SeaweedFS 4.53-CE-ubuntu24.04-r2 build trail

How ReadyStack built readystack/seaweedfs:4.53-CE-ubuntu24.04-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/seaweedfs:4.53-CE-ubuntu24.04-r2
  • Index digestsha256:cca245fd70501798e468da889d9778fa163d38bea3fdb75e111cf88707eb10e7
  • linux/amd64 digestsha256:1fbd01e37630a1a005dde1363923a23c0375efe6095b1d7ca5300a5551324122
  • ArchiveReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.tar.gz
  • Archive SHA-256 now938e8d094eb1ee57f91356bd9ccf3e669bffe628de64ed5753cba3c1822e8ee6
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-10T23:48:53Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.trail.json.sigstore ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.trail.json
ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.trail.jsonReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.trail.json.sigstoreReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.trail.mdSeaweedFS product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductSeaweedFS (seaweedfs) [MANIFEST.json]
  • Release tag4.53-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Imagereadystack/seaweedfs:4.53-CE-ubuntu24.04-r2 [MANIFEST.json]
  • Image index digestsha256:cca245fd70501798e468da889d9778fa163d38bea3fdb75e111cf88707eb10e7 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:1fbd01e37630a1a005dde1363923a23c0375efe6095b1d7ca5300a5551324122 [ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.tar.gz (bytes 681235512) [MANIFEST.json]
  • Archive sha256 at publish938e8d094eb1ee57f91356bd9ccf3e669bffe628de64ed5753cba3c1822e8ee6 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/seaweedfs/seaweedfs [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream ref4.53 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commit4ab66fb76da83700739f5839e62fcaf15fb7d02a [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash42c6c5f14034063085988ec79814542c769e3d1a464c2ded43a31a85925f76f6 (files 4598) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:31fd1544d2b57006f5f076fefda2e21b21cd84a9e71ea2cd6b0d7e0f56ee21de [ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794295409 (utc 2026-11-10T07:23:29Z) [ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af · platform digest sha256:88750ccdd0f2a77fcc00a14b1a48d6409bd8ddb5d7c2dd6ec0b4a2e916daf9d9
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.rebuild.json, engine]
  • Engine commit(s)
    • commit 7dfd29d7f5001fb8fadf7d3fa0d9223cd56a6365 · dirty yes · first drive 4163
    • commit 14531f828dd0c98d373f35eac9ad1b23f9a23459 · dirty yes · first drive 4186
    • commit 0dee9fe68efd869f4c5239279e534f05f77682af · dirty yes · first drive 4201
    • commit e05220953a8a35bb19afca75bce1637a21d4c290 · dirty yes · first drive 4209
    • commit 1e12108047d40ec72e593f39c24455ea312ddb43 · dirty yes · first drive 4220
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain954 (created 2026-11-10T07:40:18Z · trigger customer_request · upstream version 4.53) [chains, chains #954]
  • Requestbuild request #636 (rebuild) (requested at 2026-11-10T07:23:30Z · requested by kitforge-agent · version 4.53) [build_requests, build_requests #636]
  • Reasonrerelease agenda REVISION -> 4.53-CE-ubuntu24.04-r2 (decay loop, IMP-08) [build_requests, build_requests #636 request_reason]
  • Supersedesreadystack/seaweedfs:4.53-CE-ubuntu24.04-r1 (chain 921) [chains, chains #921]

The path through the harness

Fully recorded

1 chain · 5 drives · 18 stages · 3 rewinds

Chain 954 release · ready_to_ship

Created 2026-11-10T07:40:18Z, upstream 4.53, build request 636 [chains, chains #954]

