Mimir 3.2.4-CE-ubuntu24.04-r2 build trail

How ReadyStack built readystack/mimir:3.2.4-CE-ubuntu24.04-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/mimir:3.2.4-CE-ubuntu24.04-r2
  • Index digestsha256:9126a23a1555c034ad7f7b49e51e75782924bf8e7266edf24a5972440fe68070
  • linux/amd64 digestsha256:15b9b2af9b5fcb7c8d3d42df9bca30053e9843326e2f6013100cc1d949c6184b
  • ArchiveReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.tar.gz
  • Archive SHA-256 nowb340e958f90d92b6368b85461f3912b51d4e5e756971ff4fb9b687031d8eb773
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-09T19:46:39Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.trail.json.sigstore ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.trail.json
ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.trail.jsonReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.trail.json.sigstoreReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.trail.mdMimir product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductMimir (mimir) [MANIFEST.json]
  • Release tag3.2.4-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Imagereadystack/mimir:3.2.4-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Image index digestsha256:9126a23a1555c034ad7f7b49e51e75782924bf8e7266edf24a5972440fe68070 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:15b9b2af9b5fcb7c8d3d42df9bca30053e9843326e2f6013100cc1d949c6184b [ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.tar.gz (bytes 522979837) [MANIFEST.json]
  • Archive sha256 at publishb340e958f90d92b6368b85461f3912b51d4e5e756971ff4fb9b687031d8eb773 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/grafana/mimir [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refmimir-3.2.4 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit4380c3492730d7fca3bc90e292aefe7fb6e8c42e [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashc72aaf5b55bf2d3c82728908b33d3d70148399c3571b41d10a10673e456afe82 (files 15473) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:dde5835d1879eda4488b0ef4ba446114eec2345e7cfacd6be96947c1e3ab1acf [ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1793383897 (utc 2026-10-30T18:11:37Z) [ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af · platform digest sha256:88750ccdd0f2a77fcc00a14b1a48d6409bd8ddb5d7c2dd6ec0b4a2e916daf9d9
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.rebuild.json, engine]
  • Engine commit(s)
    • commit 33f90e4df8880eb3af828fc61ea626b22c124785 · dirty yes · first drive 4050
    • commit 12b2b288aa48f48d3d1572934777edf0602849d6 · dirty yes · first drive 4083
    • commit 4e069b7fdf7791b93f45d55244181834e57cd2b8 · dirty yes · first drive 4096
    • commit 6c084534f784f7171ae351892e74c39b28d639ce · dirty yes · first drive 4105
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain929 (created 2026-11-09T15:07:08Z · trigger customer_request · upstream version 3.2.4) [chains, chains #929]
  • Requestbuild request #604 (rebuild) (requested at 2026-11-09T07:47:29Z · requested by kitforge-agent · version 3.2.4) [build_requests, build_requests #604]
  • Reasonrevision 3.2.4-CE-ubuntu24.04-r2: same upstream version rebuilt on a chiselled Ubuntu 24.04 runtime (retarget.py --rev-bump; PR #292) [build_requests, build_requests #604 request_reason]
  • Supersedesreadystack/mimir:3.2.4-CE-ubuntu24.04-r1 (chain 901) [chains, chains #901]

The path through the harness

Fully recorded

1 chain · 4 drives · 18 stages · 3 rewinds

Chain 929 release · ready_to_ship

Created 2026-11-09T15:07:08Z, upstream 3.2.4, build request 604 [chains, chains #929]

