virt-api v1.9.1-CE-debian12-r2 build trail

How ReadyStack built readystack/virtapi:v1.9.1-CE-debian12-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/virtapi:v1.9.1-CE-debian12-r2
  • Index digestsha256:65177dc67dc11ed39de81fa63968e08cc768b7525fcde52aa0c8dc959f670a31
  • linux/amd64 digestsha256:38ee20d8459ac3344e048c09fb4295a29ad9615f08037dfb8a2e651cee253ae2
  • ArchiveReadyStack-virtapi-v1.9.1-CE-debian12-r2.tar.gz
  • Archive SHA-256 now84f94b9360bd279f118ff604be0be6f91c81963ee38632b79adc83964e08ea32
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-08T09:09:15Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-virtapi-v1.9.1-CE-debian12-r2.trail.json.sigstore ReadyStack-virtapi-v1.9.1-CE-debian12-r2.trail.json
ReadyStack-virtapi-v1.9.1-CE-debian12-r2.trail.jsonReadyStack-virtapi-v1.9.1-CE-debian12-r2.trail.json.sigstoreReadyStack-virtapi-v1.9.1-CE-debian12-r2.trail.mdvirt-api product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • Productvirt-api (virtapi) [MANIFEST.json]
  • Release tagv1.9.1-CE-debian12-r2 [MANIFEST.json]
  • Imagereadystack/virtapi:v1.9.1-CE-debian12-r2 [MANIFEST.json]
  • Image index digestsha256:65177dc67dc11ed39de81fa63968e08cc768b7525fcde52aa0c8dc959f670a31 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:38ee20d8459ac3344e048c09fb4295a29ad9615f08037dfb8a2e651cee253ae2 [ReadyStack-virtapi-v1.9.1-CE-debian12-r2.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-virtapi-v1.9.1-CE-debian12-r2.tar.gz (bytes 1173302256) [MANIFEST.json]
  • Archive sha256 at publish84f94b9360bd279f118ff604be0be6f91c81963ee38632b79adc83964e08ea32 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://github.com/kubevirt/kubevirt [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream refv1.9.1 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commitc3d19093f9c7b843b3879b18dc088911c081c39e [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hashde7abf04e51b6cf004d0365dfe6d8c5251edeeb69bfa0caa3d8b366b85fe6f36 (files 12717) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:42b8fca5e5be69af6e37a4c18be2ba59db2bbd6413b74eee167204399281bcd8 [ReadyStack-virtapi-v1.9.1-CE-debian12-r2.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1791523273 (utc 2026-10-09T05:21:13Z) [ReadyStack-virtapi-v1.9.1-CE-debian12-r2.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref quay.io/kubevirt/builder:2606231619-4fe2cd536f@sha256:a48a7dd5a1b80602269b8c714fdaa54f729a9a4a4d096f7ee0d15c94cef343e8 · platform digest sha256:a48a7dd5a1b80602269b8c714fdaa54f729a9a4a4d096f7ee0d15c94cef343e8
    [ReadyStack-virtapi-v1.9.1-CE-debian12-r2.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-virtapi-v1.9.1-CE-debian12-r2.rebuild.json, engine]
  • Engine commit(s)
    • commit ca87f22b0bc07284fe7d35ddd7b8fced30d8dfd5 · dirty yes · first drive 3728
    • commit 140ed2f441b69a1f7286874d7402f1794ec4e478 · dirty yes · first drive 3735
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain874 (created 2026-11-08T07:48:39Z · trigger customer_request · upstream version v1.9.1) [chains, chains #874]
  • Requestbuild request #577 (rebuild) (requested at 2026-11-08T07:44:43Z · requested by kitforge-agent · version v1.9.1) [build_requests, build_requests #577]
  • ReasonKubeVirt v1.9.1 r2 security set: golang.org/x/net v0.62.0 (GO-2026-6860/6866, CVE-2026-78661), PR #225 [build_requests, build_requests #577 request_reason]
  • Supersedesreadystack/virtapi:v1.9.1-CE-debian12-r1 (chain 788) [chains, chains #788]

The path through the harness

Fully recorded

1 chain · 2 drives · 18 stages · 1 rewind

Chain 874 release · ready_to_ship

Created 2026-11-08T07:48:39Z, upstream v1.9.1, build request 577 [chains, chains #874]

