RabbitMQ 4.4.0-CE-ubuntu24.04-r3 build trail

How ReadyStack built readystack/rabbitmq:4.4.0-CE-ubuntu24.04-r3 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/rabbitmq:4.4.0-CE-ubuntu24.04-r3
  • Index digestsha256:f40ab0e574f425621a971c957e852f9b958f67daa5f33aa88f4ec7293c9d5f86
  • linux/amd64 digestsha256:e24f1f6cb1d71dec99aa7dac8113109a43b2e274abf1d3b6a57029d69478fbaf
  • ArchiveReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.tar.gz
  • Archive SHA-256 nowf675811a95b05382560bfca295d22e4831f46ca71fbc3345d2271ab7808c9df0
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-06T02:10:31Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.trail.json.sigstore ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.trail.json
ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.trail.jsonReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.trail.json.sigstoreReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.trail.mdRabbitMQ product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductRabbitMQ (rabbitmq) [MANIFEST.json]
  • Release tag4.4.0-CE-ubuntu24.04-r3 [MANIFEST.json]
  • Imagereadystack/rabbitmq:4.4.0-CE-ubuntu24.04-r3 [MANIFEST.json]
  • Image index digestsha256:f40ab0e574f425621a971c957e852f9b958f67daa5f33aa88f4ec7293c9d5f86 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:e24f1f6cb1d71dec99aa7dac8113109a43b2e274abf1d3b6a57029d69478fbaf [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.tar.gz (bytes 459936596) [MANIFEST.json]
  • Archive sha256 at publishf675811a95b05382560bfca295d22e4831f46ca71fbc3345d2271ab7808c9df0 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/rabbitmq/rabbitmq-server [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv4.4.0 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit24d5157cd415ef396c8ecd40a2d08c4d7ad3da9f [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash6a00d40c7e109fbc79b2ea0c758e0a1f5379590218d64004836ba2e4b329ebdb (files 3718) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:fb86378b4ee3bdc0516e0b55f1b32507286b6aba55f9c783d21cc569e5839a2f [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1792218268 (utc 2026-10-17T06:24:28Z) [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.rebuild.json, engine]
  • Engine commit(s)
    • commit 2f6b3554016d791d4b4d9411529494f4e7df273f · dirty yes · first drive 3499
    • commit a05f3a059db86d0f48eefb8f49eeeffc038669c8 · dirty yes · first drive 3519
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain819 (created 2026-11-05T04:52:14Z · trigger customer_request · upstream version 4.4.0) [chains, chains #819]
  • Requestbuild request #500 (rebuild) (requested at 2026-11-05T04:21:10Z · requested by kitforge-agent · version 4.4.0) [build_requests, build_requests #500]
  • Reasonrerelease agenda REVISION -> 4.4.0-CE-ubuntu24.04-r3 (decay loop, IMP-08) [build_requests, build_requests #500 request_reason]
  • Supersedesreadystack/rabbitmq:4.4.0-CE-ubuntu24.04-r2 (chain 677) [chains, chains #677]

The path through the harness

Fully recorded

1 chain · 3 drives · 18 stages · 2 rewinds

Chain 819 release · ready_to_ship

Created 2026-11-05T04:52:14Z, upstream 4.4.0, build request 500 [chains, chains #819]

