Kubernetes VM Stack v1.36.6-kubevirt1.9.1-CE-scratch-r2 build trail

How ReadyStack built readystack/kubernetesvmstack:v1.36.6-kubevirt1.9.1-CE-scratch-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON

Imagereadystack/kubernetesvmstack:v1.36.6-kubevirt1.9.1-CE-scratch-r2
Index digestsha256:77f9bea6f9789f38057c0ad4b3572145b3076ba89410dc852c62328ea9ad15d1
linux/amd64 digestsha256:0268790dadac6fbc392784cb7f77f996526f4d1b6394bb30228d19ddaae062e9
ArchiveReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.tar.gz
Archive SHA-256 nowac98e5a0650c4549680ac3cf58492a36cce34f252c4939d69af9564f046ff9e8
Generated2026-11-02T23:33:35Z by KitForge release/build_trail.py
Sections9 sections, 4 fully recorded; 10 items not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.trail.json.sigstore ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.trail.json

ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.trail.json ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.trail.json.sigstore ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.trail.md Kubernetes VM Stack product page

Identity Why this release exists The path through the harness Model work per stage Review Defects Verification Publication Packages and CPU level

Identity

1 item not recorded

ProductKubernetes VM Stack (kubernetesvmstack) [MANIFEST.json]
Release tagv1.36.6-kubevirt1.9.1-CE-scratch-r2 [MANIFEST.json]
Imagereadystack/kubernetesvmstack:v1.36.6-kubevirt1.9.1-CE-scratch-r2 [MANIFEST.json]
Image index digestsha256:77f9bea6f9789f38057c0ad4b3572145b3076ba89410dc852c62328ea9ad15d1 [docs/provenance/LOCKED_DIGEST.txt]
linux/amd64 image digestsha256:0268790dadac6fbc392784cb7f77f996526f4d1b6394bb30228d19ddaae062e9 [ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.rebuild.json, subject.image_manifest_digest]
ArchiveReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.tar.gz (bytes 447498540) [MANIFEST.json]
Archive sha256 at publishea02977dc3838c5de177ce37e24a6fd6b4b91a1ad46f2926a41608fd10583b25 [MANIFEST.json, repack_history[0].previous_tarball_sha256]
Archive sha256 nowac98e5a0650c4549680ac3cf58492a36cce34f252c4939d69af9564f046ff9e8 [MANIFEST.json, tarball_sha256]
Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
Repack history
- at 2026-11-01 · label kitfix · reason customer kit files brought up to the current engine: BUILD_OFFLINE.sh (kit root, docs/offline, docs/docker); the header of BUILD_OFFLINE.sh no longer says a --provenance rebuild meets a SLSA build level, comment lines only; not image inputs; image and every build input unchanged · previous sha256 ea02977dc3838c5de177ce37e24a6fd6b4b91a1ad46f2926a41608fd10583b25 · sha256 ac98e5a0650c4549680ac3cf58492a36cce34f252c4939d69af9564f046ff9e8 · replaced BUILD_OFFLINE.sh, docs/docker/BUILD_OFFLINE.sh, docs/offline/BUILD_OFFLINE.sh, rebuild.json
[MANIFEST.json, repack_history]
Upstream repositoryhttps://github.com/kubernetes/kubernetes [docs/provenance/SOURCE_TREE_HASH.json]
Upstream refv1.36.6 [docs/provenance/SOURCE_TREE_HASH.json]
Upstream commit1b2171b110bb2a2542e1322035c6583ec86eb976 [docs/provenance/SOURCE_TREE_HASH.json]
Source tree hash803692e6a7661d2d72c4cdf0a2a2459bdf6646e2b6c955ed7362f279ee4fa004 (files 29206) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
Kit tree hashsha256:9e3648f337245e13af61f1a7d1b5a27d1d4a34bd9b80923135dfb79f448916f1 [ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.rebuild.json, inputs.tree_hash]
SOURCE_DATE_EPOCH1793102572 (utc 2026-10-27T12:02:52Z) [ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.rebuild.json, inputs.source_date_epoch]
Base images
- ref golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af · platform digest sha256:88750ccdd0f2a77fcc00a14b1a48d6409bd8ddb5d7c2dd6ec0b4a2e916daf9d9
[ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.rebuild.json, bases]
BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.rebuild.json, engine]

