Metabase v0.65.4.1-CE-ubuntu24.04-r1 build trail

How ReadyStack built readystack/metabase:v0.65.4.1-CE-ubuntu24.04-r1 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/metabase:v0.65.4.1-CE-ubuntu24.04-r1
  • Index digestsha256:758342c30947d9303c5bddccca1c02f28fb4eb546b953d66a6aa9481a77296ef
  • linux/amd64 digestsha256:6c587fce29aec80301f10e28952268e068a371dae76137f1b078fee9fa74c1ae
  • ArchiveReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.tar.gz
  • Archive SHA-256 nowc3461d57bada3bf8c75cea82371d4ea4d20001d2d57ef072d1406992e0af306c
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-12T21:21:18Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.trail.json.sigstore ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.trail.json
ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.trail.jsonReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.trail.json.sigstoreReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.trail.mdMetabase product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductMetabase (metabase) [MANIFEST.json]
  • Release tagv0.65.4.1-CE-ubuntu24.04-r1 [MANIFEST.json]
  • Imagereadystack/metabase:v0.65.4.1-CE-ubuntu24.04-r1 [MANIFEST.json]
  • Image index digestsha256:758342c30947d9303c5bddccca1c02f28fb4eb546b953d66a6aa9481a77296ef [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:6c587fce29aec80301f10e28952268e068a371dae76137f1b078fee9fa74c1ae [ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.tar.gz (bytes 1916104721) [MANIFEST.json]
  • Archive sha256 at publishc3461d57bada3bf8c75cea82371d4ea4d20001d2d57ef072d1406992e0af306c [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/metabase/metabase [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv0.65.4.1 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commitc1fef84628feb07e304af259a966f716038bc7b7 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash98e388cbc850d9c15523ebb8ea8f6fa00dd29e16bae3e8b988d6dd9923e238e1 (files 19907) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:61a8622b00bfc5cce579e2d94833c7d091c3f983c0fc3761fb2e37d9947d6bd2 [ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794380463 (utc 2026-11-11T07:01:03Z) [ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref eclipse-temurin:25-jdk-noble@sha256:589ff4cc3f71aab462e7048a47a0d10edf57fbccde3fceea2281e610bf5880b4 · platform digest sha256:51ae87bbb1949c1afdff51f6a3e6c5f283d84a4bd68512c9657fdc6605026a49
    • ref eclipse-temurin:25-jre-noble@sha256:2ef7a81085e0502d7d4ff7e7c0257b6d4f46433f8ea6021180aa3c8a2b9ca3ec · platform digest sha256:41a70a160a5a157126929c1901e8dcf17ea4fd88eca1e7b9abf3cb1bb04df6c2
    [ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.rebuild.json, engine]
  • Engine commit(s)
    • commit 8ff362fa42dca5575ef92fdd7601d43149a85f02 · dirty yes · first drive 4269
    • commit 89246b3fdf7ea046df3d0e48f836a371a0c3bdf9 · dirty yes · first drive 4467
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain962 (created 2026-11-11T07:02:48Z · trigger customer_request · upstream version v0.65.4.1) [chains, chains #962]
  • Requestbuild request #643 (rebuild) (requested at 2026-11-11T07:01:11Z · requested by kitforge-agent · version v0.65.4.1) [build_requests, build_requests #643]
  • Reasonretarget to v0.65.4.1: a newer upstream release (rule 1) [build_requests, build_requests #643 request_reason]
  • Supersedesreadystack/metabase:v0.65.3.7-CE-ubuntu24.04-r1 (chain 956) [chains, chains #956]

The path through the harness

Fully recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 962 release · ready_to_ship

Created 2026-11-11T07:02:48Z, upstream v0.65.4.1, build request 643 [chains, chains #962]

