RabbitMQ 4.4.0-CE-ubuntu24.04-r6 build trail

How ReadyStack built readystack/rabbitmq:4.4.0-CE-ubuntu24.04-r6 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/rabbitmq:4.4.0-CE-ubuntu24.04-r6
  • Index digestsha256:c77e227684678e86d8b53e4ec0d399281340ba41001cd7e48c06abeb3ee960b4
  • linux/amd64 digestsha256:2010c34a41a41b235a195c0838a1cec5751329c0aa154e487e19f8e39a7eb9a1
  • ArchiveReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.tar.gz
  • Archive SHA-256 nowbd9c8f6b0d89655dd8f51504dd3f4adb2a110d59071d171ba63024b0261e2397
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-13T15:19:15Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.trail.json.sigstore ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.trail.json
ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.trail.jsonReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.trail.json.sigstoreReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.trail.mdRabbitMQ product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductRabbitMQ (rabbitmq) [MANIFEST.json]
  • Release tag4.4.0-CE-ubuntu24.04-r6 [MANIFEST.json]
  • Imagereadystack/rabbitmq:4.4.0-CE-ubuntu24.04-r6 [MANIFEST.json]
  • Image index digestsha256:c77e227684678e86d8b53e4ec0d399281340ba41001cd7e48c06abeb3ee960b4 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:2010c34a41a41b235a195c0838a1cec5751329c0aa154e487e19f8e39a7eb9a1 [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.tar.gz (bytes 778661627) [MANIFEST.json]
  • Archive sha256 at publishbd9c8f6b0d89655dd8f51504dd3f4adb2a110d59071d171ba63024b0261e2397 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/rabbitmq/rabbitmq-server [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv4.4.0 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit24d5157cd415ef396c8ecd40a2d08c4d7ad3da9f [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash6a00d40c7e109fbc79b2ea0c758e0a1f5379590218d64004836ba2e4b329ebdb (files 3718) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:1ab485d3c80f45ecc53389224451f78d7cec593657a9fdfdf6ff496bf01ea363 [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794569012 (utc 2026-11-13T11:23:32Z) [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 · platform digest sha256:fea12ba16096adec0f699ce1c4da2154d320450e56c1f63671f95d2a3551c77b
    • ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
    [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.rebuild.json, engine]
  • Engine commit(s)
    • commit 71a44fbbff4a170120e7b70cc06969e04184c642 · dirty yes · first drive 4568
    • commit 6dbc7d85edabbf8f3daffba6b70538bf49f545d8 · dirty yes · first drive 4591
    • commit 4abf16c48ca86f76f9a457e2b5ddcb5e2b37aedf · dirty yes · first drive 4600
    • commit f264c5a93fc5fe548e62fe3bfbeb279b813432b8 · dirty yes · first drive 4603
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain1073 (created 2026-11-13T12:09:46Z · trigger customer_request · upstream version 4.4.0) [chains, chains #1073]
  • Requestbuild request #750 (rebuild) (requested at 2026-11-13T11:23:34Z · requested by kitforge-agent · version 4.4.0) [build_requests, build_requests #750]
  • Reasonrerelease agenda REVISION -> 4.4.0-CE-ubuntu24.04-r6 (decay loop, IMP-08) [build_requests, build_requests #750 request_reason]
  • Supersedesreadystack/rabbitmq:4.4.0-CE-ubuntu24.04-r5 (chain 1001) [chains, chains #1001]

The path through the harness

Fully recorded

1 chain · 4 drives · 18 stages · 3 rewinds

Chain 1073 release · ready_to_ship

Created 2026-11-13T12:09:46Z, upstream 4.4.0, build request 750 [chains, chains #1073]

