kube-vip v1.3.1-CE-ubuntu24.04-r2 build trail

How ReadyStack built readystack/kubevip:v1.3.1-CE-ubuntu24.04-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/kubevip:v1.3.1-CE-ubuntu24.04-r2
  • Index digestsha256:d5070fd670080e1b5035a787d03451c60141e2f6d9a677f2f632d5cc34fa5c2f
  • linux/amd64 digestsha256:4d386696413b5756606ff3ea0616ae0508191f84851518a5bdbd9774922943b4
  • ArchiveReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.tar.gz
  • Archive SHA-256 noweaae29eb6c936fa1c093f506a73b21b999fd5cfc03d9bf0e6f22f82d4fb712ed
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-07T12:10:06Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.trail.json.sigstore ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.trail.json
ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.trail.jsonReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.trail.json.sigstoreReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.trail.mdkube-vip product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • Productkube-vip (kubevip) [MANIFEST.json]
  • Release tagv1.3.1-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Imagereadystack/kubevip:v1.3.1-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Image index digestsha256:d5070fd670080e1b5035a787d03451c60141e2f6d9a677f2f632d5cc34fa5c2f [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:4d386696413b5756606ff3ea0616ae0508191f84851518a5bdbd9774922943b4 [ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.tar.gz (bytes 465834525) [MANIFEST.json]
  • Archive sha256 at publisheaae29eb6c936fa1c093f506a73b21b999fd5cfc03d9bf0e6f22f82d4fb712ed [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/kube-vip/kube-vip [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv1.3.1 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit6da770eac1eed9409a9feaccda3d782c94424c24 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashd60b5906d58daea49f560973d574c32f1accf28d8a801dad65ad35aaa8f3e2fb (files 295) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:3f404ed7a1d7ff1bc428b89d13570113aad989073d44945da495ffd94ef38bde [ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1792401456 (utc 2026-10-19T09:17:36Z) [ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 · platform digest sha256:fea12ba16096adec0f699ce1c4da2154d320450e56c1f63671f95d2a3551c77b
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.rebuild.json, engine]
  • Engine commit(s)
    • commit 373d3c6436c70a6b11e2c6f6d2aa49fc56a5a5c1 · dirty yes · first drive 3651
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain859 (created 2026-11-07T11:11:25Z · trigger customer_request · upstream version v1.3.1) [chains, chains #859]
  • Requestbuild request #538 (rebuild) (requested at 2026-11-07T09:05:53Z · requested by kitforge-agent · version v1.3.1) [build_requests, build_requests #538]
  • Reasonrerelease agenda REVISION -> v1.3.1-CE-ubuntu24.04-r2 (decay loop, IMP-08) [build_requests, build_requests #538 request_reason]
  • Supersedesreadystack/kubevip:v1.3.1-CE-ubuntu24.04-r1 (chain 776) [chains, chains #776]

The path through the harness

Fully recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 859 release · ready_to_ship

Created 2026-11-07T11:11:25Z, upstream v1.3.1, build request 538 [chains, chains #859]

