Loki v3.7.9-CE-ubuntu24.04-r5 build trail

How ReadyStack built readystack/loki:v3.7.9-CE-ubuntu24.04-r5 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/loki:v3.7.9-CE-ubuntu24.04-r5
  • Index digestsha256:ce79be999ffd245c43b3cbc8b9f8dc91dfc67794041e8d1a2409dc4b50b23fbe
  • linux/amd64 digestsha256:5d35dcc33210a1d9d6e091513235f6766d554efd7368277250029c4da6e09cec
  • ArchiveReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.tar.gz
  • Archive SHA-256 nowe7d163e6492db7fb060afc573da74cdc739e2c567ef1da0b42742d42b91f3f61
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-11T06:11:39Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.trail.json.sigstore ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.trail.json
ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.trail.jsonReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.trail.json.sigstoreReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.trail.mdLoki product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductLoki (loki) [MANIFEST.json]
  • Release tagv3.7.9-CE-ubuntu24.04-r5 [MANIFEST.json]
  • Imagereadystack/loki:v3.7.9-CE-ubuntu24.04-r5 [MANIFEST.json]
  • Image index digestsha256:ce79be999ffd245c43b3cbc8b9f8dc91dfc67794041e8d1a2409dc4b50b23fbe [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:5d35dcc33210a1d9d6e091513235f6766d554efd7368277250029c4da6e09cec [ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.tar.gz (bytes 671976697) [MANIFEST.json]
  • Archive sha256 at publishe7d163e6492db7fb060afc573da74cdc739e2c567ef1da0b42742d42b91f3f61 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/grafana/loki [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv3.7.9 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commitd3b4a2f76bfc5625abee7ceb00b8896fa3c31549 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash7ea06a80ecfdb282b58518c1afb525b50b11736d48680cdda893e9bd49efbf9d (files 22500) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:cf5f4f8c141b86f86b9b10da0090912eae8c99422f274fce9843eb23b01a4841 [ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794295407 (utc 2026-11-10T07:23:27Z) [ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af · platform digest sha256:88750ccdd0f2a77fcc00a14b1a48d6409bd8ddb5d7c2dd6ec0b4a2e916daf9d9
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.rebuild.json, engine]
  • Engine commit(s)
    • commit 7dfd29d7f5001fb8fadf7d3fa0d9223cd56a6365 · dirty yes · first drive 4162
    • commit 7f9440173909c696b80316b684e74f8071be97cf · dirty yes · first drive 4190
    • commit e05220953a8a35bb19afca75bce1637a21d4c290 · dirty yes · first drive 4212
    • commit 012c3daa353c9980746c2c19594c14de64d28de4 · dirty yes · first drive 4223
    • commit 8c06307911557c927272aed1342f4fd649c279f0 · dirty yes · first drive 4227
    • commit e06c8c0d4f40771692abda70ebb80df73b0cbb40 · dirty yes · first drive 4238
    • commit 467eb57e7940ba12684129fd11ece63592f7796d · dirty yes · first drive 4245
    • commit a4836e07f81f6892f34edb7d7205df35fc7ac7b0 · dirty yes · first drive 4259
    • commit bccb9b96b7ab0eaa162fc6d62e6bf1c56b1840a1 · dirty yes · first drive 4262
    • commit e32f755506839e1e8665016830ccd4c597d4312b · dirty yes · first drive 4265
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain953 (created 2026-11-10T07:29:22Z · trigger customer_request · upstream version v3.7.9) [chains, chains #953]
  • Requestbuild request #635 (rebuild) (requested at 2026-11-10T07:23:29Z · requested by kitforge-agent · version v3.7.9) [build_requests, build_requests #635]
  • Reasonrerelease agenda REVISION -> v3.7.9-CE-ubuntu24.04-r5 (decay loop, IMP-08) [build_requests, build_requests #635 request_reason]
  • Supersedesreadystack/loki:v3.7.9-CE-ubuntu24.04-r4 (chain 740) [chains, chains #740]

The path through the harness

Fully recorded

1 chain · 10 drives · 18 stages · 5 rewinds

Chain 953 release · ready_to_ship

Created 2026-11-10T07:29:22Z, upstream v3.7.9, build request 635 [chains, chains #953]