Not recorded: the engine commit(s) that built it (drive_runs records them for drives from 2026-11-02; this release's drives were rebuilt from line logs, which do not name it)

Why this release exists

Fully recorded

Chain793 (created 2026-10-29T14:39:56Z · trigger customer_request · upstream version v1.36.6-kubevirt1.9.1) [chains, chains #793]
Requestbuild request #472 (rebuild) (requested at 2026-10-29T14:09:38Z · requested by kitforge-agent · version v1.36.6-kubevirt1.9.1) [build_requests, build_requests #472]
Reasonrevision v1.36.6-kubevirt1.9.1-CE-scratch-r2: same upstream version rebuilt (retarget.py --rev-bump) [build_requests, build_requests #472 request_reason]
Supersedesreadystack/kubernetesvmstack:v1.36.6-kubevirt1.9.1-CE-scratch-r1 (chain 792) [chains, chains #792]

The path through the harness

2 items not recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 793 release · shipped

Created 2026-10-29T14:39:56Z, upstream v1.36.6-kubevirt1.9.1, build request 472 [chains, chains #793]

Drive	Started	Minutes	Build host	How it stopped
1058	2026-10-29T14:40:17Z	8	build host 1 withhold-publish	ready_to_ship [drive_runs, drive_runs #1058] rebuilt from a build line's log
1059	2026-10-29T15:05:23Z	5.1	build host 1 publish-held	shipped [drive_runs, drive_runs #1059] rebuilt from a build line's log

