Kubernetes VM Stack v1.36.6-kubevirt1.9.1-CE-scratch-r3 build trail

How ReadyStack built readystack/kubernetesvmstack:v1.36.6-kubevirt1.9.1-CE-scratch-r3 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/kubernetesvmstack:v1.36.6-kubevirt1.9.1-CE-scratch-r3
  • Index digestsha256:6afdf25922ad700086b1f94bab5423395a0c1f2d64e6016933e5b1559a022a9b
  • linux/amd64 digestsha256:ec9e9b8a463dbe23ef50afe9b608db2b9ddc2e2a23367a6e6d788435e096b0b4
  • ArchiveReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.tar.gz
  • Archive SHA-256 now00412dd253a5a5dcd37c949302b9c3748d46deb97f40005ecee7f428d916ac0f
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-09T20:24:03Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.trail.json.sigstore ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.trail.json
ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.trail.jsonReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.trail.json.sigstoreReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.trail.mdKubernetes VM Stack product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductKubernetes VM Stack (kubernetesvmstack) [MANIFEST.json]
  • Release tagv1.36.6-kubevirt1.9.1-CE-scratch-r3 [MANIFEST.json]
  • Imagereadystack/kubernetesvmstack:v1.36.6-kubevirt1.9.1-CE-scratch-r3 [MANIFEST.json]
  • Image index digestsha256:6afdf25922ad700086b1f94bab5423395a0c1f2d64e6016933e5b1559a022a9b [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:ec9e9b8a463dbe23ef50afe9b608db2b9ddc2e2a23367a6e6d788435e096b0b4 [ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.tar.gz (bytes 447513428) [MANIFEST.json]
  • Archive sha256 at publish00412dd253a5a5dcd37c949302b9c3748d46deb97f40005ecee7f428d916ac0f [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/kubernetes/kubernetes [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv1.36.6 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit1b2171b110bb2a2542e1322035c6583ec86eb976 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash803692e6a7661d2d72c4cdf0a2a2459bdf6646e2b6c955ed7362f279ee4fa004 (files 29206) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:7b9a70246f8bcf3821bdcf3121ec36d5042835ee357f5382c554ec95287ed28b [ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1793102572 (utc 2026-10-27T12:02:52Z) [ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af · platform digest sha256:88750ccdd0f2a77fcc00a14b1a48d6409bd8ddb5d7c2dd6ec0b4a2e916daf9d9
    [ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.rebuild.json, engine]
  • Engine commit(s)
    • commit 6c084534f784f7171ae351892e74c39b28d639ce · dirty yes · first drive 4109
    • commit 844b5eff31c4198de7a7e3f53d46cba192aeceb8 · dirty yes · first drive 4112
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain936 (created 2026-11-09T19:49:18Z · trigger customer_request · upstream version v1.36.6-kubevirt1.9.1) [chains, chains #936]
  • Requestbuild request #616 (rebuild) (requested at 2026-11-09T19:48:57Z · requested by kitforge-agent · version v1.36.6-kubevirt1.9.1) [build_requests, build_requests #616]
  • Reasonqueued v1.36.6-kubevirt1.9.1-CE-scratch-r3, which has not shipped, with no open build request: opened by the line (scripts/line-request.py) [build_requests, build_requests #616 request_reason]
  • Supersedesreadystack/kubernetesvmstack:v1.36.6-kubevirt1.9.1-CE-scratch-r2 (chain 793) [chains, chains #793]

The path through the harness

Fully recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 936 release · ready_to_ship

Created 2026-11-09T19:49:18Z, upstream v1.36.6-kubevirt1.9.1, build request 616 [chains, chains #936]