DriveStartedMinutesBuild hostHow it stopped
41622026-11-10T07:29:55Z105.1build host 4 withhold-publish stage_failed at package_archive; first failed check exists:checksums; 18 ticks [drive_runs, drive_runs #4162]
41902026-11-10T21:36:08Z11.9build host 4 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4190]
42122026-11-10T23:05:48Z6.7build host 4 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4212]
42232026-11-10T23:57:44Z1.5build host 4 withhold-publish stage_failed at package_archive; first failed check g8; 1 tick [drive_runs, drive_runs #4223]
42272026-11-11T00:22:01Z1.8build host 4 withhold-publish stage_failed at package_archive; first failed check g8; 1 tick [drive_runs, drive_runs #4227]
42382026-11-11T01:25:56Z1.4build host 4 withhold-publish stage_failed at package_archive; first failed check g8; 1 tick [drive_runs, drive_runs #4238]
42452026-11-11T03:12:27Z5.8build host 4 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4245]
42592026-11-11T04:56:37Z7.4build host 4 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4259]
42622026-11-11T05:33:17Z6.2build host 4 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4262]
42652026-11-11T06:04:20Z—build host 4 publish-held not recorded [drive_runs, drive_runs #4265]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-10T07:30:06Z2026-11-10T07:30:06Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 6633471d1e38…
acquire 2026-11-10T07:30:21Z2026-11-10T07:30:24Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree c19413e9dcf7…
license_file 0d96a4ff68ad…
custody_inputs d0a64d122325…
source_tree_hash 2d82c9aba52a…
source_file_manifest 3bd408631b43…
plan 2026-11-10T07:31:03Z2026-11-10T07:31:03Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 12891ff5f96f…
input_pin_plan 477c8906630b…
toolchain_lock 765a358dfe33…
assemble_kit 2026-11-10T07:37:58Z2026-11-10T07:37:59Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile bd3869f02a6a…
build_recipe 211b346254e9…
system_pinning aa8db05a9a8a…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 1858f3deb181…
verify_offline_sh 3e8184ea230c…
base_image_digests 1d7477733bd2…
dockerfile_offline bd3869f02a6a…
first_build_digest 84c46d13ef01…
remediate 2026-11-10T07:38:41Z2026-11-10T07:38:41Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log f268f45d93c5…
security_report 91636167623b…
build_kit 2026-11-10T07:46:31Z2026-11-10T07:46:32Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 5d37a4c54a11…
locked_digest 7823e0678462…
freeze_manifest 8a0894a70ffa…
offline_rebuild_transcript 11ec0de779ca…
verdict 2026-11-10T07:47:12Z2026-11-10T07:47:12Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 4b4e63428f44…
publish_image 2026-11-10T07:47:47Z2026-11-10T07:47:48Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 67a927de1218…
promotion_record 43386b1b3b75…
boot_instance 2026-11-10T07:48:11Z2026-11-10T07:48:16Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 183cc55523c4…
sbom 2026-11-10T07:48:27Z2026-11-10T07:48:28Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md b172eaa2442e…
sbom_json 0a56725474b8…
schema_discovery 2026-11-10T07:48:30Z2026-11-10T07:48:31Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 4ef43d41b9c2…
dependency_tree 4b7d13fc5e9e…
table_classification 0cad5c32db3c…
admin_handbook 2026-11-10T08:16:20Z2026-11-10T08:16:21Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map e2c63eda268e…
admin_handbook e7b31f59e1ac…
db_handbook 2026-11-10T08:39:28Z2026-11-10T08:39:29Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook c0397b82c275…
seed_isolation 44b7b90b89d9…
seed_data 2026-11-10T08:39:40Z2026-11-10T08:39:41Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql aa188c5a5836…
seed_cases_json d5555572a3eb…
seed_validate 2026-11-10T08:39:43Z2026-11-10T08:39:44Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract e3926d51e7ca…
usecase_validate 2026-11-10T08:40:04Z2026-11-10T08:40:05Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests 57268f155cd8…
test_results 7a689cd7665a…
usecase_contract 9472cb000fd4…
finalize_docs 2026-11-10T09:03:02Z2026-11-10T09:03:03Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 2bf52d0001ad…
release_notes e9a1228ce30f…
api_integration_guide dffd70bfa262…
package_archive invalidated 2026-11-11T06:03:55Z 2026-11-10T09:14:58Z2026-11-11T05:39:26Z9
35 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar b1dbf20e4008…
checksums 9827400ad9eb…
verify_md 060bfcf14798…
rebuild_md cbc86ef184f9…
manifest_txt 53240aec4306…
actions_jsonl bca02ec4e9c0…
provenance_md 924bb46264d0…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 6d400909bca3…

[stage_runs]

Rewinds

  • 2026-11-10T22:27:30Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #30815]
  • 2026-11-10T23:56:19Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #30946]
  • 2026-11-11T03:46:09Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #31111]
  • 2026-11-11T05:32:25Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #31252]
  • 2026-11-11T06:03:55Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #31262]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-11T05:39:26Z.

