Consul v1.16.4-CE-ubuntu24.04-r4 build trail

How ReadyStack built readystack/consul:v1.16.4-CE-ubuntu24.04-r4 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/consul:v1.16.4-CE-ubuntu24.04-r4
  • Index digestsha256:76238e050914dd4771e6d2d779b35af7027ca698a1971d3221b8679574669301
  • linux/amd64 digestsha256:fdea79b7adb1831de9729f877a759538a2efda4384d1df88b423cd0643bfe49d
  • ArchiveReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.tar.gz
  • Archive SHA-256 nowf0d295de546f9913f14c1e56e0a5017b4c1df1152f68c7430c73a2284e115506
  • Generated2026-11-02T23:33:35Z by KitForge release/build_trail.py
  • Sections9 sections, 3 fully recorded; 14 items not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.trail.json.sigstore ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.trail.json
ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.trail.jsonReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.trail.json.sigstoreReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.trail.mdConsul product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

1 item not recorded
  • ProductConsul (consul) [MANIFEST.json]
  • Release tagv1.16.4-CE-ubuntu24.04-r4 [MANIFEST.json]
  • Imagereadystack/consul:v1.16.4-CE-ubuntu24.04-r4 [MANIFEST.json]
  • Image index digestsha256:76238e050914dd4771e6d2d779b35af7027ca698a1971d3221b8679574669301 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:fdea79b7adb1831de9729f877a759538a2efda4384d1df88b423cd0643bfe49d [ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.tar.gz (bytes 518460747) [MANIFEST.json]
  • Archive sha256 at publishe22877d66059a1705706dcd1b2f9f67cad292a4b393c598ddf79fd27f7773f97 [MANIFEST.json, repack_history[0].previous_tarball_sha256]
  • Archive sha256 nowf0d295de546f9913f14c1e56e0a5017b4c1df1152f68c7430c73a2284e115506 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack history
    • at 2026-11-01 · label kitfix · reason customer kit files brought up to the current engine: BUILD_OFFLINE.sh (kit root, docs/offline, docs/docker); the header of BUILD_OFFLINE.sh no longer says a --provenance rebuild meets a SLSA build level, comment lines only; not image inputs; image and every build input unchanged · previous sha256 e22877d66059a1705706dcd1b2f9f67cad292a4b393c598ddf79fd27f7773f97 · sha256 f0d295de546f9913f14c1e56e0a5017b4c1df1152f68c7430c73a2284e115506 · replaced BUILD_OFFLINE.sh, docs/docker/BUILD_OFFLINE.sh, docs/offline/BUILD_OFFLINE.sh, rebuild.json
    [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/hashicorp/consul [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv1.16.4 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit2b5841d3f6243fc9b24a5f223daeef69761e0317 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashfed15f67fb0cd2b93301c46ea33c61b4dbab2c7c070eff1fab00b3b4f1f79ec3 (files 10293) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:188d676b30583c12a24c4080e54a41e124462d8cd870c1dda77dc9c76c7ab814 [ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1702410563 (utc 2023-12-12T19:49:23Z) [ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af · platform digest sha256:88750ccdd0f2a77fcc00a14b1a48d6409bd8ddb5d7c2dd6ec0b4a2e916daf9d9
    • ref ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.rebuild.json, engine]
  • Not recorded: the engine commit(s) that built it (drive_runs records them for drives from 2026-11-02; this release's drives were rebuilt from line logs, which do not name it)

Why this release exists

Fully recorded
  • Chain651 (created 2026-10-27T01:52:52Z · trigger customer_request · upstream version 1.16.4) [chains, chains #651]
  • Requestbuild request #330 (rebuild) (requested at 2026-10-27T01:49:08Z · requested by kitforge-agent · version 1.16.4) [build_requests, build_requests #330]
  • Reasonrevision v1.16.4-CE-ubuntu24.04-r4: same upstream version rebuilt (retarget.py --rev-bump) [build_requests, build_requests #330 request_reason]
  • Supersedesreadystack/consul:v1.16.4-CE-ubuntu24.04-r2 (chain 517) [chains, chains #517]

The path through the harness

3 items not recorded

3 chains · 9 drives · 18 stages · 4 rewinds

Chain 615 behind it · abandoned

Created 2026-10-22T07:07:47Z, upstream 1.16.4, build request 300 [chains, chains #615]

Abandoned: chain 615 abandoned [watch_queue, watch_queue #8305 resolution]

DriveStartedMinutesBuild hostHow it stopped
7212026-10-22T07:08:08Z15.4build host 4 withhold-publish stage_failed at admin_handbook [drive_runs, drive_runs #721] rebuilt from a build line's log

Chain 634 behind it · abandoned

Created 2026-10-23T15:18:31Z, upstream 1.16.4, build request 311 [chains, chains #634]

DriveStartedMinutesBuild hostHow it stopped
9262026-10-23T15:18:55Z—build host 5 withhold-publish lost [drive_runs, drive_runs #926] rebuilt from a build line's log

Chain 651 release · shipped

Created 2026-10-27T01:52:52Z, upstream 1.16.4, build request 330 [chains, chains #651]

DriveStartedMinutesBuild hostHow it stopped
4052026-10-27T01:53:55Z37.4build host 2 withhold-publish ready_to_ship [drive_runs, drive_runs #405] rebuilt from a build line's log
4072026-10-27T03:36:32Z3.6build host 2 withhold-publish ready_to_ship [drive_runs, drive_runs #407] rebuilt from a build line's log
4092026-10-27T04:15:38Z3.8build host 2 withhold-publish ready_to_ship [drive_runs, drive_runs #409] rebuilt from a build line's log
4112026-10-27T04:39:55Z4.8build host 2 withhold-publish ready_to_ship [drive_runs, drive_runs #411] rebuilt from a build line's log
4152026-10-27T05:50:15Z4.6build host 2 withhold-publish infra_hub_rate_limit at package_archive [drive_runs, drive_runs #415] rebuilt from a build line's log
4172026-10-27T06:14:28Z3.8build host 2 withhold-publish ready_to_ship [drive_runs, drive_runs #417] rebuilt from a build line's log
4222026-10-27T07:40:56Z6.9build host 2 publish-held shipped [drive_runs, drive_runs #422] rebuilt from a build line's log

