authentik 2026.8.5-CE-ubuntu24.04-r6 build trail

How ReadyStack built readystack/authentik:2026.8.5-CE-ubuntu24.04-r6 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/authentik:2026.8.5-CE-ubuntu24.04-r6
  • Index digestsha256:3feb059480f1d5e3767f91f63d22e880674ee08b4aeee8f40dbbd63a6709876f
  • linux/amd64 digestsha256:6e2fa73382a54a24386dad9acc22bfd9bc930b5a7b9b10d77feecfff3536444c
  • ArchiveReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.tar.gz
  • Archive SHA-256 now876bca52b47debd2253acd49231c2a39ce8b549c0a1679e94d9ffe39972b4632
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-12T15:39:16Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.trail.json.sigstore ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.trail.json
ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.trail.jsonReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.trail.json.sigstoreReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.trail.mdauthentik product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • Productauthentik (authentik) [MANIFEST.json]
  • Release tag2026.8.5-CE-ubuntu24.04-r6 [MANIFEST.json]
  • Imagereadystack/authentik:2026.8.5-CE-ubuntu24.04-r6 [MANIFEST.json]
  • Image index digestsha256:3feb059480f1d5e3767f91f63d22e880674ee08b4aeee8f40dbbd63a6709876f [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:6e2fa73382a54a24386dad9acc22bfd9bc930b5a7b9b10d77feecfff3536444c [ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.tar.gz (bytes 674931997) [MANIFEST.json]
  • Archive sha256 at publish876bca52b47debd2253acd49231c2a39ce8b549c0a1679e94d9ffe39972b4632 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/goauthentik/authentik [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refversion/2026.8.5 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit4ec0d19b98da3c329781894cd550da95d3033954 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash45feb928b7089687fe03f0520bba32c23f9be87bf51e33786c55bb954067e01b (files 6120) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:529860ae085f8300a3936de44ee692773292769e25534581f6e7dd69d4d421f5 [ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794391124 (utc 2026-11-11T09:58:44Z) [ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
    [ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.rebuild.json, engine]
  • Engine commit(s)
    • commit fb3c8c212feaeb8607d5b295a821989cf0ab3e1e · dirty yes · first drive 4308
    • commit d439f5fb4e2900022d4c2b52cfcb9e9af8fcc20a · dirty yes · first drive 4432
    • commit d7c629c61d3d1905f2f4aff5c1a3ebd1d543891a · dirty yes · first drive 4449
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain982 (created 2026-11-11T21:43:54Z · trigger customer_request · upstream version 2026.8.5) [chains, chains #982]
  • Requestbuild request #651 (rebuild) (requested at 2026-11-11T09:58:46Z · requested by kitforge-agent · version 2026.8.5) [build_requests, build_requests #651]
  • Reasonrerelease agenda REVISION -> 2026.8.5-CE-ubuntu24.04-r6 (decay loop, IMP-08) [build_requests, build_requests #651 request_reason]
  • Supersedesreadystack/authentik:2026.8.5-CE-ubuntu24.04-r5 (chain 882) [chains, chains #882]

The path through the harness

Fully recorded

1 chain · 3 drives · 18 stages · 2 rewinds

Chain 982 release · ready_to_ship

Created 2026-11-11T21:43:54Z, upstream 2026.8.5, build request 651 [chains, chains #982]

