Moodle v5.3.0-CE-ubuntu24.04-r8 build trail
How ReadyStack built readystack/moodle:v5.3.0-CE-ubuntu24.04-r8 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.
This trail
As JSON- Image
readystack/moodle:v5.3.0-CE-ubuntu24.04-r8 - Index digestsha256:8aaf006886286b67f911391320176d3b297a1c3676067a25c3d5b81c3931a278
- linux/amd64 digestsha256:242772820219e4d15f1b776a9b42b5c3912bee29f94ab5903d6ccf0f420b07c2
- Archive
ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.tar.gz - Archive SHA-256 nowe688ecaf8b6eb8a6c5596ac9f851d24b88e1caabf84bb3d46e8c70a089ef0c04
- Pins record
docs/PINS.md,docs/provenance/PINS.jsonin the archive (since generated) - Generated2026-11-13T17:56:06Z by KitForge release/build_trail.py
- Sections9 sections, 8 fully recorded; 1 item not recorded
Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:
cosign verify-blob --key https://readystack.dev/keys/cosign.pub \ --bundle ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.trail.json.sigstore ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.trail.json
IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level
Identity
Fully recorded- ProductMoodle (moodle) [MANIFEST.json]
- Release tagv5.3.0-CE-ubuntu24.04-r8 [MANIFEST.json]
- Imagereadystack/moodle:v5.3.0-CE-ubuntu24.04-r8 [MANIFEST.json]
- Image index digestsha256:8aaf006886286b67f911391320176d3b297a1c3676067a25c3d5b81c3931a278 [docs/provenance/LOCKED_DIGEST.txt]
- linux/amd64 image digestsha256:242772820219e4d15f1b776a9b42b5c3912bee29f94ab5903d6ccf0f420b07c2 [ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.rebuild.json, subject.image_manifest_digest]
- ArchiveReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.tar.gz (bytes 389784621) [MANIFEST.json]
- Archive sha256 at publishe688ecaf8b6eb8a6c5596ac9f851d24b88e1caabf84bb3d46e8c70a089ef0c04 [MANIFEST.json, tarball_sha256]
- Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
- Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
- Upstream repositoryhttps://github.com/moodle/moodle [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream refv5.3.0 [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream commit42622298fe06f9626d988d60b2bf589bd8f850e8 [docs/provenance/SOURCE_TREE_HASH.json]
- Source tree hash096a48537238e07dd94531ff70477bcaca97e3f58f53ae8baf8ad50c8a5c708f (files 67589) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
- Kit tree hashsha256:38f6ac2c89ea9afe3d46cf41d35fe5e69609d57e52800991a8b7ed2f6b5aaa87 [ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.rebuild.json, inputs.tree_hash]
- SOURCE_DATE_EPOCH1794578579 (utc 2026-11-13T14:02:59Z) [ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.rebuild.json, inputs.source_date_epoch]
- Base images
- ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
- BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.rebuild.json, engine]
- Engine commit(s)
- commit 073535c62a45bea8f3f14b90d7062837d7d2da35 · dirty yes · first drive 4618
- commit 7fdf9096d56f34040c780be3745f50315b7188f1 · dirty yes · first drive 4629
Why this release exists
Fully recorded- Chain1090 (created 2026-11-13T16:21:09Z · trigger customer_request · upstream version v5.3.0) [chains, chains #1090]
- Requestbuild request #765 (rebuild) (requested at 2026-11-13T14:03:01Z · requested by kitforge-agent · version v5.3.0) [build_requests, build_requests #765]
- Reasonrerelease agenda REVISION -> v5.3.0-CE-ubuntu24.04-r8 (decay loop, IMP-08) [build_requests, build_requests #765 request_reason]
- Supersedesreadystack/moodle:v5.3.0-CE-ubuntu24.04-r7 (chain 1036) [chains, chains #1036]
The path through the harness
Fully recorded1 chain · 3 drives · 18 stages · 2 rewinds
Chain 1090 release · ready_to_ship
Created 2026-11-13T16:21:09Z, upstream v5.3.0, build request 765 [chains, chains #1090]
