OpenBao v2.7.2-CE-ubuntu24.04-r3 build trail

How ReadyStack built readystack/openbao:v2.7.2-CE-ubuntu24.04-r3 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/openbao:v2.7.2-CE-ubuntu24.04-r3
  • Index digestsha256:6c49e74af72ca50eecc93ea1a8ce92313752c9b27fa56386975a9ff9f52503e9
  • linux/amd64 digestsha256:1ab1b54c2542c3b2630e47fe121a738db3fb014299a09fee8b5fff74f02776f3
  • ArchiveReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.tar.gz
  • Archive SHA-256 nowa65d10eb701e33d045a65af8fe7fcd14e0dbe26674b18d825f4d447c4263e833
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-07T06:15:15Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.trail.json.sigstore ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.trail.json
ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.trail.jsonReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.trail.json.sigstoreReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.trail.mdOpenBao product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductOpenBao (openbao) [MANIFEST.json]
  • Release tagv2.7.2-CE-ubuntu24.04-r3 [MANIFEST.json]
  • Imagereadystack/openbao:v2.7.2-CE-ubuntu24.04-r3 [MANIFEST.json]
  • Image index digestsha256:6c49e74af72ca50eecc93ea1a8ce92313752c9b27fa56386975a9ff9f52503e9 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:1ab1b54c2542c3b2630e47fe121a738db3fb014299a09fee8b5fff74f02776f3 [ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.tar.gz (bytes 546361536) [MANIFEST.json]
  • Archive sha256 at publisha65d10eb701e33d045a65af8fe7fcd14e0dbe26674b18d825f4d447c4263e833 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/openbao/openbao [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv2.7.2 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit9e0a0d3c3504a0a00b45e61355afac5e35c78379 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash39ce90cd211893e1a0f3ef5a1a0ae7df0badaab1b54fd79b9da5b3e7b174369d (files 5401) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:1fd340d3e47dd1d7c3ed347f528252f5f4770de99d4598d8aa3e49e61be0496e [ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1793043147 (utc 2026-10-26T19:32:27Z) [ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 · platform digest sha256:fea12ba16096adec0f699ce1c4da2154d320450e56c1f63671f95d2a3551c77b
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.rebuild.json, engine]
  • Engine commit(s)
    • commit 010aa541a25a24b2cef6b4553320a093daeed530 · dirty yes · first drive 3564
    • commit a40e4d9d4d44a5f8647c6bf01ffdee4ed8801afd · dirty yes · first drive 3581
    • commit eef5a3c89b9a14bcb25610b0fe97ae5041354785 · dirty yes · first drive 3586
    • commit 2488ac8956ee2098ba13f3ff11fe53d8cbec9ffb · dirty yes · first drive 3589
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain839 (created 2026-11-07T04:23:49Z · trigger customer_request · upstream version v2.7.2) [chains, chains #839]
  • Requestbuild request #517 (rebuild) (requested at 2026-11-07T02:01:32Z · requested by kitforge-agent · version v2.7.2) [build_requests, build_requests #517]
  • Reasonrerelease agenda REVISION -> v2.7.2-CE-ubuntu24.04-r3 (decay loop, IMP-08) [build_requests, build_requests #517 request_reason]
  • Supersedesreadystack/openbao:v2.7.2-CE-ubuntu24.04-r2 (chain 751) [chains, chains #751]

The path through the harness

Fully recorded

1 chain · 4 drives · 18 stages · 3 rewinds

Chain 839 release · ready_to_ship

Created 2026-11-07T04:23:49Z, upstream v2.7.2, build request 517 [chains, chains #839]

