Add Phase 4 node toolkit and Celestia payload gates

catalog/components/celestia-appd-6.4.10-linux-arm64.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": "component-v1",
+  "componentId": "celestia-appd-6.4.10-linux-arm64",
+  "artifactKind": "software",
+  "family": "celestia-appd",
+  "version": "6.4.10",
+  "operation": "rename-only",
+  "source": {
+    "repository": "celestiaorg/celestia-app",
+    "commitSha": "0b26ea0cf0b52406d6004cef4a36e13c30ddca85",
+    "treeSha": "2fd5a31e9cb4ff326b22a1a5156003311cbcf466",
+    "tag": "v6.4.10",
+    "asset": {"id": 349955149, "name": "celestia-app_Linux_arm64.tar.gz", "url": "https://github.com/celestiaorg/celestia-app/releases/download/v6.4.10/celestia-app_Linux_arm64.tar.gz", "size": 180685852, "sha256": "52cc9d59f9db5e3d2b7de91008c808f46ba319922db4a39404735b0a5dd6a76b"}
+  },
+  "destination": {"repository": "effectstream/binaries", "tag": "0.3.120"},
+  "distributionTier": "development-only",
+  "releaseMutability": "mutable-warehouse",
+  "license": {"spdx": "Apache-2.0", "evidence": [{"url": "https://raw.githubusercontent.com/celestiaorg/celestia-app/0b26ea0cf0b52406d6004cef4a36e13c30ddca85/LICENSE", "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"}]},
+  "naming": {"outerTemplate": "celestia-appd-{os}-{arch}-v{version}.tar.gz", "container": "tar.gz", "appendOnly": true, "members": [{"path": "LICENSE", "type": "file", "mode": "0644"}, {"path": "README.md", "type": "file", "mode": "0644"}, {"path": "celestia-appd", "type": "file", "mode": "0755"}], "limits": {"maxCompressedBytes": 268435456, "maxExpandedBytes": 536870912, "maxMembers": 3, "maxExpansionRatio": 4}},
+  "install": {"mode": "0755", "pathTemplate": "celestia-appd"},
+  "targets": [{"os": "linux", "arch": "arm64", "tier": "desired", "runner": "ubuntu-24.04-arm", "native": true}],
+  "compatibility": {"kind": "software-runtime", "runtime": "Celestia appd 6.4.10"},
+  "signing": {"applicability": "not-applicable", "distributionSigningState": "NOT_APPLICABLE"},
+  "sbom": {"formats": ["spdx-json", "cyclonedx-json"]},
+  "validation": {"probes": ["sha256", "size", "archive-safety", "member-contract", "native-architecture", "native-linkage", "version", "help", "runtime-smoke"]}
+}

