{
  "records": [
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "aicr-eks-h100-training-kubeflow-v0-14-0-argocd",
        "labels": {
          "sourceType": "aicr",
          "component": "aicr-eks-h100-training-kubeflow",
          "sourceVersion": "v0.14.0",
          "base": "argocd"
        }
      },
      "spec": {
        "source": {
          "type": "aicr",
          "name": "eks-h100-training-kubeflow",
          "version": "v0.14.0",
          "record": "examples/aicr/eks-h100-training-kubeflow/argocd-oci-receipt.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd:0.14.0"
        },
        "baseVariant": {
          "name": "argocd",
          "revision": "generated-v0.14.0",
          "digest": "fc03b2950c81db63a4853424fcb30942e9ecf0e94e54f7474439421dcc254801"
        },
        "configuration": {
          "format": "argocd-application-yaml",
          "objects": "examples/aicr/eks-h100-training-kubeflow/argocd-rendered",
          "inventory": "examples/aicr/eks-h100-training-kubeflow/argocd-rendered/checksums.txt",
          "objectCount": 17
        },
        "inputs": {
          "fixedAtBuildTime": [
            "accelerator=h100",
            "intent=training",
            "os=ubuntu",
            "platform=kubeflow",
            "service=eks",
            "acceleratedNodeSelector=nvidia.com/gpu.present=true",
            "storageClass=gp3",
            "workloadSelector=app.kubernetes.io/part-of=training",
            "namespace=argocd",
            "repoURL=oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt",
            "targetRevision=0.14.0"
          ],
          "installTime": [],
          "installTimeStatus": "none-declared-for-the-rendered-applications"
        },
        "routing": {
          "routes": [
            {
              "id": "argocd-sync-waves",
              "status": "generated-not-live",
              "note": "AICR assigned the 16 component Applications to sync waves 0 through 15."
            },
            {
              "id": "argocd-source-package",
              "status": "published",
              "note": "The parent and two path-based child Applications refer to the public AICR Helm source package at its recorded version and digest."
            }
          ],
          "targetFacts": {
            "platform": "EKS",
            "accelerator": "H100",
            "operatingSystem": "Ubuntu",
            "argoCd": {
              "required": true,
              "applicationNamespace": "argocd",
              "ociHelmSourceRequired": true
            }
          },
          "sourceRecord": "examples/aicr/eks-h100-training-kubeflow/recipe.yaml"
        },
        "delivery": {
          "sourcePackageOci": {
            "status": "public-anonymous-pull-proved",
            "localDigest": "sha256:1120c9a17b23f2c885121034d55445f2d3948c95c23756d02fa2209e4baf8c2e",
            "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd:0.14.0",
            "ociLayout": "examples/aicr/eks-h100-training-kubeflow/oci-layouts/argocd-source"
          },
          "literalConfigOci": {
            "status": "public-anonymous-pull-proved",
            "localDigest": "sha256:dcf7feeeeaece04cb5d55cbc1106862172b3ae77718154252b39db1ad8957010",
            "localPush": "pass",
            "localPull": "pass",
            "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd-config:0.14.0",
            "ociLayout": "examples/aicr/eks-h100-training-kubeflow/oci-layouts/argocd-config"
          },
          "configHubReleaseOci": {
            "status": "base-variant-uploaded",
            "sourceRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd-config:0.14.0",
            "sourceDigest": "sha256:dcf7feeeeaece04cb5d55cbc1106862172b3ae77718154252b39db1ad8957010",
            "receipt": "examples/aicr/eks-h100-training-kubeflow/confighub-upload-receipt.yaml"
          },
          "argoCd": "applications-uploaded-not-reconciled",
          "flux": "not-applicable-to-this-base"
        },
        "promotion": {
          "status": "pass",
          "receipt": "examples/aicr/eks-h100-training-kubeflow/promotion-readiness-receipt.yaml",
          "path": "base -> development -> staging",
          "sourceDigest": "sha256:dcf7feeeeaece04cb5d55cbc1106862172b3ae77718154252b39db1ad8957010",
          "changedApplications": [
            "argoproj.io/v1alpha1/Application argocd/kube-prometheus-stack"
          ],
          "devDryRun": "pass",
          "stagingDryRun": "pass",
          "stagingMatchesReviewedDev": true
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ],
          "normalSet": "approvalRequired",
          "approvalReason": "system-configuration"
        },
        "evidence": {
          "generationReceipt": "examples/aicr/eks-h100-training-kubeflow/argocd-oci-receipt.yaml",
          "sourceChecksums": "examples/aicr/eks-h100-training-kubeflow/argocd-helm-bundle/checksums.txt",
          "renderedChecksums": "examples/aicr/eks-h100-training-kubeflow/argocd-rendered/checksums.txt",
          "sourceManifest": "examples/aicr/eks-h100-training-kubeflow/local-argocd-source-oci-manifest.json",
          "renderedManifest": "examples/aicr/eks-h100-training-kubeflow/local-argocd-config-oci-manifest.json",
          "configHubUploadReceipt": "examples/aicr/eks-h100-training-kubeflow/confighub-upload-receipt.yaml",
          "variantPromotionReceipt": "examples/aicr/eks-h100-training-kubeflow/promotion-readiness-receipt.yaml",
          "scratchPromotionReceipt": "runs/aicr-variant-promotion-proof/receipt.yaml",
          "publicOciReceipt": "examples/aicr/eks-h100-training-kubeflow/public-oci-receipt.yaml"
        },
        "operations": {
          "resourceClass": "system-configuration",
          "ownerClass": "platform-team",
          "changeCadence": "planned-platform-release"
        }
      },
      "status": {
        "level": "partial",
        "claim": "AICR v0.14.0 generated a portable Argo CD Helm source package and 17 literal Application objects. ConfigHub imported those exact Applications from the recorded OCI digest, kept one reviewed Grafana Secret change in development, and promoted the same configuration to staging.",
        "limits": [
          "The two public OCI artifacts were anonymously pulled at their recorded digests.",
          "The persistent helm-catalog demo contains the base, development, and staging Spaces. Exactly one Application changes in development and staging.",
          "No live Argo CD or GPU-cluster reconciliation is claimed.",
          "The target must provide monitoring/aicr-grafana-admin with the expected user and password keys."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "aicr-eks-h100-training-kubeflow-v0-14-0-base",
        "labels": {
          "sourceType": "aicr",
          "component": "aicr-eks-h100-training-kubeflow",
          "sourceVersion": "v0.14.0",
          "base": "base"
        }
      },
      "spec": {
        "source": {
          "type": "aicr",
          "name": "eks-h100-training-kubeflow",
          "version": "v0.14.0",
          "record": "examples/aicr/eks-h100-training-kubeflow/generation-receipt.yaml",
          "packageOciRef": ""
        },
        "baseVariant": {
          "name": "base",
          "revision": "generated-v0.14.0",
          "digest": "6d3e39557e3274037fc57cc1ba437ea3c96d0b4f72effc7b037608bb44488104"
        },
        "configuration": {
          "format": "flux-kubernetes-yaml",
          "objects": "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle",
          "inventory": "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle/checksums.txt",
          "objectCount": 29
        },
        "inputs": {
          "fixedAtBuildTime": [
            "accelerator=h100",
            "intent=training",
            "os=ubuntu",
            "platform=kubeflow",
            "service=eks",
            "acceleratedNodeSelector=nvidia.com/gpu.present=true",
            "storageClass=gp3",
            "workloadSelector=app.kubernetes.io/part-of=training"
          ],
          "installTime": [],
          "installTimeStatus": "none-declared-for-this-generated-artifact"
        },
        "routing": {
          "routes": [
            {
              "id": "flux-dependency-order",
              "status": "generated-not-live",
              "note": "AICR generated Flux dependsOn relationships for the component order. This repo has not reconciled the bundle on a live target."
            },
            {
              "id": "flux-external-artifact",
              "status": "generated-not-live",
              "note": "Two local charts use ArtifactGenerator and ExternalArtifact. Flux must run source-watcher and enable ExternalArtifact on helm-controller."
            },
            {
              "id": "flux-oci-source",
              "status": "not-run",
              "note": "The target needs an OCIRepository named aicr-bundle in flux-system that points at the published AICR artifact."
            }
          ],
          "targetFacts": {
            "platform": "EKS",
            "accelerator": "H100",
            "operatingSystem": "Ubuntu",
            "flux": {
              "minimumVersion": "v2.7.0",
              "controllers": [
                "source-watcher"
              ],
              "featureGates": [
                "ExternalArtifact=true on helm-controller"
              ],
              "source": {
                "apiVersion": "source.toolkit.fluxcd.io/v1",
                "kind": "OCIRepository",
                "name": "aicr-bundle",
                "namespace": "flux-system"
              }
            }
          },
          "sourceRecord": "examples/aicr/eks-h100-training-kubeflow/recipe.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "local-only",
            "localDigest": "sha256:b8089d6400833531c5d0d91177e70cf48f2b86896b0214c2b3318916ac4d29ba",
            "localPush": "pass",
            "localPull": "pass",
            "publicPush": "not-run",
            "publicPull": "not-run",
            "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow:v0.14.0"
          },
          "configHubReleaseOci": {
            "status": "not-run"
          },
          "configHubUpload": {
            "status": "not-run"
          },
          "argoCd": "not-generated",
          "flux": "oci-bundle-generated-local-pull-pass-not-live"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ],
          "normalSet": "approvalRequired",
          "approvalReason": "system-configuration"
        },
        "evidence": {
          "generationReceipt": "examples/aicr/eks-h100-training-kubeflow/generation-receipt.yaml",
          "recipe": "examples/aicr/eks-h100-training-kubeflow/recipe.yaml",
          "checksums": "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle/checksums.txt",
          "localOciManifest": "examples/aicr/eks-h100-training-kubeflow/local-oci-manifest.json",
          "originalGitBundle": "examples/aicr/eks-h100-training-kubeflow/flux-bundle"
        },
        "operations": {
          "resourceClass": "system-configuration",
          "ownerClass": "platform-team",
          "changeCadence": "planned-platform-release"
        }
      },
      "status": {
        "level": "partial",
        "claim": "AICR v0.14.0 generated the committed recipe and OCI-oriented Flux bundle. All 29 Kubernetes objects and every bundle file are recorded; the artifact was pushed to and pulled from a temporary local registry at sha256:b8089d6400833531c5d0d91177e70cf48f2b86896b0214c2b3318916ac4d29ba.",
        "limits": [
          "The OCI artifact has not been published to the public Google Artifact Registry target.",
          "The bundle has not been uploaded to ConfigHub.",
          "Flux needs the recorded source-watcher controller, ExternalArtifact feature gate, and OCIRepository before this bundle can reconcile.",
          "No live Flux or GPU-cluster reconciliation is claimed.",
          "The older Git-oriented bundle is kept as separate evidence and still contains its recorded YOUR_ORG/YOUR_REPO placeholder."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "aqua-trivy-operator-0-32-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "aqua/trivy-operator",
          "sourceVersion": "0.32.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "aqua/trivy-operator",
          "version": "0.32.1",
          "record": "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aqua-trivy-operator:0.32.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "081b6a7123204015bf5b972d7be7539f946ce988cfc670ff8a11926d5f005fe4"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 33
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=aqua/trivy-operator",
            "version=0.32.1",
            "base=default",
            "valuesProfile=recipes/aqua/trivy-operator/0.32.1/effective-values.yaml",
            "namespace=default",
            "releaseName=trivy-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "aqua-trivy-operator-0-32-1-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "aqua/trivy-operator",
          "sourceVersion": "0.32.1",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "aqua/trivy-operator",
          "version": "0.32.1",
          "record": "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aqua-trivy-operator:0.32.1"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=aqua/trivy-operator",
            "version=0.32.1",
            "base=no-crds",
            "valuesProfile=recipes/aqua/trivy-operator/0.32.1/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=trivy-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "clustercompliancereports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "clustercompliancereports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clusterconfigauditreports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "clusterconfigauditreports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clusterinfraassessmentreports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "clusterinfraassessmentreports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clusterrbacassessmentreports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "clusterrbacassessmentreports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clustersbomreports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "clustersbomreports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clustervulnerabilityreports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "clustervulnerabilityreports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "configauditreports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "configauditreports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "exposedsecretreports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "exposedsecretreports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "infraassessmentreports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "infraassessmentreports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "rbacassessmentreports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "rbacassessmentreports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "sbomreports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "sbomreports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "vulnerabilityreports.aquasecurity.github.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "vulnerabilityreports.aquasecurity.github.io",
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "name": "clustercompliancereports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "name": "clusterconfigauditreports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "name": "clusterinfraassessmentreports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "name": "clusterrbacassessmentreports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "name": "clustersbomreports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "name": "clustervulnerabilityreports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "name": "configauditreports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "name": "exposedsecretreports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "name": "infraassessmentreports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "name": "rbacassessmentreports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "name": "sbomreports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "name": "vulnerabilityreports.aquasecurity.github.io",
                  "purpose": "Trivy Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "clustercompliancereports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clusterconfigauditreports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clusterinfraassessmentreports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clusterrbacassessmentreports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clustersbomreports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clustervulnerabilityreports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "configauditreports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "exposedsecretreports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "infraassessmentreports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "rbacassessmentreports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "sbomreports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "vulnerabilityreports.aquasecurity.github.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Trivy Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
                  "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "12 target prerequisites declared by this base.",
              "declarationSource": "recipes/aqua/trivy-operator/0.32.1/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argo-cd-9-5-15-default",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argo-cd",
          "sourceVersion": "9.5.15",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argo-cd",
          "version": "9.5.15",
          "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:9.5.15"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "e8e4e9f365cf8f6d2b4faa7e873dfd1d39a8e598617f5024d71b1cd2651fbac7"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argo-cd/9.5.15/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argo-cd/9.5.15/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 49
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argo-cd",
            "version=9.5.15",
            "base=default",
            "valuesProfile=recipes/argo-cd/argo-cd/9.5.15/effective-values.yaml",
            "namespace=argocd",
            "releaseName=argo-cd",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "argocd-redis",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "auth"
                ],
                "name": "argocd-redis",
                "namespace": "argocd",
                "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "auth"
                  ],
                  "name": "argocd-redis",
                  "namespace": "argocd",
                  "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "argocd/argocd-redis",
                "namespace": "argocd",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly",
                "check": "",
                "declarationPath": "recipes/argo-cd/argo-cd/9.5.15/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-cd/9.5.15/variants/default/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/argo-cd/argo-cd/9.5.15/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argo-cd-9-5-15-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argo-cd",
          "sourceVersion": "9.5.15",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argo-cd",
          "version": "9.5.15",
          "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:9.5.15"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": "b11e168aef43d573d20c07df70386f0e575f0f0dbfebaf05fce61f947158cb9c"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argo-cd/9.5.15/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argo-cd/9.5.15/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 46
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argo-cd",
            "version=9.5.15",
            "base=no-crds",
            "valuesProfile=recipes/argo-cd/argo-cd/9.5.15/effective-values-no-crds.yaml",
            "namespace=argocd",
            "releaseName=argo-cd",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "applications.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "applications.argoproj.io",
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "applicationsets.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "applicationsets.argoproj.io",
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "appprojects.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "appprojects.argoproj.io",
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "argocd-redis",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "auth"
                ],
                "name": "argocd-redis",
                "namespace": "argocd",
                "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "applications.argoproj.io",
                  "purpose": "Argo CD CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "applicationsets.argoproj.io",
                  "purpose": "Argo CD CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "appprojects.argoproj.io",
                  "purpose": "Argo CD CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "auth"
                  ],
                  "name": "argocd-redis",
                  "namespace": "argocd",
                  "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "applications.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-cd/9.5.15/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-cd/9.5.15/variants/no-crds/variant.yaml",
                  "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "applicationsets.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-cd/9.5.15/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-cd/9.5.15/variants/no-crds/variant.yaml",
                  "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "appprojects.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-cd/9.5.15/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-cd/9.5.15/variants/no-crds/variant.yaml",
                  "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "argocd/argocd-redis",
                "namespace": "argocd",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly",
                "check": "",
                "declarationPath": "recipes/argo-cd/argo-cd/9.5.15/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-cd/9.5.15/variants/no-crds/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "4 target prerequisites declared by this base.",
              "declarationSource": "recipes/argo-cd/argo-cd/9.5.15/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "no",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argo-cd-9-5-17-default",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argo-cd",
          "sourceVersion": "9.5.17",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argo-cd",
          "version": "9.5.17",
          "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:9.5.17"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "c7e7c149461d0986bc67c76d72e1c5d9cfa815003a761a9ea1f76574e762d473"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argo-cd/9.5.17/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argo-cd/9.5.17/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 49
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argo-cd",
            "version=9.5.17",
            "base=default",
            "valuesProfile=recipes/argo-cd/argo-cd/9.5.17/effective-values.yaml",
            "namespace=argocd",
            "releaseName=argo-cd",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "argocd-redis",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "auth"
                ],
                "name": "argocd-redis",
                "namespace": "argocd",
                "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "auth"
                  ],
                  "name": "argocd-redis",
                  "namespace": "argocd",
                  "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "argocd/argocd-redis",
                "namespace": "argocd",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly",
                "check": "",
                "declarationPath": "recipes/argo-cd/argo-cd/9.5.17/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-cd/9.5.17/variants/default/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/argo-cd/argo-cd/9.5.17/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "todo",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argo-cd-9-5-17-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argo-cd",
          "sourceVersion": "9.5.17",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argo-cd",
          "version": "9.5.17",
          "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:9.5.17"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": "628d57f3f12753d1a1e57a8dd876ecd89e6b93e763c90a3b071b46c6a200bad7"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argo-cd/9.5.17/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argo-cd/9.5.17/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 46
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argo-cd",
            "version=9.5.17",
            "base=no-crds",
            "valuesProfile=recipes/argo-cd/argo-cd/9.5.17/effective-values-no-crds.yaml",
            "namespace=argocd",
            "releaseName=argo-cd",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "applications.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "applications.argoproj.io",
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "applicationsets.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "applicationsets.argoproj.io",
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "appprojects.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "appprojects.argoproj.io",
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "argocd-redis",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "auth"
                ],
                "name": "argocd-redis",
                "namespace": "argocd",
                "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "applications.argoproj.io",
                  "purpose": "Argo CD CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "applicationsets.argoproj.io",
                  "purpose": "Argo CD CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "appprojects.argoproj.io",
                  "purpose": "Argo CD CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "auth"
                  ],
                  "name": "argocd-redis",
                  "namespace": "argocd",
                  "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "applications.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-cd/9.5.17/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-cd/9.5.17/variants/no-crds/variant.yaml",
                  "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "applicationsets.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-cd/9.5.17/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-cd/9.5.17/variants/no-crds/variant.yaml",