DriveStartedMinutesBuild hostHow it stopped
42692026-11-11T07:04:20Z118.7build host 2 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4269]
44672026-11-12T20:35:44Z—build host 2 publish-held not recorded [drive_runs, drive_runs #4467]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-11T07:04:30Z2026-11-11T07:04:31Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 851f222173da…
acquire 2026-11-11T07:04:48Z2026-11-11T07:04:51Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 7a667eade55f…
license_file da3c9b0046ee…
custody_inputs 72d99db40c81…
source_tree_hash e6f5046b5561…
source_file_manifest 1f3f3722155a…
plan 2026-11-11T07:05:25Z2026-11-11T07:05:25Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 11f85e8bbe5f…
input_pin_plan 9b8caaa54793…
toolchain_lock 1bebbfd66b63…
assemble_kit 2026-11-11T07:42:16Z2026-11-11T07:42:17Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile c9b342a95d24…
build_recipe c0e48ff17a66…
system_pinning 6b61cd5b39e9…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health cb592fab2665…
verify_offline_sh 3e8184ea230c…
base_image_digests a2deeab8bd02…
dockerfile_offline c9b342a95d24…
first_build_digest 4595947671b9…
remediate 2026-11-11T07:42:41Z2026-11-11T07:42:42Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log fdefefefe192…
security_report 27dcd91fadd5…
build_kit 2026-11-11T08:15:11Z2026-11-11T08:15:12Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 9ce12f882702…
locked_digest 00fcdd200129…
freeze_manifest 195859125d73…
offline_rebuild_transcript 64aa552165a2…
verdict 2026-11-11T08:18:45Z2026-11-11T08:18:45Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 586efd83a4e6…
publish_image 2026-11-11T08:20:35Z2026-11-11T08:20:36Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 50e00404d3f4…
promotion_record e72da433c583…
boot_instance 2026-11-11T08:21:27Z2026-11-11T08:21:31Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 561c2e9ee66c…
sbom 2026-11-11T08:22:43Z2026-11-11T08:22:44Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md a660f220231f…
sbom_json 8fd1414962f8…
schema_discovery 2026-11-11T08:22:46Z2026-11-11T08:22:47Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 5ef5a2f9f658…
dependency_tree 0d0759b74ecc…
table_classification f67ed90c662a…
admin_handbook 2026-11-11T08:22:55Z2026-11-11T08:22:56Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 20c181df09f3…
admin_handbook 2f1154b08912…
db_handbook 2026-11-11T08:23:04Z2026-11-11T08:23:05Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 71cac8bb8009…
seed_isolation 077c6d2dadf1…
seed_data 2026-11-11T08:23:12Z2026-11-11T08:23:13Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 6699e71c9e1d…
seed_cases_json f3dffc9ce6d7…
seed_validate 2026-11-11T08:23:15Z2026-11-11T08:23:16Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract a6fd8d5ced9d…
usecase_validate 2026-11-11T08:23:37Z2026-11-11T08:23:38Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests eb12f7b50ce6…
test_results 60ba1dc9f13b…
usecase_contract 8a95f6e98207…
finalize_docs 2026-11-11T08:23:43Z2026-11-11T08:23:44Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json b699c4ebad5b…
release_notes cf4fcf67f149…
api_integration_guide 704b5951a09f…
package_archive invalidated 2026-11-12T20:35:19Z 2026-11-11T09:02:53Z2026-11-11T09:02:59Z1
35 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar b2401f52c262…
checksums d600c0f526f9…
verify_md f7e678ccaf79…
rebuild_md 3e5452e8430b…
manifest_txt d3ece6298435…
actions_jsonl 2c6099db0006…
provenance_md b60e67919392…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 2d9667a8a22f…

[stage_runs]

Rewinds

  • 2026-11-12T20:35:19Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #34499]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-11T09:02:59Z.

13 calls over 5 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 010400 L-A183, L-A15
remediate2001 09804 L-A183, L-A15
admin_handbook4001 032111 L-A180, L-A181, L-A182, L-A183, L-A184, L-A155, L-A114, L-A25, L-A15, L-A14
db_handbook4001 033054 L-A180, L-A181, L-A182, L-A183, L-A184, L-A114, L-A15
usecase_validate1001 01865 L-A59

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.35 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-11T09:05:12Z 000 clean to publish [held_rounds, held_rounds #1744] $0.35 3 rounds, $40.00 b2401f52c262…

Defects

Fully recorded
  • Ledger entries1 [defects, defects where product_slug=metabase and this tag or chain]
  • Disclosed in the archive1 [docs/defects/defects.json, entries]

1 ledger entry: by severity low 1; by status wont-fix-by-design 1.