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-10-27T01:54:00Z2026-10-27T01:54:01Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 —
acquire 2026-10-27T01:54:07Z2026-10-27T01:54:08Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 —
plan 2026-10-27T01:55:10Z2026-10-27T01:55:10Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 —
assemble_kit 2026-10-27T01:58:04Z2026-10-27T01:58:05Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 —
remediate 2026-10-27T01:59:16Z2026-10-27T01:59:17Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 —
build_kit 2026-10-27T02:04:54Z2026-10-27T02:04:55Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 —
verdict 2026-10-27T02:06:13Z2026-10-27T02:06:14Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 —
publish_image 2026-10-27T02:06:51Z2026-10-27T02:06:51Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 —
boot_instance 2026-10-27T02:06:57Z2026-10-27T02:06:58Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 —
sbom 2026-10-27T02:07:09Z2026-10-27T02:07:10Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 —
schema_discovery 2026-10-27T02:07:12Z2026-10-27T02:07:13Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 —
admin_handbook 2026-10-27T02:13:19Z2026-10-27T02:13:20Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 —
db_handbook 2026-10-27T02:18:04Z2026-10-27T02:18:05Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 —
seed_data 2026-10-27T02:18:10Z2026-10-27T02:18:11Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 —
seed_validate 2026-10-27T02:18:12Z2026-10-27T02:18:13Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 —
usecase_validate 2026-10-27T02:18:43Z2026-10-27T02:18:44Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 —
finalize_docs 2026-10-27T02:23:32Z2026-10-27T02:23:33Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 —
package_archive 2026-10-27T02:31:12Z2026-10-27T07:47:43Z6
33 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 vex_shipped
  • G8 scout_grade_a
  • G8 script_copies
  • G8 three_way_sha
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 assetchain_coverage
 —

[stage_runs]

Rewinds

  • 2026-10-27T02:57:56Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py) [stage_events, stage_events #2015]
  • 2026-10-27T03:51:36Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py) [stage_events, stage_events #2016]
  • 2026-10-27T04:35:21Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py) [stage_events, stage_events #2017]
  • 2026-10-27T07:40:28Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py) [stage_events, stage_events #488]
  • Not recorded: why chain 634 was abandoned (no watch_queue row records it)
  • Not recorded: each drive's ticks and first failed check (drive_runs records them for drives from 2026-11-02; these drives were rebuilt from line logs)
  • Not recorded: the sha256 of each stage's artifacts (stage_events records them for stages passed from 2026-11-02; this chain's events were rebuilt from stage_runs and logs) — the archive's CHECKSUMS.sha256 lists the sha256 of every file it ships

Model work per stage

3 items not recorded

Role: writer model. Calls up to 2026-10-27T07:47:43Z.

109 calls over 6 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 not recordednot recorded —
remediate2001 not recordednot recorded —
admin_handbook351303 not recordednot recorded —
db_handbook331103 not recordednot recorded —
usecase_validate2001 not recordednot recorded —
finalize_docs351203 not recordednot recorded —

[micro_step_runs]

  • Not recorded: forced commits (micro_step_runs records them for calls from 2026-11-02)
  • Not recorded: real token counts (recorded per call from 2026-11-02; earlier rows hold only an estimate, which is not shown)
  • Not recorded: the lesson rules shown to the writer model (lesson_recalls holds no rows for this chain: its recorder was silent from 2026-06-06 to 2026-11-02)

Review

2 items not recorded

Role: review model.

5 rounds, 5 counted, $5.94 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-10-27T02:32:53Z 3517 findings to repackage [held_rounds, held_rounds #287] rebuilt from a held-review state file $1.60 not recorded not recorded
22026-10-27T03:40:21Z 015 findings to repackage [held_rounds, held_rounds #288] rebuilt from a held-review state file $1.10 not recorded not recorded
32026-10-27T04:19:59Z 004 clean to repackage [held_rounds, held_rounds #289] rebuilt from a held-review state file $1.27 not recorded not recorded
42026-10-27T04:45:14Z 101 findings [held_rounds, held_rounds #290] rebuilt from a held-review state file $1.07 not recorded not recorded
52026-10-27T07:25:43Z 001 clean to publish [held_rounds, held_rounds #291] rebuilt from a held-review state file $0.90 not recorded not recorded
  • Not recorded: the sha256 of the archive each round reviewed (held_rounds records it for rounds from 2026-11-02; these rounds were rebuilt from state files)
  • Not recorded: the round cap in force at each round (the state files did not keep it)

Defects

Fully recorded
  • Ledger entries160 [defects, defects where product_slug=consul and this tag or chain]
  • Disclosed in the archive42 [docs/defects/defects.json, entries]

160 ledger entries: by severity critical 25, high 42, low 93; by status fixed-before-release 151, fixed-in-release 4, open 5.

