memcached 1.6.45-CE-ubuntu24.04-r5 build trail
How ReadyStack built readystack/memcached:1.6.45-CE-ubuntu24.04-r5 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.
This trail
As JSON- Image
readystack/memcached:1.6.45-CE-ubuntu24.04-r5 - Index digestsha256:83f1b4c70c05b946333794d09d5a8680de555b6fdbf760869e368a00679c525d
- linux/amd64 digestsha256:fc961cc27c6c4908ccf3e1010e94d06ae880a4b923d8f51e5076feff7299b6b1
- Archive
ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.tar.gz - Archive SHA-256 now7ca0a126b3df06632651f44ef62459caf5308f198cfce074f2032fc7e9880a1f
- Pins record
docs/PINS.md,docs/provenance/PINS.jsonin the archive (since generated) - Generated2026-11-13T12:12:54Z by KitForge release/build_trail.py
- Sections9 sections, 8 fully recorded; 1 item not recorded
Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:
cosign verify-blob --key https://readystack.dev/keys/cosign.pub \ --bundle ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.trail.json.sigstore ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.trail.json
IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level
Identity
Fully recorded- Productmemcached (memcached) [MANIFEST.json]
- Release tag1.6.45-CE-ubuntu24.04-r5 [MANIFEST.json]
- Imagereadystack/memcached:1.6.45-CE-ubuntu24.04-r5 [MANIFEST.json]
- Image index digestsha256:83f1b4c70c05b946333794d09d5a8680de555b6fdbf760869e368a00679c525d [docs/provenance/LOCKED_DIGEST.txt]
- linux/amd64 image digestsha256:fc961cc27c6c4908ccf3e1010e94d06ae880a4b923d8f51e5076feff7299b6b1 [ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.rebuild.json, subject.image_manifest_digest]
- ArchiveReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.tar.gz (bytes 547577815) [MANIFEST.json]
- Archive sha256 at publish7ca0a126b3df06632651f44ef62459caf5308f198cfce074f2032fc7e9880a1f [MANIFEST.json, tarball_sha256]
- Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
- Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
- Upstream repositoryhttps://github.com/memcached/memcached [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream ref1.6.45 [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream commit2d51e364799bc9698bd4b11728ea978cea12da6e [docs/provenance/SOURCE_TREE_HASH.json]
- Source tree hashcc6ca5f8604f9aa54acb9b32dfdcdcadd0413aa8b92c95f9fdfec3b1ab6349b1 (files 327) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
- Kit tree hashsha256:283c3857f32e4ec95253d1b6a3d27e3a68820cfdaeca3623bdedfc70e6340975 [ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.rebuild.json, inputs.tree_hash]
- SOURCE_DATE_EPOCH1794569006 (utc 2026-11-13T11:23:26Z) [ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.rebuild.json, inputs.source_date_epoch]
- Base images
- ref golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 · platform digest sha256:fea12ba16096adec0f699ce1c4da2154d320450e56c1f63671f95d2a3551c77b
- ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
- BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.rebuild.json, engine]
- Engine commit(s)
- commit 195161eb676df9aaf61e9aaa551e579631ccd44f · dirty yes · first drive 4564
- commit 71a44fbbff4a170120e7b70cc06969e04184c642 · dirty yes · first drive 4567
Why this release exists
Fully recorded- Chain1070 (created 2026-11-13T11:32:09Z · trigger customer_request · upstream version 1.6.45) [chains, chains #1070]
- Requestbuild request #747 (rebuild) (requested at 2026-11-13T11:23:28Z · requested by kitforge-agent · version 1.6.45) [build_requests, build_requests #747]
- Reasonrerelease agenda REVISION -> 1.6.45-CE-ubuntu24.04-r5 (decay loop, IMP-08) [build_requests, build_requests #747 request_reason]
- Supersedesreadystack/memcached:1.6.45-CE-ubuntu24.04-r4 (chain 1011) [chains, chains #1011]
The path through the harness