| Drive | Started | Minutes | Build host | How it stopped |
|---|---|---|---|---|
| 4618 | 2026-11-13T16:22:52Z | 40.8 | build host 4 withhold-publish | ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4618] |
| 4629 | 2026-11-13T17:27:23Z | 11.4 | build host 4 withhold-publish | ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4629] |
| 4633 | 2026-11-13T17:42:23Z | — | build host 4 publish-held | not recorded [drive_runs, drive_runs #4633] |
Stages, in order
| Stage | First start | Passed | Attempts | Gate checks passed | Artifacts (SHA-256) |
|---|---|---|---|---|---|
intake |
2026-11-13T16:23:02Z | 2026-11-13T16:23:03Z | 1 | 4
|
order_json 475669673a4f… |
acquire |
2026-11-13T16:23:23Z | 2026-11-13T16:23:28Z | 1 | 12
|
source_tree 8fad032e5855…license_file 8ceb4b9ee5ad…custody_inputs a40e71e7c531…source_tree_hash 4f285eb6700d…source_file_manifest 85454735b647… |
plan |
2026-11-13T16:24:00Z | 2026-11-13T16:24:01Z | 1 | 10
|
recon_report 691e7b1f2f5e…input_pin_plan 0c39a2018551…toolchain_lock a478952810f7… |
assemble_kit |
2026-11-13T16:32:55Z | 2026-11-13T16:32:56Z | 1 | 27
|
dockerfile e6ff7e395803…build_recipe 243b3f8f1224…system_pinning 44667b599064…build_offline_sh 6ab4f08a6ec7…generate_sbom_sh ce0f1e6f1e70…first_boot_health 4fdc59e95f77…verify_offline_sh 3e8184ea230c…base_image_digests 633f640a38b5…dockerfile_offline e6ff7e395803…first_build_digest cfe2eb6195d1… |
remediate |
2026-11-13T16:33:26Z | 2026-11-13T16:33:27Z | 1 | 8
|
vendored_apt e3b0c44298fc…remediation_log 4aacaec0c575…security_report 79510406f56a… |
build_kit |
2026-11-13T16:40:27Z | 2026-11-13T16:40:28Z | 1 | 9
|
cosign_stamp bb334414159a…locked_digest 046c418e36b5…freeze_manifest bcc27c29f5cf…offline_rebuild_transcript 4a134e3d3dda… |
verdict |
2026-11-13T16:42:22Z | 2026-11-13T16:42:23Z | 1 | 8
|
scout_verdict 5c0c3ab85f9d… |
publish_image |
2026-11-13T16:43:20Z | 2026-11-13T16:43:21Z | 1 | 7
|
hub_readme 2160dbcf8464…promotion_record d5c91198696e… |
boot_instance |
2026-11-13T16:46:19Z | 2026-11-13T16:46:22Z | 2 | 3
|
instance_handle 6f941a755056… |
sbom |
2026-11-13T16:46:46Z | 2026-11-13T16:46:47Z | 1 | 5
|
sbom_md c76dacefe59c…sbom_json f558c2255da9… |
schema_discovery |
2026-11-13T16:46:49Z | 2026-11-13T16:46:50Z | 1 | 7
|
schema_hash d240e6b200e9…dependency_tree cadfeba7041d…table_classification 6cd367dd6535… |
admin_handbook |
2026-11-13T16:46:57Z | 2026-11-13T16:46:58Z | 1 | 7
|
api_map 7fe8664a8f6c…admin_handbook bb2257d7f116… |
db_handbook |
2026-11-13T16:47:08Z | 2026-11-13T16:47:09Z | 1 | 8
|
db_handbook 294eaa0120f7…seed_isolation e6116c678b9c… |
seed_data |
2026-11-13T16:47:13Z | 2026-11-13T16:47:14Z | 1 | 6
|
seed_data_sql d62e7a0800a0…seed_cases_json 0d13fc7ea0c6… |
seed_validate |
2026-11-13T16:47:16Z | 2026-11-13T16:47:17Z | 1 | 3
|
seed_data_contract 68a6cba6ce41… |
usecase_validate |
2026-11-13T16:47:32Z | 2026-11-13T16:47:33Z | 1 | 10
|
failed_tests b2247b16f5f7…passed_tests aa4e65507c07…test_results 936034927619…usecase_contract 8d5e64040f4e… |
finalize_docs |
2026-11-13T16:47:39Z | 2026-11-13T16:47:40Z | 1 | 9
|
defects_json 6f6ac87f91f4…release_notes 084b50b8485b…api_integration_guide ec39cc32ba35… |
package_archive invalidated 2026-11-13T17:41:59Z |
2026-11-13T17:03:39Z | 2026-11-13T17:38:49Z | 2 | 37 (final gate PASS)
|
sale_tar c85a45e86417…checksums 5f243ac097f3…verify_md 0b8d15899580…rebuild_md 2a6009abbbd1…manifest_txt 01f74a6708a6…actions_jsonl d87179fdb177…provenance_md 3a52ff4bdda9…assetchain_log_md e9eccaec0c0f…assetchain_log_json c45bbefe8993… |
[stage_runs]
Rewinds
- 2026-11-13T17:24:49Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #36837] - 2026-11-13T17:41:59Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #36859]
Model work per stage
Fully recordedRole: writer model. Calls up to 2026-11-13T17:38:49Z.
