@xemahq/xema 0.57.1 → 0.58.0

package/dist/edition/verify-image-evidence.bundle.provenance.json

@@ -2599,355 +2599,355 @@
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/adapter-host-versions.mjs",
       "sha256": "sha256:1b7ebd3592f4da1225fba74aaba912e7d85fbceeb1626f7dcdac83491cbb4d69"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/authorization-base.mjs",
       "sha256": "sha256:815c9be9f71731dcc805d85da2d733350ddb6fbdf32b6f1cf34f228ce6381c7c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/build-ledger.mjs",
       "sha256": "sha256:05202cbdd606aee086c8e9c62d28be68c429653a8b1d73a289ed0fe4ff14da85"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/canonical-evidence-json.mjs",
       "sha256": "sha256:3b32f6786c9fb1c0deadf2f687077356a503b0db766392d2e0254aa1ab78feec"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/canonical-repository-url.mjs",
       "sha256": "sha256:f36e4f7cbe7849789422ec2f0ebce2d62f7dc3684afecc3ac51a32560e72d8a1"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/collected-refusals.mjs",
       "sha256": "sha256:ae21c069dbff0afa9aca18b7b909d5de405df2277f6431bc3fda20528115bcd1"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/connector-source-authority.mjs",
       "sha256": "sha256:ea94475f4324737673accd7de1303c44db1cbc4dac61a865a06cd83abe310164"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/cosign-certificate-constraints.mjs",
       "sha256": "sha256:bb9ba7038f1de9211c9cbcf99f02255f3623ce72d86c71fdcfa146a4e0edbd9a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/develop-graph.mjs",
       "sha256": "sha256:decebd437c9f4c8bdd6bee3baabfdc340fd7b9d175aca7e702cb330e912708d5"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/dispatched-runtime-components.mjs",
       "sha256": "sha256:9712823d183a60108cd002b2d36a9e5c0867b9d576dd02825264a18f7b8ece69"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/distribution-paths.mjs",
       "sha256": "sha256:d78a5c8405bc6c25d36fcec61b0030e1fdacac7d528e698adb96f906f4b70279"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-artifact.mjs",
       "sha256": "sha256:3b588c9c50f64f3e7a45b954fe7b5fc67e11fc8ce3e7b323727af4541d29ae7f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-channel.mjs",
       "sha256": "sha256:3c0c1564dc50be133cad500452d953353aa5beb703142c05a17bbce8175ba9f3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-chart-set.mjs",
       "sha256": "sha256:f9f16b58279c8c2619a39c5cc92bdbc334543d1a324304cd5d3b120d66dc8f3a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-config.mjs",
       "sha256": "sha256:58af55e9a2b36ca23485246d44a295260afa240bcdc0649c697563b36085ddaa"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-constants.mjs",
       "sha256": "sha256:217fa5b1fa25cb50ee4e1b46ea5e086061ff1f44e00198e1dc28f52376f236a0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-contract-parse.mjs",
       "sha256": "sha256:e2c6e66378f878499f44b62d060ae50197f40757b2044d9ce05290e367dfe21d"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-contract.json",
       "sha256": "sha256:566a17301ad15b94a06fef12b26bbe39e292ed2bf30a2659a9bf07ce5ce487e0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-kind.mjs",
       "sha256": "sha256:b4f3358ffa81bbafb8c37d158b9e01032a7358c38b9d6e5aca409091f989e47a"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-protocol.mjs",
       "sha256": "sha256:f02ea6427e2fd7ceea2c3cb49f3fa6d85b982870e487082a7466f8037cd2bed9"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-publisher.mjs",
       "sha256": "sha256:8803b41067d81acbc35a8974426f606b5b8168b7a9c2581c16586a86f36db50f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-source-pins.mjs",
       "sha256": "sha256:b141474fff33b06734fb62cd2552752b991c8267bb1c9bccb22a81dd80e91c6c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/edition-workspace.mjs",
       "sha256": "sha256:892b360f9f80d2308b0b12f9b99658ae06173878d9b71cf5d6fc8bd717b3c86e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/evidence-checkout.mjs",
       "sha256": "sha256:31fb669769b31de4c6f2b2501bb96959548172ef166e7568edbbfed7f5079a11"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/evidence-grammars.mjs",
       "sha256": "sha256:4bea69437af5a36c139b5b41d0ecf2d1ddcf3f871e10c78e3d351f608eedca3b"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/evidence-trust-pin.mjs",
       "sha256": "sha256:eb46e4d6a79dfac5536b7a439ab9df7dd4b03af369bdcfa9fcdd522aa1aab8dd"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/first-party-source-ids.mjs",
       "sha256": "sha256:20cb1ad7cfb8c6e6686a6be5a51289da4bba76c20b58d9c1b5b6b3813a38dc1c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/fulcio-certificate-extensions.mjs",
       "sha256": "sha256:6f1f5a8ea110a489f7aff4bfb8e0b2d058919fe3e8ba4a1e5e8396fca24861b7"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/git-json.mjs",
       "sha256": "sha256:d0d25cda0c19007becabc9a2827c3dcf759b295cd0b41596eb4480c9549a1f21"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/git-source-auth.mjs",
