Valkey 9.1.3-CE-ubuntu24.04-r5 build trail
How ReadyStack built readystack/valkey:9.1.3-CE-ubuntu24.04-r5 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.
This trail
As JSON- Image
readystack/valkey:9.1.3-CE-ubuntu24.04-r5 - Index digestsha256:7c790fa0a5c57905be7043f2df4aef51f766859c0c75ba67111cdf08bf0cf008
- linux/amd64 digestsha256:b5c32cd1cfcf67033aac33fac33e02c5a7a196c4192894dbb051094af6016109
- Archive
ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.tar.gz - Archive SHA-256 now7d1c6b1920e8cc84d240ca8bebb111ad5719da87df186055a9cea026dbcddbdd
- Pins record
docs/PINS.md,docs/provenance/PINS.jsonin the archive (since generated) - Generated2026-11-13T13:07:39Z by KitForge release/build_trail.py
- Sections9 sections, 8 fully recorded; 1 item not recorded
Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:
cosign verify-blob --key https://readystack.dev/keys/cosign.pub \ --bundle ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.trail.json.sigstore ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.trail.json
IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level
Identity
Fully recorded- ProductValkey (valkey) [MANIFEST.json]
- Release tag9.1.3-CE-ubuntu24.04-r5 [MANIFEST.json]
- Imagereadystack/valkey:9.1.3-CE-ubuntu24.04-r5 [MANIFEST.json]
- Image index digestsha256:7c790fa0a5c57905be7043f2df4aef51f766859c0c75ba67111cdf08bf0cf008 [docs/provenance/LOCKED_DIGEST.txt]
- linux/amd64 image digestsha256:b5c32cd1cfcf67033aac33fac33e02c5a7a196c4192894dbb051094af6016109 [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.rebuild.json, subject.image_manifest_digest]
- ArchiveReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.tar.gz (bytes 552216392) [MANIFEST.json]
- Archive sha256 at publish7d1c6b1920e8cc84d240ca8bebb111ad5719da87df186055a9cea026dbcddbdd [MANIFEST.json, tarball_sha256]
- Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
- Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
- Upstream repositoryhttps://github.com/valkey-io/valkey [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream ref9.1.3 [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream commit29173b67508b2de4c0f0ed551f3b47cf19fc3ca8 [docs/provenance/SOURCE_TREE_HASH.json]
- Source tree hash21c909c9f274f3426fa4ae7e372f5272c261347fe17a85b3a27f7c9e08fd6057 (files 1925) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
- Kit tree hashsha256:9a2da3ec6df1b106e9ffbf63004a65cf0a042934f20809676ef940491a07aed5 [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.rebuild.json, inputs.tree_hash]
- SOURCE_DATE_EPOCH1794569015 (utc 2026-11-13T11:23:35Z) [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.rebuild.json, inputs.source_date_epoch]
- Base images
- ref golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 · platform digest sha256:fea12ba16096adec0f699ce1c4da2154d320450e56c1f63671f95d2a3551c77b
- ref ubuntu:24.04@sha256:2198e4c65076e9cb0b3d695219df667c0e3b0072da64ca3c2648aca17dcecaf5 · platform digest sha256:77eb101c607d6e3d4f5ad0c8a02c2136c689b98aba1f359e6502ba517e5c57ec
- BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.rebuild.json, engine]
- Engine commit(s)
- commit af5d491e38da72dd57d28c6cf2cc7e7849a38d38 · dirty yes · first drive 4570
- commit a45425e339234f118fc0fbe99b7714973f9ef347 · dirty yes · first drive 4574
Why this release exists
Fully recorded- Chain1074 (created 2026-11-13T12:24:27Z · trigger customer_request · upstream version 9.1.3) [chains, chains #1074]
- Requestbuild request #751 (rebuild) (requested at 2026-11-13T11:23:37Z · requested by kitforge-agent · version 9.1.3) [build_requests, build_requests #751]
- Reasonrerelease agenda REVISION -> 9.1.3-CE-ubuntu24.04-r5 (decay loop, IMP-08) [build_requests, build_requests #751 request_reason]
