },

package/edition/README.md

@@ -180,7 +180,13 @@ The edition library builds, validates and verifies evidence statements; it never
 
 ## Previous seal
 
-A write of `images.lock.json` (`resolve-images`, `xema edition develop resolve`) takes exactly one of `--previous-lock <lock> --previous-lock-sha256 <hex>` or `--first-seal`; the CLI refuses unless the lock's bytes hash to the digest, which the caller takes from the images.lock layer of the signed, published edition (the latest, under the per-edition concurrency group). The in-repo resolve and pin/unpin take the committed `images.lock.json` at the target path as the previous lock (first seal when absent). The the composed artifacts' generations carry forward from it.
+A write of `images.lock.json` (`resolve-images`, `xema edition develop resolve`) takes exactly one previous seal, whose composed artifacts' generations carry forward:
+
+- `--previous-seal-signer <certificate identity>` (develop resolve, vendor form): the CLI lists the edition's own repository (`<registry root>/develop-editions/xema-edition-<id>`), reads every snapshot tag, and takes the newest edition by its `org.opencontainers.image.created` annotation (inside the signed manifest). An edition with no signature was never published and is passed over; the newest signed one must verify, offline through the pinned cosign, for exactly that identity and the GitHub OIDC issuer, or the resolve is refused (it never steps back to an older edition). Its images.lock layer is fetched by digest. The run must be under the per-edition concurrency group, so the edition read is the one the previous run pushed.
+- `--previous-lock <lock> --previous-lock-sha256 <hex>`: the same layer, taken by the caller; the CLI refuses unless the bytes hash to the digest.
+- `--first-seal`: generation 1, only for a distribution that has never had an edition. The CLI never infers it: a 404 for the repository (a registry may hide a repository from a credential) and a repository with no signed edition (retention) are refused, naming `--first-seal`.
+
+The in-repo resolve and pin/unpin take the committed `images.lock.json` at the target path as the previous lock (first seal when absent).
 
 ## Kernel protocol and pins
 

package/edition/biome-content.mjs

@@ -291,8 +291,8 @@ export async function biomeSourceTreeIds({ schemas, lock, imageLock, locate, ven
 }
 
 /** Seal: the unsealed lock + the recomputed hashes -> the kernel's `sealDistributionLock`. */
-export async function sealLock({ schemas, unsealed, imageLock, locate, vendoredCommit, catalogue, catalogueDigest, storePublisherAnchorKeys, sourceFactsById, bundleSigners, contentCommits }) {
-  assertLockBundleSigners({ lock: unsealed, selection: bundleSigners, schemas });
+export async function sealLock({ schemas, unsealed, imageLock, locate, vendoredCommit, catalogue, catalogueDigest, storePublisherAnchorKeys, sourceFactsById, bundleSigners, contentCommits, gitSourcedBundle }) {
+  assertLockBundleSigners({ lock: unsealed, selection: bundleSigners, schemas, gitSourcedBundle });
   const hashes = await computeBiomeContentHashes({ schemas, lock: unsealed, imageLock, locate, vendoredCommit, catalogue, catalogueDigest, storePublisherAnchorKeys, sourceFactsById, contentCommits });
   admitDistributionLock(schemas, unsealed);
   return schemas.sealDistributionLock(unsealed, hashes);
@@ -302,9 +302,9 @@ export async function sealLock({ schemas, unsealed, imageLock, locate, vendoredC
  * Verify: recompute every biome's hash and REFUSE a mismatch, naming the biome.
  * The lock's own field is never trusted; a missing or extra biome is a mismatch.
  */
-export async function verifyBiomeContentHashes({ schemas, lock, imageLock, locate, vendoredCommit, catalogue, catalogueDigest, storePublisherAnchorKeys, bundleSigners, contentCommits }) {
+export async function verifyBiomeContentHashes({ schemas, lock, imageLock, locate, vendoredCommit, catalogue, catalogueDigest, storePublisherAnchorKeys, bundleSigners, contentCommits, gitSourcedBundle }) {
   const expected = await computeBiomeContentHashes({ schemas, lock, imageLock, locate, vendoredCommit, catalogue, catalogueDigest, storePublisherAnchorKeys, contentCommits });
-  assertLockBundleSigners({ lock, selection: bundleSigners, schemas });
+  assertLockBundleSigners({ lock, selection: bundleSigners, schemas, gitSourcedBundle });
   const mismatched = lock.biomes
     .filter((biome) => biome.biomeContentHash !== expected.get(biome.id))
     .map((biome) => `${biome.id} (lock ${String(biome.biomeContentHash)}, recomputed ${expected.get(biome.id)})`);

