InfluxDB v3.12.2-CE-ubuntu24.04-r1 build trail

How ReadyStack built readystack/influxdb:v3.12.2-CE-ubuntu24.04-r1 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/influxdb:v3.12.2-CE-ubuntu24.04-r1
  • Index digestsha256:e9a43b81a40c95fbbfc4700d784c9408fadf8bf49d489d88520d55d1f211906a
  • linux/amd64 digestsha256:968bcc53f2d97e304bacc2cf6cc16dec8a39bb6bc5509bc1fe75c56c4edf2ec0
  • ArchiveReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.tar.gz
  • Archive SHA-256 now15f961ed27ff19924d3fee6b2ae01c27ebcfab62594439e11e3d70bb8be8a40d
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-09T10:59:49Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.trail.json.sigstore ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.trail.json
ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.trail.jsonReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.trail.json.sigstoreReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.trail.mdInfluxDB product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductInfluxDB (influxdb) [MANIFEST.json]
  • Release tagv3.12.2-CE-ubuntu24.04-r1 [MANIFEST.json]
  • Imagereadystack/influxdb:v3.12.2-CE-ubuntu24.04-r1 [MANIFEST.json]
  • Image index digestsha256:e9a43b81a40c95fbbfc4700d784c9408fadf8bf49d489d88520d55d1f211906a [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:968bcc53f2d97e304bacc2cf6cc16dec8a39bb6bc5509bc1fe75c56c4edf2ec0 [ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.tar.gz (bytes 955917609) [MANIFEST.json]
  • Archive sha256 at publish15f961ed27ff19924d3fee6b2ae01c27ebcfab62594439e11e3d70bb8be8a40d [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/influxdata/influxdb [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv3.12.2 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commitcc9769917ab399ed5b48567a92b5d34ed4d918ea [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash5f6faf6b3ede125087079b9b9490a9745d0055ec385c9c14e9f74cc61364d6f7 (files 1855) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:070f96eb327539c391ff3fa918878c8d1ebb989c3668bcf2f9df6b1c70935b05 [ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1793301155 (utc 2026-10-29T19:12:35Z) [ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref rust:1.98.1-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e · platform digest sha256:c49256cbe5ea0188bc658a689500d70c41eb51f009a7a7be209caf60a944f3ec
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.rebuild.json, engine]
  • Engine commit(s)
    • commit 1e35d1b15a3548c231701daa63e2b8feac51c7ae · dirty yes · first drive 3803
    • commit c20aa19bc0ab8c9fef7ff40e1f6a18c4169b166e · dirty yes · first drive 3840
    • commit edd32e786d675d8f83a945524410699b1345c30c · dirty yes · first drive 3865
    • commit 837c64ac100d91a0c228a7de2f398e67de10932a · dirty yes · first drive 3948
    • commit 22e185265947a37afbae2e7de559399966a1add0 · dirty yes · first drive 3999
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain726 (created 2026-10-27T20:48:09Z · trigger customer_request · upstream version v3.12.2) [chains, chains #726]
  • Requestbuild request #423 (rebuild) (requested at 2026-10-27T20:16:29Z · requested by kitforge-agent · version v3.12.2) [build_requests, build_requests #423]
  • Reasonrevision v3.12.1-CE-ubuntu24.04-r3: same upstream version rebuilt (retarget.py --rev-bump) [build_requests, build_requests #423 request_reason]
  • Supersedesreadystack/influxdb:v3.12.1-CE-ubuntu24.04-r2 (chain 656) [chains, chains #656]

The path through the harness

Fully recorded

1 chain · 8 drives · 18 stages · 4 rewinds

Chain 726 release · ready_to_ship

Created 2026-10-27T20:48:09Z, upstream v3.12.2, build request 423 [chains, chains #726]