DriveStartedMinutesBuild hostHow it stopped
43082026-11-11T21:44:20Z29.6build host 1 withhold-publish stage_failed at remediate; first failed check exists:security_report; 5 ticks [drive_runs, drive_runs #4308]
44322026-11-12T13:51:35Z76.1build host 1 withhold-publish ready_to_ship at package_archive; 16 ticks [drive_runs, drive_runs #4432]
44492026-11-12T15:25:16Z—build host 1 publish-held not recorded [drive_runs, drive_runs #4449]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-11T21:44:30Z2026-11-11T21:44:31Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 8d8bb7cd09fd…
acquire 2026-11-11T21:44:39Z2026-11-11T21:44:40Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 59214b1ef080…
license_file bcf8a408c1e0…
custody_inputs 7eb19e914f30…
source_tree_hash 659aeb74ec6a…
source_file_manifest d1d474867766…
plan 2026-11-11T21:45:13Z2026-11-11T21:45:14Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 3a0326ded0a1…
input_pin_plan a074028424af…
toolchain_lock d6a25fabdd2d…
assemble_kit 2026-11-11T22:13:26Z2026-11-12T14:20:04Z2
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 70aa6b5a5cc4…
build_recipe 87c1414c9baf…
system_pinning 01ba4719c80b…
build_offline_sh 6ab4f08a6ec7…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health f2953a5c86dd…
verify_offline_sh 3e8184ea230c…
base_image_digests a879c649163a…
dockerfile_offline 70aa6b5a5cc4…
first_build_digest 0c35aa83b0f6…
remediate 2026-11-11T22:13:55Z2026-11-12T14:20:23Z2
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 08df946f38b3…
security_report 3e737564be46…
build_kit 2026-11-12T14:38:41Z2026-11-12T14:38:42Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp fdcc428f05e0…
locked_digest e4e97b4252fe…
freeze_manifest 6e58dceadbf5…
offline_rebuild_transcript aaf103247a8a…
verdict 2026-11-12T14:42:27Z2026-11-12T14:42:28Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 9907a2ce103d…
publish_image 2026-11-12T14:44:03Z2026-11-12T14:44:04Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme a17593a7aab0…
promotion_record 99dd85da862a…
boot_instance 2026-11-12T14:46:30Z2026-11-12T14:46:33Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 611478f80b02…
sbom 2026-11-12T14:47:16Z2026-11-12T14:47:17Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md ef02eb8eebde…
sbom_json 90af959a2e7a…
schema_discovery 2026-11-12T14:47:19Z2026-11-12T14:47:20Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash d634278d90ef…
dependency_tree 1154b8ff6753…
table_classification 940ae30a0b82…
admin_handbook 2026-11-12T14:47:32Z2026-11-12T14:47:33Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 27128f7201f8…
admin_handbook 047644a95254…
db_handbook 2026-11-12T14:47:42Z2026-11-12T14:47:43Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 5e0e5842d9ed…
seed_isolation 5448e9b15973…
seed_data 2026-11-12T14:47:49Z2026-11-12T14:47:50Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql a83b98067549…
seed_cases_json f9752d7e0019…
seed_validate 2026-11-12T14:47:53Z2026-11-12T14:47:54Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 05eafa292f70…
usecase_validate 2026-11-12T14:48:14Z2026-11-12T14:48:15Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests 35cf3e24aa72…
test_results 433c3287fee1…
usecase_contract 5e9d8f1958ee…
finalize_docs 2026-11-12T14:48:20Z2026-11-12T14:48:21Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json bfaf0e4d3e37…
release_notes 20320515d6b5…
api_integration_guide b0d3af963b6f…
package_archive invalidated 2026-11-12T15:24:52Z 2026-11-12T15:07:35Z2026-11-12T15:07:37Z1
37 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 unpack_files
  • G8 scout_grade_a
  • G8 script_copies
  • G8 upgrade_check
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar ff5dd64d8cfb…
checksums 0377beb963e0…
verify_md 54b832ce85a3…
rebuild_md 8402c18b4bd7…
manifest_txt d454e36f093e…
actions_jsonl 0c71aa4f1f68…
provenance_md 91df9830c838…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json f54393485db0…

[stage_runs]

Rewinds

  • 2026-11-12T13:51:42Z: remediate to assemble_kit on strategy_changed (runtime base ubuntu:24.04 moved (sha256:fe81560990fa… -> sha256:2198e4c65076…) (6ad234af2c30 -> 6ad234af2c30)) [stage_events, stage_events #33889]
  • 2026-11-12T15:24:52Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #34078]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-12T15:07:37Z.

6 calls over 3 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 06482 L-A183, L-A15
remediate3101 09189 L-A183, L-A15
usecase_validate1001 01707 L-A59

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.34 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-12T15:10:18Z 000 clean to publish [held_rounds, held_rounds #1823] $0.34 3 rounds, $40.00 ff5dd64d8cfb…

Defects

Fully recorded
  • Ledger entries1 [defects, defects where product_slug=authentik and this tag or chain]
  • Disclosed in the archive1 [docs/defects/defects.json, entries]

1 ledger entry: by severity high 1; by status open 1.