DefectSeverityStatusFound byFixed in
RSD-consul-971d2d3d18
Admin handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76836]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-240d475325
Admin handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76837]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-a86d97482d
Admin handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76838]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-c771b68043
Admin handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76839]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-a74da18d3d
Admin handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76840]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-a9d3a67608
Admin handbook: Data does not survive even a restart of the same container. [defects, defects #76841]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-4bc3971b23
Admin handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76842]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-d478da1c8a
Admin handbook: Same restart test: KV lost. [defects, defects #76843]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-ca764cb479
Admin handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76844]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-665e180de8
Database handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76845]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-e62d84f4b7
Database handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76846]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-d142c899d9
Database handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76847]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-852626e7a0
Database handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76848]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-8b2e0bf178
Database handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76849]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-f6d3fc5da3
Database handbook: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76850]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-649f009713
API guide: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76851]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-58d2dce020
API guide: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76852]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-73e5ef18bf
API guide: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76853]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-ad9e86f76a
API guide: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76854]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-13ab0c6138
API guide: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76855]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-7bf7c85115
API guide: Default entrypoint uses -dev (in-memory); mounting a volume at /consul/data does not persist anything, so the documented persistence/replace procedure silently loses all data. [defects, defects #76856]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-df7c3f8eb0
Admin handbook: The web UI is in the binary and served at /ui/; the handbook says it is not bundled. [defects, defects #76857]		highfixed-before-releaseheld review (review model)—
RSD-consul-23815b842c
Admin handbook: The web UI is in the binary and served at /ui/; the handbook says it is not bundled. [defects, defects #76858]		highfixed-before-releaseheld review (review model)—
RSD-consul-70dd0c2191
Admin handbook: The web UI is in the binary and served at /ui/; the handbook says it is not bundled. [defects, defects #76859]		highfixed-before-releaseheld review (review model)—
RSD-consul-cc0c7e2e5a
Database handbook: The web UI is in the binary and served at /ui/; the handbook says it is not bundled. [defects, defects #76860]		highfixed-before-releaseheld review (review model)—
RSD-consul-6412e6b776
Database handbook: The web UI is in the binary and served at /ui/; the handbook says it is not bundled. [defects, defects #76861]		highfixed-before-releaseheld review (review model)—
RSD-consul-d142164eec
Database handbook: The web UI is in the binary and served at /ui/; the handbook says it is not bundled. [defects, defects #76862]		highfixed-before-releaseheld review (review model)—
RSD-consul-ae6e33e121
Database handbook: Sends customers to a separate UI container for a UI already in the image. [defects, defects #76863]		highfixed-before-releaseheld review (review model)—
RSD-consul-b72bde914a
API guide: The web UI is in the binary and served at /ui/; the handbook says it is not bundled. [defects, defects #76864]		highfixed-before-releaseheld review (review model)—
RSD-consul-59d370fd13
API guide: Contradicts the 'Web UI port' wording elsewhere and the image. [defects, defects #76865]		lowfixed-before-releaseheld review (review model)—
RSD-consul-3af020e6a9
Admin handbook: Handbook says the image receives no security patches and omits the ReadyStack source fixes, their behaviour changes (normalized request path; deny header rules match other letter case and any one of… [defects, defects #76866]		highfixed-before-releaseheld review (review model)—
RSD-consul-be3a1288b4
Admin handbook: Handbook says the image receives no security patches and omits the ReadyStack source fixes, their behaviour changes (normalized request path; deny header rules match other letter case and any one of… [defects, defects #76867]		highfixed-before-releaseheld review (review model)—
RSD-consul-ecdb916993
Database handbook: Handbook says the image receives no security patches and omits the ReadyStack source fixes, their behaviour changes (normalized request path; deny header rules match other letter case and any one of… [defects, defects #76868]		highfixed-before-releaseheld review (review model)—
RSD-consul-a5dbc68a54
API guide: Handbook says the image receives no security patches and omits the ReadyStack source fixes, their behaviour changes (normalized request path; deny header rules match other letter case and any one of… [defects, defects #76869]		highfixed-before-releaseheld review (review model)—
RSD-consul-2dbb849e40
Database handbook: Provenance statement omits the fork. [defects, defects #76870]		lowfixed-before-releaseheld review (review model)—
RSD-consul-31b9185ed7
Admin handbook: `consul agent info` is not a subcommand: it runs the agent command and fails. [defects, defects #76871]		highfixed-before-releaseheld review (review model)—
RSD-consul-5f2f24d2ad