DriveStartedMinutesBuild hostHow it stopped
45682026-11-13T12:10:15Z78.1build host 2 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4568]
45912026-11-13T14:10:21Z4.4build host 2 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4591]
46002026-11-13T14:46:38Z4.2build host 2 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4600]
46032026-11-13T15:12:15Z—build host 2 publish-held not recorded [drive_runs, drive_runs #4603]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-13T12:10:26Z2026-11-13T12:10:26Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 13f81f66c5a3…
acquire 2026-11-13T12:10:35Z2026-11-13T12:10:36Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree df64d0ad5408…
license_file 02a4e44df118…
custody_inputs 15b43bc0e1c3…
source_tree_hash d03be5a62fdc…
source_file_manifest e525dc399f90…
plan 2026-11-13T12:11:24Z2026-11-13T12:11:25Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report fba551e6705c…
input_pin_plan b34f44ac57b3…
toolchain_lock 1a4d35dc3229…
assemble_kit 2026-11-13T12:26:13Z2026-11-13T12:26:13Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile d3b72954bedd…
build_recipe b42297fdd3e7…
system_pinning aa8db05a9a8a…
build_offline_sh 6ab4f08a6ec7…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 9376a6eddded…
verify_offline_sh 3e8184ea230c…
base_image_digests 1906b2aa4352…
dockerfile_offline d3b72954bedd…
first_build_digest 6cc2eddadc50…
remediate 2026-11-13T12:27:13Z2026-11-13T12:27:14Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log fb6c73731539…
security_report 1529bbf2d32f…
build_kit 2026-11-13T12:51:23Z2026-11-13T12:51:24Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 2444d2997147…
locked_digest 07a7d46935f4…
freeze_manifest b1ab07fab9bf…
offline_rebuild_transcript 07849a1e16a4…
verdict 2026-11-13T12:52:23Z2026-11-13T12:52:24Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 614978be6d1b…
publish_image 2026-11-13T12:53:11Z2026-11-13T12:53:12Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme f1e24231cb05…
promotion_record 6ab7620d01f8…
boot_instance 2026-11-13T12:53:25Z2026-11-13T12:53:28Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 4c35651eb58f…
sbom 2026-11-13T12:53:46Z2026-11-13T12:53:47Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md a99c634cd038…
sbom_json 753e7a458b1e…
schema_discovery 2026-11-13T12:53:50Z2026-11-13T12:53:51Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 7e524ebbf903…
dependency_tree 290fb5d4bd46…
table_classification 5a97eb5570ae…
admin_handbook 2026-11-13T12:59:36Z2026-11-13T12:59:36Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 5d6b9622215f…
admin_handbook 347b8d022109…
db_handbook 2026-11-13T13:05:16Z2026-11-13T13:05:17Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 6c79a10c0bf5…
seed_isolation 0fcd2bf6d0de…
seed_data 2026-11-13T13:05:25Z2026-11-13T13:05:25Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql d05c356dae95…
seed_cases_json f852a34e78b6…
seed_validate 2026-11-13T13:05:28Z2026-11-13T13:05:28Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 9458a1cf3718…
usecase_validate 2026-11-13T13:05:57Z2026-11-13T13:05:58Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests 9ca7bd412ecb…
test_results 7b46c764196d…
usecase_contract 0dd3156bcbc6…
finalize_docs 2026-11-13T13:11:01Z2026-11-13T13:11:02Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 4c5482579b83…
release_notes 4fb93a3997e6…
api_integration_guide f73c4f26f18d…
package_archive invalidated 2026-11-13T15:11:50Z 2026-11-13T13:28:15Z2026-11-13T14:50:51Z3
37 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 unpack_files
  • G8 scout_grade_a
  • G8 script_copies
  • G8 upgrade_check
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 72303e292d06…
checksums 2ed3c27abce1…
verify_md 1b3822fa653a…
rebuild_md 421046541be8…
manifest_txt f19162e525b0…
actions_jsonl 3ad0feb7694c…
provenance_md 7131980fb341…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 1313d701cb99…

[stage_runs]

Rewinds

  • 2026-11-13T14:09:34Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #36209]
  • 2026-11-13T14:40:20Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #36295]
  • 2026-11-13T15:11:50Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #36436]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-13T14:50:51Z.

93 calls over 6 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 011519 —
remediate2001 015013 L-A08, L-038, L-036, L-034, L-032
admin_handbook29803 1146761 —
db_handbook30903 2151169 —
usecase_validate1001 02213 —
finalize_docs29803 1142026 —

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

3 rounds, 3 counted, $4.72 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-13T13:29:43Z 6420 findings to repackage [held_rounds, held_rounds #1881] $1.96 3 rounds, $40.00 a90347751d38…
22026-11-13T14:15:24Z 049 findings to repackage [held_rounds, held_rounds #1886] $1.48 3 rounds, $40.00 dc59bc0dc0d4…
32026-11-13T14:51:33Z 007 clean to publish [held_rounds, held_rounds #1889] $1.28 3 rounds, $40.00 72303e292d06…

Defects

Fully recorded
  • Ledger entries51 [defects, defects where product_slug=rabbitmq and this tag or chain]
  • Disclosed in the archive51 [docs/defects/defects.json, entries]

51 ledger entries: by severity high 7, low 38, critical 6; by status open 4, fixed-before-release 47.