DriveStartedMinutesBuild hostHow it stopped
41632026-11-10T07:40:46Z48.5build host 1 withhold-publish stage_failed at package_archive; first failed check exists:checksums; 18 ticks [drive_runs, drive_runs #4163]
41862026-11-10T21:19:59Z9.6build host 1 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4186]
42012026-11-10T22:34:22Z4.5build host 1 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4201]
42092026-11-10T23:05:33Z4.5build host 1 withhold-publish ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4209]
42202026-11-10T23:42:24Z—build host 1 publish-held not recorded [drive_runs, drive_runs #4220]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-10T07:40:57Z2026-11-10T07:40:57Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json a024086a19da…
acquire 2026-11-10T07:41:07Z2026-11-10T07:41:08Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 6059d25e7110…
license_file d789d433cc11…
custody_inputs ba32fe65e0f7…
source_tree_hash 884ceaace939…
source_file_manifest 8857ebb55e10…
plan 2026-11-10T07:41:42Z2026-11-10T07:41:42Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report e5cec1f3da74…
input_pin_plan 314c7c780b67…
toolchain_lock 83372fd14bdd…
assemble_kit 2026-11-10T07:48:22Z2026-11-10T07:48:23Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 1f466afe8b32…
build_recipe 5da26599d701…
system_pinning aa8db05a9a8a…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health ac952ce979fe…
verify_offline_sh 3e8184ea230c…
base_image_digests f108985631dd…
dockerfile_offline 1f466afe8b32…
first_build_digest c54704376e88…
remediate 2026-11-10T07:48:55Z2026-11-10T07:48:56Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 1972b3151390…
security_report 8646b0daf8ea…
build_kit 2026-11-10T07:56:23Z2026-11-10T07:56:24Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 59718c1ac268…
locked_digest 23ad25943a26…
freeze_manifest 4739d3005c8d…
offline_rebuild_transcript 0468b26aeab7…
verdict 2026-11-10T07:57:05Z2026-11-10T07:57:06Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict b6368d6f87cc…
publish_image 2026-11-10T07:57:42Z2026-11-10T07:57:43Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme 64762d596aff…
promotion_record c69eb5b9939c…
boot_instance 2026-11-10T07:57:53Z2026-11-10T07:57:58Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle e255e631863c…
sbom 2026-11-10T07:58:10Z2026-11-10T07:58:11Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 2a68ef6bee13…
sbom_json 9a35a4626935…
schema_discovery 2026-11-10T07:58:13Z2026-11-10T07:58:14Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 496027682ffd…
dependency_tree e39f2fcc43cf…
table_classification b6f29090da43…
admin_handbook 2026-11-10T08:14:37Z2026-11-10T08:14:38Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map c2571b35a94a…
admin_handbook 7f54df4260d4…
db_handbook 2026-11-10T08:25:03Z2026-11-10T08:25:03Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook af1c564f042d…
seed_isolation c8258f1718be…
seed_data 2026-11-10T08:25:09Z2026-11-10T08:25:10Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql bb45adceb563…
seed_cases_json 87b03c33ba12…
seed_validate 2026-11-10T08:25:13Z2026-11-10T08:25:14Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 12d754003f91…
usecase_validate 2026-11-10T08:25:30Z2026-11-10T08:25:31Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests 1ff7780985eb…
test_results 764df4421914…
usecase_contract e158a408eeb0…
finalize_docs 2026-11-10T08:25:38Z2026-11-10T08:25:39Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json a660eee7f420…
release_notes 703e85a8ee3e…
api_integration_guide 976bed45f540…
package_archive invalidated 2026-11-10T23:42:02Z 2026-11-10T08:29:14Z2026-11-10T23:10:03Z4
35 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 8aca08246726…
checksums e8c7190d5f2e…
verify_md 88f42d8c55d8…
rebuild_md ef428ff8d615…
manifest_txt 97d1983ba520…
actions_jsonl 97d5cc19d168…
provenance_md 7cc21db0def8…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 29d1bc40df98…

[stage_runs]

Rewinds

  • 2026-11-10T22:08:46Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #30792]
  • 2026-11-10T23:04:46Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #30901]
  • 2026-11-10T23:42:02Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #30936]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-10T23:10:03Z.

127 calls over 5 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 07841 L-A183, L-A15
remediate2001 08048 L-A183, L-A15
admin_handbook763003 6851194 L-A180, L-A181, L-A182, L-A183, L-A184, L-A155, L-A114, L-A25, L-A15, L-A14
db_handbook46803 1446212 L-A180, L-A181, L-A182, L-A183, L-A184, L-A114, L-A15
usecase_validate1001 01919 L-A59

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

3 rounds, 3 counted, $7.05 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-10T21:30:38Z 0832 findings to repackage [held_rounds, held_rounds #1698] $2.59 3 rounds, $40.00 f2669a0c9f07…
22026-11-10T22:39:26Z 0118 findings to repackage [held_rounds, held_rounds #1708] $2.11 3 rounds, $40.00 a2b3b18f7cee…
32026-11-10T23:10:35Z 006 clean to publish [held_rounds, held_rounds #1711] $2.35 3 rounds, $40.00 8aca08246726…

Defects

Fully recorded
  • Ledger entries64 [defects, defects where product_slug=seaweedfs and this tag or chain]
  • Disclosed in the archive64 [docs/defects/defects.json, entries]

64 ledger entries: by severity high 9, low 55; by status fixed-before-release 64.