DefectSeverityStatusFound byFixed in
RSD-authentik-c6a0edad37
First visitor can claim the administrator account until setup is completed [defects, defects #270598]		highopenbuild strategy record—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:6e2fa73382a54a24386dad9acc22bfd9bc930b5a7b9b10d77feecfff3536444c · published digest sha256:6e2fa73382a54a24386dad9acc22bfd9bc930b5a7b9b10d77feecfff3536444c · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 452) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-12T15:27:05Z · failing Docker Scout counts 114 packages with copyleft licences (GPL, LGPL, MPL), 108 of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-12T15:25:26Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3835145480 · transparency-log entry · integrated 2026-11-12T15:37:41Z) [ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:3feb059480f1d5e3767f91f63d22e880674ee08b4aeee8f40dbbd63a6709876f · state attached · log index 3835149249 · transparency-log entry
    • kind sbom · digest sha256:3feb059480f1d5e3767f91f63d22e880674ee08b4aeee8f40dbbd63a6709876f · state attached · log index 3835151747 · transparency-log entry
    • kind vsa · digest sha256:3feb059480f1d5e3767f91f63d22e880674ee08b4aeee8f40dbbd63a6709876f · state attached · log index 3835155169 · transparency-log entry
    • kind provenance · digest sha256:6e2fa73382a54a24386dad9acc22bfd9bc930b5a7b9b10d77feecfff3536444c · state attached · log index 3835157888 · transparency-log entry
    • kind sbom · digest sha256:6e2fa73382a54a24386dad9acc22bfd9bc930b5a7b9b10d77feecfff3536444c · state attached · log index 3835160455 · transparency-log entry
    • kind vsa · digest sha256:6e2fa73382a54a24386dad9acc22bfd9bc930b5a7b9b10d77feecfff3536444c · state attached · log index 3835162983 · transparency-log entry
    (at 2026-11-12T15:37:43Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/authentik/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-12T15:10:24Z on build host 1 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:6e2fa73382a54a24386dad9acc22bfd9bc930b5a7b9b10d77feecfff3536444c [clean-room rebuild ledger, runs[798]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-12T14:44:04Z [stage_runs, stage_runs chain 982 stage publish_image]
  • Archive manifests written2026-11-12T15:32:41Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 921 · probed 2026-11-12T14:30:54Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-12T15:39:16Z generated: by KitForge release/build_trail.py · generator commit d7c629c61d3d1905f2f4aff5c1a3ebd1d543891a
  • 2026-11-12T15:41:46Z publication: promoted at 2026-11-12T15:39:54Z · promoted digest sha256:3feb059480f1d5e3767f91f63d22e880674ee08b4aeee8f40dbbd63a6709876f · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 512 · checklist status complete · checklist at 2026-11-12T15:41:46Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/authentik/2026.8.5-CE-ubuntu24.04-r6/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/authentik/2026.8.5-CE-ubuntu24.04-r6/), as staged for publishing—
ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.rebuild.jsonbeside the archive (prodasset /data/production/authentik/2026.8.5-CE-ubuntu24.04-r6/), as staged for publishing—
ReadyStack-authentik-2026.8.5-CE-ubuntu24.04-r6.rebuild.json.sigstorebeside the archive (prodasset /data/production/authentik/2026.8.5-CE-ubuntu24.04-r6/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/authentik/2026.8.5-CE-ubuntu24.04-r6/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)651
chainssadb, ReadyStack's engine database (not published)982
defectssadb, ReadyStack's engine database (not published)authentik 2026.8.5-CE-ubuntu24.04-r6
drive_runssadb, ReadyStack's engine database (not published)chain 982
held_roundssadb, ReadyStack's engine database (not published)chain 982
lesson_recallssadb, ReadyStack's engine database (not published)chain 982
micro_step_runssadb, ReadyStack's engine database (not published)chain 982
release_imagessadb, ReadyStack's engine database (not published)authentik 2026.8.5-CE-ubuntu24.04-r6
stage_eventssadb, ReadyStack's engine database (not published)chain 982
stage_runssadb, ReadyStack's engine database (not published)chain 982
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—