catalog/components/celestia-node-0.28.4-linux-arm64.json

@@ -0,0 +1,26 @@
+{
+  "schemaVersion": "component-v1",
+  "componentId": "celestia-node-0.28.4-linux-arm64",
+  "artifactKind": "software",
+  "family": "celestia-node",
+  "version": "0.28.4",
+  "operation": "rename-only",
+  "source": {
+    "repository": "celestiaorg/celestia-node",
+    "commitSha": "52cd8b52ec031bb9e3b4e476e0b159db2053384c",
+    "treeSha": "1f23daad3fe378c3ee51593d0c2e1d8a26f64515",
+    "tag": "v0.28.4",
+    "asset": {"id": 321528010, "name": "celestia-node_Linux_arm64.tar.gz", "url": "https://github.com/celestiaorg/celestia-node/releases/download/v0.28.4/celestia-node_Linux_arm64.tar.gz", "size": 71184641, "sha256": "09eb0505c5265bb08dfd09f14aa397516efd89d7b8f120e06f133d9e387ad50c"}
+  },
+  "destination": {"repository": "effectstream/binaries", "tag": "0.3.120"},
+  "distributionTier": "development-only",
+  "releaseMutability": "mutable-warehouse",
+  "license": {"spdx": "Apache-2.0", "evidence": [{"url": "https://raw.githubusercontent.com/celestiaorg/celestia-node/52cd8b52ec031bb9e3b4e476e0b159db2053384c/LICENSE", "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"}]},
+  "naming": {"outerTemplate": "celestia-node-{os}-{arch}-v{version}.tar.gz", "container": "tar.gz", "appendOnly": true, "members": [{"path": "LICENSE", "type": "file", "mode": "0644"}, {"path": "README.md", "type": "file", "mode": "0644"}, {"path": "celestia", "type": "file", "mode": "0755"}], "limits": {"maxCompressedBytes": 134217728, "maxExpandedBytes": 268435456, "maxMembers": 3, "maxExpansionRatio": 4}},
+  "install": {"mode": "0755", "pathTemplate": "celestia"},
+  "targets": [{"os": "linux", "arch": "arm64", "tier": "desired", "runner": "ubuntu-24.04-arm", "native": true}],
+  "compatibility": {"kind": "software-runtime", "runtime": "Celestia node 0.28.4"},
+  "signing": {"applicability": "not-applicable", "distributionSigningState": "NOT_APPLICABLE"},
+  "sbom": {"formats": ["spdx-json", "cyclonedx-json"]},
+  "validation": {"probes": ["sha256", "size", "archive-safety", "member-contract", "native-architecture", "native-linkage", "version", "help", "runtime-smoke"]}
+}

catalog/components/midnight-node-2.0.0-rc.4-linux-arm64.json

@@ -0,0 +1,49 @@
+{
+  "schemaVersion": "component-v1",
+  "componentId": "midnight-node-2.0.0-rc.4-linux-arm64",
+  "artifactKind": "software",
+  "family": "midnight-node",
+  "version": "2.0.0-rc.4",
+  "operation": "repackage",
+  "source": {
+    "repository": "midnightntwrk/midnight-node",
+    "commitSha": "651e043b61ed445bf7a5066c60c87ea7bd606073",
+    "treeSha": "5c34f67538f20811d876f6463cf9aca5a3bc4fc9",
+    "tag": "node-2.0.0-rc.4",
+    "asset": {
+      "id": 471563200,
+      "name": "midnight-node-2.0.0-rc.4-linux-arm64.tar.gz",
+      "url": "https://github.com/midnightntwrk/midnight-node/releases/download/node-2.0.0-rc.4/midnight-node-2.0.0-rc.4-linux-arm64.tar.gz",
+      "size": 83084349,
+      "sha256": "2bfd0f768a88d0d1d49cc97bfd6b9f4401646458887219e8c021bff8d9a9ae0b"
+    },
+    "lockedDependencies": true,
+    "toolchain": "forge-phase4-transformation-toolchain-v1@sha256:141140312f43ea071a0f6cc50bf6374f6c0e1437651089eecd65a6b9369b936e",
+    "toolchainDigest": "141140312f43ea071a0f6cc50bf6374f6c0e1437651089eecd65a6b9369b936e",
+    "buildFlags": ["verified-tar-gz-to-deterministic-zip", "rename-root-executable-to-versioned-family-name", "preserve-exact-res-tree", "zip-deflate-9", "zip-epoch-1980-01-01T00:00:00Z"]
+  },
+  "destination": {"repository": "effectstream/binaries", "tag": "0.3.120"},
+  "distributionTier": "development-only",
+  "releaseMutability": "mutable-warehouse",
+  "license": {
+    "spdx": "Apache-2.0",
+    "evidence": [{"url": "https://raw.githubusercontent.com/midnightntwrk/midnight-node/651e043b61ed445bf7a5066c60c87ea7bd606073/LICENSE", "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"}],
+    "redistributionStatement": "Apache-2.0 source license at the exact release commit; official release asset is transformed only into the established warehouse ZIP layout."
+  },
+  "naming": {
+    "outerTemplate": "midnight-node-{os}-{arch}-{version}.zip",
+    "container": "zip",
+    "appendOnly": true,
+    "members": [
+      {"path": "midnight-node-linux-arm64-2.0.0-rc.4", "type": "file", "mode": "0755"},
+      {"path": "res", "type": "directory", "mode": "0755"}
+    ],
+    "limits": {"maxCompressedBytes": 134217728, "maxExpandedBytes": 536870912, "maxMembers": 512, "maxExpansionRatio": 8}
+  },
+  "install": {"mode": "0755", "pathTemplate": "midnight-node-linux-arm64-2.0.0-rc.4"},
+  "targets": [{"os": "linux", "arch": "arm64", "tier": "desired", "runner": "ubuntu-24.04-arm", "native": true}],
+  "compatibility": {"kind": "software-runtime", "runtime": "Midnight node release identity 2.0.0-rc.4; resource tree is mandatory", "probes": ["version", "help", "start-with-res", "missing-res-rejection"]},
+  "signing": {"applicability": "not-applicable", "distributionSigningState": "NOT_APPLICABLE"},
+  "sbom": {"formats": ["spdx-json", "cyclonedx-json"]},
+  "validation": {"probes": ["sha256", "size", "archive-safety", "member-contract", "native-architecture", "native-linkage", "version", "help", "runtime-smoke"]}
+}

