HAProxy 3.4.6-CE-ubuntu24.04-r5 build trail

How ReadyStack built readystack/haproxy:3.4.6-CE-ubuntu24.04-r5 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/haproxy:3.4.6-CE-ubuntu24.04-r5
  • Index digestsha256:f394733ef6fe75fb9df7e05698a769d46ff6d62823f0b871ca9cd27300e3b4a8
  • linux/amd64 digestsha256:0451cca559f8af72a45194147bf4dd2f0ad40ff20d8f9df89b4ffb1af6cbc420
  • ArchiveReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.tar.gz
  • Archive SHA-256 nowa0e61eb6ee553b90c6159ca6be399d99b72cbd1404fd846e709ca15c8e37fc73
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-07T04:30:29Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.trail.json.sigstore ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.trail.json
ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.trail.jsonReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.trail.json.sigstoreReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.trail.mdHAProxy product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductHAProxy (haproxy) [MANIFEST.json]
  • Release tag3.4.6-CE-ubuntu24.04-r5 [MANIFEST.json]
  • Imagereadystack/haproxy:3.4.6-CE-ubuntu24.04-r5 [MANIFEST.json]
  • Image index digestsha256:f394733ef6fe75fb9df7e05698a769d46ff6d62823f0b871ca9cd27300e3b4a8 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:0451cca559f8af72a45194147bf4dd2f0ad40ff20d8f9df89b4ffb1af6cbc420 [ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.tar.gz (bytes 243210773) [MANIFEST.json]
  • Archive sha256 at publisha0e61eb6ee553b90c6159ca6be399d99b72cbd1404fd846e709ca15c8e37fc73 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://git.haproxy.org/git/haproxy-3.4.git [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv3.4.6 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit56332c50b5291cfbbfd440d958adc988fbf87e2f [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash98cbc2f2c71839bc24fb4454799e109179f1a5360386051ccc40b4b2b88c6216 (files 1497) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:b5a283a037816f919c752417cf11b43b271a82c203687674df8dfc84618d1c99 [ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1790604274 (utc 2026-09-28T14:04:34Z) [ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.rebuild.json, engine]
  • Engine commit(s)
    • commit 82ceed962bb8cbb719cd23d6abac3b09b92a97c3 · dirty yes · first drive 3559
    • commit 010aa541a25a24b2cef6b4553320a093daeed530 · dirty yes · first drive 3560
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain837 (created 2026-11-07T03:48:59Z · trigger customer_request · upstream version 3.4.6) [chains, chains #837]
  • Requestbuild request #523 (rebuild) (requested at 2026-11-07T02:01:45Z · requested by kitforge-agent · version 3.4.6) [build_requests, build_requests #523]
  • Reasonrerelease agenda REVISION -> 3.4.6-CE-ubuntu24.04-r5 (decay loop, IMP-08) [build_requests, build_requests #523 request_reason]
  • Supersedesreadystack/haproxy:3.4.6-CE-ubuntu24.04-r4 (chain 725) [chains, chains #725]

The path through the harness

Fully recorded

1 chain · 3 drives · 18 stages · 1 rewind

Chain 837 release · ready_to_ship

Created 2026-11-07T03:48:59Z, upstream 3.4.6, build request 523 [chains, chains #837]

