Nextcloud v35.0.2-CE-ubuntu24.04-r8 build trail

How ReadyStack built readystack/nextcloud:v35.0.2-CE-ubuntu24.04-r8 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/nextcloud:v35.0.2-CE-ubuntu24.04-r8
  • Index digestsha256:4b1ce55bb3fdcdecaddc62f241be922a07982bd9e2d9818e6bab22275f2978fa
  • linux/amd64 digestsha256:327146793d105a997e28a661a198f827094e8620d8dfa95109b88d8162d52c64
  • ArchiveReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.tar.gz
  • Archive SHA-256 nowea36bc1fc97b27f4938606f648e7b5930637f11e6e7356552720a8f35513d395
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-13T15:22:49Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.trail.json.sigstore ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.trail.json
ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.trail.jsonReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.trail.json.sigstoreReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.trail.mdNextcloud product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductNextcloud (nextcloud) [MANIFEST.json]
  • Release tagv35.0.2-CE-ubuntu24.04-r8 [MANIFEST.json]
  • Imagereadystack/nextcloud:v35.0.2-CE-ubuntu24.04-r8 [MANIFEST.json]
  • Image index digestsha256:4b1ce55bb3fdcdecaddc62f241be922a07982bd9e2d9818e6bab22275f2978fa [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:327146793d105a997e28a661a198f827094e8620d8dfa95109b88d8162d52c64 [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.tar.gz (bytes 391265344) [MANIFEST.json]
  • Archive sha256 at publishea36bc1fc97b27f4938606f648e7b5930637f11e6e7356552720a8f35513d395 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/nextcloud/server [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv35.0.2 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commitba900af933e61ffa005315b09d6454bfbbcbcc81 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashcd5c004d60b236dd749bb833dc69688660ebc5f6fa8ebb69d8ecb7f6ef29f75d (files 18838) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:df4d11598f1d0071a27eb37b306686a3e873e714e775d602993353d60028d66a [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794578588 (utc 2026-11-13T14:03:08Z) [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
    [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.rebuild.json, engine]
  • Engine commit(s)
    • commit 6dbc7d85edabbf8f3daffba6b70538bf49f545d8 · dirty yes · first drive 4592
    • commit f264c5a93fc5fe548e62fe3bfbeb279b813432b8 · dirty yes · first drive 4604
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain1080 (created 2026-11-13T14:13:34Z · trigger customer_request · upstream version v35.0.2) [chains, chains #1080]
  • Requestbuild request #766 (rebuild) (requested at 2026-11-13T14:03:09Z · requested by kitforge-agent · version v35.0.2) [build_requests, build_requests #766]
  • Reasonrerelease agenda REVISION -> v35.0.2-CE-ubuntu24.04-r8 (decay loop, IMP-08) [build_requests, build_requests #766 request_reason]
  • Supersedesreadystack/nextcloud:v35.0.2-CE-ubuntu24.04-r7 (chain 1037) [chains, chains #1037]

The path through the harness

Fully recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 1080 release · ready_to_ship

Created 2026-11-13T14:13:34Z, upstream v35.0.2, build request 766 [chains, chains #1080]

DriveStartedMinutesBuild hostHow it stopped
45922026-11-13T14:14:05Z27.2build host 4 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4592]
46042026-11-13T15:13:27Z—build host 4 publish-held not recorded [drive_runs, drive_runs #4604]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-13T14:14:17Z2026-11-13T14:14:18Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 7e1e8b88e266…
acquire 2026-11-13T14:14:40Z2026-11-13T14:14:43Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree b2d7253407e3…
license_file 57c8ff33c9c0…
custody_inputs e43e18a27635…
source_tree_hash ceedf3ace496…
source_file_manifest 44e9d19435d9…
plan 2026-11-13T14:15:21Z2026-11-13T14:15:22Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 97c8c788626b…
input_pin_plan 7c55dc79cba9…
toolchain_lock 5fedca2c3cbc…
assemble_kit 2026-11-13T14:20:15Z2026-11-13T14:20:16Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile ad994035bac6…
build_recipe 51e3dee86ae3…
system_pinning eb2b3ee7bd69…
build_offline_sh 6ab4f08a6ec7…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health e4744ec23c3b…
verify_offline_sh 3e8184ea230c…
base_image_digests 553ed440595d…
dockerfile_offline ad994035bac6…
first_build_digest 61ae6982ab70…
remediate 2026-11-13T14:20:50Z2026-11-13T14:20:51Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 488c7ca8494e…
security_report 60cb8b584248…
build_kit 2026-11-13T14:27:41Z2026-11-13T14:27:41Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp a03577b774d2…
locked_digest 4172d7bb162e…
freeze_manifest 918fd8496c1d…
offline_rebuild_transcript 0924bec51eed…
verdict 2026-11-13T14:29:43Z2026-11-13T14:29:44Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 0beefadb2bff…
publish_image 2026-11-13T14:30:46Z2026-11-13T14:30:47Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme a6ecc91fc755…
promotion_record 899341bd785f…
boot_instance 2026-11-13T14:30:58Z2026-11-13T14:31:01Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle bf9f5b72065b…
sbom 2026-11-13T14:31:24Z2026-11-13T14:31:25Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md a2d9b1817519…
sbom_json ce3f11bc122d…
schema_discovery 2026-11-13T14:31:28Z2026-11-13T14:31:29Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 41ad6d816272…
dependency_tree 2d13bbe51c8a…
table_classification 648b97766162…
admin_handbook 2026-11-13T14:31:36Z2026-11-13T14:31:37Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map fe9f8cb5c431…
admin_handbook 52fdf4bf3a80…
db_handbook 2026-11-13T14:31:47Z2026-11-13T14:31:48Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 0e9b808fb4d0…
seed_isolation e43445a59ebe…
seed_data 2026-11-13T14:31:53Z2026-11-13T14:31:54Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql a9ebb00fd76d…
seed_cases_json 8b5b7384b0c2…
seed_validate 2026-11-13T14:31:57Z2026-11-13T14:31:57Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 96945ab5e753…
usecase_validate 2026-11-13T14:32:15Z2026-11-13T14:32:16Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests 7ed89798165f…
test_results 0be1d6279c81…
usecase_contract 22db442df952…
finalize_docs 2026-11-13T14:32:21Z2026-11-13T14:32:22Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json d3f28b5dee14…
release_notes d85b26d41e0a…
api_integration_guide 7371390c26ae…
package_archive invalidated 2026-11-13T15:12:54Z 2026-11-13T14:41:13Z2026-11-13T14:41:15Z1
37 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 unpack_files
  • G8 scout_grade_a
  • G8 script_copies
  • G8 upgrade_check
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar e22b688d1ddf…
checksums fd25f2a91a88…
verify_md 19734bc86da3…
rebuild_md c72052cbeb89…
manifest_txt 06019c227a12…
actions_jsonl 8ea0ad7de9f6…
provenance_md a107d2f785da…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 1013e678feb2…

