Metabase v0.65.4.4-CE-ubuntu24.04-r1 build trail

How ReadyStack built readystack/metabase:v0.65.4.4-CE-ubuntu24.04-r1 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/metabase:v0.65.4.4-CE-ubuntu24.04-r1
  • Index digestsha256:12ecb0555d85fc7db294561bc7f42183bb321f532c6716538f6d0bad96404f08
  • linux/amd64 digestsha256:c51073dd36b57c4c160de1f5b1e7a341ef2c2a2b7288375b38e8fe1c7542c465
  • ArchiveReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.tar.gz
  • Archive SHA-256 now08d2ed08224151bb445475c34e0d5b9cd78b8de3b2bc05f3aefd531f9a0230ad
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-14T10:04:50Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.trail.json.sigstore ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.trail.json
ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.trail.jsonReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.trail.json.sigstoreReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.trail.mdMetabase product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductMetabase (metabase) [MANIFEST.json]
  • Release tagv0.65.4.4-CE-ubuntu24.04-r1 [MANIFEST.json]
  • Imagereadystack/metabase:v0.65.4.4-CE-ubuntu24.04-r1 [MANIFEST.json]
  • Image index digestsha256:12ecb0555d85fc7db294561bc7f42183bb321f532c6716538f6d0bad96404f08 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:c51073dd36b57c4c160de1f5b1e7a341ef2c2a2b7288375b38e8fe1c7542c465 [ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.tar.gz (bytes 1947823999) [MANIFEST.json]
  • Archive sha256 at publish08d2ed08224151bb445475c34e0d5b9cd78b8de3b2bc05f3aefd531f9a0230ad [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/metabase/metabase [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv0.65.4.4 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit953a6b0a28cfb7a3cad3332e20a4321f6b408357 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashb34a7f2f5421eba0c7a2dde6e20135bd89000d504229e93cd4442936718143d1 (files 19988) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:0feb5f5e8b5929bc6bf29fa705a9bff4ccecafc27ee3ee5f8bc017f69de191b7 [ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794639826 (utc 2026-11-14T07:03:46Z) [ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref eclipse-temurin:25-jdk-noble@sha256:589ff4cc3f71aab462e7048a47a0d10edf57fbccde3fceea2281e610bf5880b4 · platform digest sha256:51ae87bbb1949c1afdff51f6a3e6c5f283d84a4bd68512c9657fdc6605026a49
    • ref eclipse-temurin:25-jre-noble@sha256:79bcc6c8d3bc82f9b179ce8718877a6af82f2040ef4ab88a814fcb78f76b249a · platform digest sha256:5b5a79b85aeb03a859d4b5196482a08d39ec2714102aecae2c66223323bdf2e5
    [ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.rebuild.json, engine]
  • Engine commit(s)
    • commit 7e5e859529535df572f4abd7beb5734967bb5f63 · dirty yes · first drive 4644
    • commit 47cee4d1dd17eed9e34570de9a06cc0e31903cf0 · dirty yes · first drive 4660
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain1095 (created 2026-11-14T07:06:05Z · trigger customer_request · upstream version v0.65.4.4) [chains, chains #1095]
  • Requestbuild request #773 (rebuild) (requested at 2026-11-14T07:03:54Z · requested by kitforge-agent · version v0.65.4.4) [build_requests, build_requests #773]
  • Reasonretarget to v0.65.4.4: a newer upstream release (rule 1) [build_requests, build_requests #773 request_reason]
  • Supersedesreadystack/metabase:v0.65.4.2-CE-ubuntu24.04-r1 (chain 1068) [chains, chains #1068]

The path through the harness

Fully recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 1095 release · ready_to_ship

Created 2026-11-14T07:06:05Z, upstream v0.65.4.4, build request 773 [chains, chains #1095]

