WireGuard 0.0.20250522-CE-ubuntu24.04-r4 build trail

How ReadyStack built readystack/wireguard:0.0.20250522-CE-ubuntu24.04-r4 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.

This trail

As JSON
  • Imagereadystack/wireguard:0.0.20250522-CE-ubuntu24.04-r4
  • Index digestsha256:6f67477b13ede1a4e22892696e211e7ab13dcb819395dba53aa84e60ce7e8641
  • linux/amd64 digestsha256:151da68ab6c7c592bee9c3d260347efca854c45fe7e715cbf1ffc994298555ca
  • ArchiveReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.tar.gz
  • Archive SHA-256 now2692c8a26d4668c37ed2034e0a94b52bc4b074ce7559764e0018799af9013557
  • Pins recorddocs/PINS.md, docs/provenance/PINS.json in the archive (since generated)
  • Generated2026-11-10T21:36:44Z by KitForge release/build_trail.py
  • Sections9 sections, 8 fully recorded; 1 item not recorded

Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:

cosign verify-blob --key https://readystack.dev/keys/cosign.pub \
  --bundle ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.trail.json.sigstore ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.trail.json
ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.trail.jsonReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.trail.json.sigstoreReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.trail.mdWireGuard product page

IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level

Identity

Fully recorded
  • ProductWireGuard (wireguard) [MANIFEST.json]
  • Release tag0.0.20250522-CE-ubuntu24.04-r4 [MANIFEST.json]
  • Imagereadystack/wireguard:0.0.20250522-CE-ubuntu24.04-r4 [MANIFEST.json]
  • Image index digestsha256:6f67477b13ede1a4e22892696e211e7ab13dcb819395dba53aa84e60ce7e8641 [docs/provenance/LOCKED_DIGEST.txt]
  • linux/amd64 image digestsha256:151da68ab6c7c592bee9c3d260347efca854c45fe7e715cbf1ffc994298555ca [ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.rebuild.json, subject.image_manifest_digest]
  • ArchiveReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.tar.gz (bytes 466031373) [MANIFEST.json]
  • Archive sha256 at publish2692c8a26d4668c37ed2034e0a94b52bc4b074ce7559764e0018799af9013557 [MANIFEST.json, tarball_sha256]
  • Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
  • Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
  • Upstream repositoryhttps://git.zx2c4.com/wireguard-go [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream ref0.0.20250522 [docs/provenance/SOURCE_TREE_HASH.json]
  • Upstream commitf333402bd9cbe0f3eeb02507bd14e23d7d639280 [docs/provenance/SOURCE_TREE_HASH.json]
  • Source tree hash2e29cb47cf21a63d63f493a69e65e0a53adc975d58337280681e571fb728dcd3 (files 107) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
  • Kit tree hashsha256:543b6abca0389e54a930e70dd3f38196cf775af6b83e599360b82382df7facb2 [ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.rebuild.json, inputs.tree_hash]
  • SOURCE_DATE_EPOCH1794290161 (utc 2026-11-10T05:56:01Z) [ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.rebuild.json, inputs.source_date_epoch]
  • Base images
    • ref golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 · platform digest sha256:fea12ba16096adec0f699ce1c4da2154d320450e56c1f63671f95d2a3551c77b
    • ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
    [ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.rebuild.json, bases]
  • BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.rebuild.json, engine]
  • Engine commit(s)
    • commit e3eaace0a74e1a10fea82b44f3849ea9a0e2216a · dirty yes · first drive 4149
    • commit 4c9b9ae57bdaa41861e468b83c8303059b789f97 · dirty yes · first drive 4185
    • commit 2b2c49c37073707cad42f6becfc4cfafebd708af · dirty yes · first drive 4189
    [drive_runs, engine_sha]

