Valkey 9.1.3-CE-ubuntu24.04-r3 build trail
How ReadyStack built readystack/valkey:9.1.3-CE-ubuntu24.04-r3 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.
This trail
As JSON- Image
readystack/valkey:9.1.3-CE-ubuntu24.04-r3 - Index digestsha256:b567a1f5b3fa7bcd322f04e1530f3e6038305be746f4cfd116de6e5c0fa1c33b
- linux/amd64 digestsha256:716db3c564a9847f5046900459d18aa86f909f5a9edee024f01b76c4ac9d6a18
- Archive
ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.tar.gz - Archive SHA-256 nowfc57c07a1589ebc928faece2e4e6bad6ab16b73808b3ea451d164fba0d928df4
- Pins record
docs/PINS.md,docs/provenance/PINS.jsonin the archive (since generated) - Generated2026-11-09T14:24:49Z by KitForge release/build_trail.py
- Sections9 sections, 8 fully recorded; 1 item not recorded
Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:
cosign verify-blob --key https://readystack.dev/keys/cosign.pub \ --bundle ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.trail.json.sigstore ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.trail.json
IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level
Identity
Fully recorded- ProductValkey (valkey) [MANIFEST.json]
- Release tag9.1.3-CE-ubuntu24.04-r3 [MANIFEST.json]
- Imagereadystack/valkey:9.1.3-CE-ubuntu24.04-r3 [MANIFEST.json]
- Image index digestsha256:b567a1f5b3fa7bcd322f04e1530f3e6038305be746f4cfd116de6e5c0fa1c33b [docs/provenance/LOCKED_DIGEST.txt]
- linux/amd64 image digestsha256:716db3c564a9847f5046900459d18aa86f909f5a9edee024f01b76c4ac9d6a18 [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.rebuild.json, subject.image_manifest_digest]
- ArchiveReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.tar.gz (bytes 546423825) [MANIFEST.json]
- Archive sha256 at publishfc57c07a1589ebc928faece2e4e6bad6ab16b73808b3ea451d164fba0d928df4 [MANIFEST.json, tarball_sha256]
- Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
- Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
- Upstream repositoryhttps://github.com/valkey-io/valkey [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream ref9.1.3 [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream commit29173b67508b2de4c0f0ed551f3b47cf19fc3ca8 [docs/provenance/SOURCE_TREE_HASH.json]
- Source tree hash21c909c9f274f3426fa4ae7e372f5272c261347fe17a85b3a27f7c9e08fd6057 (files 1925) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
- Kit tree hashsha256:11e9df8f3103f107851cfe4d08d1c6b0a23d1dc2ec1e0eb4eeb783d31565430c [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.rebuild.json, inputs.tree_hash]
- SOURCE_DATE_EPOCH1793052100 (utc 2026-10-26T22:01:40Z) [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.rebuild.json, inputs.source_date_epoch]
- Base images
- ref golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 · platform digest sha256:fea12ba16096adec0f699ce1c4da2154d320450e56c1f63671f95d2a3551c77b
- ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
- BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.rebuild.json, engine]
- Engine commit(s)
- commit f60d122b34cc30f61cd57923ec2ce0e838aa6c77 · dirty yes · first drive 3983
- commit 2e925c4ba6397efc51c0a48c281a06ea1514ae75 · dirty yes · first drive 4022
- commit 6cf1d13258e30682e29bf35f46a3c039cd92c630 · dirty yes · first drive 4031
- commit ad5c12c5506f316c76f0e1747a166906e1a38407 · dirty yes · first drive 4035
Why this release exists
Fully recorded- Chain918 (created 2026-11-09T08:29:34Z · trigger customer_request · upstream version 9.1.3) [chains, chains #918]
- Requestbuild request #543 (rebuild) (requested at 2026-11-08T03:42:02Z · requested by kitforge-agent · version 9.1.3) [build_requests, build_requests #543]
- Reasonrevision 9.1.3-CE-ubuntu24.04-r3: same upstream version rebuilt on the chiselled runtime (slim base, C/Rust engine #198) [build_requests, build_requests #543 request_reason]
- Supersedesreadystack/valkey:9.1.3-CE-ubuntu24.04-r2 (chain 820) [chains, chains #820]
The path through the harness
Fully recorded1 chain · 4 drives · 18 stages · 3 rewinds
Chain 918 release · ready_to_ship
Created 2026-11-09T08:29:34Z, upstream 9.1.3, build request 543 [chains, chains #918]