DriveStartedMinutesBuild hostHow it stopped
34992026-11-05T04:52:38Z59.9build host 3 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #3499]
35192026-11-06T01:56:08Z4.5build host 3 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #3519]
35212026-11-06T02:05:03Z—build host 3 publish-held not recorded [drive_runs, drive_runs #3521]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-05T04:52:48Z2026-11-05T04:52:49Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 3b9e7b486aed…
acquire 2026-11-05T04:52:56Z2026-11-05T04:52:57Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree df64d0ad5408…
license_file 02a4e44df118…
custody_inputs 15b43bc0e1c3…
source_tree_hash d03be5a62fdc…
source_file_manifest e525dc399f90…
plan 2026-11-05T04:53:44Z2026-11-05T04:53:45Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 09fed51555b2…
input_pin_plan 258c5d273a3f…
toolchain_lock 1b268352c4e5…
assemble_kit 2026-11-05T05:08:29Z2026-11-05T05:08:30Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 680e243591a2…
build_recipe 886bc2d448d0…
system_pinning c4b255e8ddc0…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health bdefc4ab2442…
verify_offline_sh 3e8184ea230c…
base_image_digests 1906b2aa4352…
dockerfile_offline 680e243591a2…
first_build_digest c46c57abc7a2…
remediate 2026-11-05T05:09:18Z2026-11-05T05:09:19Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 481f0f19962a…
security_report 7757861a9ae6…
build_kit 2026-11-05T05:33:10Z2026-11-05T05:33:10Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp e7705d0d1371…
locked_digest 0e4398eb190c…
freeze_manifest 24427c9bd358…
offline_rebuild_transcript c726f3fa2040…
verdict 2026-11-05T05:34:28Z2026-11-05T05:34:29Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 39eca40c030f…
publish_image 2026-11-05T05:35:19Z2026-11-05T05:35:19Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 53b5689474b8…
promotion_record 4cdfac10aa13…
boot_instance 2026-11-05T05:35:32Z2026-11-05T05:35:35Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle f3d17bd032db…
sbom 2026-11-05T05:35:54Z2026-11-05T05:35:55Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md a3d8f0f09108…
sbom_json 3fbbd557f0c2…
schema_discovery 2026-11-05T05:35:58Z2026-11-05T05:35:58Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 7e524ebbf903…
dependency_tree 290fb5d4bd46…
table_classification 5a97eb5570ae…
admin_handbook 2026-11-05T05:36:08Z2026-11-05T05:36:09Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 5d6b9622215f…
admin_handbook a82b0a0064fc…
db_handbook 2026-11-05T05:36:20Z2026-11-05T05:36:21Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 0445fb63a697…
seed_isolation 0fcd2bf6d0de…
seed_data 2026-11-05T05:36:26Z2026-11-05T05:36:27Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql d05c356dae95…
seed_cases_json 4581858b3509…
seed_validate 2026-11-05T05:36:30Z2026-11-05T05:36:30Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 326e50c38430…
usecase_validate 2026-11-05T05:36:52Z2026-11-05T05:36:52Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests f2ee03101eae…
test_results 3452e47e69cd…
usecase_contract 29d9075aee62…
finalize_docs 2026-11-05T05:36:57Z2026-11-05T05:36:58Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json fc719434dfd9…
release_notes 57205ef9bed6…
api_integration_guide 93656354a7bc…
package_archive invalidated 2026-11-06T02:04:38Z 2026-11-05T05:52:31Z2026-11-06T02:00:36Z2
34 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 98cd3e552cbb…
checksums dfc2b1ea146b…
verify_md 4cbeca6da4b4…
rebuild_md b5905cdcd6a6…
manifest_txt e316529f3a7b…
actions_jsonl db188c7ef076…
provenance_md 34c29847e771…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 35b90573d3ca…

[stage_runs]

Rewinds

  • 2026-11-06T01:55:00Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #22917]
  • 2026-11-06T02:04:38Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #22925]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-06T02:00:36Z.

6 calls over 3 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 010981 —
remediate2001 013915 L-A08, L-038, L-036, L-034, L-032
usecase_validate2001 03384 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

2 rounds, 2 counted, $0.86 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-05T05:53:00Z 010 blocked to blocked [held_rounds, held_rounds #1402] $0.57 3 rounds, $40.00 7c4c3aface7d…
22026-11-06T02:01:02Z 000 clean to publish [held_rounds, held_rounds #1409] $0.29 3 rounds, $40.00 98cd3e552cbb…

Defects

Fully recorded
  • Ledger entries4 [defects, defects where product_slug=rabbitmq and this tag or chain]
  • Disclosed in the archive4 [docs/defects/defects.json, entries]

4 ledger entries: by severity high 2, low 2; by status open 2, fixed-before-release 2.

