Home Assistant 2026.11.1-CE-ubuntu24.04-r2 build trail
How ReadyStack built readystack/homeassistant:2026.11.1-CE-ubuntu24.04-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.
This trail
As JSON- Image
readystack/homeassistant:2026.11.1-CE-ubuntu24.04-r2 - Index digestsha256:c13e2254904b69d9b9fed56124186f815b78f4e1e7e8ffafa381bdb94c801ec7
- linux/amd64 digestsha256:0ecbda7ff881d506f1fb19194d3210fa1c4862219b05c4698a5487e280499e1b
- Archive
ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.tar.gz - Archive SHA-256 now4ea277d96aee0809c8017d7fc632f5251c0c9ba79364efbe5df332acf29a5b21
- Pins record
docs/PINS.md,docs/provenance/PINS.jsonin the archive (since generated) - Generated2026-11-12T13:13:32Z by KitForge release/build_trail.py
- Sections9 sections, 8 fully recorded; 1 item not recorded
Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:
cosign verify-blob --key https://readystack.dev/keys/cosign.pub \ --bundle ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.trail.json.sigstore ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.trail.json
IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level
Identity
Fully recorded- ProductHome Assistant (homeassistant) [MANIFEST.json]
- Release tag2026.11.1-CE-ubuntu24.04-r2 [MANIFEST.json]
- Imagereadystack/homeassistant:2026.11.1-CE-ubuntu24.04-r2 [MANIFEST.json]
- Image index digestsha256:c13e2254904b69d9b9fed56124186f815b78f4e1e7e8ffafa381bdb94c801ec7 [docs/provenance/LOCKED_DIGEST.txt]
- linux/amd64 image digestsha256:0ecbda7ff881d506f1fb19194d3210fa1c4862219b05c4698a5487e280499e1b [ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.rebuild.json, subject.image_manifest_digest]
- ArchiveReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.tar.gz (bytes 727522885) [MANIFEST.json]
- Archive sha256 at publish4ea277d96aee0809c8017d7fc632f5251c0c9ba79364efbe5df332acf29a5b21 [MANIFEST.json, tarball_sha256]
- Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
- Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
- Upstream repositoryhttps://github.com/home-assistant/core [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream ref2026.11.1 [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream commitd8a0dc698c8946b44e455d904000db563cfbf1ba [docs/provenance/SOURCE_TREE_HASH.json]
- Source tree hashfbef0052e65c2f89d7d8841fce466d1a59d7ce9a69f5dc6870d1836999529afa (files 30208) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
- Kit tree hashsha256:b736aa8d188e695fd79dcf147c8d88877929aab830767aa0d888cb189e37b78f [ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.rebuild.json, inputs.tree_hash]
- SOURCE_DATE_EPOCH1794448185 (utc 2026-11-12T01:49:45Z) [ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.rebuild.json, inputs.source_date_epoch]
- Base images
- ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
- BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.rebuild.json, engine]
- Engine commit(s)
- commit c8155eab7005e164326d14c384d473b047cfc227 · dirty yes · first drive 4397
- commit 27badbefbe8aac72eb90e98ea8f843a03c177b52 · dirty yes · first drive 4425
Why this release exists
Fully recorded- Chain1015 (created 2026-11-12T10:07:57Z · trigger customer_request · upstream version 2026.11.1) [chains, chains #1015]
- Requestbuild request #693 (rebuild) (requested at 2026-11-12T01:49:48Z · requested by kitforge-agent · version 2026.11.1) [build_requests, build_requests #693]
- Reasonrevision 2026.11.1-CE-ubuntu24.04-r2: same upstream version rebuilt (retarget.py --rev-bump) [build_requests, build_requests #693 request_reason]
- Supersedesreadystack/homeassistant:2026.11.1-CE-ubuntu24.04-r1 (chain 955) [chains, chains #955]
The path through the harness
Fully recorded1 chain · 2 drives · 18 stages · 1 rewind
