0.4.0

Built by b10x-bot from 31340a6771cd1207f78d515d938ae0b697bd68f9, the commit this tag names, after
.github/workflows/gate.yml concluded success for it: https://github.com/beyond10x/substrate/actions/runs/33449368962

Image

image	ghcr.io/beyond10x/b10x-substrate-daemon:0.4.0
digest	sha256:5a031758dd581b472ad2f250b850b0ed1bac72b3da4476572a6224ee91765193
revision label	31340a6771cd1207f78d515d938ae0b697bd68f9 (org.opencontainers.image.revision)
platform	linux/amd64

Pull by digest, never by tag:

docker pull ghcr.io/beyond10x/b10x-substrate-daemon@sha256:5a031758dd581b472ad2f250b850b0ed1bac72b3da4476572a6224ee91765193

Verify the signature

The image is signed keylessly through Sigstore. The certificate identity is the workflow
that built it, so a signature from any other workflow, ref or repository fails:

cosign verify \
  --certificate-identity https://github.com/beyond10x/substrate/.github/workflows/release.yml@refs/tags/0.4.0 \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/beyond10x/b10x-substrate-daemon@sha256:5a031758dd581b472ad2f250b850b0ed1bac72b3da4476572a6224ee91765193

What this release does not claim

• The wire contract bundles remain development bundles. Every bundle under
  contracts/substrate-wire/ is a development bundle; a signed daemon image makes none
  of them a stable published contract. A stable-contract decision is its own ADR under
  atlas ADR 0019 (architecture/adr/0019-contract-release-and-conformance.md).
• The image's posture is development, not hosted. Its EXPOSE 8080 and VOLUME
  describe the static-bearer TCP posture that design 06, section 1, marks
  development_only. The hosted trust envelope is accepted in design and not
  implemented; do not run this image as a hosted deployment.
• The binary is not bit-for-bit reproducible. The digest above is recorded;
  reproducing it from source independently is a later milestone.
• The delegated execution lane is not exercised by CI. A host without a delegated
  cgroup v2 subtree answers exec.sandbox-unavailable rather than running unconfined.