       "sha256": "sha256:c1b32aa6f7d59798db58238d632cafeadbd4f07376396a31acdeb5f0ac56dcac"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/image-delivery-entitlement-descriptor.mjs",
       "sha256": "sha256:4726b66116f01bf2523fafe2b7a356591eca8fb5ca6bd8b154dd4821873e921b"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/image-evidence-replay-state.mjs",
       "sha256": "sha256:eba0cf1d38af0ab2f00c5099fa8bc2edc543136ce92f895544d4d284b3d6af0f"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/image-evidence.mjs",
       "sha256": "sha256:c6a202f3fc8efe97f00c7e69532c656646bdc5c93365d68676046c3aabd33233"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/image-subject-identity.mjs",
       "sha256": "sha256:6a64e44f9865f68484540e3264a1d87040ae021dfa6ee4b79239e66805754ac1"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/kernel-capability-domain.mjs",
       "sha256": "sha256:3ecf887dd8d399e91a8285f6f115f6e418fb59bbf3f004539fe65ec667219356"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/kernel-contract-authority.mjs",
       "sha256": "sha256:9de2645dca22274cad9fa68d0364bf57e4de704e9d49a8bbadde0e322ae317df"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/kernel-contract-source-path-set.mjs",
       "sha256": "sha256:bc4756f217d80fd8f802932f47da71ab14e782873fa9fa977002a94e058d8a9e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/kernel-package.mjs",
       "sha256": "sha256:e97a9491991d8332a4feed14ac48fe393e44d12c63bdfec89fac8b5b4ea2a574"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/lib.mjs",
       "sha256": "sha256:f98c9eb6c50dbaf6c89c5fa9d42f682042265a2d41687a9d2b35f16c0b139326"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/no-follow-file.mjs",
       "sha256": "sha256:c17bdf5e441f3c079aa06d4b48bbed05cad087855b9ad2a5e6dc43d5ee2b17c3"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/operation-requirements.mjs",
       "sha256": "sha256:d3b6807953f162ab4204dcd1a0f752e0f9b447726fc17a12534d28abe8e570b0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/pin-source.mjs",
       "sha256": "sha256:32fa918729a83587b4d3bca6e5fe381f5a525397ebc49d52729ec1f8cf216c37"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/sigstore-bundle-media-type.mjs",
       "sha256": "sha256:e0aa5a3992f0385ddbbe69eb0307d642ac428ef516c8394816ac4fd52e0ac39c"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/source-authority.mjs",
       "sha256": "sha256:9c351f60e8ea838f445f89c3709c60b7f13b021b78d6e40eaef91350a793f0ff"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/strict-json.mjs",
       "sha256": "sha256:f95778396df7f38b086f55d2ec4f3b6644a8aeff2b32282a62829145fb544562"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/string-order.mjs",
       "sha256": "sha256:b3210cd273e4b2e01fb8b1a91e28734cd211d4010c080d0ce95f5e5ff631cffb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/third-party-admission.mjs",
       "sha256": "sha256:7e32f631a8948e2b93a5cfa163390d52d2a8d9ade87a637c7fe1fc6351fe5974"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/third-party-certificate-extensions.mjs",
       "sha256": "sha256:3293267b09452199f605001d8c14070d1c822b77390caee4088e17b059b7b05d"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/third-party-source-pins.mjs",
       "sha256": "sha256:6f12feb9061bd4ea3e5aeab3f369c081ab58da335c0d281e21b250251e1c0dd9"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/trust-policy-arming.mjs",
       "sha256": "sha256:f6ed96ee1d0b7698b1eea5066ba10abef1babeede8403a7c481bba53636cb1a5"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/trust-policy-image-ownership.mjs",
       "sha256": "sha256:be0c787c6a75124f0143fc0ce3b127a94e3bb7f6aa64e282c91dd84e566e550e"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/trusted-executable.mjs",
       "sha256": "sha256:37d46cdbc999ddd55d4ea8aeed4850ddd1efde89ed7b532f5a2ddec87105d796"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/verifier-binding.mjs",
       "sha256": "sha256:80732658617f5255258c538eeb2383331ec8553b44b58d552b567845a7b916aa"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/verifier-files.mjs",
       "sha256": "sha256:cdd14a20a63f0f194a8abb55680a5a7e3ced1f09f8b210a90d349e655f6de0c0"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/verifier-provenance.mjs",
       "sha256": "sha256:3e2fb8e07cf1f66b8ad6c7ac2555fe3af64ec7abeb07cecbaf1939a18c2b3663"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/verify-catalogue-evidence.mjs",
       "sha256": "sha256:156d0ee39210658ec489609629c5b9cddd3ce5b3938d8980dcf8282ae4be60bb"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/verify-image-evidence.mjs",
       "sha256": "sha256:958360f7889985c48abb048852c5bbba349cd7353ce4b532c4511b4902380fac"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "edition/workspace-sections.mjs",
       "sha256": "sha256:1d2aff08bcd9e94b644c85c5b55c90c05b6b02bab662731fe3fcd53fcdf86e93"
     },
     {
       "package": "@xemahq/xema",
-      "version": "0.57.1",
+      "version": "0.58.0",
       "path": "scripts/build-evidence-verifier.mjs",
       "sha256": "sha256:5a688d20c47dc88aff37aa0c6cc02daf2c370a5bc610fef8446ce7be222d4c0b"
     },