Fully recorded1 chain · 2 drives · 18 stages · 1 rewind
Chain 1070 release · ready_to_ship
Created 2026-11-13T11:32:09Z, upstream 1.6.45, build request 747 [chains, chains #1070]
| Drive | Started | Minutes | Build host | How it stopped |
|---|---|---|---|---|
| 4564 | 2026-11-13T11:32:34Z | 10.7 | build host 3 withhold-publish | ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4564] |
| 4567 | 2026-11-13T12:08:52Z | — | build host 3 publish-held | not recorded [drive_runs, drive_runs #4567] |
Stages, in order
| Stage | First start | Passed | Attempts | Gate checks passed | Artifacts (SHA-256) |
|---|---|---|---|---|---|
intake |
2026-11-13T11:32:43Z | 2026-11-13T11:32:44Z | 1 | 4
|
order_json e307a19ada28… |
acquire |
2026-11-13T11:32:50Z | 2026-11-13T11:32:51Z | 1 | 12
|
source_tree 15415272998a…license_file bc887c4ad805…custody_inputs 55702e1fbab5…source_tree_hash 8737a7c044d2…source_file_manifest 0917312c20e5… |
plan |
2026-11-13T11:33:15Z | 2026-11-13T11:33:15Z | 1 | 10
|
recon_report b71877af02e9…input_pin_plan 116a825fb6e4…toolchain_lock f15bc18305c5… |
assemble_kit |
2026-11-13T11:35:00Z | 2026-11-13T11:35:01Z | 1 | 27
|
dockerfile 9a65fa52ebb1…build_recipe 84cbddd47998…system_pinning aa8db05a9a8a…build_offline_sh 6ab4f08a6ec7…generate_sbom_sh ce0f1e6f1e70…first_boot_health 297425373e6d…verify_offline_sh 3e8184ea230c…base_image_digests 9255886f1164…dockerfile_offline 9a65fa52ebb1…first_build_digest 949522eddc29… |
remediate |
2026-11-13T11:35:24Z | 2026-11-13T11:35:25Z | 1 | 8
|
vendored_apt e3b0c44298fc…remediation_log 07dfc3cd7639…security_report 2cf449469ae8… |
build_kit |
2026-11-13T11:37:36Z | 2026-11-13T11:37:37Z | 1 | 9
|
cosign_stamp f1c67887e0c9…locked_digest 120be66772db…freeze_manifest 5a9416168e12…offline_rebuild_transcript 04cd514739ae… |
verdict |
2026-11-13T11:37:59Z | 2026-11-13T11:38:00Z | 1 | 8
|
scout_verdict 29a3e8482368… |
publish_image |
2026-11-13T11:38:28Z | 2026-11-13T11:38:29Z | 1 | 7
|
hub_readme 38d85a2da25d…promotion_record dd047a2c2365… |
boot_instance |
2026-11-13T11:38:34Z | 2026-11-13T11:38:39Z | 2 | 3
|
instance_handle 560ec8448dbd… |
sbom |
2026-11-13T11:38:46Z | 2026-11-13T11:38:46Z | 1 | 5
|
sbom_md d1c46db96a62…sbom_json d59b8f06875a… |
schema_discovery |
2026-11-13T11:38:49Z | 2026-11-13T11:38:50Z | 1 | 7
|
schema_hash d30d2eebcde1…dependency_tree 7fdd566f1b7a…table_classification 9df951017845… |
admin_handbook |
2026-11-13T11:38:58Z | 2026-11-13T11:38:59Z | 1 | 7
|
api_map eededede7b57…admin_handbook 157152722248… |
db_handbook |
2026-11-13T11:39:09Z | 2026-11-13T11:39:10Z | 1 | 8
|
db_handbook 65d3e809715e…seed_isolation f73cfc67927a… |
seed_data |
2026-11-13T11:39:18Z | 2026-11-13T11:39:18Z | 1 | 6
|
seed_data_sql 5a28bec12057…seed_cases_json 85e2edb798f8… |
seed_validate |
2026-11-13T11:39:21Z | 2026-11-13T11:39:22Z | 1 | 3
|
seed_data_contract ee9a03c5d0b8… |
usecase_validate |
2026-11-13T11:39:43Z | 2026-11-13T11:39:44Z | 1 | 10
|
failed_tests b2247b16f5f7…passed_tests 1e13c116716a…test_results 345cea707cf4…usecase_contract 0e91f589a28e… |
finalize_docs |
2026-11-13T11:39:50Z | 2026-11-13T11:39:51Z | 1 | 9
|
defects_json 4073da5fe855…release_notes cffe0e4746e6…api_integration_guide 4a00f6f929b0… |
package_archive invalidated 2026-11-13T12:08:28Z |
2026-11-13T11:43:15Z | 2026-11-13T11:43:17Z | 1 | 37 (final gate PASS)
|
sale_tar 839fd7248970…checksums 9448a542fe8e…verify_md 9ca221897b93…rebuild_md aada2e2b99c4…manifest_txt 355bdd7c5691…actions_jsonl 2b7e60c60df8…provenance_md b4a6983c51ea…assetchain_log_md e9eccaec0c0f…assetchain_log_json 6ff2cd6fa975… |
[stage_runs]
Rewinds
- 2026-11-13T12:08:28Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #35879]
Model work per stage
Fully recordedRole: writer model. Calls up to 2026-11-13T11:43:17Z.