- Supersedesreadystack/valkey:9.1.3-CE-ubuntu24.04-r4 (chain 1006) [chains, chains #1006]
The path through the harness
Fully recorded1 chain · 2 drives · 18 stages · 1 rewind
Chain 1074 release · ready_to_ship
Created 2026-11-13T12:24:27Z, upstream 9.1.3, build request 751 [chains, chains #1074]
| Drive | Started | Minutes | Build host | How it stopped |
|---|---|---|---|---|
| 4570 | 2026-11-13T12:24:50Z | 16.3 | build host 3 withhold-publish | ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #4570] |
| 4574 | 2026-11-13T13:02:21Z | — | build host 3 publish-held | not recorded [drive_runs, drive_runs #4574] |
Stages, in order
| Stage | First start | Passed | Attempts | Gate checks passed | Artifacts (SHA-256) |
|---|---|---|---|---|---|
intake |
2026-11-13T12:25:00Z | 2026-11-13T12:25:01Z | 1 | 4
|
order_json 94801afa2fe8… |
acquire |
2026-11-13T12:25:06Z | 2026-11-13T12:25:07Z | 1 | 12
|
source_tree fe41f0cef0ef…license_file 1a53dca3aab7…custody_inputs e5b2867bdac8…source_tree_hash ab063928927e…source_file_manifest 3b3938a465e2… |
plan |
2026-11-13T12:25:38Z | 2026-11-13T12:25:38Z | 1 | 10
|
recon_report 049a7bc06e7c…input_pin_plan 580749cc5d06…toolchain_lock ec438a0ddef0… |
assemble_kit |
2026-11-13T12:28:19Z | 2026-11-13T12:28:20Z | 1 | 27
|
dockerfile a42c25a06b5d…build_recipe 2eff53402a07…system_pinning aa8db05a9a8a…build_offline_sh 6ab4f08a6ec7…generate_sbom_sh ce0f1e6f1e70…first_boot_health bf9a65e5f4e2…verify_offline_sh 3e8184ea230c…base_image_digests e06ee4bc677c…dockerfile_offline a42c25a06b5d…first_build_digest 0931fa10b7a9… |
remediate |
2026-11-13T12:28:49Z | 2026-11-13T12:28:50Z | 1 | 8
|
vendored_apt e3b0c44298fc…remediation_log 74366fdbb88a…security_report d188972e177f… |
build_kit |
2026-11-13T12:33:19Z | 2026-11-13T12:33:20Z | 1 | 9
|
cosign_stamp 52a62bfdb10c…locked_digest 2d1667970cc5…freeze_manifest 95839b411659…offline_rebuild_transcript 121c6d52cd66… |
verdict |
2026-11-13T12:33:49Z | 2026-11-13T12:33:50Z | 1 | 8
|
scout_verdict 19ec21593b5e… |
publish_image |
2026-11-13T12:34:20Z | 2026-11-13T12:34:21Z | 1 | 7
|
hub_readme b9dc1759ff39…promotion_record 5010fa53a539… |
boot_instance |
2026-11-13T12:34:27Z | 2026-11-13T12:34:31Z | 2 | 3
|
instance_handle 32b0e5f1b6f6… |
sbom |
2026-11-13T12:34:42Z | 2026-11-13T12:34:42Z | 1 | 5
|
sbom_md c095f8b2b09b…sbom_json 15ee606c7a33… |
schema_discovery |
2026-11-13T12:34:45Z | 2026-11-13T12:34:46Z | 1 | 7
|
schema_hash 1b1bff8612bc…dependency_tree 67bd47dae34f…table_classification 19809c156148… |
admin_handbook |
2026-11-13T12:34:53Z | 2026-11-13T12:34:54Z | 1 | 7
|
api_map 46c82698647c…admin_handbook 14f4bdd5b37f… |
db_handbook |
2026-11-13T12:35:04Z | 2026-11-13T12:35:05Z | 1 | 8
|
db_handbook 02cc4e8c8592…seed_isolation 5caff6626225… |
seed_data |
2026-11-13T12:35:12Z | 2026-11-13T12:35:13Z | 1 | 6
|
seed_data_sql 9a4174067076…seed_cases_json 6556bfb6465b… |
seed_validate |
2026-11-13T12:35:15Z | 2026-11-13T12:35:16Z | 1 | 3
|
seed_data_contract 8debbbbc3f84… |
usecase_validate |
2026-11-13T12:35:36Z | 2026-11-13T12:35:36Z | 1 | 10
|
failed_tests b2247b16f5f7…passed_tests cb47bfb9efd9…test_results a14d74abd23c…usecase_contract eee2a6f7b481… |
finalize_docs |
2026-11-13T12:35:42Z | 2026-11-13T12:35:43Z | 1 | 9
|
defects_json f3c1d3585f56…release_notes 2f7da674bec1…api_integration_guide 4e61abee22fa… |
package_archive invalidated 2026-11-13T13:01:56Z |
2026-11-13T12:41:04Z | 2026-11-13T12:41:06Z | 1 | 37 (final gate PASS)
|
sale_tar 0848c846f94d…checksums cb70fd1b8efe…verify_md 19b0e7c9de4a…rebuild_md 6d83893a75e3…manifest_txt ee792a37c083…actions_jsonl 0103f35978c1…provenance_md 09f722192405…assetchain_log_md e9eccaec0c0f…assetchain_log_json 08ed4cb5e0ed… |