                  "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "appprojects.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Argo CD CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-cd/9.5.17/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-cd/9.5.17/variants/no-crds/variant.yaml",
                  "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "argocd/argocd-redis",
                "namespace": "argocd",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly",
                "check": "",
                "declarationPath": "recipes/argo-cd/argo-cd/9.5.17/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-cd/9.5.17/variants/no-crds/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "4 target prerequisites declared by this base.",
              "declarationSource": "recipes/argo-cd/argo-cd/9.5.17/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "todo",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "no",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "missing-confighub-proof"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argo-events-2-4-21-default",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argo-events",
          "sourceVersion": "2.4.21",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argo-events",
          "version": "2.4.21",
          "record": "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-events:2.4.21"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "e2477b480724b8af1d4ad07dac29be619cf606e7849d8dd5fe5becb2dbd6ac3d"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argo-events/2.4.21/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argo-events/2.4.21/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 9
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argo-events",
            "version=2.4.21",
            "base=default",
            "valuesProfile=recipes/argo-cd/argo-events/2.4.21/effective-values.yaml",
            "namespace=default",
            "releaseName=argo-events",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argo-events-2-4-21-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argo-events",
          "sourceVersion": "2.4.21",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argo-events",
          "version": "2.4.21",
          "record": "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-events:2.4.21"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argo-events/2.4.21/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argo-events/2.4.21/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argo-events",
            "version=2.4.21",
            "base=no-crds",
            "valuesProfile=recipes/argo-cd/argo-events/2.4.21/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=argo-events",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argo-rollouts-2-40-9-default",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argo-rollouts",
          "sourceVersion": "2.40.9",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argo-rollouts",
          "version": "2.40.9",
          "record": "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-rollouts:2.40.9"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "1f6a9d11dfbd60d65ad0885b7edee4f3fd1aca64eb9dccea42e570923e063a6d"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 14
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argo-rollouts",
            "version=2.40.9",
            "base=default",
            "valuesProfile=recipes/argo-cd/argo-rollouts/2.40.9/effective-values.yaml",
            "namespace=default",
            "releaseName=argo-rollouts",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argo-rollouts-2-40-9-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argo-rollouts",
          "sourceVersion": "2.40.9",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argo-rollouts",
          "version": "2.40.9",
          "record": "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-rollouts:2.40.9"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argo-rollouts",
            "version=2.40.9",
            "base=no-crds",
            "valuesProfile=recipes/argo-cd/argo-rollouts/2.40.9/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=argo-rollouts",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argo-workflows-1-0-14-controller-default-reviewed",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argo-workflows",
          "sourceVersion": "1.0.14",
          "base": "controller-default-reviewed"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argo-workflows",
          "version": "1.0.14",
          "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-workflows:1.0.14"
        },
        "baseVariant": {
          "name": "controller-default-reviewed",
          "revision": "r001",
          "digest": "7b46fc888a19969d6e87558651ea704282003b5cc1e47fac61b54019b4eb5e6e"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argo-workflows/1.0.14/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argo-workflows/1.0.14/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml",
          "objectCount": 19
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argo-workflows",
            "version=1.0.14",
            "base=controller-default-reviewed",
            "valuesProfile=recipes/argo-cd/argo-workflows/1.0.14/effective-values.yaml",
            "namespace=default",
            "releaseName=argo-workflows",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "clusterworkflowtemplates.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "clusterworkflowtemplates.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_clusterworkflowtemplates.yaml",
                "sourceSHA256": "6451671e3cca063fdc31a242d1eeedbe07240667f3801c0ece62557f71405838",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_clusterworkflowtemplates.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
              }
            },
            {
              "name": "cronworkflows.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "cronworkflows.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_cronworkflows.yaml",
                "sourceSHA256": "83d3bd6dff62fce97b6db5a7413b25de26bed9f25a3f223aa4b6bf7499290fc6",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_cronworkflows.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
              }
            },
            {
              "name": "workflowartifactgctasks.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workflowartifactgctasks.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowartifactgctasks.yaml",
                "sourceSHA256": "9dd524792dfa35513afe0f754b02f76ac6e1b7488479fcd895fb08faeb8ddbd2",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowartifactgctasks.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
              }
            },
            {
              "name": "workfloweventbindings.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workfloweventbindings.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workfloweventbindings.yaml",
                "sourceSHA256": "0941c8fda9cde30fd320313f8c0c2f1decf323f673e73bf679614af9e815093f",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workfloweventbindings.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
              }
            },
            {
              "name": "workflows.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workflows.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workflows.yaml",
                "sourceSHA256": "4dea37845b8ce92a2c255f5a72a92243674d6ba9c63637146ade88d4ef03484e",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflows.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
              }
            },
            {
              "name": "workflowtaskresults.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workflowtaskresults.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtaskresults.yaml",
                "sourceSHA256": "86fb637b4268b3993f65f240d184604b3de77ecbf803662b9393ef116bfefe04",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtaskresults.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
              }
            },
            {
              "name": "workflowtasksets.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workflowtasksets.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtasksets.yaml",
                "sourceSHA256": "b83e656ce12393c833c3c3356f59eb7500e96adb896c53ec0313a2a3ba8a3f8e",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtasksets.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
              }
            },
            {
              "name": "workflowtemplates.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workflowtemplates.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtemplates.yaml",
                "sourceSHA256": "5aa32400ce3f1fca44c6cc6547a5f74173a9d29ec3fdb2b3da6d40f89a2ea152",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtemplates.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "preflight-or-presync-crd-apply",
              "quirkClass": "crd-install",
              "lifecyclePhase": "pre-apply",
              "actionKind": "install-crd",
              "executionMode": "not-yet-executable",
              "automatic": false,
              "whoRuns": "Prerequisite — run the generated package script before the workloads",
              "operatingDetails": "full CRDs required before workflow-controller and server can start; hook uses server-side apply because full CRDs exceed client-side apply annotation limits",
              "command": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
              "disposition": "routed",
              "delta": "packaged-action",
              "reason": "the package carries the 8 CRDs and its generated script applies them before the workload; this base still needs its own live route receipt",
              "routeSourceVersion": "1.0.14",
              "evidence": [
                "data/hook-route-candidates/candidates.csv"
              ],
              "nextAction": "direct full-CRD package route is proven; next prove controller-run ordering under Argo CD and Flux and test a cross-version CRD upgrade",
              "evidenceRequired": "resolve the named prerequisite/blocker, then capture a live receipt",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -2 · ServerSideApply",
                "flux": "HelmRelease .spec.install.crds=Create (or apply CRDs first)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-2\"\n    argocd.argoproj.io/sync-options: ServerSideApply=true"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
                  "status": "not-run",
                  "evidence": []
                },
                "argoCd": {
                  "implementation": "PreSync · sync-wave -2 · ServerSideApply",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "HelmRelease .spec.install.crds=Create (or apply CRDs first)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "clusterworkflowtemplates.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_clusterworkflowtemplates.yaml",
                  "sourceSHA256": "6451671e3cca063fdc31a242d1eeedbe07240667f3801c0ece62557f71405838",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_clusterworkflowtemplates.yaml",
                  "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "cronworkflows.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_cronworkflows.yaml",
                  "sourceSHA256": "83d3bd6dff62fce97b6db5a7413b25de26bed9f25a3f223aa4b6bf7499290fc6",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_cronworkflows.yaml",
                  "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workflowartifactgctasks.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workflowartifactgctasks.yaml",
                  "sourceSHA256": "9dd524792dfa35513afe0f754b02f76ac6e1b7488479fcd895fb08faeb8ddbd2",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowartifactgctasks.yaml",
                  "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workfloweventbindings.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workfloweventbindings.yaml",
                  "sourceSHA256": "0941c8fda9cde30fd320313f8c0c2f1decf323f673e73bf679614af9e815093f",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workfloweventbindings.yaml",
                  "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workflows.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workflows.yaml",
                  "sourceSHA256": "4dea37845b8ce92a2c255f5a72a92243674d6ba9c63637146ade88d4ef03484e",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflows.yaml",
                  "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workflowtaskresults.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workflowtaskresults.yaml",
                  "sourceSHA256": "86fb637b4268b3993f65f240d184604b3de77ecbf803662b9393ef116bfefe04",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtaskresults.yaml",
                  "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workflowtasksets.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workflowtasksets.yaml",
                  "sourceSHA256": "b83e656ce12393c833c3c3356f59eb7500e96adb896c53ec0313a2a3ba8a3f8e",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtasksets.yaml",
                  "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workflowtemplates.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workflowtemplates.yaml",
                  "sourceSHA256": "5aa32400ce3f1fca44c6cc6547a5f74173a9d29ec3fdb2b3da6d40f89a2ea152",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtemplates.yaml",
                  "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "clusterworkflowtemplates.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_clusterworkflowtemplates.yaml",
                "sourceSHA256": "6451671e3cca063fdc31a242d1eeedbe07240667f3801c0ece62557f71405838",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_clusterworkflowtemplates.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "cronworkflows.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_cronworkflows.yaml",
                "sourceSHA256": "83d3bd6dff62fce97b6db5a7413b25de26bed9f25a3f223aa4b6bf7499290fc6",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_cronworkflows.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workflowartifactgctasks.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowartifactgctasks.yaml",
                "sourceSHA256": "9dd524792dfa35513afe0f754b02f76ac6e1b7488479fcd895fb08faeb8ddbd2",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowartifactgctasks.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workfloweventbindings.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workfloweventbindings.yaml",
                "sourceSHA256": "0941c8fda9cde30fd320313f8c0c2f1decf323f673e73bf679614af9e815093f",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workfloweventbindings.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workflows.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workflows.yaml",
                "sourceSHA256": "4dea37845b8ce92a2c255f5a72a92243674d6ba9c63637146ade88d4ef03484e",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflows.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workflowtaskresults.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtaskresults.yaml",
                "sourceSHA256": "86fb637b4268b3993f65f240d184604b3de77ecbf803662b9393ef116bfefe04",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtaskresults.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workflowtasksets.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtasksets.yaml",
                "sourceSHA256": "b83e656ce12393c833c3c3356f59eb7500e96adb896c53ec0313a2a3ba8a3f8e",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtasksets.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workflowtemplates.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtemplates.yaml",
                "sourceSHA256": "5aa32400ce3f1fca44c6cc6547a5f74173a9d29ec3fdb2b3da6d40f89a2ea152",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtemplates.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "8 target prerequisites declared by this base.",
              "declarationSource": "recipes/argo-cd/argo-workflows/1.0.14/variants/controller-default-reviewed/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argo-workflows-1-0-14-default",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argo-workflows",
          "sourceVersion": "1.0.14",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argo-workflows",
          "version": "1.0.14",
          "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-workflows:1.0.14"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "4db204d97a2b43b18058363cf2420adb26684e775d4f6c1d98ab276ca2d3a141"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argo-workflows/1.0.14/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argo-workflows/1.0.14/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 19
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argo-workflows",
            "version=1.0.14",
            "base=default",
            "valuesProfile=recipes/argo-cd/argo-workflows/1.0.14/effective-values.yaml",
            "namespace=default",
            "releaseName=argo-workflows",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "clusterworkflowtemplates.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "clusterworkflowtemplates.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_clusterworkflowtemplates.yaml",
                "sourceSHA256": "6451671e3cca063fdc31a242d1eeedbe07240667f3801c0ece62557f71405838",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_clusterworkflowtemplates.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "cronworkflows.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "cronworkflows.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_cronworkflows.yaml",
                "sourceSHA256": "83d3bd6dff62fce97b6db5a7413b25de26bed9f25a3f223aa4b6bf7499290fc6",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_cronworkflows.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "workflowartifactgctasks.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workflowartifactgctasks.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowartifactgctasks.yaml",
                "sourceSHA256": "9dd524792dfa35513afe0f754b02f76ac6e1b7488479fcd895fb08faeb8ddbd2",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowartifactgctasks.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "workfloweventbindings.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workfloweventbindings.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workfloweventbindings.yaml",
                "sourceSHA256": "0941c8fda9cde30fd320313f8c0c2f1decf323f673e73bf679614af9e815093f",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workfloweventbindings.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "workflows.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workflows.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workflows.yaml",
                "sourceSHA256": "4dea37845b8ce92a2c255f5a72a92243674d6ba9c63637146ade88d4ef03484e",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflows.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "workflowtaskresults.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workflowtaskresults.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtaskresults.yaml",
                "sourceSHA256": "86fb637b4268b3993f65f240d184604b3de77ecbf803662b9393ef116bfefe04",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtaskresults.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "workflowtasksets.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workflowtasksets.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtasksets.yaml",
                "sourceSHA256": "b83e656ce12393c833c3c3356f59eb7500e96adb896c53ec0313a2a3ba8a3f8e",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtasksets.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "workflowtemplates.argoproj.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "name": "workflowtemplates.argoproj.io",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtemplates.yaml",
                "sourceSHA256": "5aa32400ce3f1fca44c6cc6547a5f74173a9d29ec3fdb2b3da6d40f89a2ea152",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtemplates.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "preflight-or-presync-crd-apply",
              "quirkClass": "crd-install",
              "lifecyclePhase": "pre-apply",
              "actionKind": "install-crd",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Handled — the generated package script applies the CRDs first",
              "operatingDetails": "The controller and server require the Argo Workflows APIs. Helm normally downloads and applies the full CRDs in a hook before those workloads start.",
              "command": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
              "disposition": "observed",
              "delta": "resolved",
              "reason": "the package carries and applies the 8 CRDs before the workload (observed live)",
              "routeSourceVersion": "1.0.14",
              "evidence": [
                "data/hook-route-candidates/selected-routes/argo-cd-argo-workflows-default.yaml",
                "docs/demo/hooks-crds/argo-workflows.md",
                "data/hook-route-candidates/argo-cd-argo-workflows.yaml",
                "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                "recipes/argo-cd/argo-workflows/1.0.14/upstream/full-crds/argoproj.io_workflows.yaml",
                "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml",
                "runs/live-kind-parity/argo-cd-argo-workflows-default/receipt.yaml",
                "runs/live-helm-confighub-compare/argo-cd-argo-workflows-default/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -2 · ServerSideApply",
                "flux": "HelmRelease .spec.install.crds=Create (or apply CRDs first)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-2\"\n    argocd.argoproj.io/sync-options: ServerSideApply=true"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/live-kind-parity/argo-cd-argo-workflows-default/receipt.yaml",
                    "runs/live-helm-confighub-compare/argo-cd-argo-workflows-default/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync · sync-wave -2 · ServerSideApply",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "HelmRelease .spec.install.crds=Create (or apply CRDs first)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "clusterworkflowtemplates.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_clusterworkflowtemplates.yaml",
                  "sourceSHA256": "6451671e3cca063fdc31a242d1eeedbe07240667f3801c0ece62557f71405838",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_clusterworkflowtemplates.yaml",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "cronworkflows.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_cronworkflows.yaml",
                  "sourceSHA256": "83d3bd6dff62fce97b6db5a7413b25de26bed9f25a3f223aa4b6bf7499290fc6",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_cronworkflows.yaml",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workflowartifactgctasks.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workflowartifactgctasks.yaml",
                  "sourceSHA256": "9dd524792dfa35513afe0f754b02f76ac6e1b7488479fcd895fb08faeb8ddbd2",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowartifactgctasks.yaml",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workfloweventbindings.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workfloweventbindings.yaml",
                  "sourceSHA256": "0941c8fda9cde30fd320313f8c0c2f1decf323f673e73bf679614af9e815093f",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workfloweventbindings.yaml",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workflows.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workflows.yaml",
                  "sourceSHA256": "4dea37845b8ce92a2c255f5a72a92243674d6ba9c63637146ade88d4ef03484e",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflows.yaml",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workflowtaskresults.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workflowtaskresults.yaml",
                  "sourceSHA256": "86fb637b4268b3993f65f240d184604b3de77ecbf803662b9393ef116bfefe04",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtaskresults.yaml",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workflowtasksets.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workflowtasksets.yaml",
                  "sourceSHA256": "b83e656ce12393c833c3c3356f59eb7500e96adb896c53ec0313a2a3ba8a3f8e",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtasksets.yaml",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "name": "workflowtemplates.argoproj.io",
                  "sourcePath": "upstream/full-crds/argoproj.io_workflowtemplates.yaml",
                  "sourceSHA256": "5aa32400ce3f1fca44c6cc6547a5f74173a9d29ec3fdb2b3da6d40f89a2ea152",
                  "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtemplates.yaml",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "clusterworkflowtemplates.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_clusterworkflowtemplates.yaml",
                "sourceSHA256": "6451671e3cca063fdc31a242d1eeedbe07240667f3801c0ece62557f71405838",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_clusterworkflowtemplates.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "cronworkflows.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_cronworkflows.yaml",
                "sourceSHA256": "83d3bd6dff62fce97b6db5a7413b25de26bed9f25a3f223aa4b6bf7499290fc6",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_cronworkflows.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workflowartifactgctasks.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowartifactgctasks.yaml",
                "sourceSHA256": "9dd524792dfa35513afe0f754b02f76ac6e1b7488479fcd895fb08faeb8ddbd2",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowartifactgctasks.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workfloweventbindings.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workfloweventbindings.yaml",
                "sourceSHA256": "0941c8fda9cde30fd320313f8c0c2f1decf323f673e73bf679614af9e815093f",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workfloweventbindings.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workflows.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workflows.yaml",
                "sourceSHA256": "4dea37845b8ce92a2c255f5a72a92243674d6ba9c63637146ade88d4ef03484e",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflows.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workflowtaskresults.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtaskresults.yaml",
                "sourceSHA256": "86fb637b4268b3993f65f240d184604b3de77ecbf803662b9393ef116bfefe04",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtaskresults.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workflowtasksets.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtasksets.yaml",
                "sourceSHA256": "b83e656ce12393c833c3c3356f59eb7500e96adb896c53ec0313a2a3ba8a3f8e",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtasksets.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "workflowtemplates.argoproj.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "upstream/full-crds/argoproj.io_workflowtemplates.yaml",
