CrowdSec v1.8.2-CE-ubuntu24.04-r4 build trail

How ReadyStack built readystack/crowdsec:v1.8.2-CE-ubuntu24.04-r4 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/crowdsec:v1.8.2-CE-ubuntu24.04-r4
  • Index digestsha256:ca92af575345939cb9df05eb66042136dc2ee4de490a78b700d40f7aab3ac259
  • linux/amd64 digestsha256:fb464b445d6856de741448b0b7e71bfb285f960db9261f382d97c41094cef3f7
  • ArchiveReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.tar.gz
  • Archive SHA-256 nowb95463cf18cf3e7d2d4ada4b0a309cff77610e211ed4fcd95e64237bc6a3d50c
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-13T17:23:48Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.trail.json.sigstore ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.trail.json
ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.trail.jsonReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.trail.json.sigstoreReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.trail.mdCrowdSec product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductCrowdSec (crowdsec) [MANIFEST.json]
  • Release tagv1.8.2-CE-ubuntu24.04-r4 [MANIFEST.json]
  • Imagereadystack/crowdsec:v1.8.2-CE-ubuntu24.04-r4 [MANIFEST.json]
  • Image index digestsha256:ca92af575345939cb9df05eb66042136dc2ee4de490a78b700d40f7aab3ac259 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:fb464b445d6856de741448b0b7e71bfb285f960db9261f382d97c41094cef3f7 [ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.tar.gz (bytes 506927643) [MANIFEST.json]
  • Archive sha256 at publishb95463cf18cf3e7d2d4ada4b0a309cff77610e211ed4fcd95e64237bc6a3d50c [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/crowdsecurity/crowdsec [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv1.8.2 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit3d369d64eb3e9ba770ed39aedc83ffd3170aef4c [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash4ca9779ee0d54141de4f965230df7ff5791cc3f937a66c6ecc4e202894ca870f (files 1795) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:059960a08fe21a250f3644b0d4040ac451aeeb45a341c9e32b952190c51070ed [ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794578562 (utc 2026-11-13T14:02:42Z) [ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.27.4-bookworm@sha256:4fa7c968ba93f1635670522dbb01a2c78150443e1385746924566079f36570ea · platform digest sha256:fb7cceb528b47141eccd9b60bf3cbd27d5ef5f8cf5b7d338bec866da495b50dc
    • ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
    [ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.rebuild.json, engine]
  • Engine commit(s)
    • commit 4abf16c48ca86f76f9a457e2b5ddcb5e2b37aedf · dirty yes · first drive 4598
    • commit 073535c62a45bea8f3f14b90d7062837d7d2da35 · dirty yes · first drive 4616
    • commit 1252a76ccb9fe0963d2efc0d07028de8176a15fe · dirty yes · first drive 4626
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain1082 (created 2026-11-13T14:43:23Z · trigger customer_request · upstream version v1.8.2) [chains, chains #1082]
  • Requestbuild request #757 (rebuild) (requested at 2026-11-13T14:02:44Z · requested by kitforge-agent · version v1.8.2) [build_requests, build_requests #757]
  • Reasonrerelease agenda REVISION -> v1.8.2-CE-ubuntu24.04-r4 (decay loop, IMP-08) [build_requests, build_requests #757 request_reason]
  • Supersedesreadystack/crowdsec:v1.8.2-CE-ubuntu24.04-r3 (chain 1031) [chains, chains #1031]

The path through the harness

Fully recorded

1 chain · 3 drives · 18 stages · 2 rewinds

Chain 1082 release · ready_to_ship

Created 2026-11-13T14:43:23Z, upstream v1.8.2, build request 757 [chains, chains #1082]