DriveStartedMinutesBuild hostHow it stopped
37282026-11-08T07:49:06Z33.5build host 1 withhold-publish ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #3728]
37352026-11-08T09:03:01Z—build host 1 publish-held not recorded [drive_runs, drive_runs #3735]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-08T07:49:16Z2026-11-08T07:49:17Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 29fb78576c73…
acquire 2026-11-08T07:49:42Z2026-11-08T07:49:44Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 725922dbd71a…
license_file 5febf914b9f9…
custody_inputs 5c9530588ed3…
source_tree_hash 01d037b2587c…
source_file_manifest ac5fc885c080…
plan 2026-11-08T07:50:24Z2026-11-08T07:50:25Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report ebc99cd18c85…
input_pin_plan 40c580485f78…
toolchain_lock da6984ccafba…
assemble_kit 2026-11-08T07:59:11Z2026-11-08T07:59:12Z1
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile 162906c42b37…
build_recipe 284f903a18a2…
system_pinning 01ba4719c80b…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 24e425cee54c…
verify_offline_sh 3e8184ea230c…
base_image_digests f7d52724d89c…
dockerfile_offline 162906c42b37…
first_build_digest 7153ea5de333…
remediate 2026-11-08T07:59:42Z2026-11-08T07:59:43Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log c37d20fa24e1…
security_report ec4b7aea98cd…
build_kit 2026-11-08T08:11:16Z2026-11-08T08:11:17Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp e943a802eaf1…
locked_digest fa6621f99906…
freeze_manifest a85ff41d388a…
offline_rebuild_transcript f483e782d3b6…
verdict 2026-11-08T08:11:48Z2026-11-08T08:11:49Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 7029becb812f…
publish_image 2026-11-08T08:12:20Z2026-11-08T08:12:20Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme b43b998a1b36…
promotion_record 6e547c5a26ee…
boot_instance 2026-11-08T08:12:23Z2026-11-08T08:12:23Z1
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle 8c19cc81bd08…
sbom 2026-11-08T08:12:33Z2026-11-08T08:12:34Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md 5bbf54f593d6…
sbom_json f286de267f0b…
schema_discovery 2026-11-08T08:12:36Z2026-11-08T08:12:37Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 43dd93f50e4a…
dependency_tree 50d969d4c255…
table_classification 703de7a49586…
admin_handbook 2026-11-08T08:12:40Z2026-11-08T08:12:40Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 40bf27c6212e…
admin_handbook f3e328bf1635…
db_handbook 2026-11-08T08:12:43Z2026-11-08T08:12:44Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 6e12d053c1b3…
seed_isolation 2fcfebf1ef92…
seed_data 2026-11-08T08:12:46Z2026-11-08T08:12:47Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql 8e20de0579b9…
seed_cases_json 9b56dcab2a31…
seed_validate 2026-11-08T08:12:49Z2026-11-08T08:12:50Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract f150137d3176…
usecase_validate 2026-11-08T08:12:52Z2026-11-08T08:12:53Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests 4145d937414d…
passed_tests fc5dc1221fe2…
test_results fa5cce0fa127…
usecase_contract 7f3af4f19234…
finalize_docs 2026-11-08T08:12:57Z2026-11-08T08:12:58Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json 4d224d424909…
release_notes 0c5cbdd09a8c…
api_integration_guide 8210ff710846…
package_archive invalidated 2026-11-08T09:02:33Z 2026-11-08T08:22:29Z2026-11-08T08:22:33Z1
34 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar 70886962a3a7…
checksums 04da4426a30e…
verify_md 8bd6390af647…
rebuild_md d7e9224236d6…
manifest_txt e3cceba3e30a…
actions_jsonl 079fafed97ed…
provenance_md fa4f154fa0dd…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json a816f1e19be9…

[stage_runs]

Rewinds

  • 2026-11-08T09:02:33Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #25661]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-08T08:22:33Z.

4 calls over 2 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 08229 L-A183, L-A15
remediate2001 07727 L-A183, L-A15

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.69 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-08T08:23:22Z 003 clean to publish [held_rounds, held_rounds #1488] $0.69 3 rounds, $40.00 70886962a3a7…

Defects

Fully recorded
  • Ledger entries3 [defects, defects where product_slug=virtapi and this tag or chain]
  • Disclosed in the archive3 [docs/defects/defects.json, entries]

3 ledger entries: by severity low 3; by status open 3.