                "sourceSHA256": "5aa32400ce3f1fca44c6cc6547a5f74173a9d29ec3fdb2b3da6d40f89a2ea152",
                "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtemplates.yaml",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
                  "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "8 target prerequisites declared by this base.",
              "declarationSource": "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argo-workflows-1-0-14-minimal-crds",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argo-workflows",
          "sourceVersion": "1.0.14",
          "base": "minimal-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argo-workflows",
          "version": "1.0.14",
          "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-workflows:1.0.14"
        },
        "baseVariant": {
          "name": "minimal-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argo-workflows",
            "version=1.0.14",
            "base=minimal-crds",
            "valuesProfile=recipes/argo-cd/argo-workflows/1.0.14/effective-values-minimal-crds.yaml",
            "namespace=default",
            "releaseName=argo-workflows",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "self-contained-crd-base",
              "quirkClass": "crd-install",
              "lifecyclePhase": "pre-apply",
              "actionKind": "preserve-ordering",
              "executionMode": "target-owned",
              "automatic": false,
              "whoRuns": "Your applier — must apply CRDs before dependent objects",
              "operatingDetails": "Argo Workflows default full CRDs are installed through a Helm hook using server-side apply; this base chooses the self-contained minimal-CRD route instead.",
              "command": "",
              "disposition": "observed",
              "delta": "resolved",
              "reason": "this base installs the required CRDs (observed live)",
              "routeSourceVersion": "1.0.14",
              "evidence": [
                "data/hook-route-candidates/selected-routes/argo-cd-argo-workflows-minimal-crds.yaml",
                "data/hook-route-candidates/argo-cd-argo-workflows.yaml",
                "recipes/argo-cd/argo-workflows/1.0.14/variants/minimal-crds/variant.yaml",
                "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/receipts/install-gate.yaml",
                "runs/next80-local-kind/argo-cd-argo-workflows-1.0.14-minimal-crds/observation-receipt.yaml",
                "runs/argo-workflows-minimal-crds-confighub-proof/latest/confighub-proof-receipt.yaml",
                "runs/live-helm-confighub-compare/argo-cd-argo-workflows-minimal-crds/receipt.yaml",
                "runs/live-kind-parity/argo-cd-argo-workflows-minimal-crds/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "no extra hook — keep CRDs before dependent objects",
                "flux": "no extra hook — make sure CRDs are applied before workloads",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your applier — must apply CRDs before dependent objects",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/next80-local-kind/argo-cd-argo-workflows-1.0.14-minimal-crds/observation-receipt.yaml",
                    "runs/argo-workflows-minimal-crds-confighub-proof/latest/confighub-proof-receipt.yaml",
                    "runs/live-helm-confighub-compare/argo-cd-argo-workflows-minimal-crds/receipt.yaml",
                    "runs/live-kind-parity/argo-cd-argo-workflows-minimal-crds/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "no extra hook — keep CRDs before dependent objects",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "no extra hook — make sure CRDs are applied before workloads",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "argo-cd-argocd-image-updater-1-2-2-default",
        "labels": {
          "sourceType": "helm",
          "component": "argo-cd/argocd-image-updater",
          "sourceVersion": "1.2.2",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "argo-cd/argocd-image-updater",
          "version": "1.2.2",
          "record": "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argocd-image-updater:1.2.2"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "cd823b8187553cfc9b2d03ed00d844c54c0d910f1a1435b9ca3c6404a16db448"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/argo-cd/argocd-image-updater/1.2.2/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/argo-cd/argocd-image-updater/1.2.2/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 11
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=argo-cd/argocd-image-updater",
            "version=1.2.2",
            "base=default",
            "valuesProfile=recipes/argo-cd/argocd-image-updater/1.2.2/effective-values.yaml",
            "namespace=default",
            "releaseName=argocd-image-updater",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed",
        "labels": {
          "sourceType": "helm",
          "component": "autoscaler/cluster-autoscaler",
          "sourceVersion": "9.57.0",
          "base": "controller-default-reviewed"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "autoscaler/cluster-autoscaler",
          "version": "9.57.0",
          "record": "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/autoscaler-cluster-autoscaler:9.57.0"
        },
        "baseVariant": {
          "name": "controller-default-reviewed",
          "revision": "r001",
          "digest": "466d6f9b7670813ecf7a1f20d76b80916bb24abae24f9b768fbd8121f030d9f5"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml",
          "inventory": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml",
          "objectCount": 8
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=autoscaler/cluster-autoscaler",
            "version=9.57.0",
            "base=controller-default-reviewed",
            "valuesProfile=recipes/autoscaler/cluster-autoscaler/9.57.0/effective-values-controller-default-reviewed.yaml",
            "namespace=default",
            "releaseName=cluster-autoscaler",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "kind",
              "type": "requiredValues",
              "required": true,
              "details": {
                "path": "autoDiscovery.clusterName",
                "purpose": "Enables the chart's node-group autodiscovery path so the controller Deployment is rendered.",
                "value": "kind"
              }
            },
            {
              "name": "us-east-1",
              "type": "requiredValues",
              "required": true,
              "details": {
                "path": "awsRegion",
                "purpose": "Supplies the AWS region value required by this chart's default cloud-provider path.",
                "value": "us-east-1"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredValues": [
                {
                  "path": "autoDiscovery.clusterName",
                  "purpose": "Enables the chart's node-group autodiscovery path so the controller Deployment is rendered.",
                  "value": "kind"
                },
                {
                  "path": "awsRegion",
                  "purpose": "Supplies the AWS region value required by this chart's default cloud-provider path.",
                  "value": "us-east-1"
                }
              ]
            },
            "requirements": [
              {
                "category": "value",
                "name": "autoDiscovery.clusterName",
                "namespace": "",
                "requiredBefore": "render",
                "freshness": {
                  "policy": "recheck-before-render",
                  "maxAge": "one-render"
                },
                "purpose": "Enables the chart's node-group autodiscovery path so the controller Deployment is rendered.",
                "check": "",
                "declarationPath": "recipes/autoscaler/cluster-autoscaler/9.57.0/variants/controller-default-reviewed/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/autoscaler/cluster-autoscaler/9.57.0/variants/controller-default-reviewed/variant.yaml"
                ]
              },
              {
                "category": "value",
                "name": "awsRegion",
                "namespace": "",
                "requiredBefore": "render",
                "freshness": {
                  "policy": "recheck-before-render",
                  "maxAge": "one-render"
                },
                "purpose": "Supplies the AWS region value required by this chart's default cloud-provider path.",
                "check": "",
                "declarationPath": "recipes/autoscaler/cluster-autoscaler/9.57.0/variants/controller-default-reviewed/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/autoscaler/cluster-autoscaler/9.57.0/variants/controller-default-reviewed/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "2 target prerequisites declared by this base.",
              "declarationSource": "recipes/autoscaler/cluster-autoscaler/9.57.0/variants/controller-default-reviewed/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "autoscaler-cluster-autoscaler-9-57-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "autoscaler/cluster-autoscaler",
          "sourceVersion": "9.57.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "autoscaler/cluster-autoscaler",
          "version": "9.57.0",
          "record": "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/autoscaler-cluster-autoscaler:9.57.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "005e78a190f1d4c7be268fe4e5fb9181fd0271b08e0f469962c478f7dfe6dcc0"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=autoscaler/cluster-autoscaler",
            "version=9.57.0",
            "base=default",
            "valuesProfile=recipes/autoscaler/cluster-autoscaler/9.57.0/effective-values.yaml",
            "namespace=default",
            "releaseName=cluster-autoscaler",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "K",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "unknown-preflight",
                "ownerClass": "user-stage",
                "requiredInputs": "the missing Helm input value(s)",
                "evidenceRequired": "the missing input(s) supplied and the re-render matching regular Helm; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-kind-parity/autoscaler-cluster-autoscaler-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart autoscaler/cluster-autoscaler --version 9.57.0 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/autoscaler-cluster-autoscaler-default/receipt.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "1 observed prerequisite action record exists, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "watch",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "autoscaler-vertical-pod-autoscaler-0-9-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "autoscaler/vertical-pod-autoscaler",
          "sourceVersion": "0.9.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "autoscaler/vertical-pod-autoscaler",
          "version": "0.9.0",
          "record": "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/autoscaler-vertical-pod-autoscaler:0.9.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "18615de8df98ce553dea90bb4d7b5c5bd7b3ffbf9c9c51a7e85293d14b1ccf51"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 39
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=autoscaler/vertical-pod-autoscaler",
            "version=0.9.0",
            "base=default",
            "valuesProfile=recipes/autoscaler/vertical-pod-autoscaler/0.9.0/effective-values.yaml",
            "namespace=default",
            "releaseName=vertical-pod-autoscaler",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "vpa-tls-certs",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "ca",
                  "cert",
                  "key"
                ],
                "name": "vpa-tls-certs",
                "namespace": "default",
                "purpose": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook",
                "suggestedSource": "Run the chart certgen lifecycle action or stage a valid vpa-tls-certs Secret before waiting for the admission controller"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "ca",
                    "cert",
                    "key"
                  ],
                  "name": "vpa-tls-certs",
                  "namespace": "default",
                  "purpose": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook",
                  "suggestedSource": "Run the chart certgen lifecycle action or stage a valid vpa-tls-certs Secret before waiting for the admission controller"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "default/vpa-tls-certs",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook",
                "check": "Run the chart certgen lifecycle action or stage a valid vpa-tls-certs Secret before waiting for the admission controller",
                "declarationPath": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/variants/default/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "autoscaler-vertical-pod-autoscaler-0-9-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "autoscaler/vertical-pod-autoscaler",
          "sourceVersion": "0.9.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "autoscaler/vertical-pod-autoscaler",
          "version": "0.9.0",
          "record": "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/autoscaler-vertical-pod-autoscaler:0.9.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=autoscaler/vertical-pod-autoscaler",
            "version=0.9.0",
            "base=no-crds",
            "valuesProfile=recipes/autoscaler/vertical-pod-autoscaler/0.9.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=vertical-pod-autoscaler",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "vpa-tls-certs",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "ca",
                  "cert",
                  "key"
                ],
                "name": "vpa-tls-certs",
                "namespace": "default",
                "purpose": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook",
                "suggestedSource": "Run the chart certgen lifecycle action or stage a valid vpa-tls-certs Secret before waiting for the admission controller"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "ca",
                    "cert",
                    "key"
                  ],
                  "name": "vpa-tls-certs",
                  "namespace": "default",
                  "purpose": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook",
                  "suggestedSource": "Run the chart certgen lifecycle action or stage a valid vpa-tls-certs Secret before waiting for the admission controller"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "default/vpa-tls-certs",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook",
                "check": "Run the chart certgen lifecycle action or stage a valid vpa-tls-certs Secret before waiting for the admission controller",
                "declarationPath": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/variants/no-crds/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "aws-ebs-csi-driver/aws-ebs-csi-driver",
          "sourceVersion": "2.60.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "aws-ebs-csi-driver/aws-ebs-csi-driver",
          "version": "2.60.1",
          "record": "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aws-ebs-csi-driver-aws-ebs-csi-driver:2.60.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "b554221fc3102a2c5716a231ba66d1079f892cffcbfe10ef8bfd14d11073bfd1"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 19
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=aws-ebs-csi-driver/aws-ebs-csi-driver",
            "version=2.60.1",
            "base=default",
            "valuesProfile=recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/effective-values.yaml",
            "namespace=default",
            "releaseName=aws-ebs-csi-driver",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "topology",
                "prerequisiteName": "AWS/EKS metadata + node providerID",
                "actionKind": "provide-storage-or-topology",
                "ownerClass": "target-policy",
                "requiredInputs": "AWS/EKS metadata + node providerID",
                "evidenceRequired": "a bound PVC / a target with the required topology; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/target-topology.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/aws-ebs-csi-driver-aws-ebs-csi-driver-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/aws-ebs-csi-driver-aws-ebs-csi-driver-default/receipt.yaml",
                  "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/target-topology.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "1 observed prerequisite action record exists, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-apache-11-4-29-default",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/apache",
          "sourceVersion": "11.4.29",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/apache",
          "version": "11.4.29",
          "record": "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-apache:11.4.29"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "23eadb0e0776f75f2fc35b47dec09cf6aa977f525a336ffc186940ec433890e8"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/apache/11.4.29/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/apache/11.4.29/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/apache",
            "version=11.4.29",
            "base=default",
            "valuesProfile=recipes/bitnami/apache/11.4.29/effective-values.yaml",
            "namespace=default",
            "releaseName=apache",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-apache-11-4-29-legacy",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/apache",
          "sourceVersion": "11.4.29",
          "base": "legacy"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/apache",
          "version": "11.4.29",
          "record": "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-apache:11.4.29"
        },
        "baseVariant": {
          "name": "legacy",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/apache/11.4.29/revisions/legacy/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/apache/11.4.29/revisions/legacy/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/apache",
            "version=11.4.29",
            "base=legacy",
            "valuesProfile=recipes/bitnami/apache/11.4.29/effective-values.yaml",
            "namespace=default",
            "releaseName=apache",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-contour-21-1-4-default",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/contour",
          "sourceVersion": "21.1.4",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/contour",
          "version": "21.1.4",
          "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-contour:21.1.4"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "5ce1cb8433b22f562e69e090ce4733a2e32c78c54675f8113a4c789bdca2436f"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/contour/21.1.4/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/contour/21.1.4/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 20
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/contour",
            "version=21.1.4",
            "base=default",
            "valuesProfile=recipes/bitnami/contour/21.1.4/effective-values.yaml",
            "namespace=default",
            "releaseName=contour",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "contourcert",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "keys": [
                  "ca.crt",
                  "tls.crt",
                  "tls.key"
                ],
                "name": "contourcert",
                "namespace": "default",
                "provisioningMode": "lifecycle-action",
                "purpose": "Contour serving certificate created by the chart's pre-install certgen hook",
                "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
              }
            },
            {
              "name": "envoycert",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "keys": [
                  "ca.crt",
                  "tls.crt",
                  "tls.key"
                ],
                "name": "envoycert",
                "namespace": "default",
                "provisioningMode": "lifecycle-action",
                "purpose": "Envoy client certificate created by the chart's pre-install certgen hook",
                "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "keys": [
                    "ca.crt",
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "contourcert",
                  "namespace": "default",
                  "provisioningMode": "lifecycle-action",
                  "purpose": "Contour serving certificate created by the chart's pre-install certgen hook",
                  "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
                },
                {
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "keys": [
                    "ca.crt",
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "envoycert",
                  "namespace": "default",
                  "provisioningMode": "lifecycle-action",
                  "purpose": "Envoy client certificate created by the chart's pre-install certgen hook",
                  "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "default/contourcert",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Contour serving certificate created by the chart's pre-install certgen hook",
                "check": "package://prerequisites/contour-certgen/run.sh",
                "declarationPath": "recipes/bitnami/contour/21.1.4/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/bitnami/contour/21.1.4/variants/default/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/envoycert",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Envoy client certificate created by the chart's pre-install certgen hook",
                "check": "package://prerequisites/contour-certgen/run.sh",
                "declarationPath": "recipes/bitnami/contour/21.1.4/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/bitnami/contour/21.1.4/variants/default/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "2 target prerequisites declared by this base.",
              "declarationSource": "recipes/bitnami/contour/21.1.4/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-contour-21-1-4-legacy",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/contour",
          "sourceVersion": "21.1.4",
          "base": "legacy"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/contour",
          "version": "21.1.4",
          "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-contour:21.1.4"
        },
        "baseVariant": {
          "name": "legacy",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/contour/21.1.4/revisions/legacy/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/contour/21.1.4/revisions/legacy/r001/rendered/object-inventory.yaml",
          "objectCount": 20
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/contour",
            "version=21.1.4",
            "base=legacy",
            "valuesProfile=recipes/bitnami/contour/21.1.4/effective-values-legacy.yaml",
            "namespace=default",
            "releaseName=contour",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "contourcert",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "keys": [
                  "ca.crt",
                  "tls.crt",
                  "tls.key"
                ],
                "name": "contourcert",
                "namespace": "default",
                "provisioningMode": "lifecycle-action",
                "purpose": "Contour serving certificate created by the chart's pre-install certgen hook",
                "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
              }
            },
            {
              "name": "envoycert",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "keys": [
                  "ca.crt",
                  "tls.crt",
                  "tls.key"
                ],
                "name": "envoycert",
                "namespace": "default",
                "provisioningMode": "lifecycle-action",
                "purpose": "Envoy client certificate created by the chart's pre-install certgen hook",
                "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "preflight-or-presync",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "preflight",
              "actionKind": "run-preflight",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a preflight step before apply (receipted)",
              "operatingDetails": "Contour and Envoy cannot start until contourcert and envoycert exist; Helm normally creates them with a hook that is absent from the ordinary rendered YAML.",
              "command": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "21.1.4",
              "evidence": [
                "data/hook-route-candidates/selected-routes/bitnami-contour-legacy.yaml",
                "recipes/bitnami/contour/21.1.4/lifecycle-route.yaml",
                "recipes/bitnami/contour/21.1.4/variants/legacy/variant.yaml",
                "packages/bitnami/contour/21.1.4/prerequisites/contour-certgen/run.sh",
                "runs/live-kind-parity/bitnami-contour-legacy/receipt.yaml",
                "runs/live-helm-confighub-compare/bitnami-contour-legacy/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -1",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-1\""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/live-kind-parity/bitnami-contour-legacy/receipt.yaml",
                    "runs/live-helm-confighub-compare/bitnami-contour-legacy/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync · sync-wave -1",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "declared-target-facts-and-observed-action-records",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "keys": [
                    "ca.crt",
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "contourcert",
                  "namespace": "default",
                  "provisioningMode": "lifecycle-action",
                  "purpose": "Contour serving certificate created by the chart's pre-install certgen hook",
                  "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
                },
                {
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "keys": [
                    "ca.crt",
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "envoycert",
                  "namespace": "default",
                  "provisioningMode": "lifecycle-action",
                  "purpose": "Envoy client certificate created by the chart's pre-install certgen hook",
                  "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "default/contourcert",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Contour serving certificate created by the chart's pre-install certgen hook",
                "check": "package://prerequisites/contour-certgen/run.sh",
                "declarationPath": "recipes/bitnami/contour/21.1.4/variants/legacy/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/bitnami/contour/21.1.4/variants/legacy/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/envoycert",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Envoy client certificate created by the chart's pre-install certgen hook",