catalog/components/midnight-node-toolkit-2.0.0-rc.4-linux-amd64.json

@@ -0,0 +1,30 @@
+{
+  "schemaVersion": "component-v1",
+  "componentId": "midnight-node-toolkit-2.0.0-rc.4-linux-amd64",
+  "artifactKind": "software",
+  "family": "midnight-node-toolkit",
+  "version": "2.0.0-rc.4",
+  "operation": "repackage",
+  "source": {
+    "repository": "midnightntwrk/midnight-node",
+    "commitSha": "651e043b61ed445bf7a5066c60c87ea7bd606073",
+    "treeSha": "5c34f67538f20811d876f6463cf9aca5a3bc4fc9",
+    "tag": "node-2.0.0-rc.4",
+    "asset": {"id": 471563135, "name": "midnight-node-toolkit-2.0.0-rc.4-linux-amd64.tar.gz", "url": "https://github.com/midnightntwrk/midnight-node/releases/download/node-2.0.0-rc.4/midnight-node-toolkit-2.0.0-rc.4-linux-amd64.tar.gz", "size": 50581636, "sha256": "fdd9f6974c1c20928d3b9dc79c13c51bf984eb6dc4cdaf1978a1b037794402de"},
+    "lockedDependencies": true,
+    "toolchain": "forge-phase4-transformation-toolchain-v1@sha256:141140312f43ea071a0f6cc50bf6374f6c0e1437651089eecd65a6b9369b936e",
+    "toolchainDigest": "141140312f43ea071a0f6cc50bf6374f6c0e1437651089eecd65a6b9369b936e",
+    "buildFlags": ["official-binary-not-rebuilt", "single-root-executable", "zip-deflate-9", "zip-epoch-1980-01-01T00:00:00Z"]
+  },
+  "destination": {"repository": "effectstream/binaries", "tag": "0.3.120"},
+  "distributionTier": "development-only",
+  "releaseMutability": "mutable-warehouse",
+  "license": {"spdx": "Apache-2.0", "evidence": [{"url": "https://raw.githubusercontent.com/midnightntwrk/midnight-node/651e043b61ed445bf7a5066c60c87ea7bd606073/LICENSE", "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"}]},
+  "naming": {"outerTemplate": "midnight-node-toolkit-{os}-{arch}-{version}.zip", "container": "zip", "appendOnly": true, "members": [{"path": "midnight-node-toolkit", "type": "file", "mode": "0755"}], "limits": {"maxCompressedBytes": 100663296, "maxExpandedBytes": 268435456, "maxMembers": 1, "maxExpansionRatio": 8}},
+  "install": {"mode": "0755", "pathTemplate": "midnight-node-toolkit"},
+  "targets": [{"os": "linux", "arch": "amd64", "tier": "required", "runner": "ubuntu-24.04", "native": true}],
+  "compatibility": {"kind": "software-runtime", "runtime": "Midnight node 2.0.0 / base Ledger 7.0.3 / CompactC 0.31.0-6587676a9bb2; release identity 2.0.0-rc.4"},
+  "signing": {"applicability": "not-applicable", "distributionSigningState": "NOT_APPLICABLE"},
+  "sbom": {"formats": ["spdx-json", "cyclonedx-json"]},
+  "validation": {"probes": ["sha256", "size", "archive-safety", "member-contract", "native-architecture", "native-linkage", "version", "help", "runtime-smoke"]}
+}