| Drive | Started | Minutes | Build host | How it stopped |
|---|---|---|---|---|
| 3983 | 2026-11-09T08:29:52Z | 134 | build host 5 withhold-publish | stage_failed at package_archive; first failed check exists:checksums; 18 ticks [drive_runs, drive_runs #3983] |
| 4022 | 2026-11-09T13:25:38Z | 16.9 | build host 5 withhold-publish | ready_to_ship at package_archive; 16 ticks [drive_runs, drive_runs #4022] |
| 4031 | 2026-11-09T14:03:34Z | 3.4 | build host 5 withhold-publish | ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #4031] |
| 4035 | 2026-11-09T14:19:39Z | — | build host 5 publish-held | not recorded [drive_runs, drive_runs #4035] |
Stages, in order
| Stage | First start | Passed | Attempts | Gate checks passed | Artifacts (SHA-256) |
|---|---|---|---|---|---|
intake |
2026-11-09T08:30:03Z | 2026-11-09T08:30:03Z | 1 | 4
|
order_json 2f3b26ea5450… |
acquire |
2026-11-09T08:30:08Z | 2026-11-09T08:30:09Z | 1 | 12
|
source_tree fe41f0cef0ef…license_file 1a53dca3aab7…custody_inputs e5b2867bdac8…source_tree_hash ab063928927e…source_file_manifest 3b3938a465e2… |
plan |
2026-11-09T08:30:40Z | 2026-11-09T08:30:41Z | 1 | 10
|
recon_report a4ae43e936fa…input_pin_plan cf966420e301…toolchain_lock d8b99961b665… |
assemble_kit |
2026-11-09T08:34:06Z | 2026-11-09T13:28:32Z | 2 | 27
|
dockerfile 4176ebfb475e…build_recipe f609c7ddccb1…system_pinning aa8db05a9a8a…build_offline_sh 6633aa31b6b4…generate_sbom_sh ce0f1e6f1e70…first_boot_health ac6bfe45ca15…verify_offline_sh 3e8184ea230c…base_image_digests e06ee4bc677c…dockerfile_offline 4176ebfb475e…first_build_digest 2aad6d22287b… |
remediate |
2026-11-09T08:34:34Z | 2026-11-09T13:28:36Z | 2 | 8
|
vendored_apt e3b0c44298fc…remediation_log badf73ecff15…security_report 995264caa1be… |
build_kit |
2026-11-09T08:40:18Z | 2026-11-09T13:34:13Z | 2 | 9
|
cosign_stamp 5db33f65a2de…locked_digest 3943bb29b3df…freeze_manifest adf4a5570abe…offline_rebuild_transcript e67cf5a54821… |
verdict |
2026-11-09T08:40:54Z | 2026-11-09T13:34:50Z | 2 | 8
|
scout_verdict 8826d802019f… |
publish_image |
2026-11-09T08:41:34Z | 2026-11-09T13:35:23Z | 2 | 7
|
hub_readme eb6b5f160fa3…promotion_record f4d4caf84bbb… |
boot_instance |
2026-11-09T08:41:41Z | 2026-11-09T13:35:34Z | 4 | 3
|
instance_handle fff700b9c3d4… |
sbom |
2026-11-09T08:42:01Z | 2026-11-09T13:35:48Z | 2 | 5
|
sbom_md c9c0c16a9fd2…sbom_json a3e27fc01aaa… |
schema_discovery |
2026-11-09T08:42:04Z | 2026-11-09T13:35:51Z | 2 | 7
|
schema_hash 1b1bff8612bc…dependency_tree 67bd47dae34f…table_classification 19809c156148… |
admin_handbook |
2026-11-09T09:01:08Z | 2026-11-09T13:36:02Z | 2 | 7
|
api_map 46c82698647c…admin_handbook dd0a507ff7bd… |
db_handbook |
2026-11-09T09:13:15Z | 2026-11-09T13:36:15Z | 2 | 8
|
db_handbook 49f6b4a22c33…seed_isolation 5caff6626225… |
seed_data |
2026-11-09T09:13:23Z | 2026-11-09T13:36:24Z | 2 | 6
|
seed_data_sql 9a4174067076…seed_cases_json 62df7c6ff2d6… |
seed_validate |
2026-11-09T09:13:27Z | 2026-11-09T13:36:27Z | 2 | 3
|
seed_data_contract 543577078a2f… |
usecase_validate |
2026-11-09T09:13:51Z | 2026-11-09T13:36:51Z | 2 | 10
|
failed_tests b2247b16f5f7…passed_tests cb47bfb9efd9…test_results a14d74abd23c…usecase_contract b60a14675445… |
finalize_docs |
2026-11-09T09:43:47Z | 2026-11-09T13:36:58Z | 2 | 9
|
defects_json d475bd5f6727…release_notes 85dc9350ef0c…api_integration_guide 9aeae931e14c… |
package_archive invalidated 2026-11-09T14:19:11Z |
2026-11-09T10:43:53Z | 2026-11-09T14:06:59Z | 3 | 35 (final gate PASS)
|
sale_tar 2488ea654538…checksums 8af821acbdd3…verify_md 72778504d0c0…rebuild_md eff10feaef7c…manifest_txt b266f0e40fe4…actions_jsonl 028b92ce3e54…provenance_md d85a2f0b8a52…assetchain_log_md e9eccaec0c0f…assetchain_log_json 9276987e67f2… |
[stage_runs]
Rewinds
- 2026-11-09T13:25:42Z:
package_archivetoassemble_kiton strategy_changed (strategy changed (7c8b8a0c3168 -> 2c14f0e9236f)) [stage_events, stage_events #28948] - 2026-11-09T14:02:57Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #29068] - 2026-11-09T14:19:11Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #29101]
Model work per stage
Fully recordedRole: writer model. Calls up to 2026-11-09T14:06:59Z.