Stages, in order

Stage	First start	Passed	Attempts	Gate checks passed	Artifacts (SHA-256)
`intake`	2026-10-29T14:40:23Z	2026-10-29T14:40:24Z	1	4 `exists:order_json` `order_json:json_parses` `order_json:no_forbidden_placeholders` `produces_paths_exist`	—
`acquire`	2026-10-29T14:40:37Z	2026-10-29T14:40:38Z	1	12 `exists:source_tree` `exists:source_tree_hash` `exists:source_file_manifest` `exists:custody_inputs` `exists:license_file` `source_tree:dir_nonempty` `source_tree_hash:json_parses` `source_file_manifest:json_parses` `custody_inputs:json_parses` `license_file:file_nonempty` `produces_paths_exist` `custody_inputs:json_true:ce_audit.ce_only`	—
`plan`	2026-10-29T14:40:55Z	2026-10-29T14:40:56Z	1	10 `exists:recon_report` `exists:input_pin_plan` `exists:toolchain_lock` `recon_report:md_min_sections:3` `recon_report:no_forbidden_placeholders` `input_pin_plan:md_min_sections:2` `input_pin_plan:no_forbidden_placeholders` `toolchain_lock:file_nonempty` `toolchain_lock:no_forbidden_placeholders` `produces_paths_exist`	—
`assemble_kit`	2026-10-29T14:41:17Z	2026-10-29T14:41:18Z	1	27 `exists:dockerfile` `exists:base_image_digests` `exists:system_pinning` `exists:build_recipe` `exists:first_build_digest` `exists:first_boot_health` `exists:dockerfile_offline` `exists:verify_offline_sh` `exists:build_offline_sh` `exists:generate_sbom_sh` `dockerfile:file_nonempty` `dockerfile:no_forbidden_placeholders` `base_image_digests:file_nonempty` `system_pinning:file_nonempty` `build_recipe:json_parses` `first_build_digest:file_nonempty` `first_boot_health:file_nonempty` `dockerfile_offline:file_nonempty` `dockerfile_offline:no_forbidden_placeholders` `verify_offline_sh:file_nonempty` `verify_offline_sh:no_forbidden_placeholders` `build_offline_sh:file_nonempty` `build_offline_sh:no_forbidden_placeholders` `generate_sbom_sh:file_nonempty` `generate_sbom_sh:no_forbidden_placeholders` `produces_paths_exist` `first_boot_health:file_contains:healthy=True`	—
`remediate`	2026-10-29T14:41:47Z	2026-10-29T14:41:48Z	1	8 `exists:vendored_apt` `exists:remediation_log` `exists:security_report` `vendored_apt:dir_exists` `remediation_log:json_parses` `security_report:md_min_sections:2` `security_report:no_forbidden_placeholders` `produces_paths_exist`	—
`build_kit`	2026-10-29T14:43:09Z	2026-10-29T14:43:10Z	1	9 `exists:freeze_manifest` `exists:locked_digest` `exists:cosign_stamp` `exists:offline_rebuild_transcript` `freeze_manifest:json_parses` `locked_digest:file_nonempty` `cosign_stamp:file_nonempty` `offline_rebuild_transcript:json_parses` `produces_paths_exist`	—
`verdict`	2026-10-29T14:43:31Z	2026-10-29T14:43:31Z	1	8 `exists:scout_verdict` `scout_verdict:json_parses` `produces_paths_exist` `scout_verdict:release_check_passed` `scout_verdict:nonroot_green` `scout_verdict:zero_fixable_crit_high` `scout_verdict:osv_clean` `scout_verdict:no_baked_secrets`	—
`publish_image`	2026-10-29T14:43:59Z	2026-10-29T14:44:00Z	1	7 `exists:promotion_record` `exists:hub_readme` `promotion_record:json_parses` `hub_readme:md_min_sections:2` `hub_readme:no_forbidden_placeholders` `produces_paths_exist` `promotion_record:json_true:signed`	—
`boot_instance`	2026-10-29T14:44:02Z	2026-10-29T14:44:03Z	1	3 `exists:instance_handle` `instance_handle:json_parses` `produces_paths_exist`	—
`sbom`	2026-10-29T14:44:09Z	2026-10-29T14:44:10Z	1	5 `exists:sbom_json` `exists:sbom_md` `sbom_json:json_parses` `sbom_md:md_min_sections:1` `produces_paths_exist`	—
`schema_discovery`	2026-10-29T14:44:11Z	2026-10-29T14:44:12Z	1	7 `exists:dependency_tree` `exists:table_classification` `exists:schema_hash` `dependency_tree:json_parses` `table_classification:json_parses` `schema_hash:file_nonempty` `produces_paths_exist`	—
`admin_handbook`	2026-10-29T14:44:14Z	2026-10-29T14:44:15Z	1	7 `exists:admin_handbook` `exists:api_map` `admin_handbook:md_min_sections:10` `admin_handbook:no_forbidden_placeholders` `api_map:json_parses` `produces_paths_exist` `admin_handbook:command_transcripts_clean`	—
`db_handbook`	2026-10-29T14:44:16Z	2026-10-29T14:44:17Z	1	8 `exists:db_handbook` `exists:seed_isolation` `db_handbook:md_min_sections:5` `db_handbook:no_forbidden_placeholders` `seed_isolation:md_min_sections:1` `seed_isolation:no_forbidden_placeholders` `produces_paths_exist` `db_handbook:command_transcripts_clean`	—
`seed_data`	2026-10-29T14:44:19Z	2026-10-29T14:44:20Z	1	6 `exists:seed_data_sql` `exists:seed_cases_json` `seed_data_sql:sql_parses` `seed_data_sql:no_forbidden_placeholders` `seed_cases_json:json_parses` `produces_paths_exist`	—
`seed_validate`	2026-10-29T14:44:21Z	2026-10-29T14:44:22Z	1	3 `exists:seed_data_contract` `seed_data_contract:json_parses` `produces_paths_exist`	—
`usecase_validate`	2026-10-29T14:44:24Z	2026-10-29T14:44:25Z	1	10 `exists:usecase_contract` `exists:passed_tests` `exists:failed_tests` `exists:test_results` `usecase_contract:json_parses` `passed_tests:md_min_sections:1` `failed_tests:md_min_sections:1` `test_results:json_parses` `produces_paths_exist` `test_results:usecase_thresholds:80,70`	—
`finalize_docs`	2026-10-29T14:44:28Z	2026-10-29T14:44:29Z	1	9 `exists:api_integration_guide` `exists:release_notes` `exists:defects_json` `api_integration_guide:md_min_sections:3` `api_integration_guide:no_forbidden_placeholders` `release_notes:md_min_sections:3` `release_notes:no_forbidden_placeholders` `defects_json:json_parses` `produces_paths_exist`	—
`package_archive`	2026-10-29T14:48:14Z	2026-10-29T15:10:27Z	2	33 (final gate PASS) `exists:checksums` `exists:verify_md` `exists:rebuild_md` `exists:provenance_md` `exists:manifest_txt` `exists:assetchain_log_md` `exists:assetchain_log_json` `exists:actions_jsonl` `exists:sale_tar` `checksums:file_nonempty` `verify_md:md_min_sections:2` `verify_md:no_forbidden_placeholders` `rebuild_md:md_min_sections:2` `rebuild_md:no_forbidden_placeholders` `provenance_md:md_min_sections:2` `provenance_md:no_forbidden_placeholders` `manifest_txt:file_nonempty` `assetchain_log_md:md_min_sections:1` `assetchain_log_json:json_parses` `actions_jsonl:file_nonempty` `sale_tar:file_nonempty` `produces_paths_exist` `G8 cosign` `G8 scan_grade` `G8 tag_base_os` `G8 vex_shipped` `G8 scout_grade_a` `G8 script_copies` `G8 three_way_sha` `G8 offline_rebuild` `G8 rebuild_manifest` `G8 artifact_coverage` `G8 assetchain_coverage`	—