package/edition/customer-edition-verbs.mjs

@@ -21,6 +21,7 @@ import { fetchCatalogue, parseCatalogueRef } from './catalogue-fetch.mjs';
 import { readCataloguePin } from './catalogue-pin.mjs';
 import { CATALOGUE_TOKEN_ENV_FLAG, CATALOGUE_USERNAME_FLAG, COSIGN_FLAG, DEFINITION_FLAG, SOURCE_IMAGE_FLAG } from './customer-flags.mjs';
 import { freezeCustomerSources, lsRemoteRef } from './develop-freeze.mjs';
+import { customerDevelopGitBundleVerifier } from './develop-git-bundles.mjs';
 import { isDevelopImageRef } from './develop-image-coordinate.mjs';
 import { assertCanonicalDistributionId } from './distribution-paths.mjs';
 import { LOCAL_WORKFLOW, assertEngineImage, assertExistingArtifactMatches, snapshotEditionTarget, workflowFromEnv, writeEditionArtifact } from './edition-artifact.mjs';
@@ -33,6 +34,7 @@ import { holdSource } from './git-source-auth.mjs';
 import { canonicalJson, sha256Digest } from './image-evidence.mjs';
 import { adoptCatalogueKernel } from './kernel-package.mjs';
 import { loadKernelDistributionSchemas, serializeJson } from './lib.mjs';
+import { GitSourcedBundle } from './locked-bundle-signer.mjs';
 import { isSourcePinKey, sortedSnapshotPins, sourcePinKey } from './pin-source.mjs';
 import { PREVIOUS_SEAL_SIGNER_FLAG } from './previous-seal-registry.mjs';
 import { assertSealedImageLock } from './release-edition-artifact.mjs';
@@ -108,7 +110,7 @@ export function declaredSourceNamesOf(rawDefinition) {
 }
 