455 calls over 5 stages
| Stage | Calls | Refused | Errors | Max attempt | Forced commits | Real tokens | Lesson rules shown |
|---|---|---|---|---|---|---|---|
plan | 2 | 0 | 0 | 1 | 0 | 6858 | L-A183, L-A15 |
remediate | 2 | 0 | 0 | 1 | 0 | 6903 | L-A183, L-A15 |
admin_handbook | 133 | 76 | 0 | 3 | 32 | 1322110 | L-A180, L-A181, L-A182, L-A183, L-A184, L-A155, L-A114, L-A25, L-A15, L-A14 |
db_handbook | 86 | 45 | 0 | 3 | 17 | 723230 | L-A180, L-A181, L-A182, L-A183, L-A184, L-A114, L-A15 |
finalize_docs | 232 | 141 | 0 | 3 | 66 | 2245582 | L-A180, L-A181, L-A182, L-A183, L-A184, L-A155, L-A114, L-A25, L-A15 |
[micro_step_runs] [lesson_recalls]
Review
Fully recordedRole: review model.
2 rounds, 2 counted, $1.49 recorded cost
| Round | Started | Critical | Major | Minor | Verdict | Cost | Cap in force | Archive reviewed |
|---|---|---|---|---|---|---|---|---|
| 1 | 2026-11-09T13:42:47Z | 0 | 3 | 19 | findings to repackage [held_rounds, held_rounds #1622] | $0.91 | 3 rounds, $40.00 | b588ee3c5ea1… |
| 2 | 2026-11-09T14:07:52Z | 0 | 0 | 0 | clean to publish [held_rounds, held_rounds #1624] | $0.57 | 3 rounds, $40.00 | 2488ea654538… |
Defects
Fully recorded- Ledger entries7 [defects, defects where product_slug=valkey and this tag or chain]
- Disclosed in the archive7 [docs/defects/defects.json, entries]
7 ledger entries: by severity low 5, high 2; by status fixed-before-release 7.
| Defect | Severity | Status | Found by | Fixed in |
|---|---|---|---|---|
RSD-valkey-6b2286d261Admin handbook: Health check command shown as the image HEALTHCHECK is the r2 text; r3 checks PONG with a shell case, not grep [defects, defects #209574] | low | fixed-before-release | held review (review model) | — |
RSD-valkey-556dd71f0bAdmin handbook: r3 sets WorkingDir "/" (baseline had none) [defects, defects #209575] | low | fixed-before-release | held review (review model) | — |
RSD-valkey-c526c8c5c0Admin handbook: DEBIAN_FRONTEND is no longer set by the image [defects, defects #209576] | low | fixed-before-release | held review (review model) | — |
RSD-valkey-267e2b2697API guide: DEBIAN_FRONTEND is no longer set by the image [defects, defects #209577] | low | fixed-before-release | held review (review model) | — |
RSD-valkey-6a72bda895API guide: The r3 image has no bash; the documented interactive shell command fails [defects, defects #209578] | high | fixed-before-release | held review (review model) | — |
RSD-valkey-0a734b6b49API guide: Lists /bin/bash as available; the chiselled r3 image has no bash [defects, defects #209579] | high | fixed-before-release | held review (review model) | — |
RSD-valkey-3a2a1fb1d2Release notes: Release notes say the image has no grep, id or hostname; it has all three [defects, defects #209580] | low | fixed-before-release | held review (review model) | — |
Verification
1 item not recorded- Reproduced before publishingyes (rebuilt digest sha256:716db3c564a9847f5046900459d18aa86f909f5a9edee024f01b76c4ac9d6a18 · published digest sha256:716db3c564a9847f5046900459d18aa86f909f5a9edee024f01b76c4ac9d6a18 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 151) [docs/provenance/REPRO_VERIFICATION.json, verified]
- Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, vex_shipped) [g8_result.json, result]
- Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-09T14:20:04Z · failing Docker Scout counts 16 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
- Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-09T14:19:51Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
- Image signature transparency-log entries
- log index 3765793219 · transparency-log entry
- log index 3765793674 · transparency-log entry
- rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3766041791 · transparency-log entry · integrated 2026-11-09T14:23:12Z) [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
- Signed attestations
- kind provenance · digest sha256:b567a1f5b3fa7bcd322f04e1530f3e6038305be746f4cfd116de6e5c0fa1c33b · state attached · log index 3766044444 · transparency-log entry
- kind sbom · digest sha256:b567a1f5b3fa7bcd322f04e1530f3e6038305be746f4cfd116de6e5c0fa1c33b · state attached · log index 3766045475 · transparency-log entry
- kind vsa · digest sha256:b567a1f5b3fa7bcd322f04e1530f3e6038305be746f4cfd116de6e5c0fa1c33b · state attached · log index 3766046208 · transparency-log entry