DriveStartedMinutesBuild hostHow it stopped
45982026-11-13T14:43:49Z27.2build host 4 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4598]
46162026-11-13T16:15:57Z4build host 4 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4616]
46262026-11-13T17:17:57Z—build host 4 publish-held not recorded [drive_runs, drive_runs #4626]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-13T14:43:59Z2026-11-13T14:44:00Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json be8a031978f4…
acquire 2026-11-13T14:44:04Z2026-11-13T14:44:05Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 8b9246687ec7…
license_file 198fa694dee3…
custody_inputs 0b55cabfcc64…
source_tree_hash 4845b46f9781…
source_file_manifest be8a8f4b8a8f…
plan 2026-11-13T14:44:51Z2026-11-13T14:44:52Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 8208adec4d89…
input_pin_plan 7cdd39c734dc…
toolchain_lock 74e58dd473a1…
assemble_kit 2026-11-13T14:50:26Z2026-11-13T14:50:27Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 9a4662afd7b2…
build_recipe ad9278ff20e0…
system_pinning fa091140511e…
build_offline_sh 6ab4f08a6ec7…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health a26c213ae684…
verify_offline_sh 3e8184ea230c…
base_image_digests 539b249cc4d2…
dockerfile_offline 9a4662afd7b2…
first_build_digest 1f91e200a9b7…
remediate 2026-11-13T14:51:08Z2026-11-13T14:51:09Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 624f4d09c7e0…
security_report ab2fd1988f98…
build_kit 2026-11-13T14:59:29Z2026-11-13T14:59:30Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 20b7109a0d75…
locked_digest 357873374c1a…
freeze_manifest 34cb4b2d23e5…
offline_rebuild_transcript 482ceb1f4417…
verdict 2026-11-13T15:00:34Z2026-11-13T15:00:35Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 6c4dd9772b67…
publish_image 2026-11-13T15:01:26Z2026-11-13T15:01:27Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme c8a145cae5e0…
promotion_record 38aa6c621507…
boot_instance 2026-11-13T15:01:33Z2026-11-13T15:01:36Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 35df9b8c52ef…
sbom 2026-11-13T15:01:51Z2026-11-13T15:01:52Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 509d3b15bb90…
sbom_json a8296fa40a7a…
schema_discovery 2026-11-13T15:01:54Z2026-11-13T15:01:55Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 16f2ea18a7d4…
dependency_tree 2dc5abd0e268…
table_classification 49667b875783…
admin_handbook 2026-11-13T15:02:05Z2026-11-13T15:02:06Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map a8c87af97539…
admin_handbook 4c9326724046…
db_handbook 2026-11-13T15:02:18Z2026-11-13T15:02:19Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook b6a6143e4388…
seed_isolation c870ead9ecd3…
seed_data 2026-11-13T15:02:23Z2026-11-13T15:02:23Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 5163e2dea5e1…
seed_cases_json 85394a51eeb3…
seed_validate 2026-11-13T15:02:26Z2026-11-13T15:02:27Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract cecaa900fdf2…
usecase_validate 2026-11-13T15:02:43Z2026-11-13T15:02:44Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests e858cfc59a3d…
test_results ef4bcde00417…
usecase_contract 9d16ec5eac27…
finalize_docs 2026-11-13T15:02:50Z2026-11-13T15:02:51Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json da2a7c337213…
release_notes 9852628d5651…
api_integration_guide 1bfe0f2f7439…
package_archive invalidated 2026-11-13T17:17:32Z 2026-11-13T15:10:55Z2026-11-13T16:19:57Z2
37 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 unpack_files
  • G8 scout_grade_a
  • G8 script_copies
  • G8 upgrade_check
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar ead96db08599…
checksums bae0c983d46e…
verify_md 8e1a4e47f1fb…
rebuild_md af04ec40e782…
manifest_txt ff0d603b8906…
actions_jsonl deba9bbdfc44…
provenance_md 7121fb3fb9ad…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 6180ae414d84…

[stage_runs]

Rewinds

  • 2026-11-13T15:32:55Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #36510]
  • 2026-11-13T17:17:32Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #36824]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-13T16:19:57Z.

5 calls over 3 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 013390 L-A183, L-A15
remediate2001 013476 L-A183, L-A15
usecase_validate1001 01541 L-A59

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

2 rounds, 2 counted, $0.58 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-13T15:11:50Z 010 findings to repackage [held_rounds, held_rounds #1891] $0.36 3 rounds, $40.00 7ac9002ec8f1…
22026-11-13T16:20:25Z 000 clean to publish [held_rounds, held_rounds #1895] $0.22 3 rounds, $40.00 ead96db08599…

Defects

Fully recorded
  • Ledger entries4 [defects, defects where product_slug=crowdsec and this tag or chain]
  • Disclosed in the archive4 [docs/defects/defects.json, entries]

4 ledger entries: by severity medium 1, high 3; by status open 3, fixed-before-release 1.