[stage_runs]

Rewinds

2026-10-29T15:04:53Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py) [stage_events, stage_events #1255]

Not recorded: each drive's ticks and first failed check (drive_runs records them for drives from 2026-11-02; these drives were rebuilt from line logs)
Not recorded: the sha256 of each stage's artifacts (stage_events records them for stages passed from 2026-11-02; this chain's events were rebuilt from stage_runs and logs) — the archive's CHECKSUMS.sha256 lists the sha256 of every file it ships

Model work per stage

3 items not recorded

Role: writer model. Calls up to 2026-10-29T15:10:27Z.

4 calls over 2 stages

Stage	Calls	Refused	Errors	Max attempt	Forced commits	Real tokens	Lesson rules shown
`plan`	2	0	0	1	not recorded	not recorded	—
`remediate`	2	0	0	1	not recorded	not recorded	—

[micro_step_runs]

Not recorded: forced commits (micro_step_runs records them for calls from 2026-11-02)
Not recorded: real token counts (recorded per call from 2026-11-02; earlier rows hold only an estimate, which is not shown)
Not recorded: the lesson rules shown to the writer model (lesson_recalls holds no rows for this chain: its recorder was silent from 2026-06-06 to 2026-11-02)

Review

2 items not recorded

Role: review model.

1 round, 1 counted, $1.49 recorded cost

Round	Started	Critical	Major	Minor	Verdict	Cost	Cap in force	Archive reviewed
1	2026-10-29T14:48:53Z	0	0	5	clean to publish [held_rounds, held_rounds #87] rebuilt from a held-review state file	$1.49	not recorded	not recorded

Not recorded: the sha256 of the archive each round reviewed (held_rounds records it for rounds from 2026-11-02; these rounds were rebuilt from state files)
Not recorded: the round cap in force at each round (the state files did not keep it)

Defects

Fully recorded

Ledger entries7 [defects, defects where product_slug=kubernetesvmstack and this tag or chain]
Disclosed in the archive4 [docs/defects/defects.json, entries]

7 ledger entries: by severity low 7; by status open 2, fixed-in-release 2, fixed-before-release 3.

Defect	Severity	Status	Found by	Fixed in
`RSD-kubernetesvmstack-2ac9db5b55` Admin handbook: The kubeadm template comment (also in install/controlplane/kubeadm-config.yaml in the image) says every image runs as kube (999:999); the handbook's own measured output in the same document shows… [defects, defects #135433]	low	open	held review (review model)	—
`RSD-kubernetesvmstack-bf67cef408` Admin handbook: The kubeadm template comment says every image runs as kube (999:999); the handbook's own measured output shows etcd as 'etcd' and CoreDNS as 65532:65532. [defects, defects #135480]	low	open	held review (review model)	—
`RSD-kubernetesvmstack-804bf3c8af` Release notes: 'Before exposing this service' contradicts the statement that the image is not a service. [defects, defects #135481]	low	fixed-in-release	held review (review model)	v1.36.6-kubevirt1.9.1-CE-scratch-r2
`RSD-kubernetesvmstack-1d1b1aef72` API guide: The API guide announces a checked list and ends with an empty section. [defects, defects #135482]	low	fixed-before-release	held review (review model)	—
`RSD-kubernetesvmstack-59932fbcb0` PROVENANCE.md: A remnant of the fixed provenance defect: the install bundle is listed as something that is compiled. [defects, defects #135483]	low	fixed-in-release	held review (review model)	v1.36.6-kubevirt1.9.1-CE-scratch-r2
`RSD-kubernetesvmstack-071c35457f` Docker Hub README: The statement that the runbook/RUNBOOK.md copy inside the image is older than the handbook is false for r2: the image's copy is byte-identical to ADMIN_HANDBOOK.md. [defects, defects #135500]	low	fixed-before-release	held review (review model)	—
`RSD-kubernetesvmstack-e4d53cd6e2` Release notes: The runbook's own commands print secrets: `kubeadm init --config ... [defects, defects #135501]	low	fixed-before-release	held review (review model)	—

