Nextcloud v35.0.2-CE-ubuntu24.04-r5 build trail

How ReadyStack built readystack/nextcloud:v35.0.2-CE-ubuntu24.04-r5 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/nextcloud:v35.0.2-CE-ubuntu24.04-r5
  • Index digestsha256:a0e2f5da84125a8cc7cb80b6490930c3dc81e4034f62acf00789fdd7a7809665
  • linux/amd64 digestsha256:bf3d8087c010f921590e4d64b759f426305442c39bbac1fe0114a5416441c67b
  • ArchiveReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.tar.gz
  • Archive SHA-256 now72f7264acba2b422b44fd5ac852c21632cd24dc4ad6ee87c33cab41e5d3d7ae5
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-08T19:21:51Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.trail.json.sigstore ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.trail.json
ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.trail.jsonReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.trail.json.sigstoreReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.trail.mdNextcloud product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductNextcloud (nextcloud) [MANIFEST.json]
  • Release tagv35.0.2-CE-ubuntu24.04-r5 [MANIFEST.json]
  • Imagereadystack/nextcloud:v35.0.2-CE-ubuntu24.04-r5 [MANIFEST.json]
  • Image index digestsha256:a0e2f5da84125a8cc7cb80b6490930c3dc81e4034f62acf00789fdd7a7809665 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:bf3d8087c010f921590e4d64b759f426305442c39bbac1fe0114a5416441c67b [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.tar.gz (bytes 387840343) [MANIFEST.json]
  • Archive sha256 at publish72f7264acba2b422b44fd5ac852c21632cd24dc4ad6ee87c33cab41e5d3d7ae5 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/nextcloud/server [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv35.0.2 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commitba900af933e61ffa005315b09d6454bfbbcbcc81 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashcd5c004d60b236dd749bb833dc69688660ebc5f6fa8ebb69d8ecb7f6ef29f75d (files 18838) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:a734628944cc3e46fa1de65ae6e2579d225f424d3930f6b2c4ca97d83129b0b7 [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1792051224 (utc 2026-10-15T08:00:24Z) [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.rebuild.json, engine]
  • Engine commit(s)
    • commit 0640ae3d5c24dd6ccf85da33ada7ba9659eea77c · dirty yes · first drive 3577
    • commit 1965bb7c468fd301b7164e27ef82448632bd34f4 · dirty yes · first drive 3642
    • commit 1b8dcc94a7e7ad41bd084637f76ac0c5650ae5e0 · dirty yes · first drive 3699
    • commit e53659b3a6a4c81fa7e71e0c7fb79fae091436b9 · dirty yes · first drive 3703
    • commit c4ae03ac898ae3caa1f2e0aef044119311e344df · dirty yes · first drive 3706
    • commit 33bf3ca4336111883d0625f93cc024535a90dca0 · dirty yes · first drive 3720
    • commit c9b2cfb702f16a4b1ed477ccfcb627952bad2a67 · dirty yes · first drive 3723
    • commit 9297e5f1902d782e43b6ebf8fe9b54eba0e82889 · dirty yes · first drive 3859
    • commit 0ce62a3a548f16cde73a6e8600cacfdd38930d4d · dirty yes · first drive 3868
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain847 (created 2026-11-07T05:13:24Z · trigger customer_request · upstream version v35.0.2) [chains, chains #847]
  • Requestbuild request #516 (rebuild) (requested at 2026-11-07T02:01:31Z · requested by kitforge-agent · version v35.0.2) [build_requests, build_requests #516]
  • Reasonrerelease agenda REVISION -> v35.0.2-CE-ubuntu24.04-r5 (decay loop, IMP-08) [build_requests, build_requests #516 request_reason]
  • Supersedesreadystack/nextcloud:v35.0.2-CE-ubuntu24.04-r4 (chain 734) [chains, chains #734]

The path through the harness

Fully recorded

1 chain · 9 drives · 18 stages · 3 rewinds

Chain 847 release · ready_to_ship

Created 2026-11-07T05:13:24Z, upstream v35.0.2, build request 516 [chains, chains #847]