DefectSeverityStatusFound byFixed in
RSD-virtapi-60f52477a3
Release notes: Names the runtime user by account name only; every other record (SECURITY_REPORT line 7, VERIFY line 33, IMAGE_CONFIG User) gives the numeric user 1001, which is what a Kubernetes… [defects, defects #173130]		lowopenheld review (review model)—
RSD-virtapi-93ee77d3a1
Docker Hub README: Says the build kit is free for any registered account (also line 15, 'free with an account'), but the bundle MANIFEST prices this release's kit at 1000 cents and marks it not a free release. [defects, defects #173131]		lowopenheld review (review model)—
RSD-virtapi-a7f7baa471
VERIFY.md: The release's measured attestations list only SLSA provenance v1 and SPDX; no record shows the Verification Summary Attestation, and the promotion record says promotion is deferred, so the third… [defects, defects #173132]		lowopenheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:38ee20d8459ac3344e048c09fb4295a29ad9615f08037dfb8a2e651cee253ae2 · published digest sha256:38ee20d8459ac3344e048c09fb4295a29ad9615f08037dfb8a2e651cee253ae2 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 323) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-08T09:03:25Z · failing Docker Scout counts 3 packages with copyleft licences (GPL, LGPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-08T09:03:13Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3752947872 · transparency-log entry · integrated 2026-11-08T09:07:42Z) [ReadyStack-virtapi-v1.9.1-CE-debian12-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:65177dc67dc11ed39de81fa63968e08cc768b7525fcde52aa0c8dc959f670a31 · state attached · log index 3752952026 · transparency-log entry
    • kind sbom · digest sha256:65177dc67dc11ed39de81fa63968e08cc768b7525fcde52aa0c8dc959f670a31 · state attached · log index 3752953397 · transparency-log entry
    • kind vsa · digest sha256:65177dc67dc11ed39de81fa63968e08cc768b7525fcde52aa0c8dc959f670a31 · state attached · log index 3752955193 · transparency-log entry
    • kind provenance · digest sha256:38ee20d8459ac3344e048c09fb4295a29ad9615f08037dfb8a2e651cee253ae2 · state attached · log index 3752957115 · transparency-log entry
    • kind sbom · digest sha256:38ee20d8459ac3344e048c09fb4295a29ad9615f08037dfb8a2e651cee253ae2 · state attached · log index 3752958852 · transparency-log entry
    • kind vsa · digest sha256:38ee20d8459ac3344e048c09fb4295a29ad9615f08037dfb8a2e651cee253ae2 · state attached · log index 3752960881 · transparency-log entry
    (at 2026-11-08T09:07:42Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/virtapi/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-08T08:23:30Z on build host 1 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:38ee20d8459ac3344e048c09fb4295a29ad9615f08037dfb8a2e651cee253ae2 [clean-room rebuild ledger, runs[635]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-08T08:12:20Z [stage_runs, stage_runs chain 874 stage publish_image]
  • Archive manifests written2026-11-08T09:05:45Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv2 (used v4 · baseline v2 · elf files 280 · probed 2026-11-08T08:05:23Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-08T09:09:15Z generated: by KitForge release/build_trail.py · generator commit 652df6e0e6aa50b44c0f12948b3d5baab047fc1f
  • 2026-11-08T09:10:54Z publication: promoted at 2026-11-08T09:09:53Z · promoted digest sha256:65177dc67dc11ed39de81fa63968e08cc768b7525fcde52aa0c8dc959f670a31 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 355 · checklist status complete · checklist at 2026-11-08T09:10:54Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-virtapi-v1.9.1-CE-debian12-r2.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-virtapi-v1.9.1-CE-debian12-r2.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-virtapi-v1.9.1-CE-debian12-r2.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-virtapi-v1.9.1-CE-debian12-r2.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-virtapi-v1.9.1-CE-debian12-r2.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-virtapi-v1.9.1-CE-debian12-r2.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/virtapi/v1.9.1-CE-debian12-r2/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/virtapi/v1.9.1-CE-debian12-r2/), as staged for publishing—
ReadyStack-virtapi-v1.9.1-CE-debian12-r2.rebuild.jsonbeside the archive (prodasset /data/production/virtapi/v1.9.1-CE-debian12-r2/), as staged for publishing—
ReadyStack-virtapi-v1.9.1-CE-debian12-r2.rebuild.json.sigstorebeside the archive (prodasset /data/production/virtapi/v1.9.1-CE-debian12-r2/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/virtapi/v1.9.1-CE-debian12-r2/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)577
chainssadb, ReadyStack's engine database (not published)874
defectssadb, ReadyStack's engine database (not published)virtapi v1.9.1-CE-debian12-r2
drive_runssadb, ReadyStack's engine database (not published)chain 874
held_roundssadb, ReadyStack's engine database (not published)chain 874
lesson_recallssadb, ReadyStack's engine database (not published)chain 874
micro_step_runssadb, ReadyStack's engine database (not published)chain 874
release_imagessadb, ReadyStack's engine database (not published)virtapi v1.9.1-CE-debian12-r2
stage_eventssadb, ReadyStack's engine database (not published)chain 874
stage_runssadb, ReadyStack's engine database (not published)chain 874
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—