DriveStartedMinutesBuild hostHow it stopped
40502026-11-09T15:07:37Z41.1build host 1 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4050]
40832026-11-09T17:58:50Z4.3build host 1 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4083]
40962026-11-09T18:51:34Z4.6build host 1 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4096]
41052026-11-09T19:40:47Z—build host 1 publish-held not recorded [drive_runs, drive_runs #4105]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-09T15:07:50Z2026-11-09T15:07:51Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 0a811cb266c8…
acquire 2026-11-09T15:08:03Z2026-11-09T15:08:05Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree b84f43ab7890…
license_file 0d96a4ff68ad…
custody_inputs 936c6553a481…
source_tree_hash e4524a3cdf70…
source_file_manifest 2220f1adb678…
plan 2026-11-09T15:08:45Z2026-11-09T15:08:46Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 6233a042fc43…
input_pin_plan b275a94c7761…
toolchain_lock 295c238c99ae…
assemble_kit 2026-11-09T15:15:17Z2026-11-09T15:15:18Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile c169573712f2…
build_recipe d1c538c60284…
system_pinning aa8db05a9a8a…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health ab4d30e1c3be…
verify_offline_sh 3e8184ea230c…
base_image_digests bb209b8f9508…
dockerfile_offline c169573712f2…
first_build_digest 05d1fb918e16…
remediate 2026-11-09T15:16:00Z2026-11-09T15:16:01Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 11ea30bd6a54…
security_report 6e3b9f387974…
build_kit 2026-11-09T15:25:02Z2026-11-09T15:25:03Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp c2e881fe5436…
locked_digest 7b85fa8543e3…
freeze_manifest c0a364eb2b3e…
offline_rebuild_transcript c2f55f25499e…
verdict 2026-11-09T15:25:51Z2026-11-09T15:25:52Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 0d3036594a41…
publish_image 2026-11-09T15:26:28Z2026-11-09T15:26:29Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 28bf828d3ee5…
promotion_record 01b9576c43fe…
boot_instance 2026-11-09T15:27:09Z2026-11-09T15:27:15Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle ffc9e6d56cd6…
sbom 2026-11-09T15:27:27Z2026-11-09T15:27:27Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md f74e977b2ae0…
sbom_json b5f183802706…
schema_discovery 2026-11-09T15:27:30Z2026-11-09T15:27:31Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash b2fc0b9b2436…
dependency_tree 203eec390031…
table_classification 2b29683bf6a8…
admin_handbook 2026-11-09T15:33:42Z2026-11-09T15:33:43Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 4b151a0aaae6…
admin_handbook 66637fc7f015…
db_handbook 2026-11-09T15:38:05Z2026-11-09T15:38:06Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 5e5e8adb15bd…
seed_isolation 7421ba774de0…
seed_data 2026-11-09T15:38:22Z2026-11-09T15:38:23Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 1932e3eae702…
seed_cases_json 2063d782286d…
seed_validate 2026-11-09T15:38:27Z2026-11-09T15:38:28Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract e889f80a0832…
usecase_validate 2026-11-09T15:38:49Z2026-11-09T15:38:50Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests cb48ae0da085…
test_results fbddc6424af2…
usecase_contract 1197007c6292…
finalize_docs 2026-11-09T15:38:56Z2026-11-09T15:38:57Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json afc6ffa3bb03…
release_notes b3d457a86d85…
api_integration_guide 2618a88b86a6…
package_archive invalidated 2026-11-09T19:40:22Z 2026-11-09T15:48:43Z2026-11-09T18:56:12Z3
35 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 9cf12803da8a…
checksums b5be1ae383f7…
verify_md f843777dc054…
rebuild_md d49c22a9e00e…
manifest_txt 18ef2c52829f…
actions_jsonl db173ae1d7f7…
provenance_md 53d470ad9604…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json aac8766eb097…

[stage_runs]

Rewinds

  • 2026-11-09T16:19:14Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #29355]
  • 2026-11-09T18:37:41Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #29580]
  • 2026-11-09T19:40:22Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #29706]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-09T18:56:12Z.

57 calls over 5 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 09009 —
remediate2001 011946 L-A08, L-038, L-036, L-034, L-032
admin_handbook301003 1108834 —
db_handbook22203 077530 —
usecase_validate1001 01872 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

3 rounds, 3 counted, $3.49 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-09T15:50:00Z 028 findings to repackage [held_rounds, held_rounds #1646] $1.25 3 rounds, $40.00 3bf31a457b5f…
22026-11-09T18:03:38Z 039 findings to repackage [held_rounds, held_rounds #1658] $1.03 3 rounds, $40.00 ee6b7cbc1538…
32026-11-09T18:56:40Z 003 clean to publish [held_rounds, held_rounds #1663] $1.22 3 rounds, $40.00 9cf12803da8a…

Defects

Fully recorded
  • Ledger entries25 [defects, defects where product_slug=mimir and this tag or chain]
  • Disclosed in the archive25 [docs/defects/defects.json, entries]

25 ledger entries: by severity high 5, low 20; by status fixed-before-release 25.