[stage_runs]

Rewinds

  • 2026-11-13T15:12:54Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #36454]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-13T14:41:15Z.

5 calls over 3 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 011984 L-A183, L-A15
remediate2001 011840 L-A183, L-A15
usecase_validate1001 01635 L-A59

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.33 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-13T14:41:47Z 000 clean to publish [held_rounds, held_rounds #1887] $0.33 3 rounds, $40.00 e22b688d1ddf…

Defects

Fully recorded
  • Ledger entries1 [defects, defects where product_slug=nextcloud and this tag or chain]
  • Disclosed in the archive1 [docs/defects/defects.json, entries]

1 ledger entry: by severity high 1; by status open 1.

DefectSeverityStatusFound byFixed in
RSD-nextcloud-d48a33e52e
First visitor can claim the administrator account until setup is completed [defects, defects #283939]		highopenbuild strategy record—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:327146793d105a997e28a661a198f827094e8620d8dfa95109b88d8162d52c64 · published digest sha256:327146793d105a997e28a661a198f827094e8620d8dfa95109b88d8162d52c64 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 151) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-13T15:14:13Z · failing Docker Scout counts 140 packages with copyleft licences (AGPL, GPL, LGPL, MPL), 135 of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). AGPL: icewind/searchdav, nextcloud/lognormalizer. · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-13T15:13:41Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3856780302 · transparency-log entry · integrated 2026-11-13T15:20:32Z) [ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:4b1ce55bb3fdcdecaddc62f241be922a07982bd9e2d9818e6bab22275f2978fa · state attached · log index 3856784923 · transparency-log entry
    • kind sbom · digest sha256:4b1ce55bb3fdcdecaddc62f241be922a07982bd9e2d9818e6bab22275f2978fa · state attached · log index 3856786959 · transparency-log entry
    • kind vsa · digest sha256:4b1ce55bb3fdcdecaddc62f241be922a07982bd9e2d9818e6bab22275f2978fa · state attached · log index 3856790192 · transparency-log entry
    • kind provenance · digest sha256:327146793d105a997e28a661a198f827094e8620d8dfa95109b88d8162d52c64 · state attached · log index 3856795205 · transparency-log entry
    • kind sbom · digest sha256:327146793d105a997e28a661a198f827094e8620d8dfa95109b88d8162d52c64 · state attached · log index 3856800712 · transparency-log entry
    • kind vsa · digest sha256:327146793d105a997e28a661a198f827094e8620d8dfa95109b88d8162d52c64 · state attached · log index 3856804737 · transparency-log entry
    (at 2026-11-13T15:20:36Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/nextcloud/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-13T14:41:50Z on build host 4 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:327146793d105a997e28a661a198f827094e8620d8dfa95109b88d8162d52c64 [clean-room rebuild ledger, runs[838]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-13T14:30:47Z [stage_runs, stage_runs chain 1080 stage publish_image]
  • Archive manifests written2026-11-13T15:17:03Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 1018 · probed 2026-11-13T14:24:56Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-13T15:22:49Z generated: by KitForge release/build_trail.py · generator commit f264c5a93fc5fe548e62fe3bfbeb279b813432b8
  • 2026-11-13T15:24:49Z publication: promoted at 2026-11-13T15:23:26Z · promoted digest sha256:4b1ce55bb3fdcdecaddc62f241be922a07982bd9e2d9818e6bab22275f2978fa · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 550 · checklist status complete · checklist at 2026-11-13T15:24:49Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r8/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r8/), as staged for publishing—
ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.rebuild.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r8/), as staged for publishing—
ReadyStack-nextcloud-v35.0.2-CE-ubuntu24.04-r8.rebuild.json.sigstorebeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r8/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/nextcloud/v35.0.2-CE-ubuntu24.04-r8/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)766
chainssadb, ReadyStack's engine database (not published)1080
defectssadb, ReadyStack's engine database (not published)nextcloud v35.0.2-CE-ubuntu24.04-r8
drive_runssadb, ReadyStack's engine database (not published)chain 1080
held_roundssadb, ReadyStack's engine database (not published)chain 1080
lesson_recallssadb, ReadyStack's engine database (not published)chain 1080
micro_step_runssadb, ReadyStack's engine database (not published)chain 1080
release_imagessadb, ReadyStack's engine database (not published)nextcloud v35.0.2-CE-ubuntu24.04-r8
stage_eventssadb, ReadyStack's engine database (not published)chain 1080
stage_runssadb, ReadyStack's engine database (not published)chain 1080
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—