Percona 9.7.2-2-CE-ubuntu24.04-r2 build trail

How ReadyStack built readystack/percona:9.7.2-2-CE-ubuntu24.04-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/percona:9.7.2-2-CE-ubuntu24.04-r2
  • Index digestsha256:40b381f5d3038803b35909985329fb4a80f89047a95e129eced401d82061be9b
  • linux/amd64 digestsha256:71ebc1aa54ad848b0ef5c625572e7ef6f37d2d617a314773d407479bdcbe73f2
  • ArchiveReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.tar.gz
  • Archive SHA-256 nowb096bf6ab54959ea6afc875a6ff30c92cfcc4ed433a69d57c1573d9612c7d41f
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-12T09:17:48Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.trail.json.sigstore ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.trail.json
ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.trail.jsonReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.trail.json.sigstoreReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.trail.mdPercona product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductPercona (percona) [MANIFEST.json]
  • Release tag9.7.2-2-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Imagereadystack/percona:9.7.2-2-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Image index digestsha256:40b381f5d3038803b35909985329fb4a80f89047a95e129eced401d82061be9b [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:71ebc1aa54ad848b0ef5c625572e7ef6f37d2d617a314773d407479bdcbe73f2 [ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.tar.gz (bytes 1204325970) [MANIFEST.json]
  • Archive sha256 at publishb096bf6ab54959ea6afc875a6ff30c92cfcc4ed433a69d57c1573d9612c7d41f [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/percona/percona-server [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refPercona-Server-9.7.2-2 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit91438a0430fbcd52dd85472edf3b357484484c22 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash5e375ebb44dd748378b684ac1550632360d163dbce826c53c90ee5c04c7927f9 (files 63386) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:e023ca7a01eda4550678d380af7116be9d321877b2ad7d9085e512771d1171d4 [ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794391143 (utc 2026-11-11T09:59:03Z) [ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.rebuild.json, engine]
  • Engine commit(s)
    • commit 47f1eee3eb5b69f7a5831f0909642f0743f56d08 · dirty yes · first drive 4327
    • commit 9efab228d712a2a7e9bb2eb226729f7f532c3d6a · dirty yes · first drive 4374
    • commit 90a06a5887bb1d16e24cf824619264064842b72d · dirty yes · first drive 4381
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain990 (created 2026-11-12T00:08:00Z · trigger customer_request · upstream version 9.7.2-2) [chains, chains #990]
  • Requestbuild request #661 (rebuild) (requested at 2026-11-11T09:59:05Z · requested by kitforge-agent · version 9.7.2-2) [build_requests, build_requests #661]
  • Reasonrerelease agenda REVISION -> 9.7.2-2-CE-ubuntu24.04-r2 (decay loop, IMP-08) [build_requests, build_requests #661 request_reason]
  • Supersedesreadystack/percona:9.7.2-2-CE-ubuntu24.04-r1 (chain 759) [chains, chains #759]

The path through the harness

Fully recorded

1 chain · 3 drives · 18 stages · 3 rewinds

Chain 990 release · ready_to_ship

Created 2026-11-12T00:08:00Z, upstream 9.7.2-2, build request 661 [chains, chains #990]