Admin handbook: Setting CONSUL_BIND_INTERFACE would not change the bind address. [defects, defects #76872]		highfixed-before-releaseheld review (review model)—
RSD-consul-b1b92725dc
Admin handbook: Unsupported claim. [defects, defects #76873]		lowfixed-before-releaseheld review (review model)—
RSD-consul-76e067514b
Database handbook: Unsupported claim. [defects, defects #76874]		lowfixed-before-releaseheld review (review model)—
RSD-consul-70cd9495bd
API guide: Unsupported claim. [defects, defects #76875]		lowfixed-before-releaseheld review (review model)—
RSD-consul-23ca606241
API guide: Unsupported claim. [defects, defects #76876]		lowfixed-before-releaseheld review (review model)—
RSD-consul-d439805c0d
Admin handbook: The documented -p 8600:8600 publishes only TCP, so the plain UDP dig command shown fails; image exposes 8600/tcp only. [defects, defects #76877]		highfixed-before-releaseheld review (review model)—
RSD-consul-8dd22aed8f
Admin handbook: The documented -p 8600:8600 publishes only TCP, so the plain UDP dig command shown fails; image exposes 8600/tcp only. [defects, defects #76878]		highfixed-before-releaseheld review (review model)—
RSD-consul-2320de4a58
API guide: The documented -p 8600:8600 publishes only TCP, so the plain UDP dig command shown fails; image exposes 8600/tcp only. [defects, defects #76879]		highfixed-before-releaseheld review (review model)—
RSD-consul-5b50caaa50
API guide: The documented -p 8600:8600 publishes only TCP, so the plain UDP dig command shown fails; image exposes 8600/tcp only. [defects, defects #76880]		highfixed-before-releaseheld review (review model)—
RSD-consul-4487703eba
Admin handbook: DNS is not served on 8500. [defects, defects #76881]		lowfixed-before-releaseheld review (review model)—
RSD-consul-5bd3c741a0
API guide: DNS is on 8600 only; 8600/tcp is TCP, not UDP; 8500 does not serve DNS. [defects, defects #76882]		highfixed-before-releaseheld review (review model)—
RSD-consul-fa18b4fc60
API guide: DNS is not served on 8500. [defects, defects #76883]		lowfixed-before-releaseheld review (review model)—
RSD-consul-628324dde6
Database handbook: DNS is not served on 8500. [defects, defects #76884]		lowfixed-before-releaseheld review (review model)—
RSD-consul-25157c43b3
Database handbook: DNS is not served on 8500. [defects, defects #76885]		lowfixed-before-releaseheld review (review model)—
RSD-consul-a5aac11d2b
Admin handbook: The documented -p 8600:8600 publishes only TCP, so the plain UDP dig command shown fails; image exposes 8600/tcp only. [defects, defects #76886]		highfixed-before-releaseheld review (review model)—
RSD-consul-b68c9c217b
Database handbook: The documented -p 8600:8600 publishes only TCP, so the plain UDP dig command shown fails; image exposes 8600/tcp only. [defects, defects #76887]		highfixed-before-releaseheld review (review model)—
RSD-consul-ffa89f2379
API guide: The documented -p 8600:8600 publishes only TCP, so the plain UDP dig command shown fails; image exposes 8600/tcp only. [defects, defects #76888]		highfixed-before-releaseheld review (review model)—
RSD-consul-d40a7559b5
Admin handbook: Unsupported explanation. [defects, defects #76889]		lowfixed-before-releaseheld review (review model)—
RSD-consul-4e109969a9
Admin handbook: Unsupported/irrelevant explanation (neither port is below 1024). [defects, defects #76890]		lowfixed-before-releaseheld review (review model)—
RSD-consul-f32d26715f
Database handbook: Passwd entry has a home directory and shell. [defects, defects #76891]		lowfixed-before-releaseheld review (review model)—
RSD-consul-b436e42efd
Database handbook: ACLs are configured by configuration, not a command-line flag. [defects, defects #76892]		lowfixed-before-releaseheld review (review model)—
RSD-consul-1372319ed0
Admin handbook: Interactive shell needs -it. [defects, defects #76893]		lowfixed-before-releaseheld review (review model)—
RSD-consul-abb049eee3
Database handbook: Interactive shell needs -it. [defects, defects #76894]		lowfixed-before-releaseheld review (review model)—
RSD-consul-7f31c6eb53
API guide: Contradicts the append-arguments behaviour documented elsewhere; docker exec cannot reconfigure the agent. [defects, defects #76895]		lowfixed-before-releaseheld review (review model)—
RSD-consul-4af3aa646b
Database handbook: The list contains no KV endpoints. [defects, defects #76896]		lowfixed-before-releaseheld review (review model)—
RSD-consul-956ef05a60
Admin handbook: The list contains no KV endpoints. [defects, defects #76897]		lowfixed-before-releaseheld review (review model)—
RSD-consul-909919b3e7
API guide: The list contains no KV endpoints. [defects, defects #76898]		lowfixed-before-releaseheld review (review model)—
RSD-consul-5c6a41f86a
Admin handbook: `consul agent` has no `-bind-interface` flag; a customer following the sentence gets an agent that refuses to start. [defects, defects #77173]		highfixed-before-releaseheld review (review model)—
RSD-consul-5c53784696
Admin handbook: GET /v1/status/leader returns HTTP 200 with an empty body when the cluster has no leader, so a 200 (and the HEALTHCHECK) does not show that a leader exists or was elected. [defects, defects #77174]		highfixed-before-releaseheld review (review model)—
RSD-consul-e1b4c69b85
Admin handbook: GET /v1/status/leader returns HTTP 200 with an empty body when the cluster has no leader, so a 200 (and the HEALTHCHECK) does not show that a leader exists or was elected. [defects, defects #77175]		highfixed-before-releaseheld review (review model)—
RSD-consul-3bab4481e4
Admin handbook: GET /v1/status/leader returns HTTP 200 with an empty body when the cluster has no leader, so a 200 (and the HEALTHCHECK) does not show that a leader exists or was elected. [defects, defects #77176]		highfixed-before-releaseheld review (review model)—
RSD-consul-698d979b98
API guide: GET /v1/status/leader returns HTTP 200 with an empty body when the cluster has no leader, so a 200 (and the HEALTHCHECK) does not show that a leader exists or was elected. [defects, defects #77177]		highfixed-before-releaseheld review (review model)—
RSD-consul-5601a5714f
API guide: GET /v1/status/leader returns HTTP 200 with an empty body when the cluster has no leader, so a 200 (and the HEALTHCHECK) does not show that a leader exists or was elected. [defects, defects #77178]		highfixed-before-releaseheld review (review model)—
RSD-consul-848636908c
API guide: GET /v1/status/leader returns HTTP 200 with an empty body when the cluster has no leader, so a 200 (and the HEALTHCHECK) does not show that a leader exists or was elected. [defects, defects #77179]		highfixed-before-releaseheld review (review model)—
