kube-controller-manager v1.36.6-CE-ubuntu24.04-r2 build trail

How ReadyStack built readystack/kubecontrollermanager:v1.36.6-CE-ubuntu24.04-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/kubecontrollermanager:v1.36.6-CE-ubuntu24.04-r2
  • Index digestsha256:b31320a807e19e34be43563a0c9241913502b5258a76b7842c0ccb82b04d3e50
  • linux/amd64 digestsha256:76b1be21fad73f4a416bf868bac3a8fe312c314f4df25e4aeabbe39ac5826d96
  • ArchiveReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.tar.gz
  • Archive SHA-256 now0683a83e5350a1d9625989b443d0d5fe0d9fae24b52cbdbd72b78e01ea006d9a
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-09T01:04:41Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.trail.json.sigstore ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.trail.json
ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.trail.jsonReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.trail.json.sigstoreReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.trail.mdkube-controller-manager product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • Productkube-controller-manager (kubecontrollermanager) [MANIFEST.json]
  • Release tagv1.36.6-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Imagereadystack/kubecontrollermanager:v1.36.6-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Image index digestsha256:b31320a807e19e34be43563a0c9241913502b5258a76b7842c0ccb82b04d3e50 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:76b1be21fad73f4a416bf868bac3a8fe312c314f4df25e4aeabbe39ac5826d96 [ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.tar.gz (bytes 523394779) [MANIFEST.json]
  • Archive sha256 at publish0683a83e5350a1d9625989b443d0d5fe0d9fae24b52cbdbd72b78e01ea006d9a [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/kubernetes/kubernetes [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv1.36.6 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit1b2171b110bb2a2542e1322035c6583ec86eb976 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash803692e6a7661d2d72c4cdf0a2a2459bdf6646e2b6c955ed7362f279ee4fa004 (files 29206) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:7dfca3da2a88bfb641b6ba5f61812ab81dfa8fba2f293bdc8eb63e1b0afffd43 [ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1793102572 (utc 2026-10-27T12:02:52Z) [ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af · platform digest sha256:88750ccdd0f2a77fcc00a14b1a48d6409bd8ddb5d7c2dd6ec0b4a2e916daf9d9
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.rebuild.json, engine]
  • Engine commit(s)
    • commit 76d81c24c43ddcadfccac6684668838e8438bf96 · dirty yes · first drive 3896
    • commit 1ea756267573eef76fe114e9b260f9f605d2767d · dirty yes · first drive 3911
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain903 (created 2026-11-08T23:29:48Z · trigger customer_request · upstream version v1.36.6) [chains, chains #903]
  • Requestbuild request #598 (rebuild) (requested at 2026-11-08T23:28:38Z · requested by kitforge-agent · version v1.36.6) [build_requests, build_requests #598]
  • Reasonrevision v1.36.6-CE-ubuntu24.04-r2: golang.org/x/net v0.62.0 + apt floors, PR #250; hand-bumped strategy opened no request and the line skipped it 20:42Z [build_requests, build_requests #598 request_reason]
  • Supersedesreadystack/kubecontrollermanager:v1.36.6-CE-ubuntu24.04-r1 (chain 775) [chains, chains #775]

The path through the harness

Fully recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 903 release · ready_to_ship

Created 2026-11-08T23:29:48Z, upstream v1.36.6, build request 598 [chains, chains #903]