package/edition/candidate-edition.mjs

@@ -38,6 +38,7 @@ import {
   sourceCheckoutPlan,
 } from './checkout-indexed-source-repositories.mjs';
 import { assertDevelopEditionInvariants } from './develop-edition-invariants.mjs';
+import { carriedDevelopGitBundles } from './develop-git-bundles.mjs';
 import { buildSnapshotInputs } from './develop-snapshot-inputs.mjs';
 import { parseEditionDescriptor } from './edition-artifact.mjs';
 import { resetEditionWorkspaceConfig, editionWorkspaceConfig } from './edition-config.mjs';
@@ -55,7 +56,7 @@ import {
 import { materializeGitSource, externalSourceCacheDir } from './external-source-walk.mjs';
 import { withSourceGitEnv } from './git-source-auth.mjs';
 import { loadKernelDistributionSchemas, serializeJson, sha256Hex } from './lib.mjs';
-import { assertLockBundleSigners } from './locked-bundle-signer.mjs';
+import { GitSourcedBundle, assertLockBundleSigners } from './locked-bundle-signer.mjs';
 import { admitDistributionLock } from './operation-grant-admission.mjs';
 import {
   EDITIONS_ROOT_PIN_KEY,
@@ -581,8 +582,10 @@ async function resealStaged({ edition: pinned, pins, read, deployment }) {
   const id = pinned.id;
   const schemas = await loadKernelDistributionSchemas();
   const inputs = await buildSnapshotInputs({ id, pins, schemas });
-  const { lock, index } = await prepareDistributionWithIndex(id, { inputs });
-  assertLockBundleSigners({ lock, schemas });
+  // A git-sourced biome's OCI bundle is carried from the pinned edition for the same source commit, never re-fetched.
+  const pinnedLock = JSON.parse(pinned.bytes[EditionLockFile.Distribution].toString('utf8'));
+  const { lock, index } = await prepareDistributionWithIndex(id, { inputs: { ...inputs, developGitBundles: carriedDevelopGitBundles(pinnedLock) } });
+  assertLockBundleSigners({ lock, schemas, gitSourcedBundle: GitSourcedBundle.DevelopVerified });
   assertDevelopEditionInvariants({ id, lock, biomeIndex: inputs.biomeIndex, schemas });
   admitDistributionLock(schemas, lock);
   const authorizationLock = await composeAuthorizationBase(id, lock, index);
@@ -600,6 +603,7 @@ async function resealStaged({ edition: pinned, pins, read, deployment }) {
     locate: sourceTreeLocator(externalSourceTrees(lock)),
     vendoredCommit: (repo) => authority.vendoredSourceCommitForRepository(repo),
     contentCommits,
+    gitSourcedBundle: GitSourcedBundle.DevelopVerified,
   });
   const lockBytes = Buffer.from(serializeJson(sealed), 'utf8');
   const authorizationLockBytes = Buffer.from(serializeJson(authorizationLock), 'utf8');
@@ -684,6 +688,7 @@ export async function verifyCandidateContentHashes({ tripleDir, checkouts, candi
         locate: sourceTreeLocator(externalSourceTrees(lock)),
         vendoredCommit: (repo) => authority.vendoredSourceCommitForRepository(repo),
         ...(contentCommits === undefined ? {} : { contentCommits }),
+        gitSourcedBundle: GitSourcedBundle.DevelopVerified,
       });
     });
   } finally {

