Nextcloud v35.0.2-CE-ubuntu24.04-r7 build trail

How ReadyStack built readystack/nextcloud:v35.0.2-CE-ubuntu24.04-r7 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/nextcloud:v35.0.2-CE-ubuntu24.04-r7
  • Index digestsha256:0d879ad3095c2379ac2f1e8c560ce50c06e710c4401c339eb77eee65e3d43630
  • linux/amd64 digestsha256:b4a540b356f3e26b7853eda72f54509f07b8a774cce4601f6f70648d72144d40
  • ArchiveReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.tar.gz
  • Archive SHA-256 now346b0710bb282747f925a0e8d69c70305d0f301d19cddf6ca6ee5c45817595d7
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-12T20:55:42Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.trail.json.sigstore ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.trail.json

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductNextcloud (nextcloud) [MANIFEST.json]
  • Release tagv35.0.2-CE-ubuntu24.04-r7 [MANIFEST.json]
  • Imagereadystack/nextcloud:v35.0.2-CE-ubuntu24.04-r7 [MANIFEST.json]
  • Image index digestsha256:0d879ad3095c2379ac2f1e8c560ce50c06e710c4401c339eb77eee65e3d43630 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:b4a540b356f3e26b7853eda72f54509f07b8a774cce4601f6f70648d72144d40 [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.tar.gz (bytes 391271385) [MANIFEST.json]
  • Archive sha256 at publish346b0710bb282747f925a0e8d69c70305d0f301d19cddf6ca6ee5c45817595d7 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/nextcloud/server [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv35.0.2 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commitba900af933e61ffa005315b09d6454bfbbcbcc81 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashcd5c004d60b236dd749bb833dc69688660ebc5f6fa8ebb69d8ecb7f6ef29f75d (files 18838) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:96ede89eeb70c14508f37efc08900101e2f0cdbf3a33c85eb638cb0a558ecf1a [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794448258 (utc 2026-11-12T01:50:58Z) [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
    [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.rebuild.json, engine]
  • Engine commit(s)
    • commit d6d7f1aa091cf0be154f9c62ac83dffb55f782cb · dirty yes · first drive 4463
    • commit 89246b3fdf7ea046df3d0e48f836a371a0c3bdf9 · dirty yes · first drive 4469
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain1037 (created 2026-11-12T19:57:13Z · trigger customer_request · upstream version v35.0.2) [chains, chains #1037]
  • Requestbuild request #707 (rebuild) (requested at 2026-11-12T01:51:00Z · requested by kitforge-agent · version v35.0.2) [build_requests, build_requests #707]
  • Reasonrevision v35.0.2-CE-ubuntu24.04-r7: same upstream version rebuilt (retarget.py --rev-bump) [build_requests, build_requests #707 request_reason]
  • Supersedesreadystack/nextcloud:v35.0.2-CE-ubuntu24.04-r6 (chain 974) [chains, chains #974]

The path through the harness

Fully recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 1037 release · ready_to_ship

Created 2026-11-12T19:57:13Z, upstream v35.0.2, build request 707 [chains, chains #1037]