DefectSeverityStatusFound byFixed in
RSD-seaweedfs-edf656b75f
Admin handbook: Ran the example as written: identities.json with name admin and one credential (no actions), mounted with -v ./identities.json:/etc/seaweedfs/identities.json:ro and SEAWEEDFS_S3_CONFIG in the env… [defects, defects #231410]		highfixed-before-releaseheld review (review model)—
RSD-seaweedfs-01eb6e90a6
Admin handbook: Same run as ADMIN_HANDBOOK.md:849 (held-run 010): the example identity at lines 927-941 has no actions and every request signed with ADMIN_KEY returned 403; with actions it returned 200. [defects, defects #231411]		highfixed-before-releaseheld review (review model)—
RSD-seaweedfs-63b6257d98
Database handbook: DB_HANDBOOK.md:204 says 'Other ports listen on the container's loopback interface only' and lists 18333 in that list. [defects, defects #231412]		highfixed-before-releaseheld review (review model)—
RSD-seaweedfs-080e7aca71
Admin handbook: Live: container started with SEAWEEDFS_S3_ACCESS_KEY/SECRET_KEY (held-run 2): curl http://localhost:<port>/healthz -> 200 and /status -> 200 unsigned. [defects, defects #231413]		highfixed-before-releaseheld review (review model)—
RSD-seaweedfs-56703dc2d5
Admin handbook: Live /healthz and /status unsigned -> 200 with credentials configured (held-run 2). [defects, defects #231414]		highfixed-before-releaseheld review (review model)—
RSD-seaweedfs-c3f8f95265
Database handbook: Ran the documented command on the running container (held-run 007, 'B'): seaweedfs-logs.txt is 0 bytes, because `2>&1 > file` sends stderr to the terminal and only stdout (empty: the container logs… [defects, defects #231415]		highfixed-before-releaseheld review (review model)—
RSD-seaweedfs-5df52a1966
Database handbook: docs/REBUILD.md: 'it does not contain the image itself'; rule L-A25 forbids saying the archive/recipe includes the image or its layers. [defects, defects #231416]		highfixed-before-releaseheld review (review model)—
RSD-seaweedfs-711b3ca9e2
Admin handbook: Live: docker exec ... rs-probe -code http://127.0.0.1:8333/bkt1 -> 403; with -sigv4 aws:amz:us-east-1:s3 -user 'mykey:my new pass $x!' -> 200 (held-run 007). rs-probe.go usage: signing needs -sigv4… [defects, defects #231417]		highfixed-before-releaseheld review (review model)—
RSD-seaweedfs-6a910d0178
Admin handbook: Live: docker exec -e AWS_ACCESS_KEY_ID=mykey -e AWS_SECRET_ACCESS_KEY=... [defects, defects #231418]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-eb068c3e18
Admin handbook: Live: after docker stop, the documented run command fails: 'docker: Error response from daemon: Conflict. [defects, defects #231419]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-4a0d423dad
Admin handbook: An unset $x expands to nothing, so the unquoted value is `pass!`, as Operating facts measured for `strongpass$x!99` -> `strongpass!99`. [defects, defects #231420]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-ee4f85f53a
Database handbook: `99` appears nowhere in the example; Operating facts measured `strongpass$x!99` -> `strongpass!99` and a value with a space -> docker reads the next word as the image name. [defects, defects #231421]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-c438106c4b
Admin handbook: WEED_MASTER_VOLUME_GROWTH_COPY_1 is an environment variable; -volume.max sets the slot count (Operating facts 'Bucket capacity'), so it is not an alternative way to change the number of volumes a… [defects, defects #231422]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-0d119facf2
Admin handbook: validation/test-results.json holds only GET /healthz and GET /status; the Operating facts list PUT bucket, PUT/GET object, multipart, list, delete; no record shows aws-cli or an object copy run… [defects, defects #231423]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-0b737a706a
Database handbook: The records test objects (20 MB, 41 MB multipart, 22 buckets) across re-create and credential rotation; no record tests object copies across restarts or rotation. [defects, defects #231424]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-ba74cd4961
Admin handbook: API_INTEGRATION_GUIDE.md lists only GET /healthz and GET /status as verified and a two-row routing table; it has no request/response examples or response formats for signed S3 calls. [defects, defects #231425]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-92e637b21d
Admin handbook: API_INTEGRATION_GUIDE.md ('It does not list request fields') has no request headers, query parameters or response formats. [defects, defects #231426]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-47c5144a0c
Database handbook: API guide has two verified requests and a routing table, no request/response examples. [defects, defects #231427]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-4f4c50b02b
Database handbook: The guide gives no integration examples, request formats or complete endpoint documentation ('It does not list request fields'). [defects, defects #231428]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-595aae65b8