DefectSeverityStatusFound byFixed in
RSD-rabbitmq-decaa354f9
Ships a known default credential (guest) [defects, defects #281097]		highopenbuild strategy record—
RSD-rabbitmq-977f403cab
Docker Hub README: 'a replicated queue keeps the orders safe if a broker node fails' is not possible on a one-node image (RSD-rabbitmq-7c6086743d). [defects, defects #281098]		lowopenheld review (review model)—
RSD-rabbitmq-d22fc98073
Docker Hub README: The problem named by the open RSD-rabbitmq-7c6086743d stands: the README still advertises MQTT and STOMP, which the image does not enable. [defects, defects #281099]		lowopenheld review (review model)—
RSD-rabbitmq-d3e3a20ab8
Security report: Directly follows the known default credential and reads as 'no defaults exist'. [defects, defects #281100]		lowopenheld review (review model)—
RSD-rabbitmq-59a61c9a44
Admin handbook: The documented stop/rm/re-run block omits --hostname and says the broker resumes the data; it silently starts empty. [defects, defects #282252]		criticalfixed-before-releaseheld review (review model)—
RSD-rabbitmq-ab1af43fe0
Admin handbook: Replacement example omits --hostname (so it starts an empty broker) and never removes the original, whose ports 5672/15672/15692 it republishes. [defects, defects #282253]		criticalfixed-before-releaseheld review (review model)—
RSD-rabbitmq-b05698b278
Admin handbook: The restore block feeds backup.tar on stdin without `docker run -i`, so tar reads nothing, the restore fails and the new volume stays empty; the restored broker then starts empty. [defects, defects #282254]		criticalfixed-before-releaseheld review (review model)—
RSD-rabbitmq-21ffdb7c5b
Database handbook: The backup command has `-cf .` (archive file named '.') instead of `-cf - .`, so it writes no archive and leaves an empty backup.tar. [defects, defects #282255]		criticalfixed-before-releaseheld review (review model)—
RSD-rabbitmq-f835724691
Database handbook: The restore command has no `-C /var/lib/rabbitmq` and no `< backup.tar`: tar reads the terminal/empty stdin and extracts into / as a non-root user, restoring nothing. [defects, defects #282256]		criticalfixed-before-releaseheld review (review model)—
RSD-rabbitmq-71720b167d
Database handbook: The restore block runs without `-i`, so the archive piped in on stdin never reaches tar; it also needs an `ubuntu:24.04` image that is not part of this release, and its root user would write… [defects, defects #282257]		criticalfixed-before-releaseheld review (review model)—
RSD-rabbitmq-d480037f2f
Database handbook: False security statement: the documented -p flags publish on all interfaces, not localhost; a reader would leave the guest/guest broker open believing it is local-only. [defects, defects #282258]		highfixed-before-releaseheld review (review model)—
RSD-rabbitmq-1d82c49bed
API guide: Says a new container resumes the data with the same --name; only the hostname selects the data directory, so a same-named replacement without --hostname starts empty. [defects, defects #282259]		highfixed-before-releaseheld review (review model)—
RSD-rabbitmq-7010ba29d2
API guide: Unconditional claim that a recreated container resumes; contradicts lines 518-520 and was measured false without --hostname. [defects, defects #282260]		highfixed-before-releaseheld review (review model)—
RSD-rabbitmq-7aeace84b8
Release notes: The upgrade instruction leaves out the hostname condition; following it as written gives an empty broker. [defects, defects #282261]		highfixed-before-releaseheld review (review model)—
RSD-rabbitmq-97155c3074
Admin handbook: A literal backslash-n sits in the table separator line, so the ports table does not render and the 5672 row is lost. [defects, defects #282262]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-6bf2e6267b
Admin handbook: Wrong Docker behaviour (and contradicts API_INTEGRATION_GUIDE.md:588). [defects, defects #282263]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-70007b2bc3
Admin handbook: Omits that the mounted file must be readable by uid 999; a mode-600 host file (the mode docker cp and many editors leave) stops the broker from starting. [defects, defects #282264]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-8be5f45d2f
Admin handbook: Round-1 finding class still present: words after the image name do not always leave the broker starting normally. [defects, defects #282265]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-22bb0f4062
Database handbook: Says the launcher ignores arguments; -detached makes the container exit. [defects, defects #282266]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-9c5039ae9d
API guide: Contradicts ADMIN_HANDBOOK.md:766 and the measurement: an unrecognized word does not make rabbitmq-server exit. [defects, defects #282267]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-466cabd5b9
Admin handbook: Says plugin changes must be re-applied across container restarts; they persist across restart (only lost on removal). [defects, defects #282268]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-39f8cc3aef
API guide: Same false 'restart' claim as ADMIN_HANDBOOK.md:796. [defects, defects #282269]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-17b9801cf5