RSD-consul-cd45b308fe
API guide: GET /v1/status/leader returns HTTP 200 with an empty body when the cluster has no leader, so a 200 (and the HEALTHCHECK) does not show that a leader exists or was elected. [defects, defects #77180]		highfixed-before-releaseheld review (review model)—
RSD-consul-72c13e2654
Database handbook: GET /v1/status/leader returns HTTP 200 with an empty body when the cluster has no leader, so a 200 (and the HEALTHCHECK) does not show that a leader exists or was elected. [defects, defects #77181]		highfixed-before-releaseheld review (review model)—
RSD-consul-4a3687b75b
Database handbook: GET /v1/status/leader returns HTTP 200 with an empty body when the cluster has no leader, so a 200 (and the HEALTHCHECK) does not show that a leader exists or was elected. [defects, defects #77182]		highfixed-before-releaseheld review (review model)—
RSD-consul-541640a82f
API guide: The image contains setuid binaries. [defects, defects #77183]		lowfixed-before-releaseheld review (review model)—
RSD-consul-4a585911e3
Admin handbook: /v1/catalog/service/consul returns instances of one service (the Consul servers), not the list of services. [defects, defects #77184]		lowfixed-before-releaseheld review (review model)—
RSD-consul-c3c80ba0e8
Admin handbook: 'Stateless' contradicts the Persistence sections that describe state in a data directory. [defects, defects #77185]		lowfixed-before-releaseheld review (review model)—
RSD-consul-2bc3c68533
Database handbook: 'Stateless' contradicts the persistence sections of the same handbook. [defects, defects #77186]		lowfixed-before-releaseheld review (review model)—
RSD-consul-769a4d0862
API guide: 'Stateless' contradicts line 676 ('stateful Go binary') and the persistence sections. [defects, defects #77187]		lowfixed-before-releaseheld review (review model)—
RSD-consul-48eda00e6b
API guide: Contradicts the 'stateless' wording at lines 83 and in the other handbooks. [defects, defects #77188]		lowfixed-before-releaseheld review (review model)—
RSD-consul-c9383591e4
Admin handbook: The UI is on in the default command (GET /ui/ returned 200); 'if enabled' contradicts the 'web UI is in the image' statements elsewhere. [defects, defects #77189]		lowfixed-before-releaseheld review (review model)—
RSD-consul-8cae57605e
Database handbook: Same as above. [defects, defects #77190]		lowfixed-before-releaseheld review (review model)—
RSD-consul-9abdd9ed8a
API guide: Same as above. [defects, defects #77191]		lowfixed-before-releaseheld review (review model)—
RSD-consul-6f3c826f24
Admin handbook: The heading announces what is not included, then states the UI is bundled. [defects, defects #77192]		lowfixed-before-releaseheld review (review model)—
RSD-consul-bb59fe4ebd
Database handbook: Dangling sentence left from the superseded 'UI not bundled' wording; nothing precedes it that could affect capability. [defects, defects #77193]		lowfixed-before-releaseheld review (review model)—
RSD-consul-17e797801e
API guide: The agent starts with Client Addr 0.0.0.0, not 127.0.0.1. [defects, defects #77194]		lowfixed-before-releaseheld review (review model)—
RSD-consul-23ac2073e2
API guide: Same as above. [defects, defects #77195]		lowfixed-before-releaseheld review (review model)—
RSD-consul-8baf9d6c30
Release notes: Unqualified Docker Scout zero; Scout printed C (61%) with 1 fixable high. [defects, defects #77196]		lowfixed-before-releaseheld review (review model)—
RSD-consul-29881d24c6
VERIFY.md: Count omits the VEX qualification (round-1 finding RSD-consul-066420ba6c, not corrected). [defects, defects #77197]		lowfixed-before-releaseheld review (review model)—
RSD-consul-bad09d49f3
PROVENANCE.md: Round-2 minor, third round uncorrected: Provenance omits the fork the image is built from. [defects, defects #77199]		lowfixed-before-releaseheld review (review model)—
RSD-consul-e6542bee3f
Release notes: Contradicts the same document's statement that r2 is built from the ReadyStackFree fork. [defects, defects #77200]		lowfixed-before-releaseheld review (review model)—
RSD-consul-efe4f861a7
Admin handbook: Same defect class as the round-2 major (a 200 from /v1/status/leader does not show a leader exists): the sentence promises that a passing health check means KV and service discovery work, and they… [defects, defects #77525]		highfixed-before-releaseheld review (review model)—
RSD-consul-4aa0acbf27
Admin handbook: A healthy container does not confirm the KV store is operational: with no leader the health check passes and every KV write fails. [defects, defects #77526]		highfixed-before-releaseheld review (review model)—
RSD-consul-9c92fd541b
Admin handbook: Following the sentence for a cluster puts several servers on one data-dir. [defects, defects #77527]		highfixed-before-releaseheld review (review model)—
RSD-consul-ff3d94176c
API guide: Paraphrase of the round-2 major: the sentence says 200 means healthy and ready to serve requests, but a leaderless server answers 200 and serves no KV or catalog writes (500 No cluster leader). [defects, defects #77528]		highfixed-before-releaseheld review (review model)—
RSD-consul-22bffc2b17
Admin handbook: Same class as the round-2 leader finding: 'ready' is not what a 200 shows (leaderless server answers 200, healthy). [defects, defects #77529]		lowfixed-before-releaseheld review (review model)—
RSD-consul-abc60927ed
Admin handbook: Same class as the round-2 leader finding: 'ready' is not what a 200 shows (leaderless server answers 200, healthy). [defects, defects #77530]		lowfixed-before-releaseheld review (review model)—
RSD-consul-06df72f2b6
Admin handbook: Same class as the round-2 leader finding: 'ready' is not what a 200 shows (leaderless server answers 200, healthy). [defects, defects #77531]		lowfixed-before-releaseheld review (review model)—
RSD-consul-3c011c8b2b
Database handbook: Same class as the round-2 leader finding: 'ready' is not what a 200 shows (leaderless server answers 200, healthy). [defects, defects #77532]		lowfixed-before-releaseheld review (review model)—
RSD-consul-8348910416
Database handbook: Same class as the round-2 leader finding: 'ready' is not what a 200 shows (leaderless server answers 200, healthy). [defects, defects #77533]		lowfixed-before-releaseheld review (review model)—
RSD-consul-c3219df036
API guide: Same class as the round-2 leader finding: 'ready' is not what a 200 shows (leaderless server answers 200, healthy). [defects, defects #77534]		lowfixed-before-releaseheld review (review model)—