Database handbook: Same as DB_HANDBOOK.md:885; the preceding sentence 'This list reflects the methods verified on this release' also overstates: only GET /healthz and /status were verified as requests, the… [defects, defects #231429]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-46f2a741a5
Admin handbook: S3 multipart uploads are POST /<bucket>/<key>?uploads and ?uploadId=...; ADMIN_HANDBOOK.md:245 and :1167 differ from each other. [defects, defects #231430]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-08e35636c9
Admin handbook: Multipart initiation/completion are POSTs on the object path (/<bucket>/<key>?uploads, ?uploadId=...); DB_HANDBOOK.md:913 itself writes `/{bucket}/{key}?uploads`; part listing is a GET. [defects, defects #231431]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-42e4a8e2d5
Database handbook: Live: POST /bkt1?delete -> 200, POST /?delete -> 403 (held-run 007). [defects, defects #231432]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-057136b7d6
Admin handbook: Live: copy was PUT /bkt1/k1copy with x-amz-copy-source: /bkt1/k1 -> 200 and the same body (held-run 007); ADMIN_HANDBOOK.md:1126 itself says 'via PUT'. [defects, defects #231433]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-958b92d016
Admin handbook: Operating facts 'Bucket capacity': 22 buckets were the number tested, 8 of 31 slots free, and roughly one bucket per free GiB; this sentence turns the tested count into a capacity of about 22… [defects, defects #231434]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-b966230819
Admin handbook: Operating facts 'Backup': only the object overwritten after the backup answered 500; other objects stayed readable and listed. [defects, defects #231435]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-366d95b215
Admin handbook: Operating facts 'Backup' states what was tested; 'objects may answer HTTP 500 permanently' generalises one object to all. [defects, defects #231436]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-9cea94b3c8
Admin handbook: Operating facts 'Backup': the deleted object did NOT come back (this line says it may reappear), post-backup objects and buckets stayed listed (this line says they may not persist: the round-2/3… [defects, defects #231437]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-044269637b
Database handbook: Operating facts 'Backup': one overwritten object answered 500, not 'objects'. [defects, defects #231438]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-5716edd0b8
Database handbook: Same as DB_HANDBOOK.md:1528. [defects, defects #231439]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-3dff848251
Admin handbook: Operating facts 'Health check': 3-11 s fresh, 13-21 s on an existing volume (round-3 finding 'within a few seconds', still present). [defects, defects #231440]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-cfa7fdffa0
Database handbook: Operating facts 'Health check' (same round-3 finding as DB:336 wording). [defects, defects #231441]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-961e750cf3
Database handbook: Contradicts DB_HANDBOOK.md:750 and Operating facts 'Health check' (13-21 s on an existing volume); same handbook, Upgrading section. [defects, defects #231442]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-682a280386
Admin handbook: Operating facts 'Upgrading' (ADMIN_HANDBOOK.md:323) records 14.1 and 17.5 seconds; 15-17 s is not what was measured. [defects, defects #231443]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-04df95885c
Admin handbook: The commands that follow only stop and remove the container, and step 2 says the old volume still exists. [defects, defects #231444]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-293aaeced4
Database handbook: A path-based volume is a bind mount; the preceding paragraph and Operating facts say a host directory must be owned by uid 999 first (exit 255, mkdir /data/m9333: permission denied). [defects, defects #231445]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-5e5949da0f
Database handbook: Operating facts 'Bucket capacity': -volume.max sets slots; WEED_MASTER_VOLUME_GROWTH_COPY_1 sets the volumes per bucket. [defects, defects #231446]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-aa36f5d9d4
Database handbook: Operating facts: a 41 MB multipart object and a 20 MB object were tested; no larger file. [defects, defects #231447]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-3df5e60460
Database handbook: Live: bare `docker logs seaweedfs` on a terminal shows the log lines (they are on stderr, displayed on the terminal); the sentence contradicts DB_HANDBOOK.md:1432 ('a bare docker logs command shows… [defects, defects #231448]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-9cf8895d1a
Admin handbook: Live (held-run 002, 004): POST /<bucket>?delete answers 200 and deletes; multi-object delete is on the bucket path, not /<bucket>/<key>. [defects, defects #234421]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-29ef433913
