Valkey 9.1.3-CE-ubuntu24.04-r4 build trail
How ReadyStack built readystack/valkey:9.1.3-CE-ubuntu24.04-r4 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.
This trail
As JSON- Image
readystack/valkey:9.1.3-CE-ubuntu24.04-r4 - Index digestsha256:c0daa869bedb04ae3015394bab5f4dc6ea95c6fd2004365cd9dc6ccffe11265b
- linux/amd64 digestsha256:3218ca143e6ee45734bbf27265b00ad7c9f8c1d1dd6693904420c80558c004ac
- Archive
ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.tar.gz - Archive SHA-256 now99a86eea9e57cd4c0bc5f1eeccd3e5769e5dd79cb72f9f9f86ee252bc2524b8f
- Pins record
docs/PINS.md,docs/provenance/PINS.jsonin the archive (since generated) - Generated2026-11-12T08:14:20Z by KitForge release/build_trail.py
- Sections9 sections, 8 fully recorded; 1 item not recorded
Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:
cosign verify-blob --key https://readystack.dev/keys/cosign.pub \ --bundle ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.trail.json.sigstore ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.trail.json
IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level
Identity
Fully recorded- ProductValkey (valkey) [MANIFEST.json]
- Release tag9.1.3-CE-ubuntu24.04-r4 [MANIFEST.json]
- Imagereadystack/valkey:9.1.3-CE-ubuntu24.04-r4 [MANIFEST.json]
- Image index digestsha256:c0daa869bedb04ae3015394bab5f4dc6ea95c6fd2004365cd9dc6ccffe11265b [docs/provenance/LOCKED_DIGEST.txt]
- linux/amd64 image digestsha256:3218ca143e6ee45734bbf27265b00ad7c9f8c1d1dd6693904420c80558c004ac [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.rebuild.json, subject.image_manifest_digest]
- ArchiveReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.tar.gz (bytes 548306030) [MANIFEST.json]
- Archive sha256 at publish99a86eea9e57cd4c0bc5f1eeccd3e5769e5dd79cb72f9f9f86ee252bc2524b8f [MANIFEST.json, tarball_sha256]
- Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
- Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
- Upstream repositoryhttps://github.com/valkey-io/valkey [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream ref9.1.3 [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream commit29173b67508b2de4c0f0ed551f3b47cf19fc3ca8 [docs/provenance/SOURCE_TREE_HASH.json]
- Source tree hash21c909c9f274f3426fa4ae7e372f5272c261347fe17a85b3a27f7c9e08fd6057 (files 1925) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
- Kit tree hashsha256:bd170e1fb7605a5897575f4905e452a8d746f79c5c9934668491f18b666a468d [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.rebuild.json, inputs.tree_hash]
- SOURCE_DATE_EPOCH1794451826 (utc 2026-11-12T02:50:26Z) [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.rebuild.json, inputs.source_date_epoch]
- Base images
- ref golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 · platform digest sha256:fea12ba16096adec0f699ce1c4da2154d320450e56c1f63671f95d2a3551c77b
- ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
- BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.rebuild.json, engine]
- Engine commit(s)
- commit 42eaa3df285f828e50ed492757a3c8353872a09d · dirty yes · first drive 4351
- commit 9efab228d712a2a7e9bb2eb226729f7f532c3d6a · dirty yes · first drive 4373
Why this release exists
Fully recorded- Chain1006 (created 2026-11-12T05:33:11Z · trigger customer_request · upstream version 9.1.3) [chains, chains #1006]
- Requestbuild request #729 (rebuild) (requested at 2026-11-12T02:50:27Z · requested by kitforge-agent · version 9.1.3) [build_requests, build_requests #729]
- Reasonrevision 9.1.3-CE-ubuntu24.04-r4: same upstream version rebuilt (retarget.py --rev-bump) [build_requests, build_requests #729 request_reason]