                "check": "package://prerequisites/contour-certgen/run.sh",
                "declarationPath": "recipes/bitnami/contour/21.1.4/variants/legacy/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/bitnami/contour/21.1.4/variants/legacy/variant.yaml"
                ]
              }
            ],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-helm-confighub-compare/bitnami-contour-legacy/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/bitnami/contour/21.1.4 --base legacy --repo-url oci://registry-1.docker.io/bitnamicharts",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/bitnami-contour-legacy/receipt.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "attached-with-observed-actions",
              "reason": "2 prerequisite declarations and 1 follow-up action record are attached.",
              "declarationSource": "recipes/bitnami/contour/21.1.4/variants/legacy/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-contour-21-1-4-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/contour",
          "sourceVersion": "21.1.4",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/contour",
          "version": "21.1.4",
          "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-contour:21.1.4"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/contour/21.1.4/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/contour/21.1.4/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/contour",
            "version=21.1.4",
            "base=no-crds",
            "valuesProfile=recipes/bitnami/contour/21.1.4/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=contour",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "contourcert",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "keys": [
                  "ca.crt",
                  "tls.crt",
                  "tls.key"
                ],
                "name": "contourcert",
                "namespace": "default",
                "provisioningMode": "lifecycle-action",
                "purpose": "Contour serving certificate created by the chart's pre-install certgen hook",
                "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
              }
            },
            {
              "name": "envoycert",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "keys": [
                  "ca.crt",
                  "tls.crt",
                  "tls.key"
                ],
                "name": "envoycert",
                "namespace": "default",
                "provisioningMode": "lifecycle-action",
                "purpose": "Envoy client certificate created by the chart's pre-install certgen hook",
                "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "keys": [
                    "ca.crt",
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "contourcert",
                  "namespace": "default",
                  "provisioningMode": "lifecycle-action",
                  "purpose": "Contour serving certificate created by the chart's pre-install certgen hook",
                  "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
                },
                {
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "keys": [
                    "ca.crt",
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "envoycert",
                  "namespace": "default",
                  "provisioningMode": "lifecycle-action",
                  "purpose": "Envoy client certificate created by the chart's pre-install certgen hook",
                  "suggestedSource": "package://prerequisites/contour-certgen/run.sh"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "default/contourcert",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Contour serving certificate created by the chart's pre-install certgen hook",
                "check": "package://prerequisites/contour-certgen/run.sh",
                "declarationPath": "recipes/bitnami/contour/21.1.4/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/bitnami/contour/21.1.4/variants/no-crds/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/envoycert",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Envoy client certificate created by the chart's pre-install certgen hook",
                "check": "package://prerequisites/contour-certgen/run.sh",
                "declarationPath": "recipes/bitnami/contour/21.1.4/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/bitnami/contour/21.1.4/variants/no-crds/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "2 target prerequisites declared by this base.",
              "declarationSource": "recipes/bitnami/contour/21.1.4/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-elasticsearch-22-1-6-default",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/elasticsearch",
          "sourceVersion": "22.1.6",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/elasticsearch",
          "version": "22.1.6",
          "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-elasticsearch:22.1.6"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "8d292151f332f34736127c59e38079e1664338994e1659100a11da7e2e6bc2d6"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/elasticsearch/22.1.6/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/elasticsearch/22.1.6/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 21
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/elasticsearch",
            "version=22.1.6",
            "base=default",
            "valuesProfile=recipes/bitnami/elasticsearch/22.1.6/effective-values.yaml",
            "namespace=default",
            "releaseName=elasticsearch",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-elasticsearch-22-1-6-ha",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/elasticsearch",
          "sourceVersion": "22.1.6",
          "base": "ha"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/elasticsearch",
          "version": "22.1.6",
          "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-elasticsearch:22.1.6"
        },
        "baseVariant": {
          "name": "ha",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/elasticsearch/22.1.6/revisions/ha/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/elasticsearch/22.1.6/revisions/ha/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/elasticsearch",
            "version=22.1.6",
            "base=ha",
            "valuesProfile=recipes/bitnami/elasticsearch/22.1.6/effective-values-ha.yaml",
            "namespace=default",
            "releaseName=elasticsearch",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-elasticsearch-22-1-6-legacy",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/elasticsearch",
          "sourceVersion": "22.1.6",
          "base": "legacy"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/elasticsearch",
          "version": "22.1.6",
          "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-elasticsearch:22.1.6"
        },
        "baseVariant": {
          "name": "legacy",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/elasticsearch/22.1.6/revisions/legacy/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/elasticsearch/22.1.6/revisions/legacy/r001/rendered/object-inventory.yaml",
          "objectCount": 21
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/elasticsearch",
            "version=22.1.6",
            "base=legacy",
            "valuesProfile=recipes/bitnami/elasticsearch/22.1.6/effective-values.yaml",
            "namespace=default",
            "releaseName=elasticsearch",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-memcached-8-5-5-default",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/memcached",
          "sourceVersion": "8.5.5",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/memcached",
          "version": "8.5.5",
          "record": "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-memcached:8.5.5"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "f2585d5ddb8397b359357847a9d806e940d5e58d33fbc4f6888162dac7969926"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/memcached/8.5.5/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/memcached/8.5.5/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/memcached",
            "version=8.5.5",
            "base=default",
            "valuesProfile=recipes/bitnami/memcached/8.5.5/effective-values.yaml",
            "namespace=default",
            "releaseName=memcached",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-mongodb-19-0-7-existing-secret-replicaset",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/mongodb",
          "sourceVersion": "19.0.7",
          "base": "existing-secret-replicaset"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/mongodb",
          "version": "19.0.7",
          "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.0.7"
        },
        "baseVariant": {
          "name": "existing-secret-replicaset",
          "revision": "r001",
          "digest": "e6bb1a9cd5f8cd648c1de31cf90274158f56b1d10d4c1c737f41a0009b50b58f"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/mongodb/19.0.7/revisions/existing-secret-replicaset/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/mongodb/19.0.7/revisions/existing-secret-replicaset/r001/rendered/object-inventory.yaml",
          "objectCount": 10
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/mongodb",
            "version=19.0.7",
            "base=existing-secret-replicaset",
            "valuesProfile=recipes/bitnami/mongodb/19.0.7/effective-values-existing-secret-replicaset.yaml",
            "namespace=mongodb",
            "releaseName=mongodb",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "mongodb-auth",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "mongodb-root-password",
                  "mongodb-replica-set-key"
                ],
                "name": "mongodb-auth",
                "namespace": "mongodb",
                "purpose": "MongoDB root password and MongoDB-valid replica-set key"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "mongodb-root-password",
                    "mongodb-replica-set-key"
                  ],
                  "name": "mongodb-auth",
                  "namespace": "mongodb",
                  "purpose": "MongoDB root password and MongoDB-valid replica-set key"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "mongodb/mongodb-auth",
                "namespace": "mongodb",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "MongoDB root password and MongoDB-valid replica-set key",
                "check": "",
                "declarationPath": "recipes/bitnami/mongodb/19.0.7/variants/existing-secret-replicaset/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/mongodb/19.0.7/variants/existing-secret-replicaset/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/bitnami/mongodb/19.0.7/variants/existing-secret-replicaset/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-mongodb-19-0-7-static-passwords",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/mongodb",
          "sourceVersion": "19.0.7",
          "base": "static-passwords"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/mongodb",
          "version": "19.0.7",
          "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.0.7"
        },
        "baseVariant": {
          "name": "static-passwords",
          "revision": "r001",
          "digest": "798291fc78d5966edd0c76e416d1aa5f2d402dfc043d20cdba9ca1e5c75d0df8"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/mongodb/19.0.7/revisions/static-passwords/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/mongodb/19.0.7/revisions/static-passwords/r001/rendered/object-inventory.yaml",
          "objectCount": 8
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/mongodb",
            "version=19.0.7",
            "base=static-passwords",
            "valuesProfile=recipes/bitnami/mongodb/19.0.7/effective-values.yaml",
            "namespace=mongodb",
            "releaseName=mongodb",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-mongodb-19-0-9-existing-secret-replicaset",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/mongodb",
          "sourceVersion": "19.0.9",
          "base": "existing-secret-replicaset"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/mongodb",
          "version": "19.0.9",
          "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.0.9"
        },
        "baseVariant": {
          "name": "existing-secret-replicaset",
          "revision": "r001",
          "digest": "d83a388eb3ad8f4f9b6e630a60ae0ea2eda0fb83b3e693cb898f1153d0a15f80"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/mongodb/19.0.9/revisions/existing-secret-replicaset/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/mongodb/19.0.9/revisions/existing-secret-replicaset/r001/rendered/object-inventory.yaml",
          "objectCount": 10
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/mongodb",
            "version=19.0.9",
            "base=existing-secret-replicaset",
            "valuesProfile=recipes/bitnami/mongodb/19.0.9/effective-values-existing-secret-replicaset.yaml",
            "namespace=mongodb",
            "releaseName=mongodb",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "mongodb-auth",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "mongodb-root-password",
                  "mongodb-replica-set-key"
                ],
                "name": "mongodb-auth",
                "namespace": "mongodb",
                "purpose": "MongoDB root password and replica-set key"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "mongodb-root-password",
                    "mongodb-replica-set-key"
                  ],
                  "name": "mongodb-auth",
                  "namespace": "mongodb",
                  "purpose": "MongoDB root password and replica-set key"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "mongodb/mongodb-auth",
                "namespace": "mongodb",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "MongoDB root password and replica-set key",
                "check": "",
                "declarationPath": "recipes/bitnami/mongodb/19.0.9/variants/existing-secret-replicaset/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/mongodb/19.0.9/variants/existing-secret-replicaset/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/bitnami/mongodb/19.0.9/variants/existing-secret-replicaset/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "todo",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-mongodb-19-0-9-static-passwords",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/mongodb",
          "sourceVersion": "19.0.9",
          "base": "static-passwords"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/mongodb",
          "version": "19.0.9",
          "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.0.9"
        },
        "baseVariant": {
          "name": "static-passwords",
          "revision": "r001",
          "digest": "57c0003edfc0c19a66af53c438ac0200e3bb12174bd1068a4b455edc17a4c949"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/mongodb/19.0.9/revisions/static-passwords/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/mongodb/19.0.9/revisions/static-passwords/r001/rendered/object-inventory.yaml",
          "objectCount": 8
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/mongodb",
            "version=19.0.9",
            "base=static-passwords",
            "valuesProfile=recipes/bitnami/mongodb/19.0.9/effective-values.yaml",
            "namespace=mongodb",
            "releaseName=mongodb",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-mongodb-19-1-0-existing-secret-replicaset",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/mongodb",
          "sourceVersion": "19.1.0",
          "base": "existing-secret-replicaset"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/mongodb",
          "version": "19.1.0",
          "record": "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.1.0"
        },
        "baseVariant": {
          "name": "existing-secret-replicaset",
          "revision": "r001",
          "digest": "936f588e879134f4b3c370c6f02f64e45fe9cfdc521b8e63bb4b3a6dec7b3249"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/mongodb/19.1.0/revisions/existing-secret-replicaset/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/mongodb/19.1.0/revisions/existing-secret-replicaset/r001/rendered/object-inventory.yaml",
          "objectCount": 10
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/mongodb",
            "version=19.1.0",
            "base=existing-secret-replicaset",
            "valuesProfile=recipes/bitnami/mongodb/19.1.0/effective-values-existing-secret-replicaset.yaml",
            "namespace=mongodb",
            "releaseName=mongodb",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "mongodb-auth",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "mongodb-root-password",
                  "mongodb-replica-set-key"
                ],
                "name": "mongodb-auth",
                "namespace": "mongodb",
                "purpose": "MongoDB root password and MongoDB-valid replica-set key"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "mongodb-root-password",
                    "mongodb-replica-set-key"
                  ],
                  "name": "mongodb-auth",
                  "namespace": "mongodb",
                  "purpose": "MongoDB root password and MongoDB-valid replica-set key"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "mongodb/mongodb-auth",
                "namespace": "mongodb",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "MongoDB root password and MongoDB-valid replica-set key",
                "check": "",
                "declarationPath": "recipes/bitnami/mongodb/19.1.0/variants/existing-secret-replicaset/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/mongodb/19.1.0/variants/existing-secret-replicaset/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/bitnami/mongodb/19.1.0/variants/existing-secret-replicaset/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-mongodb-19-1-0-static-passwords",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/mongodb",
          "sourceVersion": "19.1.0",
          "base": "static-passwords"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/mongodb",
          "version": "19.1.0",
          "record": "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.1.0"
        },
        "baseVariant": {
          "name": "static-passwords",
          "revision": "r001",
          "digest": "2405209a62223da30dd1d14f97ac5e7c94d8c29ea28068d28c72fc3970f11158"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/mongodb/19.1.0/revisions/static-passwords/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/mongodb/19.1.0/revisions/static-passwords/r001/rendered/object-inventory.yaml",
          "objectCount": 8
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/mongodb",
            "version=19.1.0",
            "base=static-passwords",
            "valuesProfile=recipes/bitnami/mongodb/19.1.0/effective-values.yaml",
            "namespace=mongodb",
            "releaseName=mongodb",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-mysql-14-0-3-existing-secret",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/mysql",
          "sourceVersion": "14.0.3",
          "base": "existing-secret"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/mysql",
          "version": "14.0.3",
          "record": "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mysql:14.0.3"
        },
        "baseVariant": {
          "name": "existing-secret",
          "revision": "r001",
          "digest": "35f764d5ca1dea324b3bd8fea49b4d5eab5054b85f10216d3ee846252853e242"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/mysql/14.0.3/revisions/existing-secret/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/mysql/14.0.3/revisions/existing-secret/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/mysql",
            "version=14.0.3",
            "base=existing-secret",
            "valuesProfile=recipes/bitnami/mysql/14.0.3/effective-values-existing-secret.yaml",
            "namespace=mysql",
            "releaseName=mysql",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "mysql-auth",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "mysql-root-password",
                  "mysql-password",
                  "mysql-replication-password"
                ],
                "name": "mysql-auth",
                "namespace": "mysql",
                "purpose": "MySQL root, user, and replication passwords"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "mysql-root-password",
                    "mysql-password",
                    "mysql-replication-password"
                  ],
                  "name": "mysql-auth",
                  "namespace": "mysql",
                  "purpose": "MySQL root, user, and replication passwords"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "mysql/mysql-auth",
                "namespace": "mysql",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "MySQL root, user, and replication passwords",
                "check": "",
                "declarationPath": "recipes/bitnami/mysql/14.0.3/variants/existing-secret/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/mysql/14.0.3/variants/existing-secret/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/bitnami/mysql/14.0.3/variants/existing-secret/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-mysql-14-0-3-static-passwords",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/mysql",
          "sourceVersion": "14.0.3",
          "base": "static-passwords"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/mysql",
          "version": "14.0.3",
          "record": "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mysql:14.0.3"
        },
        "baseVariant": {
          "name": "static-passwords",
          "revision": "r001",
          "digest": "f5255e2acc903498bb91e3aad431849f888374c43a13050676b83b3ab7fe02a1"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/rendered/object-inventory.yaml",
          "objectCount": 8
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/mysql",
            "version=14.0.3",
            "base=static-passwords",
            "valuesProfile=recipes/bitnami/mysql/14.0.3/effective-values.yaml",
            "namespace=mysql",
            "releaseName=mysql",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-nginx-24-0-2-existing-tls-ingress",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/nginx",
          "sourceVersion": "24.0.2",
          "base": "existing-tls-ingress"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/nginx",
          "version": "24.0.2",
          "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.2"
        },
        "baseVariant": {
          "name": "existing-tls-ingress",
          "revision": "r001",
          "digest": "60945c95552a4d059faecdec34a1774858e6170d55e7d2261f9b502fa4868731"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/nginx",
            "version=24.0.2",
            "base=existing-tls-ingress",
            "valuesProfile=recipes/bitnami/nginx/24.0.2/effective-values-existing-tls-ingress.yaml",
            "namespace=nginx",
            "releaseName=nginx",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "nginx-backend-tls",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "tls.crt",
                  "tls.key",
                  "ca.crt"
                ],
                "name": "nginx-backend-tls",
                "namespace": "nginx",
                "purpose": "TLS certificate material mounted by the NGINX pod"
              }
            },
            {
              "name": "nginx-ingress-tls",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "tls.crt",
                  "tls.key"
                ],
                "name": "nginx-ingress-tls",
                "namespace": "nginx",
                "purpose": "TLS certificate material referenced by the Ingress"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "tls.crt",
                    "tls.key",
                    "ca.crt"
                  ],
                  "name": "nginx-backend-tls",
                  "namespace": "nginx",
                  "purpose": "TLS certificate material mounted by the NGINX pod"
                },
                {
                  "keys": [
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "nginx-ingress-tls",
                  "namespace": "nginx",
                  "purpose": "TLS certificate material referenced by the Ingress"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "nginx/nginx-backend-tls",
                "namespace": "nginx",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "TLS certificate material mounted by the NGINX pod",
                "check": "",
                "declarationPath": "recipes/bitnami/nginx/24.0.2/variants/existing-tls-ingress/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/nginx/24.0.2/variants/existing-tls-ingress/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "nginx/nginx-ingress-tls",
                "namespace": "nginx",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "TLS certificate material referenced by the Ingress",
                "check": "",
                "declarationPath": "recipes/bitnami/nginx/24.0.2/variants/existing-tls-ingress/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/nginx/24.0.2/variants/existing-tls-ingress/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "2 target prerequisites declared by this base.",
              "declarationSource": "recipes/bitnami/nginx/24.0.2/variants/existing-tls-ingress/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-nginx-24-0-2-http-clusterip",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/nginx",
          "sourceVersion": "24.0.2",
          "base": "http-clusterip"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/nginx",
          "version": "24.0.2",
          "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.2"
        },
        "baseVariant": {
          "name": "http-clusterip",
          "revision": "r001",
          "digest": "1eefe2d05ce603981d16cf976aa38b0497de756c716dc5be6825ff6b6ba4c37d"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/nginx",
            "version=24.0.2",
            "base=http-clusterip",
            "valuesProfile=recipes/bitnami/nginx/24.0.2/effective-values.yaml",
            "namespace=nginx",
            "releaseName=nginx",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-separately-published",
            "note": "The selected installer base was uploaded directly as exact ConfigHub Units. This proof did not publish a separate literal-configuration OCI before ConfigHub."
          },
          "configHubReleaseOci": {
            "status": "pass",
            "observedReference": "oci://oci.hub.confighub.com:443/space/hx-catalog-oci-20260726-wr7-nginx:latest",
            "digest": "sha256:26d97438d5b52dcacf140d2ef4c57a97bacd0c63e22d5cfa19076a0723b73049",
            "receipt": "runs/catalog-oci-delivery-proof/bitnami-nginx-24-0-2-http-clusterip.yaml",
            "retained": "no",
            "note": "ConfigHub published the reviewed Units once; all three recorded consumers used this digest, then the test removed its temporary Space."
