kube-scheduler v1.36.6-CE-ubuntu24.04-r3 build trail
How ReadyStack built readystack/kubescheduler:v1.36.6-CE-ubuntu24.04-r3 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.
This trail
As JSON- Image
readystack/kubescheduler:v1.36.6-CE-ubuntu24.04-r3 - Index digestsha256:f2bbe05f998e85280638e6e198532234602a247497225243994d7dd108b8c49f
- linux/amd64 digestsha256:611ee0ead3de426c8ce2fe66ce500aabcd314a31f580656434389b186d40dc99
- Archive
ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.tar.gz - Archive SHA-256 now54b705c0bd25d2b829af70253973e9bf8876ad8ed2ef14952b2e079bd624088e
- Pins record
docs/PINS.md,docs/provenance/PINS.jsonin the archive (since generated) - Generated2026-11-12T12:45:12Z by KitForge release/build_trail.py
- Sections9 sections, 8 fully recorded; 1 item not recorded
Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:
cosign verify-blob --key https://readystack.dev/keys/cosign.pub \ --bundle ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.trail.json.sigstore ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.trail.json
IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level
Identity
Fully recorded- Productkube-scheduler (kubescheduler) [MANIFEST.json]
- Release tagv1.36.6-CE-ubuntu24.04-r3 [MANIFEST.json]
- Imagereadystack/kubescheduler:v1.36.6-CE-ubuntu24.04-r3 [MANIFEST.json]
- Image index digestsha256:f2bbe05f998e85280638e6e198532234602a247497225243994d7dd108b8c49f [docs/provenance/LOCKED_DIGEST.txt]
- linux/amd64 image digestsha256:611ee0ead3de426c8ce2fe66ce500aabcd314a31f580656434389b186d40dc99 [ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.rebuild.json, subject.image_manifest_digest]
- ArchiveReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.tar.gz (bytes 522982570) [MANIFEST.json]
- Archive sha256 at publish54b705c0bd25d2b829af70253973e9bf8876ad8ed2ef14952b2e079bd624088e [MANIFEST.json, tarball_sha256]
- Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
- Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
- Upstream repositoryhttps://github.com/kubernetes/kubernetes [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream refv1.36.6 [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream commit1b2171b110bb2a2542e1322035c6583ec86eb976 [docs/provenance/SOURCE_TREE_HASH.json]
- Source tree hash803692e6a7661d2d72c4cdf0a2a2459bdf6646e2b6c955ed7362f279ee4fa004 (files 29206) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
- Kit tree hashsha256:de03dfa402717499f69411f9e94340550e6f94cc4487a5ca4e0adbbe74458933 [ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.rebuild.json, inputs.tree_hash]
- SOURCE_DATE_EPOCH1794391159 (utc 2026-11-11T09:59:19Z) [ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.rebuild.json, inputs.source_date_epoch]
- Base images
- ref golang:1.26.11-bookworm@sha256:dc40a13b61304647ed7e5d581d246b86413dfc29d63c6d018310feb93cd98fc0 · platform digest sha256:79ecd0a7157c7a4cf3b281ced8465350591bf54fedab540e75374a003e1fde7e
- ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
- BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.rebuild.json, engine]
- Engine commit(s)
- commit 28713a5f8609b228967998dd71acc203cdd43d34 · dirty yes · first drive 4412
- commit 27badbefbe8aac72eb90e98ea8f843a03c177b52 · dirty yes · first drive 4423
Why this release exists
Fully recorded- Chain1019 (created 2026-11-12T11:34:11Z · trigger customer_request · upstream version v1.36.6) [chains, chains #1019]
- Requestbuild request #670 (rebuild) (requested at 2026-11-11T09:59:21Z · requested by kitforge-agent · version v1.36.6) [build_requests, build_requests #670]
- Reasonrerelease agenda REVISION -> v1.36.6-CE-ubuntu24.04-r3 (decay loop, IMP-08) [build_requests, build_requests #670 request_reason]
- Supersedesreadystack/kubescheduler:v1.36.6-CE-ubuntu24.04-r2 (chain 902) [chains, chains #902]