DefectSeverityStatusFound byFixed in
RSD-mimir-c9b3721b3f
Database handbook: Started the image (-target=all, shipped config): GET /services lists `ruler Running`, /config has a `ruler:` and `ruler_storage` (filesystem /var/mimir/rules) section. [defects, defects #218226]		highfixed-before-releaseheld review (review model)—
RSD-mimir-3a43420b98
Database handbook: Sent a valid OTLP JSON payload to POST /api/v1/push on the running image: HTTP 400 'decompress snappy: snappy: corrupt input'; the same payload to POST /otlp/v1/metrics returned 200 and the metric… [defects, defects #218227]		highfixed-before-releaseheld review (review model)—
RSD-mimir-7c118f412b
Database handbook: Shipped config (multitenancy_enabled: false): GET /api/v1/user_stats -> 200 {"ingestionRate":0,"numSeries":1,...}. [defects, defects #218228]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-533c920e18
Database handbook: /ready returns 'Ingester not ready: waiting for 15s after being ready' (non-200) for the first seconds after start (observed on restored container); a liveness probe on it would restart the pod… [defects, defects #218229]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-49b4e9471c
Database handbook: The documented run command has no config mount; IMAGE shipped file kit/mimir-config.yaml is baked in (docs/docker/Dockerfile COPY); DB_HANDBOOK.md:141 says 'The image ships with a built-in… [defects, defects #218230]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-e8374ea2d5
Database handbook: GET /config on the running image: compactor.sharding_ring auto_forget_unhealthy_periods: 10, heartbeat_timeout: 1m0s; store_gateway.sharding_ring auto_forget_enabled: true,… [defects, defects #218231]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-fd0122fd5c
Database handbook: The image has no editor (IMAGE_BINARIES.txt: only sh, cat, tar ... [defects, defects #218232]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-3a7be6a661
Admin handbook: IMAGE_BINARIES.txt lists sh and dash; docker exec jt-ha929-mimir sh -c 'readlink -f /bin/sh' -> /usr/bin/dash. [defects, defects #218233]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-455a0ea8d2
Admin handbook: GET /config on the running image: blocks_storage.tsdb.block_ranges_period: [2h0m0s], ship_interval: 1m0s, head_compaction_interval: 1m0s. [defects, defects #218234]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-dabc2c1952
Admin handbook: GET /config: memberlist.bind_addr: [] and bind_port: 7946 (the shipped file has no memberlist block); /proc/net/tcp6 in the container shows 7946 (0x1F0A) listening on ::, not 127.0.0.1. [defects, defects #218235]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-bf06093fc6
Database handbook: Documented minimal configuration starts healthy but silently cannot ingest or query. [defects, defects #221213]		highfixed-before-releaseheld review (review model)—
RSD-mimir-c8fd16f413
Database handbook: Same one-line-config claim as line 770: valid and healthy, but no write or query works. [defects, defects #221214]		highfixed-before-releaseheld review (review model)—
RSD-mimir-497d2ad1f1
Database handbook: The documented 'point Prometheus at Mimir for rule evaluation' procedure (remote_write + Grafana datasource) does not make Prometheus evaluate rules against Mimir or restore rule history from it;… [defects, defects #221215]		highfixed-before-releaseheld review (review model)—
RSD-mimir-9fc368ab24
Database handbook: Presents Prometheus rule queries against Mimir as the normal flow of the documented remote_write setup. [defects, defects #221216]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-0536433348
Database handbook: Start-up readiness window not documented; 'once it starts' is false for the first ~20 s. [defects, defects #221217]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-e464ebf5de
Database handbook: 'Immediately' contradicts the observed ~20 s 503 window; the Verify Health curl -fsS fails if run at once. [defects, defects #221218]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-f18d101f65
Database handbook: /var/mimir/tsdb/ exists on a fresh volume before any write. [defects, defects #221219]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-be6f1e97b8
Database handbook: Same as line 916: tsdb/ itself exists before any write. [defects, defects #221220]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-6539404d5b
Database handbook: Claims the shipped file sets join_members, and gives a cluster procedure that omits publishing 7946 and changing instance_addr (the Admin handbook line 561 says both are required) - cross-section… [defects, defects #221221]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-a3a71228c1
Admin handbook: The shipped file does not set these keys; they are Mimir defaults. [defects, defects #221222]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-d17326b34e