RSD-consul-338333a9fb
Admin handbook: Round-2 minor not fixed here: the endpoint returns the nodes of one service (the servers), not every agent in the cluster. [defects, defects #77535]		lowfixed-before-releaseheld review (review model)—
RSD-consul-3561cfd308
Admin handbook: Round-2 minor not fixed here: the endpoint returns the nodes of one service (the servers), not every agent in the cluster. [defects, defects #77536]		lowfixed-before-releaseheld review (review model)—
RSD-consul-dcdcf8fb83
Release notes: Round-2 minor, uncorrected: unqualified Docker Scout zero. [defects, defects #77537]		lowfixed-before-releaseheld review (review model)—
RSD-consul-70344c2947
Release notes: Known issues lines 45-49 print internal review findings as customer-facing items ('Unqualified Docker Scout zero', 'round-1 finding ... [defects, defects #77538]		lowfixed-before-releaseheld review (review model)—
RSD-consul-ea35eecebc
Release notes: Round-2 minor not fixed: line 9 says the image is built from hashicorp/consul at v1.16.4, line 26 says it is built from the ReadyStackFree fork tag v1.16.4-cve-r1. [defects, defects #77539]		lowfixed-before-releaseheld review (review model)—
RSD-consul-9455c36e24
VERIFY.md: Round-2 minor not corrected: the count omits the VEX qualification. [defects, defects #77540]		lowfixed-before-releaseheld review (review model)—
RSD-consul-ef59e03f0f
Docker Hub README: 'built clean-room from official upstream source' contradicts the fork the image is built from (the same README and RELEASE_NOTES.md:26). [defects, defects #77541]		lowfixed-before-releaseheld review (review model)—
RSD-consul-11edbb208b
API guide: The agent also listens on 8502 (gRPC) and 8503 (gRPC TLS) on all interfaces; 'two ports' understates what a customer who publishes ports or uses host networking exposes. [defects, defects #77542]		lowfixed-before-releaseheld review (review model)—
RSD-consul-5418bfd8d2
Admin handbook: 'readiness' is not what a 200 from /v1/status/leader shows; a server with no leader answers 200 and serves no KV or catalog writes. [defects, defects #77876]		lowfixed-before-releaseheld review (review model)—
RSD-consul-7dc3295d23
Admin handbook: Recommends a bare 200 as a readiness check; a leaderless server passes it but every KV write fails. [defects, defects #77877]		lowfixed-before-releaseheld review (review model)—
RSD-consul-c777d049a5
API guide: 'container readiness' (also the section title 'Health Checking and Readiness', line 286) overstates a 200. [defects, defects #77878]		lowfixed-before-releaseheld review (review model)—
RSD-consul-6e553f6b34
API guide: The endpoint returns the Raft servers' addresses, not every agent in the cluster (carried round-2 class). [defects, defects #77879]		lowfixed-before-releaseheld review (review model)—
RSD-consul-08af82eea1
Database handbook: Raft peers are the servers; client agents are never listed. [defects, defects #77880]		lowfixed-before-releaseheld review (review model)—
RSD-consul-2f7c905b66
API guide: The example is an A query, which returns addresses only, not ports. [defects, defects #77881]		lowfixed-before-releaseheld review (review model)—
RSD-consul-2f505372b1
API guide: Contradicts line 702 of the same guide. [defects, defects #77882]		lowfixed-before-releaseheld review (review model)—
RSD-consul-ccdcfec4ef
Documentation: The record published beside the sale tar says upstream source; the image is built from the fork (carried from round 4, unfixed). [defects, defects #77888]		lowfixed-before-releaseheld review (review model)—
RSD-consul-d390091817
Release notes: Internal review findings printed as customer-facing Known issues; not product issues, and their wording defects are still present. [defects, defects #95283]		lowfixed-in-releaseheld review (review model)v1.16.4-CE-ubuntu24.04-r4
RSD-consul-c5a058858a
Release notes: A Known issue describing the Known issues list itself. [defects, defects #95284]		lowfixed-in-releaseheld review (review model)v1.16.4-CE-ubuntu24.04-r4
RSD-consul-80686e0652
Release notes: Unqualified Docker Scout zero; it holds only with the VEX (carried). [defects, defects #95285]		lowfixed-in-releaseheld review (review model)v1.16.4-CE-ubuntu24.04-r4
RSD-consul-e6ef29bc9e
VERIFY.md: Count omits the VEX qualification (carried). [defects, defects #95286]		lowopenheld review (review model)—
RSD-consul-762cd286b2
Docker Hub README: Count omits the VEX qualification (carried). [defects, defects #95287]		lowopenheld review (review model)—
RSD-consul-a12bbba5f1
Release notes: Line 9 names hashicorp/consul as the build source; line 26 says the fork (carried). [defects, defects #95288]		lowopenheld review (review model)—
RSD-consul-ffd5e58573
Docker Hub README: The image is built from the fork, not official upstream source (carried). [defects, defects #95289]		lowopenheld review (review model)—
RSD-consul-b3b2f0bdde
PROVENANCE.md: Provenance omits the fork the image is built from (carried). [defects, defects #95290]		lowopenheld review (review model)—
RSD-consul-3324a905c4
Documentation: The record published beside the sale tar says upstream's source; the image is built from the fork. [defects, defects #95291]		lowfixed-in-releaseheld review (review model)v1.16.4-CE-ubuntu24.04-r4
RSD-consul-c95466ef5d
API guide: -v is placed after the image name, so docker hands it to `consul agent` as an agent flag and the documented persistence command fails; no volume is mounted. [defects, defects #95854]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-d07665c01c
API guide: -v after the image is handed to consul as an unknown flag, so the command errors out instead of mounting the host directory. [defects, defects #95855]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-e5d795dadb
API guide: The suggested command for keeping the UI in server mode does not start: a server needs -data-dir (and -bootstrap-expect to elect a leader). [defects, defects #95856]		criticalfixed-before-releaseheld review (review model)—
RSD-consul-a7e2af0e42
Admin handbook: Appending -server -data-dir to the default entrypoint keeps -dev, which holds KV and catalog in memory; the customer loses data despite following the documented flags. [defects, defects #95857]		highfixed-before-releaseheld review (review model)—
RSD-consul-b08f4e1a08
Admin handbook: The only example of appending flags implies persistence, but the agent still runs with -dev and discards all data. [defects, defects #95858]		highfixed-before-releaseheld review (review model)—
