Mattermost v12.0.2-CE-ubuntu24.04-r2 build trail

How ReadyStack built readystack/mattermost:v12.0.2-CE-ubuntu24.04-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/mattermost:v12.0.2-CE-ubuntu24.04-r2
  • Index digestsha256:d79d839282f68597e5dae4a4742c09d7d0539aec5ecda8270329cc6a1abbfd94
  • linux/amd64 digestsha256:b2630e7a7ebf59b969bc85fc8e2cffbef9c10537cb8679fbc0e19cb88ff196f3
  • ArchiveReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.tar.gz
  • Archive SHA-256 now4b0bb3c9803bec8b8de663f15e81667c93631ac3e94e5392cc5c25f3788ae422
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-12T16:07:22Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.trail.json.sigstore ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.trail.json
ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.trail.jsonReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.trail.json.sigstoreReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.trail.mdMattermost product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductMattermost (mattermost) [MANIFEST.json]
  • Release tagv12.0.2-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Imagereadystack/mattermost:v12.0.2-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Image index digestsha256:d79d839282f68597e5dae4a4742c09d7d0539aec5ecda8270329cc6a1abbfd94 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:b2630e7a7ebf59b969bc85fc8e2cffbef9c10537cb8679fbc0e19cb88ff196f3 [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.tar.gz (bytes 1233384954) [MANIFEST.json]
  • Archive sha256 at publish4b0bb3c9803bec8b8de663f15e81667c93631ac3e94e5392cc5c25f3788ae422 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/mattermost/mattermost [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv12.0.2 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit13ae6c4cf1a8e73c35a4f0c8816a505506c7acdd [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashf06be07cd9c787be9e14a7062e138b636acc04dbc9ec9e00b1bae8864589bc35 (files 15911) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:34595f250a0e372f351b4e3a60e23ca0c69d8052b39a01312df364ec6f2dfe6e [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794391138 (utc 2026-11-11T09:58:58Z) [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.26.11-bookworm@sha256:dc40a13b61304647ed7e5d581d246b86413dfc29d63c6d018310feb93cd98fc0 · platform digest sha256:79ecd0a7157c7a4cf3b281ced8465350591bf54fedab540e75374a003e1fde7e
    • ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
    [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.rebuild.json, engine]
  • Engine commit(s)
    • commit d439f5fb4e2900022d4c2b52cfcb9e9af8fcc20a · dirty yes · first drive 4433
    • commit 5cf3b0594a304e32ae246441aa48f3a4b4d2aaa5 · dirty yes · first drive 4451
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain989 (created 2026-11-11T23:56:11Z · trigger customer_request · upstream version v12.0.2) [chains, chains #989]
  • Requestbuild request #658 (rebuild) (requested at 2026-11-11T09:58:59Z · requested by kitforge-agent · version v12.0.2) [build_requests, build_requests #658]
  • Reasonrerelease agenda REVISION -> v12.0.2-CE-ubuntu24.04-r2 (decay loop, IMP-08) [build_requests, build_requests #658 request_reason]
  • Supersedesreadystack/mattermost:v12.0.2-CE-ubuntu24.04-r1 (chain 900) [chains, chains #900]

The path through the harness

Fully recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 989 release · ready_to_ship

Created 2026-11-11T23:56:11Z, upstream v12.0.2, build request 658 [chains, chains #989]