 /** Resolve and seal the customer edition of `channel`; returns the four locks and the frozen provenance pins. */
-export async function resolveCustomerChannelEdition({ channel, rawDefinition, catalogue, catalogueDigest, pins, sourceImages, env = process.env, sealOptions = {}, adoptKernel, materialize }) {
+export async function resolveCustomerChannelEdition({ channel, rawDefinition, catalogue, catalogueDigest, pins, sourceImages, env = process.env, sealOptions = {}, adoptKernel, materialize, developGitBundles }) {
   const frozen = customerEditionPins({ channel, pins, declaredSourceNames: declaredSourceNamesOf(rawDefinition), catalogueDigest, definitionDigest: customerDefinitionDigest(rawDefinition) });
   const resolved = await resolveCustomerEdition({
     rawDefinition,
@@ -119,6 +121,7 @@ export async function resolveCustomerChannelEdition({ channel, rawDefinition, ca
     catalogueDigest,
     ...(adoptKernel === undefined ? {} : { adoptKernel }),
     ...(materialize === undefined ? {} : { materialize }),
+    ...(developGitBundles === undefined ? {} : { developGitBundles }),
     sealOwn: ({ distributionId, subjects }) => sealImageSubjects({ channel, distributionId, subjects, env, ...sealOptions }),
   });
   // The customer edition is sealed here: every biomeContentHash is recomputed through the
@@ -135,6 +138,8 @@ export async function resolveCustomerChannelEdition({ channel, rawDefinition, ca
     catalogue,
     catalogueDigest,
     storePublisherAnchorKeys: resolved.storePublisherAnchorKeys,
+    // A row the develop verifier kept carries its bundle and develop signer; the seal admits exactly those.
+    gitSourcedBundle: developGitBundles === undefined ? GitSourcedBundle.Refused : GitSourcedBundle.DevelopVerified,
   });
   return { ...resolved, distributionLock, pins: frozen };
 }
@@ -198,7 +203,8 @@ const COMMANDS = Object.freeze({
     values: ['--pins', '--out', '--registry', ENGINE_REPOSITORY_FLAG, ENGINE_SIGNER_FLAG, COSIGN_FLAG, IMAGES_FROM_FLAG, PREVIOUS_LOCK_FLAG, PREVIOUS_LOCK_SHA256_FLAG, PREVIOUS_SEAL_SIGNER_FLAG],
     switches: ['--local', FIRST_SEAL_FLAG],
     required: ['--pins', '--out', '--registry', ENGINE_REPOSITORY_FLAG, ENGINE_SIGNER_FLAG, COSIGN_FLAG],
-    customer: { values: [DEFINITION_FLAG, ...CREDENTIAL_FLAGS, SOURCE_IMAGE_FLAG, COSIGN_FLAG, ENGINE_IMAGE_FLAG], required: ['--pins', '--out', '--registry', '--engine-image'], refused: [IMAGES_FROM_FLAG, PREVIOUS_LOCK_FLAG, PREVIOUS_LOCK_SHA256_FLAG, FIRST_SEAL_FLAG, PREVIOUS_SEAL_SIGNER_FLAG], cosign: true },
+    customer: { values: [DEFINITION_FLAG, ...CREDENTIAL_FLAGS, SOURCE_IMAGE_FLAG, COSIGN_FLAG, ENGINE_IMAGE_FLAG], required: ['--pins', '--out', '--registry', '--engine-image'], refused: [IMAGES_FROM_FLAG, PREVIOUS_LOCK_FLAG, PREVIOUS_LOCK_SHA256_FLAG, FIRST_SEAL_FLAG, PREVIOUS_SEAL_SIGNER_FLAG], cosign: true, developCosign: true },
+    // developCosign: on develop, --cosign verifies the git-sourced OCI bundles under the data root's pinned policy (develop-git-bundles.mjs).
     // A vendor resolve finds its engine itself; the old flag is refused by name, never read as a customer flag.
     removedFromVendor: { [ENGINE_IMAGE_FLAG]: `use ${ENGINE_REPOSITORY_FLAG} and ${ENGINE_SIGNER_FLAG}` },
   },
@@ -311,8 +317,9 @@ export function parseEditionVerbArgs(channel, argv) {
     }
   }
   const customer = spec.customer !== undefined && customerValues.some((flag) => options[flag] !== undefined);
-  // `--cosign` of a customer form verifies a release catalogue; a vendor verb (develop `coverage`, `resolve`, `engine`) takes its own `--cosign`.
-  if (customer && spec.customer?.cosign === true && options[COSIGN_FLAG] !== undefined && channel !== EditionChannel.Release) {
+  // `--cosign` of a customer form verifies a release catalogue, and on a develop resolve the git-sourced OCI bundles
+  // (`developCosign`); a vendor verb (develop `coverage`, `resolve`, `engine`) takes its own `--cosign`.
+  if (customer && spec.customer?.cosign === true && options[COSIGN_FLAG] !== undefined && channel !== EditionChannel.Release && spec.customer.developCosign !== true) {
     throw new Error(`${COSIGN_FLAG} verifies a release catalogue's evidence; a ${channel} ${command} takes none`);
   }
   if (channel === EditionChannel.Release && options[DEFINITION_FLAG] === undefined) {
@@ -331,9 +338,11 @@ export function parseEditionVerbArgs(channel, argv) {
       if (options[refused] !== undefined) {throw new Error(`a customer ${command} takes no ${refused}`);}
     }
     if (positional.length !== 0) {throw new Error(`a customer ${command} takes no <distribution-id>: the id is the definition's`);}
-    if (spec.customer.cosign === true && channel === EditionChannel.Release) {
-      if (options[COSIGN_FLAG] === undefined) {throw new Error(`a release ${command} requires ${COSIGN_FLAG} <absolute path of the cosign binary>`);}
-      if (!isAbsolute(options[COSIGN_FLAG])) {throw new Error(`${COSIGN_FLAG} must be an absolute path, got ${JSON.stringify(options[COSIGN_FLAG])}`);}
+    if (spec.customer.cosign === true && channel === EditionChannel.Release && options[COSIGN_FLAG] === undefined) {
+      throw new Error(`a release ${command} requires ${COSIGN_FLAG} <absolute path of the cosign binary>`);
+    }
+    if (spec.customer.cosign === true && options[COSIGN_FLAG] !== undefined && !isAbsolute(options[COSIGN_FLAG])) {
+      throw new Error(`${COSIGN_FLAG} must be an absolute path, got ${JSON.stringify(options[COSIGN_FLAG])}`);
     }
   } else if (spec.positional ? positional.length !== 1 : positional.length !== 0) {
     throw new Error(`${command} takes ${spec.positional ? 'exactly one <distribution-id>' : 'no positional argument'}`);
@@ -400,6 +409,8 @@ async function resolveCustomer(channel, options, env) {
     pins: readStrictJsonFile(options['--pins']),
     sourceImages,
     env,
+    // Develop, under a declared customer policy: the git-sourced OCI bundles are verified with --cosign (none: refused when a subject exists).
+    developGitBundles: customerDevelopGitBundleVerifier({ channel, cosignBinary: options[COSIGN_FLAG], env }),
   });
   const evidenceTrustPolicy = await descriptorEvidenceTrust({ kind: EditionKind.Resolved, channel, consumesCatalogue: true });
   const target = snapshotEditionTarget(channel, id, pins, { registry: options['--registry'], engineImage: options['--engine-image'], sourceImages });

