{
  "schemaVersion": 1,
  "contract": "kungfu-buildchain-publication-authority-registry",
  "defaultDecision": "deny",
  "entries": [
    {
      "workflowPath": ".github/workflows/.auditable-demo.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.auditable-demo.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.binary-release-assets.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-release"
      ],
      "credentialMode": "github-token",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.binary-release-assets.yml",
      "environment": "buildchain-release-assets",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.declarative-auditable-demo.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.declarative-auditable-demo.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.publication-authority.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.publication-authority.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-candidate-promote.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.release-candidate-promote.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-verify.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-verify.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.sam-release.yml",
      "authorityClass": "retired-deny",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.sam-release.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.sam-verify.yml",
      "authorityClass": "retired-deny",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.sam-verify.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.sync-remote-git.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.sync-remote-git.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.web-surface.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "web-production"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.web-surface.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.wheel-release.yml",
      "authorityClass": "retired-deny",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.wheel-release.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.wheel-verify.yml",
      "authorityClass": "retired-deny",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.wheel-verify.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/artifact-signing-authority.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/artifact-signing-authority.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/auditable-demo.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/auditable-demo.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/binary-distribution.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/binary-distribution.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/binary-release-assets.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/binary-release-assets.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/build-surface-fixture.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/build-surface-fixture.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/build.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/build.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/buildchain-alpha-self-dogfood.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/buildchain-alpha-self-dogfood.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/buildchain-dev-delivery.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/buildchain-dev-delivery.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/buildchain-patrol-daily.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-daily.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/buildchain-patrol-monthly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-monthly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/buildchain-patrol-weekly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/buildchain-patrol-weekly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/buildchain-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/buildchain-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/buildchain-ref-promotion.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/buildchain-ref-promotion.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/buildchain-stable-candidate-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/buildchain-stable-candidate-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/dev-alpha-candidate-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/dev-alpha-candidate-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/dev-delivery-warrant-cancel.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/dev-delivery-warrant-cancel.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/dev-delivery-warrant-close.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/dev-delivery-warrant-close.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/dev-merge-queue-governance.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/dev-merge-queue-governance.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/dev-pr-auto-merge.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/dev-pr-auto-merge.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/dev-qualification-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/dev-qualification-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/engineering-housekeeper-daily.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper-daily.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/engineering-housekeeper-monthly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper-monthly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/engineering-housekeeper-weekly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper-weekly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/engineering-housekeeper.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/engineering-housekeeper.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/github-artifact-attestation.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-artifact-attestation"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/github-artifact-attestation.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/github-governance-audit.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/github-governance-audit.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/npm-publish.yml",
      "authorityClass": "dry-run-only",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/npm-publish.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/paper-release-sealed.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/paper-release-sealed.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/paper-release.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/paper-release.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/patrol-daily.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/patrol-daily.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/patrol-monthly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/patrol-monthly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/patrol-observed-evidence.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "observed-evidence-publication"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/patrol-observed-evidence.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/patrol-weekly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/patrol-weekly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/publication-artifact.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/publication-artifact.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/release-candidate-promote.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/release-candidate-promote.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/release-line-bootstrap.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/release-line-bootstrap.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/release-propagation.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/release-propagation.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/release-tail.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "artifact.publish",
        "release.activate",
        "released-evidence.synthesize",
        "signed-channel.commit"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/release-tail.yml",
      "environment": "caller-bound",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/release-verify.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/release-verify.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/stable-candidate-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/stable-candidate-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    }
  ],
  "workflowFacts": [
    {
      "path": ".github/workflows/.auditable-demo.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.binary-release-assets.yml",
      "signals": [
        "write-permission",
        "environment",
        "github-release"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.build.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment",
        "cloud-credential"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.bump-minor-version.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.declarative-auditable-demo.yml",
      "signals": [
        "write-permission",
        "git-push"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.gate-profile.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.publication-authority.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-candidate-promote.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-docker.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.release-elastic-beanstalk.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.release-new-version.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.release-verify.yml",
      "signals": [
        "write-permission",
        "cloud-credential"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.sam-release.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.sam-verify.yml",
      "signals": [
        "cloud-credential"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.sync-release-page.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.sync-remote-git.yml",
      "signals": [
        "git-push"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.web-surface.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment",
        "cloud-credential"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.wheel-release.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.wheel-verify.yml",
      "signals": [
        "cloud-credential"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/artifact-signing-authority.yml",
      "signals": [
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/auditable-demo-media-profile-qualification.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/auditable-demo.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/binary-distribution.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/binary-release-assets.yml",
      "signals": [
        "write-permission",
        "github-release"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/build-surface-fixture.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/build.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/buildchain-alpha-self-dogfood.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/buildchain-candidate-recovery-dogfood-failure.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/buildchain-dev-delivery.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/buildchain-patrol-daily.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/buildchain-patrol-monthly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/buildchain-patrol-weekly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/buildchain-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/buildchain-ref-promotion.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/buildchain-stable-candidate-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/buildchain-stable-candidate-qualification.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/candidate-lab.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/check.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/dev-alpha-candidate-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/dev-delivery-warrant-cancel.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/dev-delivery-warrant-close.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/dev-merge-queue-governance.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/dev-pr-auto-merge.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/dev-qualification-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/engineering-housekeeper-daily.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/engineering-housekeeper-monthly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/engineering-housekeeper-weekly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/engineering-housekeeper.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/github-artifact-attestation.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/github-governance-audit.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/npm-publish.yml",
      "signals": [
        "npm-publish"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/paper-release-sealed.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/paper-release.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/patrol-daily.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/patrol-monthly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/patrol-observed-evidence.yml",
      "signals": [
        "oidc",
        "environment",
        "cloud-credential"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/patrol-weekly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/publication-artifact.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/release-candidate-promote.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/release-governance-reconcile.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/release-line-bootstrap.yml",
      "signals": [
        "write-permission",
        "git-push"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/release-new-version.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/release-propagation.yml",
      "signals": [
        "write-permission",
        "git-push"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/release-tail.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/release-verify.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/schedule-purge-artifacts.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/self-hosted-runner-smoke.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/stable-candidate-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/v4-public-consumer-dogfood.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/v4-stage-capsule-canary.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/verify.yml",
      "signals": [],
      "classified": false
    }
  ],
  "registryDigest": "456987223fcd21bb1db29583187fcbefacf91668a1a245ed1fb186ffe95c15c3"
}