Why this release exists

Fully recorded
  • Chain944 (created 2026-11-10T06:10:24Z · trigger customer_request · upstream version 0.0.20250522) [chains, chains #944]
  • Requestbuild request #624 (rebuild) (requested at 2026-11-10T06:02:11Z · requested by kitforge-agent · version 0.0.20250522) [build_requests, build_requests #624]
  • Reasonrevision 0.0.20250522-CE-ubuntu24.04-r4: same upstream version re-dated by its own release (owner 2026-11-10 "date images correctly") [build_requests, build_requests #624 request_reason]
  • Supersedesreadystack/wireguard:0.0.20250522-CE-ubuntu24.04-r3 (chain 934) [chains, chains #934]

The path through the harness

Fully recorded

1 chain · 3 drives · 18 stages · 1 rewind

Chain 944 release · ready_to_ship

Created 2026-11-10T06:10:24Z, upstream 0.0.20250522, build request 624 [chains, chains #944]

DriveStartedMinutesBuild hostHow it stopped
41492026-11-10T06:10:45Z3.4build host 2 withhold-publish stage_failed at assemble_kit; first failed check exists:first_build_digest; 4 ticks [drive_runs, drive_runs #4149]
41852026-11-10T21:09:17Z10.2build host 2 withhold-publish ready_to_ship at package_archive; 16 ticks [drive_runs, drive_runs #4185]
41892026-11-10T21:33:02Z—build host 2 publish-held not recorded [drive_runs, drive_runs #4189]

