Coder v2.39.0-CE-ubuntu24.04-r2 build trail

How ReadyStack built readystack/coder:v2.39.0-CE-ubuntu24.04-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/coder:v2.39.0-CE-ubuntu24.04-r2
  • Index digestsha256:f130c67c662984f9f57b7fc6f66aa6639f556c247cea400c36edb217ff8900d5
  • linux/amd64 digestsha256:fa6c3b1161e38eb49487703b8ba4b60d8d88bf4febe7200551e1136f0ab0ec64
  • ArchiveReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.tar.gz
  • Archive SHA-256 now617f99dfa3426c373e55c5b13e1466e7c36e68167dbca04b5c6413240aac1594
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-11T08:17:33Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.trail.json.sigstore ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.trail.json
ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.trail.jsonReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.trail.json.sigstoreReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.trail.mdCoder product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductCoder (coder) [MANIFEST.json]
  • Release tagv2.39.0-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Imagereadystack/coder:v2.39.0-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Image index digestsha256:f130c67c662984f9f57b7fc6f66aa6639f556c247cea400c36edb217ff8900d5 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:fa6c3b1161e38eb49487703b8ba4b60d8d88bf4febe7200551e1136f0ab0ec64 [ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.tar.gz (bytes 985039011) [MANIFEST.json]
  • Archive sha256 at publish9f9da8d4a10efe893379db1870ab9dabe55b2bf5053152be58e4c61273f22ae2 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/coder/coder [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv2.39.0 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit8d897357dd61b3c564463356fdba40c64658e6e7 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash613869759691244f624021286a3aa912ec22f232d7b88d4806ac104e29b1d4fc (files 12858) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:bf8fd7dffe941425dc7d07e93d07080e8a5d7efd609c81b2bf0f054a7a29747e [ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794380449 (utc 2026-11-11T07:00:49Z) [ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.26.11-bookworm@sha256:dc40a13b61304647ed7e5d581d246b86413dfc29d63c6d018310feb93cd98fc0 · platform digest sha256:79ecd0a7157c7a4cf3b281ced8465350591bf54fedab540e75374a003e1fde7e
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.rebuild.json, engine]
  • Engine commit(s)
    • commit 8ff362fa42dca5575ef92fdd7601d43149a85f02 · dirty yes · first drive 4268
    • commit 7f59566f2ae65f85cbb2d38b9576654acd74c34e · dirty yes · first drive 4272
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain961 (created 2026-11-11T07:02:48Z · trigger customer_request · upstream version v2.39.0) [chains, chains #961]
  • Requestbuild request #641 (rebuild) (requested at 2026-11-11T07:00:51Z · requested by kitforge-agent · version v2.39.0) [build_requests, build_requests #641]
  • Reasonrerelease agenda REVISION -> v2.39.0-CE-ubuntu24.04-r2 (decay loop, IMP-08) [build_requests, build_requests #641 request_reason]
  • Supersedesreadystack/coder:v2.39.0-CE-ubuntu24.04-r1 (chain 899) [chains, chains #899]

The path through the harness

Fully recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 961 release · ready_to_ship

Created 2026-11-11T07:02:48Z, upstream v2.39.0, build request 641 [chains, chains #961]