Verification

2 items not recorded

Reproduced before publishingyes (rebuilt digest sha256:0268790dadac6fbc392784cb7f77f996526f4d1b6394bb30228d19ddaae062e9 · published digest sha256:0268790dadac6fbc392784cb7f77f996526f4d1b6394bb30228d19ddaae062e9 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 44) [docs/provenance/REPRO_VERIFICATION.json, verified]
Final contract gate (G8)PASS (checks cosign, scan_grade, tag_base_os, vex_shipped, scout_grade_a, script_copies, three_way_sha, offline_rebuild, rebuild_manifest, artifact_coverage, assetchain_coverage) [stage_runs, stage_runs chain 793 package_archive gate_result.g8.result]
Grade at releaseA (percent 100 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-10-29T15:05:37Z) [SCOUT_EVIDENCE.json, docker_scout_policy]
First own scan of the releaseA (at 2026-10-29T15:10:39Z · score 100 · rubric cerodeo-v1 · fixable critical 0 · fixable high 0 · syft 1.54.1 · grype 0.120.1 · grype db v6.1.10@2026-10-29T06:23:34Z) [image_scans, image_scans #1554]
Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-10-29T15:05:28Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
Image signature transparency-log entries
- log index 3569521933 · transparency-log entry
- log index 3569523795 · transparency-log entry
[deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3624405504 · transparency-log entry · integrated 2026-11-01T08:27:54Z) [ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
Signed attestations
- kind provenance · digest sha256:77f9bea6f9789f38057c0ad4b3572145b3076ba89410dc852c62328ea9ad15d1 · state attached · log index 3569992600 · transparency-log entry
- kind sbom · digest sha256:77f9bea6f9789f38057c0ad4b3572145b3076ba89410dc852c62328ea9ad15d1 · state attached · log index 3569994460 · transparency-log entry
- kind vsa · digest sha256:77f9bea6f9789f38057c0ad4b3572145b3076ba89410dc852c62328ea9ad15d1 · state attached · log index 3569996861 · transparency-log entry
- kind provenance · digest sha256:0268790dadac6fbc392784cb7f77f996526f4d1b6394bb30228d19ddaae062e9 · state attached · log index 3569999862 · transparency-log entry
- kind sbom · digest sha256:0268790dadac6fbc392784cb7f77f996526f4d1b6394bb30228d19ddaae062e9 · state attached · log index 3570001752 · transparency-log entry
- kind vsa · digest sha256:0268790dadac6fbc392784cb7f77f996526f4d1b6394bb30228d19ddaae062e9 · state attached · log index 3570003510 · transparency-log entry
(at 2026-10-29T15:08:21Z) [attestations.json, results]

Offline clean-room rebuilds

2026-10-29T14:48:56Z on build host 1 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
rebuilt sha256:0268790dadac6fbc392784cb7f77f996526f4d1b6394bb30228d19ddaae062e9 [clean-room rebuild ledger, runs[546]]

Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
Not recorded: the pins record (docs/PINS.md is not in this archive as generated; a repack that adds it is appended to this trail's history)