356 calls over 6 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 09905 —
remediate2001 013751 L-A08, L-038, L-036, L-034, L-032
admin_handbook1175003 111465882 —
db_handbook1265403 171640398 —
usecase_validate1001 01778 —
finalize_docs1084303 111331881 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

5 rounds, 5 counted, $15.68 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-10T21:48:38Z 0444 findings to repackage [held_rounds, held_rounds #1701] $4.21 3 rounds, $40.00 e53acdda5e65…
22026-11-10T23:13:06Z 0024 clean to repackage [held_rounds, held_rounds #1714] $4.19 3 rounds, $40.00 99557f67df86…
32026-11-11T03:18:54Z 017 findings to repackage [held_rounds, held_rounds #1727] $2.54 3 rounds, $40.00 7ab15a711ad8…
42026-11-11T05:04:14Z 0124 findings to repackage [held_rounds, held_rounds #1736] $3.57 3 rounds, $40.00 aa327a96c5f5…
52026-11-11T05:40:12Z 004 clean to publish [held_rounds, held_rounds #1738] $1.16 3 rounds, $40.00 b1dbf20e4008…

Defects

Fully recorded
  • Ledger entries108 [defects, defects where product_slug=loki and this tag or chain]
  • Disclosed in the archive108 [docs/defects/defects.json, entries]

108 ledger entries: by severity high 6, low 102; by status fixed-before-release 108.