          },
          "argoCd": "pass",
          "flux": "pass",
          "direct": "pass",
          "historicalGitopsOciStatus": "yes",
          "receipt": "runs/catalog-oci-delivery-proof/bitnami-nginx-24-0-2-http-clusterip.yaml"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ],
          "normalSet": "baseline"
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven"
        },
        "operations": {
          "changeCadence": "application-release",
          "ownerClass": "application-team",
          "resourceClass": "user-workload",
          "classificationSource": "config-catalog/operational-class-examples.yaml",
          "classificationReason": "One application team owns this release and can change it often without changing shared cluster services.",
          "liveSpace": "bitnami-nginx-24-0-2-http-clusterip",
          "target": {
            "ownerClass": "application-team",
            "scope": "application-namespace",
            "selection": "Start in a development namespace, promote to staging, then release to the selected production clusters."
          },
          "gates": {
            "normalSet": "baseline",
            "productionSet": "approvalRequired"
          },
          "rollout": {
            "limit": "The receipt covers two staging clusters; it is not a large production rollout.",
            "method": "environment-promotion-then-fleet",
            "sequence": [
              "development",
              "staging",
              "production targets"
            ],
            "status": "observed"
          }
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "The base was uploaded to a temporary ConfigHub Space, published as a Space release OCI, delivered three ways, and then cleaned up.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-nginx-24-0-4-existing-tls-ingress",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/nginx",
          "sourceVersion": "24.0.4",
          "base": "existing-tls-ingress"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/nginx",
          "version": "24.0.4",
          "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.4"
        },
        "baseVariant": {
          "name": "existing-tls-ingress",
          "revision": "r001",
          "digest": "0d48591ebe834d65713a6fd9a4377ab6c583148cd4ee41fe938d76d9809c4413"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/nginx/24.0.4/revisions/existing-tls-ingress/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/nginx/24.0.4/revisions/existing-tls-ingress/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/nginx",
            "version=24.0.4",
            "base=existing-tls-ingress",
            "valuesProfile=recipes/bitnami/nginx/24.0.4/effective-values-existing-tls-ingress.yaml",
            "namespace=nginx",
            "releaseName=nginx",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "nginx-backend-tls",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "tls.crt",
                  "tls.key",
                  "ca.crt"
                ],
                "name": "nginx-backend-tls",
                "namespace": "nginx",
                "purpose": "TLS certificate material mounted by the NGINX pod"
              }
            },
            {
              "name": "nginx-ingress-tls",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "tls.crt",
                  "tls.key"
                ],
                "name": "nginx-ingress-tls",
                "namespace": "nginx",
                "purpose": "TLS certificate material referenced by the Ingress"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "tls.crt",
                    "tls.key",
                    "ca.crt"
                  ],
                  "name": "nginx-backend-tls",
                  "namespace": "nginx",
                  "purpose": "TLS certificate material mounted by the NGINX pod"
                },
                {
                  "keys": [
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "nginx-ingress-tls",
                  "namespace": "nginx",
                  "purpose": "TLS certificate material referenced by the Ingress"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "nginx/nginx-backend-tls",
                "namespace": "nginx",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "TLS certificate material mounted by the NGINX pod",
                "check": "",
                "declarationPath": "recipes/bitnami/nginx/24.0.4/variants/existing-tls-ingress/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/nginx/24.0.4/variants/existing-tls-ingress/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "nginx/nginx-ingress-tls",
                "namespace": "nginx",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "TLS certificate material referenced by the Ingress",
                "check": "",
                "declarationPath": "recipes/bitnami/nginx/24.0.4/variants/existing-tls-ingress/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/nginx/24.0.4/variants/existing-tls-ingress/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "2 target prerequisites declared by this base.",
              "declarationSource": "recipes/bitnami/nginx/24.0.4/variants/existing-tls-ingress/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "todo",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-nginx-24-0-4-http-clusterip",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/nginx",
          "sourceVersion": "24.0.4",
          "base": "http-clusterip"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/nginx",
          "version": "24.0.4",
          "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.4"
        },
        "baseVariant": {
          "name": "http-clusterip",
          "revision": "r001",
          "digest": "ceed118795a568537e296fc27e12feb418db550e4a2cb9d40b8625bf15afa334"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/nginx/24.0.4/revisions/http-clusterip/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/nginx/24.0.4/revisions/http-clusterip/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/nginx",
            "version=24.0.4",
            "base=http-clusterip",
            "valuesProfile=recipes/bitnami/nginx/24.0.4/effective-values.yaml",
            "namespace=nginx",
            "releaseName=nginx",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-nginx-25-0-0-existing-tls-ingress",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/nginx",
          "sourceVersion": "25.0.0",
          "base": "existing-tls-ingress"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/nginx",
          "version": "25.0.0",
          "record": "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:25.0.0"
        },
        "baseVariant": {
          "name": "existing-tls-ingress",
          "revision": "r001",
          "digest": "ac4859da3bb9a60ddea171887d45ca7ae7f558984df466dc2878ea4f8600a968"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/nginx/25.0.0/revisions/existing-tls-ingress/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/nginx/25.0.0/revisions/existing-tls-ingress/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/nginx",
            "version=25.0.0",
            "base=existing-tls-ingress",
            "valuesProfile=recipes/bitnami/nginx/25.0.0/effective-values-existing-tls-ingress.yaml",
            "namespace=nginx",
            "releaseName=nginx",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "nginx-backend-tls",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "tls.crt",
                  "tls.key",
                  "ca.crt"
                ],
                "name": "nginx-backend-tls",
                "namespace": "nginx",
                "purpose": "TLS certificate material mounted by the NGINX pod"
              }
            },
            {
              "name": "nginx-ingress-tls",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "tls.crt",
                  "tls.key"
                ],
                "name": "nginx-ingress-tls",
                "namespace": "nginx",
                "purpose": "TLS certificate material referenced by the Ingress"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "tls.crt",
                    "tls.key",
                    "ca.crt"
                  ],
                  "name": "nginx-backend-tls",
                  "namespace": "nginx",
                  "purpose": "TLS certificate material mounted by the NGINX pod"
                },
                {
                  "keys": [
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "nginx-ingress-tls",
                  "namespace": "nginx",
                  "purpose": "TLS certificate material referenced by the Ingress"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "nginx/nginx-backend-tls",
                "namespace": "nginx",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "TLS certificate material mounted by the NGINX pod",
                "check": "",
                "declarationPath": "recipes/bitnami/nginx/25.0.0/variants/existing-tls-ingress/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/nginx/25.0.0/variants/existing-tls-ingress/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "nginx/nginx-ingress-tls",
                "namespace": "nginx",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "TLS certificate material referenced by the Ingress",
                "check": "",
                "declarationPath": "recipes/bitnami/nginx/25.0.0/variants/existing-tls-ingress/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/nginx/25.0.0/variants/existing-tls-ingress/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "2 target prerequisites declared by this base.",
              "declarationSource": "recipes/bitnami/nginx/25.0.0/variants/existing-tls-ingress/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-nginx-25-0-0-http-clusterip",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/nginx",
          "sourceVersion": "25.0.0",
          "base": "http-clusterip"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/nginx",
          "version": "25.0.0",
          "record": "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:25.0.0"
        },
        "baseVariant": {
          "name": "http-clusterip",
          "revision": "r001",
          "digest": "72232e89bbc0549f2cf30b10b8f4a4ebce574f734fb775830f370e5a4fbab53c"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/nginx/25.0.0/revisions/http-clusterip/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/nginx/25.0.0/revisions/http-clusterip/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/nginx",
            "version=25.0.0",
            "base=http-clusterip",
            "valuesProfile=recipes/bitnami/nginx/25.0.0/effective-values.yaml",
            "namespace=nginx",
            "releaseName=nginx",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-opensearch-2-0-10-default",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/opensearch",
          "sourceVersion": "2.0.10",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/opensearch",
          "version": "2.0.10",
          "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-opensearch:2.0.10"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "81e76ee6be2aacefd19db127bff401f895a0d83d4a6f88133339a19a4acb66fd"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/opensearch/2.0.10/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/opensearch/2.0.10/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 18
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/opensearch",
            "version=2.0.10",
            "base=default",
            "valuesProfile=recipes/bitnami/opensearch/2.0.10/effective-values.yaml",
            "namespace=default",
            "releaseName=opensearch",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-opensearch-2-0-10-ha",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/opensearch",
          "sourceVersion": "2.0.10",
          "base": "ha"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/opensearch",
          "version": "2.0.10",
          "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-opensearch:2.0.10"
        },
        "baseVariant": {
          "name": "ha",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/opensearch/2.0.10/revisions/ha/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/opensearch/2.0.10/revisions/ha/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/opensearch",
            "version=2.0.10",
            "base=ha",
            "valuesProfile=recipes/bitnami/opensearch/2.0.10/effective-values-ha.yaml",
            "namespace=default",
            "releaseName=opensearch",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-opensearch-2-0-10-legacy",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/opensearch",
          "sourceVersion": "2.0.10",
          "base": "legacy"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/opensearch",
          "version": "2.0.10",
          "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-opensearch:2.0.10"
        },
        "baseVariant": {
          "name": "legacy",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/opensearch/2.0.10/revisions/legacy/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/opensearch/2.0.10/revisions/legacy/r001/rendered/object-inventory.yaml",
          "objectCount": 18
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/opensearch",
            "version=2.0.10",
            "base=legacy",
            "valuesProfile=recipes/bitnami/opensearch/2.0.10/effective-values.yaml",
            "namespace=default",
            "releaseName=opensearch",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-phpmyadmin-20-0-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/phpmyadmin",
          "sourceVersion": "20.0.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/phpmyadmin",
          "version": "20.0.0",
          "record": "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-phpmyadmin:20.0.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "83c005cd0ec19cce717b505547ed1f1235447c6c4ba80f582e39f9616d0f89bd"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/phpmyadmin/20.0.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/phpmyadmin/20.0.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/phpmyadmin",
            "version=20.0.0",
            "base=default",
            "valuesProfile=recipes/bitnami/phpmyadmin/20.0.0/effective-values.yaml",
            "namespace=default",
            "releaseName=phpmyadmin",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-phpmyadmin-20-0-0-legacy",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/phpmyadmin",
          "sourceVersion": "20.0.0",
          "base": "legacy"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/phpmyadmin",
          "version": "20.0.0",
          "record": "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-phpmyadmin:20.0.0"
        },
        "baseVariant": {
          "name": "legacy",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/phpmyadmin/20.0.0/revisions/legacy/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/phpmyadmin/20.0.0/revisions/legacy/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/phpmyadmin",
            "version=20.0.0",
            "base=legacy",
            "valuesProfile=recipes/bitnami/phpmyadmin/20.0.0/effective-values.yaml",
            "namespace=default",
            "releaseName=phpmyadmin",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-postgresql-18-6-10-existing-secret",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/postgresql",
          "sourceVersion": "18.6.10",
          "base": "existing-secret"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/postgresql",
          "version": "18.6.10",
          "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.6.10"
        },
        "baseVariant": {
          "name": "existing-secret",
          "revision": "r001",
          "digest": "405f685ceaa082317180a153831b8cd0dd68873b099120e98fe3e2d7fc07e3f9"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/postgresql/18.6.10/revisions/existing-secret/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/postgresql/18.6.10/revisions/existing-secret/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/postgresql",
            "version=18.6.10",
            "base=existing-secret",
            "valuesProfile=recipes/bitnami/postgresql/18.6.10/effective-values-existing-secret.yaml",
            "namespace=postgresql",
            "releaseName=postgresql",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "postgresql-auth",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "postgres-password"
                ],
                "name": "postgresql-auth",
                "namespace": "postgresql",
                "purpose": "PostgreSQL administrator password"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "postgres-password"
                  ],
                  "name": "postgresql-auth",
                  "namespace": "postgresql",
                  "purpose": "PostgreSQL administrator password"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "postgresql/postgresql-auth",
                "namespace": "postgresql",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PostgreSQL administrator password",
                "check": "",
                "declarationPath": "recipes/bitnami/postgresql/18.6.10/variants/existing-secret/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/postgresql/18.6.10/variants/existing-secret/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/bitnami/postgresql/18.6.10/variants/existing-secret/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-postgresql-18-6-10-static-passwords",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/postgresql",
          "sourceVersion": "18.6.10",
          "base": "static-passwords"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/postgresql",
          "version": "18.6.10",
          "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.6.10"
        },
        "baseVariant": {
          "name": "static-passwords",
          "revision": "r001",
          "digest": "32074b6285042b6224c734591a8e97758acf8da37365567b31981d63c3680c05"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/postgresql/18.6.10/revisions/static-passwords/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/postgresql/18.6.10/revisions/static-passwords/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/postgresql",
            "version=18.6.10",
            "base=static-passwords",
            "valuesProfile=recipes/bitnami/postgresql/18.6.10/effective-values.yaml",
            "namespace=postgresql",
            "releaseName=postgresql",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-postgresql-18-6-7-existing-secret",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/postgresql",
          "sourceVersion": "18.6.7",
          "base": "existing-secret"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/postgresql",
          "version": "18.6.7",
          "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.6.7"
        },
        "baseVariant": {
          "name": "existing-secret",
          "revision": "r001",
          "digest": "ab479ef3d1a6b653a00265e9964f945106fffede029f348488cfde39a38d8c88"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/postgresql/18.6.7/revisions/existing-secret/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/postgresql/18.6.7/revisions/existing-secret/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/postgresql",
            "version=18.6.7",
            "base=existing-secret",
            "valuesProfile=recipes/bitnami/postgresql/18.6.7/effective-values-existing-secret.yaml",
            "namespace=postgresql",
            "releaseName=postgresql",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "postgresql-auth",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "postgres-password"
                ],
                "name": "postgresql-auth",
                "namespace": "postgresql",
                "purpose": "PostgreSQL administrator password"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "postgres-password"
                  ],
                  "name": "postgresql-auth",
                  "namespace": "postgresql",
                  "purpose": "PostgreSQL administrator password"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "postgresql/postgresql-auth",
                "namespace": "postgresql",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PostgreSQL administrator password",
                "check": "",
                "declarationPath": "recipes/bitnami/postgresql/18.6.7/variants/existing-secret/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/postgresql/18.6.7/variants/existing-secret/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/bitnami/postgresql/18.6.7/variants/existing-secret/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-postgresql-18-6-7-static-passwords",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/postgresql",
          "sourceVersion": "18.6.7",
          "base": "static-passwords"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/postgresql",
          "version": "18.6.7",
          "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.6.7"
        },
        "baseVariant": {
          "name": "static-passwords",
          "revision": "r001",
          "digest": "4925e0cde363d86173e36d27f9005e77ee3062fd6b07ea7108831d97b0339812"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/postgresql/18.6.7/revisions/static-passwords/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/postgresql/18.6.7/revisions/static-passwords/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/postgresql",
            "version=18.6.7",
            "base=static-passwords",
            "valuesProfile=recipes/bitnami/postgresql/18.6.7/effective-values.yaml",
            "namespace=postgresql",
            "releaseName=postgresql",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-postgresql-18-7-0-existing-secret",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/postgresql",
          "sourceVersion": "18.7.0",
          "base": "existing-secret"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/postgresql",
          "version": "18.7.0",
          "record": "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.7.0"
        },
        "baseVariant": {
          "name": "existing-secret",
          "revision": "r001",
          "digest": "9958a534112986f32df60af4ef84c473a5731f8de7d2f140c4632aac6ddf0f9e"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/postgresql/18.7.0/revisions/existing-secret/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/postgresql/18.7.0/revisions/existing-secret/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/postgresql",
            "version=18.7.0",
            "base=existing-secret",
            "valuesProfile=recipes/bitnami/postgresql/18.7.0/effective-values-existing-secret.yaml",
            "namespace=postgresql",
            "releaseName=postgresql",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "postgresql-auth",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "postgres-password"
                ],
                "name": "postgresql-auth",
                "namespace": "postgresql",
                "purpose": "PostgreSQL administrator password"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "postgres-password"
                  ],
                  "name": "postgresql-auth",
                  "namespace": "postgresql",
                  "purpose": "PostgreSQL administrator password"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "postgresql/postgresql-auth",
                "namespace": "postgresql",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PostgreSQL administrator password",
                "check": "",
                "declarationPath": "recipes/bitnami/postgresql/18.7.0/variants/existing-secret/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/postgresql/18.7.0/variants/existing-secret/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/bitnami/postgresql/18.7.0/variants/existing-secret/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-postgresql-18-7-0-static-passwords",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/postgresql",
          "sourceVersion": "18.7.0",
          "base": "static-passwords"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/postgresql",
          "version": "18.7.0",
          "record": "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.7.0"
        },
        "baseVariant": {
          "name": "static-passwords",
          "revision": "r001",
          "digest": "a62a1709dcd88a1de3f59db3d65a2725b07255081b69026536cbaf90dd550385"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/postgresql/18.7.0/revisions/static-passwords/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/postgresql/18.7.0/revisions/static-passwords/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/postgresql",
            "version=18.7.0",
            "base=static-passwords",
            "valuesProfile=recipes/bitnami/postgresql/18.7.0/effective-values.yaml",
            "namespace=postgresql",
            "releaseName=postgresql",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-rabbitmq-16-0-14-existing-secret",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/rabbitmq",
          "sourceVersion": "16.0.14",
          "base": "existing-secret"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/rabbitmq",
          "version": "16.0.14",
          "record": "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-rabbitmq:16.0.14"
        },
        "baseVariant": {
          "name": "existing-secret",
          "revision": "r001",
          "digest": "e6cd5a984f86012e27472ff2823c5d9888ea7214f84119769bcabce0b25d2df1"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/rabbitmq/16.0.14/revisions/existing-secret/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/rabbitmq/16.0.14/revisions/existing-secret/r001/rendered/object-inventory.yaml",
          "objectCount": 9
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/rabbitmq",
            "version=16.0.14",
            "base=existing-secret",
            "valuesProfile=recipes/bitnami/rabbitmq/16.0.14/effective-values-existing-secret.yaml",
            "namespace=rabbitmq",
            "releaseName=rabbitmq",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "rabbitmq-auth",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "rabbitmq-password"
                ],
                "name": "rabbitmq-auth",
                "namespace": "rabbitmq",
                "purpose": "RabbitMQ administrator password"
              }
            },
            {
              "name": "rabbitmq-erlang-cookie",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "rabbitmq-erlang-cookie"
                ],
                "name": "rabbitmq-erlang-cookie",
                "namespace": "rabbitmq",
                "purpose": "RabbitMQ Erlang cookie for node clustering"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "rabbitmq-password"
                  ],
                  "name": "rabbitmq-auth",
                  "namespace": "rabbitmq",
                  "purpose": "RabbitMQ administrator password"
                },
                {
                  "keys": [
                    "rabbitmq-erlang-cookie"
                  ],
                  "name": "rabbitmq-erlang-cookie",
                  "namespace": "rabbitmq",
                  "purpose": "RabbitMQ Erlang cookie for node clustering"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "rabbitmq/rabbitmq-auth",
                "namespace": "rabbitmq",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "RabbitMQ administrator password",
                "check": "",
                "declarationPath": "recipes/bitnami/rabbitmq/16.0.14/variants/existing-secret/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/rabbitmq/16.0.14/variants/existing-secret/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "rabbitmq/rabbitmq-erlang-cookie",
                "namespace": "rabbitmq",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "RabbitMQ Erlang cookie for node clustering",
                "check": "",
                "declarationPath": "recipes/bitnami/rabbitmq/16.0.14/variants/existing-secret/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/rabbitmq/16.0.14/variants/existing-secret/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "2 target prerequisites declared by this base.",
              "declarationSource": "recipes/bitnami/rabbitmq/16.0.14/variants/existing-secret/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-rabbitmq-16-0-14-static-passwords",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/rabbitmq",
          "sourceVersion": "16.0.14",
          "base": "static-passwords"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/rabbitmq",
          "version": "16.0.14",
          "record": "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-rabbitmq:16.0.14"
        },
        "baseVariant": {
          "name": "static-passwords",
          "revision": "r001",
          "digest": "cae600fba031e510fe5c5f8f33b2a610cfbf4ade184c52040affb1e6365fd14c"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/rendered/object-inventory.yaml",
          "objectCount": 10
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/rabbitmq",
            "version=16.0.14",