The path through the harness
Fully recorded1 chain · 2 drives · 18 stages · 1 rewind
Chain 1019 release · ready_to_ship
Created 2026-11-12T11:34:11Z, upstream v1.36.6, build request 670 [chains, chains #1019]
| Drive | Started | Minutes | Build host | How it stopped |
|---|---|---|---|---|
| 4412 | 2026-11-12T11:34:46Z | 23.6 | build host 1 withhold-publish | ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4412] |
| 4423 | 2026-11-12T12:39:25Z | — | build host 1 publish-held | not recorded [drive_runs, drive_runs #4423] |
Stages, in order
| Stage | First start | Passed | Attempts | Gate checks passed | Artifacts (SHA-256) |
|---|---|---|---|---|---|
intake |
2026-11-12T11:34:56Z | 2026-11-12T11:34:57Z | 1 | 4
|
order_json 9e440add8899… |
acquire |
2026-11-12T11:35:14Z | 2026-11-12T11:35:19Z | 1 | 12
|
source_tree 96b79f03cd5d…license_file cfc7749b96f6…custody_inputs 311d12a04dae…source_tree_hash 2d16f058905f…source_file_manifest 5d272c82a631… |
plan |
2026-11-12T11:36:11Z | 2026-11-12T11:36:13Z | 1 | 10
|
recon_report 3bf4f15ff959…input_pin_plan 2bb8008ab906…toolchain_lock 427802238180… |
assemble_kit |
2026-11-12T11:41:39Z | 2026-11-12T11:41:40Z | 1 | 27
|
dockerfile 8b6d717df0e4…build_recipe b13c3d170af7…system_pinning 0630392bbd9f…build_offline_sh 6ab4f08a6ec7…generate_sbom_sh ce0f1e6f1e70…first_boot_health 5d7249aadaaa…verify_offline_sh 3e8184ea230c…base_image_digests 0aa87ea9f6fe…dockerfile_offline 8b6d717df0e4…first_build_digest 0243269f6ee5… |
remediate |
2026-11-12T11:42:38Z | 2026-11-12T11:42:39Z | 1 | 8
|
vendored_apt e3b0c44298fc…remediation_log 1decc4f5268c…security_report 4adb6084f34b… |
build_kit |
2026-11-12T11:47:53Z | 2026-11-12T11:47:54Z | 1 | 9
|
cosign_stamp c219bae54e4a…locked_digest c9f57c178359…freeze_manifest 0698cbc9520e…offline_rebuild_transcript 50327dc11eb0… |
verdict |
2026-11-12T11:48:33Z | 2026-11-12T11:48:34Z | 1 | 8
|
scout_verdict a91d0ba37c2c… |
publish_image |
2026-11-12T11:49:08Z | 2026-11-12T11:49:09Z | 1 | 7
|
hub_readme 3132f8c0fe49…promotion_record 06fdc41fceba… |
boot_instance |
2026-11-12T11:49:11Z | 2026-11-12T11:49:12Z | 1 | 3
|
instance_handle c0c67a45597b… |
sbom |
2026-11-12T11:49:25Z | 2026-11-12T11:49:25Z | 1 | 5
|
sbom_md d618b34bfd8d…sbom_json b4118085d198… |
schema_discovery |
2026-11-12T11:49:28Z | 2026-11-12T11:49:29Z | 1 | 7
|
schema_hash 2caabf9b35a9…dependency_tree d244f456f59c…table_classification f646fedcb104… |
admin_handbook |
2026-11-12T11:49:31Z | 2026-11-12T11:49:32Z | 1 | 7
|
api_map aa396677192d…admin_handbook 0312627bfeec… |
db_handbook |
2026-11-12T11:49:35Z | 2026-11-12T11:49:35Z | 1 | 8
|
db_handbook 828c8a501442…seed_isolation 8263acb9c5fd… |
seed_data |
2026-11-12T11:49:38Z | 2026-11-12T11:49:39Z | 1 | 6
|
seed_data_sql 6c1f5d0ddc32…seed_cases_json dfc844bb30fd… |
seed_validate |
2026-11-12T11:49:42Z | 2026-11-12T11:49:43Z | 1 | 3
|
seed_data_contract ab6507f33bd6… |
usecase_validate |
2026-11-12T11:49:45Z | 2026-11-12T11:49:46Z | 1 | 10
|
failed_tests 187ba972c2e1…passed_tests f840117edc98…test_results 96f51e6a9a97…usecase_contract 862611b30297… |
finalize_docs |
2026-11-12T11:49:50Z | 2026-11-12T11:49:51Z | 1 | 9
|
defects_json faf5bbc47132…release_notes da1365f8bb35…api_integration_guide a9af445f8791… |
package_archive invalidated 2026-11-12T12:39:00Z |
2026-11-12T11:58:20Z | 2026-11-12T11:58:22Z | 1 | 37 (final gate PASS)
|
sale_tar 0c13ae3e86b2…checksums 64027e22d2d4…verify_md 9d789611ea82…rebuild_md fec2075cd709…manifest_txt 83afa441c665…actions_jsonl 5360a44a588b…provenance_md 11c12ee99869…assetchain_log_md e9eccaec0c0f…assetchain_log_json 50005a08f0c4… |
[stage_runs]
Rewinds
- 2026-11-12T12:39:00Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #33775]
Model work per stage
Fully recordedRole: writer model. Calls up to 2026-11-12T11:58:22Z.