Stages, in order

StageFirst startPassedAttemptsGate checks passedArtifacts (SHA-256)
intake 2026-11-10T06:10:55Z2026-11-10T06:10:56Z1
4
  • exists:order_json
  • order_json:json_parses
  • order_json:no_forbidden_placeholders
  • produces_paths_exist
 order_json 2252d5a8bf0b…
acquire 2026-11-10T06:11:01Z2026-11-10T06:11:01Z1
12
  • exists:source_tree
  • exists:source_tree_hash
  • exists:source_file_manifest
  • exists:custody_inputs
  • exists:license_file
  • source_tree:dir_nonempty
  • source_tree_hash:json_parses
  • source_file_manifest:json_parses
  • custody_inputs:json_parses
  • license_file:file_nonempty
  • produces_paths_exist
  • custody_inputs:json_true:ce_audit.ce_only
 source_tree 5e81f219d5f3…
license_file 91276db973f2…
custody_inputs 2a064ac7e7f6…
source_tree_hash 24e629f34e56…
source_file_manifest c4bbf20b868e…
plan 2026-11-10T06:11:25Z2026-11-10T06:11:26Z1
10
  • exists:recon_report
  • exists:input_pin_plan
  • exists:toolchain_lock
  • recon_report:md_min_sections:3
  • recon_report:no_forbidden_placeholders
  • input_pin_plan:md_min_sections:2
  • input_pin_plan:no_forbidden_placeholders
  • toolchain_lock:file_nonempty
  • toolchain_lock:no_forbidden_placeholders
  • produces_paths_exist
 recon_report 6db4a23c3b6c…
input_pin_plan 967b18494caa…
toolchain_lock 64749bc791b6…
assemble_kit 2026-11-10T06:14:10Z2026-11-10T21:10:49Z2
27
  • exists:dockerfile
  • exists:base_image_digests
  • exists:system_pinning
  • exists:build_recipe
  • exists:first_build_digest
  • exists:first_boot_health
  • exists:dockerfile_offline
  • exists:verify_offline_sh
  • exists:build_offline_sh
  • exists:generate_sbom_sh
  • dockerfile:file_nonempty
  • dockerfile:no_forbidden_placeholders
  • base_image_digests:file_nonempty
  • system_pinning:file_nonempty
  • build_recipe:json_parses
  • first_build_digest:file_nonempty
  • first_boot_health:file_nonempty
  • dockerfile_offline:file_nonempty
  • dockerfile_offline:no_forbidden_placeholders
  • verify_offline_sh:file_nonempty
  • verify_offline_sh:no_forbidden_placeholders
  • build_offline_sh:file_nonempty
  • build_offline_sh:no_forbidden_placeholders
  • generate_sbom_sh:file_nonempty
  • generate_sbom_sh:no_forbidden_placeholders
  • produces_paths_exist
  • first_boot_health:file_contains:healthy=True
 dockerfile de0ed191f608…
build_recipe 11a3ebf4443b…
system_pinning aa8db05a9a8a…
build_offline_sh 6633aa31b6b4…
generate_sbom_sh ce0f1e6f1e70…
first_boot_health 30fcb7de0a36…
verify_offline_sh 3e8184ea230c…
base_image_digests 2438669402e1…
dockerfile_offline de0ed191f608…
first_build_digest d088c821cb83…
remediate 2026-11-10T21:11:16Z2026-11-10T21:11:17Z1
8
  • exists:vendored_apt
  • exists:remediation_log
  • exists:security_report
  • vendored_apt:dir_exists
  • remediation_log:json_parses
  • security_report:md_min_sections:2
  • security_report:no_forbidden_placeholders
  • produces_paths_exist
 vendored_apt e3b0c44298fc…
remediation_log 20bcd95076e4…
security_report 3084602fce0e…
build_kit 2026-11-10T21:13:17Z2026-11-10T21:13:17Z1
9
  • exists:freeze_manifest
  • exists:locked_digest
  • exists:cosign_stamp
  • exists:offline_rebuild_transcript
  • freeze_manifest:json_parses
  • locked_digest:file_nonempty
  • cosign_stamp:file_nonempty
  • offline_rebuild_transcript:json_parses
  • produces_paths_exist
 cosign_stamp 640d7d3493c6…
locked_digest 9b649f2ac49d…
freeze_manifest f0c0a9ef6f67…
offline_rebuild_transcript adae8c00b701…
verdict 2026-11-10T21:13:43Z2026-11-10T21:13:44Z1
8
  • exists:scout_verdict
  • scout_verdict:json_parses
  • produces_paths_exist
  • scout_verdict:release_check_passed
  • scout_verdict:nonroot_green
  • scout_verdict:zero_fixable_crit_high
  • scout_verdict:osv_clean
  • scout_verdict:no_baked_secrets
 scout_verdict 075b9985df62…
publish_image 2026-11-10T21:14:20Z2026-11-10T21:14:20Z1
7
  • exists:promotion_record
  • exists:hub_readme
  • promotion_record:json_parses
  • hub_readme:md_min_sections:2
  • hub_readme:no_forbidden_placeholders
  • produces_paths_exist
  • promotion_record:json_true:signed
 hub_readme aafa8db7b912…
promotion_record 67c9df155aaa…
