MariaDB 12.3.3-CE-ubuntu24.04-r5 build trail

How ReadyStack built readystack/mariadb:12.3.3-CE-ubuntu24.04-r5 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/mariadb:12.3.3-CE-ubuntu24.04-r5
  • Index digestsha256:5f54c8779fb5e41ed31892c8c0ee139753d15ed61603058bfb6eeb9555522b16
  • linux/amd64 digestsha256:cfa0a3afa9547eea1ecf7138b6cbc05663fbf4451c4794aa36923685468ebacb
  • ArchiveReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.tar.gz
  • Archive SHA-256 now90a0d849378598889ab141451150c46923f551fcd90d9b3f4e06bbbeec4fb13c
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-09T15:36:03Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.trail.json.sigstore ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.trail.json
ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.trail.jsonReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.trail.json.sigstoreReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.trail.mdMariaDB product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductMariaDB (mariadb) [MANIFEST.json]
  • Release tag12.3.3-CE-ubuntu24.04-r5 [MANIFEST.json]
  • Imagereadystack/mariadb:12.3.3-CE-ubuntu24.04-r5 [MANIFEST.json]
  • Image index digestsha256:5f54c8779fb5e41ed31892c8c0ee139753d15ed61603058bfb6eeb9555522b16 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:cfa0a3afa9547eea1ecf7138b6cbc05663fbf4451c4794aa36923685468ebacb [ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.tar.gz (bytes 678364554) [MANIFEST.json]
  • Archive sha256 at publish90a0d849378598889ab141451150c46923f551fcd90d9b3f4e06bbbeec4fb13c [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/MariaDB/server [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refmariadb-12.3.3 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit83e909fc2a0dbc394b4b683fb3fa2d7dcf26cc5e [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash596889517844b2c754de15fc2971efe9fc2dbaa1cd55ec90c049453e2f3351a1 (files 26928) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:5f7b9d522fc80d3840356210895678a23de378a03b7ce96a1beff279efafdfdc [ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1787207273 (utc 2026-08-20T06:27:53Z) [ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 · platform digest sha256:fea12ba16096adec0f699ce1c4da2154d320450e56c1f63671f95d2a3551c77b
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.rebuild.json, engine]
  • Engine commit(s)
    • commit bfc2c69cad25a084895a177f0ea769362fac34dc · dirty yes · first drive 3993
    • commit 2f7124a9a3af47d0a15db59c6bde9ea0a9ed2715 · dirty yes · first drive 4029
    • commit 9b46fb2966cf7f115ec4c331ca41468be77aac3c · dirty yes · first drive 4044
    • commit 60a6d2c97ec3cf892fe7edaac0f7a56017938207 · dirty yes · first drive 4058
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain923 (created 2026-11-09T10:07:22Z · trigger customer_request · upstream version 12.3.3) [chains, chains #923]
  • Requestbuild request #554 (rebuild) (requested at 2026-11-08T05:00:37Z · requested by kitforge-agent · version 12.3.3) [build_requests, build_requests #554]
  • Reasonrevision 12.3.3-CE-ubuntu24.04-r5: same upstream version rebuilt on the chiselled runtime (slim base, #206) [build_requests, build_requests #554 request_reason]
  • Supersedesreadystack/mariadb:12.3.3-CE-ubuntu24.04-r4 (chain 815) [chains, chains #815]

The path through the harness

Fully recorded

1 chain · 4 drives · 18 stages · 2 rewinds

Chain 923 release · ready_to_ship

Created 2026-11-09T10:07:22Z, upstream 12.3.3, build request 554 [chains, chains #923]