DefectSeverityStatusFound byFixed in
RSD-loki-94259bddcd
Admin handbook: The Product Overview push example does not work: the backslash-escaped quotes around $(date +%s%N) end up inside the JSON timestamp and Loki answers HTTP 400 instead of 204. [defects, defects #159076]		highfixed-before-releaseheld review (review model)—
RSD-loki-eed3811ed7
Database handbook: The "Verifying the restore" query fails with a LogQL parse error (HTTP 400), so a correct restore looks like a failed one. [defects, defects #232568]		highfixed-before-releaseheld review (review model)—
RSD-loki-a1a10b0c46
Database handbook: The "correct form" in the parse-error troubleshooting entry still contains backslash-escaped quotes inside single quotes and returns the same HTTP 400 parse error. [defects, defects #232569]		highfixed-before-releaseheld review (review model)—
RSD-loki-c63b7e3547
Database handbook: Says no delete API exists with retention enabled; it does (POST 204 / GET 200) and it is unauthenticated, so the reader is told an exposure does not exist while the other sections warn about it. [defects, defects #232570]		highfixed-before-releaseheld review (review model)—
RSD-loki-47693c3042
Admin handbook: Names uid 10001 as the old release's uid, then tells the reader to chown to 10001: self-contradictory; the old uid was 999. [defects, defects #232571]		lowfixed-before-releaseheld review (review model)—
RSD-loki-7d2016098b
Database handbook: Gives 10001 as the uid of the earlier release whose volume needs a chown to 10001. [defects, defects #232572]		lowfixed-before-releaseheld review (review model)—
RSD-loki-6ae563d01d
Database handbook: Same wrong example uid: the earlier release ran as 999, not 10001. [defects, defects #232573]		lowfixed-before-releaseheld review (review model)—
RSD-loki-c860349889
Database handbook: States the pre-r3 user was uid 10001 (it was 999) and that the restored volume then fails to start without a chown; the documented restore extracts as uid 10001 so the files come out owned by 10001. [defects, defects #232574]		lowfixed-before-releaseheld review (review model)—
RSD-loki-3a61fc97fa
Database handbook: Reads as if r5 changed the user relative to the previous revision; the previous revision (r4) already ran as 10001. [defects, defects #232575]		lowfixed-before-releaseheld review (review model)—
RSD-loki-9f8d87e25a
Database handbook: Heading names a change from uid 10001 to uid 10001. [defects, defects #232576]		lowfixed-before-releaseheld review (review model)—
RSD-loki-d2c4c892a5
Database handbook: Names r3 as the previous release; this release supersedes r4. [defects, defects #232577]		lowfixed-before-releaseheld review (review model)—
RSD-loki-1c2c960a9a
Database handbook: Two different thresholds for the same guidance (ReadyStack revisions r2/r3 here, Loki version 3.7.0 at line 1929); r4 is left out. [defects, defects #232578]		lowfixed-before-releaseheld review (review model)—
RSD-loki-08d0c3503b
API guide: Wrong predecessor: r5 supersedes r4. [defects, defects #232579]		lowfixed-before-releaseheld review (review model)—
RSD-loki-0c93db8367
API guide: Wrong predecessor: r5 supersedes r4. [defects, defects #232580]		lowfixed-before-releaseheld review (review model)—
RSD-loki-56dc7e05f9
API guide: "r5 and later" reads as if r5 introduced uid 10001; r3 and r4 already ran as 10001. [defects, defects #232581]		lowfixed-before-releaseheld review (review model)—
RSD-loki-8964f58903
API guide: Two different thresholds (3.7.9 here, 3.7.0 at line 2544) for the same guidance. [defects, defects #232582]		lowfixed-before-releaseheld review (review model)—
RSD-loki-4b329cd1f8
Admin handbook: The "reverse" chown goes to uid 999, not 10001; as written a rollback to r2 would still fail with permission denied. [defects, defects #232583]		lowfixed-before-releaseheld review (review model)—
RSD-loki-2a01f60a7b
Admin handbook: Implies the configuration cannot be copied from a stopped container; it can, and the next sections do exactly that. [defects, defects #232584]		lowfixed-before-releaseheld review (review model)—
RSD-loki-8db9710b43
Admin handbook: The cat-from-image command shows the shipped file, not the current/effective configuration. [defects, defects #232585]		lowfixed-before-releaseheld review (review model)—
RSD-loki-9cddd1ab81
Admin handbook: The first command offered prints just the file, not the running configuration with defaults. [defects, defects #232586]		lowfixed-before-releaseheld review (review model)—
RSD-loki-7cecdc4b54
Admin handbook: The cat-from-image command cannot show whether the customer's mounted file is readable or valid. [defects, defects #232587]		lowfixed-before-releaseheld review (review model)—
RSD-loki-5b053a282e
Database handbook: Same family: the cat-from-image command shows the shipped file, not the file that failed. [defects, defects #232588]		lowfixed-before-releaseheld review (review model)—
RSD-loki-91dda60d14
Admin handbook: Says Loki will not start without all three keys and that a missing store gives a 404; a missing store makes Loki exit, and a missing retention_period starts normally. [defects, defects #232589]		lowfixed-before-releaseheld review (review model)—
RSD-loki-14d92cfcc7
Database handbook: Same overstatement: omitting retention_period does not stop Loki starting. [defects, defects #232590]		lowfixed-before-releaseheld review (review model)—
RSD-loki-29fcfa9f9c
Database handbook: Tells the reader to locate a section the shipped file does not contain. [defects, defects #232591]		lowfixed-before-releaseheld review (review model)—
RSD-loki-1d570ede96