DriveStartedMinutesBuild hostHow it stopped
46442026-11-14T07:07:26Z125.1build host 4 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4644]
46602026-11-14T09:39:43Z—build host 4 publish-held not recorded [drive_runs, drive_runs #4660]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-14T07:07:37Z2026-11-14T07:07:37Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json e7d01db44bc8…
acquire 2026-11-14T07:07:55Z2026-11-14T07:07:58Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 43692de04d6d…
license_file da3c9b0046ee…
custody_inputs 7e4a7bb4fd58…
source_tree_hash f2f7dd6a73a5…
source_file_manifest 52423d110e54…
plan 2026-11-14T07:08:36Z2026-11-14T07:08:37Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report eff924da4976…
input_pin_plan f8c3545593c4…
toolchain_lock d731ece77687…
assemble_kit 2026-11-14T07:47:23Z2026-11-14T07:47:24Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 3758eb9fe590…
build_recipe b87a04de8fb1…
system_pinning 6b61cd5b39e9…
build_offline_sh 6ab4f08a6ec7…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 75d7f054f6b1…
verify_offline_sh 3e8184ea230c…
base_image_digests a2deeab8bd02…
dockerfile_offline 3758eb9fe590…
first_build_digest 809263fbdb67…
remediate 2026-11-14T07:48:00Z2026-11-14T07:48:01Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log c7210a49f5f9…
security_report 375a7bfe497f…
build_kit 2026-11-14T08:22:25Z2026-11-14T08:22:26Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp c3125cb0a01e…
locked_digest 678a15229b76…
freeze_manifest 161a74d798a6…
offline_rebuild_transcript f3c6472a146a…
verdict 2026-11-14T08:26:16Z2026-11-14T08:26:16Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 04db8d62b0a5…
publish_image 2026-11-14T08:27:55Z2026-11-14T08:27:56Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme b1cbc6e2a92b…
promotion_record aec8bd632a2f…
boot_instance 2026-11-14T08:28:54Z2026-11-14T08:28:57Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 7003192990cc…
sbom 2026-11-14T08:30:20Z2026-11-14T08:30:21Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 42798ed734df…
sbom_json 4549dee9702a…
schema_discovery 2026-11-14T08:30:24Z2026-11-14T08:30:25Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 5ef5a2f9f658…
dependency_tree 0d0759b74ecc…
table_classification f67ed90c662a…
admin_handbook 2026-11-14T08:30:32Z2026-11-14T08:30:33Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 20c181df09f3…
admin_handbook bd8af58f3e9b…
db_handbook 2026-11-14T08:30:42Z2026-11-14T08:30:43Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 9302f3f9a110…
seed_isolation 077c6d2dadf1…
seed_data 2026-11-14T08:30:50Z2026-11-14T08:30:51Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 6699e71c9e1d…
seed_cases_json 6d25746adabd…
seed_validate 2026-11-14T08:30:53Z2026-11-14T08:30:54Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 1809c2b412da…
usecase_validate 2026-11-14T08:31:15Z2026-11-14T08:31:16Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests 43a5cfb7c20e…
test_results 7eabbd091c89…
usecase_contract c9f280d70f29…
finalize_docs 2026-11-14T08:31:21Z2026-11-14T08:31:22Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 2f7ee56c5b83…
release_notes 03d3bfba5755…
api_integration_guide f5b7b33baf9f…
package_archive invalidated 2026-11-14T09:39:18Z 2026-11-14T09:12:26Z2026-11-14T09:12:31Z1
37 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 unpack_files
  • G8 scout_grade_a
  • G8 script_copies
  • G8 upgrade_check
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar d82d9b64dd6c…
checksums 375d3e313a58…
verify_md b20976a7e62f…
rebuild_md 6eadf5b43b54…
manifest_txt a044a0880ae0…
actions_jsonl b67cd0e999cf…
provenance_md abd1275da922…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 3c65074e272d…

[stage_runs]

Rewinds

  • 2026-11-14T09:39:18Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #37061]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-14T09:12:31Z.

13 calls over 5 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 010920 —
remediate2001 013541 L-A08, L-038, L-036, L-034, L-032
admin_handbook4001 029776 —
db_handbook4001 031373 —
usecase_validate1001 01726 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.29 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-14T09:14:58Z 000 clean to publish [held_rounds, held_rounds #1910] $0.29 3 rounds, $40.00 d82d9b64dd6c…

Defects

Fully recorded
  • Ledger entries1 [defects, defects where product_slug=metabase and this tag or chain]
  • Disclosed in the archive1 [docs/defects/defects.json, entries]

1 ledger entry: by severity low 1; by status wont-fix-by-design 1.