DriveStartedMinutesBuild hostHow it stopped
38962026-11-08T23:30:45Z24.8build host 1 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #3896]
39112026-11-09T00:58:52Z—build host 1 publish-held not recorded [drive_runs, drive_runs #3911]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-08T23:30:56Z2026-11-08T23:30:57Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 5e5f061a8d5b…
acquire 2026-11-08T23:31:10Z2026-11-08T23:31:13Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 96b79f03cd5d…
license_file cfc7749b96f6…
custody_inputs 19898ae42a12…
source_tree_hash 6e4d6eb3dbc8…
source_file_manifest b4e6f454c420…
plan 2026-11-08T23:32:04Z2026-11-08T23:32:05Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 0c85eb9bf540…
input_pin_plan 7deed74de9b5…
toolchain_lock 32adf423ef1e…
assemble_kit 2026-11-08T23:38:29Z2026-11-08T23:38:30Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile a871a61ef31e…
build_recipe 167d47a4942b…
system_pinning 0630392bbd9f…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 30c77b40a160…
verify_offline_sh 3e8184ea230c…
base_image_digests c289e1db4704…
dockerfile_offline a871a61ef31e…
first_build_digest 375c7cbbfced…
remediate 2026-11-08T23:39:48Z2026-11-08T23:39:49Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 93693ee9b15f…
security_report eb92eb61c774…
build_kit 2026-11-08T23:46:18Z2026-11-08T23:46:18Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 78034b15edd5…
locked_digest aa3c04e29681…
freeze_manifest a628f2c7adf6…
offline_rebuild_transcript 48eb4e9e3814…
verdict 2026-11-08T23:47:02Z2026-11-08T23:47:03Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict f0839fab10bb…
publish_image 2026-11-08T23:47:38Z2026-11-08T23:47:39Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 0500ff84f64d…
promotion_record 76754fd21082…
boot_instance 2026-11-08T23:47:42Z2026-11-08T23:47:43Z1
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 5ec5deae21c8…
sbom 2026-11-08T23:47:54Z2026-11-08T23:47:55Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 84e63347c89b…
sbom_json 513cfef77a47…
schema_discovery 2026-11-08T23:47:58Z2026-11-08T23:47:58Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 5ccd3d9b6527…
dependency_tree 7e9fe474da8f…
table_classification a7af6d3ccd48…
admin_handbook 2026-11-08T23:48:02Z2026-11-08T23:48:03Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 46945a905687…
admin_handbook 09cf526b654b…
db_handbook 2026-11-08T23:48:06Z2026-11-08T23:48:07Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 4838410a853c…
seed_isolation b223d0880bab…
seed_data 2026-11-08T23:48:09Z2026-11-08T23:48:10Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 6d5e5772342b…
seed_cases_json 3a1562fa9bee…
seed_validate 2026-11-08T23:48:13Z2026-11-08T23:48:14Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 5dcfcaa4c88f…
usecase_validate 2026-11-08T23:48:17Z2026-11-08T23:48:18Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests 8121d2971f2a…
passed_tests 4c2e7cb83309…
test_results 96f51e6a9a97…
usecase_contract 6fee6e8c7e20…
finalize_docs 2026-11-08T23:48:22Z2026-11-08T23:48:23Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 17c9e46a8213…
release_notes 8d33019f902c…
api_integration_guide 3e24185d8ced…
package_archive invalidated 2026-11-09T00:58:23Z 2026-11-08T23:55:28Z2026-11-08T23:55:30Z1
34 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 76faa94d9121…
checksums 053a86bdde1d…
verify_md 95eb06aee9f4…
rebuild_md a720f58292b9…
manifest_txt 32dab4e7969c…
actions_jsonl 833709586bd0…
provenance_md 9e78ff003f04…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json ef05035206ea…

[stage_runs]

Rewinds

  • 2026-11-09T00:58:23Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #27741]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-08T23:55:30Z.

4 calls over 2 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 014453 —
remediate2001 021486 L-A08, L-038, L-036, L-034, L-032

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.37 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-08T23:56:37Z 001 clean to publish [held_rounds, held_rounds #1555] $0.37 3 rounds, $40.00 76faa94d9121…

Defects

Fully recorded
  • Ledger entries1 [defects, defects where product_slug=kubecontrollermanager and this tag or chain]
  • Disclosed in the archive1 [docs/defects/defects.json, entries]

1 ledger entry: by severity low 1; by status open 1.