Admin handbook: Implies /services shows Pending states during startup and reflects readiness. [defects, defects #232592]		lowfixed-before-releaseheld review (review model)—
RSD-loki-bd7307fc92
API guide: A Running module is not necessarily ready; /services is Running while /ready is still 503. [defects, defects #232593]		lowfixed-before-releaseheld review (review model)—
RSD-loki-96047f0798
API guide: Implies /services shows which modules are still initializing during the 14-17 s before /ready; measured all Running long before. [defects, defects #232594]		lowfixed-before-releaseheld review (review model)—
RSD-loki-5d1c9727bd
API guide: Contradicts the measured behaviour: modules are Running long before /ready. [defects, defects #232595]		lowfixed-before-releaseheld review (review model)—
RSD-loki-7ba6a668b3
Database handbook: Contradicts the neighbouring paragraph (and the measurement): the modules are Running after ~2 s, not 12-17 s. [defects, defects #232596]		lowfixed-before-releaseheld review (review model)—
RSD-loki-7e78f5a632
API guide: Describes the start period as a delay before checks begin; checks run from the start and only their failures are ignored. [defects, defects #232597]		lowfixed-before-releaseheld review (review model)—
RSD-loki-c2f961f173
Database handbook: Same start-period misdescription. [defects, defects #232598]		lowfixed-before-releaseheld review (review model)—
RSD-loki-006c60cdb1
Admin handbook: States the opposite of the measured behaviour and of the rest of the handbook. [defects, defects #232599]		lowfixed-before-releaseheld review (review model)—
RSD-loki-d1cf96d76a
Admin handbook: Tells the reader to delete files inside /loki, contradicting every other section (free space outside /loki, or enlarge). [defects, defects #232600]		lowfixed-before-releaseheld review (review model)—
RSD-loki-3aeac2fb31
Database handbook: The grep level=error shown above it will not list these messages; they are logged at level=warn. [defects, defects #232601]		lowfixed-before-releaseheld review (review model)—
RSD-loki-e3d4ff1685
Database handbook: docker volume inspect does not report disk usage. [defects, defects #232602]		lowfixed-before-releaseheld review (review model)—
RSD-loki-46b484545c
Database handbook: Absolute claim contradicts the retention sections: retention and the delete API remove logs. [defects, defects #232603]		lowfixed-before-releaseheld review (review model)—
RSD-loki-bdbf105389
Admin handbook: Says a removed container's name is preserved; removal frees the name (that is why the next `docker run --name loki` works). [defects, defects #232604]		lowfixed-before-releaseheld review (review model)—
RSD-loki-109376cd87
Database handbook: False isolation claim: the host can also reach the unpublished container ports on the bridge network. [defects, defects #232605]		lowfixed-before-releaseheld review (review model)—
RSD-loki-26188393d9
API guide: A peer container cannot reach Loki's 9095 at localhost:9095. [defects, defects #232606]		lowfixed-before-releaseheld review (review model)—
RSD-loki-cc11a1b5a5
Database handbook: Wrong response shape for an empty query_range window (it is the labels endpoint that omits data). [defects, defects #232607]		lowfixed-before-releaseheld review (review model)—
RSD-loki-d32ed53de6
Database handbook: The log lines are logfmt key=value text, not JSON. [defects, defects #232608]		lowfixed-before-releaseheld review (review model)—
RSD-loki-01c6457967
Admin handbook: Wrong default for a lone `start`: the end is now, not one hour after the start. [defects, defects #232609]		lowfixed-before-releaseheld review (review model)—
RSD-loki-b8b725f109
API guide: Wrong default for a lone `start`. [defects, defects #232610]		lowfixed-before-releaseheld review (review model)—
RSD-loki-5c7dce43b5
API guide: Wrong default for a lone `start`. [defects, defects #232611]		lowfixed-before-releaseheld review (review model)—
RSD-loki-9bacec749b
API guide: The labels endpoint does accept `since`. [defects, defects #232612]		lowfixed-before-releaseheld review (review model)—
RSD-loki-a51daa7980
Admin handbook: Without -i/-t the command opens no interactive shell. [defects, defects #232613]		lowfixed-before-releaseheld review (review model)—
RSD-loki-192e31b8ec
Database handbook: The command as written is not found; it must be run as ./VERIFY_OFFLINE.sh. [defects, defects #232614]		lowfixed-before-releaseheld review (review model)—
RSD-loki-ac50a3cb1a
Admin handbook: Says healthy is reached only after the start period; the container turned healthy at ~21 s, inside the 25 s start period. [defects, defects #236994]		lowfixed-before-releaseheld review (review model)—
RSD-loki-934401773d
Admin handbook: Under "In a new container:" the command is offered as the way to get a shell but without -it it opens none and exits at once. [defects, defects #236995]		lowfixed-before-releaseheld review (review model)—
RSD-loki-e289a1866a
Admin handbook: Tells the reader a restore needs the sudo chown; the documented restore needs none, contradicting the other sections. [defects, defects #236996]		lowfixed-before-releaseheld review (review model)—
RSD-loki-6838b3ab92
Database handbook: The command offered to check disk usage does not report disk usage. [defects, defects #236997]		lowfixed-before-releaseheld review (review model)—
RSD-loki-63c0c40b59
Database handbook: The name http://loki:3100 does not resolve from a peer container on the default bridge network. [defects, defects #236998]		lowfixed-before-releaseheld review (review model)—
RSD-loki-dcaf834c77
