Drupal 11.4.11-CE-ubuntu24.04-r3 build trail

How ReadyStack built readystack/drupal:11.4.11-CE-ubuntu24.04-r3 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/drupal:11.4.11-CE-ubuntu24.04-r3
  • Index digestsha256:c2daec1bc424fd83206a388668730902291cad75a9b031eeba063208ef567212
  • linux/amd64 digestsha256:d8de1680309f7bcb64c99282faf9c3372d85144778b2e9813160a2d29c3ef428
  • ArchiveReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.tar.gz
  • Archive SHA-256 now1f6ef835bbca2caeeffc072ede5fe4ba0aad0f40f94dfd9a60476c98d3839f01
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-09T05:12:34Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.trail.json.sigstore ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.trail.json
ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.trail.jsonReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.trail.json.sigstoreReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.trail.mdDrupal product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductDrupal (drupal) [MANIFEST.json]
  • Release tag11.4.11-CE-ubuntu24.04-r3 [MANIFEST.json]
  • Imagereadystack/drupal:11.4.11-CE-ubuntu24.04-r3 [MANIFEST.json]
  • Image index digestsha256:c2daec1bc424fd83206a388668730902291cad75a9b031eeba063208ef567212 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:d8de1680309f7bcb64c99282faf9c3372d85144778b2e9813160a2d29c3ef428 [ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.tar.gz (bytes 200092873) [MANIFEST.json]
  • Archive sha256 at publish1f6ef835bbca2caeeffc072ede5fe4ba0aad0f40f94dfd9a60476c98d3839f01 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/drupal/recommended-project [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream ref11.4.11 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit8a28d5d06552a136852de8a93fc597a146631536 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashe44288fed4cc8f7380266fa9f98c765a4dba7a944569bb7116f16c55cafb83bb (files 3) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:0dd8dba8e82c6901fe0d2651a255a36f6eb441020088cbe9327e4e810c317478 [ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1792577930 (utc 2026-10-21T10:18:50Z) [ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.rebuild.json, engine]
  • Engine commit(s)
    • commit 43614f6e1c70e630532585a5268e240cff598e0d · dirty yes · first drive 3812
    • commit 70e6bdff7c0e7d3ec863993e8fb01b616e6715cb · dirty yes · first drive 3834
    • commit 893ddf91074580cc5f11ded7558920733b65fc43 · dirty yes · first drive 3946
    • commit 0465a1439ad9167401d9af18e994b97765dd4d68 · dirty yes · first drive 3955
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain888 (created 2026-11-08T13:30:23Z · trigger customer_request · upstream version 11.4.11) [chains, chains #888]
  • Requestbuild request #570 (rebuild) (requested at 2026-11-08T07:25:39Z · requested by kitforge-agent · version 11.4.11) [build_requests, build_requests #570]
  • Reasonrerelease agenda REVISION -> 11.4.11-CE-ubuntu24.04-r3 (decay loop, IMP-08) [build_requests, build_requests #570 request_reason]
  • Supersedesreadystack/drupal:11.4.11-CE-ubuntu24.04-r2 (chain 652) [chains, chains #652]

The path through the harness

Fully recorded

1 chain · 4 drives · 18 stages · 2 rewinds

Chain 888 release · ready_to_ship

Created 2026-11-08T13:30:23Z, upstream 11.4.11, build request 570 [chains, chains #888]