DriveStartedMinutesBuild hostHow it stopped
2332026-10-27T20:48:41Z207.7build host 1 withhold-publish ready_to_ship [drive_runs, drive_runs #233] rebuilt from a build line's log
2402026-10-28T01:24:06Z5.7build host 1 withhold-publish ready_to_ship [drive_runs, drive_runs #240] rebuilt from a build line's log
2442026-10-28T02:27:03Z3.4build host 1 withhold-publish stage_failed at package_archive [drive_runs, drive_runs #244] rebuilt from a build line's log
38032026-11-08T12:47:33Z154.7build host 1 withhold-publish stage_failed at package_archive; first failed check g8; 17 ticks [drive_runs, drive_runs #3803]
38402026-11-08T17:06:14Z4.3build host 1 withhold-publish stage_failed at package_archive; first failed check g8; 1 tick [drive_runs, drive_runs #3840]
38652026-11-08T18:52:49Z4.2build host 1 withhold-publish stage_failed at package_archive; first failed check g8; 1 tick [drive_runs, drive_runs #3865]
39482026-11-09T04:14:13Z53.6build host 1 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #3948]
39992026-11-09T10:51:53Z—build host 1 publish-held not recorded [drive_runs, drive_runs #3999]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-10-27T20:48:47Z2026-10-27T20:48:48Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 —
acquire 2026-10-27T20:48:53Z2026-11-08T12:47:55Z2
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree e0ce59bef690…
license_file a60eea817514…
custody_inputs edbe8519b96b…
source_tree_hash 24f1e82f3181…
source_file_manifest 9cec632acaa4…
plan 2026-10-27T20:49:58Z2026-11-08T12:47:59Z2
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 1e6f37c352c9…
input_pin_plan 4e792a93d828…
toolchain_lock 09c1ebc86fa6…
assemble_kit 2026-10-27T21:42:35Z2026-11-08T13:41:22Z2
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 9ebe31541adb…
build_recipe b723ef606f18…
system_pinning c5a38ea87363…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 74cd80fff90f…
verify_offline_sh 3e8184ea230c…
base_image_digests 61eff9483882…
dockerfile_offline 9ebe31541adb…
first_build_digest 96ba2e258ebb…
remediate 2026-10-27T21:43:54Z2026-11-08T13:41:26Z2
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 6e90bc83e16b…
security_report 980001d05a7e…
build_kit 2026-10-27T23:15:52Z2026-11-08T15:16:57Z2
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp f62fdfafb2c0…
locked_digest 772f7fa1f147…
freeze_manifest 02888f929ed7…
offline_rebuild_transcript 4c1fcaaad0a8…
verdict 2026-10-27T23:17:04Z2026-11-08T15:18:05Z2
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 8ea8e414134e…
publish_image 2026-10-27T23:18:00Z2026-11-08T15:18:49Z2
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 58cfe90d6b59…
promotion_record 5502795adc1f…
boot_instance 2026-10-27T23:18:07Z2026-11-08T15:18:58Z4
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 96aa532423f0…
sbom 2026-10-27T23:18:26Z2026-11-08T15:19:14Z2
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md ef4aaf0d22ac…
sbom_json adf89bb615a1…
schema_discovery 2026-10-27T23:18:28Z2026-11-08T15:19:18Z2
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash c62e2bec3e59…
dependency_tree cced4b39e956…
table_classification c5d916c19647…
admin_handbook 2026-10-27T23:18:38Z2026-11-08T15:19:27Z2
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 1cc47444907a…
admin_handbook e4d470b654e0…
db_handbook 2026-10-27T23:18:53Z2026-11-08T15:19:38Z2
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook d569b110de3a…
seed_isolation 7d8b0c7e48ea…
seed_data 2026-10-27T23:19:03Z2026-11-08T15:19:47Z2
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql af37fb988906…
seed_cases_json 503fc68e83cd…
seed_validate 2026-10-27T23:19:06Z2026-11-08T15:19:51Z2
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 21321f3dc9f6…
usecase_validate 2026-10-27T23:19:33Z2026-11-08T15:20:11Z2
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests 849acc55975a…
passed_tests 3201c349b7ea…
test_results def2da579a13…
usecase_contract 3ab42349e24f…
finalize_docs 2026-10-27T23:19:39Z2026-11-08T15:20:18Z2
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json f712e34e9b51…
release_notes 0cc810c59170…
api_integration_guide 3d52b3a74eb1…
package_archive invalidated 2026-11-09T10:51:17Z 2026-10-28T00:16:19Z2026-11-09T05:07:48Z7
34 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 6d87a3168326…
checksums 81762c879946…
verify_md 4cc85fdacb41…
rebuild_md c6a0f35c045b…
manifest_txt 25663520cfce…
actions_jsonl d86ce4f17d91…
provenance_md 10e8f99870f4…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 5cf6932d0e29…

