Mattermost v12.0.2-CE-ubuntu24.04-r3 build trail

How ReadyStack built readystack/mattermost:v12.0.2-CE-ubuntu24.04-r3 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/mattermost:v12.0.2-CE-ubuntu24.04-r3
  • Index digestsha256:1bd8444a5107f235b211e4f08c32d5fb841a29e4b76f4e450da755b710274b6f
  • linux/amd64 digestsha256:4c6ebda18d64029f5758ad139716fd27fea54b245f3b7dba23d0c07b0927dea8
  • ArchiveReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.tar.gz
  • Archive SHA-256 nowdb576c12829948ec255d6c4d339a302746332ddf6cb432b23346d8a7db329da2
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-13T15:49:36Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.trail.json.sigstore ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.trail.json
ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.trail.jsonReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.trail.json.sigstoreReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.trail.mdMattermost product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductMattermost (mattermost) [MANIFEST.json]
  • Release tagv12.0.2-CE-ubuntu24.04-r3 [MANIFEST.json]
  • Imagereadystack/mattermost:v12.0.2-CE-ubuntu24.04-r3 [MANIFEST.json]
  • Image index digestsha256:1bd8444a5107f235b211e4f08c32d5fb841a29e4b76f4e450da755b710274b6f [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:4c6ebda18d64029f5758ad139716fd27fea54b245f3b7dba23d0c07b0927dea8 [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.tar.gz (bytes 1237333204) [MANIFEST.json]
  • Archive sha256 at publishdb576c12829948ec255d6c4d339a302746332ddf6cb432b23346d8a7db329da2 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/mattermost/mattermost [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv12.0.2 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit13ae6c4cf1a8e73c35a4f0c8816a505506c7acdd [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashf06be07cd9c787be9e14a7062e138b636acc04dbc9ec9e00b1bae8864589bc35 (files 15911) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:fe9766828f1ff3e986f725446f5d8834b4ed4754b18129ef1a70eb82df21e3f3 [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794578564 (utc 2026-11-13T14:02:44Z) [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.26.11-bookworm@sha256:dc40a13b61304647ed7e5d581d246b86413dfc29d63c6d018310feb93cd98fc0 · platform digest sha256:79ecd0a7157c7a4cf3b281ced8465350591bf54fedab540e75374a003e1fde7e
    • ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
    [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.rebuild.json, engine]
  • Engine commit(s)
    • commit 4abf16c48ca86f76f9a457e2b5ddcb5e2b37aedf · dirty yes · first drive 4599
    • commit d4e6e682ea5cca0602a262047fa770f1c72bf093 · dirty yes · first drive 4610
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain1083 (created 2026-11-13T14:44:28Z · trigger customer_request · upstream version v12.0.2) [chains, chains #1083]
  • Requestbuild request #758 (rebuild) (requested at 2026-11-13T14:02:46Z · requested by kitforge-agent · version v12.0.2) [build_requests, build_requests #758]
  • Reasonrerelease agenda REVISION -> v12.0.2-CE-ubuntu24.04-r3 (decay loop, IMP-08) [build_requests, build_requests #758 request_reason]
  • Supersedesreadystack/mattermost:v12.0.2-CE-ubuntu24.04-r2 (chain 989) [chains, chains #989]

The path through the harness

Fully recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 1083 release · ready_to_ship

Created 2026-11-13T14:44:28Z, upstream v12.0.2, build request 758 [chains, chains #1083]