- Supersedesreadystack/valkey:9.1.3-CE-ubuntu24.04-r3 (chain 918) [chains, chains #918]
The path through the harness
Fully recorded1 chain · 2 drives · 18 stages · 1 rewind
Chain 1006 release · ready_to_ship
Created 2026-11-12T05:33:11Z, upstream 9.1.3, build request 729 [chains, chains #1006]
| Drive | Started | Minutes | Build host | How it stopped |
|---|---|---|---|---|
| 4351 | 2026-11-12T05:33:33Z | 16.2 | build host 2 withhold-publish | ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4351] |
| 4373 | 2026-11-12T08:10:05Z | — | build host 2 publish-held | not recorded [drive_runs, drive_runs #4373] |
Stages, in order
| Stage | First start | Passed | Attempts | Gate checks passed | Artifacts (SHA-256) |
|---|---|---|---|---|---|
intake |
2026-11-12T05:33:43Z | 2026-11-12T05:33:44Z | 1 | 4
|
order_json 8b7a4659c672… |
acquire |
2026-11-12T05:33:49Z | 2026-11-12T05:33:50Z | 1 | 12
|
source_tree fe41f0cef0ef…license_file 1a53dca3aab7…custody_inputs e5b2867bdac8…source_tree_hash ab063928927e…source_file_manifest 3b3938a465e2… |
plan |
2026-11-12T05:34:23Z | 2026-11-12T05:34:24Z | 1 | 10
|
recon_report 15fc3596fa6a…input_pin_plan 68e36718a3b6…toolchain_lock 2f6dc1b88f21… |
assemble_kit |
2026-11-12T05:37:16Z | 2026-11-12T05:37:17Z | 1 | 27
|
dockerfile a0f51ddb60ea…build_recipe 6c8a3a02f5c1…system_pinning aa8db05a9a8a…build_offline_sh 6ab4f08a6ec7…generate_sbom_sh ce0f1e6f1e70…first_boot_health e87fad15ef0d…verify_offline_sh 3e8184ea230c…base_image_digests e06ee4bc677c…dockerfile_offline a0f51ddb60ea…first_build_digest 26c9ad79b9b8… |
remediate |
2026-11-12T05:37:45Z | 2026-11-12T05:37:46Z | 1 | 8
|
vendored_apt e3b0c44298fc…remediation_log ee3ac0e1ad60…security_report 16d931cba4fc… |
build_kit |
2026-11-12T05:42:48Z | 2026-11-12T05:42:49Z | 1 | 9
|
cosign_stamp 4906c133ddce…locked_digest ed3167ddff6a…freeze_manifest 668d3895e3cb…offline_rebuild_transcript a38ede7f664a… |
verdict |
2026-11-12T05:43:16Z | 2026-11-12T05:43:17Z | 1 | 8
|
scout_verdict d124c92a2477… |
publish_image |
2026-11-12T05:43:50Z | 2026-11-12T05:43:51Z | 1 | 7
|
hub_readme 7ec891063a47…promotion_record db5adbf4f8ea… |
boot_instance |
2026-11-12T05:43:56Z | 2026-11-12T05:44:00Z | 2 | 3
|
instance_handle a71caa3bd519… |
sbom |
2026-11-12T05:44:11Z | 2026-11-12T05:44:12Z | 1 | 5
|
sbom_md 55523796e883…sbom_json b1ef44858378… |
schema_discovery |
2026-11-12T05:44:14Z | 2026-11-12T05:44:15Z | 1 | 7
|
schema_hash 1b1bff8612bc…dependency_tree 67bd47dae34f…table_classification 19809c156148… |
admin_handbook |
2026-11-12T05:44:22Z | 2026-11-12T05:44:23Z | 1 | 7
|
api_map 46c82698647c…admin_handbook ebdbba6065ff… |
db_handbook |
2026-11-12T05:44:33Z | 2026-11-12T05:44:33Z | 1 | 8
|
db_handbook a113fe75684a…seed_isolation 5caff6626225… |
seed_data |
2026-11-12T05:44:41Z | 2026-11-12T05:44:41Z | 1 | 6
|
seed_data_sql 9a4174067076…seed_cases_json 3e23c265c038… |
seed_validate |
2026-11-12T05:44:44Z | 2026-11-12T05:44:45Z | 1 | 3
|
seed_data_contract 23d06f312b02… |
usecase_validate |
2026-11-12T05:45:03Z | 2026-11-12T05:45:04Z | 1 | 10
|
failed_tests b2247b16f5f7…passed_tests cb47bfb9efd9…test_results a14d74abd23c…usecase_contract b5eff5fbd5c7… |
finalize_docs |
2026-11-12T05:45:10Z | 2026-11-12T05:45:11Z | 1 | 9
|
defects_json b44b1c58dc11…release_notes e575403afe11…api_integration_guide f0d2632a6ceb… |
package_archive invalidated 2026-11-12T08:09:41Z |
2026-11-12T05:49:40Z | 2026-11-12T05:49:43Z | 1 | 36 (final gate PASS)
|
sale_tar 9cb57ab73a17…checksums e6dda1acf16e…verify_md 4a3b182f9ace…rebuild_md 85156a384828…manifest_txt 3228940d1817…actions_jsonl 192290c591cc…provenance_md 3b2b5185e90b…assetchain_log_md e9eccaec0c0f…assetchain_log_json 8b0745a4909e… |