DriveStartedMinutesBuild hostHow it stopped
44632026-11-12T19:57:45Z37build host 5 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4463]
44692026-11-12T20:45:29Z—build host 5 publish-held not recorded [drive_runs, drive_runs #4469]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-12T19:57:56Z2026-11-12T19:57:57Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
order_json 0d8ffdd1184d…
acquire 2026-11-12T19:58:20Z2026-11-12T19:58:22Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
source_tree b2d7253407e3…
license_file 57c8ff33c9c0…
custody_inputs e43e18a27635…
source_tree_hash ceedf3ace496…
source_file_manifest 44e9d19435d9…
plan 2026-11-12T19:59:11Z2026-11-12T19:59:12Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
recon_report 25c3be4d8093…
input_pin_plan 5d145cbf2604…
toolchain_lock 58004e73d8a4…
assemble_kit 2026-11-12T20:06:20Z2026-11-12T20:06:20Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
dockerfile ac849bb12812…
build_recipe d8370d9babaa…
system_pinning eb2b3ee7bd69…
build_offline_sh 6ab4f08a6ec7…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 8d0b6f65a5f1…
verify_offline_sh 3e8184ea230c…
base_image_digests 553ed440595d…
dockerfile_offline ac849bb12812…
first_build_digest 53202174b6d9…
remediate 2026-11-12T20:07:04Z2026-11-12T20:07:05Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
vendored_apt e3b0c44298fc…
remediation_log b2166606112b…
security_report 0c17df2a30b0…
build_kit 2026-11-12T20:16:49Z2026-11-12T20:16:50Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
cosign_stamp 93bd2c4c0324…
locked_digest 03ba381bd114…
freeze_manifest 32a0b139d8b1…
offline_rebuild_transcript 8fc279897562…
verdict 2026-11-12T20:19:40Z2026-11-12T20:19:40Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
scout_verdict 0ea5b4ddd631…
publish_image 2026-11-12T20:21:03Z2026-11-12T20:21:03Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
hub_readme d828f3c89a22…
promotion_record a0decb097a9e…
boot_instance 2026-11-12T20:21:21Z2026-11-12T20:21:25Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
instance_handle f7dd5dc9afe3…
sbom 2026-11-12T20:21:59Z2026-11-12T20:22:00Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
sbom_md 5782dbdc762d…
sbom_json 29d37812422b…
schema_discovery 2026-11-12T20:22:02Z2026-11-12T20:22:03Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
schema_hash 41ad6d816272…
dependency_tree 2d13bbe51c8a…
table_classification 648b97766162…
admin_handbook 2026-11-12T20:22:11Z2026-11-12T20:22:12Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
api_map fe9f8cb5c431…
admin_handbook f84c982f79f1…
db_handbook 2026-11-12T20:22:24Z2026-11-12T20:22:25Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
db_handbook c518478aa6f8…
seed_isolation e43445a59ebe…
seed_data 2026-11-12T20:22:31Z2026-11-12T20:22:32Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
seed_data_sql a9ebb00fd76d…
seed_cases_json 1ab47174c60a…
seed_validate 2026-11-12T20:22:34Z2026-11-12T20:22:35Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
seed_data_contract 4dd4ded61a0a…
usecase_validate 2026-11-12T20:22:53Z2026-11-12T20:22:54Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
failed_tests b2247b16f5f7…
passed_tests 37f47c214908…
test_results 843b16dffb33…
usecase_contract 255909c69d2b…
finalize_docs 2026-11-12T20:23:00Z2026-11-12T20:23:01Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
defects_json 7830b75861a8…
release_notes 186172db8e9c…
api_integration_guide eb56378dd57f…
package_archive invalidated 2026-11-12T20:45:00Z 2026-11-12T20:34:40Z2026-11-12T20:34:41Z1
37 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 unpack_files
  • G8 scout_grade_a
  • G8 script_copies
  • G8 upgrade_check
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
sale_tar b4e92c1cfe54…
checksums 3507d23fd621…
verify_md 8b08e3bfcb19…
rebuild_md c5e3da7f60d7…
manifest_txt b4f8a59ce3eb…
actions_jsonl 1905fab67455…
provenance_md 1d19c386257f…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json ad9eae1fef67…

[stage_runs]

Rewinds

  • 2026-11-12T20:45:00Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #34506]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-12T20:34:41Z.

5 calls over 3 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 013332 —
remediate2001 015747 L-A08, L-038, L-036, L-034, L-032
usecase_validate1001 01558 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.33 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-12T20:36:18Z 000 clean to publish [held_rounds, held_rounds #1834] $0.33 3 rounds, $40.00 b4e92c1cfe54…

Defects

Fully recorded
  • Ledger entries1 [defects, defects where product_slug=nextcloud and this tag or chain]
  • Disclosed in the archive1 [docs/defects/defects.json, entries]

1 ledger entry: by severity high 1; by status open 1.