DriveStartedMinutesBuild hostHow it stopped
35772026-11-07T05:13:53Z2.6build host 1 withhold-publish stage_failed at assemble_kit; first failed check exists:first_build_digest; 4 ticks [drive_runs, drive_runs #3577]
36422026-11-07T10:45:01Z1.5build host 1 withhold-publish stage_failed at assemble_kit; first failed check exists:first_build_digest; 1 tick [drive_runs, drive_runs #3642]
36992026-11-08T05:02:09Z1.4build host 1 withhold-publish stage_failed at assemble_kit; first failed check exists:first_build_digest; 1 tick [drive_runs, drive_runs #3699]
37032026-11-08T05:27:23Z1.5build host 1 withhold-publish stage_failed at assemble_kit; first failed check exists:first_build_digest; 1 tick [drive_runs, drive_runs #3703]
37062026-11-08T05:38:08Z1.4build host 1 withhold-publish repeat_gate_failure at assemble_kit; first failed check exists:first_build_digest; 1 tick [drive_runs, drive_runs #3706]
37202026-11-08T06:26:59Z1.6build host 1 withhold-publish repeat_gate_failure at assemble_kit; first failed check exists:first_build_digest; 1 tick [drive_runs, drive_runs #3720]
37232026-11-08T07:18:42Z27.9build host 1 withhold-publish ready_to_ship at package_archive; 16 ticks [drive_runs, drive_runs #3723]
38592026-11-08T18:25:29Z25.1build host 1 withhold-publish ready_to_ship at package_archive; 16 ticks [drive_runs, drive_runs #3859]
38682026-11-08T19:13:50Z—build host 1 publish-held not recorded [drive_runs, drive_runs #3868]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-07T05:14:03Z2026-11-07T05:14:04Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 9c62929c8900…
acquire 2026-11-07T05:14:25Z2026-11-07T05:14:28Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree b2d7253407e3…
license_file 57c8ff33c9c0…
custody_inputs e43e18a27635…
source_tree_hash ceedf3ace496…
source_file_manifest 44e9d19435d9…
plan 2026-11-07T05:15:16Z2026-11-07T05:15:17Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report bb83a73b2e1f…
input_pin_plan 86b04a9fb079…
toolchain_lock 7edc23943784…
assemble_kit 2026-11-07T05:16:31Z2026-11-08T18:30:23Z8
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 3872a7d26df8…
build_recipe 2123377485cb…
system_pinning eb2b3ee7bd69…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health a375b821ac47…
verify_offline_sh 3e8184ea230c…
base_image_digests 553ed440595d…
dockerfile_offline 3872a7d26df8…
first_build_digest f3068bbbd23e…
remediate 2026-11-08T07:24:30Z2026-11-08T18:30:27Z2
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log b8f85e8689d3…
security_report 503a8820fb0e…
build_kit 2026-11-08T07:31:04Z2026-11-08T18:36:39Z2
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp e632b6f6bbb1…
locked_digest 0404bff664bd…
freeze_manifest b6a177251a90…
offline_rebuild_transcript 1a74ab569db9…
verdict 2026-11-08T07:33:10Z2026-11-08T18:38:41Z2
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 39438ce17803…
publish_image 2026-11-08T07:34:16Z2026-11-08T18:39:45Z2
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 5dafd838e504…
promotion_record da3aeac8a6bf…
boot_instance 2026-11-08T07:34:27Z2026-11-08T18:40:00Z4
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 83d139275de5…
sbom 2026-11-08T07:34:54Z2026-11-08T18:40:23Z2
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 72e4370391bb…
sbom_json a226489a3aea…
schema_discovery 2026-11-08T07:34:58Z2026-11-08T18:40:26Z2
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 41ad6d816272…
dependency_tree 2d13bbe51c8a…
table_classification 648b97766162…
admin_handbook 2026-11-08T07:35:08Z2026-11-08T18:40:36Z2
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map fe9f8cb5c431…
admin_handbook 43a97d66e3ea…
db_handbook 2026-11-08T07:35:24Z2026-11-08T18:40:47Z2
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 525b8f781a0b…
seed_isolation e43445a59ebe…
seed_data 2026-11-08T07:35:33Z2026-11-08T18:40:53Z2
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql a9ebb00fd76d…
seed_cases_json ed877272e8f8…
seed_validate 2026-11-08T07:35:37Z2026-11-08T18:40:56Z2
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 9a98599be338…
usecase_validate 2026-11-08T07:35:59Z2026-11-08T18:41:08Z2
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests ffb31d2528f0…
test_results c83d901b6499…
usecase_contract cecd99dd44cd…
finalize_docs 2026-11-08T07:36:08Z2026-11-08T18:41:15Z2
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 8d7a764145eb…
release_notes cff67679456b…
api_integration_guide 65590993b3b7…
package_archive invalidated 2026-11-08T19:13:18Z 2026-11-08T07:46:36Z2026-11-08T18:50:34Z2
34 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar eb488303d00a…
checksums a2412acc54a9…
verify_md 7c1ae7c20c3c…
rebuild_md f90c6064564e…
manifest_txt cdaf601de824…
actions_jsonl 5b05618831f7…
provenance_md c5a4df09b1d7…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 47766390936c…

[stage_runs]

Rewinds

  • 2026-11-08T18:16:13Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive --allow-rebuild) [stage_events, stage_events #27018]
  • 2026-11-08T18:25:33Z: package_archive to assemble_kit on strategy_changed (strategy changed (6cbd76b1f241 -> aef3ad000d3c)) [stage_events, stage_events #27044]
  • 2026-11-08T19:13:18Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #27135]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-08T18:50:34Z.