API guide: Contradicts line 729 and the measurement. [defects, defects #282270]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-9bd501c807
Database handbook: Round-3 finding not fixed: the example starts `rabbitmq-new` on the same volume and hostname without removing `rabbitmq`, which the handbook itself says puts two brokers on one data directory (lines… [defects, defects #282271]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-0e0e069c73
Database handbook: The image HEALTHCHECK runs check_running, not an HTTP poll of /metrics (contradicts lines 129, 260, 576). [defects, defects #282272]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-8a98a26bd9
Database handbook: The login page is unauthenticated and stays so after guest is deleted; contradicts lines 403, 486. [defects, defects #282273]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-500926dae0
API guide: Round-3 finding class still present: 'no extra processes' contradicts the helper-process list at lines 612-617. [defects, defects #282274]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-e5e4bc5f1c
API guide: Says the BEAM VM runs as PID 1; PID 1 is the sh launcher and beam.smp is PID 10 (contradicts lines 72, 610). [defects, defects #282275]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-573778a7ae
API guide: False: a new user has no vhost permissions by default (contradicts ADMIN_HANDBOOK.md:917); also line 782 gives set_user_tags as the way to grant a new admin 'administrative permissions' and never… [defects, defects #282276]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-940524f0be
API guide: The example `rabbitmqctl export_definitions <filename>` with a plain file name fails in the container, and a file written inside the container is lost when it is removed. [defects, defects #282277]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-5e619e5408
API guide: Contradicts ADMIN_HANDBOOK.md:476 and the image HEALTHCHECK, which name check_running as the authoritative check. [defects, defects #282278]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-1355ebf7b8
Admin handbook: `--user 999:999` is the image's own user and cannot make the broker write as the reader's uid. [defects, defects #282279]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-9f438f2e9b
Admin handbook: A stopped container runs no broker, so it cannot put two brokers on one data directory; the sentence also contradicts the stop-then-replace flow. [defects, defects #282280]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-8f8d8ac395
Database handbook: 'No wrapper script' contradicts the same paragraph, where PID 1 is the rabbitmq-server shell script. [defects, defects #282281]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-e37e9eec09
Admin handbook: Restore block extracts into the volume named rabbitmq-data, the volume the broker already uses, while the text says 'empty volume'. [defects, defects #283710]		highfixed-before-releaseheld review (review model)—
RSD-rabbitmq-c4e8fbcd86
Admin handbook: The start command after the restore must use the volume the archive was extracted into (the new one), as ADMIN_HANDBOOK.md:624 does. [defects, defects #283711]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-2efa4d39c5
Database handbook: Restore block extracts into the volume named rabbitmq-data, the volume the broker already uses, while the text says 'empty volume'. [defects, defects #283712]		highfixed-before-releaseheld review (review model)—
RSD-rabbitmq-8dc9fd070b
Database handbook: Start command must mount the volume the archive was extracted into. [defects, defects #283713]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-20b6426ed8
Database handbook: Start command must mount the volume the archive was extracted into. [defects, defects #283714]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-617adeb371
API guide: set_user_tags does not grant any permission; a new admin created exactly as step 1 describes has no vhost permissions (AMQP access refused). [defects, defects #283715]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-4a4e345f21
Database handbook: The endpoint serves the Prometheus text format, not OpenMetrics; contradicts line 243. [defects, defects #283716]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-fd9084304d
Database handbook: Another program (sh running the disk monitor) runs beside the listed ones. [defects, defects #283717]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-3ba504185c
Database handbook: The numbered steps remove the container before telling the reader to know its hostname, which then cannot be read from Docker. [defects, defects #283718]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-02a8b47cff
Admin handbook: The command takes the password unquoted; add single quotes and say so. [defects, defects #283719]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-a296ced834
API guide: Bare rabbitmqctl lines (also line 823) are shown as run on the host; they need docker exec <container>. [defects, defects #283720]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-94c919883c
API guide: Bare rabbitmqctl line shown as run on the host (the r2 finding named this line 823/824 too; only list_feature_flags was fixed). [defects, defects #285228]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-2edaf3562d
