{
  "schemaVersion": 1,
  "contract": "kungfu-buildchain-publication-authority-registry",
  "defaultDecision": "deny",
  "entries": [
    {
      "workflowPath": ".github/workflows/.build-demo-adapter.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-demo-adapter.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build-release-verify-compat.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-release-verify-compat.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build-sam-verify-compat.yml",
      "authorityClass": "retired-deny",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-sam-verify-compat.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build-wheel-verify-compat.yml",
      "authorityClass": "retired-deny",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-wheel-verify-compat.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-git-sync.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-git-sync.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-authority.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-authority.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-binary-assets.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-release"
      ],
      "credentialMode": "github-token",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-binary-assets.yml",
      "environment": "buildchain-release-assets",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-promote.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.release-promote.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/build.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/build.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-build-demo.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-build-demo.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-build-publication.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-build-publication.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-bootstrap.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "universal-candidate-execution"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-ops-bootstrap.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-housekeeping.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-housekeeping.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-observed-evidence.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "observed-evidence-publication"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-ops-observed-evidence.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-patrol-daily.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-daily.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-warrant-close.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-close.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-artifact-attestation.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-artifact-attestation"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-release-artifact-attestation.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-oci-compose-preview.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "oci-compose-preview"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-release-oci-compose-preview.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-paper.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-release-paper.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-promote.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-release-promote.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-propagation.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-release-propagation.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-signing-authority.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-release-signing-authority.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-tail.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "artifact.publish",
        "release.activate",
        "released-evidence.synthesize",
        "signed-channel.commit"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-release-tail.yml",
      "environment": "caller-bound",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-web.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "web-production"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-release-web.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-build-alpha-dogfood.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-build-binary-distribution.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-build-binary-distribution.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-build-demo-dogfood.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-build-demo-dogfood.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-build-fixture.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-build-fixture.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-build-release-verify-compat.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-build-release-verify-compat.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-build-stable-dogfood.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-build-stable-dogfood.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "universal-candidate-execution"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/self-ops-bootstrap-dogfood.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-dev-delivery.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-ops-dev-delivery.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-governance-audit.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-ops-governance-audit.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-daily.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-monthly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-ops-housekeeping-weekly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-merge-queue.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-ops-merge-queue.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-patrol-daily.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-daily.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-monthly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-ops-patrol-weekly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-ops-promotion-recovery.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-ops-stable-candidate-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-release-binary-assets.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-release-binary-assets.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-release-line-open.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-release-line-open.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-release-npm-dry-run.yml",
      "authorityClass": "dry-run-only",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-release-npm-dry-run.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-release-promote.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-release-promote.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/self-release-tail-dogfood.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "artifact.publish",
        "release.activate",
        "released-evidence.synthesize",
        "signed-channel.commit"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/self-release-tail-dogfood.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    }
  ],
  "workflowFacts": [
    {
      "path": ".github/workflows/.build-demo-adapter.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.build-gate-profile.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.build.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-git-sync.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-authority.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-binary-assets.yml",
      "signals": [
        "write-permission",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-promote.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/build.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-build-adopter-qualification.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/public-build-check.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/public-build-demo.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-build-publication.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-build-stage-capsule-canary.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-bootstrap.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-dev-auto-merge.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-dev-qualification-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-housekeeping.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-observed-evidence.yml",
      "signals": [
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-patrol-daily.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-patrol-monthly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-patrol-weekly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-release-governance.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/public-ops-stable-candidate-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-tail-reseal.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/public-ops-warrant-cancel.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-warrant-close.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-artifact-attestation.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-oci-compose-preview.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-paper.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-promote.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-propagation.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-signing-authority.yml",
      "signals": [
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-tail.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-web.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-build-adopter-dogfood.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/self-build-alpha-dogfood.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-build-binary-distribution.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-build-channel-verify.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/self-build-demo-dogfood.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-build-demo-media-qualification.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/self-build-fixture.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-build-public-consumer-dogfood.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/self-build-stable-candidate-qualification.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/self-build-stable-dogfood.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-build-verify.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/self-ops-bootstrap-dogfood.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-ops-dev-delivery.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-ops-governance-audit.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-ops-housekeeping-daily.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-ops-housekeeping-monthly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-ops-housekeeping-weekly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-ops-merge-queue.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/self-ops-patrol-daily.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-ops-patrol-monthly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-ops-patrol-weekly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-ops-promotion-recovery.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-ops-runner-smoke.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/self-ops-stable-candidate-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-release-binary-assets.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-release-line-open.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-release-next-development.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/self-release-npm-dry-run.yml",
      "signals": [
        "npm-publish"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-release-promote.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/self-release-rehearsal-dogfood.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/self-release-tail-dogfood.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    }
  ],
  "registryDigest": "536dca8dab8dd8e28018a6fd9ac023d0d116e0fdb612ecda870a0a2225a3f77b"
}