kube-scheduler v1.36.6-CE-ubuntu24.04-r4 build trail
How ReadyStack built readystack/kubescheduler:v1.36.6-CE-ubuntu24.04-r4 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.
This trail
As JSON- Image
readystack/kubescheduler:v1.36.6-CE-ubuntu24.04-r4 - Index digestsha256:9cc35664cc0463e9d34224c47c2b996bcb65e941a4300f63e2f874be4b922e80
- linux/amd64 digestsha256:fffd71a58427ebd79ace5f6a205fb71e7644fb46eb2054b8a34a3949652581c1
- Archive
ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.tar.gz - Archive SHA-256 now93da40684b45b9965b66c158dc5e6c8530a5425f2fd41cee6259753125e2caed
- Pins record
docs/PINS.md,docs/provenance/PINS.jsonin the archive (since generated) - Generated2026-11-13T17:15:21Z by KitForge release/build_trail.py
- Sections9 sections, 8 fully recorded; 1 item not recorded
Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:
cosign verify-blob --key https://readystack.dev/keys/cosign.pub \ --bundle ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.trail.json.sigstore ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.trail.json
IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level
Identity
Fully recorded- Productkube-scheduler (kubescheduler) [MANIFEST.json]
- Release tagv1.36.6-CE-ubuntu24.04-r4 [MANIFEST.json]
- Imagereadystack/kubescheduler:v1.36.6-CE-ubuntu24.04-r4 [MANIFEST.json]
- Image index digestsha256:9cc35664cc0463e9d34224c47c2b996bcb65e941a4300f63e2f874be4b922e80 [docs/provenance/LOCKED_DIGEST.txt]
- linux/amd64 image digestsha256:fffd71a58427ebd79ace5f6a205fb71e7644fb46eb2054b8a34a3949652581c1 [ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.rebuild.json, subject.image_manifest_digest]
- ArchiveReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.tar.gz (bytes 526909743) [MANIFEST.json]
- Archive sha256 at publish93da40684b45b9965b66c158dc5e6c8530a5425f2fd41cee6259753125e2caed [MANIFEST.json, tarball_sha256]
- Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
- Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
- Upstream repositoryhttps://github.com/kubernetes/kubernetes [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream refv1.36.6 [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream commit1b2171b110bb2a2542e1322035c6583ec86eb976 [docs/provenance/SOURCE_TREE_HASH.json]
- Source tree hash803692e6a7661d2d72c4cdf0a2a2459bdf6646e2b6c955ed7362f279ee4fa004 (files 29206) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
- Kit tree hashsha256:5395a8e8455f6740f28fa30b3f22f964fbaea7d80794a76ea5a80df68c4e49a6 [ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.rebuild.json, inputs.tree_hash]
- SOURCE_DATE_EPOCH1794578573 (utc 2026-11-13T14:02:53Z) [ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.rebuild.json, inputs.source_date_epoch]
- Base images
- ref golang:1.26.11-bookworm@sha256:dc40a13b61304647ed7e5d581d246b86413dfc29d63c6d018310feb93cd98fc0 · platform digest sha256:79ecd0a7157c7a4cf3b281ced8465350591bf54fedab540e75374a003e1fde7e
- ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
- BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.rebuild.json, engine]
- Engine commit(s)
- commit 073535c62a45bea8f3f14b90d7062837d7d2da35 · dirty yes · first drive 4613
- commit 1252a76ccb9fe0963d2efc0d07028de8176a15fe · dirty yes · first drive 4624
Why this release exists
Fully recorded- Chain1088 (created 2026-11-13T16:04:05Z · trigger customer_request · upstream version v1.36.6) [chains, chains #1088]
- Requestbuild request #763 (rebuild) (requested at 2026-11-13T14:02:54Z · requested by kitforge-agent · version v1.36.6) [build_requests, build_requests #763]
- Reasonrerelease agenda REVISION -> v1.36.6-CE-ubuntu24.04-r4 (decay loop, IMP-08) [build_requests, build_requests #763 request_reason]
- Supersedesreadystack/kubescheduler:v1.36.6-CE-ubuntu24.04-r3 (chain 1019) [chains, chains #1019]
