{
  "contract": "kungfu-buildchain-release-tail-capabilities",
  "schemaVersion": 1,
  "transactionPolicy": "buildchain.release-tail/v1",
  "subject": {
    "repository": "kungfu-systems/kungfu",
    "sourceSha": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
    "version": "4.0.0-alpha.1",
    "tag": "v4.0.0-alpha.1",
    "channel": "alpha"
  },
  "capabilities": [
    {
      "id": "artifact.publish",
      "executor": "provider-adapter",
      "adapter": "github-release-assets",
      "artifactRoles": [
        {
          "role": "installable-product",
          "root": "sha256:1111111111111111111111111111111111111111111111111111111111111111"
        },
        {
          "role": "release-passport",
          "root": "sha256:2222222222222222222222222222222222222222222222222222222222222222"
        }
      ],
      "destination": {
        "kind": "github-release",
        "locator": "github-release:kungfu-systems/kungfu@v4.0.0-alpha.1"
      },
      "channelPolicy": {
        "channel": "alpha",
        "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
        "authorityMove": "verified-ref"
      },
      "activationPolicy": { "mode": "none", "environment": "none" },
      "readbackPredicates": [
        {
          "id": "release-assets-match-roots",
          "kind": "provider-assets",
          "expected": "all declared artifact roots are publicly readable"
        }
      ],
      "effect": {
        "kind": "artifact-publication",
        "schema": "kungfu.buildchain.release-tail.effect/v1"
      },
      "observation": {
        "kind": "artifact-publication-readback",
        "schema": "kungfu.buildchain.release-tail.observation/v1"
      },
      "receipt": {
        "kind": "artifact-publication",
        "schema": "kungfu.buildchain.release-tail.receipt/v1"
      },
      "operationIdentity": {
        "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
        "capabilityId": "artifact.publish",
        "subjectRoot": "sha256:3333333333333333333333333333333333333333333333333333333333333333",
        "targetRoot": "sha256:4444444444444444444444444444444444444444444444444444444444444444",
        "attemptKey": "artifact.publish/1"
      },
      "idempotency": {
        "scope": "subject-target",
        "duplicate": "readback-before-retry"
      },
      "retry": {
        "class": "provider-transient",
        "localAttempts": 2,
        "exhausted": "repair-required"
      },
      "evidenceRequirements": [
        "kungfu-buildchain-publish-evidence",
        "kungfu-buildchain-release-passport"
      ]
    },
    {
      "id": "signed-channel.commit",
      "executor": "provider-adapter",
      "adapter": "signed-static-channel",
      "artifactRoles": [
        {
          "role": "signed-channel-index",
          "root": "sha256:5555555555555555555555555555555555555555555555555555555555555555"
        },
        {
          "role": "installer-publication-bundle",
          "root": "sha256:6666666666666666666666666666666666666666666666666666666666666666"
        }
      ],
      "destination": {
        "kind": "well-known-signed-channel",
        "locator": "https://kungfu.tech/.well-known/kungfu/alpha.json"
      },
      "channelPolicy": {
        "channel": "alpha",
        "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
        "authorityMove": "signed-cas"
      },
      "activationPolicy": { "mode": "none", "environment": "none" },
      "readbackPredicates": [
        {
          "id": "signed-channel-root",
          "kind": "public-signed-document",
          "expected": "signature, payload root, source SHA, tag, and previous authority match"
        }
      ],
      "effect": {
        "kind": "signed-channel-commit",
        "schema": "kungfu.buildchain.release-tail.effect/v1"
      },
      "observation": {
        "kind": "signed-channel-readback",
        "schema": "kungfu.buildchain.release-tail.observation/v1"
      },
      "receipt": {
        "kind": "publication-commit",
        "schema": "kungfu.buildchain.release-tail.receipt/v1"
      },
      "operationIdentity": {
        "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
        "capabilityId": "signed-channel.commit",
        "subjectRoot": "sha256:7777777777777777777777777777777777777777777777777777777777777777",
        "targetRoot": "sha256:8888888888888888888888888888888888888888888888888888888888888888",
        "attemptKey": "signed-channel.commit/1"
      },
      "idempotency": {
        "scope": "subject-target",
        "duplicate": "return-observed-receipt"
      },
      "retry": {
        "class": "readback",
        "localAttempts": 2,