boot_instance 2026-11-10T21:14:26Z2026-11-10T21:14:31Z2
3
  • exists:instance_handle
  • instance_handle:json_parses
  • produces_paths_exist
 instance_handle b5ac2033fa92…
sbom 2026-11-10T21:14:38Z2026-11-10T21:14:39Z1
5
  • exists:sbom_json
  • exists:sbom_md
  • sbom_json:json_parses
  • sbom_md:md_min_sections:1
  • produces_paths_exist
 sbom_md ed4da4f20af5…
sbom_json 0556b4e73471…
schema_discovery 2026-11-10T21:14:42Z2026-11-10T21:14:43Z1
7
  • exists:dependency_tree
  • exists:table_classification
  • exists:schema_hash
  • dependency_tree:json_parses
  • table_classification:json_parses
  • schema_hash:file_nonempty
  • produces_paths_exist
 schema_hash 013af02c8980…
dependency_tree 9fdf899f2966…
table_classification a9bc8d64545a…
admin_handbook 2026-11-10T21:14:49Z2026-11-10T21:14:50Z1
7
  • exists:admin_handbook
  • exists:api_map
  • admin_handbook:md_min_sections:10
  • admin_handbook:no_forbidden_placeholders
  • api_map:json_parses
  • produces_paths_exist
  • admin_handbook:command_transcripts_clean
 api_map 91775f2b2366…
admin_handbook c543e49f5d2c…
db_handbook 2026-11-10T21:14:58Z2026-11-10T21:14:59Z1
8
  • exists:db_handbook
  • exists:seed_isolation
  • db_handbook:md_min_sections:5
  • db_handbook:no_forbidden_placeholders
  • seed_isolation:md_min_sections:1
  • seed_isolation:no_forbidden_placeholders
  • produces_paths_exist
  • db_handbook:command_transcripts_clean
 db_handbook 0d78f06e462d…
seed_isolation a98840b12b40…
seed_data 2026-11-10T21:15:05Z2026-11-10T21:15:06Z1
6
  • exists:seed_data_sql
  • exists:seed_cases_json
  • seed_data_sql:sql_parses
  • seed_data_sql:no_forbidden_placeholders
  • seed_cases_json:json_parses
  • produces_paths_exist
 seed_data_sql c860d4a93108…
seed_cases_json e8114a3b1ba9…
seed_validate 2026-11-10T21:15:08Z2026-11-10T21:15:09Z1
3
  • exists:seed_data_contract
  • seed_data_contract:json_parses
  • produces_paths_exist
 seed_data_contract 731916c10726…
usecase_validate 2026-11-10T21:15:27Z2026-11-10T21:15:28Z1
10
  • exists:usecase_contract
  • exists:passed_tests
  • exists:failed_tests
  • exists:test_results
  • usecase_contract:json_parses
  • passed_tests:md_min_sections:1
  • failed_tests:md_min_sections:1
  • test_results:json_parses
  • produces_paths_exist
  • test_results:usecase_thresholds:80,70
 failed_tests b2247b16f5f7…
passed_tests c64a9f673ea1…
test_results 799a108f1875…
usecase_contract 0a2c8f5fed9b…
finalize_docs 2026-11-10T21:15:33Z2026-11-10T21:15:33Z1
9
  • exists:api_integration_guide
  • exists:release_notes
  • exists:defects_json
  • api_integration_guide:md_min_sections:3
  • api_integration_guide:no_forbidden_placeholders
  • release_notes:md_min_sections:3
  • release_notes:no_forbidden_placeholders
  • defects_json:json_parses
  • produces_paths_exist
 defects_json d52a8322ddd7…
release_notes b7effb544054…
api_integration_guide 2e294de3ce4e…
package_archive invalidated 2026-11-10T21:32:37Z 2026-11-10T21:19:25Z2026-11-10T21:19:27Z1
35 (final gate PASS)
  • exists:checksums
  • exists:verify_md
  • exists:rebuild_md
  • exists:provenance_md
  • exists:manifest_txt
  • exists:assetchain_log_md
  • exists:assetchain_log_json
  • exists:actions_jsonl
  • exists:sale_tar
  • checksums:file_nonempty
  • verify_md:md_min_sections:2
  • verify_md:no_forbidden_placeholders
  • rebuild_md:md_min_sections:2
  • rebuild_md:no_forbidden_placeholders
  • provenance_md:md_min_sections:2
  • provenance_md:no_forbidden_placeholders
  • manifest_txt:file_nonempty
  • assetchain_log_md:md_min_sections:1
  • assetchain_log_json:json_parses
  • actions_jsonl:file_nonempty
  • sale_tar:file_nonempty
  • produces_paths_exist
  • G8 cosign
  • G8 scan_grade
  • G8 tag_base_os
  • G8 thread_exit
  • G8 vex_shipped
  • G8 cpu_baseline
  • G8 scout_grade_a
  • G8 script_copies
  • G8 offline_rebuild
  • G8 rebuild_manifest
  • G8 artifact_coverage
  • G8 trademark_shipped
  • G8 assetchain_coverage
 sale_tar af0839086905…
checksums 3a396ea6b946…
verify_md 2ee11648b446…
rebuild_md f11d1128c4da…
manifest_txt 4f3bd96ffbd4…
actions_jsonl 6745a608dd79…
provenance_md 1d4f9ecfe8d7…
assetchain_log_md e9eccaec0c0f…
assetchain_log_json 98fe3434dde0…