[stage_runs]
Rewinds
- 2026-11-13T13:01:56Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #36053]
Model work per stage
Fully recordedRole: writer model. Calls up to 2026-11-13T12:41:06Z.
4 calls over 2 stages
| Stage | Calls | Refused | Errors | Max attempt | Forced commits | Real tokens | Lesson rules shown |
|---|---|---|---|---|---|---|---|
plan | 2 | 0 | 0 | 1 | 0 | 6845 | L-A183, L-A15 |
remediate | 2 | 0 | 0 | 1 | 0 | 7343 | L-A183, L-A15 |
[micro_step_runs] [lesson_recalls]
Review
Fully recordedRole: review model.
1 round, 1 counted, $0.29 recorded cost
| Round | Started | Critical | Major | Minor | Verdict | Cost | Cap in force | Archive reviewed |
|---|---|---|---|---|---|---|---|---|
| 1 | 2026-11-13T12:41:37Z | 0 | 0 | 0 | clean to publish [held_rounds, held_rounds #1873] | $0.29 | 3 rounds, $40.00 | 0848c846f94d… |
Defects
Fully recorded- Ledger entries1 [defects, defects where product_slug=valkey and this tag or chain]
- Disclosed in the archive0 [docs/defects/defects.json, entries]
1 ledger entry: by severity low 1; by status fixed-in-release 1.
| Defect | Severity | Status | Found by | Fixed in |
|---|---|---|---|---|
RSD-valkey-4ffdc96b8aAdmin handbook: The rewritten protected-mode command prints the reply when it is not DENIED, so on a password-protected container it prints a line; the sentence says it prints nothing. [defects, defects #280796] | low | fixed-in-release | held review (review model) | 9.1.3-CE-ubuntu24.04-r5 |
Verification
1 item not recorded- Reproduced before publishingyes (rebuilt digest sha256:b5c32cd1cfcf67033aac33fac33e02c5a7a196c4192894dbb051094af6016109 · published digest sha256:b5c32cd1cfcf67033aac33fac33e02c5a7a196c4192894dbb051094af6016109 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 120) [docs/provenance/REPRO_VERIFICATION.json, verified]
- Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, unpack_files, upgrade_check, vex_shipped) [g8_result.json, result]
- Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-13T13:02:42Z · failing Docker Scout counts 16 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
- Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-13T13:02:32Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
- Image signature transparency-log entries
- log index 3853794280 · transparency-log entry
- log index 3853794567 · transparency-log entry
- rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3854373868 · transparency-log entry · integrated 2026-11-13T13:05:24Z) [ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
- Signed attestations
- kind provenance · digest sha256:7c790fa0a5c57905be7043f2df4aef51f766859c0c75ba67111cdf08bf0cf008 · state attached · log index 3854376261 · transparency-log entry
- kind sbom · digest sha256:7c790fa0a5c57905be7043f2df4aef51f766859c0c75ba67111cdf08bf0cf008 · state attached · log index 3854378261 · transparency-log entry
- kind vsa · digest sha256:7c790fa0a5c57905be7043f2df4aef51f766859c0c75ba67111cdf08bf0cf008 · state attached · log index 3854380563 · transparency-log entry
- kind provenance · digest sha256:b5c32cd1cfcf67033aac33fac33e02c5a7a196c4192894dbb051094af6016109 · state attached · log index 3854382536 · transparency-log entry
- kind sbom · digest sha256:b5c32cd1cfcf67033aac33fac33e02c5a7a196c4192894dbb051094af6016109 · state attached · log index 3854384310 · transparency-log entry
- kind vsa · digest sha256:b5c32cd1cfcf67033aac33fac33e02c5a7a196c4192894dbb051094af6016109 · state attached · log index 3854386505 · transparency-log entry
- Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/valkey/recipe) [docs/provenance/PINS.json]
Offline clean-room rebuilds
- 2026-11-13T12:41:41Z on build host 3 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