4 calls over 2 stages
| Stage | Calls | Refused | Errors | Max attempt | Forced commits | Real tokens | Lesson rules shown |
|---|---|---|---|---|---|---|---|
plan | 2 | 0 | 0 | 1 | 0 | 5298 | L-A183, L-A15 |
remediate | 2 | 0 | 0 | 1 | 0 | 5402 | L-A183, L-A15 |
[micro_step_runs] [lesson_recalls]
Review
Fully recordedRole: review model.
1 round, 1 counted, $0.31 recorded cost
| Round | Started | Critical | Major | Minor | Verdict | Cost | Cap in force | Archive reviewed |
|---|---|---|---|---|---|---|---|---|
| 1 | 2026-11-13T11:43:50Z | 0 | 0 | 0 | clean to publish [held_rounds, held_rounds #1868] | $0.31 | 3 rounds, $40.00 | 839fd7248970… |
Defects
Fully recorded- Ledger entries1 [defects, defects where product_slug=memcached and this tag or chain]
- Disclosed in the archive1 [docs/defects/defects.json, entries]
1 ledger entry: by severity high 1; by status open 1.
| Defect | Severity | Status | Found by | Fixed in |
|---|---|---|---|---|
RSD-memcached-e6b81a9415Unauthenticated access by default [defects, defects #279569] | high | open | build strategy record | — |
Verification
1 item not recorded- Reproduced before publishingyes (rebuilt digest sha256:fc961cc27c6c4908ccf3e1010e94d06ae880a4b923d8f51e5076feff7299b6b1 · published digest sha256:fc961cc27c6c4908ccf3e1010e94d06ae880a4b923d8f51e5076feff7299b6b1 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 54) [docs/provenance/REPRO_VERIFICATION.json, verified]
- Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
- Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-13T12:09:11Z · failing Docker Scout counts 11 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
- Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-13T12:09:02Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
- Image signature transparency-log entries
- log index 3853077857 · transparency-log entry
- log index 3853078605 · transparency-log entry
- rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3853421215 · transparency-log entry · integrated 2026-11-13T12:11:26Z) [ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
- Signed attestations
- kind provenance · digest sha256:83f1b4c70c05b946333794d09d5a8680de555b6fdbf760869e368a00679c525d · state attached · log index 3853423643 · transparency-log entry
- kind sbom · digest sha256:83f1b4c70c05b946333794d09d5a8680de555b6fdbf760869e368a00679c525d · state attached · log index 3853425387 · transparency-log entry
- kind vsa · digest sha256:83f1b4c70c05b946333794d09d5a8680de555b6fdbf760869e368a00679c525d · state attached · log index 3853427685 · transparency-log entry
- kind provenance · digest sha256:fc961cc27c6c4908ccf3e1010e94d06ae880a4b923d8f51e5076feff7299b6b1 · state attached · log index 3853429808 · transparency-log entry
- kind sbom · digest sha256:fc961cc27c6c4908ccf3e1010e94d06ae880a4b923d8f51e5076feff7299b6b1 · state attached · log index 3853431659 · transparency-log entry
- kind vsa · digest sha256:fc961cc27c6c4908ccf3e1010e94d06ae880a4b923d8f51e5076feff7299b6b1 · state attached · log index 3853433938 · transparency-log entry
- Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/memcached/recipe) [docs/provenance/PINS.json]
Offline clean-room rebuilds
- 2026-11-13T11:43:55Z on build host 3 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
rebuilt sha256:fc961cc27c6c4908ccf3e1010e94d06ae880a4b923d8f51e5076feff7299b6b1 [clean-room rebuild ledger, runs[827]]
- Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
Publication
Fully recorded 1 pending at generation- Image pushed (internal tag), publish_image passed2026-11-13T11:38:29Z [stage_runs, stage_runs chain 1070 stage publish_image]
