CoreDNS v1.14.2-CE-ubuntu24.04-r2 build trail

How ReadyStack built readystack/coredns:v1.14.2-CE-ubuntu24.04-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/coredns:v1.14.2-CE-ubuntu24.04-r2
  • Index digestsha256:136912fbcb8e25ea2e76b74b922556d006d8db92250b373a8b447bee047c366a
  • linux/amd64 digestsha256:c777c878e9b29e7c7f4a86e392ffc591350ccf0c02c3d57d38c410f74b4c2eed
  • ArchiveReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.tar.gz
  • Archive SHA-256 now7e2a11978b6a35b59e21422ffe17df0104cb091ab1b154a9966f397810a9c8c8
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-07T05:30:32Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.trail.json.sigstore ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.trail.json
ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.trail.jsonReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.trail.json.sigstoreReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.trail.mdCoreDNS product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductCoreDNS (coredns) [MANIFEST.json]
  • Release tagv1.14.2-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Imagereadystack/coredns:v1.14.2-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Image index digestsha256:136912fbcb8e25ea2e76b74b922556d006d8db92250b373a8b447bee047c366a [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:c777c878e9b29e7c7f4a86e392ffc591350ccf0c02c3d57d38c410f74b4c2eed [ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.tar.gz (bytes 466099705) [MANIFEST.json]
  • Archive sha256 at publish7e2a11978b6a35b59e21422ffe17df0104cb091ab1b154a9966f397810a9c8c8 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/coredns/coredns [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv1.14.2 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commitdd1df4f5db93767a44e37638df44969503b320d2 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashf69cbed3da6f6a1dbbddc86418a6aae8588c6ecf4c604208b9eba41225f42670 (files 917) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:befce660b4332a048fb32e2af89e2e6f615e726db3bb5c774d47577e77175c2a [ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1772772585 (utc 2026-03-06T04:49:45Z) [ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af · platform digest sha256:88750ccdd0f2a77fcc00a14b1a48d6409bd8ddb5d7c2dd6ec0b4a2e916daf9d9
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.rebuild.json, engine]
  • Engine commit(s)
    • commit c5b3141ed10b7ce0cea293da1be76d941c96da6f · dirty yes · first drive 3568
    • commit 628ddf42a9b85c4b4257577579c4d816c681f78e · dirty yes · first drive 3572
    • commit a40e4d9d4d44a5f8647c6bf01ffdee4ed8801afd · dirty yes · first drive 3582
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain841 (created 2026-11-07T04:34:09Z · trigger customer_request · upstream version v1.14.2) [chains, chains #841]
  • Requestbuild request #526 (rebuild) (requested at 2026-11-07T02:01:54Z · requested by kitforge-agent · version v1.14.2) [build_requests, build_requests #526]
  • Reasonrerelease agenda REVISION -> v1.14.2-CE-ubuntu24.04-r2 (decay loop, IMP-08) [build_requests, build_requests #526 request_reason]
  • Supersedesreadystack/coredns:v1.14.2-CE-ubuntu24.04-r1 (chain 782) [chains, chains #782]

The path through the harness

Fully recorded

1 chain · 3 drives · 18 stages · 2 rewinds

Chain 841 release · ready_to_ship

Created 2026-11-07T04:34:09Z, upstream v1.14.2, build request 526 [chains, chains #841]