Database handbook: Quoted error text is not what Loki prints and differs from the rest of the handbooks. [defects, defects #236999]		lowfixed-before-releaseheld review (review model)—
RSD-loki-70bccf298f
Database handbook: Step says to copy the current configuration from the running container but gives a command that reads the image's shipped file. [defects, defects #237000]		lowfixed-before-releaseheld review (review model)—
RSD-loki-e8129857e7
API guide: States /metrics has no disk-usage figure; it exports loki_ingester_wal_disk_usage_percent, and the guide contradicts itself at line 1081. [defects, defects #237001]		lowfixed-before-releaseheld review (review model)—
RSD-loki-d5869781f3
API guide: Names a Pending state that /services does not show and suggests /services tracks startup progress. [defects, defects #237002]		lowfixed-before-releaseheld review (review model)—
RSD-loki-6ae586a485
API guide: Implies the labels endpoint lacks since and the reader must go to query_range; labels accepts since. [defects, defects #237003]		lowfixed-before-releaseheld review (review model)—
RSD-loki-84a5f6f1b8
Database handbook: Claims retention resumes ingestion at 90% used; it is age-based with a 2 h delete delay and was never shown to clear the guard. [defects, defects #237004]		lowfixed-before-releaseheld review (review model)—
RSD-loki-d49900ec51
API guide: Says chunk deletion is triggered by disk usage reaching the threshold. [defects, defects #237005]		lowfixed-before-releaseheld review (review model)—
RSD-loki-430d520c8d
Admin handbook: Says the docs/ copies of both scripts print SOURCE_DATE_EPOCH.txt missing; the VERIFY copies print a different error. [defects, defects #237006]		lowfixed-before-releaseheld review (review model)—
RSD-loki-e6a8ac38ef
Database handbook: Says the docs/ copies are not executable (mode 755) and both fail with SOURCE_DATE_EPOCH.txt missing. [defects, defects #237007]		lowfixed-before-releaseheld review (review model)—
RSD-loki-89bf06c6d8
Admin handbook: Describes the boot check against the 25 s start period and a "Running" state; the script uses a 180 s window and an HTTP 2xx only. [defects, defects #237008]		lowfixed-before-releaseheld review (review model)—
RSD-loki-0ca6b37213
Database handbook: Says Loki has no built-in TLS; Loki serves HTTPS natively when configured. [defects, defects #237009]		lowfixed-before-releaseheld review (review model)—
RSD-loki-c82f0a90de
Database handbook: Says Loki has no TLS termination; it can terminate TLS itself when configured. [defects, defects #237010]		lowfixed-before-releaseheld review (review model)—
RSD-loki-68979ac286
Admin handbook: States gRPC TLS cannot be configured; the server exposes grpc_tls_config. [defects, defects #237011]		lowfixed-before-releaseheld review (review model)—
RSD-loki-a692f5cc0e
Admin handbook: Asserts upgrade and downgrade works between revisions, which the records do not show and db-handbook:1867 denies. [defects, defects #237012]		lowfixed-before-releaseheld review (review model)—
RSD-loki-991e99576c
API guide: Implies enlarging the volume or removing external files removes stored logs; it contradicts the sentence before it. [defects, defects #237013]		lowfixed-before-releaseheld review (review model)—
RSD-loki-ee4bc9e428
Database handbook: Lists a non-existent route "GET /config:" and omits the delete endpoint that exists with retention on (the next sections of the same handbook document it). [defects, defects #237014]		lowfixed-before-releaseheld review (review model)—
RSD-loki-9ec525fbf4
Database handbook: Says the extraction preserves ownership; a non-root extraction assigns uid 10001, which is why no chown is needed. [defects, defects #237015]		lowfixed-before-releaseheld review (review model)—
RSD-loki-37b613cb6d
Database handbook: Identifies the affected releases by a date that no record supports instead of by revision. [defects, defects #237016]		lowfixed-before-releaseheld review (review model)—
RSD-loki-f039bb9d75
Admin handbook: In the Restore procedure the `docker cp loki:/etc/loki/config.yaml ./config.yaml` step comes after `docker rm loki` and after the new container has been started on new-loki-data without a config… [defects, defects #242810]		highfixed-before-releaseheld review (review model)—
RSD-loki-d006fa2d16
Admin handbook: VERIFY_OFFLINE.sh never checks the container's state. [defects, defects #242811]		lowfixed-before-releaseheld review (review model)—
RSD-loki-b676e1cc7b
Admin handbook: Says the image has no way to pass additional flags without modifying the ENTRYPOINT. [defects, defects #242812]		lowfixed-before-releaseheld review (review model)—
RSD-loki-281231e470
Database handbook: Paraphrase of the round-2 finding 'Says the extraction preserves ownership; a non-root extraction assigns uid 10001'. [defects, defects #242813]		lowfixed-before-releaseheld review (review model)—
RSD-loki-c1d0419ef1
Database handbook: Offered as the list of endpoints available on this release, it omits /loki/api/v1/delete, which the retention sections of this handbook (2256-2290) say becomes available once retention is on, and it… [defects, defects #242814]		lowfixed-before-releaseheld review (review model)—
RSD-loki-0c90b569b1
API guide: Claims the uid cannot be changed at runtime. [defects, defects #242815]		lowfixed-before-releaseheld review (review model)—
RSD-loki-47d380c163
Admin handbook: Asserts that the r3/r4 -> r5 upgrade works and the data format is unchanged, which the records do not show. [defects, defects #242816]		lowfixed-before-releaseheld review (review model)—
RSD-loki-19585a9fe4