- kind provenance · digest sha256:716db3c564a9847f5046900459d18aa86f909f5a9edee024f01b76c4ac9d6a18 · state attached · log index 3766046733 · transparency-log entry
- kind sbom · digest sha256:716db3c564a9847f5046900459d18aa86f909f5a9edee024f01b76c4ac9d6a18 · state attached · log index 3766047188 · transparency-log entry
- kind vsa · digest sha256:716db3c564a9847f5046900459d18aa86f909f5a9edee024f01b76c4ac9d6a18 · state attached · log index 3766047599 · transparency-log entry
- Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/valkey/recipe) [docs/provenance/PINS.json]
Offline clean-room rebuilds
- 2026-11-09T13:42:53Z on build host 4 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
rebuilt sha256:716db3c564a9847f5046900459d18aa86f909f5a9edee024f01b76c4ac9d6a18 [clean-room rebuild ledger, runs[699]]
- Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
Publication
Fully recorded 1 pending at generation- Image pushed (internal tag), publish_image passed2026-11-09T13:35:23Z [stage_runs, stage_runs chain 918 stage publish_image]
- Archive manifests written2026-11-09T14:21:36Z [PUBLISH_MANIFEST.json, published_at]
- Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)
Packages and CPU level
Fully recorded- x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 75 · probed 2026-11-09T13:31:20Z · source build_kit) [release_images, isa_level_hard]
History
2 events- 2026-11-09T14:24:49Z generated: by KitForge release/build_trail.py · generator commit ad5c12c5506f316c76f0e1747a166906e1a38407
- 2026-11-09T14:26:17Z publication: promoted at 2026-11-09T14:25:29Z · promoted digest sha256:b567a1f5b3fa7bcd322f04e1530f3e6038305be746f4cfd116de6e5c0fa1c33b · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 416 · checklist status complete · checklist at 2026-11-09T14:26:17Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json
Records
25 records| Record | Where it is | Rows |
|---|---|---|
docs/defects/defects.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.tar.gz) | — |
docs/provenance/IMAGE_EVIDENCE.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.tar.gz) | — |
docs/provenance/LOCKED_DIGEST.txt | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.tar.gz) | — |
docs/provenance/PINS.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.tar.gz) | — |
docs/provenance/REPRO_VERIFICATION.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.tar.gz) | — |
docs/provenance/SOURCE_TREE_HASH.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.tar.gz) | — |
MANIFEST.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r3/), as staged for publishing | — |
PUBLISH_MANIFEST.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r3/), as staged for publishing | — |
ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.rebuild.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r3/), as staged for publishing | — |
ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r3.rebuild.json.sigstore | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r3/), as staged for publishing | — |
SCOUT_EVIDENCE.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r3/), as staged for publishing | — |
clean-room rebuild ledger | the clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published) | — |
build_requests | sadb, ReadyStack's engine database (not published) | 543 |
chains | sadb, ReadyStack's engine database (not published) | 918 |
defects | sadb, ReadyStack's engine database (not published) | valkey 9.1.3-CE-ubuntu24.04-r3 |
drive_runs | sadb, ReadyStack's engine database (not published) | chain 918 |
held_rounds | sadb, ReadyStack's engine database (not published) | chain 918 |
lesson_recalls | sadb, ReadyStack's engine database (not published) | chain 918 |
micro_step_runs | sadb, ReadyStack's engine database (not published) | chain 918 |
release_images | sadb, ReadyStack's engine database (not published) | valkey 9.1.3-CE-ubuntu24.04-r3 |
stage_events | sadb, ReadyStack's engine database (not published) | chain 918 |
stage_runs | sadb, ReadyStack's engine database (not published) | chain 918 |
attestations.json | the chain's workspace on the controller (not published) | — |
deliverables/provenance/PROMOTION_RECORD.json | the chain's workspace on the controller (not published) | — |
g8_result.json | the chain's workspace on the controller (not published) | — |