DriveStartedMinutesBuild hostHow it stopped
35682026-11-07T04:34:32Z16.1build host 3 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #3568]
35722026-11-07T04:58:44Z1.6build host 3 publish-held infra_hub_rate_limit at package_archive; 1 tick [drive_runs, drive_runs #3572]
35822026-11-07T05:26:25Z—build host 3 publish-held not recorded [drive_runs, drive_runs #3582]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-07T04:34:42Z2026-11-07T04:34:43Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 64c495a9505a…
acquire 2026-11-07T04:34:47Z2026-11-07T04:34:48Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 60dfd4e61987…
license_file f0530760b1e2…
custody_inputs 059e8d3f3ffe…
source_tree_hash aecfaa5c3559…
source_file_manifest 84cc5f6a1462…
plan 2026-11-07T04:35:23Z2026-11-07T04:35:24Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 01d31bcdd77a…
input_pin_plan 3352c424ce3e…
toolchain_lock 04a42a99b823…
assemble_kit 2026-11-07T04:38:27Z2026-11-07T04:38:28Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 1672230a2fd2…
build_recipe 39ef39491988…
system_pinning 01ba4719c80b…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 190fc9fd4be9…
verify_offline_sh 3e8184ea230c…
base_image_digests 660f9f9aac04…
dockerfile_offline 1672230a2fd2…
first_build_digest 3df88787277e…
remediate 2026-11-07T04:39:19Z2026-11-07T04:39:20Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 18676d0b3dae…
security_report 46dc439e2410…
build_kit 2026-11-07T04:43:39Z2026-11-07T04:43:40Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 08c73ee4be3a…
locked_digest 8e80e39cc955…
freeze_manifest 0f917c597199…
offline_rebuild_transcript 9077fd3f4777…
verdict 2026-11-07T04:44:12Z2026-11-07T04:44:13Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict a5e23a92a773…
publish_image 2026-11-07T04:44:44Z2026-11-07T04:44:45Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 4bd04128ff16…
promotion_record 81ff4c6c2a95…
boot_instance 2026-11-07T04:44:51Z2026-11-07T04:44:56Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle caa9fd22d001…
sbom 2026-11-07T04:45:06Z2026-11-07T04:45:07Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md d3811fbea693…
sbom_json 1895399bc531…
schema_discovery 2026-11-07T04:45:09Z2026-11-07T04:45:10Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 247b0dcbebf8…
dependency_tree 678b1ee8a637…
table_classification afe0b144fc77…
admin_handbook 2026-11-07T04:45:16Z2026-11-07T04:45:17Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 1e6cea19a82d…
admin_handbook 205846c43e0b…
db_handbook 2026-11-07T04:45:26Z2026-11-07T04:45:27Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 1e3ed0f6a008…
seed_isolation b656e70350e5…
seed_data 2026-11-07T04:45:32Z2026-11-07T04:45:32Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 0fa400569706…
seed_cases_json f3d9d24eab50…
seed_validate 2026-11-07T04:45:35Z2026-11-07T04:45:36Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract f24bf1a19753…
usecase_validate 2026-11-07T04:45:45Z2026-11-07T04:45:46Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests 71ca6a230ca6…
test_results a33d488d1ecc…
usecase_contract 0872abd74478…
finalize_docs 2026-11-07T04:45:52Z2026-11-07T04:45:53Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json a121d6682516…
release_notes e106056ef84e…
api_integration_guide c233d6c44dda…
package_archive invalidated 2026-11-07T04:58:12Z 2026-11-07T04:50:33Z2026-11-07T04:50:35Z1
34 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 629d84eeaa80…
checksums cf231830646e…
verify_md bee8598ec5d8…
rebuild_md 692abdf05b5f…
manifest_txt 2a214c20e9ea…
actions_jsonl a35a83d73193…
provenance_md 6a821b67f582…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 477cce493f0d…

[stage_runs]

Rewinds

  • 2026-11-07T04:58:12Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #23895]
  • 2026-11-07T05:26:00Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #24004]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-07T04:50:35Z.

4 calls over 2 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 08672 —
remediate2001 013675 L-A08, L-038, L-036, L-034, L-032

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.31 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-07T04:51:23Z 000 clean to publish [held_rounds, held_rounds #1431] $0.31 3 rounds, $40.00 629d84eeaa80…

Defects

Fully recorded
  • Ledger entries4 [defects, defects where product_slug=coredns and this tag or chain]
  • Disclosed in the archive0 [docs/defects/defects.json, entries]

4 ledger entries: by severity low 4; by status fixed-in-release 4.

DefectSeverityStatusFound byFixed in
RSD-coredns-721038eea3
Database handbook: Presents 8080/8181 as image-exposed ports (round-1/2 class, still present here). [defects, defects #162547]		lowfixed-in-releaseheld review (review model)v1.14.2-CE-ubuntu24.04-r2
RSD-coredns-d54ffaa06e
Database handbook: Round-1/2 finding still present: kubeadm builds the image as <dns.imageRepository>/coredns:<tag>, so a registry host alone resolves to <host>/coredns, not readystack/coredns. [defects, defects #162548]		lowfixed-in-releaseheld review (review model)v1.14.2-CE-ubuntu24.04-r2
RSD-coredns-1d037a5f72
Admin handbook: The image HEALTHCHECK probes only http://127.0.0.1:8080/health; it does not need the ready plugin on 8181. [defects, defects #162549]		lowfixed-in-releaseheld review (review model)v1.14.2-CE-ubuntu24.04-r2
RSD-coredns-c5384a3cb6
API guide: The 'apply these security settings' command has no image argument, so docker run rejects it (requires at least 1 argument); a customer pasting it gets an error. [defects, defects #162550]		lowfixed-in-releaseheld review (review model)v1.14.2-CE-ubuntu24.04-r2