        "exhausted": "repair-required"
      },
      "evidenceRequirements": [
        "kungfu-buildchain-publication-commit-evidence/v1"
      ]
    },
    {
      "id": "release.activate",
      "executor": "provider-adapter",
      "adapter": "site-release-activation",
      "artifactRoles": [
        {
          "role": "activation-receipt-set",
          "root": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
        }
      ],
      "destination": {
        "kind": "production-site",
        "locator": "https://kungfu.tech/.well-known/kungfu-release-status.json"
      },
      "channelPolicy": {
        "channel": "alpha",
        "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
        "authorityMove": "verified-ref"
      },
      "activationPolicy": {
        "mode": "receipt-set",
        "environment": "production"
      },
      "readbackPredicates": [
        {
          "id": "release-status-current",
          "kind": "public-json",
          "expected": "source, site source, version, tag, channel, and Passport roots match"
        },
        {
          "id": "installable-product-qualified",
          "kind": "public-product-qualification",
          "expected": "a public qualification asset matches an admitted artifact root"
        }
      ],
      "effect": {
        "kind": "release-activation",
        "schema": "kungfu.buildchain.release-tail.effect/v1"
      },
      "observation": {
        "kind": "production-readback",
        "schema": "kungfu.buildchain.release-tail.observation/v1"
      },
      "receipt": {
        "kind": "activation-receipt-set",
        "schema": "kungfu.buildchain.release-tail.receipt/v1"
      },
      "operationIdentity": {
        "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
        "capabilityId": "release.activate",
        "subjectRoot": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
        "targetRoot": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
        "attemptKey": "release.activate/1"
      },
      "idempotency": {
        "scope": "operation",
        "duplicate": "readback-before-retry"
      },
      "retry": {
        "class": "provider-transient",
        "localAttempts": 2,
        "exhausted": "blocked"
      },
      "evidenceRequirements": [
        "kungfu-buildchain-release-activation-receipt-set/v1",
        "kungfu.release-public-readback/v1",
        "kungfu.cli-installed-product-qualification/v1"
      ]
    },
    {
      "id": "released-evidence.synthesize",
      "executor": "buildchain-core",
      "adapter": "activation-receipt-projector",
      "artifactRoles": [
        {
          "role": "activation-receipt-set",
          "root": "sha256:9999999999999999999999999999999999999999999999999999999999999999"
        }
      ],
      "destination": {
        "kind": "release-passport-attachment",
        "locator": ".buildchain/release-evidence/ungfu-public-use.json"
      },
      "channelPolicy": {
        "channel": "alpha",
        "tagPattern": "^v4\\.0\\.0-alpha\\.[0-9]+$",
        "authorityMove": "none"
      },
      "activationPolicy": {
        "mode": "receipt-only",
        "environment": "production"
      },
      "readbackPredicates": [
        {
          "id": "five-canonical-receipts",
          "kind": "rooted-receipt-set",
          "expected": "artifact, Passport, site, public readback, and product qualification receipts share one binding root"
        }
      ],
      "effect": {
        "kind": "released-evidence-projection",
        "schema": "kungfu.buildchain.release-tail.effect/v1"
      },
      "observation": {
        "kind": "released-evidence-validation",
        "schema": "kungfu.buildchain.release-tail.observation/v1"
      },
      "receipt": {
        "kind": "released-evidence",
        "schema": "kungfu.buildchain.release-tail.receipt/v1"
      },
      "operationIdentity": {
        "transactionRoot": "sha256:eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
        "capabilityId": "released-evidence.synthesize",
        "subjectRoot": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
        "targetRoot": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
        "attemptKey": "released-evidence.synthesize/1"
      },
      "idempotency": {
        "scope": "operation",
        "duplicate": "return-observed-receipt"
      },
      "retry": {
        "class": "never",
        "localAttempts": 0,
        "exhausted": "terminal-failure"
      },
      "evidenceRequirements": [
        "kungfu-buildchain-release-activation-receipt-set/v1",
        "kungfu-ungfu-release-evidence-index"
      ]
    }
  ]
}