RSD-consul-148fb43327
Database handbook: The unpatched-CVE list names CVE-2025-26808 instead of CVE-2026-2808, contradicting every other list in the handbook. [defects, defects #95859]		highfixed-before-releaseheld review (review model)—
RSD-consul-0b5607abe4
Database handbook: `consul info` queries a running agent; in a fresh container started with --entrypoint there is no agent, so the documented example fails. [defects, defects #95860]		highfixed-before-releaseheld review (review model)—
RSD-consul-614d3d3b5e
Database handbook: The example is introduced as looking up the Consul service itself but queries `web` and omits `-p 8600`, so it fails; line 447 omits -p 8600 as well. [defects, defects #95861]		highfixed-before-releaseheld review (review model)—
RSD-consul-bd1776ef95
Database handbook: The probe URL is /v1/status/leader, not the root path; the sentence contradicts line 282. [defects, defects #95862]		lowfixed-before-releaseheld review (review model)—
RSD-consul-84b4b71e36
Admin handbook: Contradicts lines 141 and 274: the default command persists nothing. [defects, defects #95863]		lowfixed-before-releaseheld review (review model)—
RSD-consul-8ccecb445a
Admin handbook: sudo is not in the image. [defects, defects #95864]		lowfixed-before-releaseheld review (review model)—
RSD-consul-e7bcbf1de4
Admin handbook: Consul has a built-in ACL system; only its enablement is absent by default. [defects, defects #95865]		lowfixed-before-releaseheld review (review model)—
RSD-consul-15876b8489
Admin handbook: The backslashes are literal inside the code span, so the format shown is not what the endpoint returns. [defects, defects #95866]		lowfixed-before-releaseheld review (review model)—
RSD-consul-549cb9a7b7
Admin handbook: Client agents are not listed; contradicts line 488. [defects, defects #95867]		lowfixed-before-releaseheld review (review model)—
RSD-consul-4f83382091
Admin handbook: A 200 from /v1/status/leader does not show readiness; a leaderless server passes it but KV writes fail (same class as the previous round). [defects, defects #95868]		lowfixed-before-releaseheld review (review model)—
RSD-consul-c9ba3e92de
Admin handbook: The Command-Line Health Queries example is a KV read, not a health query. [defects, defects #95869]		lowfixed-before-releaseheld review (review model)—
RSD-consul-b0ef2a140b
API guide: Presents the endpoint as a leader check while the guide elsewhere states the 200 is returned without a leader. [defects, defects #95870]		lowfixed-before-releaseheld review (review model)—
RSD-consul-35fd5777cd
API guide: The check does not show readiness: a leaderless server is healthy but cannot serve writes. [defects, defects #95871]		lowfixed-before-releaseheld review (review model)—
RSD-consul-2629889d4f
API guide: The Raft database is in the raft/ subdirectory. [defects, defects #95872]		lowfixed-before-releaseheld review (review model)—
RSD-consul-19648f71cd
API guide: DNS follows -client 0.0.0.0, not the bind address; only Raft/Serf are on localhost. [defects, defects #95873]		lowfixed-before-releaseheld review (review model)—
RSD-consul-4dd1e42d4d
API guide: Consul's DNS interface does not serve KV lookups. [defects, defects #95874]		lowfixed-before-releaseheld review (review model)—
RSD-consul-1827fd4c8b
API guide: Contradicts ADMIN_HANDBOOK.md:710: a stopped container remains and blocks re-using its name. [defects, defects #95875]		lowfixed-before-releaseheld review (review model)—
RSD-consul-9ccc8512d7
API guide: Unsupported claim: the record describes bypass of path-based intentions, not request smuggling. [defects, defects #95876]		lowfixed-before-releaseheld review (review model)—
RSD-consul-35d8f9637c
API guide: Overstates the BUSL restriction. [defects, defects #95877]		lowfixed-before-releaseheld review (review model)—
RSD-consul-106a0b94eb
Database handbook: The command omits -bootstrap-expect=1 (the same class as the round-1 critical): a lone server never elects a leader. [defects, defects #96719]		highfixed-before-releaseheld review (review model)—
RSD-consul-7ba6ccf7e8
Admin handbook: -dev starts a server, not a client agent, and -client is the API listen address, not an agent mode; agents cannot join because Serf/Raft are on loopback. [defects, defects #96720]		lowfixed-before-releaseheld review (review model)—
RSD-consul-2895938ee1
Admin handbook: consul info reports agent/raft/serf statistics, not service or node health; it does not show whether KV writes will work. [defects, defects #96721]		lowfixed-before-releaseheld review (review model)—
RSD-consul-2c81784519
API guide: The Quick Start already created a container named consul publishing 8500; run in sequence, this command fails with a name conflict (and a port conflict while the first runs). [defects, defects #96722]		lowfixed-before-releaseheld review (review model)—
RSD-consul-e0fe71c74d
API guide: GET also fails without a leader. [defects, defects #96723]		lowfixed-before-releaseheld review (review model)—
RSD-consul-1661bb7827
API guide: Garbled: the bind address is not a port; contradicts the 'Default Configuration' section at the end of the guide. [defects, defects #96724]		lowfixed-before-releaseheld review (review model)—
RSD-consul-4a6a55e7c9
Admin handbook: The sentence says no data is written to disk with the appended flags; measured, the agent writes node-id. [defects, defects #97538]		lowfixed-before-releaseheld review (review model)—
RSD-consul-41f8451f68
API guide: The multi-server advice omits that every documented command binds Raft/Serf to 127.0.0.1, so servers started as documented cannot reach each other's Raft port; this is inconsistent with… [defects, defects #97539]		lowfixed-before-releaseheld review (review model)—
RSD-consul-695fcc63ea
API guide: The agent does not run without persisting; it refuses to start. [defects, defects #97540]		lowfixed-before-releaseheld review (review model)—
RSD-consul-da6924e8e6
API guide: The host-path example fails as written unless /my/data is already writable by UID 999, and the example gives no such prerequisite; the named-volume examples elsewhere work. [defects, defects #97541]		lowfixed-before-releaseheld review (review model)—
RSD-consul-fdd72a8d5d
API guide: The rewritten Key-Value Store example makes the host directory with 'chmod 755', which gives write access only to the directory's owner (the host user or root), not to UID 999. [defects, defects #97980]		criticalfixed-before-releaseheld review (review model)—