Publication

Fully recorded

Image pushed (internal tag), publish_image passed2026-10-29T14:44:00Z [stage_runs, stage_runs chain 793 stage publish_image]
Release tag promoted2026-10-29T15:09:57Z (method imagetools_create_retag_by_digest_no_rebuild · digest sha256:77f9bea6f9789f38057c0ad4b3572145b3076ba89410dc852c62328ea9ad15d1 · tag readystack/kubernetesvmstack:v1.36.6-kubevirt1.9.1-CE-scratch-r2) [deliverables/provenance/PROMOTION_RECORD.json, promoted_at]
Archive manifests written2026-10-29T15:06:59Z [PUBLISH_MANIFEST.json, published_at]
Archive cut over on prodasset, package_archive passed2026-10-29T15:10:27Z [stage_runs, stage_runs chain 793 stage package_archive]
Cut-over markerpresent (chain 793) [.cutover.json]
Release checklist and site event2026-10-29T15:10:25Z (status complete · site event 278 · steps grade a verified done · release tag promoted done · cosign signed done · release evidence recorded done · contract gate passed done · archive published done · hub readme live done · reproducibility recorded done · defects ledger published done · catalog available done · build request fulfilled done · seo regenerated skipped · site catalogue refreshed done · site grade recorded done · site queue synced done · customer requests charged done · owners notified done) [deliverables/provenance/RELEASE_CHECKLIST.json, run_at]

Packages and CPU level

Fully recorded

Packages in the image2 (scanned 2026-11-02T06:30:04Z · source backfill:daily-scan) [release_images, package_count]
x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 1 · probed 2026-11-02T17:14:36Z · source backfill) [release_images, isa_level_hard]

History

1 event

2026-11-02T23:33:35Z generated: by KitForge release/build_trail.py · generator commit 916780cc218cf013bd623a8c085aaf73d3b053d0 · note backfill: built after the release from its records

Records

25 records

Record	Where it is	Rows
`docs/defects/defects.json`	inside the archive (ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.tar.gz)	—
`docs/provenance/IMAGE_EVIDENCE.json`	inside the archive (ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.tar.gz)	—
`docs/provenance/LOCKED_DIGEST.txt`	inside the archive (ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.tar.gz)	—
`docs/provenance/REPRO_VERIFICATION.json`	inside the archive (ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.tar.gz)	—
`docs/provenance/SOURCE_TREE_HASH.json`	inside the archive (ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.tar.gz)	—
`.cutover.json`	beside the archive (prodasset /data/production/kubernetesvmstack/v1.36.6-kubevirt1.9.1-CE-scratch-r2/)	—
`MANIFEST.json`	beside the archive (prodasset /data/production/kubernetesvmstack/v1.36.6-kubevirt1.9.1-CE-scratch-r2/)	—
`PUBLISH_MANIFEST.json`	beside the archive (prodasset /data/production/kubernetesvmstack/v1.36.6-kubevirt1.9.1-CE-scratch-r2/)	—
`ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.rebuild.json`	beside the archive (prodasset /data/production/kubernetesvmstack/v1.36.6-kubevirt1.9.1-CE-scratch-r2/)	—
`ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r2.rebuild.json.sigstore`	beside the archive (prodasset /data/production/kubernetesvmstack/v1.36.6-kubevirt1.9.1-CE-scratch-r2/)	—
`SCOUT_EVIDENCE.json`	beside the archive (prodasset /data/production/kubernetesvmstack/v1.36.6-kubevirt1.9.1-CE-scratch-r2/)	—
`clean-room rebuild ledger`	the clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)	—
`build_requests`	sadb, ReadyStack's engine database (not published)	472
`chains`	sadb, ReadyStack's engine database (not published)	793
`defects`	sadb, ReadyStack's engine database (not published)	kubernetesvmstack v1.36.6-kubevirt1.9.1-CE-scratch-r2
`drive_runs`	sadb, ReadyStack's engine database (not published)	chain 793
`held_rounds`	sadb, ReadyStack's engine database (not published)	chain 793
`image_scans`	sadb, ReadyStack's engine database (not published)	1554
`micro_step_runs`	sadb, ReadyStack's engine database (not published)	chain 793
`release_images`	sadb, ReadyStack's engine database (not published)	kubernetesvmstack v1.36.6-kubevirt1.9.1-CE-scratch-r2
`stage_events`	sadb, ReadyStack's engine database (not published)	chain 793
`stage_runs`	sadb, ReadyStack's engine database (not published)	chain 793
`attestations.json`	the chain's workspace on the controller (not published)	—
`deliverables/provenance/PROMOTION_RECORD.json`	the chain's workspace on the controller (not published)	—
`deliverables/provenance/RELEASE_CHECKLIST.json`	the chain's workspace on the controller (not published)	—