DriveStartedMinutesBuild hostHow it stopped
42682026-11-11T07:03:48Z44.7build host 3 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4268]
42722026-11-11T08:05:58Z—build host 3 publish-held not recorded [drive_runs, drive_runs #4272]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-11T07:03:59Z2026-11-11T07:04:00Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 0111ac248adc…
acquire 2026-11-11T07:04:12Z2026-11-11T07:04:14Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree f07a865390d3…
license_file 8486a10c4393…
custody_inputs 15abf6039dc8…
source_tree_hash c0710ef7ba58…
source_file_manifest 2e5882adff2d…
plan 2026-11-11T07:05:00Z2026-11-11T07:05:00Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report bd89a05f0c56…
input_pin_plan c584d0ddeead…
toolchain_lock 79c07e167f70…
assemble_kit 2026-11-11T07:18:22Z2026-11-11T07:18:23Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 0fd02bafc037…
build_recipe 1ecaaaed4303…
system_pinning 5d069a5705dc…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 7989657a51c3…
verify_offline_sh 3e8184ea230c…
base_image_digests e5c2364308a6…
dockerfile_offline 0fd02bafc037…
first_build_digest ff38b25c268b…
remediate 2026-11-11T07:19:14Z2026-11-11T07:19:15Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 7caf4c85ecec…
security_report 9eedc5430fe2…
build_kit 2026-11-11T07:29:58Z2026-11-11T07:29:59Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp b9f80e2d93b4…
locked_digest 534db5056f6a…
freeze_manifest 51abb456af60…
offline_rebuild_transcript 7fdecc499ac2…
verdict 2026-11-11T07:31:15Z2026-11-11T07:31:15Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 26308fda0003…
publish_image 2026-11-11T07:32:02Z2026-11-11T07:32:03Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme ab273fe1967b…
promotion_record 45d60175e62a…
boot_instance 2026-11-11T07:32:22Z2026-11-11T07:32:25Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 89c5d1f07c84…
sbom 2026-11-11T07:32:44Z2026-11-11T07:32:45Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 20203673e634…
sbom_json 647b1feb33ac…
schema_discovery 2026-11-11T07:32:47Z2026-11-11T07:32:48Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 84d6a2346922…
dependency_tree 9b4a46907a93…
table_classification 2a94f7936568…
admin_handbook 2026-11-11T07:32:56Z2026-11-11T07:32:56Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map c7f842b541c8…
admin_handbook 4024dd7c6ff9…
db_handbook 2026-11-11T07:33:05Z2026-11-11T07:33:06Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 06f890a66aec…
seed_isolation 70eb8a0244c4…
seed_data 2026-11-11T07:33:12Z2026-11-11T07:33:12Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 8de0c954c863…
seed_cases_json 47176c65220d…
seed_validate 2026-11-11T07:33:15Z2026-11-11T07:33:16Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 72c50cb7d47c…
usecase_validate 2026-11-11T07:33:33Z2026-11-11T07:33:34Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests e3c1778806b6…
test_results 0ebc38e4f34d…
usecase_contract 59e7a2c14c54…
finalize_docs 2026-11-11T07:33:38Z2026-11-11T07:33:39Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 78c58ac0c712…
release_notes d1b2c8797318…
api_integration_guide e9012a50e3fe…
package_archive invalidated 2026-11-11T08:05:10Z 2026-11-11T07:48:29Z2026-11-11T07:48:32Z1
35 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 0a39a2a9e2ac…
checksums 2279e25cff71…
verify_md 2cfb838332d8…
rebuild_md 4ffb0b66f337…
manifest_txt 1c5c35e81e9c…
actions_jsonl 2d9c4e7c6533…
provenance_md 19ac0cb96d3d…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 234dd6ec35c6…

[stage_runs]

Rewinds

  • 2026-11-11T08:05:10Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #31392]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-11T07:48:32Z.

5 calls over 3 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 012604 —
remediate2001 016348 L-A08, L-038, L-036, L-034, L-032
usecase_validate1001 01583 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.38 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-11T07:49:33Z 000 clean to publish [held_rounds, held_rounds #1740] $0.38 3 rounds, $40.00 0a39a2a9e2ac…

Defects

Fully recorded
  • Ledger entries6 [defects, defects where product_slug=coder and this tag or chain]
  • Disclosed in the archive5 [docs/defects/defects.json, entries]

6 ledger entries: by severity low 4, high 1, medium 1; by status wont-fix-by-design 1, open 4, fixed-in-release 1.