5 calls over 3 stages
| Stage | Calls | Refused | Errors | Max attempt | Forced commits | Real tokens | Lesson rules shown |
|---|---|---|---|---|---|---|---|
plan | 2 | 0 | 0 | 1 | 0 | 9341 | L-A183, L-A15 |
remediate | 2 | 0 | 0 | 1 | 0 | 10002 | L-A183, L-A15 |
usecase_validate | 1 | 0 | 0 | 1 | 0 | 1602 | L-A59 |
[micro_step_runs] [lesson_recalls]
Review
Fully recordedRole: review model.
2 rounds, 2 counted, $0.72 recorded cost
| Round | Started | Critical | Major | Minor | Verdict | Cost | Cap in force | Archive reviewed |
|---|---|---|---|---|---|---|---|---|
| 1 | 2026-11-13T17:04:39Z | 0 | 2 | 0 | findings to repackage [held_rounds, held_rounds #1903] | $0.45 | 3 rounds, $40.00 | 20701d8d9e94… |
| 2 | 2026-11-13T17:39:21Z | 0 | 0 | 0 | clean to publish [held_rounds, held_rounds #1904] | $0.27 | 3 rounds, $40.00 | c85a45e86417… |
Defects
Fully recorded- Ledger entries2 [defects, defects where product_slug=moodle and this tag or chain]
- Disclosed in the archive2 [docs/defects/defects.json, entries]
2 ledger entries: by severity high 2; by status fixed-before-release 2.
| Defect | Severity | Status | Found by | Fixed in |
|---|---|---|---|---|
RSD-moodle-4c0f9496d9Admin handbook: stale release tag r7 in a customer-facing sentence [defects, defects #287045] | high | fixed-before-release | held review (review model) | — |
RSD-moodle-81f202c56bAdmin handbook: stale release tag r7 in a customer-facing sentence [defects, defects #287046] | high | fixed-before-release | held review (review model) | — |
Verification
1 item not recorded- Reproduced before publishingyes (rebuilt digest sha256:242772820219e4d15f1b776a9b42b5c3912bee29f94ab5903d6ccf0f420b07c2 · published digest sha256:242772820219e4d15f1b776a9b42b5c3912bee29f94ab5903d6ccf0f420b07c2 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 150) [docs/provenance/REPRO_VERIFICATION.json, verified]
- Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
- Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-13T17:43:21Z · failing Docker Scout counts 134 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
- Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-13T17:42:34Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
- Image signature transparency-log entries
- log index 3858161857 · transparency-log entry
- log index 3858163364 · transparency-log entry
- rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3859281766 · transparency-log entry · integrated 2026-11-13T17:53:40Z) [ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
- Signed attestations
- kind provenance · digest sha256:8aaf006886286b67f911391320176d3b297a1c3676067a25c3d5b81c3931a278 · state attached · log index 3859287870 · transparency-log entry
- kind sbom · digest sha256:8aaf006886286b67f911391320176d3b297a1c3676067a25c3d5b81c3931a278 · state attached · log index 3859289104 · transparency-log entry
- kind vsa · digest sha256:8aaf006886286b67f911391320176d3b297a1c3676067a25c3d5b81c3931a278 · state attached · log index 3859291896 · transparency-log entry
- kind provenance · digest sha256:242772820219e4d15f1b776a9b42b5c3912bee29f94ab5903d6ccf0f420b07c2 · state attached · log index 3859294114 · transparency-log entry
- kind sbom · digest sha256:242772820219e4d15f1b776a9b42b5c3912bee29f94ab5903d6ccf0f420b07c2 · state attached · log index 3859297773 · transparency-log entry
- kind vsa · digest sha256:242772820219e4d15f1b776a9b42b5c3912bee29f94ab5903d6ccf0f420b07c2 · state attached · log index 3859301534 · transparency-log entry
- Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/moodle/recipe) [docs/provenance/PINS.json]
Offline clean-room rebuilds
- 2026-11-13T17:04:43Z on build host 4 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
rebuilt sha256:242772820219e4d15f1b776a9b42b5c3912bee29f94ab5903d6ccf0f420b07c2 [clean-room rebuild ledger, runs[848]]
- Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
Publication
Fully recorded 1 pending at generation- Image pushed (internal tag), publish_image passed2026-11-13T16:43:21Z [stage_runs, stage_runs chain 1090 stage publish_image]
- Archive manifests written2026-11-13T17:49:27Z [PUBLISH_MANIFEST.json, published_at]
- Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)
Packages and CPU level
Fully recorded- x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 1017 · probed 2026-11-13T16:37:40Z · source build_kit) [release_images, isa_level_hard]
History
2 events- 2026-11-13T17:56:06Z generated: by KitForge release/build_trail.py · generator commit 7fdf9096d56f34040c780be3745f50315b7188f1
- 2026-11-13T17:58:43Z publication: promoted at 2026-11-13T17:56:46Z · promoted digest sha256:8aaf006886286b67f911391320176d3b297a1c3676067a25c3d5b81c3931a278 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 561 · checklist status complete · checklist at 2026-11-13T17:58:43Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json
Records
25 records| Record | Where it is | Rows |
|---|---|---|
docs/defects/defects.json | inside the archive (ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.tar.gz) | — |
docs/provenance/IMAGE_EVIDENCE.json | inside the archive (ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.tar.gz) | — |
docs/provenance/LOCKED_DIGEST.txt | inside the archive (ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.tar.gz) | — |
docs/provenance/PINS.json | inside the archive (ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.tar.gz) | — |
docs/provenance/REPRO_VERIFICATION.json | inside the archive (ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.tar.gz) | — |
docs/provenance/SOURCE_TREE_HASH.json | inside the archive (ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.tar.gz) | — |
MANIFEST.json | beside the archive (prodasset /data/production/moodle/v5.3.0-CE-ubuntu24.04-r8/), as staged for publishing | — |
PUBLISH_MANIFEST.json | beside the archive (prodasset /data/production/moodle/v5.3.0-CE-ubuntu24.04-r8/), as staged for publishing | — |
ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.rebuild.json | beside the archive (prodasset /data/production/moodle/v5.3.0-CE-ubuntu24.04-r8/), as staged for publishing | — |
ReadyStack-moodle-v5.3.0-CE-ubuntu24.04-r8.rebuild.json.sigstore | beside the archive (prodasset /data/production/moodle/v5.3.0-CE-ubuntu24.04-r8/), as staged for publishing | — |
SCOUT_EVIDENCE.json | beside the archive (prodasset /data/production/moodle/v5.3.0-CE-ubuntu24.04-r8/), as staged for publishing | — |
clean-room rebuild ledger | the clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published) | — |
build_requests | sadb, ReadyStack's engine database (not published) | 765 |
chains | sadb, ReadyStack's engine database (not published) | 1090 |
defects | sadb, ReadyStack's engine database (not published) | moodle v5.3.0-CE-ubuntu24.04-r8 |
drive_runs | sadb, ReadyStack's engine database (not published) | chain 1090 |
held_rounds | sadb, ReadyStack's engine database (not published) | chain 1090 |
lesson_recalls | sadb, ReadyStack's engine database (not published) | chain 1090 |
micro_step_runs | sadb, ReadyStack's engine database (not published) | chain 1090 |
release_images | sadb, ReadyStack's engine database (not published) | moodle v5.3.0-CE-ubuntu24.04-r8 |
stage_events | sadb, ReadyStack's engine database (not published) | chain 1090 |
stage_runs | sadb, ReadyStack's engine database (not published) | chain 1090 |
attestations.json | the chain's workspace on the controller (not published) | — |
deliverables/provenance/PROMOTION_RECORD.json | the chain's workspace on the controller (not published) | — |
g8_result.json | the chain's workspace on the controller (not published) | — |