            "base=static-passwords",
            "valuesProfile=recipes/bitnami/rabbitmq/16.0.14/effective-values.yaml",
            "namespace=rabbitmq",
            "releaseName=rabbitmq",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-redis-25-5-3-default",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/redis",
          "sourceVersion": "25.5.3",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/redis",
          "version": "25.5.3",
          "record": "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-redis:25.5.3"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "b72dbea967a115c140b00b124ac7facf66178d27383041e0938b11df75ab58d4"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/redis/25.5.3/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/redis/25.5.3/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 14
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/redis",
            "version=25.5.3",
            "base=default",
            "valuesProfile=recipes/bitnami/redis/25.5.3/effective-values.yaml",
            "namespace=redis",
            "releaseName=redis",
            "capabilityProfile={\"apiVersions\":[],\"catalog\":\"../../../../data/capability-profiles/catalog.yaml\",\"digest\":\"sha256:c1f8a4eb20154228a391f2a61565160634fbeb5dcf1079065543dd0a2ff3dfbf\",\"kubeVersion\":\"1.30.0\",\"name\":\"k8s-1.30-default\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-redis-25-5-3-reuse-existing-secret",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/redis",
          "sourceVersion": "25.5.3",
          "base": "reuse-existing-secret"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/redis",
          "version": "25.5.3",
          "record": "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-redis:25.5.3"
        },
        "baseVariant": {
          "name": "reuse-existing-secret",
          "revision": "r001",
          "digest": "a530dc8e393021275a35a9d16ac3ec69408c3a644f0899c4cbd05ffb0f3d404a"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/redis/25.5.3/revisions/reuse-existing-secret/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/redis/25.5.3/revisions/reuse-existing-secret/r001/rendered/object-inventory.yaml",
          "objectCount": 13
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/redis",
            "version=25.5.3",
            "base=reuse-existing-secret",
            "valuesProfile=recipes/bitnami/redis/25.5.3/effective-values-reuse-existing-secret.yaml",
            "namespace=redis",
            "releaseName=redis",
            "capabilityProfile={\"apiVersions\":[],\"catalog\":\"../../../../data/capability-profiles/catalog.yaml\",\"digest\":\"sha256:c1f8a4eb20154228a391f2a61565160634fbeb5dcf1079065543dd0a2ff3dfbf\",\"kubeVersion\":\"1.30.0\",\"name\":\"k8s-1.30-default\"}"
          ],
          "installTime": [
            {
              "name": "redis-existing-secret",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "redis-password"
                ],
                "name": "redis-existing-secret",
                "namespace": "redis",
                "purpose": "Redis authentication password"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "redis-password"
                  ],
                  "name": "redis-existing-secret",
                  "namespace": "redis",
                  "purpose": "Redis authentication password"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "redis/redis-existing-secret",
                "namespace": "redis",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Redis authentication password",
                "check": "",
                "declarationPath": "recipes/bitnami/redis/25.5.3/variants/reuse-existing-secret/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/redis/25.5.3/variants/reuse-existing-secret/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/bitnami/redis/25.5.3/variants/reuse-existing-secret/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-redis-27-0-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/redis",
          "sourceVersion": "27.0.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/redis",
          "version": "27.0.0",
          "record": "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-redis:27.0.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "c71b893f899415dca9fa8b243e383e39b9b8d7ec3215aa2a9ddb8a9226cccd6f"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/redis/27.0.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/redis/27.0.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 14
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/redis",
            "version=27.0.0",
            "base=default",
            "valuesProfile=recipes/bitnami/redis/27.0.0/effective-values.yaml",
            "namespace=redis",
            "releaseName=redis",
            "capabilityProfile={\"apiVersions\":[],\"catalog\":\"../../../../data/capability-profiles/catalog.yaml\",\"digest\":\"sha256:c1f8a4eb20154228a391f2a61565160634fbeb5dcf1079065543dd0a2ff3dfbf\",\"kubeVersion\":\"1.30.0\",\"name\":\"k8s-1.30-default\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-redis-27-0-0-reuse-existing-secret",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/redis",
          "sourceVersion": "27.0.0",
          "base": "reuse-existing-secret"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/redis",
          "version": "27.0.0",
          "record": "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-redis:27.0.0"
        },
        "baseVariant": {
          "name": "reuse-existing-secret",
          "revision": "r001",
          "digest": "89862d028836ff635863dee8bef479ee0e3c7e788d8bac7516a6d932f722187c"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/redis/27.0.0/revisions/reuse-existing-secret/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/redis/27.0.0/revisions/reuse-existing-secret/r001/rendered/object-inventory.yaml",
          "objectCount": 13
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/redis",
            "version=27.0.0",
            "base=reuse-existing-secret",
            "valuesProfile=recipes/bitnami/redis/27.0.0/effective-values-reuse-existing-secret.yaml",
            "namespace=redis",
            "releaseName=redis",
            "capabilityProfile={\"apiVersions\":[],\"catalog\":\"../../../../data/capability-profiles/catalog.yaml\",\"digest\":\"sha256:c1f8a4eb20154228a391f2a61565160634fbeb5dcf1079065543dd0a2ff3dfbf\",\"kubeVersion\":\"1.30.0\",\"name\":\"k8s-1.30-default\"}"
          ],
          "installTime": [
            {
              "name": "redis-existing-secret",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "redis-password"
                ],
                "name": "redis-existing-secret",
                "namespace": "redis",
                "purpose": "Redis authentication password"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "redis-password"
                  ],
                  "name": "redis-existing-secret",
                  "namespace": "redis",
                  "purpose": "Redis authentication password"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "redis/redis-existing-secret",
                "namespace": "redis",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Redis authentication password",
                "check": "",
                "declarationPath": "recipes/bitnami/redis/27.0.0/variants/reuse-existing-secret/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/bitnami/redis/27.0.0/variants/reuse-existing-secret/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/bitnami/redis/27.0.0/variants/reuse-existing-secret/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-spark-10-0-3-default",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/spark",
          "sourceVersion": "10.0.3",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/spark",
          "version": "10.0.3",
          "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-spark:10.0.3"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "f38b69257036d8bd6d2d255d7cf1685b6ec1d23fea1325550c832be705640bdd"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/spark/10.0.3/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/spark/10.0.3/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 10
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/spark",
            "version=10.0.3",
            "base=default",
            "valuesProfile=recipes/bitnami/spark/10.0.3/effective-values.yaml",
            "namespace=default",
            "releaseName=spark",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-spark-10-0-3-ha",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/spark",
          "sourceVersion": "10.0.3",
          "base": "ha"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/spark",
          "version": "10.0.3",
          "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-spark:10.0.3"
        },
        "baseVariant": {
          "name": "ha",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/spark/10.0.3/revisions/ha/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/spark/10.0.3/revisions/ha/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/spark",
            "version=10.0.3",
            "base=ha",
            "valuesProfile=recipes/bitnami/spark/10.0.3/effective-values-ha.yaml",
            "namespace=default",
            "releaseName=spark",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-spark-10-0-3-legacy",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/spark",
          "sourceVersion": "10.0.3",
          "base": "legacy"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/spark",
          "version": "10.0.3",
          "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-spark:10.0.3"
        },
        "baseVariant": {
          "name": "legacy",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/spark/10.0.3/revisions/legacy/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/spark/10.0.3/revisions/legacy/r001/rendered/object-inventory.yaml",
          "objectCount": 10
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/spark",
            "version=10.0.3",
            "base=legacy",
            "valuesProfile=recipes/bitnami/spark/10.0.3/effective-values.yaml",
            "namespace=default",
            "releaseName=spark",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-zookeeper-13-8-7-default",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/zookeeper",
          "sourceVersion": "13.8.7",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/zookeeper",
          "version": "13.8.7",
          "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-zookeeper:13.8.7"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "2016aa05828162ac062e268af8a992ab41e7687d5d6144eacd7c8eb9e4521f50"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/zookeeper/13.8.7/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/zookeeper/13.8.7/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/zookeeper",
            "version=13.8.7",
            "base=default",
            "valuesProfile=recipes/bitnami/zookeeper/13.8.7/effective-values.yaml",
            "namespace=default",
            "releaseName=zookeeper",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-zookeeper-13-8-7-ha",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/zookeeper",
          "sourceVersion": "13.8.7",
          "base": "ha"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/zookeeper",
          "version": "13.8.7",
          "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-zookeeper:13.8.7"
        },
        "baseVariant": {
          "name": "ha",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/zookeeper/13.8.7/revisions/ha/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/zookeeper/13.8.7/revisions/ha/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/zookeeper",
            "version=13.8.7",
            "base=ha",
            "valuesProfile=recipes/bitnami/zookeeper/13.8.7/effective-values-ha.yaml",
            "namespace=default",
            "releaseName=zookeeper",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "bitnami-zookeeper-13-8-7-legacy",
        "labels": {
          "sourceType": "helm",
          "component": "bitnami/zookeeper",
          "sourceVersion": "13.8.7",
          "base": "legacy"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "bitnami/zookeeper",
          "version": "13.8.7",
          "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-zookeeper:13.8.7"
        },
        "baseVariant": {
          "name": "legacy",
          "revision": "r001",
          "digest": "cb29752cc67f9a42d2102362e58cc12df82ce623562b2732ab857e923c670977"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/bitnami/zookeeper/13.8.7/revisions/legacy/r001/rendered/release-objects.yaml",
          "inventory": "recipes/bitnami/zookeeper/13.8.7/revisions/legacy/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=bitnami/zookeeper",
            "version=13.8.7",
            "base=legacy",
            "valuesProfile=recipes/bitnami/zookeeper/13.8.7/effective-values.yaml",
            "namespace=default",
            "releaseName=zookeeper",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "cloudnative-pg-cloudnative-pg-0-28-2-default",
        "labels": {
          "sourceType": "helm",
          "component": "cloudnative-pg/cloudnative-pg",
          "sourceVersion": "0.28.2",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "cloudnative-pg/cloudnative-pg",
          "version": "0.28.2",
          "record": "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/cloudnative-pg-cloudnative-pg:0.28.2"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "4d7ff0bf073976ebdefa3cf56e5ab45d27e6a6517e003b7f760221b33103d90d"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 21
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=cloudnative-pg/cloudnative-pg",
            "version=0.28.2",
            "base=default",
            "valuesProfile=recipes/cloudnative-pg/cloudnative-pg/0.28.2/effective-values.yaml",
            "namespace=default",
            "releaseName=cloudnative-pg",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "cloudnative-pg-cloudnative-pg-0-28-2-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "cloudnative-pg/cloudnative-pg",
          "sourceVersion": "0.28.2",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "cloudnative-pg/cloudnative-pg",
          "version": "0.28.2",
          "record": "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/cloudnative-pg-cloudnative-pg:0.28.2"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=cloudnative-pg/cloudnative-pg",
            "version=0.28.2",
            "base=no-crds",
            "valuesProfile=recipes/cloudnative-pg/cloudnative-pg/0.28.2/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=cloudnative-pg",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "backups.postgresql.cnpg.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "backups.postgresql.cnpg.io",
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clusterimagecatalogs.postgresql.cnpg.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clusterimagecatalogs.postgresql.cnpg.io",
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clusters.postgresql.cnpg.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clusters.postgresql.cnpg.io",
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "databases.postgresql.cnpg.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "databases.postgresql.cnpg.io",
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "failoverquorums.postgresql.cnpg.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "failoverquorums.postgresql.cnpg.io",
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "imagecatalogs.postgresql.cnpg.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "imagecatalogs.postgresql.cnpg.io",
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "poolers.postgresql.cnpg.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "poolers.postgresql.cnpg.io",
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "publications.postgresql.cnpg.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "publications.postgresql.cnpg.io",
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "scheduledbackups.postgresql.cnpg.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "scheduledbackups.postgresql.cnpg.io",
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "subscriptions.postgresql.cnpg.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "subscriptions.postgresql.cnpg.io",
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "cnpg-webhook-cert",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "tls.crt",
                  "tls.key"
                ],
                "name": "cnpg-webhook-cert",
                "namespace": "default",
                "purpose": "CloudNativePG admission webhook TLS material required before the no-crds operator pod can become ready"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "backups.postgresql.cnpg.io",
                  "purpose": "CloudNativePG CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clusterimagecatalogs.postgresql.cnpg.io",
                  "purpose": "CloudNativePG CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clusters.postgresql.cnpg.io",
                  "purpose": "CloudNativePG CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "databases.postgresql.cnpg.io",
                  "purpose": "CloudNativePG CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "failoverquorums.postgresql.cnpg.io",
                  "purpose": "CloudNativePG CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "imagecatalogs.postgresql.cnpg.io",
                  "purpose": "CloudNativePG CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "poolers.postgresql.cnpg.io",
                  "purpose": "CloudNativePG CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "publications.postgresql.cnpg.io",
                  "purpose": "CloudNativePG CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "scheduledbackups.postgresql.cnpg.io",
                  "purpose": "CloudNativePG CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "subscriptions.postgresql.cnpg.io",
                  "purpose": "CloudNativePG CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "cnpg-webhook-cert",
                  "namespace": "default",
                  "purpose": "CloudNativePG admission webhook TLS material required before the no-crds operator pod can become ready"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "backups.postgresql.cnpg.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                  "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clusterimagecatalogs.postgresql.cnpg.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                  "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clusters.postgresql.cnpg.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                  "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "databases.postgresql.cnpg.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                  "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "failoverquorums.postgresql.cnpg.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                  "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "imagecatalogs.postgresql.cnpg.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                  "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "poolers.postgresql.cnpg.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                  "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "publications.postgresql.cnpg.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                  "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "scheduledbackups.postgresql.cnpg.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                  "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "subscriptions.postgresql.cnpg.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CloudNativePG CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                  "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/cnpg-webhook-cert",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CloudNativePG admission webhook TLS material required before the no-crds operator pod can become ready",
                "check": "",
                "declarationPath": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "11 target prerequisites declared by this base.",
              "declarationSource": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "coredns-coredns-1-45-2-default",
        "labels": {
          "sourceType": "helm",
          "component": "coredns/coredns",
          "sourceVersion": "1.45.2",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "coredns/coredns",
          "version": "1.45.2",
          "record": "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/coredns-coredns:1.45.2"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "a47a5e89780ae851620bf6d227f5f5dfe79afbdf5771e6fea3c8f8ed2445e631"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/coredns/coredns/1.45.2/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/coredns/coredns/1.45.2/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=coredns/coredns",
            "version=1.45.2",
            "base=default",
            "valuesProfile=recipes/coredns/coredns/1.45.2/effective-values.yaml",
            "namespace=default",
            "releaseName=coredns",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "crossplane-stable-crossplane-2-3-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "crossplane-stable/crossplane",
          "sourceVersion": "2.3.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "crossplane-stable/crossplane",
          "version": "2.3.1",
          "record": "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/crossplane-stable-crossplane:2.3.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "0bf41f4414f233ce8e995637c500d2e46c326af789b84ee8be23bd62ad1cf1c4"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/crossplane-stable/crossplane/2.3.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/crossplane-stable/crossplane/2.3.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 23
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=crossplane-stable/crossplane",
            "version=2.3.1",
            "base=default",
            "valuesProfile=recipes/crossplane-stable/crossplane/2.3.1/effective-values.yaml",
            "namespace=default",
            "releaseName=crossplane",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "descheduler-descheduler-0-36-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "descheduler/descheduler",
          "sourceVersion": "0.36.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "descheduler/descheduler",
          "version": "0.36.0",
          "record": "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/descheduler-descheduler:0.36.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "7400d88f184e1896809aa20a1392a7c9676bdb107de45c7b03966f262d348987"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/descheduler/descheduler/0.36.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/descheduler/descheduler/0.36.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=descheduler/descheduler",
            "version=0.36.0",
            "base=default",
            "valuesProfile=recipes/descheduler/descheduler/0.36.0/effective-values.yaml",
            "namespace=default",
            "releaseName=descheduler",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "dex-dex-0-24-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "dex/dex",
          "sourceVersion": "0.24.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "dex/dex",
          "version": "0.24.0",
          "record": "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/dex-dex:0.24.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "fb339bfb08d5effaac5f67c80dc1c55679d4de02059e10a9b28bbdbb8d52bebb"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/dex/dex/0.24.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/dex/dex/0.24.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 8
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=dex/dex",
            "version=0.24.0",
            "base=default",
            "valuesProfile=recipes/dex/dex/0.24.0/effective-values.yaml",
            "namespace=default",
            "releaseName=dex",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-helm-confighub-compare/dex-dex-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/dex/dex/0.24.0 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/dex-dex-default/receipt.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-kind-parity/dex-dex-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart dex/dex --version 0.24.0 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/dex-dex-default/receipt.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "2 observed prerequisite action records exist, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "elastic-eck-operator-3-4-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "elastic/eck-operator",
          "sourceVersion": "3.4.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "elastic/eck-operator",
          "version": "3.4.0",
          "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-eck-operator:3.4.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "e438fa78c3d1d5409957800533d207317b82ac4c36ee0c4a314196c8c9d6d53e"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/elastic/eck-operator/3.4.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/elastic/eck-operator/3.4.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 22
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=elastic/eck-operator",
            "version=3.4.0",
            "base=default",
            "valuesProfile=recipes/elastic/eck-operator/3.4.0/effective-values.yaml",
            "namespace=default",
            "releaseName=eck-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "elastic-eck-operator-3-4-0-ha",
        "labels": {
          "sourceType": "helm",
          "component": "elastic/eck-operator",
          "sourceVersion": "3.4.0",
          "base": "ha"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "elastic/eck-operator",
          "version": "3.4.0",
          "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-eck-operator:3.4.0"
        },
        "baseVariant": {
          "name": "ha",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/elastic/eck-operator/3.4.0/revisions/ha/r001/rendered/release-objects.yaml",
          "inventory": "recipes/elastic/eck-operator/3.4.0/revisions/ha/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=elastic/eck-operator",
            "version=3.4.0",
            "base=ha",
            "valuesProfile=recipes/elastic/eck-operator/3.4.0/effective-values-ha.yaml",
            "namespace=default",
            "releaseName=eck-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "elastic-eck-operator-3-4-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "elastic/eck-operator",
          "sourceVersion": "3.4.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "elastic/eck-operator",
          "version": "3.4.0",
          "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-eck-operator:3.4.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/elastic/eck-operator/3.4.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/elastic/eck-operator/3.4.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=elastic/eck-operator",
            "version=3.4.0",
            "base=no-crds",
            "valuesProfile=recipes/elastic/eck-operator/3.4.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=eck-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "elastic-filebeat-8-5-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "elastic/filebeat",
          "sourceVersion": "8.5.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "elastic/filebeat",
          "version": "8.5.1",
          "record": "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-filebeat:8.5.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "e3ad3faa059c6954bdb36f5b7708287b356f34f789fa86df6934e89bd8592d10"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/elastic/filebeat/8.5.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/elastic/filebeat/8.5.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=elastic/filebeat",
            "version=8.5.1",
            "base=default",
            "valuesProfile=recipes/elastic/filebeat/8.5.1/effective-values.yaml",
            "namespace=default",
            "releaseName=filebeat",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "elasticsearch-master-certs",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml",
                  "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml"
                ],
                "name": "elasticsearch-master-certs",
                "namespace": "default",
                "purpose": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=<path-to-ca.crt>"
              }
            },
            {
              "name": "elasticsearch-master-credentials",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml",
                  "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml"
                ],
                "keys": [
                  "username",