4 calls over 2 stages
| Stage | Calls | Refused | Errors | Max attempt | Forced commits | Real tokens | Lesson rules shown |
|---|---|---|---|---|---|---|---|
plan | 2 | 0 | 0 | 1 | 0 | 14151 | — |
remediate | 2 | 0 | 0 | 1 | 0 | 19221 | L-A08, L-038, L-036, L-034, L-032 |
[micro_step_runs] [lesson_recalls]
Review
Fully recordedRole: review model.
1 round, 1 counted, $0.20 recorded cost
| Round | Started | Critical | Major | Minor | Verdict | Cost | Cap in force | Archive reviewed |
|---|---|---|---|---|---|---|---|---|
| 1 | 2026-11-12T11:59:04Z | 0 | 0 | 0 | clean to publish [held_rounds, held_rounds #1812] | $0.20 | 3 rounds, $40.00 | 0c13ae3e86b2… |
Defects
Fully recorded- Ledger entries1 [defects, defects where product_slug=kubescheduler and this tag or chain]
- Disclosed in the archive1 [docs/defects/defects.json, entries]
1 ledger entry: by severity low 1; by status open 1.
| Defect | Severity | Status | Found by | Fixed in |
|---|---|---|---|---|
RSD-kubescheduler-db0c8b7baaAdmin handbook: The named section is not in this handbook; it exists only in docs/stack/RUNBOOK.md. [defects, defects #268176] | low | open | held review (review model) | — |
Verification
1 item not recorded- Reproduced before publishingyes (rebuilt digest sha256:611ee0ead3de426c8ce2fe66ce500aabcd314a31f580656434389b186d40dc99 · published digest sha256:611ee0ead3de426c8ce2fe66ce500aabcd314a31f580656434389b186d40dc99 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 151) [docs/provenance/REPRO_VERIFICATION.json, verified]
- Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
- Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-12T12:39:43Z · failing Docker Scout counts 83 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
- Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-12T12:39:35Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
- Image signature transparency-log entries
- log index 3831745814 · transparency-log entry
- log index 3831747385 · transparency-log entry
- rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3832569878 · transparency-log entry · integrated 2026-11-12T12:43:44Z) [ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
- Signed attestations
- kind provenance · digest sha256:f2bbe05f998e85280638e6e198532234602a247497225243994d7dd108b8c49f · state attached · log index 3832573503 · transparency-log entry
- kind sbom · digest sha256:f2bbe05f998e85280638e6e198532234602a247497225243994d7dd108b8c49f · state attached · log index 3832574990 · transparency-log entry
- kind vsa · digest sha256:f2bbe05f998e85280638e6e198532234602a247497225243994d7dd108b8c49f · state attached · log index 3832576644 · transparency-log entry
- kind provenance · digest sha256:611ee0ead3de426c8ce2fe66ce500aabcd314a31f580656434389b186d40dc99 · state attached · log index 3832577798 · transparency-log entry
- kind sbom · digest sha256:611ee0ead3de426c8ce2fe66ce500aabcd314a31f580656434389b186d40dc99 · state attached · log index 3832579048 · transparency-log entry
- kind vsa · digest sha256:611ee0ead3de426c8ce2fe66ce500aabcd314a31f580656434389b186d40dc99 · state attached · log index 3832580326 · transparency-log entry
- Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/kubescheduler/recipe) [docs/provenance/PINS.json]
Offline clean-room rebuilds
- 2026-11-12T11:59:09Z on build host 5 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
rebuilt sha256:611ee0ead3de426c8ce2fe66ce500aabcd314a31f580656434389b186d40dc99 [clean-room rebuild ledger, runs[789]]
- Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
Publication