Chain 1015 release · ready_to_ship
Created 2026-11-12T10:07:57Z, upstream 2026.11.1, build request 693 [chains, chains #1015]
| Drive | Started | Minutes | Build host | How it stopped |
|---|---|---|---|---|
| 4397 | 2026-11-12T10:08:34Z | 84.4 | build host 1 withhold-publish | ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4397] |
| 4425 | 2026-11-12T12:59:38Z | — | build host 1 publish-held | not recorded [drive_runs, drive_runs #4425] |
Stages, in order
| Stage | First start | Passed | Attempts | Gate checks passed | Artifacts (SHA-256) |
|---|---|---|---|---|---|
intake |
2026-11-12T10:08:44Z | 2026-11-12T10:08:45Z | 1 | 4
|
order_json c094b7da9999… |
acquire |
2026-11-12T10:09:01Z | 2026-11-12T10:09:04Z | 1 | 12
|
source_tree dd89f9af2959…license_file c71d239df917…custody_inputs f451aac968e6…source_tree_hash 0b0990785b2b…source_file_manifest d5c3276c6e52… |
plan |
2026-11-12T10:09:42Z | 2026-11-12T10:09:43Z | 1 | 10
|
recon_report 2041f9965185…input_pin_plan ff47823eb17c…toolchain_lock 8c4b77b1293f… |
assemble_kit |
2026-11-12T10:29:42Z | 2026-11-12T10:29:42Z | 1 | 27
|
dockerfile e87117f523ab…build_recipe ebecf1d32f71…system_pinning 53a8ed1eb1d1…build_offline_sh 6ab4f08a6ec7…generate_sbom_sh ce0f1e6f1e70…first_boot_health 57a4ea55e16b…verify_offline_sh 3e8184ea230c…base_image_digests c3d6a7ac1257…dockerfile_offline e87117f523ab…first_build_digest b43fffa43625… |
remediate |
2026-11-12T10:30:44Z | 2026-11-12T10:30:45Z | 1 | 8
|
vendored_apt e3b0c44298fc…remediation_log eea9481c974d…security_report 75927852393c… |
build_kit |
2026-11-12T10:59:47Z | 2026-11-12T10:59:47Z | 1 | 9
|
cosign_stamp 0cb914def9a8…locked_digest ec40a7aae661…freeze_manifest 42b5471a2b26…offline_rebuild_transcript c23ab14a948a… |
verdict |
2026-11-12T11:04:56Z | 2026-11-12T11:04:57Z | 1 | 8
|
scout_verdict 67b20687c766… |
publish_image |
2026-11-12T11:06:50Z | 2026-11-12T11:06:51Z | 1 | 7
|
hub_readme a94ccbf36af1…promotion_record ee466ba802f7… |
boot_instance |
2026-11-12T11:07:07Z | 2026-11-12T11:07:10Z | 2 | 3
|
instance_handle 0823da3f1c7e… |
sbom |
2026-11-12T11:08:04Z | 2026-11-12T11:08:05Z | 1 | 5
|
sbom_md 13d0203baf0b…sbom_json 9b0920b00d47… |
schema_discovery |
2026-11-12T11:08:11Z | 2026-11-12T11:08:12Z | 1 | 7
|
schema_hash 5a2296e00004…dependency_tree 91f0a7ca88a5…table_classification 86c57b25e180… |
admin_handbook |
2026-11-12T11:08:22Z | 2026-11-12T11:08:23Z | 1 | 7
|
api_map 0202ca54f70c…admin_handbook 433b5e3e9ef9… |
db_handbook |
2026-11-12T11:08:34Z | 2026-11-12T11:08:35Z | 1 | 8
|
db_handbook 839d5cf1630c…seed_isolation a1bf4a1d85d9… |
seed_data |
2026-11-12T11:08:42Z | 2026-11-12T11:08:42Z | 1 | 6
|
seed_data_sql 4be6d6c2f332…seed_cases_json aca9efe5bd99… |
seed_validate |
2026-11-12T11:08:46Z | 2026-11-12T11:08:46Z | 1 | 3
|
seed_data_contract 8338b4809634… |
usecase_validate |
2026-11-12T11:09:03Z | 2026-11-12T11:09:04Z | 1 | 10
|
failed_tests b2247b16f5f7…passed_tests a73d0457e0eb…test_results f4eb708e351f…usecase_contract 7709defffa27… |
finalize_docs |
2026-11-12T11:09:09Z | 2026-11-12T11:09:10Z | 1 | 9
|
defects_json 19c4e0061e52…release_notes a6336c0b988c…api_integration_guide 9d10f52dbaac… |
package_archive invalidated 2026-11-12T12:59:11Z |
2026-11-12T11:32:54Z | 2026-11-12T11:32:57Z | 1 | 37 (final gate PASS)
|
sale_tar 4a1f8f190a68…checksums d1e8d7ff7b4c…verify_md ce86d91e321f…rebuild_md d093f8daf006…manifest_txt c4399cd3e58c…actions_jsonl 85ef87b36e85…provenance_md 9795fb4990d1…assetchain_log_md e9eccaec0c0f…assetchain_log_json 6e08372602fd… |
[stage_runs]
Rewinds
- 2026-11-12T12:59:11Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #33807]
Model work per stage
Fully recordedRole: writer model. Calls up to 2026-11-12T11:32:57Z.