DriveStartedMinutesBuild hostHow it stopped
45992026-11-13T14:45:12Z41.5build host 1 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4599]
46102026-11-13T15:36:54Z—build host 1 publish-held not recorded [drive_runs, drive_runs #4610]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-13T14:45:23Z2026-11-13T14:45:23Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 96e529b02dbe…
acquire 2026-11-13T14:46:14Z2026-11-13T14:46:17Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree c467fb8506b9…
license_file 0a3d65b9301f…
custody_inputs f8dd8d2efea8…
source_tree_hash 7da22a2b6777…
source_file_manifest ba66c3330823…
plan 2026-11-13T14:47:13Z2026-11-13T14:47:14Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 1ebc8b8e88cf…
input_pin_plan f0647dc71f96…
toolchain_lock def44316e0cd…
assemble_kit 2026-11-13T14:59:51Z2026-11-13T14:59:52Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile e704bcd886a8…
build_recipe 913af3c7deee…
system_pinning 71610db47709…
build_offline_sh 6ab4f08a6ec7…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health f4e07e1c9045…
verify_offline_sh 3e8184ea230c…
base_image_digests 1f2987b73f7e…
dockerfile_offline e704bcd886a8…
first_build_digest e7008273b704…
remediate 2026-11-13T15:00:53Z2026-11-13T15:00:53Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log d437e511c0b1…
security_report 5d4ff28a0201…
build_kit 2026-11-13T15:09:19Z2026-11-13T15:09:20Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp e363a7a31db6…
locked_digest 90d931252c41…
freeze_manifest 05054a914243…
offline_rebuild_transcript 34e6fa98edb3…
verdict 2026-11-13T15:11:06Z2026-11-13T15:11:07Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict deb4e36efeb7…
publish_image 2026-11-13T15:12:10Z2026-11-13T15:12:11Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 54b74fe81cc0…
promotion_record 45617eb3db8a…
boot_instance 2026-11-13T15:12:29Z2026-11-13T15:12:32Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 9352f6de5ec7…
sbom 2026-11-13T15:12:56Z2026-11-13T15:12:57Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 8a6ad910091c…
sbom_json 7e0850865a0c…
schema_discovery 2026-11-13T15:12:59Z2026-11-13T15:13:00Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 7a05ddb62814…
dependency_tree afec8d020b9e…
table_classification 2b46cb21811f…
admin_handbook 2026-11-13T15:13:08Z2026-11-13T15:13:09Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 9eace0e6270e…
admin_handbook 8966666a96a9…
db_handbook 2026-11-13T15:13:18Z2026-11-13T15:13:19Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 73f061c9c8b3…
seed_isolation 1682588227bc…
seed_data 2026-11-13T15:13:24Z2026-11-13T15:13:24Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 7c87322ec415…
seed_cases_json 73f63b290ac1…
seed_validate 2026-11-13T15:13:27Z2026-11-13T15:13:28Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 7420b3c3fbf1…
usecase_validate 2026-11-13T15:13:45Z2026-11-13T15:13:46Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests 1a127983f33b…
passed_tests 02d0baec2de3…
test_results 9bc702a3fcd8…
usecase_contract 7f06e01e012c…
finalize_docs 2026-11-13T15:13:51Z2026-11-13T15:13:52Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 42bbd330f872…
release_notes ad01c589f4b0…
api_integration_guide 61e03a93e143…
package_archive invalidated 2026-11-13T15:36:29Z 2026-11-13T15:26:39Z2026-11-13T15:26:43Z1
37 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 unpack_files
  • G8 scout_grade_a
  • G8 script_copies
  • G8 upgrade_check
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar daa83f8e3970…
checksums fbc7b4e77566…
verify_md 0d710d3c964c…
rebuild_md d6a23d2dd116…
manifest_txt 42e272b5ed73…
actions_jsonl 3797cc1ac49e…
provenance_md 66c41e0bb1e7…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 7364022703d4…

[stage_runs]

Rewinds

  • 2026-11-13T15:36:29Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #36521]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-13T15:26:43Z.

5 calls over 3 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 013594 —
remediate2001 017422 L-A08, L-038, L-036, L-034, L-032
usecase_validate1001 01588 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.24 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-13T15:27:48Z 000 clean to publish [held_rounds, held_rounds #1892] $0.24 3 rounds, $40.00 daa83f8e3970…

Defects

Fully recorded
  • Ledger entries3 [defects, defects where product_slug=mattermost and this tag or chain]
  • Disclosed in the archive3 [docs/defects/defects.json, entries]

3 ledger entries: by severity high 1, low 2; by status open 3.