                  "password"
                ],
                "name": "elasticsearch-master-credentials",
                "namespace": "default",
                "purpose": "Elasticsearch username and password read by the Filebeat container",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username=<username> --from-literal=password=<password>"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts-and-observed-action-records",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml",
                    "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml"
                  ],
                  "name": "elasticsearch-master-certs",
                  "namespace": "default",
                  "purpose": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection",
                  "sourcePath": "../../target-prerequisite-plan.yaml",
                  "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=<path-to-ca.crt>"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml",
                    "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml"
                  ],
                  "keys": [
                    "username",
                    "password"
                  ],
                  "name": "elasticsearch-master-credentials",
                  "namespace": "default",
                  "purpose": "Elasticsearch username and password read by the Filebeat container",
                  "sourcePath": "../../target-prerequisite-plan.yaml",
                  "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username=<username> --from-literal=password=<password>"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "default/elasticsearch-master-certs",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection",
                "check": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=<path-to-ca.crt>",
                "declarationPath": "recipes/elastic/filebeat/8.5.1/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/elastic/filebeat/8.5.1/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml",
                  "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/elasticsearch-master-credentials",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Elasticsearch username and password read by the Filebeat container",
                "check": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username=<username> --from-literal=password=<password>",
                "declarationPath": "recipes/elastic/filebeat/8.5.1/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/elastic/filebeat/8.5.1/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml",
                  "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml"
                ]
              }
            ],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/elastic/filebeat/8.5.1/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/elastic/filebeat/8.5.1 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml",
                  "recipes/elastic/filebeat/8.5.1/target-prerequisite-plan.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "secret",
                "prerequisiteName": "Secret elasticsearch-master-certs",
                "actionKind": "stage-secret",
                "ownerClass": "user-stage",
                "requiredInputs": "Secret elasticsearch-master-certs",
                "evidenceRequired": "the named Secret(s) present in the target namespace before apply; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/elastic/filebeat/8.5.1/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart elastic/filebeat --version 8.5.1 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml",
                  "recipes/elastic/filebeat/8.5.1/target-prerequisite-plan.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "attached-with-observed-actions",
              "reason": "2 prerequisite declarations and 2 follow-up action records are attached.",
              "declarationSource": "recipes/elastic/filebeat/8.5.1/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "elastic-filebeat-8-5-1-node-or-cluster-collector",
        "labels": {
          "sourceType": "helm",
          "component": "elastic/filebeat",
          "sourceVersion": "8.5.1",
          "base": "node-or-cluster-collector"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "elastic/filebeat",
          "version": "8.5.1",
          "record": "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-filebeat:8.5.1"
        },
        "baseVariant": {
          "name": "node-or-cluster-collector",
          "revision": "r001",
          "digest": "7682debd6c360ad39daf54d962a5f2be5dae84683c6e0631412093803dc4e972"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/elastic/filebeat/8.5.1/revisions/node-or-cluster-collector/r001/rendered/release-objects.yaml",
          "inventory": "recipes/elastic/filebeat/8.5.1/revisions/node-or-cluster-collector/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=elastic/filebeat",
            "version=8.5.1",
            "base=node-or-cluster-collector",
            "valuesProfile=recipes/elastic/filebeat/8.5.1/effective-values.yaml",
            "namespace=default",
            "releaseName=filebeat",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "elasticsearch-master-certs",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml",
                  "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml"
                ],
                "name": "elasticsearch-master-certs",
                "namespace": "default",
                "purpose": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=<path-to-ca.crt>"
              }
            },
            {
              "name": "elasticsearch-master-credentials",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml",
                  "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml"
                ],
                "keys": [
                  "username",
                  "password"
                ],
                "name": "elasticsearch-master-credentials",
                "namespace": "default",
                "purpose": "Elasticsearch username and password read by the Filebeat container",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username=<username> --from-literal=password=<password>"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts-and-observed-action-records",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml",
                    "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml"
                  ],
                  "name": "elasticsearch-master-certs",
                  "namespace": "default",
                  "purpose": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection",
                  "sourcePath": "../../target-prerequisite-plan.yaml",
                  "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=<path-to-ca.crt>"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml",
                    "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml"
                  ],
                  "keys": [
                    "username",
                    "password"
                  ],
                  "name": "elasticsearch-master-credentials",
                  "namespace": "default",
                  "purpose": "Elasticsearch username and password read by the Filebeat container",
                  "sourcePath": "../../target-prerequisite-plan.yaml",
                  "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username=<username> --from-literal=password=<password>"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "default/elasticsearch-master-certs",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection",
                "check": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=<path-to-ca.crt>",
                "declarationPath": "recipes/elastic/filebeat/8.5.1/variants/node-or-cluster-collector/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/elastic/filebeat/8.5.1/variants/node-or-cluster-collector/variant.yaml",
                  "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml",
                  "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/elasticsearch-master-credentials",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Elasticsearch username and password read by the Filebeat container",
                "check": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username=<username> --from-literal=password=<password>",
                "declarationPath": "recipes/elastic/filebeat/8.5.1/variants/node-or-cluster-collector/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/elastic/filebeat/8.5.1/variants/node-or-cluster-collector/variant.yaml",
                  "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml",
                  "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml"
                ]
              }
            ],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/elastic/filebeat/8.5.1/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/elastic/filebeat/8.5.1 --base node-or-cluster-collector",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml",
                  "recipes/elastic/filebeat/8.5.1/target-prerequisite-plan.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "external-api",
                "prerequisiteName": "unknown",
                "actionKind": "provide-external-service",
                "ownerClass": "operator-review",
                "requiredInputs": "the upstream service/endpoint the workload connects to",
                "evidenceRequired": "the upstream service/endpoint reachable from the workload; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/elastic/filebeat/8.5.1/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart elastic/filebeat --version 8.5.1 --base node-or-cluster-collector",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml",
                  "recipes/elastic/filebeat/8.5.1/target-prerequisite-plan.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "attached-with-observed-actions",
              "reason": "2 prerequisite declarations and 2 follow-up action records are attached.",
              "declarationSource": "recipes/elastic/filebeat/8.5.1/variants/node-or-cluster-collector/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "elastic-kibana-8-5-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "elastic/kibana",
          "sourceVersion": "8.5.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "elastic/kibana",
          "version": "8.5.1",
          "record": "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-kibana:8.5.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "666d47b71fb1f9cfe3e5197e5884044c8b93609ff9ca07d1a800f9d235dfdea4"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/elastic/kibana/8.5.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/elastic/kibana/8.5.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 2
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=elastic/kibana",
            "version=8.5.1",
            "base=default",
            "valuesProfile=recipes/elastic/kibana/8.5.1/effective-values.yaml",
            "namespace=default",
            "releaseName=kibana",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-helm-confighub-compare/elastic-kibana-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/elastic/kibana/8.5.1 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/elastic-kibana-default/receipt.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "external-api",
                "prerequisiteName": "unknown",
                "actionKind": "provide-external-service",
                "ownerClass": "operator-review",
                "requiredInputs": "the upstream service/endpoint the workload connects to",
                "evidenceRequired": "the upstream service/endpoint reachable from the workload; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-kind-parity/elastic-kibana-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart elastic/kibana --version 8.5.1 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/elastic-kibana-default/receipt.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "2 observed prerequisite action records exist, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "elastic-logstash-8-5-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "elastic/logstash",
          "sourceVersion": "8.5.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "elastic/logstash",
          "version": "8.5.1",
          "record": "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-logstash:8.5.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "193c1ae729570ac87f0f0987283a2cbb552c02f82a99fba0aeb906175a88c7bb"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/elastic/logstash/8.5.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/elastic/logstash/8.5.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 3
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=elastic/logstash",
            "version=8.5.1",
            "base=default",
            "valuesProfile=recipes/elastic/logstash/8.5.1/effective-values.yaml",
            "namespace=default",
            "releaseName=logstash",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "elastic-logstash-8-5-1-ha",
        "labels": {
          "sourceType": "helm",
          "component": "elastic/logstash",
          "sourceVersion": "8.5.1",
          "base": "ha"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "elastic/logstash",
          "version": "8.5.1",
          "record": "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-logstash:8.5.1"
        },
        "baseVariant": {
          "name": "ha",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/elastic/logstash/8.5.1/revisions/ha/r001/rendered/release-objects.yaml",
          "inventory": "recipes/elastic/logstash/8.5.1/revisions/ha/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=elastic/logstash",
            "version=8.5.1",
            "base=ha",
            "valuesProfile=recipes/elastic/logstash/8.5.1/effective-values-ha.yaml",
            "namespace=default",
            "releaseName=logstash",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "requiredTopology-1",
              "type": "requiredTopology",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubOciArgo"
                ],
                "minimumSchedulableNodes": 3,
                "purpose": "Logstash HA renders three replicas with required pod anti-affinity across kubernetes.io/hostname."
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredTopology": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubOciArgo"
                ],
                "minimumSchedulableNodes": 3,
                "purpose": "Logstash HA renders three replicas with required pod anti-affinity across kubernetes.io/hostname."
              }
            },
            "requirements": [
              {
                "category": "topology",
                "name": "target topology",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Logstash HA renders three replicas with required pod anti-affinity across kubernetes.io/hostname.",
                "check": "",
                "declarationPath": "recipes/elastic/logstash/8.5.1/variants/ha/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/elastic/logstash/8.5.1/variants/ha/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/elastic/logstash/8.5.1/variants/ha/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "elastic-metricbeat-8-5-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "elastic/metricbeat",
          "sourceVersion": "8.5.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "elastic/metricbeat",
          "version": "8.5.1",
          "record": "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-metricbeat:8.5.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "ace18fc8d71b8f719d7cb3374613766f39a6ed935d3b7cd4fcdf67a917d8424a"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/elastic/metricbeat/8.5.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/elastic/metricbeat/8.5.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 14
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=elastic/metricbeat",
            "version=8.5.1",
            "base=default",
            "valuesProfile=recipes/elastic/metricbeat/8.5.1/effective-values.yaml",
            "namespace=default",
            "releaseName=metricbeat",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "elasticsearch-master-certs",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml",
                  "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml"
                ],
                "name": "elasticsearch-master-certs",
                "namespace": "default",
                "purpose": "CA certificate material mounted by the Metricbeat workloads for their Elasticsearch connection",
                "sourcePath": "../../revisions/default/r001/rendered/release-objects.yaml",
                "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=<path-to-ca.crt>"
              }
            },
            {
              "name": "elasticsearch-master-credentials",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml",
                  "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml"
                ],
                "keys": [
                  "username",
                  "password"
                ],
                "name": "elasticsearch-master-credentials",
                "namespace": "default",
                "purpose": "Elasticsearch username and password read by the Metricbeat workloads",
                "sourcePath": "../../revisions/default/r001/rendered/release-objects.yaml",
                "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username=<username> --from-literal=password=<password>"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts-and-observed-action-records",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml",
                    "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml"
                  ],
                  "name": "elasticsearch-master-certs",
                  "namespace": "default",
                  "purpose": "CA certificate material mounted by the Metricbeat workloads for their Elasticsearch connection",
                  "sourcePath": "../../revisions/default/r001/rendered/release-objects.yaml",
                  "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=<path-to-ca.crt>"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml",
                    "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml"
                  ],
                  "keys": [
                    "username",
                    "password"
                  ],
                  "name": "elasticsearch-master-credentials",
                  "namespace": "default",
                  "purpose": "Elasticsearch username and password read by the Metricbeat workloads",
                  "sourcePath": "../../revisions/default/r001/rendered/release-objects.yaml",
                  "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username=<username> --from-literal=password=<password>"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "default/elasticsearch-master-certs",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CA certificate material mounted by the Metricbeat workloads for their Elasticsearch connection",
                "check": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=<path-to-ca.crt>",
                "declarationPath": "recipes/elastic/metricbeat/8.5.1/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/elastic/metricbeat/8.5.1/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml",
                  "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/elasticsearch-master-credentials",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Elasticsearch username and password read by the Metricbeat workloads",
                "check": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username=<username> --from-literal=password=<password>",
                "declarationPath": "recipes/elastic/metricbeat/8.5.1/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/elastic/metricbeat/8.5.1/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml",
                  "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml"
                ]
              }
            ],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/elastic/metricbeat/8.5.1 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "secret",
                "prerequisiteName": "Secret elasticsearch-master-certs",
                "actionKind": "stage-secret",
                "ownerClass": "user-stage",
                "requiredInputs": "Secret elasticsearch-master-certs",
                "evidenceRequired": "the named Secret(s) present in the target namespace before apply; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart elastic/metricbeat --version 8.5.1 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "attached-with-observed-actions",
              "reason": "2 prerequisite declarations and 2 follow-up action records are attached.",
              "declarationSource": "recipes/elastic/metricbeat/8.5.1/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "external-dns-external-dns-1-21-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "external-dns/external-dns",
          "sourceVersion": "1.21.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "external-dns/external-dns",
          "version": "1.21.1",
          "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-dns-external-dns:1.21.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "4a96813e25ba4ec15c68c47d0640ea940551e63f4785243e381f041a49dc2cb8"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/external-dns/external-dns/1.21.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/external-dns/external-dns/1.21.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=external-dns/external-dns",
            "version=1.21.1",
            "base=default",
            "valuesProfile=recipes/external-dns/external-dns/1.21.1/effective-values.yaml",
            "namespace=default",
            "releaseName=external-dns",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "external-dns-external-dns-1-21-1-dry-run-txt-registry",
        "labels": {
          "sourceType": "helm",
          "component": "external-dns/external-dns",
          "sourceVersion": "1.21.1",
          "base": "dry-run-txt-registry"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "external-dns/external-dns",
          "version": "1.21.1",
          "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-dns-external-dns:1.21.1"
        },
        "baseVariant": {
          "name": "dry-run-txt-registry",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/external-dns/external-dns/1.21.1/revisions/dry-run-txt-registry/r001/rendered/release-objects.yaml",
          "inventory": "recipes/external-dns/external-dns/1.21.1/revisions/dry-run-txt-registry/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=external-dns/external-dns",
            "version=1.21.1",
            "base=dry-run-txt-registry",
            "valuesProfile=recipes/external-dns/external-dns/1.21.1/effective-values-dry-run-txt-registry.yaml",
            "namespace=default",
            "releaseName=external-dns",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "external-dns-external-dns-1-21-1-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "external-dns/external-dns",
          "sourceVersion": "1.21.1",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "external-dns/external-dns",
          "version": "1.21.1",
          "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-dns-external-dns:1.21.1"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/external-dns/external-dns/1.21.1/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/external-dns/external-dns/1.21.1/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=external-dns/external-dns",
            "version=1.21.1",
            "base=no-crds",
            "valuesProfile=recipes/external-dns/external-dns/1.21.1/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=external-dns",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "external-secrets-external-secrets-2-5-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "external-secrets/external-secrets",
          "sourceVersion": "2.5.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "external-secrets/external-secrets",
          "version": "2.5.0",
          "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-secrets-external-secrets:2.5.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "cde00fd0f20069be91d607e11360ee418bc49ecf61e4d319d2e37af3130d8e8e"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 42
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=external-secrets/external-secrets",
            "version=2.5.0",
            "base=default",
            "valuesProfile=recipes/external-secrets/external-secrets/2.5.0/effective-values.yaml",
            "namespace=external-secrets",
            "releaseName=external-secrets",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "external-secrets-webhook",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [],
                "name": "external-secrets-webhook",
                "namespace": "external-secrets",
                "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply",
                "sourceVariant": "default",
                "suggestedSource": "kubectl -n external-secrets apply -f <work-dir>/out/secrets/secret-external-secrets-external-secrets-webhook.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [],
                  "name": "external-secrets-webhook",
                  "namespace": "external-secrets",
                  "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl -n external-secrets apply -f <work-dir>/out/secrets/secret-external-secrets-external-secrets-webhook.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "external-secrets/external-secrets-webhook",
                "namespace": "external-secrets",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply",
                "check": "kubectl -n external-secrets apply -f <work-dir>/out/secrets/secret-external-secrets-external-secrets-webhook.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/default/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/external-secrets/external-secrets/2.5.0/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "no",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "external-secrets-external-secrets-2-5-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "external-secrets/external-secrets",
          "sourceVersion": "2.5.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "external-secrets/external-secrets",
          "version": "2.5.0",
          "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-secrets-external-secrets:2.5.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": "bec9b5454faba0fd70ba4db15ccf25a5f560b72e6c73bf1228d5c7df307cbb3b"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/external-secrets/external-secrets/2.5.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/external-secrets/external-secrets/2.5.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 19
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=external-secrets/external-secrets",
            "version=2.5.0",
            "base=no-crds",
            "valuesProfile=recipes/external-secrets/external-secrets/2.5.0/effective-values-no-crds.yaml",
            "namespace=external-secrets",
            "releaseName=external-secrets",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "acraccesstokens.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "acraccesstokens.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "cloudsmithaccesstokens.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "cloudsmithaccesstokens.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clusterexternalsecrets.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clusterexternalsecrets.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clustergenerators.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clustergenerators.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clusterpushsecrets.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clusterpushsecrets.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clustersecretstores.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clustersecretstores.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "ecrauthorizationtokens.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "ecrauthorizationtokens.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "externalsecrets.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "externalsecrets.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "fakes.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "fakes.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "gcraccesstokens.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "gcraccesstokens.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "generatorstates.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "generatorstates.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "githubaccesstokens.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "githubaccesstokens.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "grafanas.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "grafanas.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "mfas.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "mfas.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "passwords.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "passwords.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "pushsecrets.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "pushsecrets.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "quayaccesstokens.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "quayaccesstokens.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "secretstores.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "secretstores.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "sshkeys.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "sshkeys.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "stssessiontokens.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "stssessiontokens.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "uuids.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "uuids.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "vaultdynamicsecrets.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "vaultdynamicsecrets.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "webhooks.generators.external-secrets.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "webhooks.generators.external-secrets.io",