[stage_runs]
Rewinds
- 2026-11-12T08:09:41Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #33245]
Model work per stage
Fully recordedRole: writer model. Calls up to 2026-11-12T05:49:43Z.
4 calls over 2 stages
| Stage | Calls | Refused | Errors | Max attempt | Forced commits | Real tokens | Lesson rules shown |
|---|---|---|---|---|---|---|---|
plan | 2 | 0 | 0 | 1 | 0 | 6867 | L-A183, L-A15 |
remediate | 2 | 0 | 0 | 1 | 0 | 6920 | L-A183, L-A15 |
[micro_step_runs] [lesson_recalls]
Review
Fully recordedRole: review model.
1 round, 1 counted, $0.53 recorded cost
| Round | Started | Critical | Major | Minor | Verdict | Cost | Cap in force | Archive reviewed |
|---|---|---|---|---|---|---|---|---|
| 1 | 2026-11-12T05:50:23Z | 0 | 0 | 2 | clean to publish [held_rounds, held_rounds #1779] | $0.53 | 3 rounds, $40.00 | 9cb57ab73a17… |
Defects
Fully recorded- Ledger entries1 [defects, defects where product_slug=valkey and this tag or chain]
- Disclosed in the archive1 [docs/defects/defects.json, entries]
1 ledger entry: by severity low 1; by status fixed-before-release 1.
| Defect | Severity | Status | Found by | Fixed in |
|---|---|---|---|---|
RSD-valkey-f28422ec3fAdmin handbook: The rewritten protected-mode command prints the reply when it is not DENIED, so on a password-protected container it prints a line; the sentence says it prints nothing. [defects, defects #258127] | low | fixed-before-release | held review (review model) | — |
Verification
1 item not recorded- Reproduced before publishingyes (rebuilt digest sha256:3218ca143e6ee45734bbf27265b00ad7c9f8c1d1dd6693904420c80558c004ac · published digest sha256:3218ca143e6ee45734bbf27265b00ad7c9f8c1d1dd6693904420c80558c004ac · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 119) [docs/provenance/REPRO_VERIFICATION.json, verified]
- Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, vex_shipped) [g8_result.json, result]
- Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-12T08:10:26Z · failing Docker Scout counts 16 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
- Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-12T08:10:15Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
- Image signature transparency-log entries
- log index 3826009625 · transparency-log entry
- log index 3826011774 · transparency-log entry
- rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3828474472 · transparency-log entry · integrated 2026-11-12T08:12:59Z) [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
- Signed attestations
- kind provenance · digest sha256:c0daa869bedb04ae3015394bab5f4dc6ea95c6fd2004365cd9dc6ccffe11265b · state attached · log index 3828476992 · transparency-log entry
- kind sbom · digest sha256:c0daa869bedb04ae3015394bab5f4dc6ea95c6fd2004365cd9dc6ccffe11265b · state attached · log index 3828478625 · transparency-log entry
- kind vsa · digest sha256:c0daa869bedb04ae3015394bab5f4dc6ea95c6fd2004365cd9dc6ccffe11265b · state attached · log index 3828480912 · transparency-log entry
- kind provenance · digest sha256:3218ca143e6ee45734bbf27265b00ad7c9f8c1d1dd6693904420c80558c004ac · state attached · log index 3828484061 · transparency-log entry
- kind sbom · digest sha256:3218ca143e6ee45734bbf27265b00ad7c9f8c1d1dd6693904420c80558c004ac · state attached · log index 3828486845 · transparency-log entry
- kind vsa · digest sha256:3218ca143e6ee45734bbf27265b00ad7c9f8c1d1dd6693904420c80558c004ac · state attached · log index 3828489335 · transparency-log entry
- Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/valkey/recipe) [docs/provenance/PINS.json]
Offline clean-room rebuilds
- 2026-11-12T05:50:28Z on build host 2 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