package/edition/develop-git-bundles.mjs

@@ -1,8 +1,11 @@
-// develop-git-bundles — the OCI bundle of a git-sourced biome, in a VENDOR DEVELOP edition only (XEMA-2456).
+// develop-git-bundles — the OCI bundle of a git-sourced biome, in a DEVELOP edition only (XEMA-2456): a vendor develop
+// resolve, or a customer develop resolve (`--definition`) whose data root declares a pinned evidence trust policy
+// (`customerDevelopGitBundleVerifier`). Each is verified under the trust policy of ITS OWN data root.
 //
-// A release and a customer edition never carry an OCI bundle on a git-sourced row: the manifest's `bundleSource` names
-// an artifact the release lane builds, not one built from the pinned commit (resolve-distribution.mjs strips it, the
-// release refuses it). A develop edition freezes a git source at its develop head F, and the source's own develop lane
+// A release edition never carries an OCI bundle on a git-sourced row: the manifest's `bundleSource` names an artifact
+// the release lane builds, not one built from the pinned commit (resolve-distribution.mjs strips it, the release refuses
+// it). A resolve without a verifier (a customer edition whose data root declares no policy, or any customer release)
+// refuses it on a required row (`assertNoUnverifiedRequiredGitBundles`). A develop edition freezes a git source at its develop head F, and the source's own develop lane
 // publishes the bundle the manifest names, signed keyless by its develop workflow. This module proves that bundle is
 // the one F describes, and only then does the resolve keep it on the row, by DIGEST, with its develop bundle signer:
 //
@@ -32,6 +35,7 @@ import { canonicalPublicHttpsRepositoryUrl, repositoryOwnerName } from './canoni
 import { RefusalError } from './collected-refusals.mjs';
 import { EditionChannel } from './edition-channel.mjs';
 import { editionWorkspaceConfig } from './edition-config.mjs';
+import { dataRoot as configuredDataRoot, editionsRoot } from './edition-workspace.mjs';
 import { loadPinnedDeclaredTrustPolicy } from './evidence-trust-pin.mjs';
 import { sourceTreeIdAt } from './external-source-walk.mjs';
 import { prepareTrustedCosignBinary } from './image-evidence.mjs';
@@ -61,6 +65,34 @@ export function developGitBundleSubjects({ lock, index }) {
 