Admin handbook: Operating facts 'Backup' (ADMIN:319): restore only into a new, empty volume; extracting over an existing volume leaves the store inconsistent (HTTP 500 permanently on an overwritten object). [defects, defects #234422]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-a0103f15b7
Admin handbook: Same defect as the round-1 finding on DB_HANDBOOK.md:204, paraphrased here. [defects, defects #234423]		highfixed-before-releaseheld review (review model)—
RSD-seaweedfs-5fb580a712
Admin handbook: Unsupported and self-contradictory: a bucket that held data has assigned volumes. [defects, defects #234424]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-626accf297
Admin handbook: Live: `docker exec jt-ha954-s /usr/local/bin/rs-probe http://127.0.0.1:8333/healthz` printed nothing, rc=0 (held-run 001). [defects, defects #234425]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-8ca1b64c4a
Admin handbook: Live (held-run 001): `docker logs jt-ha954-s 2>&1 > lg1.txt` wrote 0 bytes; `docker logs jt-ha954-s > lg2.txt 2>&1` wrote 12042 bytes. [defects, defects #234426]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-5f36eabf98
Admin handbook: Operating facts 'Backup' (ADMIN:319): a backup is restored only into a new, empty volume, never 'to an existing volume'; the 13-21 s measurement is for restart or re-create on an existing volume. [defects, defects #234427]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-bd57e5b071
Admin handbook: Live: `docker exec jt-ha954-s weed shell </dev/null` printed nothing and exited at once (held-run 001): without -i the shell reads end-of-file from stdin; an interactive session needs `docker exec… [defects, defects #234428]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-87f52cb2ab
Admin handbook: rs-probe.go: mode is one of -body/-code (the last one given wins); -code exits 0 on any HTTP answer and 1 only with no answer. [defects, defects #234429]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-2b3c2f99d3
Admin handbook: The example that follows is `rs-probe -code http://127.0.0.1:8333/healthz`, which has no -sigv4/-user and signs nothing (rs-probe.go). [defects, defects #234430]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-0129c82ded
Admin handbook: Placed under 'Using aws-cli'. [defects, defects #234431]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-4021299f6b
Admin handbook: Live: curl --aws-sigv4 "aws:amz:eu-west-1:s3" GET /bkt1/k1 with the right keys returned 200 (held-run 001); the gateway does not require us-east-1, and no record says so. [defects, defects #234432]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-32e2d531e9
Database handbook: Round-1 finding partly fixed: the list now says 'Port 18333, on all interfaces', but the lead-in still says 'Other ports listen ... [defects, defects #234433]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-1f18f0729a
Database handbook: Operating facts 'Bucket capacity' (DB:289): slots follow free space on /data (-volume.max=0), so 'free space remains' and 'allocation exhausted' contradict each other, and 'until disk space is… [defects, defects #234434]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-970c4dc913
Database handbook: Operating facts 'Data and backups' (DB:293) and 'Credential rotation' (DB:281): the tested objects were the 20 MB object, the 41 MB multipart object and 22 buckets across a re-create; rotation… [defects, defects #234435]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-a85cf02578
Database handbook: validation/test-results.json holds only GET /healthz and GET /status; the HEAD/PUT/DELETE list comes from upstream's routing table (api-guide/API_INTEGRATION_GUIDE.md 'About this guide'). [defects, defects #234436]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-8369953307
Database handbook: No record runs aws-cli or an object copy: validation/test-results.json has only GET /healthz and /status; the transcripts contain no 'aws s3'. [defects, defects #234437]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-6842f0d6b9
Database handbook: Live: `weed shell` through docker exec without -i/-t printed nothing and exited immediately (held-run 001); the same line is at :1319 (/usr/bin/weed exists: `weed version` ran from that path). [defects, defects #234438]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-ac5c127706
Database handbook: validation/test-results.json holds only GET /healthz and GET /status; no record shows an object copy run (round-1 finding on the copy claim). [defects, defects #234439]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-1183f762da
Admin handbook: The example for "weed shell in a one-off container" prints nothing and exits at once: no -i, so the shell reads end-of-file from stdin (same defect as the round-2 finding on the docker exec forms),… [defects, defects #236582]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-82c9d303f5
Admin handbook: The sentence says "reset" and the sample below it shows "Connection refused". [defects, defects #236583]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-47bfe92a1a