[stage_runs]

Rewinds

  • 2026-11-10T21:32:37Z: package_archive to package_archive on docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #30683]

Model work per stage

Fully recorded

Role: writer model. Calls up to 2026-11-10T21:19:27Z.

4 calls over 2 stages

StageCallsRefusedErrorsMax attemptForced commitsReal tokensLesson rules shown
plan2001 05823 L-A183, L-A15
remediate2001 06572 L-A183, L-A15

[micro_step_runs] [lesson_recalls]

Review

Fully recorded

Role: review model.

1 round, 1 counted, $0.28 recorded cost

RoundStartedCriticalMajorMinorVerdictCostCap in forceArchive reviewed
12026-11-10T21:21:29Z 000 clean to publish [held_rounds, held_rounds #1696] $0.28 3 rounds, $40.00 af0839086905…

Defects

Fully recorded
  • Ledger entries1 [defects, defects where product_slug=wireguard and this tag or chain]
  • Disclosed in the archive1 [docs/defects/defects.json, entries]

1 ledger entry: by severity low 1; by status fixed-before-release 1.

DefectSeverityStatusFound byFixed in
RSD-wireguard-460f8bf7e6
Docker Hub README: Live peer addition offered without saying it is not persistent. [defects, defects #230729]		lowfixed-before-releaseheld review (review model)—

Verification

1 item not recorded
  • Reproduced before publishingyes (rebuilt digest sha256:151da68ab6c7c592bee9c3d260347efca854c45fe7e715cbf1ffc994298555ca · published digest sha256:151da68ab6c7c592bee9c3d260347efca854c45fe7e715cbf1ffc994298555ca · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 57) [docs/provenance/REPRO_VERIFICATION.json, verified]
  • Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, thread_exit, trademark_shipped, vex_shipped) [g8_result.json, result]
  • Grade at releaseA (percent 94 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-10T21:33:23Z · failing Docker Scout counts 37 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component).) [SCOUT_EVIDENCE.json, docker_scout_policy]
  • Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-10T21:33:13Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
  • Image signature transparency-log entries [deliverables/provenance/PROMOTION_RECORD.json, sign_stdout_tail]
  • rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3794075619 · transparency-log entry · integrated 2026-11-10T21:35:32Z) [ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
  • Signed attestations
    • kind provenance · digest sha256:6f67477b13ede1a4e22892696e211e7ab13dcb819395dba53aa84e60ce7e8641 · state attached · log index 3794077195 · transparency-log entry
    • kind sbom · digest sha256:6f67477b13ede1a4e22892696e211e7ab13dcb819395dba53aa84e60ce7e8641 · state attached · log index 3794078772 · transparency-log entry
    • kind vsa · digest sha256:6f67477b13ede1a4e22892696e211e7ab13dcb819395dba53aa84e60ce7e8641 · state attached · log index 3794080561 · transparency-log entry
    • kind provenance · digest sha256:151da68ab6c7c592bee9c3d260347efca854c45fe7e715cbf1ffc994298555ca · state attached · log index 3794082905 · transparency-log entry
    • kind sbom · digest sha256:151da68ab6c7c592bee9c3d260347efca854c45fe7e715cbf1ffc994298555ca · state attached · log index 3794084698 · transparency-log entry
    • kind vsa · digest sha256:151da68ab6c7c592bee9c3d260347efca854c45fe7e715cbf1ffc994298555ca · state attached · log index 3794087029 · transparency-log entry
    (at 2026-11-10T21:35:33Z) [attestations.json, results]
  • Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/wireguard/recipe) [docs/provenance/PINS.json]