API guide: `rabbitmqctl status` never names Khepri, and its `mnesia: 0.0 gb` line is in the Memory section (RAM used), not disk usage. [defects, defects #285229]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-e6b64a7b16
Database handbook: `rabbitmqctl status` does not report the metadata store type or feature flags; only list_feature_flags confirms khepri_db. [defects, defects #285230]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-e180cdea69
Database handbook: The restore start command reuses the name `rabbitmq` while the stopped original container still holds it; unlike the same procedure at DB_HANDBOOK.md:333 and ADMIN_HANDBOOK.md:563, this block has no… [defects, defects #285231]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-6a507dfef3
Database handbook: Same class as the r2 finding fixed at the API guide: a user created as step 1 describes has a tag but no vhost permissions, so AMQP access is refused. [defects, defects #285232]		lowfixed-before-releaseheld review (review model)—
RSD-rabbitmq-63e9a2dc55
Admin handbook: The quoted error text omits the quotes around 'rabbit' that the tool prints. [defects, defects #285233]		lowfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:2010c34a41a41b235a195c0838a1cec5751329c0aa154e487e19f8e39a7eb9a1 · published digest sha256:2010c34a41a41b235a195c0838a1cec5751329c0aa154e487e19f8e39a7eb9a1 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 703) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-13T15:12:40Z · failing Docker Scout counts 17 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-13T15:12:25Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3856708072 · transparency-log entry · integrated 2026-11-13T15:16:48Z) [ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:c77e227684678e86d8b53e4ec0d399281340ba41001cd7e48c06abeb3ee960b4 · state attached · log index 3856711214 · transparency-log entry
    • kind sbom · digest sha256:c77e227684678e86d8b53e4ec0d399281340ba41001cd7e48c06abeb3ee960b4 · state attached · log index 3856713858 · transparency-log entry
    • kind vsa · digest sha256:c77e227684678e86d8b53e4ec0d399281340ba41001cd7e48c06abeb3ee960b4 · state attached · log index 3856715920 · transparency-log entry
    • kind provenance · digest sha256:2010c34a41a41b235a195c0838a1cec5751329c0aa154e487e19f8e39a7eb9a1 · state attached · log index 3856717733 · transparency-log entry
    • kind sbom · digest sha256:2010c34a41a41b235a195c0838a1cec5751329c0aa154e487e19f8e39a7eb9a1 · state attached · log index 3856719575 · transparency-log entry
    • kind vsa · digest sha256:2010c34a41a41b235a195c0838a1cec5751329c0aa154e487e19f8e39a7eb9a1 · state attached · log index 3856722131 · transparency-log entry
    (at 2026-11-13T15:16:49Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/rabbitmq/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-13T13:29:49Z on build host 3 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:2010c34a41a41b235a195c0838a1cec5751329c0aa154e487e19f8e39a7eb9a1 [clean-room rebuild ledger, runs[836]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-13T12:53:12Z [stage_runs, stage_runs chain 1073 stage publish_image]
  • Archive manifests written2026-11-13T15:14:45Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 183 · probed 2026-11-13T12:39:24Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-13T15:19:15Z generated: by KitForge release/build_trail.py · generator commit f264c5a93fc5fe548e62fe3bfbeb279b813432b8
  • 2026-11-13T15:21:06Z publication: promoted at 2026-11-13T15:20:06Z · promoted digest sha256:c77e227684678e86d8b53e4ec0d399281340ba41001cd7e48c06abeb3ee960b4 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 549 · checklist status complete · checklist at 2026-11-13T15:21:06Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/rabbitmq/4.4.0-CE-ubuntu24.04-r6/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/rabbitmq/4.4.0-CE-ubuntu24.04-r6/), as staged for publishing—
ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.rebuild.jsonbeside the archive (prodasset /data/production/rabbitmq/4.4.0-CE-ubuntu24.04-r6/), as staged for publishing—
ReadyStack-rabbitmq-4.4.0-CE-ubuntu24.04-r6.rebuild.json.sigstorebeside the archive (prodasset /data/production/rabbitmq/4.4.0-CE-ubuntu24.04-r6/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/rabbitmq/4.4.0-CE-ubuntu24.04-r6/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)750
chainssadb, ReadyStack's engine database (not published)1073
defectssadb, ReadyStack's engine database (not published)rabbitmq 4.4.0-CE-ubuntu24.04-r6
drive_runssadb, ReadyStack's engine database (not published)chain 1073
held_roundssadb, ReadyStack's engine database (not published)chain 1073
lesson_recallssadb, ReadyStack's engine database (not published)chain 1073
micro_step_runssadb, ReadyStack's engine database (not published)chain 1073
release_imagessadb, ReadyStack's engine database (not published)rabbitmq 4.4.0-CE-ubuntu24.04-r6
stage_eventssadb, ReadyStack's engine database (not published)chain 1073
stage_runssadb, ReadyStack's engine database (not published)chain 1073
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—