The path through the harness
Fully recorded1 chain · 2 drives · 18 stages · 1 rewind
Chain 1088 release · ready_to_ship
Created 2026-11-13T16:04:05Z, upstream v1.36.6, build request 763 [chains, chains #1088]
| Drive | Started | Minutes | Build host | How it stopped |
|---|---|---|---|---|
| 4613 | 2026-11-13T16:04:42Z | 22 | build host 1 withhold-publish | ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4613] |
| 4624 | 2026-11-13T17:08:23Z | — | build host 1 publish-held | not recorded [drive_runs, drive_runs #4624] |
Stages, in order
| Stage | First start | Passed | Attempts | Gate checks passed | Artifacts (SHA-256) |
|---|---|---|---|---|---|
intake |
2026-11-13T16:04:52Z | 2026-11-13T16:04:53Z | 1 | 4
|
order_json 0b37186b1316… |
acquire |
2026-11-13T16:05:06Z | 2026-11-13T16:05:09Z | 1 | 12
|
source_tree 96b79f03cd5d…license_file cfc7749b96f6…custody_inputs 311d12a04dae…source_tree_hash 2d16f058905f…source_file_manifest 5d272c82a631… |
plan |
2026-11-13T16:06:01Z | 2026-11-13T16:06:02Z | 1 | 10
|
recon_report 22f7f2b520c6…input_pin_plan e81c25c4c2c7…toolchain_lock 424ea769113a… |
assemble_kit |
2026-11-13T16:11:48Z | 2026-11-13T16:11:49Z | 1 | 27
|
dockerfile 9b931f99b485…build_recipe 775fe0d3050b…system_pinning 0630392bbd9f…build_offline_sh 6ab4f08a6ec7…generate_sbom_sh ce0f1e6f1e70…first_boot_health 0d3e099ef6c2…verify_offline_sh 3e8184ea230c…base_image_digests 0aa87ea9f6fe…dockerfile_offline 9b931f99b485…first_build_digest 72b6ca17a4a9… |
remediate |
2026-11-13T16:12:45Z | 2026-11-13T16:12:46Z | 1 | 8
|
vendored_apt e3b0c44298fc…remediation_log 8783287b6d7c…security_report ee3d3ae2784e… |
build_kit |
2026-11-13T16:17:26Z | 2026-11-13T16:17:27Z | 1 | 9
|
cosign_stamp bb81adbfbfdc…locked_digest eca0b1fea21a…freeze_manifest 6da94330efbc…offline_rebuild_transcript 15bb235bbbea… |
verdict |
2026-11-13T16:18:10Z | 2026-11-13T16:18:11Z | 1 | 8
|
scout_verdict f760449f159c… |
publish_image |
2026-11-13T16:18:46Z | 2026-11-13T16:18:47Z | 1 | 7
|
hub_readme fc12dfbe200e…promotion_record dee6a2caa176… |
boot_instance |
2026-11-13T16:18:49Z | 2026-11-13T16:18:50Z | 1 | 3
|
instance_handle 3a42ba5c23e7… |
sbom |
2026-11-13T16:19:01Z | 2026-11-13T16:19:02Z | 1 | 5
|
sbom_md 81e8e62a1349…sbom_json 38bad0c0573d… |
schema_discovery |
2026-11-13T16:19:04Z | 2026-11-13T16:19:05Z | 1 | 7
|
schema_hash 2caabf9b35a9…dependency_tree d244f456f59c…table_classification f646fedcb104… |
admin_handbook |
2026-11-13T16:19:07Z | 2026-11-13T16:19:08Z | 1 | 7
|
api_map aa396677192d…admin_handbook 93fd9fbe394b… |
db_handbook |
2026-11-13T16:19:11Z | 2026-11-13T16:19:12Z | 1 | 8
|
db_handbook 828c8a501442…seed_isolation 8263acb9c5fd… |
seed_data |
2026-11-13T16:19:14Z | 2026-11-13T16:19:15Z | 1 | 6
|
seed_data_sql 6c1f5d0ddc32…seed_cases_json dfc844bb30fd… |
seed_validate |
2026-11-13T16:19:18Z | 2026-11-13T16:19:18Z | 1 | 3
|
seed_data_contract ab6507f33bd6… |
usecase_validate |
2026-11-13T16:19:21Z | 2026-11-13T16:19:22Z | 1 | 10
|
failed_tests 187ba972c2e1…passed_tests f840117edc98…test_results 96f51e6a9a97…usecase_contract 862611b30297… |
finalize_docs |
2026-11-13T16:19:26Z | 2026-11-13T16:19:27Z | 1 | 9
|
defects_json 3abee072fa12…release_notes 283dd13a2212…api_integration_guide bfd4bde4b3d4… |
package_archive invalidated 2026-11-13T17:07:56Z |
2026-11-13T16:26:41Z | 2026-11-13T16:26:43Z | 1 | 37 (final gate PASS)
|
sale_tar 01ee913fcff4…checksums 297bfda5dd6f…verify_md 2084308dca72…rebuild_md 741da4bbcdbc…manifest_txt 48d5a1308b0f…actions_jsonl 7bca19ace1bd…provenance_md 7972ab8228b3…assetchain_log_md e9eccaec0c0f…assetchain_log_json 94be31489321… |
[stage_runs]
Rewinds
- 2026-11-13T17:07:56Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #36808]
Model work per stage
Fully recordedRole: writer model. Calls up to 2026-11-13T16:26:43Z.