package/edition/customer-edition-verbs.mjs

@@ -34,6 +34,7 @@ import { canonicalJson, sha256Digest } from './image-evidence.mjs';
 import { adoptCatalogueKernel } from './kernel-package.mjs';
 import { loadKernelDistributionSchemas, serializeJson } from './lib.mjs';
 import { isSourcePinKey, sortedSnapshotPins, sourcePinKey } from './pin-source.mjs';
+import { PREVIOUS_SEAL_SIGNER_FLAG } from './previous-seal-registry.mjs';
 import { assertSealedImageLock } from './release-edition-artifact.mjs';
 import { assertSourceImagesCoverDefinition, parseSourceImages, resolveCustomerEdition } from './resolve-customer-edition.mjs';
 import { externalSourceTrees, imageRefForSubject, sourceTreeLocator } from './resolve-images.mjs';
@@ -191,12 +192,13 @@ const COMMANDS = Object.freeze({
   resolve: {
     positional: true,
     // --images-from: the everyday job's image build record (images-from-record.mjs) instead of the registry probe; vendor only.
-    // --previous-lock with --previous-lock-sha256 (the digest of the latest signed, published edition's images.lock layer, passed by the workflow under
-    // the per-edition concurrency group) or --first-seal: the previous seal whose composed artifacts carry their generation forward; vendor only.
-    values: ['--pins', '--out', '--registry', ENGINE_REPOSITORY_FLAG, ENGINE_SIGNER_FLAG, COSIGN_FLAG, IMAGES_FROM_FLAG, PREVIOUS_LOCK_FLAG, PREVIOUS_LOCK_SHA256_FLAG],
+    // The previous seal whose composed artifacts carry their generation forward, exactly one of: --previous-seal-signer <identity> (the CLI reads
+    // the latest edition that identity signed in this edition's repository; the workflow runs under the per-edition concurrency group),
+    // --previous-lock with --previous-lock-sha256 (that edition's images.lock layer, taken by the caller) or --first-seal; vendor only.
+    values: ['--pins', '--out', '--registry', ENGINE_REPOSITORY_FLAG, ENGINE_SIGNER_FLAG, COSIGN_FLAG, IMAGES_FROM_FLAG, PREVIOUS_LOCK_FLAG, PREVIOUS_LOCK_SHA256_FLAG, PREVIOUS_SEAL_SIGNER_FLAG],
     switches: ['--local', FIRST_SEAL_FLAG],
     required: ['--pins', '--out', '--registry', ENGINE_REPOSITORY_FLAG, ENGINE_SIGNER_FLAG, COSIGN_FLAG],
-    customer: { values: [DEFINITION_FLAG, ...CREDENTIAL_FLAGS, SOURCE_IMAGE_FLAG, COSIGN_FLAG, ENGINE_IMAGE_FLAG], required: ['--pins', '--out', '--registry', '--engine-image'], refused: [IMAGES_FROM_FLAG, PREVIOUS_LOCK_FLAG, PREVIOUS_LOCK_SHA256_FLAG, FIRST_SEAL_FLAG], cosign: true },
+    customer: { values: [DEFINITION_FLAG, ...CREDENTIAL_FLAGS, SOURCE_IMAGE_FLAG, COSIGN_FLAG, ENGINE_IMAGE_FLAG], required: ['--pins', '--out', '--registry', '--engine-image'], refused: [IMAGES_FROM_FLAG, PREVIOUS_LOCK_FLAG, PREVIOUS_LOCK_SHA256_FLAG, FIRST_SEAL_FLAG, PREVIOUS_SEAL_SIGNER_FLAG], cosign: true },
     // A vendor resolve finds its engine itself; the old flag is refused by name, never read as a customer flag.
     removedFromVendor: { [ENGINE_IMAGE_FLAG]: `use ${ENGINE_REPOSITORY_FLAG} and ${ENGINE_SIGNER_FLAG}` },
   },

package/edition/develop-edition-resolve.mjs

@@ -13,6 +13,7 @@ import { buildCatalogue } from './catalogue.mjs';
 import { resolveDevelopChartSet } from './develop-chart-set.mjs';
 import { assertDevelopEditionInvariants } from './develop-edition-invariants.mjs';
 import { resolveDevelopEngineImage } from './develop-engine-image.mjs';
+import { createDevelopGitBundleVerifier } from './develop-git-bundles.mjs';
 import { createDevelopImageProbe } from './develop-image-probe.mjs';
 import { BLOCKED, DevelopResolveCheck, RESOLVE_CHECK_DEPENDENCIES, createResolveReport } from './develop-resolve-report.mjs';
 import { assertFrozenCheckouts, buildSnapshotInputs } from './develop-snapshot-inputs.mjs';
@@ -23,7 +24,7 @@ import { dataRoot, kernelPackageDir } from './edition-workspace.mjs';
 import { resolveImagesFromRecord, sealImagesFromRecord } from './images-from-record.mjs';
 import { kernelPackageOfAuthority } from './kernel-package.mjs';
 import { loadKernelDistributionSchemas } from './lib.mjs';
-import { assertLockBundleSigners, isBundleSignerRefusal } from './locked-bundle-signer.mjs';
+import { GitSourcedBundle, assertLockBundleSigners, isBundleSignerRefusal } from './locked-bundle-signer.mjs';
 import { admitDistributionLock, ungrantedOptionalLinesOfRefusal } from './operation-grant-admission.mjs';
 import { deployPinKey } from './pin-source.mjs';
 import { admitResolvedLock, composeAuthorizationBase, prepareDistributionWithIndex } from './resolve-distribution.mjs';
@@ -58,17 +59,21 @@ const stderrProgress = (line) => process.stderr.write(`${line}\n`);
  * admits it as one of its checks; `resolveDevelopSnapshot` admits it at once. Both
  * start here, so the content hash each computes for a subject is the same by construction.
  */
-async function prepareDevelopSnapshot({ id, pins, steps, phase }) {
+async function prepareDevelopSnapshot({ id, pins, steps, phase, developGitBundles }) {
   const schemas = await loadKernelDistributionSchemas();
   steps.assertFrozenCheckouts(pins);
   const inputs = await steps.buildSnapshotInputs({ id, pins, schemas });
   phase('snapshot inputs built');
-  const prepared = await steps.prepareDistributionWithIndex(id, { inputs });
+  const prepared = await steps.prepareDistributionWithIndex(id, { inputs: developGitBundles === undefined ? inputs : { ...inputs, developGitBundles } });
   // The schemas the lock was composed with are the ones that admit it.
   return { inputs, ...prepared };
 }
 