5 calls over 3 stages
| Stage | Calls | Refused | Errors | Max attempt | Forced commits | Real tokens | Lesson rules shown |
|---|---|---|---|---|---|---|---|
plan | 2 | 0 | 0 | 1 | 0 | 9572 | — |
remediate | 2 | 0 | 0 | 1 | 0 | 14049 | L-A08, L-038, L-036, L-034, L-032 |
usecase_validate | 1 | 0 | 0 | 1 | 0 | 1576 | — |
[micro_step_runs] [lesson_recalls]
Review
Fully recordedRole: review model.
1 round, 1 counted, $0.52 recorded cost
| Round | Started | Critical | Major | Minor | Verdict | Cost | Cap in force | Archive reviewed |
|---|---|---|---|---|---|---|---|---|
| 1 | 2026-11-12T11:33:39Z | 0 | 0 | 3 | clean to publish [held_rounds, held_rounds #1810] | $0.52 | 3 rounds, $40.00 | 4a1f8f190a68… |
Defects
Fully recorded- Ledger entries5 [defects, defects where product_slug=homeassistant and this tag or chain]
- Disclosed in the archive5 [docs/defects/defects.json, entries]
5 ledger entries: by severity low 5; by status open 2, fixed-before-release 3.
| Defect | Severity | Status | Found by | Fixed in |
|---|---|---|---|---|
RSD-homeassistant-0710a8868cDocker Hub README: Free-download claim contradicts the manifest price. [defects, defects #267171] | low | open | held review (review model) | — |
RSD-homeassistant-076d64168eDocker Hub README: README says the kit is free; the manifest prices it at 1000 cents. [defects, defects #267172] | low | open | held review (review model) | — |
RSD-homeassistant-24b669e7cfAdmin handbook: Names 2026.10.4-CE-ubuntu24.04-r2 as the release this one supersedes; this release supersedes 2026.11.1-CE-ubuntu24.04-r1 (RELEASE_NOTES.md Supersedes; readystack.dev/api/products lists r1 as… [defects, defects #268173] | low | fixed-before-release | held review (review model) | — |
RSD-homeassistant-5926fae61aAdmin handbook: Names 2026.10.4-CE-ubuntu24.04-r2 as the release this one supersedes; this release supersedes 2026.11.1-CE-ubuntu24.04-r1 (RELEASE_NOTES.md Supersedes; readystack.dev/api/products lists r1 as… [defects, defects #268174] | low | fixed-before-release | held review (review model) | — |
RSD-homeassistant-ccfdc381acAPI guide: Names 2026.10.4-CE-ubuntu24.04-r2 as the release this one supersedes; this release supersedes 2026.11.1-CE-ubuntu24.04-r1 (RELEASE_NOTES.md Supersedes; readystack.dev/api/products lists r1 as… [defects, defects #268175] | low | fixed-before-release | held review (review model) | — |
Verification
1 item not recorded- Reproduced before publishingyes (rebuilt digest sha256:0ecbda7ff881d506f1fb19194d3210fa1c4862219b05c4698a5487e280499e1b · published digest sha256:0ecbda7ff881d506f1fb19194d3210fa1c4862219b05c4698a5487e280499e1b · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 812) [docs/provenance/REPRO_VERIFICATION.json, verified]
- Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
- Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-12T12:59:57Z · failing Docker Scout counts 207 packages with copyleft licences (GPL, LGPL, MPL), 203 of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
- Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-12T12:59:49Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
- Image signature transparency-log entries
- log index 3830881697 · transparency-log entry
- log index 3830882155 · transparency-log entry
- rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3832950489 · transparency-log entry · integrated 2026-11-12T13:11:56Z) [ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
- Signed attestations
- kind provenance · digest sha256:c13e2254904b69d9b9fed56124186f815b78f4e1e7e8ffafa381bdb94c801ec7 · state attached · log index 3832953272 · transparency-log entry
- kind sbom · digest sha256:c13e2254904b69d9b9fed56124186f815b78f4e1e7e8ffafa381bdb94c801ec7 · state attached · log index 3832954805 · transparency-log entry
- kind vsa · digest sha256:c13e2254904b69d9b9fed56124186f815b78f4e1e7e8ffafa381bdb94c801ec7 · state attached · log index 3832956260 · transparency-log entry
- kind provenance · digest sha256:0ecbda7ff881d506f1fb19194d3210fa1c4862219b05c4698a5487e280499e1b · state attached · log index 3832957376 · transparency-log entry
- kind sbom · digest sha256:0ecbda7ff881d506f1fb19194d3210fa1c4862219b05c4698a5487e280499e1b · state attached · log index 3832958732 · transparency-log entry