DriveStartedMinutesBuild hostHow it stopped
35642026-11-07T04:24:15Z32.1build host 5 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #3564]
35812026-11-07T05:25:20Z4.6build host 5 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #3581]
35862026-11-07T05:39:12Z5.4build host 5 publish-held infra_hub_rate_limit at package_archive; 1 tick [drive_runs, drive_runs #3586]
35892026-11-07T06:09:18Z—build host 5 publish-held not recorded [drive_runs, drive_runs #3589]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-07T04:24:26Z2026-11-07T04:24:27Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json ff8cec865145…
acquire 2026-11-07T04:24:35Z2026-11-07T04:24:36Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 21ea52d19af8…
license_file d6b1a865f1c8…
custody_inputs 47e5993b84e8…
source_tree_hash 521b712bd4b3…
source_file_manifest 25a3ce4f41e0…
plan 2026-11-07T04:25:10Z2026-11-07T04:25:11Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 3b293ace780d…
input_pin_plan b369cc292547…
toolchain_lock a1b105f1b692…
assemble_kit 2026-11-07T04:32:18Z2026-11-07T04:32:18Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile be4cb80b616f…
build_recipe a0099335198a…
system_pinning fa091140511e…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 804dfbaea311…
verify_offline_sh 3e8184ea230c…
base_image_digests 3cd226932daa…
dockerfile_offline be4cb80b616f…
first_build_digest 6bf6bb900773…
remediate 2026-11-07T04:33:00Z2026-11-07T04:33:01Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 81ca5ee13f49…
security_report 9906deff5d4f…
build_kit 2026-11-07T04:42:35Z2026-11-07T04:42:36Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 0a6776fd8fcf…
locked_digest ebda472fbeed…
freeze_manifest a20fb70053ed…
offline_rebuild_transcript 84617c04cce5…
verdict 2026-11-07T04:43:45Z2026-11-07T04:43:46Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict d28b4da0f505…
publish_image 2026-11-07T04:44:30Z2026-11-07T04:44:30Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 34470d9141a8…
promotion_record 7e2aa7721561…
boot_instance 2026-11-07T04:44:37Z2026-11-07T04:44:41Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 7a67fda93225…
sbom 2026-11-07T04:44:58Z2026-11-07T04:44:59Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md c1c03a704100…
sbom_json 7e5673c0385f…
schema_discovery 2026-11-07T04:45:02Z2026-11-07T04:45:03Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash c4f76a2d67f7…
dependency_tree cf4402a7cbf9…
table_classification f06a3a0d62eb…
admin_handbook 2026-11-07T04:45:12Z2026-11-07T04:45:13Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 5648d1d8a7e7…
admin_handbook b3eb49231da9…
db_handbook 2026-11-07T04:45:23Z2026-11-07T04:45:24Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 6c1c977255ff…
seed_isolation 4b61342c9275…
seed_data 2026-11-07T04:45:30Z2026-11-07T04:45:31Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 9f7a4879cb63…
seed_cases_json dfbf5d4e28c6…
seed_validate 2026-11-07T04:45:34Z2026-11-07T04:45:35Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 725d76e53fc1…
usecase_validate 2026-11-07T04:45:52Z2026-11-07T04:45:53Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests be3cd536141c…
test_results f7476b1c243e…
usecase_contract bc6ec63c2b65…
finalize_docs 2026-11-07T04:45:58Z2026-11-07T04:45:59Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 262b82c2bd8a…
release_notes b62288394d8c…
api_integration_guide 56156ce56131…
package_archive invalidated 2026-11-07T05:38:44Z 2026-11-07T04:56:20Z2026-11-07T05:29:56Z2
34 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar a27b8edbc37f…
checksums 5a589e36a8c1…
verify_md 8d3beacd012b…
rebuild_md 5b6206bf2096…
manifest_txt 3f54d46bb449…
actions_jsonl 8118fe6357a1…
provenance_md 3344c6d15e68…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 4f738de5e746…

[stage_runs]

Rewinds

  • 2026-11-07T05:16:58Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #23964]
  • 2026-11-07T05:38:44Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #24032]
  • 2026-11-07T06:08:50Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #24067]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-07T05:29:56Z.

9 calls over 5 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 08002 —
remediate2001 011899 L-A08, L-038, L-036, L-034, L-032
admin_handbook2102 031644 —
db_handbook2001 026910 —
usecase_validate1001 01649 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

2 rounds, 2 counted, $0.81 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-07T04:57:06Z 002 clean to repackage [held_rounds, held_rounds #1434] $0.51 3 rounds, $40.00 0574a20ba329…
22026-11-07T05:30:33Z 000 clean to publish [held_rounds, held_rounds #1436] $0.29 3 rounds, $40.00 a27b8edbc37f…

Defects

Fully recorded
  • Ledger entries2 [defects, defects where product_slug=openbao and this tag or chain]
  • Disclosed in the archive2 [docs/defects/defects.json, entries]

2 ledger entries: by severity low 2; by status fixed-before-release 2.