 const subjectLabel = ({ biomeId, source }) => `biome "${biomeId}" (git source "${source.name}" at ${source.commit})`;
 
+/**
+ * A resolve with no develop bundle verifier (a customer edition, either channel) drops a git-sourced row's OCI
+ * `bundleSource` (resolve-distribution.mjs, at the copy point). For a row the edition installs as `required`, that
+ * drop is never silent: biome-host would get a required biome with no bundle to fetch. Every such row is refused at
+ * once, naming the declared bundle and what is missing (XEMA-2456).
+ *
+ * @param {object} options
+ * @param {object} options.lock the resolved lock (its rows carry `installPolicy`)
+ * @param {object[]} options.index the index it was resolved from (it still holds the manifest's bundleSource)
+ * @param {string} options.required the kernel's `BiomeInstallPolicy.Required`
+ */
+export function assertNoUnverifiedRequiredGitBundles({ lock, index, required }) {
+  const requiredRows = new Set(lock.biomes.filter((biome) => biome.installPolicy === required).map((biome) => biome.id));
+  const refused = developGitBundleSubjects({ lock, index })
+    .filter((subject) => requiredRows.has(subject.biomeId))
+    .map(
+      (subject) =>
+        new DevelopGitBundleError(
+          `${subjectLabel(subject)} is installPolicy required and its manifest declares an OCI bundleSource (${subject.entry.bundleSource.ociRef}), ` +
+            'but this resolve verifies no git-sourced bundle, so its lock row would carry no bundleSource and no bundleSigner and biome-host could not install it. ' +
+            'A develop resolve verifies it when its data root declares a pinned evidenceTrustPolicy (edition-workspace.json) holding the ONE develop ' +
+            `bundle-signer row of the source's repository, and it is given --cosign; a release carries such a biome only as an \`oci\` source with a third-party source pin`,
+        ),
+    );
+  if (refused.length === 1) {throw refused[0];}
+  if (refused.length > 1) {throw new BundleSignerRefusedError(refused);}
+}
+
 /** The biome directory relative to its source repository: the index path is `<source name>/<directory>`. */
 function repositoryPathOf({ source, entry }) {
   const prefix = `${source.name}/`;
@@ -148,9 +180,10 @@ export async function verifyDevelopGitBundle({
  *
  * @param {object} options
  * @param {string|undefined} options.cosignBinary the cosign the trust policy pins by digest (`--cosign`)
- * @param {string} options.dataRoot
+ * @param {string} options.dataRoot the root whose pinned trust policy holds the develop bundle-signer rows
+ * @param {string} [options.registryRoot] the root whose image-registry-credentials.json the registry is read with (default: dataRoot)
  */
-export function createDevelopGitBundleVerifier({ cosignBinary, dataRoot, env = process.env, clientFor, treeIdAt }) {
+export function createDevelopGitBundleVerifier({ cosignBinary, dataRoot, registryRoot = dataRoot, env = process.env, clientFor, treeIdAt }) {
   return Object.freeze({
     async verify({ subjects, checkouts, schemas }) {
       if (subjects.length === 0) {return new Map();}
@@ -162,7 +195,7 @@ export function createDevelopGitBundleVerifier({ cosignBinary, dataRoot, env = p
       const policy = loadPinnedDeclaredTrustPolicy({ dataRoot, declaration: editionWorkspaceConfig().evidenceTrustPolicy, schemas });
       const trustedCosign = prepareTrustedCosignBinary({ cosignBinary, policy });
       const context = { policy, policyRoot: dataRoot, schemas, trustedCosign };
-      const registry = clientFor ?? createRegistryClientResolver({ dataRoot });
+      const registry = clientFor ?? createRegistryClientResolver({ dataRoot: registryRoot });
       try {
         return await verifyEach(subjects, (subject) =>
           verifyDevelopGitBundle({ subject, checkout: checkouts.get(subject.source.name), context, clientFor: registry, env, ...(treeIdAt === undefined ? {} : { treeIdAt }) }),
@@ -174,6 +207,27 @@ export function createDevelopGitBundleVerifier({ cosignBinary, dataRoot, env = p
   });
 }
 