DriveStartedMinutesBuild hostHow it stopped
39932026-11-09T10:07:48Z87.6build host 4 withhold-publish stage_failed at package_archive; first failed check exists:checksums; 18 ticks [drive_runs, drive_runs #3993]
40292026-11-09T13:50:46Z16.9build host 4 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4029]
40442026-11-09T14:53:05Z5build host 4 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4044]
40582026-11-09T15:28:56Z—build host 4 publish-held not recorded [drive_runs, drive_runs #4058]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-09T10:07:59Z2026-11-09T10:08:00Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json fb12c3342c84…
acquire 2026-11-09T10:08:38Z2026-11-09T10:08:41Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 83874c89c137…
license_file 240a15a1d0f3…
custody_inputs 9c52e4312783…
source_tree_hash 0c1402e355e4…
source_file_manifest e2192bbacd64…
plan 2026-11-09T10:09:19Z2026-11-09T10:09:20Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 8e985b91273f…
input_pin_plan ee91112052d8…
toolchain_lock bf898fc90ea8…
assemble_kit 2026-11-09T10:22:18Z2026-11-09T10:22:19Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 76386ff5497d…
build_recipe 044a83a14011…
system_pinning aa8db05a9a8a…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 3b85a701598a…
verify_offline_sh 3e8184ea230c…
base_image_digests f6646a1368d0…
dockerfile_offline 76386ff5497d…
first_build_digest 1123c34fc6b0…
remediate 2026-11-09T10:23:07Z2026-11-09T10:23:08Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 3469304f3964…
security_report 8890e263029d…
build_kit 2026-11-09T10:44:17Z2026-11-09T10:44:17Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp dd4f86bf8848…
locked_digest 6758310d5978…
freeze_manifest cc7dda842e88…
offline_rebuild_transcript d0a3e0191f35…
verdict 2026-11-09T10:45:03Z2026-11-09T10:45:04Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict a22d55f1fb60…
publish_image 2026-11-09T10:45:39Z2026-11-09T10:45:39Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 2aabe84648ac…
promotion_record a83412e96cd2…
boot_instance 2026-11-09T10:45:50Z2026-11-09T10:45:54Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 097a0f477772…
sbom 2026-11-09T10:46:07Z2026-11-09T10:46:08Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md b06e67a8ff5d…
sbom_json d7d75e0da7a8…
schema_discovery 2026-11-09T10:46:10Z2026-11-09T10:46:11Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 614b78a2b2e5…
dependency_tree 7507c8ee93eb…
table_classification 39289f654292…
admin_handbook 2026-11-09T10:55:30Z2026-11-09T10:55:31Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map aef45610634e…
admin_handbook 6d59aa9596dd…
db_handbook 2026-11-09T11:04:58Z2026-11-09T11:04:59Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook c1436f3ebd3b…
seed_isolation c11f78a14018…
seed_data 2026-11-09T11:05:07Z2026-11-09T11:05:07Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 42c2d001fbdc…
seed_cases_json f0c93bef4622…
seed_validate 2026-11-09T11:05:10Z2026-11-09T11:05:11Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 183abb74b2e1…
usecase_validate 2026-11-09T11:05:41Z2026-11-09T11:05:41Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests 82ac8a95019a…
test_results 073921d6f1bc…
usecase_contract 339206fe0ddc…
finalize_docs 2026-11-09T11:20:40Z2026-11-09T11:20:41Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 65bd16744270…
release_notes 4ff3e188c5e5…
api_integration_guide b5e2822ba5d3…
package_archive invalidated 2026-11-09T15:28:27Z 2026-11-09T11:35:24Z2026-11-09T14:58:04Z3
35 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 3345dde6688b…
checksums 2dd26ce9c366…
verify_md 1090d48b7f13…
rebuild_md 0d9bc5ac7968…
manifest_txt 66e89b3d606b…
actions_jsonl 0ebe83bb57ce…
provenance_md 19acbaad9ca1…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json b097c7959c4c…

[stage_runs]

Rewinds

  • 2026-11-09T14:50:48Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #29193]
  • 2026-11-09T15:28:27Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #29292]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-09T14:58:04Z.

235 calls over 5 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 09687 —
remediate2001 013027 L-A08, L-038, L-036, L-034, L-032
admin_handbook632803 9434697 —
db_handbook572303 7413315 —
finalize_docs1116003 22877984 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

2 rounds, 2 counted, $1.64 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-09T14:08:58Z 021 findings to repackage [held_rounds, held_rounds #1632] $0.83 3 rounds, $40.00 95e3ac967a74…
22026-11-09T14:58:57Z 001 clean to publish [held_rounds, held_rounds #1637] $0.81 3 rounds, $40.00 3345dde6688b…

Defects

Fully recorded
  • Ledger entries7 [defects, defects where product_slug=mariadb and this tag or chain]
  • Disclosed in the archive7 [docs/defects/defects.json, entries]

7 ledger entries: by severity medium 2, low 3, high 2; by status open 3, fixed-before-release 4.