DefectSeverityStatusFound byFixed in
RSD-metabase-ebf046cf8b
Enterprise / non-open-source components are removed from the source before the build: enterprise, LICENSE-MCL.txt [defects, defects #288940]		lowwont-fix-by-designbuild strategy record—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:c51073dd36b57c4c160de1f5b1e7a341ef2c2a2b7288375b38e8fe1c7542c465 · published digest sha256:c51073dd36b57c4c160de1f5b1e7a341ef2c2a2b7288375b38e8fe1c7542c465 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 1005) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-14T09:40:22Z · failing Docker Scout counts 109 packages with copyleft licences (GPL, LGPL, MPL), 107 of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-14T09:39:57Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3875294500 · transparency-log entry · integrated 2026-11-14T09:59:33Z) [ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:12ecb0555d85fc7db294561bc7f42183bb321f532c6716538f6d0bad96404f08 · state attached · log index 3875307948 · transparency-log entry
    • kind sbom · digest sha256:12ecb0555d85fc7db294561bc7f42183bb321f532c6716538f6d0bad96404f08 · state attached · log index 3875309665 · transparency-log entry
    • kind vsa · digest sha256:12ecb0555d85fc7db294561bc7f42183bb321f532c6716538f6d0bad96404f08 · state attached · log index 3875314998 · transparency-log entry
    • kind provenance · digest sha256:c51073dd36b57c4c160de1f5b1e7a341ef2c2a2b7288375b38e8fe1c7542c465 · state attached · log index 3875318096 · transparency-log entry
    • kind sbom · digest sha256:c51073dd36b57c4c160de1f5b1e7a341ef2c2a2b7288375b38e8fe1c7542c465 · state attached · log index 3875321597 · transparency-log entry
    • kind vsa · digest sha256:c51073dd36b57c4c160de1f5b1e7a341ef2c2a2b7288375b38e8fe1c7542c465 · state attached · log index 3875324804 · transparency-log entry
    (at 2026-11-14T09:59:34Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/metabase/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-14T09:15:09Z on build host 4 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:c51073dd36b57c4c160de1f5b1e7a341ef2c2a2b7288375b38e8fe1c7542c465 [clean-room rebuild ledger, runs[853]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-14T08:27:56Z [stage_runs, stage_runs chain 1095 stage publish_image]
  • Archive manifests written2026-11-14T09:50:19Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 808 · probed 2026-11-14T08:05:26Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-14T10:04:50Z generated: by KitForge release/build_trail.py · generator commit 47cee4d1dd17eed9e34570de9a06cc0e31903cf0
  • 2026-11-14T10:09:23Z publication: promoted at 2026-11-14T10:05:57Z · promoted digest sha256:12ecb0555d85fc7db294561bc7f42183bb321f532c6716538f6d0bad96404f08 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 566 · checklist status complete · checklist at 2026-11-14T10:09:23Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/metabase/v0.65.4.4-CE-ubuntu24.04-r1/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/metabase/v0.65.4.4-CE-ubuntu24.04-r1/), as staged for publishing—
ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.rebuild.jsonbeside the archive (prodasset /data/production/metabase/v0.65.4.4-CE-ubuntu24.04-r1/), as staged for publishing—
ReadyStack-metabase-v0.65.4.4-CE-ubuntu24.04-r1.rebuild.json.sigstorebeside the archive (prodasset /data/production/metabase/v0.65.4.4-CE-ubuntu24.04-r1/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/metabase/v0.65.4.4-CE-ubuntu24.04-r1/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)773
chainssadb, ReadyStack's engine database (not published)1095
defectssadb, ReadyStack's engine database (not published)metabase v0.65.4.4-CE-ubuntu24.04-r1
drive_runssadb, ReadyStack's engine database (not published)chain 1095
held_roundssadb, ReadyStack's engine database (not published)chain 1095
lesson_recallssadb, ReadyStack's engine database (not published)chain 1095
micro_step_runssadb, ReadyStack's engine database (not published)chain 1095
release_imagessadb, ReadyStack's engine database (not published)metabase v0.65.4.4-CE-ubuntu24.04-r1
stage_eventssadb, ReadyStack's engine database (not published)chain 1095
stage_runssadb, ReadyStack's engine database (not published)chain 1095
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—