DriveStartedMinutesBuild hostHow it stopped
43272026-11-12T00:08:47Z227.9build host 5 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4327]
43742026-11-12T08:13:16Z11build host 5 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4374]
43812026-11-12T09:02:30Z—build host 5 publish-held not recorded [drive_runs, drive_runs #4381]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-12T00:08:58Z2026-11-12T00:08:59Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 70bc4afac63d…
acquire 2026-11-12T00:09:49Z2026-11-12T00:09:58Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 3b185362de6f…
license_file b8a8e254d493…
custody_inputs d1dd42f37add…
source_tree_hash 9c979aa46091…
source_file_manifest 2b3a4bb181f4…
plan 2026-11-12T00:10:29Z2026-11-12T00:10:31Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 4733ea763208…
input_pin_plan e2d0d949756a…
toolchain_lock f0b82a3fa7df…
assemble_kit 2026-11-12T01:05:29Z2026-11-12T01:05:30Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 7a9a37d2e1af…
build_recipe d6679134a73a…
system_pinning 5fdde4d1366a…
build_offline_sh 6ab4f08a6ec7…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health ba4b5b7f4852…
verify_offline_sh 3e8184ea230c…
base_image_digests 87aa38de2466…
dockerfile_offline 7a9a37d2e1af…
first_build_digest ae6d0e115f03…
remediate 2026-11-12T01:05:59Z2026-11-12T01:06:00Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 91d80628674e…
security_report 3ab27b3a125a…
build_kit 2026-11-12T02:50:05Z2026-11-12T02:50:06Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 96f29cecadae…
locked_digest c195bfd34169…
freeze_manifest 4f9bcd96e825…
offline_rebuild_transcript 81fc7cb04e88…
verdict 2026-11-12T02:51:40Z2026-11-12T02:51:41Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 5ea77b31c6bb…
publish_image 2026-11-12T02:52:37Z2026-11-12T02:52:38Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme f205d445a394…
promotion_record 3fb99fb508bf…
boot_instance 2026-11-12T02:52:55Z2026-11-12T02:52:58Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 73dfdd234396…
sbom 2026-11-12T02:53:20Z2026-11-12T02:53:21Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 1bee3973da77…
sbom_json 382c7d40c85e…
schema_discovery 2026-11-12T02:53:23Z2026-11-12T02:53:24Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 48c9097aea5e…
dependency_tree 7498e83e4338…
table_classification 337aebfb1ec0…
admin_handbook 2026-11-12T02:53:34Z2026-11-12T02:53:34Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map aef45610634e…
admin_handbook 7787fd32c9ab…
db_handbook 2026-11-12T02:53:47Z2026-11-12T02:53:48Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 5361bd4aabc3…
seed_isolation 6f407b33a348…
seed_data 2026-11-12T02:53:55Z2026-11-12T02:53:56Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql bc5d36cbe818…
seed_cases_json 7c3d45c4aea2…
seed_validate 2026-11-12T02:53:58Z2026-11-12T02:53:59Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract df1b2537c388…
usecase_validate 2026-11-12T02:54:22Z2026-11-12T02:54:23Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests 34154cfd1c7d…
test_results 64d528c609e0…
usecase_contract 52893a6e1440…
finalize_docs 2026-11-12T02:54:29Z2026-11-12T02:54:30Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 166c5aa4b6a2…
release_notes 7a385af68275…
api_integration_guide b52d20c3f7eb…
package_archive invalidated 2026-11-12T08:34:22Z 2026-11-12T03:56:37Z2026-11-12T08:24:15Z2
36 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 unpack_files
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar dfa3503bcc25…
checksums 61e126e20fc1…
verify_md d3d5feb8dc08…
rebuild_md 741d2da4d53b…
manifest_txt 967fcec03221…
actions_jsonl 73239d2030c8…
provenance_md 24b2cd644e24…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 9dec173a15a7…

[stage_runs]

Rewinds

  • 2026-11-12T05:28:51Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #32925]
  • 2026-11-12T08:34:22Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #33263]
  • 2026-11-12T09:02:02Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #33274]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-12T08:24:15Z.

4 calls over 2 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 08818 L-A183, L-A15
remediate2001 09232 L-A183, L-A15

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

2 rounds, 2 counted, $0.77 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-12T03:58:25Z 011 findings to repackage [held_rounds, held_rounds #1778] $0.47 3 rounds, $40.00 a98865bc879a…
22026-11-12T08:24:57Z 000 clean to publish [held_rounds, held_rounds #1790] $0.30 3 rounds, $40.00 dfa3503bcc25…

Defects

Fully recorded
  • Ledger entries10 [defects, defects where product_slug=percona and this tag or chain]
  • Disclosed in the archive5 [docs/defects/defects.json, entries]

10 ledger entries: by severity high 1, low 9; by status fixed-before-release 2, fixed-in-release 5, open 3.