Fully recorded 1 pending at generation- Image pushed (internal tag), publish_image passed2026-11-12T11:49:09Z [stage_runs, stage_runs chain 1019 stage publish_image]
- Archive manifests written2026-11-12T12:41:42Z [PUBLISH_MANIFEST.json, published_at]
- Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)
Packages and CPU level
Fully recorded- x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 726 · probed 2026-11-12T11:45:03Z · source build_kit) [release_images, isa_level_hard]
History
2 events- 2026-11-12T12:45:12Z generated: by KitForge release/build_trail.py · generator commit 27badbefbe8aac72eb90e98ea8f843a03c177b52
- 2026-11-12T12:46:50Z publication: promoted at 2026-11-12T12:45:45Z · promoted digest sha256:f2bbe05f998e85280638e6e198532234602a247497225243994d7dd108b8c49f · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 505 · checklist status complete · checklist at 2026-11-12T12:46:50Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json
Records
25 records| Record | Where it is | Rows |
|---|---|---|
docs/defects/defects.json | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.tar.gz) | — |
docs/provenance/IMAGE_EVIDENCE.json | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.tar.gz) | — |
docs/provenance/LOCKED_DIGEST.txt | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.tar.gz) | — |
docs/provenance/PINS.json | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.tar.gz) | — |
docs/provenance/REPRO_VERIFICATION.json | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.tar.gz) | — |
docs/provenance/SOURCE_TREE_HASH.json | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.tar.gz) | — |
MANIFEST.json | beside the archive (prodasset /data/production/kubescheduler/v1.36.6-CE-ubuntu24.04-r3/), as staged for publishing | — |
PUBLISH_MANIFEST.json | beside the archive (prodasset /data/production/kubescheduler/v1.36.6-CE-ubuntu24.04-r3/), as staged for publishing | — |
ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.rebuild.json | beside the archive (prodasset /data/production/kubescheduler/v1.36.6-CE-ubuntu24.04-r3/), as staged for publishing | — |
ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r3.rebuild.json.sigstore | beside the archive (prodasset /data/production/kubescheduler/v1.36.6-CE-ubuntu24.04-r3/), as staged for publishing | — |
SCOUT_EVIDENCE.json | beside the archive (prodasset /data/production/kubescheduler/v1.36.6-CE-ubuntu24.04-r3/), as staged for publishing | — |
clean-room rebuild ledger | the clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published) | — |
build_requests | sadb, ReadyStack's engine database (not published) | 670 |
chains | sadb, ReadyStack's engine database (not published) | 1019 |
defects | sadb, ReadyStack's engine database (not published) | kubescheduler v1.36.6-CE-ubuntu24.04-r3 |
drive_runs | sadb, ReadyStack's engine database (not published) | chain 1019 |
held_rounds | sadb, ReadyStack's engine database (not published) | chain 1019 |
lesson_recalls | sadb, ReadyStack's engine database (not published) | chain 1019 |
micro_step_runs | sadb, ReadyStack's engine database (not published) | chain 1019 |
release_images | sadb, ReadyStack's engine database (not published) | kubescheduler v1.36.6-CE-ubuntu24.04-r3 |
stage_events | sadb, ReadyStack's engine database (not published) | chain 1019 |
stage_runs | sadb, ReadyStack's engine database (not published) | chain 1019 |
attestations.json | the chain's workspace on the controller (not published) | — |
deliverables/provenance/PROMOTION_RECORD.json | the chain's workspace on the controller (not published) | — |
g8_result.json | the chain's workspace on the controller (not published) | — |