DefectSeverityStatusFound byFixed in
RSD-mattermost-18395a2e28
First visitor can claim the administrator account until setup is completed [defects, defects #285460]		highopenbuild strategy record—
RSD-mattermost-484a285a9f
Admin handbook: Says the paths have no counterpart in this image, but IMAGE_CONFIG.json Env sets all three (not as volumes). [defects, defects #285957]		lowopenheld review (review model)—
RSD-mattermost-e69dde4d05
Admin handbook: The Restoring block's final docker run has no --network, so run as written after the restore the container is on the default bridge and exits with 'lookup your-db ... [defects, defects #285958]		lowopenheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:4c6ebda18d64029f5758ad139716fd27fea54b245f3b7dba23d0c07b0927dea8 · published digest sha256:4c6ebda18d64029f5758ad139716fd27fea54b245f3b7dba23d0c07b0927dea8 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 224) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-13T15:37:31Z · failing Docker Scout counts 121 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-13T15:37:08Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3857221748 · transparency-log entry · integrated 2026-11-13T15:46:02Z) [ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:1bd8444a5107f235b211e4f08c32d5fb841a29e4b76f4e450da755b710274b6f · state attached · log index 3857231972 · transparency-log entry
    • kind sbom · digest sha256:1bd8444a5107f235b211e4f08c32d5fb841a29e4b76f4e450da755b710274b6f · state attached · log index 3857237513 · transparency-log entry
    • kind vsa · digest sha256:1bd8444a5107f235b211e4f08c32d5fb841a29e4b76f4e450da755b710274b6f · state attached · log index 3857242597 · transparency-log entry
    • kind provenance · digest sha256:4c6ebda18d64029f5758ad139716fd27fea54b245f3b7dba23d0c07b0927dea8 · state attached · log index 3857247768 · transparency-log entry
    • kind sbom · digest sha256:4c6ebda18d64029f5758ad139716fd27fea54b245f3b7dba23d0c07b0927dea8 · state attached · log index 3857250593 · transparency-log entry
    • kind vsa · digest sha256:4c6ebda18d64029f5758ad139716fd27fea54b245f3b7dba23d0c07b0927dea8 · state attached · log index 3857256245 · transparency-log entry
    (at 2026-11-13T15:46:10Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/mattermost/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-13T15:27:57Z on build host 1 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:4c6ebda18d64029f5758ad139716fd27fea54b245f3b7dba23d0c07b0927dea8 [clean-room rebuild ledger, runs[842]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-13T15:12:11Z [stage_runs, stage_runs chain 1083 stage publish_image]
  • Archive manifests written2026-11-13T15:42:11Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 879 · probed 2026-11-13T15:05:20Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-13T15:49:36Z generated: by KitForge release/build_trail.py · generator commit 073535c62a45bea8f3f14b90d7062837d7d2da35
  • 2026-11-13T15:54:24Z publication: promoted at 2026-11-13T15:50:37Z · promoted digest sha256:1bd8444a5107f235b211e4f08c32d5fb841a29e4b76f4e450da755b710274b6f · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 553 · checklist status complete · checklist at 2026-11-13T15:54:24Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/mattermost/v12.0.2-CE-ubuntu24.04-r3/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/mattermost/v12.0.2-CE-ubuntu24.04-r3/), as staged for publishing—
ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.rebuild.jsonbeside the archive (prodasset /data/production/mattermost/v12.0.2-CE-ubuntu24.04-r3/), as staged for publishing—
ReadyStack-mattermost-v12.0.2-CE-ubuntu24.04-r3.rebuild.json.sigstorebeside the archive (prodasset /data/production/mattermost/v12.0.2-CE-ubuntu24.04-r3/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/mattermost/v12.0.2-CE-ubuntu24.04-r3/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)758
chainssadb, ReadyStack's engine database (not published)1083
defectssadb, ReadyStack's engine database (not published)mattermost v12.0.2-CE-ubuntu24.04-r3
drive_runssadb, ReadyStack's engine database (not published)chain 1083
held_roundssadb, ReadyStack's engine database (not published)chain 1083
lesson_recallssadb, ReadyStack's engine database (not published)chain 1083
micro_step_runssadb, ReadyStack's engine database (not published)chain 1083
release_imagessadb, ReadyStack's engine database (not published)mattermost v12.0.2-CE-ubuntu24.04-r3
stage_eventssadb, ReadyStack's engine database (not published)chain 1083
stage_runssadb, ReadyStack's engine database (not published)chain 1083
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—