Admin handbook: Implies the upgrade from the previous 3.7.x release was tested; line 2209 of the same handbook and DB_HANDBOOK.md:1867 say no upgrade or rollback was run. [defects, defects #242817]		lowfixed-before-releaseheld review (review model)—
RSD-loki-9ea744d7f8
Admin handbook: In 'Keeping configuration changes across a restore' the restore block already ends with `docker run -d --name loki` (no config mount); step 2 says 'After the restore's docker run, mount the file… [defects, defects #246981]		highfixed-before-releaseheld review (review model)—
RSD-loki-dcbca30a05
Admin handbook: Round-3 minor not fixed: the script never checks that the container is in a running state; it tests only the /ready HTTP status. [defects, defects #246982]		lowfixed-before-releaseheld review (review model)—
RSD-loki-9cf60b644c
Admin handbook: 'boots without errors' is not something the script checks. [defects, defects #246983]		lowfixed-before-releaseheld review (review model)—
RSD-loki-63d726c4ac
Admin handbook: Round-3 minor still present: 'The data format is unchanged' asserts r3/r4 -> r5 data compatibility that no record shows. [defects, defects #246984]		lowfixed-before-releaseheld review (review model)—
RSD-loki-0221174363
Admin handbook: 'other than 3.7.x are untested' implies 3.7.x upgrades were tested; the same handbook says none was run. [defects, defects #246985]		lowfixed-before-releaseheld review (review model)—
RSD-loki-b425cd6b85
API guide: Same implication as ADMIN:1519: 'Upgrades from releases other than 3.7.x are untested' suggests 3.7.x upgrades were tested. [defects, defects #246986]		lowfixed-before-releaseheld review (review model)—
RSD-loki-c64c48d0d7
Database handbook: Round-3 minor still present: states as fact that data created by r3/r2 is readable by r5, then says three lines later nothing was tested. [defects, defects #246987]		lowfixed-before-releaseheld review (review model)—
RSD-loki-b368e4d7bb
Database handbook: The r3/r4 -> r5 upgrade section gives the procedure and says no additional step is needed without the 'not tested' caveat carried by the neighbouring section. [defects, defects #246988]		lowfixed-before-releaseheld review (review model)—
RSD-loki-434b62eef5
Database handbook: Rewritten section: the closing sentence lists the endpoints 'this guide documents on this release' without /loki/api/v1/delete, which the preceding paragraph of the same section documents; same… [defects, defects #246989]		lowfixed-before-releaseheld review (review model)—
RSD-loki-62dd396315
Admin handbook: 'image ID of the rebuilt binary' and 'you see only the BuildKit's digest in docker images output' misdescribe the printed value (a manifest digest of the image) and the docker images listing. [defects, defects #246990]		lowfixed-before-releaseheld review (review model)—
RSD-loki-cdd6dc0b93
Database handbook: The digest compared is that of rebuilt.oci.tar, not 'the loaded image'; the readiness test is any HTTP 2xx within 180 s, not 'HTTP 200 within the expected startup window'. [defects, defects #246991]		lowfixed-before-releaseheld review (review model)—
RSD-loki-6b4e00e590
Database handbook: 'the ReadyStack registry' is not where the image is pulled from. [defects, defects #246992]		lowfixed-before-releaseheld review (review model)—
RSD-loki-c73ff7a796
Database handbook: Cold-start range contradicts the 14–17 s measured and stated elsewhere (also DB_HANDBOOK.md:2376 and API guide line 443). [defects, defects #246993]		lowfixed-before-releaseheld review (review model)—
RSD-loki-0168b739c4
Database handbook: 'Loki will not serve the HTTP API without a working 9095 listener ... [defects, defects #246994]		lowfixed-before-releaseheld review (review model)—
RSD-loki-326663abfa
Database handbook: The check is described as run 'in the container' but starts a separate busybox container (an extra image pull, not part of this release; absent from air-gapped hosts). [defects, defects #246995]		lowfixed-before-releaseheld review (review model)—
RSD-loki-c40cac29cf
API guide: Claims every label name is returned 'regardless of how old the logs are'; upstream defines a 6-hour default window. [defects, defects #246996]		lowfixed-before-releaseheld review (review model)—
RSD-loki-553e8a246e
API guide: Says labels are returned 'across all time'; the default start is 6 hours ago. [defects, defects #246997]		lowfixed-before-releaseheld review (review model)—
RSD-loki-c3529e15c4
API guide: 'regardless of how old they are' contradicts upstream's 6-hour default. [defects, defects #246998]		lowfixed-before-releaseheld review (review model)—
RSD-loki-931c9ac0c3
API guide: Listed among the metrics the shipped image exposes, but the series is absent unless runtime_config is set. [defects, defects #246999]		lowfixed-before-releaseheld review (review model)—
RSD-loki-82e48dc3ff
API guide: 'the resulting tar or copy will own the files as uid 10001, requiring you to adjust ownership on restore' is wrong for both a root tar (records 10001) and a root cp (root-owned). [defects, defects #247000]		lowfixed-before-releaseheld review (review model)—
RSD-loki-22f97c8b26
API guide: 'is read-only' is false (the file is writable in the container) and contradicts the handbook sections that describe in-container edits. [defects, defects #247001]		lowfixed-before-releaseheld review (review model)—
RSD-loki-aa1a87ddf1
API guide: 'read-only within the image' is false and contradicts ADMIN_HANDBOOK.md:2255. [defects, defects #247002]		lowfixed-before-releaseheld review (review model)—
RSD-loki-470f7a0314