DriveStartedMinutesBuild hostHow it stopped
35592026-11-07T03:49:18Z9.8build host 1 withhold-publish infra_hub_rate_limit at publish_image; 8 ticks [drive_runs, drive_runs #3559]
35602026-11-07T04:16:05Z5.7build host 1 withhold-publish ready_to_ship at package_archive; 12 ticks [drive_runs, drive_runs #3560]
35662026-11-07T04:26:51Z—build host 1 publish-held not recorded [drive_runs, drive_runs #3566]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-07T03:49:29Z2026-11-07T03:49:30Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 0eeace94fe9c…
acquire 2026-11-07T03:49:39Z2026-11-07T03:49:40Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree b4a286ecdaf7…
license_file 0717ca51fcea…
custody_inputs 87d0bde29ce1…
source_tree_hash f69a45fc517b…
source_file_manifest f479416e5866…
plan 2026-11-07T03:50:13Z2026-11-07T03:50:14Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 83aba15e7750…
input_pin_plan 9e20a2f6456f…
toolchain_lock dae75298824a…
assemble_kit 2026-11-07T03:52:19Z2026-11-07T03:52:20Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 282ed3916b06…
build_recipe 9ce85cdeb3a8…
system_pinning dc0450801fe7…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 69ffdf6328cb…
verify_offline_sh 3e8184ea230c…
base_image_digests 6d9a4296ecce…
dockerfile_offline 282ed3916b06…
first_build_digest d7ebd1f9f63c…
remediate 2026-11-07T03:52:56Z2026-11-07T03:52:57Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log fdb6152925e8…
security_report 52552930ead6…
build_kit 2026-11-07T03:55:45Z2026-11-07T03:55:46Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 4453b3eb5d73…
locked_digest 6fe5ba269c78…
freeze_manifest a77ffa990b2f…
offline_rebuild_transcript 5849182b4f32…
verdict 2026-11-07T03:56:27Z2026-11-07T03:56:28Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict b0cbc315be87…
publish_image 2026-11-07T04:16:49Z2026-11-07T04:16:50Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme f69590903139…
promotion_record 7b8b599b2734…
boot_instance 2026-11-07T04:16:55Z2026-11-07T04:16:59Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 74fed3d23aaa…
sbom 2026-11-07T04:17:10Z2026-11-07T04:17:11Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md ee3817472b36…
sbom_json 9765fd12ea46…
schema_discovery 2026-11-07T04:17:13Z2026-11-07T04:17:14Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 58468b6f0d93…
dependency_tree ef6cf887e729…
table_classification c7f5b426756d…
admin_handbook 2026-11-07T04:17:24Z2026-11-07T04:17:25Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map dd3f90b0f440…
admin_handbook a6813737a365…
db_handbook 2026-11-07T04:17:36Z2026-11-07T04:17:37Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook e6fbdc5154d1…
seed_isolation 8882e41ac75c…
seed_data 2026-11-07T04:17:41Z2026-11-07T04:17:42Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql a4ce08d6cb58…
seed_cases_json 7a567536adcb…
seed_validate 2026-11-07T04:17:45Z2026-11-07T04:17:45Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 0c3108e93a2b…
usecase_validate 2026-11-07T04:18:07Z2026-11-07T04:18:08Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests 8ff8337287e3…
passed_tests 1492d3df22da…
test_results 009c0e2b180f…
usecase_contract adfe1d2cb589…
finalize_docs 2026-11-07T04:18:13Z2026-11-07T04:18:13Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 86850841ba48…
release_notes 4b24c57dda69…
api_integration_guide 14ac6a078358…
package_archive invalidated 2026-11-07T04:26:30Z 2026-11-07T04:21:44Z2026-11-07T04:21:46Z1
34 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar a20735ce6d61…
checksums 5fcf8a0c9757…
verify_md 417faab65518…
rebuild_md 39465f4d206f…
manifest_txt f238a63a26a4…
actions_jsonl 1b89f6bb7ff8…
provenance_md 4398ea5bf0b4…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json e00d04b2415d…

[stage_runs]

Rewinds

  • 2026-11-07T04:26:30Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #23731]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-07T04:21:46Z.

5 calls over 3 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 07546 —
remediate2001 010647 L-A08, L-038, L-036, L-034, L-032
usecase_validate1001 01703 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.27 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-07T04:22:07Z 000 clean to publish [held_rounds, held_rounds #1425] $0.27 3 rounds, $40.00 a20735ce6d61…

Defects

Fully recorded
  • Ledger entries2 [defects, defects where product_slug=haproxy and this tag or chain]
  • Disclosed in the archive2 [docs/defects/defects.json, entries]

2 ledger entries: by severity low 2; by status wont-fix-by-design 1, open 1.