DefectSeverityStatusFound byFixed in
RSD-rabbitmq-3ef5d8605d
Ships a known default credential (guest) [defects, defects #154564]		highopenbuild strategy record—
RSD-rabbitmq-14da5b4fef
Admin handbook: Empty/broken heading markup splits the section title from its heading. [defects, defects #154565]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-3b5fd9f286
Security report: Directly follows the known default credential and reads as 'no defaults exist'. [defects, defects #154566]		lowopenheld review (review model)—
RSD-rabbitmq-43a949970f
Admin handbook: Migration section claims an upstream-written volume is used unchanged; it is not unless the hostname matches (contradicts the hostname-recovery section). [defects, defects #155244]		highfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:e24f1f6cb1d71dec99aa7dac8113109a43b2e274abf1d3b6a57029d69478fbaf · published digest sha256:e24f1f6cb1d71dec99aa7dac8113109a43b2e274abf1d3b6a57029d69478fbaf · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 690) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-06T02:05:29Z · failing Docker Scout counts 96 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-06T02:05:13Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3706622783 · transparency-log entry · integrated 2026-11-06T02:09:20Z) [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:f40ab0e574f425621a971c957e852f9b958f67daa5f33aa88f4ec7293c9d5f86 · state attached · log index 3706624720 · transparency-log entry
    • kind sbom · digest sha256:f40ab0e574f425621a971c957e852f9b958f67daa5f33aa88f4ec7293c9d5f86 · state attached · log index 3706625942 · transparency-log entry
    • kind vsa · digest sha256:f40ab0e574f425621a971c957e852f9b958f67daa5f33aa88f4ec7293c9d5f86 · state attached · log index 3706627867 · transparency-log entry
    • kind provenance · digest sha256:e24f1f6cb1d71dec99aa7dac8113109a43b2e274abf1d3b6a57029d69478fbaf · state attached · log index 3706629507 · transparency-log entry
    • kind sbom · digest sha256:e24f1f6cb1d71dec99aa7dac8113109a43b2e274abf1d3b6a57029d69478fbaf · state attached · log index 3706630768 · transparency-log entry
    • kind vsa · digest sha256:e24f1f6cb1d71dec99aa7dac8113109a43b2e274abf1d3b6a57029d69478fbaf · state attached · log index 3706632219 · transparency-log entry
    (at 2026-11-06T02:09:20Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/rabbitmq/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-05T05:53:05Z on build host 3 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:e24f1f6cb1d71dec99aa7dac8113109a43b2e274abf1d3b6a57029d69478fbaf [clean-room rebuild ledger, runs[585]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-05T05:35:19Z [stage_runs, stage_runs chain 819 stage publish_image]
  • Archive manifests written2026-11-06T02:07:09Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 776 · probed 2026-11-05T05:21:27Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-06T02:10:31Z generated: by KitForge release/build_trail.py · generator commit a05f3a059db86d0f48eefb8f49eeeffc038669c8
  • 2026-11-06T02:12:02Z publication: promoted at 2026-11-06T02:11:04Z · promoted digest sha256:f40ab0e574f425621a971c957e852f9b958f67daa5f33aa88f4ec7293c9d5f86 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 322 · checklist status complete · checklist at 2026-11-06T02:12:02Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/rabbitmq/4.4.0-CE-ubuntu24.04-r3/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/rabbitmq/4.4.0-CE-ubuntu24.04-r3/), as staged for publishing—
ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.rebuild.jsonbeside the archive (prodasset /data/production/rabbitmq/4.4.0-CE-ubuntu24.04-r3/), as staged for publishing—
ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r3.rebuild.json.sigstorebeside the archive (prodasset /data/production/rabbitmq/4.4.0-CE-ubuntu24.04-r3/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/rabbitmq/4.4.0-CE-ubuntu24.04-r3/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)500
chainssadb, ReadyStack's engine database (not published)819
defectssadb, ReadyStack's engine database (not published)rabbitmq 4.4.0-CE-ubuntu24.04-r3
drive_runssadb, ReadyStack's engine database (not published)chain 819
held_roundssadb, ReadyStack's engine database (not published)chain 819
lesson_recallssadb, ReadyStack's engine database (not published)chain 819
micro_step_runssadb, ReadyStack's engine database (not published)chain 819
release_imagessadb, ReadyStack's engine database (not published)rabbitmq 4.4.0-CE-ubuntu24.04-r3
stage_eventssadb, ReadyStack's engine database (not published)chain 819
stage_runssadb, ReadyStack's engine database (not published)chain 819
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—