DriveStartedMinutesBuild hostHow it stopped
36512026-11-07T11:11:48Z20.1build host 5 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #3651]
36632026-11-07T12:06:05Z—build host 5 publish-held not recorded [drive_runs, drive_runs #3663]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-07T11:11:59Z2026-11-07T11:12:00Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 6d9d114828e3…
acquire 2026-11-07T11:12:04Z2026-11-07T11:12:05Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree ae9c13988f73…
license_file c71d239df917…
custody_inputs 8d4f4ddf7d8b…
source_tree_hash 3c84f809fa47…
source_file_manifest 77a68c59ab88…
plan 2026-11-07T11:12:36Z2026-11-07T11:12:36Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 4d2935a4d54c…
input_pin_plan 0ee672b60eb4…
toolchain_lock 43481cafbe96…
assemble_kit 2026-11-07T11:16:55Z2026-11-07T11:16:55Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile ac774b5add1a…
build_recipe 85b397168f06…
system_pinning 0630392bbd9f…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 22ff0ee58e16…
verify_offline_sh 3e8184ea230c…
base_image_digests 88076f06ce80…
dockerfile_offline ac774b5add1a…
first_build_digest d09dc483daf2…
remediate 2026-11-07T11:17:35Z2026-11-07T11:17:36Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log bf7fc5e4fe96…
security_report 95aa2c35f3a4…
build_kit 2026-11-07T11:24:03Z2026-11-07T11:24:04Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 512d212319c4…
locked_digest 9e4eeea07ffe…
freeze_manifest a65799d16ee8…
offline_rebuild_transcript ec4b19bb5e3f…
verdict 2026-11-07T11:24:39Z2026-11-07T11:24:40Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 6b0c05668e0f…
publish_image 2026-11-07T11:25:12Z2026-11-07T11:25:13Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 9ecf02ae70c1…
promotion_record 264924f89086…
boot_instance 2026-11-07T11:25:15Z2026-11-07T11:25:16Z1
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 2a306f9c012a…
sbom 2026-11-07T11:25:27Z2026-11-07T11:25:27Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 141a92f1a06a…
sbom_json a07e0dab5e29…
schema_discovery 2026-11-07T11:25:30Z2026-11-07T11:25:31Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash aa8267b90a9a…
dependency_tree 8d95ba2088e5…
table_classification 0fc146e762f3…
admin_handbook 2026-11-07T11:25:33Z2026-11-07T11:25:34Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map fc87387f9352…
admin_handbook b0fae1bc8fac…
db_handbook 2026-11-07T11:25:36Z2026-11-07T11:25:37Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 468b88e955d0…
seed_isolation 7bf8c3e705be…
seed_data 2026-11-07T11:25:40Z2026-11-07T11:25:40Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 28c499a8efeb…
seed_cases_json 01a5d9def5b0…
seed_validate 2026-11-07T11:25:43Z2026-11-07T11:25:44Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 30dd3a52e89d…
usecase_validate 2026-11-07T11:25:46Z2026-11-07T11:25:47Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests 1e2c1d4c8458…
passed_tests 11d07e6fc53e…
test_results 235baf354286…
usecase_contract 53feed441b81…
finalize_docs 2026-11-07T11:25:51Z2026-11-07T11:25:52Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json d6fba1f84974…
release_notes 271f8998a059…
api_integration_guide 144c73c22d6d…
package_archive invalidated 2026-11-07T12:05:33Z 2026-11-07T11:31:54Z2026-11-07T11:31:56Z1
34 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar a6e719600030…
checksums 9e96eb51a958…
verify_md c98dd7ce308e…
rebuild_md 6dc14d1fec50…
manifest_txt b6f52a5f38bc…
actions_jsonl 17a7a746cc6d…
provenance_md c22a45e11a83…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json beebd5e2ab5d…

[stage_runs]

Rewinds

  • 2026-11-07T12:05:33Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #24801]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-07T11:31:56Z.

4 calls over 2 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 06947 —
remediate2001 010327 L-A08, L-038, L-036, L-034, L-032

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.19 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-07T11:32:43Z 000 clean to publish [held_rounds, held_rounds #1462] $0.19 3 rounds, $40.00 a6e719600030…

Defects

Fully recorded
  • Ledger entries6 [defects, defects where product_slug=kubevip and this tag or chain]
  • Disclosed in the archive0 [docs/defects/defects.json, entries]

6 ledger entries: by severity low 6; by status fixed-in-release 6.

DefectSeverityStatusFound byFixed in
RSD-kubevip-a69bb2384b
Documentation: The sale record calls cluster runbook checks 'use cases' (engine-fixed text; wording only). [defects, defects #168670]		lowfixed-in-releaseheld review (review model)v1.3.1-CE-ubuntu24.04-r2
RSD-kubevip-8b3ade1e2c
Release notes: A corrected finding still prints as a Known issue to customers. [defects, defects #169001]		lowfixed-in-releaseheld review (review model)v1.3.1-CE-ubuntu24.04-r2
RSD-kubevip-ef287edbd3
Release notes: A corrected finding still prints as a Known issue to customers. [defects, defects #169002]		lowfixed-in-releaseheld review (review model)v1.3.1-CE-ubuntu24.04-r2
RSD-kubevip-9df834f654
Release notes: A corrected finding still prints as a Known issue to customers. [defects, defects #169003]		lowfixed-in-releaseheld review (review model)v1.3.1-CE-ubuntu24.04-r2
RSD-kubevip-f7e7528838
Release notes: A corrected finding still prints as a Known issue to customers. [defects, defects #169004]		lowfixed-in-releaseheld review (review model)v1.3.1-CE-ubuntu24.04-r2
RSD-kubevip-24eedf4a8a
Release notes: A corrected finding still prints as a Known issue to customers. [defects, defects #169005]		lowfixed-in-releaseheld review (review model)v1.3.1-CE-ubuntu24.04-r2