DefectSeverityStatusFound byFixed in
RSD-percona-d4312df6af
Admin handbook: Overview names the image as the never-published r1 tag; the release is r2 and every command in the handbook pulls r2. [defects, defects #257903]		highfixed-before-releaseheld review (review model)—
RSD-percona-5c10ec8fe9
Database handbook: Upgrade step tells the customer to replace the r1 tag, which does not appear in the command below (it shows r2). [defects, defects #257904]		lowfixed-before-releaseheld review (review model)—
RSD-percona-6d12f59db0
Admin handbook: The named-volume owner is stated wrongly. [defects, defects #262610]		lowfixed-in-releaseheld review (review model)9.7.2-2-CE-ubuntu24.04-r2
RSD-percona-def8d4b05b
Admin handbook: False statement that the setting cannot be changed without recompiling. [defects, defects #262611]		lowfixed-in-releaseheld review (review model)9.7.2-2-CE-ubuntu24.04-r2
RSD-percona-9f1c9ddd83
API guide: Says the network account can only be changed over TCP; contradicts the block above. [defects, defects #262612]		lowfixed-in-releaseheld review (review model)9.7.2-2-CE-ubuntu24.04-r2
RSD-percona-fe6bbd0df5
API guide: Wrong behaviour named for omitting -e MYSQL_PWD; contradicts line 1164. [defects, defects #262613]		lowfixed-in-releaseheld review (review model)9.7.2-2-CE-ubuntu24.04-r2
RSD-percona-e130780787
API guide: The example offered for giving uid 1001 write access does not do so. [defects, defects #262614]		lowfixed-in-releaseheld review (review model)9.7.2-2-CE-ubuntu24.04-r2
RSD-percona-ebcd50c274
API guide: Secret-file start command mounts no file, so the first start is refused. [defects, defects #262615]		lowopenheld review (review model)—
RSD-percona-bc8ca87070
API guide: Reset procedure gives no hint to wait for the temporary server; the first docker exec fails. [defects, defects #262616]		lowopenheld review (review model)—
RSD-percona-b7985449d2
API guide: Reset procedure gives no hint to wait for the temporary server; the first docker exec fails. [defects, defects #262617]		lowopenheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:71ebc1aa54ad848b0ef5c625572e7ef6f37d2d617a314773d407479bdcbe73f2 · published digest sha256:71ebc1aa54ad848b0ef5c625572e7ef6f37d2d617a314773d407479bdcbe73f2 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 3117) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, vex_shipped) [g8_result.json, result]
  • Grade at releaseB (percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-12T09:03:04Z · failing Base image docker.io/library/ubuntu:24.04 has been updated since this image was built: it was built on sha256:78d4744ead1f…, and the tag's current linux/amd64 image is sha256:77eb101c607d…., Docker Scout counts 95 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-12T09:02:45Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3829207339 · transparency-log entry · integrated 2026-11-12T09:15:27Z) [ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:40b381f5d3038803b35909985329fb4a80f89047a95e129eced401d82061be9b · state attached · log index 3829211510 · transparency-log entry
    • kind sbom · digest sha256:40b381f5d3038803b35909985329fb4a80f89047a95e129eced401d82061be9b · state attached · log index 3829212509 · transparency-log entry
    • kind vsa · digest sha256:40b381f5d3038803b35909985329fb4a80f89047a95e129eced401d82061be9b · state attached · log index 3829213415 · transparency-log entry
    • kind provenance · digest sha256:71ebc1aa54ad848b0ef5c625572e7ef6f37d2d617a314773d407479bdcbe73f2 · state attached · log index 3829214199 · transparency-log entry
    • kind sbom · digest sha256:71ebc1aa54ad848b0ef5c625572e7ef6f37d2d617a314773d407479bdcbe73f2 · state attached · log index 3829215183 · transparency-log entry
    • kind vsa · digest sha256:71ebc1aa54ad848b0ef5c625572e7ef6f37d2d617a314773d407479bdcbe73f2 · state attached · log index 3829217283 · transparency-log entry
    (at 2026-11-12T09:15:28Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/percona/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-12T03:58:37Z on build host 5 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:71ebc1aa54ad848b0ef5c625572e7ef6f37d2d617a314773d407479bdcbe73f2 [clean-room rebuild ledger, runs[772]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-12T02:52:38Z [stage_runs, stage_runs chain 990 stage publish_image]
  • Archive manifests written2026-11-12T09:10:19Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 919 · probed 2026-11-12T01:57:53Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-12T09:17:48Z generated: by KitForge release/build_trail.py · generator commit 31c1e6418d56f0e5e2b8dcbfde0e0fff1fba715c
  • 2026-11-12T09:20:56Z publication: promoted at 2026-11-12T09:18:39Z · promoted digest sha256:40b381f5d3038803b35909985329fb4a80f89047a95e129eced401d82061be9b · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 493 · checklist status incomplete · checklist at 2026-11-12T09:20:54Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/percona/9.7.2-2-CE-ubuntu24.04-r2/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/percona/9.7.2-2-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.rebuild.jsonbeside the archive (prodasset /data/production/percona/9.7.2-2-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-percona-9.7.2-2-CE-ubuntu24.04-r2.rebuild.json.sigstorebeside the archive (prodasset /data/production/percona/9.7.2-2-CE-ubuntu24.04-r2/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/percona/9.7.2-2-CE-ubuntu24.04-r2/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)661
chainssadb, ReadyStack's engine database (not published)990
defectssadb, ReadyStack's engine database (not published)percona 9.7.2-2-CE-ubuntu24.04-r2
drive_runssadb, ReadyStack's engine database (not published)chain 990
held_roundssadb, ReadyStack's engine database (not published)chain 990
lesson_recallssadb, ReadyStack's engine database (not published)chain 990
micro_step_runssadb, ReadyStack's engine database (not published)chain 990
release_imagessadb, ReadyStack's engine database (not published)percona 9.7.2-2-CE-ubuntu24.04-r2
stage_eventssadb, ReadyStack's engine database (not published)chain 990
stage_runssadb, ReadyStack's engine database (not published)chain 990
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—