+/**
+ * The verifier a CUSTOMER resolve (`--definition`) hands `resolveCustomerDistribution`, or undefined. Only a develop
+ * resolve whose configured data root DECLARES an evidence trust policy gets one: the bundles are verified under that
+ * customer policy, held to its pin (`loadPinnedDeclaredTrustPolicy`, read only when a subject exists), never the
+ * vendor's. The registry is read with the editions root's credentials, as the customer's own images are. Without a
+ * declared policy (or on release) there is none, and a required git-sourced row declaring an OCI bundle is refused
+ * (`assertNoUnverifiedRequiredGitBundles`).
+ */
+export function customerDevelopGitBundleVerifier({ channel, cosignBinary, env = process.env, clientFor, treeIdAt }) {
+  if (channel !== EditionChannel.Develop) {return undefined;}
+  if (editionWorkspaceConfig().evidenceTrustPolicy.policy === null) {return undefined;}
+  return createDevelopGitBundleVerifier({
+    cosignBinary,
+    dataRoot: configuredDataRoot(),
+    registryRoot: editionsRoot(),
+    env,
+    ...(clientFor === undefined ? {} : { clientFor }),
+    ...(treeIdAt === undefined ? {} : { treeIdAt }),
+  });
+}
+
 /**
  * The OFFLINE verifier of a candidate re-seal: the bundle the pinned develop edition already verified for the SAME
  * source commit, carried forward unchanged, with the signer it was verified under (`pinnedBundleSigner`): the resolve

package/edition/repin-evidence-trust.mjs

@@ -98,7 +98,8 @@ if (isEntryModule(import.meta.url)) {
     const pin = await repinEvidenceTrust(parseRepinArguments(process.argv.slice(2)));
     console.log(
       `[repin-evidence-trust] pinned policy ${pin.policyDigest}, verifier ${pin.verifier.bundleDigest}, ` +
-        `kernel contract authority ${pin.kernelContractAuthority.sourceCommit} and ` +
+        // A customer data root states no kernel contract authority: its pin records none.
+        `kernel contract authority ${pin.kernelContractAuthority === null ? 'none' : pin.kernelContractAuthority.sourceCommit} and ` +
         `${pin.trustedOrasBinaryDigests.length} oras binary digest(s)`,
     );
   } catch (error) {