- Archive manifests written2026-11-13T12:10:27Z [PUBLISH_MANIFEST.json, published_at]
- Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)
Packages and CPU level
Fully recorded- x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 71 · probed 2026-11-13T11:36:25Z · source build_kit) [release_images, isa_level_hard]
History
2 events- 2026-11-13T12:12:54Z generated: by KitForge release/build_trail.py · generator commit 71a44fbbff4a170120e7b70cc06969e04184c642
- 2026-11-13T12:14:17Z publication: promoted at 2026-11-13T12:13:34Z · promoted digest sha256:83f1b4c70c05b946333794d09d5a8680de555b6fdbf760869e368a00679c525d · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 538 · checklist status complete · checklist at 2026-11-13T12:14:17Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json
Records
25 records| Record | Where it is | Rows |
|---|---|---|
docs/defects/defects.json | inside the archive (ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.tar.gz) | — |
docs/provenance/IMAGE_EVIDENCE.json | inside the archive (ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.tar.gz) | — |
docs/provenance/LOCKED_DIGEST.txt | inside the archive (ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.tar.gz) | — |
docs/provenance/PINS.json | inside the archive (ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.tar.gz) | — |
docs/provenance/REPRO_VERIFICATION.json | inside the archive (ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.tar.gz) | — |
docs/provenance/SOURCE_TREE_HASH.json | inside the archive (ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.tar.gz) | — |
MANIFEST.json | beside the archive (prodasset /data/production/memcached/1.6.45-CE-ubuntu24.04-r5/), as staged for publishing | — |
PUBLISH_MANIFEST.json | beside the archive (prodasset /data/production/memcached/1.6.45-CE-ubuntu24.04-r5/), as staged for publishing | — |
ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.rebuild.json | beside the archive (prodasset /data/production/memcached/1.6.45-CE-ubuntu24.04-r5/), as staged for publishing | — |
ReadyStack-memcached-1.6.45-CE-ubuntu24.04-r5.rebuild.json.sigstore | beside the archive (prodasset /data/production/memcached/1.6.45-CE-ubuntu24.04-r5/), as staged for publishing | — |
SCOUT_EVIDENCE.json | beside the archive (prodasset /data/production/memcached/1.6.45-CE-ubuntu24.04-r5/), as staged for publishing | — |
clean-room rebuild ledger | the clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published) | — |
build_requests | sadb, ReadyStack's engine database (not published) | 747 |
chains | sadb, ReadyStack's engine database (not published) | 1070 |
defects | sadb, ReadyStack's engine database (not published) | memcached 1.6.45-CE-ubuntu24.04-r5 |
drive_runs | sadb, ReadyStack's engine database (not published) | chain 1070 |
held_rounds | sadb, ReadyStack's engine database (not published) | chain 1070 |
lesson_recalls | sadb, ReadyStack's engine database (not published) | chain 1070 |
micro_step_runs | sadb, ReadyStack's engine database (not published) | chain 1070 |
release_images | sadb, ReadyStack's engine database (not published) | memcached 1.6.45-CE-ubuntu24.04-r5 |
stage_events | sadb, ReadyStack's engine database (not published) | chain 1070 |
stage_runs | sadb, ReadyStack's engine database (not published) | chain 1070 |
attestations.json | the chain's workspace on the controller (not published) | — |
deliverables/provenance/PROMOTION_RECORD.json | the chain's workspace on the controller (not published) | — |
g8_result.json | the chain's workspace on the controller (not published) | — |