DefectSeverityStatusFound byFixed in
RSD-haproxy-82d110180f
Unused third-party device-detection add-ons are removed from the source before the build: addons/51degrees, addons/deviceatlas, addons/wurfl [defects, defects #159729]		lowwont-fix-by-designbuild strategy record—
RSD-haproxy-a18decf5f3
Release notes: The image's placeholder answer (a build input, unchanged from the previous release) recommends the single-file mount that the handbooks and the kit's own cfg header say never sees edits; the… [defects, defects #159730]		lowopenheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:0451cca559f8af72a45194147bf4dd2f0ad40ff20d8f9df89b4ffb1af6cbc420 · published digest sha256:0451cca559f8af72a45194147bf4dd2f0ad40ff20d8f9df89b4ffb1af6cbc420 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 70) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-07T04:27:10Z · failing Docker Scout counts 96 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-07T04:27:01Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3729606199 · transparency-log entry · integrated 2026-11-07T04:29:27Z) [ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:f394733ef6fe75fb9df7e05698a769d46ff6d62823f0b871ca9cd27300e3b4a8 · state attached · log index 3729606845 · transparency-log entry
    • kind sbom · digest sha256:f394733ef6fe75fb9df7e05698a769d46ff6d62823f0b871ca9cd27300e3b4a8 · state attached · log index 3729607495 · transparency-log entry
    • kind vsa · digest sha256:f394733ef6fe75fb9df7e05698a769d46ff6d62823f0b871ca9cd27300e3b4a8 · state attached · log index 3729608198 · transparency-log entry
    • kind provenance · digest sha256:0451cca559f8af72a45194147bf4dd2f0ad40ff20d8f9df89b4ffb1af6cbc420 · state attached · log index 3729608724 · transparency-log entry
    • kind sbom · digest sha256:0451cca559f8af72a45194147bf4dd2f0ad40ff20d8f9df89b4ffb1af6cbc420 · state attached · log index 3729609237 · transparency-log entry
    • kind vsa · digest sha256:0451cca559f8af72a45194147bf4dd2f0ad40ff20d8f9df89b4ffb1af6cbc420 · state attached · log index 3729610029 · transparency-log entry
    (at 2026-11-07T04:29:28Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/haproxy/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-07T04:22:10Z on build host 5 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:0451cca559f8af72a45194147bf4dd2f0ad40ff20d8f9df89b4ffb1af6cbc420 [clean-room rebuild ledger, runs[602]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-07T04:16:50Z [stage_runs, stage_runs chain 837 stage publish_image]
  • Archive manifests written2026-11-07T04:28:17Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 746 · probed 2026-11-07T03:54:21Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-07T04:30:29Z generated: by KitForge release/build_trail.py · generator commit 010aa541a25a24b2cef6b4553320a093daeed530
  • 2026-11-07T04:31:36Z publication: promoted at 2026-11-07T04:30:57Z · promoted digest sha256:f394733ef6fe75fb9df7e05698a769d46ff6d62823f0b871ca9cd27300e3b4a8 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 329 · checklist status complete · checklist at 2026-11-07T04:31:36Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/haproxy/3.4.6-CE-ubuntu24.04-r5/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/haproxy/3.4.6-CE-ubuntu24.04-r5/), as staged for publishing—
ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.rebuild.jsonbeside the archive (prodasset /data/production/haproxy/3.4.6-CE-ubuntu24.04-r5/), as staged for publishing—
ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r5.rebuild.json.sigstorebeside the archive (prodasset /data/production/haproxy/3.4.6-CE-ubuntu24.04-r5/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/haproxy/3.4.6-CE-ubuntu24.04-r5/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)523
chainssadb, ReadyStack's engine database (not published)837
defectssadb, ReadyStack's engine database (not published)haproxy 3.4.6-CE-ubuntu24.04-r5
drive_runssadb, ReadyStack's engine database (not published)chain 837
held_roundssadb, ReadyStack's engine database (not published)chain 837
lesson_recallssadb, ReadyStack's engine database (not published)chain 837
micro_step_runssadb, ReadyStack's engine database (not published)chain 837
release_imagessadb, ReadyStack's engine database (not published)haproxy 3.4.6-CE-ubuntu24.04-r5
stage_eventssadb, ReadyStack's engine database (not published)chain 837
stage_runssadb, ReadyStack's engine database (not published)chain 837
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—