[stage_runs]

Rewinds

  • 2026-10-28T01:17:42Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py) [stage_events, stage_events #2084]
  • 2026-10-28T01:49:38Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py) [stage_events, stage_events #2085]
  • 2026-11-08T12:47:35Z: package_archive to acquire on source_changed (source changed: the acquired source is v3.12.1 (commit 692ea4a9943f) but the strategy builds v3.12.2: acquire runs again so the source tree, its hash, the custody record and the acquisition copy describe what is built) [stage_events, stage_events #26230]
  • 2026-11-09T10:51:17Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #28748]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-09T05:07:48Z.

38 calls over 5 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 not recordednot recorded —
remediate2001 not recordednot recorded —
admin_handbook261503 5223790 L-A180, L-A181, L-A182, L-A183, L-A184, L-A155, L-A114, L-A25, L-A15, L-A14
db_handbook5001 not recordednot recorded —
usecase_validate3001 01728 L-A59

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

3 rounds, 3 counted, $2.27 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-10-28T00:18:18Z 010 findings to repackage [held_rounds, held_rounds #56] rebuilt from a held-review state file $0.73 not recorded not recorded
22026-10-28T01:30:17Z 001 clean to repackage [held_rounds, held_rounds #57] rebuilt from a held-review state file $0.85 not recorded 1534f4cb8a45…
32026-11-09T05:09:07Z 003 clean to publish [held_rounds, held_rounds #1589] $0.69 3 rounds, $40.00 6d87a3168326…

Defects

Fully recorded
  • Ledger entries5 [defects, defects where product_slug=influxdb and this tag or chain]
  • Disclosed in the archive4 [docs/defects/defects.json, entries]

5 ledger entries: by severity medium 2, low 3; by status open 2, fixed-before-release 3.