DefectSeverityStatusFound byFixed in
RSD-nextcloud-41376e8dd7
First visitor can claim the administrator account until setup is completed [defects, defects #273568]
highopenbuild strategy record—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:b4a540b356f3e26b7853eda72f54509f07b8a774cce4601f6f70648d72144d40 · published digest sha256:b4a540b356f3e26b7853eda72f54509f07b8a774cce4601f6f70648d72144d40 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 217) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-12T20:46:43Z · failing Docker Scout counts 140 packages with copyleft licences (AGPL, GPL, LGPL, MPL), 135 of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). AGPL: icewind/searchdav, nextcloud/lognormalizer.) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-12T20:45:45Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3839482743 · transparency-log entry · integrated 2026-11-12T20:54:21Z) [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:0d879ad3095c2379ac2f1e8c560ce50c06e710c4401c339eb77eee65e3d43630 · state attached · log index 3839483581 · transparency-log entry
    • kind sbom · digest sha256:0d879ad3095c2379ac2f1e8c560ce50c06e710c4401c339eb77eee65e3d43630 · state attached · log index 3839484097 · transparency-log entry
    • kind vsa · digest sha256:0d879ad3095c2379ac2f1e8c560ce50c06e710c4401c339eb77eee65e3d43630 · state attached · log index 3839484677 · transparency-log entry
    • kind provenance · digest sha256:b4a540b356f3e26b7853eda72f54509f07b8a774cce4601f6f70648d72144d40 · state attached · log index 3839485213 · transparency-log entry
    • kind sbom · digest sha256:b4a540b356f3e26b7853eda72f54509f07b8a774cce4601f6f70648d72144d40 · state attached · log index 3839485604 · transparency-log entry
    • kind vsa · digest sha256:b4a540b356f3e26b7853eda72f54509f07b8a774cce4601f6f70648d72144d40 · state attached · log index 3839486093 · transparency-log entry
    (at 2026-11-12T20:54:22Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/nextcloud/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-12T20:36:23Z on build host 3 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:b4a540b356f3e26b7853eda72f54509f07b8a774cce4601f6f70648d72144d40 [clean-room rebuild ledger, runs[804]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-12T20:21:03Z [stage_runs, stage_runs chain 1037 stage publish_image]
  • Archive manifests written2026-11-12T20:50:00Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 1018 · probed 2026-11-12T20:12:55Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-12T20:55:42Z generated: by KitForge release/build_trail.py · generator commit 89246b3fdf7ea046df3d0e48f836a371a0c3bdf9
  • 2026-11-12T20:58:04Z publication: promoted at 2026-11-12T20:56:18Z · promoted digest sha256:0d879ad3095c2379ac2f1e8c560ce50c06e710c4401c339eb77eee65e3d43630 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 519 · checklist status complete · checklist at 2026-11-12T20:58:04Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r7/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r7/), as staged for publishing—
ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.rebuild.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r7/), as staged for publishing—
ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r7.rebuild.json.sigstorebeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r7/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r7/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)707
chainssadb, ReadyStack's engine database (not published)1037
defectssadb, ReadyStack's engine database (not published)nextcloud v35.0.2-CE-ubuntu24.04-r7
drive_runssadb, ReadyStack's engine database (not published)chain 1037
held_roundssadb, ReadyStack's engine database (not published)chain 1037
lesson_recallssadb, ReadyStack's engine database (not published)chain 1037
micro_step_runssadb, ReadyStack's engine database (not published)chain 1037
release_imagessadb, ReadyStack's engine database (not published)nextcloud v35.0.2-CE-ubuntu24.04-r7
stage_eventssadb, ReadyStack's engine database (not published)chain 1037
stage_runssadb, ReadyStack's engine database (not published)chain 1037
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—