4 calls over 2 stages
| Stage | Calls | Refused | Errors | Max attempt | Forced commits | Real tokens | Lesson rules shown |
|---|---|---|---|---|---|---|---|
plan | 2 | 0 | 0 | 1 | 0 | 14572 | L-A183, L-A15 |
remediate | 2 | 0 | 0 | 1 | 0 | 15617 | L-A183, L-A15 |
[micro_step_runs] [lesson_recalls]
Review
Fully recordedRole: review model.
1 round, 1 counted, $0.41 recorded cost
| Round | Started | Critical | Major | Minor | Verdict | Cost | Cap in force | Archive reviewed |
|---|---|---|---|---|---|---|---|---|
| 1 | 2026-11-13T16:27:25Z | 0 | 0 | 1 | clean to publish [held_rounds, held_rounds #1898] | $0.41 | 3 rounds, $40.00 | 01ee913fcff4… |
Defects
Fully recorded- Ledger entries2 [defects, defects where product_slug=kubescheduler and this tag or chain]
- Disclosed in the archive2 [docs/defects/defects.json, entries]
2 ledger entries: by severity low 2; by status open 1, fixed-before-release 1.
| Defect | Severity | Status | Found by | Fixed in |
|---|---|---|---|---|
RSD-kubescheduler-8f845e14b8Admin handbook: The named section is not in this handbook; it exists only in docs/stack/RUNBOOK.md. [defects, defects #286162] | low | open | held review (review model) | — |
RSD-kubescheduler-7302b8a2e1Docker Hub README: README names the wrong Go toolchain (1.26.10); the binary was built with 1.26.11. [defects, defects #286274] | low | fixed-before-release | held review (review model) | — |
Verification
1 item not recorded- Reproduced before publishingyes (rebuilt digest sha256:fffd71a58427ebd79ace5f6a205fb71e7644fb46eb2054b8a34a3949652581c1 · published digest sha256:fffd71a58427ebd79ace5f6a205fb71e7644fb46eb2054b8a34a3949652581c1 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 130) [docs/provenance/REPRO_VERIFICATION.json, verified]
- Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
- Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-13T17:08:44Z · failing Docker Scout counts 83 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
- Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-13T17:08:33Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
- Image signature transparency-log entries
- log index 3857762382 · transparency-log entry
- log index 3857763902 · transparency-log entry
- rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3858631812 · transparency-log entry · integrated 2026-11-13T17:13:01Z) [ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
- Signed attestations
- kind provenance · digest sha256:9cc35664cc0463e9d34224c47c2b996bcb65e941a4300f63e2f874be4b922e80 · state attached · log index 3858642565 · transparency-log entry
- kind sbom · digest sha256:9cc35664cc0463e9d34224c47c2b996bcb65e941a4300f63e2f874be4b922e80 · state attached · log index 3858643979 · transparency-log entry
- kind vsa · digest sha256:9cc35664cc0463e9d34224c47c2b996bcb65e941a4300f63e2f874be4b922e80 · state attached · log index 3858645193 · transparency-log entry
- kind provenance · digest sha256:fffd71a58427ebd79ace5f6a205fb71e7644fb46eb2054b8a34a3949652581c1 · state attached · log index 3858646494 · transparency-log entry
- kind sbom · digest sha256:fffd71a58427ebd79ace5f6a205fb71e7644fb46eb2054b8a34a3949652581c1 · state attached · log index 3858647641 · transparency-log entry
- kind vsa · digest sha256:fffd71a58427ebd79ace5f6a205fb71e7644fb46eb2054b8a34a3949652581c1 · state attached · log index 3858650077 · transparency-log entry
- Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/kubescheduler/recipe) [docs/provenance/PINS.json]
Offline clean-room rebuilds
- 2026-11-13T16:27:29Z on build host 1 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
rebuilt sha256:fffd71a58427ebd79ace5f6a205fb71e7644fb46eb2054b8a34a3949652581c1 [clean-room rebuild ledger, runs[846]]
- Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
Publication
Fully recorded 1 pending at generation- Image pushed (internal tag), publish_image passed2026-11-13T16:18:47Z [stage_runs, stage_runs chain 1088 stage publish_image]
- Archive manifests written2026-11-13T17:10:49Z [PUBLISH_MANIFEST.json, published_at]
- Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)
Packages and CPU level
Fully recorded- x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 726 · probed 2026-11-13T16:15:01Z · source build_kit) [release_images, isa_level_hard]
History
2 events- 2026-11-13T17:15:21Z generated: by KitForge release/build_trail.py · generator commit 1252a76ccb9fe0963d2efc0d07028de8176a15fe
- 2026-11-13T17:17:16Z publication: promoted at 2026-11-13T17:16:04Z · promoted digest sha256:9cc35664cc0463e9d34224c47c2b996bcb65e941a4300f63e2f874be4b922e80 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 556 · checklist status complete · checklist at 2026-11-13T17:17:16Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json
Records
25 records| Record | Where it is | Rows |
|---|---|---|
docs/defects/defects.json | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.tar.gz) | — |
docs/provenance/IMAGE_EVIDENCE.json | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.tar.gz) | — |
docs/provenance/LOCKED_DIGEST.txt | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.tar.gz) | — |
docs/provenance/PINS.json | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.tar.gz) | — |
docs/provenance/REPRO_VERIFICATION.json | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.tar.gz) | — |
docs/provenance/SOURCE_TREE_HASH.json | inside the archive (ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.tar.gz) | — |
MANIFEST.json | beside the archive (prodasset /data/production/kubescheduler/v1.36.6-CE-ubuntu24.04-r4/), as staged for publishing | — |
PUBLISH_MANIFEST.json | beside the archive (prodasset /data/production/kubescheduler/v1.36.6-CE-ubuntu24.04-r4/), as staged for publishing | — |
ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.rebuild.json | beside the archive (prodasset /data/production/kubescheduler/v1.36.6-CE-ubuntu24.04-r4/), as staged for publishing | — |
ReadyStack-kubescheduler-v1.36.6-CE-ubuntu24.04-r4.rebuild.json.sigstore | beside the archive (prodasset /data/production/kubescheduler/v1.36.6-CE-ubuntu24.04-r4/), as staged for publishing | — |
SCOUT_EVIDENCE.json | beside the archive (prodasset /data/production/kubescheduler/v1.36.6-CE-ubuntu24.04-r4/), as staged for publishing | — |
clean-room rebuild ledger | the clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published) | — |
build_requests | sadb, ReadyStack's engine database (not published) | 763 |
chains | sadb, ReadyStack's engine database (not published) | 1088 |
defects | sadb, ReadyStack's engine database (not published) | kubescheduler v1.36.6-CE-ubuntu24.04-r4 |
drive_runs | sadb, ReadyStack's engine database (not published) | chain 1088 |
held_rounds | sadb, ReadyStack's engine database (not published) | chain 1088 |
lesson_recalls | sadb, ReadyStack's engine database (not published) | chain 1088 |
micro_step_runs | sadb, ReadyStack's engine database (not published) | chain 1088 |
release_images | sadb, ReadyStack's engine database (not published) | kubescheduler v1.36.6-CE-ubuntu24.04-r4 |
stage_events | sadb, ReadyStack's engine database (not published) | chain 1088 |
stage_runs | sadb, ReadyStack's engine database (not published) | chain 1088 |
attestations.json | the chain's workspace on the controller (not published) | — |
deliverables/provenance/PROMOTION_RECORD.json | the chain's workspace on the controller (not published) | — |
g8_result.json | the chain's workspace on the controller (not published) | — |