rebuilt sha256:b5c32cd1cfcf67033aac33fac33e02c5a7a196c4192894dbb051094af6016109 [clean-room rebuild ledger, runs[831]]
- Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
Publication
Fully recorded 1 pending at generation- Image pushed (internal tag), publish_image passed2026-11-13T12:34:21Z [stage_runs, stage_runs chain 1074 stage publish_image]
- Archive manifests written2026-11-13T13:04:10Z [PUBLISH_MANIFEST.json, published_at]
- Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)
Packages and CPU level
Fully recorded- x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 75 · probed 2026-11-13T12:31:05Z · source build_kit) [release_images, isa_level_hard]
History
2 events- 2026-11-13T13:07:39Z generated: by KitForge release/build_trail.py · generator commit a45425e339234f118fc0fbe99b7714973f9ef347
- 2026-11-13T13:09:00Z publication: promoted at 2026-11-13T13:08:20Z · promoted digest sha256:7c790fa0a5c57905be7043f2df4aef51f766859c0c75ba67111cdf08bf0cf008 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 540 · checklist status complete · checklist at 2026-11-13T13:09:00Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json
Records
25 records| Record | Where it is | Rows |
|---|---|---|
docs/defects/defects.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.tar.gz) | — |
docs/provenance/IMAGE_EVIDENCE.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.tar.gz) | — |
docs/provenance/LOCKED_DIGEST.txt | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.tar.gz) | — |
docs/provenance/PINS.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.tar.gz) | — |
docs/provenance/REPRO_VERIFICATION.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.tar.gz) | — |
docs/provenance/SOURCE_TREE_HASH.json | inside the archive (ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.tar.gz) | — |
MANIFEST.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r5/), as staged for publishing | — |
PUBLISH_MANIFEST.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r5/), as staged for publishing | — |
ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.rebuild.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r5/), as staged for publishing | — |
ReadyStack-valkey-9.1.3-CE-ubuntu24.04-r5.rebuild.json.sigstore | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r5/), as staged for publishing | — |
SCOUT_EVIDENCE.json | beside the archive (prodasset /data/production/valkey/9.1.3-CE-ubuntu24.04-r5/), as staged for publishing | — |
clean-room rebuild ledger | the clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published) | — |
build_requests | sadb, ReadyStack's engine database (not published) | 751 |
chains | sadb, ReadyStack's engine database (not published) | 1074 |
defects | sadb, ReadyStack's engine database (not published) | valkey 9.1.3-CE-ubuntu24.04-r5 |
drive_runs | sadb, ReadyStack's engine database (not published) | chain 1074 |
held_rounds | sadb, ReadyStack's engine database (not published) | chain 1074 |
lesson_recalls | sadb, ReadyStack's engine database (not published) | chain 1074 |
micro_step_runs | sadb, ReadyStack's engine database (not published) | chain 1074 |
release_images | sadb, ReadyStack's engine database (not published) | valkey 9.1.3-CE-ubuntu24.04-r5 |
stage_events | sadb, ReadyStack's engine database (not published) | chain 1074 |
stage_runs | sadb, ReadyStack's engine database (not published) | chain 1074 |
attestations.json | the chain's workspace on the controller (not published) | — |
deliverables/provenance/PROMOTION_RECORD.json | the chain's workspace on the controller (not published) | — |
g8_result.json | the chain's workspace on the controller (not published) | — |