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:c777c878e9b29e7c7f4a86e392ffc591350ccf0c02c3d57d38c410f74b4c2eed · published digest sha256:c777c878e9b29e7c7f4a86e392ffc591350ccf0c02c3d57d38c410f74b4c2eed · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 124) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-07T05:26:45Z · failing Docker Scout counts 7 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-07T05:26:35Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3730434581 · transparency-log entry · integrated 2026-11-07T05:29:19Z) [ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:136912fbcb8e25ea2e76b74b922556d006d8db92250b373a8b447bee047c366a · state attached · log index 3730435429 · transparency-log entry
    • kind sbom · digest sha256:136912fbcb8e25ea2e76b74b922556d006d8db92250b373a8b447bee047c366a · state attached · log index 3730435949 · transparency-log entry
    • kind vsa · digest sha256:136912fbcb8e25ea2e76b74b922556d006d8db92250b373a8b447bee047c366a · state attached · log index 3730436606 · transparency-log entry
    • kind provenance · digest sha256:c777c878e9b29e7c7f4a86e392ffc591350ccf0c02c3d57d38c410f74b4c2eed · state attached · log index 3730437306 · transparency-log entry
    • kind sbom · digest sha256:c777c878e9b29e7c7f4a86e392ffc591350ccf0c02c3d57d38c410f74b4c2eed · state attached · log index 3730438017 · transparency-log entry
    • kind vsa · digest sha256:c777c878e9b29e7c7f4a86e392ffc591350ccf0c02c3d57d38c410f74b4c2eed · state attached · log index 3730439073 · transparency-log entry
    (at 2026-11-07T05:29:20Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/coredns/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-07T04:51:27Z on build host 2 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:c777c878e9b29e7c7f4a86e392ffc591350ccf0c02c3d57d38c410f74b4c2eed [clean-room rebuild ledger, runs[606]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-07T04:44:45Z [stage_runs, stage_runs chain 841 stage publish_image]
  • Archive manifests written2026-11-07T05:28:11Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 57 · probed 2026-11-07T04:41:19Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-07T05:30:32Z generated: by KitForge release/build_trail.py · generator commit a40e4d9d4d44a5f8647c6bf01ffdee4ed8801afd
  • 2026-11-07T05:31:43Z publication: promoted at 2026-11-07T05:31:04Z · promoted digest sha256:136912fbcb8e25ea2e76b74b922556d006d8db92250b373a8b447bee047c366a · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 333 · checklist status complete · checklist at 2026-11-07T05:31:43Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/coredns/v1.14.2-CE-ubuntu24.04-r2/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/coredns/v1.14.2-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.rebuild.jsonbeside the archive (prodasset /data/production/coredns/v1.14.2-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r2.rebuild.json.sigstorebeside the archive (prodasset /data/production/coredns/v1.14.2-CE-ubuntu24.04-r2/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/coredns/v1.14.2-CE-ubuntu24.04-r2/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)526
chainssadb, ReadyStack's engine database (not published)841
defectssadb, ReadyStack's engine database (not published)coredns v1.14.2-CE-ubuntu24.04-r2
drive_runssadb, ReadyStack's engine database (not published)chain 841
held_roundssadb, ReadyStack's engine database (not published)chain 841
lesson_recallssadb, ReadyStack's engine database (not published)chain 841
micro_step_runssadb, ReadyStack's engine database (not published)chain 841
release_imagessadb, ReadyStack's engine database (not published)coredns v1.14.2-CE-ubuntu24.04-r2
stage_eventssadb, ReadyStack's engine database (not published)chain 841
stage_runssadb, ReadyStack's engine database (not published)chain 841
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—