-/** The read-only `coverage` verb's snapshot: prepared as the resolve prepares it, then admitted (a refusal throws). */
+/**
+ * The read-only `coverage` and image-record snapshot: prepared as the resolve prepares it, then admitted (a refusal
+ * throws). It seals no distribution lock, so it verifies no git-sourced OCI bundle (no registry, no cosign): its lock
+ * rows of a git source carry none, which neither verb reads.
+ */
 export async function resolveDevelopSnapshot({ id, pins, steps = DEVELOP_EDITION_STEPS, phase = () => {} }) {
   const snapshot = await prepareDevelopSnapshot({ id, pins, steps, phase });
   admitResolvedLock(snapshot.schemas, snapshot.lock);
@@ -102,13 +107,15 @@ export async function resolveDevelopEdition({ id, pins, engine, cosignBinary, en
     return image;
   });
   await checked(DevelopResolveCheck.EditionProtocol, () => steps.assertKernelEditionProtocol(kernelPackageDir()));
-  const snapshot = await checked(DevelopResolveCheck.DistributionLock, () => prepareDevelopSnapshot({ id, pins, steps, phase }), {
+  // A git-sourced biome's OCI bundle is kept only when verified against the frozen source (develop-git-bundles.mjs).
+  const developGitBundles = createDevelopGitBundleVerifier({ cosignBinary, dataRoot: dataRoot(), env });
+  const snapshot = await checked(DevelopResolveCheck.DistributionLock, () => prepareDevelopSnapshot({ id, pins, steps, phase, developGitBundles }), {
     classify: (error) => (isBundleSignerRefusal(error) ? DevelopResolveCheck.BundleSigner : DevelopResolveCheck.DistributionLock),
   });
   const lockProduced = snapshot !== BLOCKED;
   const { schemas, inputs, lock, index } = lockProduced ? snapshot : {};
   if (lockProduced) {
-    await checked(DevelopResolveCheck.BundleSigner, () => assertLockBundleSigners({ lock, schemas }));
+    await checked(DevelopResolveCheck.BundleSigner, () => assertLockBundleSigners({ lock, schemas, gitSourcedBundle: GitSourcedBundle.DevelopVerified }));
   }
   // The plane invariants, against the graph this candidate froze (develop-edition-invariants.mjs).
   await checked(DevelopResolveCheck.PlaneInvariants, () => {
@@ -179,7 +186,7 @@ export async function resolveDevelopEdition({ id, pins, engine, cosignBinary, en
   // ONE walk of the biome checkouts: the content hashes and the tree ids both read it.
   const sourceFactsById = await readBiomeSourceFacts({ ...biomeSources, lock });
   phase(`biome sources read (${sourceFactsById.size} biomes)`);
-  const sealedLock = await sealLock({ ...biomeSources, unsealed: lock, sourceFactsById });
+  const sealedLock = await sealLock({ ...biomeSources, unsealed: lock, sourceFactsById, gitSourcedBundle: GitSourcedBundle.DevelopVerified });
   phase('distribution lock sealed');
   const sourceTreeIds = await biomeSourceTreeIds({ ...biomeSources, lock, sourceFactsById });
   const catalogue = buildCatalogue({