catalog/components/midnight-node-toolkit-2.0.0-rc.4-linux-arm64.json

@@ -0,0 +1,30 @@
+{
+  "schemaVersion": "component-v1",
+  "componentId": "midnight-node-toolkit-2.0.0-rc.4-linux-arm64",
+  "artifactKind": "software",
+  "family": "midnight-node-toolkit",
+  "version": "2.0.0-rc.4",
+  "operation": "repackage",
+  "source": {
+    "repository": "midnightntwrk/midnight-node",
+    "commitSha": "651e043b61ed445bf7a5066c60c87ea7bd606073",
+    "treeSha": "5c34f67538f20811d876f6463cf9aca5a3bc4fc9",
+    "tag": "node-2.0.0-rc.4",
+    "asset": {"id": 471563203, "name": "midnight-node-toolkit-2.0.0-rc.4-linux-arm64.tar.gz", "url": "https://github.com/midnightntwrk/midnight-node/releases/download/node-2.0.0-rc.4/midnight-node-toolkit-2.0.0-rc.4-linux-arm64.tar.gz", "size": 48937006, "sha256": "85513afbfe4dd3fccadde6ad5d7ccf82b8fa0c88d010445fc62c223c9ef078eb"},
+    "lockedDependencies": true,
+    "toolchain": "forge-phase4-transformation-toolchain-v1@sha256:141140312f43ea071a0f6cc50bf6374f6c0e1437651089eecd65a6b9369b936e",
+    "toolchainDigest": "141140312f43ea071a0f6cc50bf6374f6c0e1437651089eecd65a6b9369b936e",
+    "buildFlags": ["official-binary-not-rebuilt", "single-root-executable", "zip-deflate-9", "zip-epoch-1980-01-01T00:00:00Z"]
+  },
+  "destination": {"repository": "effectstream/binaries", "tag": "0.3.120"},
+  "distributionTier": "development-only",
+  "releaseMutability": "mutable-warehouse",
+  "license": {"spdx": "Apache-2.0", "evidence": [{"url": "https://raw.githubusercontent.com/midnightntwrk/midnight-node/651e043b61ed445bf7a5066c60c87ea7bd606073/LICENSE", "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"}]},
+  "naming": {"outerTemplate": "midnight-node-toolkit-{os}-{arch}-{version}.zip", "container": "zip", "appendOnly": true, "members": [{"path": "midnight-node-toolkit", "type": "file", "mode": "0755"}], "limits": {"maxCompressedBytes": 100663296, "maxExpandedBytes": 268435456, "maxMembers": 1, "maxExpansionRatio": 8}},
+  "install": {"mode": "0755", "pathTemplate": "midnight-node-toolkit"},
+  "targets": [{"os": "linux", "arch": "arm64", "tier": "desired", "runner": "ubuntu-24.04-arm", "native": true}],
+  "compatibility": {"kind": "software-runtime", "runtime": "Midnight node 2.0.0 / base Ledger 7.0.3 / CompactC 0.31.0-6587676a9bb2; release identity 2.0.0-rc.4"},
+  "signing": {"applicability": "not-applicable", "distributionSigningState": "NOT_APPLICABLE"},
+  "sbom": {"formats": ["spdx-json", "cyclonedx-json"]},
+  "validation": {"probes": ["sha256", "size", "archive-safety", "member-contract", "native-architecture", "native-linkage", "version", "help", "runtime-smoke"]}
+}