DefectSeverityStatusFound byFixed in
RSD-openbao-04d8c47690
Database handbook: LIST is not served on these routes (404); only GET works; contradicts the admin guide's list. [defects, defects #162019]		lowfixed-before-releaseheld review (review model)—
RSD-openbao-f5156a8729
Database handbook: LIST is not served on these routes (404); only GET works; contradicts the admin guide's list. [defects, defects #162020]		lowfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:1ab1b54c2542c3b2630e47fe121a738db3fb014299a09fee8b5fff74f02776f3 · published digest sha256:1ab1b54c2542c3b2630e47fe121a738db3fb014299a09fee8b5fff74f02776f3 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 285) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-07T06:09:43Z · failing Docker Scout counts 96 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-07T06:09:29Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3731086800 · transparency-log entry · integrated 2026-11-07T06:13:53Z) [ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:6c49e74af72ca50eecc93ea1a8ce92313752c9b27fa56386975a9ff9f52503e9 · state attached · log index 3731089083 · transparency-log entry
    • kind sbom · digest sha256:6c49e74af72ca50eecc93ea1a8ce92313752c9b27fa56386975a9ff9f52503e9 · state attached · log index 3731090431 · transparency-log entry
    • kind vsa · digest sha256:6c49e74af72ca50eecc93ea1a8ce92313752c9b27fa56386975a9ff9f52503e9 · state attached · log index 3731092275 · transparency-log entry
    • kind provenance · digest sha256:1ab1b54c2542c3b2630e47fe121a738db3fb014299a09fee8b5fff74f02776f3 · state attached · log index 3731093888 · transparency-log entry
    • kind sbom · digest sha256:1ab1b54c2542c3b2630e47fe121a738db3fb014299a09fee8b5fff74f02776f3 · state attached · log index 3731095096 · transparency-log entry
    • kind vsa · digest sha256:1ab1b54c2542c3b2630e47fe121a738db3fb014299a09fee8b5fff74f02776f3 · state attached · log index 3731096370 · transparency-log entry
    (at 2026-11-07T06:13:54Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/openbao/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-07T04:57:11Z on build host 5 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:1ab1b54c2542c3b2630e47fe121a738db3fb014299a09fee8b5fff74f02776f3 [clean-room rebuild ledger, runs[608]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-07T04:44:30Z [stage_runs, stage_runs chain 839 stage publish_image]
  • Archive manifests written2026-11-07T06:11:48Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 743 · probed 2026-11-07T04:37:28Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-07T06:15:15Z generated: by KitForge release/build_trail.py · generator commit 2488ac8956ee2098ba13f3ff11fe53d8cbec9ffb
  • 2026-11-07T06:16:56Z publication: promoted at 2026-11-07T06:15:55Z · promoted digest sha256:6c49e74af72ca50eecc93ea1a8ce92313752c9b27fa56386975a9ff9f52503e9 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 335 · checklist status complete · checklist at 2026-11-07T06:16:56Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/openbao/v2.7.2-CE-ubuntu24.04-r3/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/openbao/v2.7.2-CE-ubuntu24.04-r3/), as staged for publishing—
ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.rebuild.jsonbeside the archive (prodasset /data/production/openbao/v2.7.2-CE-ubuntu24.04-r3/), as staged for publishing—
ReadyStack-openbao-v2.7.2-CE-ubuntu24.04-r3.rebuild.json.sigstorebeside the archive (prodasset /data/production/openbao/v2.7.2-CE-ubuntu24.04-r3/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/openbao/v2.7.2-CE-ubuntu24.04-r3/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)517
chainssadb, ReadyStack's engine database (not published)839
defectssadb, ReadyStack's engine database (not published)openbao v2.7.2-CE-ubuntu24.04-r3
drive_runssadb, ReadyStack's engine database (not published)chain 839
held_roundssadb, ReadyStack's engine database (not published)chain 839
lesson_recallssadb, ReadyStack's engine database (not published)chain 839
micro_step_runssadb, ReadyStack's engine database (not published)chain 839
release_imagessadb, ReadyStack's engine database (not published)openbao v2.7.2-CE-ubuntu24.04-r3
stage_eventssadb, ReadyStack's engine database (not published)chain 839
stage_runssadb, ReadyStack's engine database (not published)chain 839
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—