DriveStartedMinutesBuild hostHow it stopped
41092026-11-09T19:49:45Z8.3build host 4 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4109]
41122026-11-09T20:19:53Z—build host 4 publish-held not recorded [drive_runs, drive_runs #4112]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-09T19:49:55Z2026-11-09T19:49:55Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json d83b955a3cd7…
acquire 2026-11-09T19:50:09Z2026-11-09T19:50:11Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 96b79f03cd5d…
license_file cfc7749b96f6…
custody_inputs e9fab5b439c5…
source_tree_hash 19d3ba68bff6…
source_file_manifest 0bba737f1dc9…
plan 2026-11-09T19:50:32Z2026-11-09T19:50:33Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report d87a0e0d103d…
input_pin_plan e34b7c461e80…
toolchain_lock f4b7da5aaf6b…
assemble_kit 2026-11-09T19:51:13Z2026-11-09T19:51:14Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 0a0cfb186f45…
build_recipe bb23b214d151…
system_pinning 01ba4719c80b…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health e67bd1e82efc…
verify_offline_sh 3e8184ea230c…
base_image_digests dc5fcb5cb7fa…
dockerfile_offline 0a0cfb186f45…
first_build_digest b714bad2dbdb…
remediate 2026-11-09T19:51:32Z2026-11-09T19:51:33Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 3613f16fff97…
security_report 5638fb2aed66…
build_kit 2026-11-09T19:53:03Z2026-11-09T19:53:04Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 83993a2ec033…
locked_digest 897e6d1563d1…
freeze_manifest 093f6e68d288…
offline_rebuild_transcript 9abfc79abd42…
verdict 2026-11-09T19:53:24Z2026-11-09T19:53:24Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 3f926285d7b4…
publish_image 2026-11-09T19:53:51Z2026-11-09T19:53:52Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme c926ec5492fa…
promotion_record 4770da57f42f…
boot_instance 2026-11-09T19:53:54Z2026-11-09T19:53:55Z1
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle b73f912a42c8…
sbom 2026-11-09T19:54:01Z2026-11-09T19:54:02Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 19687853b492…
sbom_json ee42945ebfff…
schema_discovery 2026-11-09T19:54:05Z2026-11-09T19:54:06Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 8b6b2d10d2f5…
dependency_tree 4b758b971980…
table_classification acd3905871ef…
admin_handbook 2026-11-09T19:54:09Z2026-11-09T19:54:10Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map cffb0311d369…
admin_handbook 02890be45535…
db_handbook 2026-11-09T19:54:12Z2026-11-09T19:54:13Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook f33ebf20dfdd…
seed_isolation b2337d302cee…
seed_data 2026-11-09T19:54:15Z2026-11-09T19:54:16Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 8448e2f8fe5a…
seed_cases_json 6d894ae08a01…
seed_validate 2026-11-09T19:54:18Z2026-11-09T19:54:19Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract b4f3cbf5c2dd…
usecase_validate 2026-11-09T19:54:21Z2026-11-09T19:54:22Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests ca2a5b6a16ab…
passed_tests 757880711e76…
test_results a8e763171a66…
usecase_contract 19345c7641ae…
finalize_docs 2026-11-09T19:54:26Z2026-11-09T19:54:27Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json fbb53b327730…
release_notes 23c31f4747dd…
api_integration_guide 90103ae8fe72…
package_archive invalidated 2026-11-09T20:19:26Z 2026-11-09T19:58:01Z2026-11-09T19:58:03Z1
35 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 5cb4c29937f1…
checksums 784e8d4c2602…
verify_md 99f24be1c7bd…
rebuild_md 01bc96e4e818…
manifest_txt 671c8ca2cb74…
actions_jsonl 05e0d9d72e5a…
provenance_md 13b1dfa81fbd…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 13ef7e37e7bb…

[stage_runs]

Rewinds

  • 2026-11-09T20:19:26Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #29851]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-09T19:58:03Z.

4 calls over 2 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 04009 L-A183, L-A15
remediate2001 04269 L-A183, L-A15

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $1.13 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-09T19:58:39Z 001 clean to publish [held_rounds, held_rounds #1669] $1.13 3 rounds, $40.00 5cb4c29937f1…

Defects

Fully recorded
  • Ledger entries2 [defects, defects where product_slug=kubernetesvmstack and this tag or chain]
  • Disclosed in the archive2 [docs/defects/defects.json, entries]

2 ledger entries: by severity low 2; by status open 1, fixed-before-release 1.