DriveStartedMinutesBuild hostHow it stopped
44332026-11-12T14:01:15Z55.2build host 5 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4433]
44512026-11-12T15:54:56Z—build host 5 publish-held not recorded [drive_runs, drive_runs #4451]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-12T14:01:26Z2026-11-12T14:01:27Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json d96068655e7e…
acquire 2026-11-12T14:01:50Z2026-11-12T14:01:52Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree c467fb8506b9…
license_file 0a3d65b9301f…
custody_inputs f8dd8d2efea8…
source_tree_hash 7da22a2b6777…
source_file_manifest ba66c3330823…
plan 2026-11-12T14:02:49Z2026-11-12T14:02:50Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 315a6e5a7a38…
input_pin_plan 016dc9f8efc2…
toolchain_lock 3277665bb0a4…
assemble_kit 2026-11-12T14:20:57Z2026-11-12T14:20:58Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile b9079b88d7bf…
build_recipe dbe36ebaafcf…
system_pinning 71610db47709…
build_offline_sh 6ab4f08a6ec7…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 9cdf8f934b06…
verify_offline_sh 3e8184ea230c…
base_image_digests 1f2987b73f7e…
dockerfile_offline b9079b88d7bf…
first_build_digest 648d5fd59ed5…
remediate 2026-11-12T14:22:24Z2026-11-12T14:22:25Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log e5c7793ce3f7…
security_report b99e85405e6d…
build_kit 2026-11-12T14:34:52Z2026-11-12T14:34:53Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 5134a8404e31…
locked_digest ec1df886753d…
freeze_manifest 74284f1b6d6c…
offline_rebuild_transcript ed3f08e5fe51…
verdict 2026-11-12T14:37:29Z2026-11-12T14:37:30Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 451eefb3c7c2…
publish_image 2026-11-12T14:38:44Z2026-11-12T14:38:44Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 54210518caf6…
promotion_record c9defcdc5c3e…
boot_instance 2026-11-12T14:39:10Z2026-11-12T14:39:13Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 294025c15711…
sbom 2026-11-12T14:39:43Z2026-11-12T14:39:44Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 20d313944fc8…
sbom_json 0444d31293c5…
schema_discovery 2026-11-12T14:39:47Z2026-11-12T14:39:47Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 7a05ddb62814…
dependency_tree afec8d020b9e…
table_classification 2b46cb21811f…
admin_handbook 2026-11-12T14:39:56Z2026-11-12T14:39:57Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 9eace0e6270e…
admin_handbook 44fcc3e9bdf4…
db_handbook 2026-11-12T14:40:07Z2026-11-12T14:40:07Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 0d51596fc010…
seed_isolation 1682588227bc…
seed_data 2026-11-12T14:40:13Z2026-11-12T14:40:14Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 7c87322ec415…
seed_cases_json 756591ab58c8…
seed_validate 2026-11-12T14:40:16Z2026-11-12T14:40:16Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract abdeb6c7b1a3…
usecase_validate 2026-11-12T14:40:36Z2026-11-12T14:40:36Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests 1626f45950ba…
passed_tests b851355d04e9…
test_results fd055e9fead3…
usecase_contract 5b0f4955bf0e…
finalize_docs 2026-11-12T14:40:42Z2026-11-12T14:40:42Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 8b5dbd1cd27a…
release_notes e9a4bf344f78…
api_integration_guide 2677ce93e2cb…
package_archive invalidated 2026-11-12T15:54:28Z 2026-11-12T14:56:25Z2026-11-12T14:56:29Z1
37 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 unpack_files
  • G8 scout_grade_a
  • G8 script_copies
  • G8 upgrade_check
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 53df89a2f66f…
checksums d9ec7925417d…
verify_md d011817e486f…
rebuild_md 082ae1db9024…
manifest_txt 33c73d7ba74e…
actions_jsonl 3db20e4dbb46…
provenance_md 153fc2b8b8cd…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json e12ee8e50763…

[stage_runs]

Rewinds

  • 2026-11-12T15:54:28Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #34118]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-12T14:56:29Z.

6 calls over 3 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 013198 —
remediate3102 025575 L-A08, L-038, L-036, L-034, L-032
usecase_validate1001 01596 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.68 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-12T14:58:20Z 002 clean to publish [held_rounds, held_rounds #1824] $0.68 3 rounds, $40.00 53df89a2f66f…

Defects

Fully recorded
  • Ledger entries4 [defects, defects where product_slug=mattermost and this tag or chain]
  • Disclosed in the archive4 [docs/defects/defects.json, entries]

4 ledger entries: by severity low 3, high 1; by status fixed-before-release 3, open 1.