Admin handbook: Omits the port publish and instance_addr change that the Clustering section (line 561) says are required. [defects, defects #221223]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-1bc5aae09b
Database handbook: Contradictory wording: a POST sent to a route listed as GET. [defects, defects #221224]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-8bc6edf8a1
Admin handbook: The first block is cut after more than 3 h of data, not about 2 h: a customer looking in data/tsdb/ after 2 h finds it empty. [defects, defects #223012]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-8d1985edfa
Database handbook: The Verify Health step (the one flagged in round 2 for 'Immediately') still gives a command that fails if run right after docker run; the 503 window is only documented at lines 137 and 396. [defects, defects #223013]		lowfixed-before-releaseheld review (review model)—
RSD-mimir-157c6a0e3c
Admin handbook: Prometheus has no way to forward queries to Mimir with the documented remote_write setup; this contradicts DB_HANDBOOK.md:902-904 (remote_write does not change where Prometheus evaluates or queries)… [defects, defects #223014]		lowfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:15b9b2af9b5fcb7c8d3d42df9bca30053e9843326e2f6013100cc1d949c6184b · published digest sha256:15b9b2af9b5fcb7c8d3d42df9bca30053e9843326e2f6013100cc1d949c6184b · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 262) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-09T19:41:13Z · failing Docker Scout counts 10 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-09T19:41:01Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3769062282 · transparency-log entry · integrated 2026-11-09T19:45:16Z) [ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:9126a23a1555c034ad7f7b49e51e75782924bf8e7266edf24a5972440fe68070 · state attached · log index 3769065449 · transparency-log entry
    • kind sbom · digest sha256:9126a23a1555c034ad7f7b49e51e75782924bf8e7266edf24a5972440fe68070 · state attached · log index 3769067340 · transparency-log entry
    • kind vsa · digest sha256:9126a23a1555c034ad7f7b49e51e75782924bf8e7266edf24a5972440fe68070 · state attached · log index 3769070401 · transparency-log entry
    • kind provenance · digest sha256:15b9b2af9b5fcb7c8d3d42df9bca30053e9843326e2f6013100cc1d949c6184b · state attached · log index 3769073449 · transparency-log entry
    • kind sbom · digest sha256:15b9b2af9b5fcb7c8d3d42df9bca30053e9843326e2f6013100cc1d949c6184b · state attached · log index 3769075955 · transparency-log entry
    • kind vsa · digest sha256:15b9b2af9b5fcb7c8d3d42df9bca30053e9843326e2f6013100cc1d949c6184b · state attached · log index 3769078898 · transparency-log entry
    (at 2026-11-09T19:45:17Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/mimir/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-09T15:50:05Z on build host 5 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:15b9b2af9b5fcb7c8d3d42df9bca30053e9843326e2f6013100cc1d949c6184b [clean-room rebuild ledger, runs[708]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-09T15:26:29Z [stage_runs, stage_runs chain 929 stage publish_image]
  • Archive manifests written2026-11-09T19:43:31Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 62 · probed 2026-11-09T15:20:22Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-09T19:46:39Z generated: by KitForge release/build_trail.py · generator commit 6c084534f784f7171ae351892e74c39b28d639ce
  • 2026-11-09T19:48:04Z publication: promoted at 2026-11-09T19:47:10Z · promoted digest sha256:9126a23a1555c034ad7f7b49e51e75782924bf8e7266edf24a5972440fe68070 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 434 · checklist status complete · checklist at 2026-11-09T19:48:04Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/mimir/3.2.4-CE-ubuntu24.04-r2/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/mimir/3.2.4-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.rebuild.jsonbeside the archive (prodasset /data/production/mimir/3.2.4-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-mimir-3.2.4-CE-ubuntu24.04-r2.rebuild.json.sigstorebeside the archive (prodasset /data/production/mimir/3.2.4-CE-ubuntu24.04-r2/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/mimir/3.2.4-CE-ubuntu24.04-r2/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)604
chainssadb, ReadyStack's engine database (not published)929
defectssadb, ReadyStack's engine database (not published)mimir 3.2.4-CE-ubuntu24.04-r2
drive_runssadb, ReadyStack's engine database (not published)chain 929
held_roundssadb, ReadyStack's engine database (not published)chain 929
lesson_recallssadb, ReadyStack's engine database (not published)chain 929
micro_step_runssadb, ReadyStack's engine database (not published)chain 929
release_imagessadb, ReadyStack's engine database (not published)mimir 3.2.4-CE-ubuntu24.04-r2
stage_eventssadb, ReadyStack's engine database (not published)chain 929
stage_runssadb, ReadyStack's engine database (not published)chain 929
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—