DefectSeverityStatusFound byFixed in
RSD-mariadb-a571958d22
The seed-data record says the product has no SQL database ('config/CRD-native product') [defects, defects #210167]		mediumopenengine review—
RSD-mariadb-149f15906f
MariaDB accepts an account host written in CIDR form (192.168.1.0/24) but it never matches [defects, defects #210168]		mediumopenbuild strategy record—
RSD-mariadb-b8c053cb33
API guide: The table of contents no longer lists the three subsections, but '### Overriding Configuration' (line 1021), '### Runtime Arguments' and '### Important Notes' still exist in the section. [defects, defects #210169]		lowopenheld review (review model)—
RSD-mariadb-c3d4b9bd0a
API guide: The image sets only PATH and LANG; DEBIAN_FRONTEND was dropped when the base changed to a chiselled FROM scratch runtime. [defects, defects #212840]		highfixed-before-releaseheld review (review model)—
RSD-mariadb-c5f8f31890
API guide: Documents an image-default environment variable that this image no longer sets (the section says the image layers establish these values). [defects, defects #212841]		highfixed-before-releaseheld review (review model)—
RSD-mariadb-ed9535c704
API guide: The image is FROM scratch with only the installed server in /usr/local/mariadb; no source tree is in it. [defects, defects #212842]		lowfixed-before-releaseheld review (review model)—
RSD-mariadb-0feefdbd80
API guide: Says the source tree is available in the image; the image holds only the installed server and COPYING, contradicting line 1457. [defects, defects #214715]		lowfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:cfa0a3afa9547eea1ecf7138b6cbc05663fbf4451c4794aa36923685468ebacb · published digest sha256:cfa0a3afa9547eea1ecf7138b6cbc05663fbf4451c4794aa36923685468ebacb · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 623) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-09T15:29:21Z · failing Docker Scout counts 20 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-09T15:29:07Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3766682062 · transparency-log entry · integrated 2026-11-09T15:34:16Z) [ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:5f54c8779fb5e41ed31892c8c0ee139753d15ed61603058bfb6eeb9555522b16 · state attached · log index 3766684631 · transparency-log entry
    • kind sbom · digest sha256:5f54c8779fb5e41ed31892c8c0ee139753d15ed61603058bfb6eeb9555522b16 · state attached · log index 3766685957 · transparency-log entry
    • kind vsa · digest sha256:5f54c8779fb5e41ed31892c8c0ee139753d15ed61603058bfb6eeb9555522b16 · state attached · log index 3766687471 · transparency-log entry
    • kind provenance · digest sha256:cfa0a3afa9547eea1ecf7138b6cbc05663fbf4451c4794aa36923685468ebacb · state attached · log index 3766689799 · transparency-log entry
    • kind sbom · digest sha256:cfa0a3afa9547eea1ecf7138b6cbc05663fbf4451c4794aa36923685468ebacb · state attached · log index 3766692268 · transparency-log entry
    • kind vsa · digest sha256:cfa0a3afa9547eea1ecf7138b6cbc05663fbf4451c4794aa36923685468ebacb · state attached · log index 3766694436 · transparency-log entry
    (at 2026-11-09T15:34:17Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/mariadb/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-09T14:09:02Z on build host 4 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:cfa0a3afa9547eea1ecf7138b6cbc05663fbf4451c4794aa36923685468ebacb [clean-room rebuild ledger, runs[704]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-09T10:45:39Z [stage_runs, stage_runs chain 923 stage publish_image]
  • Archive manifests written2026-11-09T15:31:56Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 220 · probed 2026-11-09T10:33:38Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-09T15:36:03Z generated: by KitForge release/build_trail.py · generator commit 60a6d2c97ec3cf892fe7edaac0f7a56017938207
  • 2026-11-09T15:37:49Z publication: promoted at 2026-11-09T15:36:42Z · promoted digest sha256:5f54c8779fb5e41ed31892c8c0ee139753d15ed61603058bfb6eeb9555522b16 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 420 · checklist status complete · checklist at 2026-11-09T15:37:49Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/mariadb/12.3.3-CE-ubuntu24.04-r5/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/mariadb/12.3.3-CE-ubuntu24.04-r5/), as staged for publishing—
ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.rebuild.jsonbeside the archive (prodasset /data/production/mariadb/12.3.3-CE-ubuntu24.04-r5/), as staged for publishing—
ReadyStack-mariadb-12.3.3-CE-ubuntu24.04-r5.rebuild.json.sigstorebeside the archive (prodasset /data/production/mariadb/12.3.3-CE-ubuntu24.04-r5/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/mariadb/12.3.3-CE-ubuntu24.04-r5/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)554
chainssadb, ReadyStack's engine database (not published)923
defectssadb, ReadyStack's engine database (not published)mariadb 12.3.3-CE-ubuntu24.04-r5
drive_runssadb, ReadyStack's engine database (not published)chain 923
held_roundssadb, ReadyStack's engine database (not published)chain 923
lesson_recallssadb, ReadyStack's engine database (not published)chain 923
micro_step_runssadb, ReadyStack's engine database (not published)chain 923
release_imagessadb, ReadyStack's engine database (not published)mariadb 12.3.3-CE-ubuntu24.04-r5
stage_eventssadb, ReadyStack's engine database (not published)chain 923
stage_runssadb, ReadyStack's engine database (not published)chain 923
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—