package/edition/resolve-customer-edition.mjs

@@ -33,8 +33,9 @@ import {
   parseCustomerDefinition,
   parseImageRegistryMirror,
 } from './customer-definition.mjs';
+import { assertNoUnverifiedRequiredGitBundles } from './develop-git-bundles.mjs';
 import { assertRosteredChartSetLock } from './edition-chart-set.mjs';
-import { EditionLockFile } from './edition-constants.mjs';
+import { EditionChannel, EditionLockFile } from './edition-constants.mjs';
 import { editionsRoot } from './edition-workspace.mjs';
 import { subjectServingBiome } from './image-lock-service-rows.mjs';
 import { adoptCatalogueKernel } from './kernel-package.mjs';
@@ -268,8 +269,13 @@ export async function resolveCustomerDistribution({
   materialize,
   adoptKernel = adoptCatalogueKernel,
   fetchManifest = fetchRegistryManifest,
+  developGitBundles,
 }) {
   if (catalogueDigest === undefined) {throw new CatalogueError('a customer resolve names the digest of its catalogue');}
+  // Only a develop edition carries a git-sourced OCI bundle (develop-git-bundles.mjs); a release never verifies one.
+  if (developGitBundles !== undefined && catalogue.channel !== EditionChannel.Develop) {
+    throw new Error(`a git-sourced bundle verifier is a develop resolve's; the catalogue "${catalogue.offeringId}" is ${catalogue.channel}`);
+  }
   const schemas = await adoptKernel(catalogue);
   const { definition, mirror } = parseCustomerDefinition(schemas, rawDefinition);
   const composed = composeCustomerEdition({ schemas, definition, mirror, catalogue, sourceImages, pins });
@@ -284,6 +290,8 @@ export async function resolveCustomerDistribution({
     platformServiceIndex: { schemaVersion: 1, services: catalogue.platformServices },
     sourcesAvailable: false,
     storePublisherTrust: selectedStorePublisherTrust(catalogueCeiling(catalogue, schemas).storePublisherTrust, definition.storePublisherAnchorKeys),
+    // A develop resolve under a declared customer policy verifies its git-sourced OCI bundles and keeps them (by digest, with the signer).
+    ...(developGitBundles === undefined ? {} : { developGitBundles }),
   };
   let resolved;
   try {
@@ -295,6 +303,9 @@ export async function resolveCustomerDistribution({
     throw error;
   }
   const { lock, index } = resolved;
+  // Without a verifier no git-sourced OCI bundle is verified, so a required row that declares one is refused, never stripped.
+  // With one, resolve-distribution already refuses every such row it did not verify.
+  if (developGitBundles === undefined) {assertNoUnverifiedRequiredGitBundles({ lock, index, required: schemas.BiomeInstallPolicy.Required });}
   assertTrustCeilingAssignsCustomerBiomes(
     schemas,
     definition,

package/edition/resolve-distribution.mjs

@@ -1823,7 +1823,8 @@ export function resolveUnadmittedDistributionFromInputs(
   //     resolve verified for it (`develop-git-bundles.mjs`: the develop signer at the attested commit, content-bound to
   //     the frozen one), by digest, and its develop bundle signer. A git-sourced OCI row the resolve did not verify is
   //     refused, never stripped;
-  //   - otherwise (release, customer, dist-check) it carries neither, as before; the release refuses the declaration.
+  //   - otherwise (release, customer, dist-check) it carries neither, as before; the release refuses the declaration,
+  //     and a customer resolve refuses it on a required row (develop-git-bundles.mjs `assertNoUnverifiedRequiredGitBundles`).
   // An OCI host-module bundle on a git-sourced biome is refused below in every channel. (An entry of a declared `oci`
   // source has a stamp but no record: not git.)
   const isGitSourced = (e) => e.source !== undefined && sourceRecords.has(e.source);

package/edition/third-party-bundle-registry.mjs

@@ -172,7 +172,9 @@ export function verifyBundleOnRegistry({ trustedCosign, policy, policyRoot, row,
   const cosign = registryCosign({ trustedCosign, policy, policyRoot, row, ociRef, env });
   const common = [...cosign.trustArgs, ...certificateConstraintArgs(row, workflowSha)];
   cosign.run('verify', [...common, ociRef]);
-  cosign.run('verify-attestation', ['--type', COSIGN_SLSA_PROVENANCE_ALIAS, ...common, ociRef]);
+  // cosign refuses `verify-attestation --trusted-root` without `--new-bundle-format`; plain `verify` takes it as is.
+  const [offline, trustedRoot, rootPath, ...claims] = common;
+  cosign.run('verify-attestation', [offline, '--new-bundle-format', trustedRoot, rootPath, '--type', COSIGN_SLSA_PROVENANCE_ALIAS, ...claims, ociRef]);
 }
 
 const WORKFLOW_SHA = /^[0-9a-f]{40}$/u;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/xema",
-  "version": "0.57.1",
+  "version": "0.58.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/xema-dev/xema-cli.git",
@@ -100,7 +100,7 @@
     "typecheck": "tsc --noEmit"
   },
   "xemaRelease": {
-    "sourceDigest": "sha256:d587d9025bbf46bc076d6d88075347bd45fa0ca644c804a32a463157091f5bfa",
-    "sha": "286425dc5a0bf4ee9b7a3b3c0b53271f3ec661ed"
+    "sourceDigest": "sha256:90788d0401718a3e8bfab84c8818ff21bde3b1218931ab71aedd032894bc346a",
+    "sha": "931d0b103540e14e34d6c726a5167640aa7a1c6e"
   }
 }