catalog/components/midnight-node-toolkit-2.0.0-rc.4-macos-arm64.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": "component-v1",
+  "componentId": "midnight-node-toolkit-2.0.0-rc.4-macos-arm64",
+  "artifactKind": "software",
+  "family": "midnight-node-toolkit",
+  "version": "2.0.0-rc.4",
+  "operation": "build",
+  "source": {
+    "repository": "midnightntwrk/midnight-node",
+    "commitSha": "651e043b61ed445bf7a5066c60c87ea7bd606073",
+    "treeSha": "5c34f67538f20811d876f6463cf9aca5a3bc4fc9",
+    "tag": "node-2.0.0-rc.4",
+    "lockedDependencies": true,
+    "toolchain": "rustup-channel-1.95.0@sha256:821ff14e4c4a1cbe1e8915f35aff0a3fbbdf8d293ad48ab8f31e3b0440c581f9",
+    "toolchainDigest": "821ff14e4c4a1cbe1e8915f35aff0a3fbbdf8d293ad48ab8f31e3b0440c581f9",
+    "buildFlags": ["cargo-auditable-0.7.5-asset-sha256:92720fff2be27492ca7b216510a27e88a835b526e9e94e46bc36b502ba17d8f0", "cargo-auditable-wrapper-path:$RUNNER_TEMP/phase4-macos-build/tool/cargo-auditable", "forge-phase4-evidence-closure-toolchain-v1@sha256:a5f6a0b22ec5e511d8b85641edb94226c89f4471fa417e752609112f242bfcc5", "cargo auditable rustc --locked --release --no-default-features -p midnight-node-toolkit --bin midnight-node-toolkit -- -C link-arg=-Wl,-no_uuid", "no-default-features", "forbid-erase-proof", "MACOSX_DEPLOYMENT_TARGET=13.0", "SOURCE_DATE_EPOCH=1783616457", "CARGO_INCREMENTAL=0"]
+  },
+  "destination": {"repository": "effectstream/binaries", "tag": "0.3.120"},
+  "distributionTier": "development-only",
+  "releaseMutability": "mutable-warehouse",
+  "license": {"spdx": "Apache-2.0", "evidence": [{"url": "https://raw.githubusercontent.com/midnightntwrk/midnight-node/651e043b61ed445bf7a5066c60c87ea7bd606073/LICENSE", "sha256": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"}]},
+  "naming": {"outerTemplate": "midnight-node-toolkit-{os}-{arch}-{version}.zip", "container": "zip", "appendOnly": true, "members": [{"path": "midnight-node-toolkit", "type": "file", "mode": "0755"}], "limits": {"maxCompressedBytes": 134217728, "maxExpandedBytes": 268435456, "maxMembers": 1, "maxExpansionRatio": 8}},
+  "install": {"mode": "0755", "pathTemplate": "midnight-node-toolkit"},
+  "targets": [{"os": "macos", "arch": "arm64", "tier": "required", "runner": "macos-15", "native": true}],
+  "compatibility": {"kind": "software-runtime", "runtime": "Source package 2.0.0 / Midnight node 2.0.0 / base Ledger 7.0.3 / CompactC 0.31.0-6587676a9bb2; release identity 2.0.0-rc.4"},
+  "signing": {"applicability": "macos", "distributionSigningState": "UNSIGNED_DEVELOPMENT_ONLY"},
+  "sbom": {"formats": ["spdx-json", "cyclonedx-json"]},
+  "validation": {"probes": ["sha256", "size", "archive-safety", "member-contract", "native-architecture", "native-linkage", "version", "help", "runtime-smoke"]}
+}

evidence/phase4/evidence-closure-toolchain.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": "phase4-evidence-closure-toolchain-v1",
+  "scripts": [
+    {
+      "path": "scripts/consolidate_phase4_macos.py",
+      "sha256": "f1aad73e6c4a66e680ca9e07a33979bd5db9aebae39b1d0aee87b1a7d3d0c6b5"
+    },
+    {
+      "path": "scripts/validate_phase4_contract.py",
+      "sha256": "64bc44edf24db4fc6df27b835b95b72df257dd99efe077c627002fdbb05f33d3"
+    }
+  ]
+}