DriveStartedMinutesBuild hostHow it stopped
38122026-11-08T13:30:47Z25.2build host 5 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #3812]
38342026-11-08T16:34:54Z0.3build host 5 withhold-publish stage_failed at package_archive; first failed check g8; 1 tick [drive_runs, drive_runs #3834]
39462026-11-09T04:10:08Z4.8build host 5 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #3946]
39552026-11-09T05:06:43Z—build host 5 publish-held not recorded [drive_runs, drive_runs #3955]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-08T13:30:59Z2026-11-08T13:30:59Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 886a177381fa…
acquire 2026-11-08T13:31:03Z2026-11-08T13:31:04Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 2576d7002939…
license_file 87d7c32e09f9…
custody_inputs 1800abe79b8f…
source_tree_hash cd3f91800c5b…
source_file_manifest 7b454c25b997…
plan 2026-11-08T13:31:35Z2026-11-08T13:31:36Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report db8d5b4a91f0…
input_pin_plan 4aa596efad29…
toolchain_lock 813f9db8ca78…
assemble_kit 2026-11-08T13:36:41Z2026-11-08T13:36:41Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 08e0f5a435b6…
build_recipe 98380fac9c3a…
system_pinning 8ac48ab14748…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 5164061acdd8…
verify_offline_sh 3e8184ea230c…
base_image_digests 0633357c2a2e…
dockerfile_offline 08e0f5a435b6…
first_build_digest 0f6726dee188…
remediate 2026-11-08T13:37:04Z2026-11-08T13:37:05Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log c6e9980b8dec…
security_report 7b8e7dd32044…
build_kit 2026-11-08T13:44:22Z2026-11-08T13:44:23Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 787b45c51653…
locked_digest a5e17c90aa45…
freeze_manifest d86df5193207…
offline_rebuild_transcript 6491fefb9718…
verdict 2026-11-08T13:45:48Z2026-11-08T13:45:49Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict fb23591504fb…
publish_image 2026-11-08T13:46:41Z2026-11-08T13:46:42Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 5805673b594d…
promotion_record cb2b495f5414…
boot_instance 2026-11-08T13:47:00Z2026-11-08T13:47:03Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle a326653ebce5…
sbom 2026-11-08T13:47:23Z2026-11-08T13:47:24Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 910956362c71…
sbom_json a13a7824e349…
schema_discovery 2026-11-08T13:47:27Z2026-11-08T13:47:28Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 9b29910985ea…
dependency_tree d01b24581949…
table_classification 41787065d263…
admin_handbook 2026-11-08T13:47:40Z2026-11-08T13:47:40Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 865191274d3a…
admin_handbook e3d77c760ad5…
db_handbook 2026-11-08T13:47:55Z2026-11-08T13:47:56Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 989ddb357304…
seed_isolation 1d7a0f92fa1d…
seed_data 2026-11-08T13:48:06Z2026-11-08T13:48:06Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql e356ef7f6704…
seed_cases_json bee74afddf02…
seed_validate 2026-11-08T13:48:09Z2026-11-08T13:48:10Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract e9029b348edf…
usecase_validate 2026-11-08T13:48:36Z2026-11-08T13:48:36Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests 5022f15bfcfc…
passed_tests 0497b7dc8a5f…
test_results c1720d3de82e…
usecase_contract 460f97f58161…
finalize_docs 2026-11-08T13:48:42Z2026-11-08T13:48:43Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 9bb70aa5ab5c…
release_notes 6248b1e3c21b…
api_integration_guide eb614c516ffa…
package_archive invalidated 2026-11-09T05:06:15Z 2026-11-08T13:55:59Z2026-11-09T04:14:53Z3
34 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar c85015e52841…
checksums 2a497434eeca…
verify_md 10eaa3f38046…
rebuild_md e23bd3d8bf3f…
manifest_txt ff36ca20bc73…
actions_jsonl 6093a1045bdd…
provenance_md 7af88e285fb6…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 3194f795919a…

[stage_runs]

Rewinds

  • 2026-11-08T14:28:21Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #26538]
  • 2026-11-09T05:06:15Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #28019]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-09T04:14:53Z.

5 calls over 3 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 07324 L-A183, L-A15
remediate2001 07429 L-A183, L-A15
usecase_validate1001 02018 L-A59

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

2 rounds, 2 counted, $0.95 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-08T13:57:26Z 001 clean to repackage [held_rounds, held_rounds #1519] $0.65 3 rounds, $40.00 67bafb9fb408…
22026-11-09T04:15:55Z 000 clean to publish [held_rounds, held_rounds #1574] $0.30 3 rounds, $40.00 c85015e52841…

Defects

Fully recorded
  • Ledger entries3 [defects, defects where product_slug=drupal and this tag or chain]
  • Disclosed in the archive1 [docs/defects/defects.json, entries]

3 ledger entries: by severity low 3; by status fixed-before-release 1, fixed-in-release 2.