DefectSeverityStatusFound byFixed in
RSD-kubecontrollermanager-6e6cc44dd2
Admin handbook: Handbook says no comparison of the two images is recorded, but the release notes record one (wording only; no customer action affected). [defects, defects #187748]		lowopenheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:76b1be21fad73f4a416bf868bac3a8fe312c314f4df25e4aeabbe39ac5826d96 · published digest sha256:76b1be21fad73f4a416bf868bac3a8fe312c314f4df25e4aeabbe39ac5826d96 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 188) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-09T00:59:13Z · failing Docker Scout counts 83 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-09T00:59:03Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3760028423 · transparency-log entry · integrated 2026-11-09T01:03:17Z) [ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:b31320a807e19e34be43563a0c9241913502b5258a76b7842c0ccb82b04d3e50 · state attached · log index 3760028678 · transparency-log entry
    • kind sbom · digest sha256:b31320a807e19e34be43563a0c9241913502b5258a76b7842c0ccb82b04d3e50 · state attached · log index 3760028818 · transparency-log entry
    • kind vsa · digest sha256:b31320a807e19e34be43563a0c9241913502b5258a76b7842c0ccb82b04d3e50 · state attached · log index 3760028949 · transparency-log entry
    • kind provenance · digest sha256:76b1be21fad73f4a416bf868bac3a8fe312c314f4df25e4aeabbe39ac5826d96 · state attached · log index 3760029072 · transparency-log entry
    • kind sbom · digest sha256:76b1be21fad73f4a416bf868bac3a8fe312c314f4df25e4aeabbe39ac5826d96 · state attached · log index 3760029191 · transparency-log entry
    • kind vsa · digest sha256:76b1be21fad73f4a416bf868bac3a8fe312c314f4df25e4aeabbe39ac5826d96 · state attached · log index 3760029296 · transparency-log entry
    (at 2026-11-09T01:03:17Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/kubecontrollermanager/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-08T23:56:42Z on build host 4 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:76b1be21fad73f4a416bf868bac3a8fe312c314f4df25e4aeabbe39ac5826d96 [clean-room rebuild ledger, runs[674]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-08T23:47:39Z [stage_runs, stage_runs chain 903 stage publish_image]
  • Archive manifests written2026-11-09T01:01:12Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 726 · probed 2026-11-08T23:42:55Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-09T01:04:41Z generated: by KitForge release/build_trail.py · generator commit ba66d135fc96464ab9d6f92177351d3049931108
  • 2026-11-09T01:06:17Z publication: promoted at 2026-11-09T01:05:13Z · promoted digest sha256:b31320a807e19e34be43563a0c9241913502b5258a76b7842c0ccb82b04d3e50 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 399 · checklist status complete · checklist at 2026-11-09T01:06:17Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r2/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.rebuild.jsonbeside the archive (prodasset /data/production/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-kubecontrollermanager-v1.36.6-CE-ubuntu24.04-r2.rebuild.json.sigstorebeside the archive (prodasset /data/production/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r2/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/kubecontrollermanager/v1.36.6-CE-ubuntu24.04-r2/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)598
chainssadb, ReadyStack's engine database (not published)903
defectssadb, ReadyStack's engine database (not published)kubecontrollermanager v1.36.6-CE-ubuntu24.04-r2
drive_runssadb, ReadyStack's engine database (not published)chain 903
held_roundssadb, ReadyStack's engine database (not published)chain 903
lesson_recallssadb, ReadyStack's engine database (not published)chain 903
micro_step_runssadb, ReadyStack's engine database (not published)chain 903
release_imagessadb, ReadyStack's engine database (not published)kubecontrollermanager v1.36.6-CE-ubuntu24.04-r2
stage_eventssadb, ReadyStack's engine database (not published)chain 903
stage_runssadb, ReadyStack's engine database (not published)chain 903
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—