DefectSeverityStatusFound byFixed in
RSD-mattermost-7752f4a7ea
Admin handbook: Says the paths have no counterpart in this image, but IMAGE_CONFIG.json Env sets all three (not as volumes). [defects, defects #185281]		lowfixed-before-releaseheld review (review model)—
RSD-mattermost-bea147ef80
First visitor can claim the administrator account until setup is completed [defects, defects #270596]		highopenbuild strategy record—
RSD-mattermost-4eec4359b1
Admin handbook: DOCKERHUB_README.md says secrets go in an env file, not on the command line, and gives the --env-file run command; the handbooks put the password on the command line. [defects, defects #270597]		lowfixed-before-releaseheld review (review model)—
RSD-mattermost-68e07eeda8
Admin handbook: The Restoring block's final docker run has no --network, so run as written after the restore the container is on the default bridge and exits with 'lookup your-db ... [defects, defects #270985]		lowfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:b2630e7a7ebf59b969bc85fc8e2cffbef9c10537cb8679fbc0e19cb88ff196f3 · published digest sha256:b2630e7a7ebf59b969bc85fc8e2cffbef9c10537cb8679fbc0e19cb88ff196f3 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 342) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-12T15:55:49Z · failing Docker Scout counts 121 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-12T15:55:09Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3835683062 · transparency-log entry · integrated 2026-11-12T16:05:30Z) [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:d79d839282f68597e5dae4a4742c09d7d0539aec5ecda8270329cc6a1abbfd94 · state attached · log index 3835685991 · transparency-log entry
    • kind sbom · digest sha256:d79d839282f68597e5dae4a4742c09d7d0539aec5ecda8270329cc6a1abbfd94 · state attached · log index 3835686712 · transparency-log entry
    • kind vsa · digest sha256:d79d839282f68597e5dae4a4742c09d7d0539aec5ecda8270329cc6a1abbfd94 · state attached · log index 3835687913 · transparency-log entry
    • kind provenance · digest sha256:b2630e7a7ebf59b969bc85fc8e2cffbef9c10537cb8679fbc0e19cb88ff196f3 · state attached · log index 3835688725 · transparency-log entry
    • kind sbom · digest sha256:b2630e7a7ebf59b969bc85fc8e2cffbef9c10537cb8679fbc0e19cb88ff196f3 · state attached · log index 3835689400 · transparency-log entry
    • kind vsa · digest sha256:b2630e7a7ebf59b969bc85fc8e2cffbef9c10537cb8679fbc0e19cb88ff196f3 · state attached · log index 3835690292 · transparency-log entry
    (at 2026-11-12T16:05:30Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/mattermost/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-12T14:58:29Z on build host 3 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:b2630e7a7ebf59b969bc85fc8e2cffbef9c10537cb8679fbc0e19cb88ff196f3 [clean-room rebuild ledger, runs[797]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-12T14:38:44Z [stage_runs, stage_runs chain 989 stage publish_image]
  • Archive manifests written2026-11-12T16:00:53Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 879 · probed 2026-11-12T14:28:48Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-12T16:07:22Z generated: by KitForge release/build_trail.py · generator commit 5cf3b0594a304e32ae246441aa48f3a4b4d2aaa5
  • 2026-11-12T16:10:05Z publication: promoted at 2026-11-12T16:08:13Z · promoted digest sha256:d79d839282f68597e5dae4a4742c09d7d0539aec5ecda8270329cc6a1abbfd94 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 514 · checklist status complete · checklist at 2026-11-12T16:10:05Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/mattermost/v12.0.2-CE-ubuntu24.04-r2/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/mattermost/v12.0.2-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.rebuild.jsonbeside the archive (prodasset /data/production/mattermost/v12.0.2-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r2.rebuild.json.sigstorebeside the archive (prodasset /data/production/mattermost/v12.0.2-CE-ubuntu24.04-r2/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/mattermost/v12.0.2-CE-ubuntu24.04-r2/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)658
chainssadb, ReadyStack's engine database (not published)989
defectssadb, ReadyStack's engine database (not published)mattermost v12.0.2-CE-ubuntu24.04-r2
drive_runssadb, ReadyStack's engine database (not published)chain 989
held_roundssadb, ReadyStack's engine database (not published)chain 989
lesson_recallssadb, ReadyStack's engine database (not published)chain 989
micro_step_runssadb, ReadyStack's engine database (not published)chain 989
release_imagessadb, ReadyStack's engine database (not published)mattermost v12.0.2-CE-ubuntu24.04-r2
stage_eventssadb, ReadyStack's engine database (not published)chain 989
stage_runssadb, ReadyStack's engine database (not published)chain 989
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—