5 calls over 3 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 011599 —
remediate2001 014055 L-A08, L-038, L-036, L-034, L-032
usecase_validate1001 01578 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

2 rounds, 2 counted, $0.86 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-08T07:47:09Z 010 blocked to blocked [held_rounds, held_rounds #1485] $0.48 3 rounds, $40.00 77290b35765c…
22026-11-08T18:51:10Z 000 clean to publish [held_rounds, held_rounds #1534] $0.38 3 rounds, $40.00 eb488303d00a…

Defects

Fully recorded
  • Ledger entries2 [defects, defects where product_slug=nextcloud and this tag or chain]
  • Disclosed in the archive2 [docs/defects/defects.json, entries]

2 ledger entries: by severity high 2; by status open 1, fixed-before-release 1.

DefectSeverityStatusFound byFixed in
RSD-nextcloud-3a5a95cee8
First visitor can claim the administrator account until setup is completed [defects, defects #172292]		highopenbuild strategy record—
RSD-nextcloud-f7c9d4b207
Docker Hub README: AGPL source-changes statement names symfony/http-foundation v7.4.19 while the image ships v7.4.23 [defects, defects #172629]		highfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:bf3d8087c010f921590e4d64b759f426305442c39bbac1fe0114a5416441c67b · published digest sha256:bf3d8087c010f921590e4d64b759f426305442c39bbac1fe0114a5416441c67b · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 148) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-08T19:14:39Z · failing Docker Scout counts 140 packages with copyleft licences (AGPL, GPL, LGPL, MPL), 135 of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). AGPL: icewind/searchdav, nextcloud/lognormalizer. · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-08T19:14:04Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3758769805 · transparency-log entry · integrated 2026-11-08T19:20:36Z) [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:a0e2f5da84125a8cc7cb80b6490930c3dc81e4034f62acf00789fdd7a7809665 · state attached · log index 3758770370 · transparency-log entry
    • kind sbom · digest sha256:a0e2f5da84125a8cc7cb80b6490930c3dc81e4034f62acf00789fdd7a7809665 · state attached · log index 3758770707 · transparency-log entry
    • kind vsa · digest sha256:a0e2f5da84125a8cc7cb80b6490930c3dc81e4034f62acf00789fdd7a7809665 · state attached · log index 3758770855 · transparency-log entry
    • kind provenance · digest sha256:bf3d8087c010f921590e4d64b759f426305442c39bbac1fe0114a5416441c67b · state attached · log index 3758771037 · transparency-log entry
    • kind sbom · digest sha256:bf3d8087c010f921590e4d64b759f426305442c39bbac1fe0114a5416441c67b · state attached · log index 3758771152 · transparency-log entry
    • kind vsa · digest sha256:bf3d8087c010f921590e4d64b759f426305442c39bbac1fe0114a5416441c67b · state attached · log index 3758771445 · transparency-log entry
    (at 2026-11-08T19:20:36Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/nextcloud/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-08T07:47:13Z on build host 1 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:810214b398c66683fe21617f9cfeaf8f85eb99a971046019786ef90164555abf [clean-room rebuild ledger, runs[634]]
  • 2026-11-08T18:51:15Z on build host 1 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:bf3d8087c010f921590e4d64b759f426305442c39bbac1fe0114a5416441c67b [clean-room rebuild ledger, runs[664]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-08T18:39:45Z [stage_runs, stage_runs chain 847 stage publish_image]
  • Archive manifests written2026-11-08T19:17:21Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 1018 · probed 2026-11-08T18:33:58Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-08T19:21:51Z generated: by KitForge release/build_trail.py · generator commit 0ce62a3a548f16cde73a6e8600cacfdd38930d4d
  • 2026-11-08T19:23:40Z publication: promoted at 2026-11-08T19:22:23Z · promoted digest sha256:a0e2f5da84125a8cc7cb80b6490930c3dc81e4034f62acf00789fdd7a7809665 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 387 · checklist status complete · checklist at 2026-11-08T19:23:40Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r5/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r5/), as staged for publishing—
ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.rebuild.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r5/), as staged for publishing—
ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r5.rebuild.json.sigstorebeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r5/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r5/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)516
chainssadb, ReadyStack's engine database (not published)847
defectssadb, ReadyStack's engine database (not published)nextcloud v35.0.2-CE-ubuntu24.04-r5
drive_runssadb, ReadyStack's engine database (not published)chain 847
held_roundssadb, ReadyStack's engine database (not published)chain 847
lesson_recallssadb, ReadyStack's engine database (not published)chain 847
micro_step_runssadb, ReadyStack's engine database (not published)chain 847
release_imagessadb, ReadyStack's engine database (not published)nextcloud v35.0.2-CE-ubuntu24.04-r5
stage_eventssadb, ReadyStack's engine database (not published)chain 847
stage_runssadb, ReadyStack's engine database (not published)chain 847
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—