Admin handbook: Paraphrase of the round-2 finding on ADMIN:319: the 13-21 s measurement is for restart/re-create on an existing volume; a restore goes into a new volume and healthz answered in 3-4 s. [defects, defects #236584]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-ac2cbfa515
Admin handbook: "containing only" is not what the image holds: IMAGE_BINARIES.txt lists more programs (cat, cut, date, head, tail, sort, tr, ...). [defects, defects #236585]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-46579cd081
Database handbook: The handbook has no "Operations" section (headings: S3-Compatible API, S3 Client Configuration, ...); the pointer leads nowhere. [defects, defects #236586]		lowfixed-before-releaseheld review (review model)—
RSD-seaweedfs-a99792c4b5
Admin handbook: There is no "Administrator account" heading in either handbook; Operating facts has "Administrator password" and "Required and optional environment" as separate headings. [defects, defects #236587]		lowfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:1fbd01e37630a1a005dde1363923a23c0375efe6095b1d7ca5300a5551324122 · published digest sha256:1fbd01e37630a1a005dde1363923a23c0375efe6095b1d7ca5300a5551324122 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 201) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-10T23:42:47Z · failing Docker Scout counts 11 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-10T23:42:35Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3796747408 · transparency-log entry · integrated 2026-11-10T23:47:29Z) [ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:cca245fd70501798e468da889d9778fa163d38bea3fdb75e111cf88707eb10e7 · state attached · log index 3796752235 · transparency-log entry
    • kind sbom · digest sha256:cca245fd70501798e468da889d9778fa163d38bea3fdb75e111cf88707eb10e7 · state attached · log index 3796754409 · transparency-log entry
    • kind vsa · digest sha256:cca245fd70501798e468da889d9778fa163d38bea3fdb75e111cf88707eb10e7 · state attached · log index 3796756868 · transparency-log entry
    • kind provenance · digest sha256:1fbd01e37630a1a005dde1363923a23c0375efe6095b1d7ca5300a5551324122 · state attached · log index 3796759079 · transparency-log entry
    • kind sbom · digest sha256:1fbd01e37630a1a005dde1363923a23c0375efe6095b1d7ca5300a5551324122 · state attached · log index 3796760729 · transparency-log entry
    • kind vsa · digest sha256:1fbd01e37630a1a005dde1363923a23c0375efe6095b1d7ca5300a5551324122 · state attached · log index 3796763060 · transparency-log entry
    (at 2026-11-10T23:47:30Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/seaweedfs/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-10T21:30:44Z on build host 5 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:1fbd01e37630a1a005dde1363923a23c0375efe6095b1d7ca5300a5551324122 [clean-room rebuild ledger, runs[727]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-10T07:57:43Z [stage_runs, stage_runs chain 954 stage publish_image]
  • Archive manifests written2026-11-10T23:45:29Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 62 · probed 2026-11-10T07:52:45Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-10T23:48:53Z generated: by KitForge release/build_trail.py · generator commit 1e12108047d40ec72e593f39c24455ea312ddb43
  • 2026-11-10T23:50:24Z publication: promoted at 2026-11-10T23:49:29Z · promoted digest sha256:cca245fd70501798e468da889d9778fa163d38bea3fdb75e111cf88707eb10e7 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 456 · checklist status complete · checklist at 2026-11-10T23:50:24Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/seaweedfs/4.53-CE-ubuntu24.04-r2/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/seaweedfs/4.53-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.rebuild.jsonbeside the archive (prodasset /data/production/seaweedfs/4.53-CE-ubuntu24.04-r2/), as staged for publishing—
ReadyStack-seaweedfs-4.53-CE-ubuntu24.04-r2.rebuild.json.sigstorebeside the archive (prodasset /data/production/seaweedfs/4.53-CE-ubuntu24.04-r2/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/seaweedfs/4.53-CE-ubuntu24.04-r2/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)636
chainssadb, ReadyStack's engine database (not published)954
defectssadb, ReadyStack's engine database (not published)seaweedfs 4.53-CE-ubuntu24.04-r2
drive_runssadb, ReadyStack's engine database (not published)chain 954
held_roundssadb, ReadyStack's engine database (not published)chain 954
lesson_recallssadb, ReadyStack's engine database (not published)chain 954
micro_step_runssadb, ReadyStack's engine database (not published)chain 954
release_imagessadb, ReadyStack's engine database (not published)seaweedfs 4.53-CE-ubuntu24.04-r2
stage_eventssadb, ReadyStack's engine database (not published)chain 954
stage_runssadb, ReadyStack's engine database (not published)chain 954
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—