- kind vsa · digest sha256:0ecbda7ff881d506f1fb19194d3210fa1c4862219b05c4698a5487e280499e1b · state attached · log index 3832960506 · transparency-log entry
- Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/homeassistant/recipe) [docs/provenance/PINS.json]
Offline clean-room rebuilds
- 2026-11-12T11:33:45Z on build host 3 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
rebuilt sha256:0ecbda7ff881d506f1fb19194d3210fa1c4862219b05c4698a5487e280499e1b [clean-room rebuild ledger, runs[786]]
- Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
Publication
Fully recorded 1 pending at generation- Image pushed (internal tag), publish_image passed2026-11-12T11:06:51Z [stage_runs, stage_runs chain 1015 stage publish_image]
- Archive manifests written2026-11-12T13:04:53Z [PUBLISH_MANIFEST.json, published_at]
- Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)
Packages and CPU level
Fully recorded- x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 1185 · probed 2026-11-12T10:46:02Z · source build_kit) [release_images, isa_level_hard]
History
2 events- 2026-11-12T13:13:32Z generated: by KitForge release/build_trail.py · generator commit 27badbefbe8aac72eb90e98ea8f843a03c177b52
- 2026-11-12T13:16:42Z publication: promoted at 2026-11-12T13:14:10Z · promoted digest sha256:c13e2254904b69d9b9fed56124186f815b78f4e1e7e8ffafa381bdb94c801ec7 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 507 · checklist status complete · checklist at 2026-11-12T13:16:42Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json
Records
25 records| Record | Where it is | Rows |
|---|---|---|
docs/defects/defects.json | inside the archive (ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.tar.gz) | — |
docs/provenance/IMAGE_EVIDENCE.json | inside the archive (ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.tar.gz) | — |
docs/provenance/LOCKED_DIGEST.txt | inside the archive (ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.tar.gz) | — |
docs/provenance/PINS.json | inside the archive (ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.tar.gz) | — |
docs/provenance/REPRO_VERIFICATION.json | inside the archive (ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.tar.gz) | — |
docs/provenance/SOURCE_TREE_HASH.json | inside the archive (ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.tar.gz) | — |
MANIFEST.json | beside the archive (prodasset /data/production/homeassistant/2026.11.1-CE-ubuntu24.04-r2/), as staged for publishing | — |
PUBLISH_MANIFEST.json | beside the archive (prodasset /data/production/homeassistant/2026.11.1-CE-ubuntu24.04-r2/), as staged for publishing | — |
ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.rebuild.json | beside the archive (prodasset /data/production/homeassistant/2026.11.1-CE-ubuntu24.04-r2/), as staged for publishing | — |
ReadyStack-homeassistant-2026.11.1-CE-ubuntu24.04-r2.rebuild.json.sigstore | beside the archive (prodasset /data/production/homeassistant/2026.11.1-CE-ubuntu24.04-r2/), as staged for publishing | — |
SCOUT_EVIDENCE.json | beside the archive (prodasset /data/production/homeassistant/2026.11.1-CE-ubuntu24.04-r2/), as staged for publishing | — |
clean-room rebuild ledger | the clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published) | — |
build_requests | sadb, ReadyStack's engine database (not published) | 693 |
chains | sadb, ReadyStack's engine database (not published) | 1015 |
defects | sadb, ReadyStack's engine database (not published) | homeassistant 2026.11.1-CE-ubuntu24.04-r2 |
drive_runs | sadb, ReadyStack's engine database (not published) | chain 1015 |
held_rounds | sadb, ReadyStack's engine database (not published) | chain 1015 |
lesson_recalls | sadb, ReadyStack's engine database (not published) | chain 1015 |
micro_step_runs | sadb, ReadyStack's engine database (not published) | chain 1015 |
release_images | sadb, ReadyStack's engine database (not published) | homeassistant 2026.11.1-CE-ubuntu24.04-r2 |
stage_events | sadb, ReadyStack's engine database (not published) | chain 1015 |
stage_runs | sadb, ReadyStack's engine database (not published) | chain 1015 |
attestations.json | the chain's workspace on the controller (not published) | — |
deliverables/provenance/PROMOTION_RECORD.json | the chain's workspace on the controller (not published) | — |
g8_result.json | the chain's workspace on the controller (not published) | — |