DefectSeverityStatusFound byFixed in
RSD-crowdsec-a8b5ab2b34
Unauthenticated /metrics on port 6060 by default [defects, defects #285234]		mediumopenbuild strategy record—
RSD-crowdsec-ce83c1e5b4
Unauthenticated access by default [defects, defects #285235]		highopenbuild strategy record—
RSD-crowdsec-a1e461d3e2
API guide: Stale superseded-release digest in the image verification step [defects, defects #285513]		highfixed-before-releaseheld review (review model)—
RSD-crowdsec-d1d8a09742
API guide: Stale digest from the superseded r2 release in the image-verification step. [defects, defects #287363]		highopenheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:fb464b445d6856de741448b0b7e71bfb285f960db9261f382d97c41094cef3f7 · published digest sha256:fb464b445d6856de741448b0b7e71bfb285f960db9261f382d97c41094cef3f7 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 228) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-13T17:18:19Z · failing Docker Scout counts 96 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-13T17:18:07Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3858783276 · transparency-log entry · integrated 2026-11-13T17:22:15Z) [ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:ca92af575345939cb9df05eb66042136dc2ee4de490a78b700d40f7aab3ac259 · state attached · log index 3858785428 · transparency-log entry
    • kind sbom · digest sha256:ca92af575345939cb9df05eb66042136dc2ee4de490a78b700d40f7aab3ac259 · state attached · log index 3858786513 · transparency-log entry
    • kind vsa · digest sha256:ca92af575345939cb9df05eb66042136dc2ee4de490a78b700d40f7aab3ac259 · state attached · log index 3858787492 · transparency-log entry
    • kind provenance · digest sha256:fb464b445d6856de741448b0b7e71bfb285f960db9261f382d97c41094cef3f7 · state attached · log index 3858788416 · transparency-log entry
    • kind sbom · digest sha256:fb464b445d6856de741448b0b7e71bfb285f960db9261f382d97c41094cef3f7 · state attached · log index 3858789243 · transparency-log entry
    • kind vsa · digest sha256:fb464b445d6856de741448b0b7e71bfb285f960db9261f382d97c41094cef3f7 · state attached · log index 3858790778 · transparency-log entry
    (at 2026-11-13T17:22:16Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/crowdsec/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-13T15:11:55Z on build host 2 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:fb464b445d6856de741448b0b7e71bfb285f960db9261f382d97c41094cef3f7 [clean-room rebuild ledger, runs[839]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-13T15:01:27Z [stage_runs, stage_runs chain 1082 stage publish_image]
  • Archive manifests written2026-11-13T17:20:14Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 744 · probed 2026-11-13T14:55:24Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-13T17:23:48Z generated: by KitForge release/build_trail.py · generator commit 1f57518c1e119546b8c0a074f3e484d7bf2f3b33
  • 2026-11-13T17:25:33Z publication: promoted at 2026-11-13T17:24:31Z · promoted digest sha256:ca92af575345939cb9df05eb66042136dc2ee4de490a78b700d40f7aab3ac259 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 557 · checklist status complete · checklist at 2026-11-13T17:25:33Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/crowdsec/v1.8.2-CE-ubuntu24.04-r4/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/crowdsec/v1.8.2-CE-ubuntu24.04-r4/), as staged for publishing—
ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.rebuild.jsonbeside the archive (prodasset /data/production/crowdsec/v1.8.2-CE-ubuntu24.04-r4/), as staged for publishing—
ReadyStack-crowdsec-v1.8.2-CE-ubuntu24.04-r4.rebuild.json.sigstorebeside the archive (prodasset /data/production/crowdsec/v1.8.2-CE-ubuntu24.04-r4/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/crowdsec/v1.8.2-CE-ubuntu24.04-r4/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)757
chainssadb, ReadyStack's engine database (not published)1082
defectssadb, ReadyStack's engine database (not published)crowdsec v1.8.2-CE-ubuntu24.04-r4
drive_runssadb, ReadyStack's engine database (not published)chain 1082
held_roundssadb, ReadyStack's engine database (not published)chain 1082
lesson_recallssadb, ReadyStack's engine database (not published)chain 1082
micro_step_runssadb, ReadyStack's engine database (not published)chain 1082
release_imagessadb, ReadyStack's engine database (not published)crowdsec v1.8.2-CE-ubuntu24.04-r4
stage_eventssadb, ReadyStack's engine database (not published)chain 1082
stage_runssadb, ReadyStack's engine database (not published)chain 1082
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—