DefectSeverityStatusFound byFixed in
RSD-drupal-b4c3be0662
Admin handbook: Ambiguous migration advice: a customer mounting an upstream volume at the data path gets a new empty site, not their old database. [defects, defects #178604]		lowfixed-before-releaseheld review (review model)—
RSD-drupal-1dcf818dc4
Admin handbook: The database password is typed on the docker run command line (shell history, process list), unlike the guide's own env-file procedure and the API guide's database examples. [defects, defects #195264]		lowfixed-in-releaseheld review (review model)11.4.11-CE-ubuntu24.04-r3
RSD-drupal-4162dd3269
Database handbook: MySQL example passes the database password inline with -e; same at line 394 for PostgreSQL. [defects, defects #195265]		lowfixed-in-releaseheld review (review model)11.4.11-CE-ubuntu24.04-r3

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:d8de1680309f7bcb64c99282faf9c3372d85144778b2e9813160a2d29c3ef428 · published digest sha256:d8de1680309f7bcb64c99282faf9c3372d85144778b2e9813160a2d29c3ef428 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 173) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-09T05:07:29Z · failing Docker Scout counts 143 packages with copyleft licences (GPL, LGPL, MPL), 138 of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-09T05:06:54Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3761402759 · transparency-log entry · integrated 2026-11-09T05:11:26Z) [ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:c2daec1bc424fd83206a388668730902291cad75a9b031eeba063208ef567212 · state attached · log index 3761402907 · transparency-log entry
    • kind sbom · digest sha256:c2daec1bc424fd83206a388668730902291cad75a9b031eeba063208ef567212 · state attached · log index 3761403126 · transparency-log entry
    • kind vsa · digest sha256:c2daec1bc424fd83206a388668730902291cad75a9b031eeba063208ef567212 · state attached · log index 3761403508 · transparency-log entry
    • kind provenance · digest sha256:d8de1680309f7bcb64c99282faf9c3372d85144778b2e9813160a2d29c3ef428 · state attached · log index 3761403875 · transparency-log entry
    • kind sbom · digest sha256:d8de1680309f7bcb64c99282faf9c3372d85144778b2e9813160a2d29c3ef428 · state attached · log index 3761404312 · transparency-log entry
    • kind vsa · digest sha256:d8de1680309f7bcb64c99282faf9c3372d85144778b2e9813160a2d29c3ef428 · state attached · log index 3761404740 · transparency-log entry
    (at 2026-11-09T05:11:27Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/drupal/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-08T13:57:31Z on build host 5 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:d8de1680309f7bcb64c99282faf9c3372d85144778b2e9813160a2d29c3ef428 [clean-room rebuild ledger, runs[654]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-08T13:46:42Z [stage_runs, stage_runs chain 888 stage publish_image]
  • Archive manifests written2026-11-09T05:09:18Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 1023 · probed 2026-11-08T13:41:09Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-09T05:12:34Z generated: by KitForge release/build_trail.py · generator commit 222adc4e64adbe156e86c987498df9358fda82f6
  • 2026-11-09T05:14:02Z publication: promoted at 2026-11-09T05:13:02Z · promoted digest sha256:c2daec1bc424fd83206a388668730902291cad75a9b031eeba063208ef567212 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 407 · checklist status complete · checklist at 2026-11-09T05:14:02Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/drupal/11.4.11-CE-ubuntu24.04-r3/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/drupal/11.4.11-CE-ubuntu24.04-r3/), as staged for publishing—
ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.rebuild.jsonbeside the archive (prodasset /data/production/drupal/11.4.11-CE-ubuntu24.04-r3/), as staged for publishing—
ReadyStack-drupal-11.4.11-CE-ubuntu24.04-r3.rebuild.json.sigstorebeside the archive (prodasset /data/production/drupal/11.4.11-CE-ubuntu24.04-r3/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/drupal/11.4.11-CE-ubuntu24.04-r3/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)570
chainssadb, ReadyStack's engine database (not published)888
defectssadb, ReadyStack's engine database (not published)drupal 11.4.11-CE-ubuntu24.04-r3
drive_runssadb, ReadyStack's engine database (not published)chain 888
held_roundssadb, ReadyStack's engine database (not published)chain 888
lesson_recallssadb, ReadyStack's engine database (not published)chain 888
micro_step_runssadb, ReadyStack's engine database (not published)chain 888
release_imagessadb, ReadyStack's engine database (not published)drupal 11.4.11-CE-ubuntu24.04-r3
stage_eventssadb, ReadyStack's engine database (not published)chain 888
stage_runssadb, ReadyStack's engine database (not published)chain 888
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—