Admin handbook: 'the containerized tar handles the file ownership' repeats the ownership-preservation paraphrase: the restore does not preserve or set ownership, it creates files as the extracting uid. [defects, defects #247003]		lowfixed-before-releaseheld review (review model)—
RSD-loki-30e6cbf901
Admin handbook: 'The containerized tar preserves the uid 10001 file ownership' is the paraphrase family of the round-2/round-3 'extraction preserves ownership' finding. [defects, defects #247004]		lowfixed-before-releaseheld review (review model)—
RSD-loki-fb95741993
Admin handbook: 'keeps the correct ownership for a later restore' attributes to the backup an ownership guarantee that comes from the extracting uid. [defects, defects #247005]		lowfixed-before-releaseheld review (review model)—
RSD-loki-3b391e86fe
API guide: The message text names equality but the check rejects only end < start; the sentence says equal values are refused. [defects, defects #247930]		lowfixed-before-releaseheld review (review model)—
RSD-loki-ada3d6a2d8
Admin handbook: Paraphrase of the 'tar preserves file ownership' claim that earlier rounds corrected elsewhere; it also says 'extract' for the backup command, which creates the archive. [defects, defects #247931]		lowfixed-before-releaseheld review (review model)—
RSD-loki-80b00857cc
Admin handbook: Same paraphrase family as the round-2 to round-4 ownership findings, still present in the closing summary. [defects, defects #247932]		lowfixed-before-releaseheld review (review model)—
RSD-loki-c40610fbab
Database handbook: Exhaustive route list introduced by the rewrite of 'Enabling Retention (continued)'; other routes answer 200. [defects, defects #247933]		lowfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:5d35dcc33210a1d9d6e091513235f6766d554efd7368277250029c4da6e09cec · published digest sha256:5d35dcc33210a1d9d6e091513235f6766d554efd7368277250029c4da6e09cec · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 218) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-11T06:04:45Z · failing Docker Scout counts 10 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-11T06:04:34Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3804114140 · transparency-log entry · integrated 2026-11-11T06:10:08Z) [ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:ce79be999ffd245c43b3cbc8b9f8dc91dfc67794041e8d1a2409dc4b50b23fbe · state attached · log index 3804118801 · transparency-log entry
    • kind sbom · digest sha256:ce79be999ffd245c43b3cbc8b9f8dc91dfc67794041e8d1a2409dc4b50b23fbe · state attached · log index 3804120194 · transparency-log entry
    • kind vsa · digest sha256:ce79be999ffd245c43b3cbc8b9f8dc91dfc67794041e8d1a2409dc4b50b23fbe · state attached · log index 3804122114 · transparency-log entry
    • kind provenance · digest sha256:5d35dcc33210a1d9d6e091513235f6766d554efd7368277250029c4da6e09cec · state attached · log index 3804124288 · transparency-log entry
    • kind sbom · digest sha256:5d35dcc33210a1d9d6e091513235f6766d554efd7368277250029c4da6e09cec · state attached · log index 3804126159 · transparency-log entry
    • kind vsa · digest sha256:5d35dcc33210a1d9d6e091513235f6766d554efd7368277250029c4da6e09cec · state attached · log index 3804128434 · transparency-log entry
    (at 2026-11-11T06:10:08Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/loki/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-10T21:48:44Z on build host 4 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:5d35dcc33210a1d9d6e091513235f6766d554efd7368277250029c4da6e09cec [clean-room rebuild ledger, runs[728]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-10T07:47:48Z [stage_runs, stage_runs chain 953 stage publish_image]
  • Archive manifests written2026-11-11T06:08:05Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 61 · probed 2026-11-10T07:42:37Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-11T06:11:39Z generated: by KitForge release/build_trail.py · generator commit e32f755506839e1e8665016830ccd4c597d4312b
  • 2026-11-11T06:13:08Z publication: promoted at 2026-11-11T06:12:12Z · promoted digest sha256:ce79be999ffd245c43b3cbc8b9f8dc91dfc67794041e8d1a2409dc4b50b23fbe · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 466 · checklist status complete · checklist at 2026-11-11T06:13:08Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/loki/v3.7.9-CE-ubuntu24.04-r5/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/loki/v3.7.9-CE-ubuntu24.04-r5/), as staged for publishing—
ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.rebuild.jsonbeside the archive (prodasset /data/production/loki/v3.7.9-CE-ubuntu24.04-r5/), as staged for publishing—
ReadyStack-loki-v3.7.9-CE-ubuntu24.04-r5.rebuild.json.sigstorebeside the archive (prodasset /data/production/loki/v3.7.9-CE-ubuntu24.04-r5/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/loki/v3.7.9-CE-ubuntu24.04-r5/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)635
chainssadb, ReadyStack's engine database (not published)953
defectssadb, ReadyStack's engine database (not published)loki v3.7.9-CE-ubuntu24.04-r5
drive_runssadb, ReadyStack's engine database (not published)chain 953
held_roundssadb, ReadyStack's engine database (not published)chain 953
lesson_recallssadb, ReadyStack's engine database (not published)chain 953
micro_step_runssadb, ReadyStack's engine database (not published)chain 953
release_imagessadb, ReadyStack's engine database (not published)loki v3.7.9-CE-ubuntu24.04-r5
stage_eventssadb, ReadyStack's engine database (not published)chain 953
stage_runssadb, ReadyStack's engine database (not published)chain 953
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—