DefectSeverityStatusFound byFixed in
RSD-coder-0060cdbb2c
Enterprise / non-open-source components are removed from the source before the build: enterprise, LICENSE.enterprise [defects, defects #248803]		lowwont-fix-by-designbuild strategy record—
RSD-coder-f4f84e7225
First visitor can claim the administrator account until setup is completed [defects, defects #248804]		highopenbuild strategy record—
RSD-coder-88593e80e4
CVE-2026-123158 in openssh-client 1:9.6p1-3ubuntu13.20 is on CISA's Known Exploited Vulnerabilities list [defects, defects #248805]		mediumopenimage scan—
RSD-coder-6dcd2ebcc6
Docker Hub README: Round-1/2 price contradiction still stands (also line 15 'free with an account'): the MANIFEST prices the kit at $10 and says the release is not free. [defects, defects #248806]		lowopenheld review (review model)—
RSD-coder-f3c4e6f922
Admin handbook: Wrong error text: users/first does not answer 'Internal error.' when the database is down. [defects, defects #249095]		lowfixed-in-releaseheld review (review model)v2.39.0-CE-ubuntu24.04-r2
RSD-coder-aa079e7564
Database handbook: The TLS paragraph lists the variables but not that the files must be mounted and readable by uid 999 (the Admin Handbook's Optional HTTPS says so); a customer with a mode-600 key owned by another… [defects, defects #249096]		lowopenheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:fa6c3b1161e38eb49487703b8ba4b60d8d88bf4febe7200551e1136f0ab0ec64 · published digest sha256:fa6c3b1161e38eb49487703b8ba4b60d8d88bf4febe7200551e1136f0ab0ec64 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 289) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-11T08:06:27Z · failing Docker Scout counts 106 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-11T08:06:11Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3806113062 · transparency-log entry · integrated 2026-11-11T08:15:29Z) [ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:f130c67c662984f9f57b7fc6f66aa6639f556c247cea400c36edb217ff8900d5 · state attached · log index 3806119801 · transparency-log entry
    • kind sbom · digest sha256:f130c67c662984f9f57b7fc6f66aa6639f556c247cea400c36edb217ff8900d5 · state attached · log index 3806121751 · transparency-log entry
    • kind vsa · digest sha256:f130c67c662984f9f57b7fc6f66aa6639f556c247cea400c36edb217ff8900d5 · state attached · log index 3806123785 · transparency-log entry
    • kind provenance · digest sha256:fa6c3b1161e38eb49487703b8ba4b60d8d88bf4febe7200551e1136f0ab0ec64 · state attached · log index 3806125600 · transparency-log entry
    • kind sbom · digest sha256:fa6c3b1161e38eb49487703b8ba4b60d8d88bf4febe7200551e1136f0ab0ec64 · state attached · log index 3806126853 · transparency-log entry
    • kind vsa · digest sha256:fa6c3b1161e38eb49487703b8ba4b60d8d88bf4febe7200551e1136f0ab0ec64 · state attached · log index 3806128406 · transparency-log entry
    (at 2026-11-11T08:15:29Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/coder/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-11T07:49:40Z on build host 3 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:fa6c3b1161e38eb49487703b8ba4b60d8d88bf4febe7200551e1136f0ab0ec64 [clean-room rebuild ledger, runs[745]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-11T07:32:03Z [stage_runs, stage_runs chain 961 stage publish_image]
  • Archive manifests written2026-11-11T08:11:52Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 830 · probed 2026-11-11T07:24:45Z · source build_kit) [release_images, isa_level_hard]

History

3 events
  • 2026-11-11T08:17:33Z generated: by KitForge release/build_trail.py · generator commit 1f76800133d462c9f58a282b5f9153f473942968
  • 2026-11-11T08:19:56Z publication: promoted at 2026-11-11T08:18:15Z · promoted digest sha256:f130c67c662984f9f57b7fc6f66aa6639f556c247cea400c36edb217ff8900d5 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 469 · checklist status complete · checklist at 2026-11-11T08:19:56Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json
  • 2026-11-11T23:30:04Z repack: previous sha256 9f9da8d4a10efe893379db1870ab9dabe55b2bf5053152be58e4c61273f22ae2 · sha256 617f99dfa3426c373e55c5b13e1466e7c36e68167dbca04b5c6413240aac1594 · reason customer kit files brought up to the current engine: BUILD_OFFLINE.sh (kit root, docs/offline, docs/docker); README.md and FILE_MODES.tsv at the archive root (release/kit_unpack.py), BUILD_OFFLINE.sh putting back the packed file modes, REBUILD.md unpacking with -p and keeping the key and signature outside the kit, and the verifier naming what differs; not image inputs; image and every build input unchanged · label kitfix · replaced BUILD_OFFLINE.sh, docs/REBUILD.md, docs/docker/BUILD_OFFLINE.sh, docs/offline/BUILD_OFFLINE.sh, docs/rebuild-bundle/rebuild_bundle.py · added FILE_MODES.tsv, README.md · record MANIFEST.json repack_history

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/coder/v2.39.0-CE-ubuntu24.04-r2/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/coder/v2.39.0-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.rebuild.jsonbeside the archive (prodasset /data/production/coder/v2.39.0-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-coder-v2.39.0-CE-ubuntu24.04-r2.rebuild.json.sigstorebeside the archive (prodasset /data/production/coder/v2.39.0-CE-ubuntu24.04-r2/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/coder/v2.39.0-CE-ubuntu24.04-r2/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)641
chainssadb, ReadyStack's engine database (not published)961
defectssadb, ReadyStack's engine database (not published)coder v2.39.0-CE-ubuntu24.04-r2
drive_runssadb, ReadyStack's engine database (not published)chain 961
held_roundssadb, ReadyStack's engine database (not published)chain 961
lesson_recallssadb, ReadyStack's engine database (not published)chain 961
micro_step_runssadb, ReadyStack's engine database (not published)chain 961
release_imagessadb, ReadyStack's engine database (not published)coder v2.39.0-CE-ubuntu24.04-r2
stage_eventssadb, ReadyStack's engine database (not published)chain 961
stage_runssadb, ReadyStack's engine database (not published)chain 961
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—