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:4d386696413b5756606ff3ea0616ae0508191f84851518a5bdbd9774922943b4 · published digest sha256:4d386696413b5756606ff3ea0616ae0508191f84851518a5bdbd9774922943b4 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 197) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-07T12:06:29Z · failing Docker Scout counts 7 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-07T12:06:15Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3737631764 · transparency-log entry · integrated 2026-11-07T12:09:01Z) [ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:d5070fd670080e1b5035a787d03451c60141e2f6d9a677f2f632d5cc34fa5c2f · state attached · log index 3737633068 · transparency-log entry
    • kind sbom · digest sha256:d5070fd670080e1b5035a787d03451c60141e2f6d9a677f2f632d5cc34fa5c2f · state attached · log index 3737634310 · transparency-log entry
    • kind vsa · digest sha256:d5070fd670080e1b5035a787d03451c60141e2f6d9a677f2f632d5cc34fa5c2f · state attached · log index 3737635516 · transparency-log entry
    • kind provenance · digest sha256:4d386696413b5756606ff3ea0616ae0508191f84851518a5bdbd9774922943b4 · state attached · log index 3737637078 · transparency-log entry
    • kind sbom · digest sha256:4d386696413b5756606ff3ea0616ae0508191f84851518a5bdbd9774922943b4 · state attached · log index 3737638293 · transparency-log entry
    • kind vsa · digest sha256:4d386696413b5756606ff3ea0616ae0508191f84851518a5bdbd9774922943b4 · state attached · log index 3737639804 · transparency-log entry
    (at 2026-11-07T12:09:01Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/kubevip/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-07T11:32:48Z on build host 5 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:4d386696413b5756606ff3ea0616ae0508191f84851518a5bdbd9774922943b4 [clean-room rebuild ledger, runs[624]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-07T11:25:13Z [stage_runs, stage_runs chain 859 stage publish_image]
  • Archive manifests written2026-11-07T12:07:43Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 57 · probed 2026-11-07T11:20:26Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-07T12:10:06Z generated: by KitForge release/build_trail.py · generator commit 373d3c6436c70a6b11e2c6f6d2aa49fc56a5a5c1
  • 2026-11-07T12:11:25Z publication: promoted at 2026-11-07T12:10:41Z · promoted digest sha256:d5070fd670080e1b5035a787d03451c60141e2f6d9a677f2f632d5cc34fa5c2f · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 350 · checklist status complete · checklist at 2026-11-07T12:11:25Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/kubevip/v1.3.1-CE-ubuntu24.04-r2/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/kubevip/v1.3.1-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.rebuild.jsonbeside the archive (prodasset /data/production/kubevip/v1.3.1-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-kubevip-v1.3.1-CE-ubuntu24.04-r2.rebuild.json.sigstorebeside the archive (prodasset /data/production/kubevip/v1.3.1-CE-ubuntu24.04-r2/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/kubevip/v1.3.1-CE-ubuntu24.04-r2/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)538
chainssadb, ReadyStack's engine database (not published)859
defectssadb, ReadyStack's engine database (not published)kubevip v1.3.1-CE-ubuntu24.04-r2
drive_runssadb, ReadyStack's engine database (not published)chain 859
held_roundssadb, ReadyStack's engine database (not published)chain 859
lesson_recallssadb, ReadyStack's engine database (not published)chain 859
micro_step_runssadb, ReadyStack's engine database (not published)chain 859
release_imagessadb, ReadyStack's engine database (not published)kubevip v1.3.1-CE-ubuntu24.04-r2
stage_eventssadb, ReadyStack's engine database (not published)chain 859
stage_runssadb, ReadyStack's engine database (not published)chain 859
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—