DefectSeverityStatusFound byFixed in
RSD-metabase-a73d8c32e9
Enterprise / non-open-source components are removed from the source before the build: enterprise, LICENSE-MCL.txt [defects, defects #249098]		lowwont-fix-by-designbuild strategy record—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:6c587fce29aec80301f10e28952268e068a371dae76137f1b078fee9fa74c1ae · published digest sha256:6c587fce29aec80301f10e28952268e068a371dae76137f1b078fee9fa74c1ae · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 916) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
  • Grade at releaseB (percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-12T20:36:34Z · failing Base image docker.io/library/eclipse-temurin:25-jre-noble has been updated since this image was built: it was built on sha256:41a70a160a5a…, and the tag's current linux/amd64 image is sha256:5b5a79b85aeb…., Docker Scout counts 109 packages with copyleft licences (GPL, LGPL, MPL), 107 of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-12T20:36:02Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3839807944 · transparency-log entry · integrated 2026-11-12T21:18:05Z) [ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:758342c30947d9303c5bddccca1c02f28fb4eb546b953d66a6aa9481a77296ef · state attached · log index 3839820269 · transparency-log entry
    • kind sbom · digest sha256:758342c30947d9303c5bddccca1c02f28fb4eb546b953d66a6aa9481a77296ef · state attached · log index 3839822227 · transparency-log entry
    • kind vsa · digest sha256:758342c30947d9303c5bddccca1c02f28fb4eb546b953d66a6aa9481a77296ef · state attached · log index 3839824559 · transparency-log entry
    • kind provenance · digest sha256:6c587fce29aec80301f10e28952268e068a371dae76137f1b078fee9fa74c1ae · state attached · log index 3839826841 · transparency-log entry
    • kind sbom · digest sha256:6c587fce29aec80301f10e28952268e068a371dae76137f1b078fee9fa74c1ae · state attached · log index 3839828776 · transparency-log entry
    • kind vsa · digest sha256:6c587fce29aec80301f10e28952268e068a371dae76137f1b078fee9fa74c1ae · state attached · log index 3839831275 · transparency-log entry
    (at 2026-11-12T21:18:06Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/metabase/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-11T09:05:24Z on build host 2 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:6c587fce29aec80301f10e28952268e068a371dae76137f1b078fee9fa74c1ae [clean-room rebuild ledger, runs[746]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-11T08:20:36Z [stage_runs, stage_runs chain 962 stage publish_image]
  • Archive manifests written2026-11-12T20:48:30Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 808 · probed 2026-11-11T07:59:37Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-12T21:21:18Z generated: by KitForge release/build_trail.py · generator commit 89246b3fdf7ea046df3d0e48f836a371a0c3bdf9
  • 2026-11-12T21:25:49Z publication: promoted at 2026-11-12T21:22:21Z · promoted digest sha256:758342c30947d9303c5bddccca1c02f28fb4eb546b953d66a6aa9481a77296ef · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 520 · checklist status complete · checklist at 2026-11-12T21:25:49Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/metabase/v0.65.4.1-CE-ubuntu24.04-r1/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/metabase/v0.65.4.1-CE-ubuntu24.04-r1/), as staged for publishing—
ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.rebuild.jsonbeside the archive (prodasset /data/production/metabase/v0.65.4.1-CE-ubuntu24.04-r1/), as staged for publishing—
ReadyStack-metabase-v0.65.4.1-CE-ubuntu24.04-r1.rebuild.json.sigstorebeside the archive (prodasset /data/production/metabase/v0.65.4.1-CE-ubuntu24.04-r1/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/metabase/v0.65.4.1-CE-ubuntu24.04-r1/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)643
chainssadb, ReadyStack's engine database (not published)962
defectssadb, ReadyStack's engine database (not published)metabase v0.65.4.1-CE-ubuntu24.04-r1
drive_runssadb, ReadyStack's engine database (not published)chain 962
held_roundssadb, ReadyStack's engine database (not published)chain 962
lesson_recallssadb, ReadyStack's engine database (not published)chain 962
micro_step_runssadb, ReadyStack's engine database (not published)chain 962
release_imagessadb, ReadyStack's engine database (not published)metabase v0.65.4.1-CE-ubuntu24.04-r1
stage_eventssadb, ReadyStack's engine database (not published)chain 962
stage_runssadb, ReadyStack's engine database (not published)chain 962
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—