Verification

3 items not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:fdea79b7adb1831de9729f877a759538a2efda4384d1df88b423cd0643bfe49d · published digest sha256:fdea79b7adb1831de9729f877a759538a2efda4384d1df88b423cd0643bfe49d · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 161) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks cosign, scan_grade, tag_base_os, vex_shipped, scout_grade_a, script_copies, three_way_sha, offline_rebuild, rebuild_manifest, artifact_coverage, assetchain_coverage) [stage_runs, stage_runs chain 651 package_archive gate_result.g8.result]
  • Grade at releaseB (percent 72 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-10-27T07:41:15Z · failing 1 fixable critical/high vulnerability (1 high) in 1 package, e.g. github.com/hashicorp/consul 1.18.0 (fixed in 1.20.1)., Docker Scout counts 96 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • First own scan of the releaseA (at 2026-10-27T07:47:57Z · score 100 · rubric cerodeo-v1 · fixable critical 0 · fixable high 0 · syft 1.54.1 · grype 0.120.1 · grype db v6.1.10@2026-10-27T06:30:41Z) [image_scans, image_scans #1310]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-10-27T07:41:02Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [docs/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3621643674 · transparency-log entry · integrated 2026-11-01T05:45:10Z) [ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]

Offline clean-room rebuilds

  • 2026-10-27T02:32:55Z on build host 2 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:fdea79b7adb1831de9729f877a759538a2efda4384d1df88b423cd0643bfe49d [clean-room rebuild ledger, runs[422]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
  • Not recorded: the attestations' transparency-log entries (no attestation record in the release's workspace)
  • Not recorded: the pins record (docs/PINS.md is not in this archive as generated; a repack that adds it is appended to this trail's history)

Publication

2 items not recorded
  • Image pushed (internal tag), publish_image passed2026-10-27T02:06:51Z [stage_runs, stage_runs chain 651 stage publish_image]
  • Archive manifests written2026-10-27T07:42:53Z [PUBLISH_MANIFEST.json, published_at]
  • Archive cut over on prodasset, package_archive passed2026-10-27T07:47:43Z [stage_runs, stage_runs chain 651 stage package_archive]
  • Cut-over markerpresent (chain 651) [.cutover.json]
  • Not recorded: when the release tag was promoted (the promotion record in the archive was written before the promotion, and the release's workspace no longer holds this chain)
  • Not recorded: the site event's time (the release checklist is in the chain's workspace, which no longer holds this chain)

Packages and CPU level

Fully recorded
  • Packages in the image356 (scanned 2026-11-02T06:30:04Z · source backfill:daily-scan) [release_images, package_count]
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 743 · probed 2026-11-02T17:09:46Z · source backfill) [release_images, isa_level_hard]

History

1 event
  • 2026-11-02T23:33:35Z generated: by KitForge release/build_trail.py · generator commit 916780cc218cf013bd623a8c085aaf73d3b053d0 · note backfill: built after the release from its records

Records

24 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/PROMOTION_RECORD.jsoninside the archive (ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.tar.gz)—
.cutover.jsonbeside the archive (prodasset /data/production/consul/v1.16.4-CE-ubuntu24.04-r4/)—
MANIFEST.jsonbeside the archive (prodasset /data/production/consul/v1.16.4-CE-ubuntu24.04-r4/)—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/consul/v1.16.4-CE-ubuntu24.04-r4/)—
ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.rebuild.jsonbeside the archive (prodasset /data/production/consul/v1.16.4-CE-ubuntu24.04-r4/)—
ReadyStack-consul-v1.16.4-CE-ubuntu24.04-r4.rebuild.json.sigstorebeside the archive (prodasset /data/production/consul/v1.16.4-CE-ubuntu24.04-r4/)—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/consul/v1.16.4-CE-ubuntu24.04-r4/)—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)330
chainssadb, ReadyStack's engine database (not published)615, 634, 651
defectssadb, ReadyStack's engine database (not published)consul v1.16.4-CE-ubuntu24.04-r4
drive_runssadb, ReadyStack's engine database (not published)chain 615, chain 634, chain 651
held_roundssadb, ReadyStack's engine database (not published)chain 651
image_scanssadb, ReadyStack's engine database (not published)1310
micro_step_runssadb, ReadyStack's engine database (not published)chain 651
release_imagessadb, ReadyStack's engine database (not published)consul v1.16.4-CE-ubuntu24.04-r4
stage_eventssadb, ReadyStack's engine database (not published)chain 651
stage_runssadb, ReadyStack's engine database (not published)chain 651
watch_queuesadb, ReadyStack's engine database (not published)8305