rebuilt sha256:3218ca143e6ee45734bbf27265b00ad7c9f8c1d1dd6693904420c80558c004ac [clean-room rebuild ledger, runs[774]]
- Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
Publication
Fully recorded 1 pending at generation- Image pushed (internal tag), publish_image passed2026-11-12T05:43:51Z [stage_runs, stage_runs chain 1006 stage publish_image]
- Archive manifests written2026-11-12T08:11:47Z [PUBLISH_MANIFEST.json, published_at]
- Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)
Packages and CPU level
Fully recorded- x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 75 · probed 2026-11-12T05:40:34Z · source build_kit) [release_images, isa_level_hard]
History
2 events- 2026-11-12T08:14:20Z generated: by KitForge release/build_trail.py · generator commit 9efab228d712a2a7e9bb2eb226729f7f532c3d6a
- 2026-11-12T08:15:40Z publication: promoted at 2026-11-12T08:14:57Z · promoted digest sha256:c0daa869bedb04ae3015394bab5f4dc6ea95c6fd2004365cd9dc6ccffe11265b · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 492 · checklist status complete · checklist at 2026-11-12T08:15:40Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json
Records
25 records| Record | Where it is | Rows |
|---|---|---|
docs/defects/defects.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.tar.gz) | — |
docs/provenance/IMAGE_EVIDENCE.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.tar.gz) | — |
docs/provenance/LOCKED_DIGEST.txt | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.tar.gz) | — |
docs/provenance/PINS.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.tar.gz) | — |
docs/provenance/REPRO_VERIFICATION.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.tar.gz) | — |
docs/provenance/SOURCE_TREE_HASH.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.tar.gz) | — |
MANIFEST.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r4/), as staged for publishing | — |
PUBLISH_MANIFEST.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r4/), as staged for publishing | — |
ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.rebuild.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r4/), as staged for publishing | — |
ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r4.rebuild.json.sigstore | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r4/), as staged for publishing | — |
SCOUT_EVIDENCE.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r4/), as staged for publishing | — |
clean-room rebuild ledger | the clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published) | — |
build_requests | sadb, ReadyStack's engine database (not published) | 729 |
chains | sadb, ReadyStack's engine database (not published) | 1006 |
defects | sadb, ReadyStack's engine database (not published) | valkey 9.1.3-CE-ubuntu24.04-r4 |
drive_runs | sadb, ReadyStack's engine database (not published) | chain 1006 |
held_rounds | sadb, ReadyStack's engine database (not published) | chain 1006 |
lesson_recalls | sadb, ReadyStack's engine database (not published) | chain 1006 |
micro_step_runs | sadb, ReadyStack's engine database (not published) | chain 1006 |
release_images | sadb, ReadyStack's engine database (not published) | valkey 9.1.3-CE-ubuntu24.04-r4 |
stage_events | sadb, ReadyStack's engine database (not published) | chain 1006 |
stage_runs | sadb, ReadyStack's engine database (not published) | chain 1006 |
attestations.json | the chain's workspace on the controller (not published) | — |
deliverables/provenance/PROMOTION_RECORD.json | the chain's workspace on the controller (not published) | — |
g8_result.json | the chain's workspace on the controller (not published) | — |