DefectSeverityStatusFound byFixed in
RSD-influxdb-a67b5312f8
Secret written in plain text or to the log by default [defects, defects #121789]		mediumopenbuild strategy record—
RSD-influxdb-a7e7760af0
Secret written in plain text or to the log by default [defects, defects #178953]		mediumopenbuild strategy record—
RSD-influxdb-49ae465cea
Admin handbook: ADMIN_HANDBOOK.md:1516 names (v3.12.1); this image is 3.12.2 (influxdb3 --version in ADMIN_HANDBOOK.md.command-transcripts.json: 3.12.2, revision cc976991). [defects, defects #198100]		lowfixed-before-releaseheld review (review model)—
RSD-influxdb-d5d767cac0
Database handbook: DB_HANDBOOK.md:639 names (v3.12.1); image is 3.12.2 (transcript, IMAGE_CONFIG.json description). [defects, defects #198101]		lowfixed-before-releaseheld review (review model)—
RSD-influxdb-855254d1ba
Admin handbook: The restore command in the same section chains the container start, so 'before you start' cannot be followed as one command. [defects, defects #198102]		lowfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:968bcc53f2d97e304bacc2cf6cc16dec8a39bb6bc5509bc1fe75c56c4edf2ec0 · published digest sha256:968bcc53f2d97e304bacc2cf6cc16dec8a39bb6bc5509bc1fe75c56c4edf2ec0 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 2776) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-09T10:52:21Z · failing Docker Scout counts 90 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-09T10:52:07Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3763488911 · transparency-log entry · integrated 2026-11-09T10:58:15Z) [ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:e9a43b81a40c95fbbfc4700d784c9408fadf8bf49d489d88520d55d1f211906a · state attached · log index 3763490247 · transparency-log entry
    • kind sbom · digest sha256:e9a43b81a40c95fbbfc4700d784c9408fadf8bf49d489d88520d55d1f211906a · state attached · log index 3763490754 · transparency-log entry
    • kind vsa · digest sha256:e9a43b81a40c95fbbfc4700d784c9408fadf8bf49d489d88520d55d1f211906a · state attached · log index 3763491051 · transparency-log entry
    • kind provenance · digest sha256:968bcc53f2d97e304bacc2cf6cc16dec8a39bb6bc5509bc1fe75c56c4edf2ec0 · state attached · log index 3763491285 · transparency-log entry
    • kind sbom · digest sha256:968bcc53f2d97e304bacc2cf6cc16dec8a39bb6bc5509bc1fe75c56c4edf2ec0 · state attached · log index 3763491516 · transparency-log entry
    • kind vsa · digest sha256:968bcc53f2d97e304bacc2cf6cc16dec8a39bb6bc5509bc1fe75c56c4edf2ec0 · state attached · log index 3763491771 · transparency-log entry
    (at 2026-11-09T10:58:16Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/influxdb/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-09T05:09:14Z on build host 4 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:968bcc53f2d97e304bacc2cf6cc16dec8a39bb6bc5509bc1fe75c56c4edf2ec0 [clean-room rebuild ledger, runs[687]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-08T15:18:49Z [stage_runs, stage_runs chain 726 stage publish_image]
  • Archive manifests written2026-11-09T10:55:24Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 776 · probed 2026-11-09T10:57:39Z · source g8) [release_images, isa_level_hard]

History

2 events
  • 2026-11-09T10:59:49Z generated: by KitForge release/build_trail.py · generator commit d5e78446f06025d790702ad43076afd5663bfdf4
  • 2026-11-09T11:01:50Z publication: promoted at 2026-11-09T11:00:38Z · promoted digest sha256:e9a43b81a40c95fbbfc4700d784c9408fadf8bf49d489d88520d55d1f211906a · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 410 · checklist status complete · checklist at 2026-11-09T11:01:50Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/influxdb/v3.12.2-CE-ubuntu24.04-r1/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/influxdb/v3.12.2-CE-ubuntu24.04-r1/), as staged for publishing—
ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.rebuild.jsonbeside the archive (prodasset /data/production/influxdb/v3.12.2-CE-ubuntu24.04-r1/), as staged for publishing—
ReadyStack-influxdb-v3.12.2-CE-ubuntu24.04-r1.rebuild.json.sigstorebeside the archive (prodasset /data/production/influxdb/v3.12.2-CE-ubuntu24.04-r1/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/influxdb/v3.12.2-CE-ubuntu24.04-r1/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)423
chainssadb, ReadyStack's engine database (not published)726
defectssadb, ReadyStack's engine database (not published)influxdb v3.12.2-CE-ubuntu24.04-r1
drive_runssadb, ReadyStack's engine database (not published)chain 726
held_roundssadb, ReadyStack's engine database (not published)chain 726
lesson_recallssadb, ReadyStack's engine database (not published)chain 726
micro_step_runssadb, ReadyStack's engine database (not published)chain 726
release_imagessadb, ReadyStack's engine database (not published)influxdb v3.12.2-CE-ubuntu24.04-r1
stage_eventssadb, ReadyStack's engine database (not published)chain 726
stage_runssadb, ReadyStack's engine database (not published)chain 726
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—