{
  "schemaVersion": 1,
  "contract": "kungfu-buildchain-publication-authority-registry",
  "defaultDecision": "deny",
  "entries": [
    {
      "workflowPath": ".github/workflows/.build-candidate.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-candidate.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build-demo-adapter.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-demo-adapter.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build-demo.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-demo.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build-historical.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-historical.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build-publication.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-publication.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build-release-verify-compat.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-release-verify-compat.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build-sam-verify-compat.yml",
      "authorityClass": "retired-deny",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-sam-verify-compat.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build-wheel-verify-compat.yml",
      "authorityClass": "retired-deny",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build-wheel-verify-compat.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.build.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.build.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-alpha-candidate-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-alpha-candidate-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-bootstrap.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "universal-candidate-execution"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.ops-bootstrap.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-dev-auto-merge.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-dev-auto-merge.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-dev-qualification-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-dev-qualification-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-git-sync.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-git-sync.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-housekeeping.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-housekeeping.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-observed-evidence.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "observed-evidence-publication"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.ops-observed-evidence.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-patrol-daily.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-patrol-daily.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-patrol-monthly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-patrol-monthly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-patrol-weekly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-patrol-weekly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-pipeline-delivery.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-pipeline-delivery.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-pipeline-execute.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-stable-candidate-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-stable-candidate-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-warrant-cancel.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-warrant-cancel.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.ops-warrant-close.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.ops-warrant-close.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-artifact-attestation.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-artifact-attestation"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.release-artifact-attestation.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-authority.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-authority.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-binary-assets.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-release"
      ],
      "credentialMode": "github-token",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-binary-assets.yml",
      "environment": "buildchain-release-assets",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-candidate-promote.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.release-candidate-promote.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-historical.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.release-historical.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-oci-compose-preview.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "oci-compose-preview"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.release-oci-compose-preview.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-paper.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.release-paper.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-pipeline-products.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-pipeline-version.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-pipeline-version.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-promote.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.release-promote.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-propagation.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-propagation.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-signing-authority.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-signing-authority.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-tail.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "artifact.publish",
        "release.activate",
        "released-evidence.synthesize",
        "signed-channel.commit"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-tail.yml",
      "environment": "caller-bound",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/.release-web.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "web-production"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/.release-web.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/build.yml",
      "authorityClass": "non-publication-oidc",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/build.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/buildchain-recover.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/buildchain.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/dev-pr-auto-merge.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/dev-pr-auto-merge.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-build-demo.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-build-demo.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-build-publication.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-build-publication.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-bootstrap.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "universal-candidate-execution"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-ops-bootstrap.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-dev-auto-merge.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-dev-qualification-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-housekeeping.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-housekeeping.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-observed-evidence.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "observed-evidence-publication"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-ops-observed-evidence.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-patrol-daily.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-daily.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-monthly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-patrol-weekly.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-pipeline.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-recover.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/.release-pipeline-products.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-stable-candidate-patrol.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-cancel.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-ops-warrant-close.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-ops-warrant-close.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-artifact-attestation.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-artifact-attestation"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-release-artifact-attestation.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-oci-compose-preview.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "oci-compose-preview"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-release-oci-compose-preview.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-paper.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-release-paper.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-promote.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-release-promote.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-propagation.yml",
      "authorityClass": "governance-write",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-release-propagation.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-signing-authority.yml",
      "authorityClass": "evidence-publication",
      "publicationCapable": false,
      "capabilityIds": [],
      "credentialMode": "none",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-release-signing-authority.yml",
      "environment": "",
      "environmentMode": "fixed",
      "runnerPolicy": "unqualified",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-tail.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "artifact.publish",
        "release.activate",
        "released-evidence.synthesize",
        "signed-channel.commit"
      ],
      "credentialMode": "caller-secrets",
      "publisherWorkflowMode": "fixed",
      "publisherWorkflowPath": ".github/workflows/public-release-tail.yml",
      "environment": "caller-bound",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/public-release-web.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "web-production"
      ],
      "credentialMode": "oidc",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/public-release-web.yml",
      "environment": "consumer-defined",
      "environmentMode": "caller-bound",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    },
    {
      "workflowPath": ".github/workflows/release-candidate-promote.yml",
      "authorityClass": "product-publication",
      "publicationCapable": true,
      "capabilityIds": [
        "channel-ref",
        "github-release",
        "npm-publish"
      ],
      "credentialMode": "trusted-publishing",
      "publisherWorkflowMode": "caller-bound",
      "publisherWorkflowPath": ".github/workflows/release-candidate-promote.yml",
      "environment": "none",
      "environmentMode": "fixed",
      "runnerPolicy": "qualified-measured",
      "notes": ""
    }
  ],
  "workflowFacts": [
    {
      "path": ".github/workflows/.build-adopter-qualification.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.build-candidate.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.build-check.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.build-demo-adapter.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.build-demo.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.build-gate-profile.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.build-historical.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.build-publication.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.build-stage-capsule-canary.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.build.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-alpha-candidate-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-bootstrap.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-dev-auto-merge.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-dev-qualification-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-git-sync.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-housekeeping.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-observed-evidence.yml",
      "signals": [
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-patrol-daily.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-patrol-monthly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-patrol-weekly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-pipeline-delivery.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-pipeline-execute.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-release-governance.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.ops-stable-candidate-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-tail-reseal.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/.ops-warrant-cancel.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.ops-warrant-close.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-artifact-attestation.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-authority.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-binary-assets.yml",
      "signals": [
        "write-permission",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-candidate-promote.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-historical.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-oci-compose-preview.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-paper.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-pipeline-products.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-pipeline-version.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-promote.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-propagation.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-signing-authority.yml",
      "signals": [
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-tail.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/.release-web.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/build.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/buildchain-recover.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/buildchain.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/check.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/dev-pr-auto-merge.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-build-adopter-qualification.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/public-build-check.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/public-build-demo.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-build-publication.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-build-stage-capsule-canary.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/public-ops-alpha-candidate-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-bootstrap.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-dev-auto-merge.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-dev-qualification-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-housekeeping.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-observed-evidence.yml",
      "signals": [
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-patrol-daily.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-patrol-monthly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-patrol-weekly.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-pipeline.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-recover.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-release-governance.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/public-ops-stable-candidate-patrol.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-tail-reseal.yml",
      "signals": [],
      "classified": false
    },
    {
      "path": ".github/workflows/public-ops-warrant-cancel.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-ops-warrant-close.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-artifact-attestation.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-oci-compose-preview.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-paper.yml",
      "signals": [
        "write-permission",
        "oidc"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-promote.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-propagation.yml",
      "signals": [
        "write-permission"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-signing-authority.yml",
      "signals": [
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-tail.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/public-release-web.yml",
      "signals": [
        "write-permission",
        "oidc",
        "environment"
      ],
      "classified": true
    },
    {
      "path": ".github/workflows/release-candidate-promote.yml",
      "signals": [],
      "classified": true
    },
    {
      "path": ".github/workflows/v4-stage-capsule-canary.yml",
      "signals": [],
      "classified": false
    }
  ],
  "registryDigest": "34af2916bf9785f527f1f4a1f1000f483f2c6617640daf61e81f5749c779962e"
}