DefectSeverityStatusFound byFixed in
RSD-kubernetesvmstack-812dfef80f
Admin handbook: The kubeadm template comment (also in install/controlplane/kubeadm-config.yaml in the image) says every image runs as kube (999:999); the handbook's own measured output in the same document shows… [defects, defects #224580]		lowopenheld review (review model)—
RSD-kubernetesvmstack-980a8ccb09
Docker Hub README: Docker Hub README names Multus v4.3.1 for the thin DaemonSet the bundle carries; this release carries v4.3.2 (r1 -> r2 moved it). [defects, defects #224688]		lowfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:ec9e9b8a463dbe23ef50afe9b608db2b9ddc2e2a23367a6e6d788435e096b0b4 · published digest sha256:ec9e9b8a463dbe23ef50afe9b608db2b9ddc2e2a23367a6e6d788435e096b0b4 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 41) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 100 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-09T20:20:12Z) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-09T20:20:03Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3769668419 · transparency-log entry · integrated 2026-11-09T20:22:47Z) [ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:6afdf25922ad700086b1f94bab5423395a0c1f2d64e6016933e5b1559a022a9b · state attached · log index 3769672672 · transparency-log entry
    • kind sbom · digest sha256:6afdf25922ad700086b1f94bab5423395a0c1f2d64e6016933e5b1559a022a9b · state attached · log index 3769674763 · transparency-log entry
    • kind vsa · digest sha256:6afdf25922ad700086b1f94bab5423395a0c1f2d64e6016933e5b1559a022a9b · state attached · log index 3769676534 · transparency-log entry
    • kind provenance · digest sha256:ec9e9b8a463dbe23ef50afe9b608db2b9ddc2e2a23367a6e6d788435e096b0b4 · state attached · log index 3769678137 · transparency-log entry
    • kind sbom · digest sha256:ec9e9b8a463dbe23ef50afe9b608db2b9ddc2e2a23367a6e6d788435e096b0b4 · state attached · log index 3769679495 · transparency-log entry
    • kind vsa · digest sha256:ec9e9b8a463dbe23ef50afe9b608db2b9ddc2e2a23367a6e6d788435e096b0b4 · state attached · log index 3769681143 · transparency-log entry
    (at 2026-11-09T20:22:49Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/kubernetesvmstack/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-09T19:58:44Z on build host 5 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:ec9e9b8a463dbe23ef50afe9b608db2b9ddc2e2a23367a6e6d788435e096b0b4 [clean-room rebuild ledger, runs[712]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-09T19:53:52Z [stage_runs, stage_runs chain 936 stage publish_image]
  • Archive manifests written2026-11-09T20:21:34Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 1 · probed 2026-11-09T19:52:04Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-09T20:24:03Z generated: by KitForge release/build_trail.py · generator commit 844b5eff31c4198de7a7e3f53d46cba192aeceb8
  • 2026-11-09T20:25:19Z publication: promoted at 2026-11-09T20:24:35Z · promoted digest sha256:6afdf25922ad700086b1f94bab5423395a0c1f2d64e6016933e5b1559a022a9b · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 436 · checklist status complete · checklist at 2026-11-09T20:25:19Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/kubernetesvmstack/v1.36.6-kubevirt1.9.1-CE-scratch-r3/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/kubernetesvmstack/v1.36.6-kubevirt1.9.1-CE-scratch-r3/), as staged for publishing—
ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.rebuild.jsonbeside the archive (prodasset /data/production/kubernetesvmstack/v1.36.6-kubevirt1.9.1-CE-scratch-r3/), as staged for publishing—
ReadyStack-kubernetesvmstack-v1.36.6-kubevirt1.9.1-CE-scratch-r3.rebuild.json.sigstorebeside the archive (prodasset /data/production/kubernetesvmstack/v1.36.6-kubevirt1.9.1-CE-scratch-r3/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/kubernetesvmstack/v1.36.6-kubevirt1.9.1-CE-scratch-r3/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)616
chainssadb, ReadyStack's engine database (not published)936
defectssadb, ReadyStack's engine database (not published)kubernetesvmstack v1.36.6-kubevirt1.9.1-CE-scratch-r3
drive_runssadb, ReadyStack's engine database (not published)chain 936
held_roundssadb, ReadyStack's engine database (not published)chain 936
lesson_recallssadb, ReadyStack's engine database (not published)chain 936
micro_step_runssadb, ReadyStack's engine database (not published)chain 936
release_imagessadb, ReadyStack's engine database (not published)kubernetesvmstack v1.36.6-kubevirt1.9.1-CE-scratch-r3
stage_eventssadb, ReadyStack's engine database (not published)chain 936
stage_runssadb, ReadyStack's engine database (not published)chain 936
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—