Offline clean-room rebuilds

  • 2026-11-10T21:21:34Z on build host 2 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
    rebuilt sha256:151da68ab6c7c592bee9c3d260347efca854c45fe7e715cbf1ffc994298555ca [clean-room rebuild ledger, runs[726]]
  • Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)

Publication

Fully recorded 1 pending at generation
  • Image pushed (internal tag), publish_image passed2026-11-10T21:14:20Z [stage_runs, stage_runs chain 944 stage publish_image]
  • Archive manifests written2026-11-10T21:34:34Z [PUBLISH_MANIFEST.json, published_at]
  • Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)

Packages and CPU level

Fully recorded
  • x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 126 · probed 2026-11-10T21:12:03Z · source build_kit) [release_images, isa_level_hard]

History

2 events
  • 2026-11-10T21:36:44Z generated: by KitForge release/build_trail.py · generator commit 7f9440173909c696b80316b684e74f8071be97cf
  • 2026-11-10T21:38:00Z publication: promoted at 2026-11-10T21:37:21Z · promoted digest sha256:6f67477b13ede1a4e22892696e211e7ab13dcb819395dba53aa84e60ce7e8641 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 450 · checklist status complete · checklist at 2026-11-10T21:38:00Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json

Records

25 records
RecordWhere it isRows
docs/defects/defects.jsoninside the archive (ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/IMAGE_EVIDENCE.jsoninside the archive (ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/LOCKED_DIGEST.txtinside the archive (ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/PINS.jsoninside the archive (ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/REPRO_VERIFICATION.jsoninside the archive (ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.tar.gz)—
docs/provenance/SOURCE_TREE_HASH.jsoninside the archive (ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.tar.gz)—
MANIFEST.jsonbeside the archive (prodasset /data/production/wireguard/0.0.20250522-CE-ubuntu24.04-r4/), as staged for publishing—
PUBLISH_MANIFEST.jsonbeside the archive (prodasset /data/production/wireguard/0.0.20250522-CE-ubuntu24.04-r4/), as staged for publishing—
ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.rebuild.jsonbeside the archive (prodasset /data/production/wireguard/0.0.20250522-CE-ubuntu24.04-r4/), as staged for publishing—
ReadyStack-wireguard-0.0.20250522-CE-ubuntu24.04-r4.rebuild.json.sigstorebeside the archive (prodasset /data/production/wireguard/0.0.20250522-CE-ubuntu24.04-r4/), as staged for publishing—
SCOUT_EVIDENCE.jsonbeside the archive (prodasset /data/production/wireguard/0.0.20250522-CE-ubuntu24.04-r4/), as staged for publishing—
clean-room rebuild ledgerthe clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published)—
build_requestssadb, ReadyStack's engine database (not published)624
chainssadb, ReadyStack's engine database (not published)944
defectssadb, ReadyStack's engine database (not published)wireguard 0.0.20250522-CE-ubuntu24.04-r4
drive_runssadb, ReadyStack's engine database (not published)chain 944
held_roundssadb, ReadyStack's engine database (not published)chain 944
lesson_recallssadb, ReadyStack's engine database (not published)chain 944
micro_step_runssadb, ReadyStack's engine database (not published)chain 944
release_imagessadb, ReadyStack's engine database (not published)wireguard 0.0.20250522-CE-ubuntu24.04-r4
stage_eventssadb, ReadyStack's engine database (not published)chain 944
stage_runssadb, ReadyStack's engine database (not published)chain 944
attestations.jsonthe chain's workspace on the controller (not published)—
deliverables/provenance/PROMOTION_RECORD.jsonthe chain's workspace on the controller (not published)—
g8_result.jsonthe chain's workspace on the controller (not published)—