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "external-secrets-webhook",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [],
                "name": "external-secrets-webhook",
                "namespace": "external-secrets",
                "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply",
                "sourceVariant": "default",
                "suggestedSource": "kubectl -n external-secrets apply -f <work-dir>/out/secrets/secret-external-secrets-external-secrets-webhook.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "acraccesstokens.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "cloudsmithaccesstokens.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clusterexternalsecrets.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clustergenerators.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clusterpushsecrets.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clustersecretstores.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "ecrauthorizationtokens.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "externalsecrets.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "fakes.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "gcraccesstokens.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "generatorstates.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "githubaccesstokens.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "grafanas.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "mfas.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "passwords.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "pushsecrets.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "quayaccesstokens.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "secretstores.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "sshkeys.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "stssessiontokens.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "uuids.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "vaultdynamicsecrets.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "webhooks.generators.external-secrets.io",
                  "purpose": "External Secrets CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [],
                  "name": "external-secrets-webhook",
                  "namespace": "external-secrets",
                  "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl -n external-secrets apply -f <work-dir>/out/secrets/secret-external-secrets-external-secrets-webhook.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "acraccesstokens.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "cloudsmithaccesstokens.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clusterexternalsecrets.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clustergenerators.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clusterpushsecrets.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clustersecretstores.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "ecrauthorizationtokens.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "externalsecrets.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "fakes.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "gcraccesstokens.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "generatorstates.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "githubaccesstokens.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "grafanas.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "mfas.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "passwords.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "pushsecrets.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "quayaccesstokens.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "secretstores.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "sshkeys.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "stssessiontokens.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "uuids.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "vaultdynamicsecrets.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "webhooks.generators.external-secrets.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "External Secrets CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                  "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "external-secrets/external-secrets-webhook",
                "namespace": "external-secrets",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply",
                "check": "kubectl -n external-secrets apply -f <work-dir>/out/secrets/secret-external-secrets-external-secrets-webhook.yaml",
                "declarationPath": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "24 target prerequisites declared by this base.",
              "declarationSource": "recipes/external-secrets/external-secrets/2.5.0/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "no",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "fairwinds-stable-goldilocks-10-3-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "fairwinds-stable/goldilocks",
          "sourceVersion": "10.3.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "fairwinds-stable/goldilocks",
          "version": "10.3.0",
          "record": "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/fairwinds-stable-goldilocks:10.3.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "fb050d20cf8af09d730bffb1e7fe169792fdf653396cdafbe29947586920f25c"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/fairwinds-stable/goldilocks/10.3.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/fairwinds-stable/goldilocks/10.3.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 9
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=fairwinds-stable/goldilocks",
            "version=10.3.0",
            "base=default",
            "valuesProfile=recipes/fairwinds-stable/goldilocks/10.3.0/effective-values.yaml",
            "namespace=default",
            "releaseName=goldilocks",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "fairwinds-stable-vpa-4-11-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "fairwinds-stable/vpa",
          "sourceVersion": "4.11.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "fairwinds-stable/vpa",
          "version": "4.11.0",
          "record": "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/fairwinds-stable-vpa:4.11.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "b50a13250baea58dab9c39e8399f938139565c13e076f0aa85b91b7b9bda6b44"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/fairwinds-stable/vpa/4.11.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/fairwinds-stable/vpa/4.11.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 28
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=fairwinds-stable/vpa",
            "version=4.11.0",
            "base=default",
            "valuesProfile=recipes/fairwinds-stable/vpa/4.11.0/effective-values.yaml",
            "namespace=default",
            "releaseName=vpa",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "vpa-tls-secret",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "ca",
                  "cert",
                  "key"
                ],
                "name": "vpa-tls-secret",
                "namespace": "default",
                "purpose": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "ca",
                    "cert",
                    "key"
                  ],
                  "name": "vpa-tls-secret",
                  "namespace": "default",
                  "purpose": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "default/vpa-tls-secret",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle",
                "check": "",
                "declarationPath": "recipes/fairwinds-stable/vpa/4.11.0/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/fairwinds-stable/vpa/4.11.0/variants/default/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/fairwinds-stable/vpa/4.11.0/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "fairwinds-stable-vpa-4-11-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "fairwinds-stable/vpa",
          "sourceVersion": "4.11.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "fairwinds-stable/vpa",
          "version": "4.11.0",
          "record": "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/fairwinds-stable-vpa:4.11.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/fairwinds-stable/vpa/4.11.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/fairwinds-stable/vpa/4.11.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=fairwinds-stable/vpa",
            "version=4.11.0",
            "base=no-crds",
            "valuesProfile=recipes/fairwinds-stable/vpa/4.11.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=vpa",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "verticalpodautoscalercheckpoints.autoscaling.k8s.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "verticalpodautoscalercheckpoints.autoscaling.k8s.io",
                "purpose": "VPA CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "verticalpodautoscalers.autoscaling.k8s.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "verticalpodautoscalers.autoscaling.k8s.io",
                "purpose": "VPA CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "vpa-tls-secret",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "ca",
                  "cert",
                  "key"
                ],
                "name": "vpa-tls-secret",
                "namespace": "default",
                "purpose": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "verticalpodautoscalercheckpoints.autoscaling.k8s.io",
                  "purpose": "VPA CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "verticalpodautoscalers.autoscaling.k8s.io",
                  "purpose": "VPA CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "ca",
                    "cert",
                    "key"
                  ],
                  "name": "vpa-tls-secret",
                  "namespace": "default",
                  "purpose": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "verticalpodautoscalercheckpoints.autoscaling.k8s.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "VPA CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/fairwinds-stable/vpa/4.11.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/fairwinds-stable/vpa/4.11.0/variants/no-crds/variant.yaml",
                  "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "verticalpodautoscalers.autoscaling.k8s.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "VPA CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/fairwinds-stable/vpa/4.11.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/fairwinds-stable/vpa/4.11.0/variants/no-crds/variant.yaml",
                  "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/vpa-tls-secret",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle",
                "check": "",
                "declarationPath": "recipes/fairwinds-stable/vpa/4.11.0/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/fairwinds-stable/vpa/4.11.0/variants/no-crds/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "3 target prerequisites declared by this base.",
              "declarationSource": "recipes/fairwinds-stable/vpa/4.11.0/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "falcosecurity-falco-9-0-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "falcosecurity/falco",
          "sourceVersion": "9.0.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "falcosecurity/falco",
          "version": "9.0.0",
          "record": "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/falcosecurity-falco:9.0.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "6af7e1db0ab2bbc67fd71782b8925f2fbf40ef47382a46f68010f1d1a452da27"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/falcosecurity/falco/9.0.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/falcosecurity/falco/9.0.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=falcosecurity/falco",
            "version=9.0.0",
            "base=default",
            "valuesProfile=recipes/falcosecurity/falco/9.0.0/effective-values.yaml",
            "namespace=default",
            "releaseName=falco",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "falcosecurity-falcosidekick-0-13-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "falcosecurity/falcosidekick",
          "sourceVersion": "0.13.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "falcosecurity/falcosidekick",
          "version": "0.13.1",
          "record": "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/falcosecurity-falcosidekick:0.13.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "6953bde8326fa3418454da01f94d4433ff0f4ba9a2ff5e99d444fbd638537d5e"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/falcosecurity/falcosidekick/0.13.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/falcosecurity/falcosidekick/0.13.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=falcosecurity/falcosidekick",
            "version=0.13.1",
            "base=default",
            "valuesProfile=recipes/falcosecurity/falcosidekick/0.13.1/effective-values.yaml",
            "namespace=default",
            "releaseName=falcosidekick",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "fluent-fluent-bit-0-57-6-default",
        "labels": {
          "sourceType": "helm",
          "component": "fluent/fluent-bit",
          "sourceVersion": "0.57.6",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "fluent/fluent-bit",
          "version": "0.57.6",
          "record": "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/fluent-fluent-bit:0.57.6"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "7a0afff1b91c5f0be50f51448c412666791343ae14237ff12fdee8b5dc3e3724"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/fluent/fluent-bit/0.57.6/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/fluent/fluent-bit/0.57.6/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=fluent/fluent-bit",
            "version=0.57.6",
            "base=default",
            "valuesProfile=recipes/fluent/fluent-bit/0.57.6/effective-values.yaml",
            "namespace=default",
            "releaseName=fluent-bit",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "preserve-cleanup-policy",
              "quirkClass": "hook-delete-policy",
              "lifecyclePhase": "observe",
              "actionKind": "accept-target-policy",
              "executionMode": "target-owned",
              "automatic": false,
              "whoRuns": "Your cluster — at uninstall, automatically",
              "operatingDetails": "",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "0.57.6",
              "evidence": [
                "data/hook-lifecycle/receipt-index.csv",
                "data/hook-lifecycle/receipts/fluent-fluent-bit/default/latest.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — your cluster handles it",
                "flux": "none — your cluster handles it",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your cluster — at uninstall, automatically",
                  "status": "not-run",
                  "evidence": []
                },
                "argoCd": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "explicit-test-check",
              "quirkClass": "hook-test",
              "lifecyclePhase": "observe",
              "actionKind": "run-test",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Opt-in check — run from CI or on demand (tests are explicit by design)",
              "operatingDetails": "Connectivity tests are checks against the installed target, not render-time behavior.",
              "command": "# run the chart's test/check (helm test equivalent)",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "0.57.6",
              "evidence": [
                "data/hook-lifecycle/receipts/fluent-fluent-bit/default/latest.yaml",
                "data/hook-lifecycle/top100-hooks.csv",
                "recipes/fluent/fluent-bit/0.57.6/helm-pain-report.yaml",
                "runs/hook-lifecycle/fluent-fluent-bit/default/latest/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PostSync test Job (Argo has no native helm test)",
                "flux": "HelmRelease .spec.test.enable=true",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PostSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "# run the chart's test/check (helm test equivalent)",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/hook-lifecycle/fluent-fluent-bit/default/latest/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PostSync test Job (Argo has no native helm test)",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "HelmRelease .spec.test.enable=true",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "fluent-fluentd-0-5-3-default",
        "labels": {
          "sourceType": "helm",
          "component": "fluent/fluentd",
          "sourceVersion": "0.5.3",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "fluent/fluentd",
          "version": "0.5.3",
          "record": "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/fluent-fluentd:0.5.3"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "da0c89124a9c013296402d55cfce0dfe18732e5d0b166bdd81d0da8658736db0"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/fluent/fluentd/0.5.3/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/fluent/fluentd/0.5.3/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 10
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=fluent/fluentd",
            "version=0.5.3",
            "base=default",
            "valuesProfile=recipes/fluent/fluentd/0.5.3/effective-values.yaml",
            "namespace=default",
            "releaseName=fluentd",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/fluent/fluentd/0.5.3/runtime-review.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/fluent-fluentd-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/fluent/fluentd/0.5.3 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/fluent-fluentd-default/receipt.yaml",
                  "recipes/fluent/fluentd/0.5.3/runtime-review.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "1 observed prerequisite action record exists, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "gatekeeper-gatekeeper-3-22-2-default",
        "labels": {
          "sourceType": "helm",
          "component": "gatekeeper/gatekeeper",
          "sourceVersion": "3.22.2",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "gatekeeper/gatekeeper",
          "version": "3.22.2",
          "record": "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/gatekeeper-gatekeeper:3.22.2"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "57649ce2ff654a2900d594b5aac09186f35e6349fd72d333922229b7d2c6e49a"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 30
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=gatekeeper/gatekeeper",
            "version=3.22.2",
            "base=default",
            "valuesProfile=recipes/gatekeeper/gatekeeper/3.22.2/effective-values.yaml",
            "namespace=default",
            "releaseName=gatekeeper",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "preflight-or-presync",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "preflight",
              "actionKind": "run-preflight",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a preflight step before apply (receipted)",
              "operatingDetails": "CRD and admission-webhook prerequisites must be checked before apply.",
              "command": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "3.22.2",
              "evidence": [
                "data/hook-lifecycle/receipts/gatekeeper-gatekeeper/default/latest.yaml",
                "data/hook-lifecycle/top100-hooks.csv",
                "recipes/gatekeeper/gatekeeper/3.22.2/helm-pain-report.yaml",
                "runs/hook-lifecycle/gatekeeper-gatekeeper/default/latest/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -1",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-1\""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/hook-lifecycle/gatekeeper-gatekeeper/default/latest/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync · sync-wave -1",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "upgrade-action-with-receipt",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "pre-apply",
              "actionKind": "run-job",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a GitOps PreSync/PostSync or cub action (receipted)",
              "operatingDetails": "The pinned rendered CRD route must be recorded as a target-aware operation before stronger upgrade claims.",
              "command": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "3.22.2",
              "evidence": [
                "data/hook-lifecycle/receipts/gatekeeper-gatekeeper/default/latest.yaml",
                "data/hook-lifecycle/top100-hooks.csv",
                "recipes/gatekeeper/gatekeeper/3.22.2/helm-pain-report.yaml",
                "runs/hook-lifecycle/gatekeeper-gatekeeper/default/latest/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/hook-lifecycle/gatekeeper-gatekeeper/default/latest/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "gatekeeper-gatekeeper-3-22-2-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "gatekeeper/gatekeeper",
          "sourceVersion": "3.22.2",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "gatekeeper/gatekeeper",
          "version": "3.22.2",
          "record": "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/gatekeeper-gatekeeper:3.22.2"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=gatekeeper/gatekeeper",
            "version=3.22.2",
            "base=no-crds",
            "valuesProfile=recipes/gatekeeper/gatekeeper/3.22.2/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=gatekeeper",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "assign.mutations.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "assign.mutations.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "assignimage.mutations.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "assignimage.mutations.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "assignmetadata.mutations.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "assignmetadata.mutations.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "configs.config.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "configs.config.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "configpodstatuses.status.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "configpodstatuses.status.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "connections.connection.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "connections.connection.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "connectionpodstatuses.status.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "connectionpodstatuses.status.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "constraintpodstatuses.status.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "constraintpodstatuses.status.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "constrainttemplates.templates.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "constrainttemplates.templates.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "constrainttemplatepodstatuses.status.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "constrainttemplatepodstatuses.status.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "expansiontemplate.expansion.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "expansiontemplate.expansion.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "expansiontemplatepodstatuses.status.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "expansiontemplatepodstatuses.status.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "modifyset.mutations.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "modifyset.mutations.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "mutatorpodstatuses.status.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "mutatorpodstatuses.status.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "providers.externaldata.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "providers.externaldata.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "providerpodstatuses.status.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "providerpodstatuses.status.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "syncsets.syncset.gatekeeper.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "syncsets.syncset.gatekeeper.sh",
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "assign.mutations.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "assignimage.mutations.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "assignmetadata.mutations.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "configs.config.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "configpodstatuses.status.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "connections.connection.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "connectionpodstatuses.status.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "constraintpodstatuses.status.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "constrainttemplates.templates.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "constrainttemplatepodstatuses.status.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "expansiontemplate.expansion.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "expansiontemplatepodstatuses.status.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "modifyset.mutations.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "mutatorpodstatuses.status.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "providers.externaldata.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "providerpodstatuses.status.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "syncsets.syncset.gatekeeper.sh",
                  "purpose": "Gatekeeper CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "assign.mutations.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "assignimage.mutations.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "assignmetadata.mutations.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "configs.config.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "configpodstatuses.status.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "connections.connection.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "connectionpodstatuses.status.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "constraintpodstatuses.status.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "constrainttemplates.templates.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "constrainttemplatepodstatuses.status.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "expansiontemplate.expansion.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "expansiontemplatepodstatuses.status.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "modifyset.mutations.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "mutatorpodstatuses.status.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "providers.externaldata.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "providerpodstatuses.status.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "syncsets.syncset.gatekeeper.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Gatekeeper CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
                  "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "17 target prerequisites declared by this base.",
              "declarationSource": "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "gitlab-gitlab-runner-0-89-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "gitlab/gitlab-runner",
          "sourceVersion": "0.89.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "gitlab/gitlab-runner",
          "version": "0.89.0",
          "record": "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/gitlab-gitlab-runner:0.89.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "4bc2da6b8dd76be52d58a638724a529d7dd3be4a787933bf7c0bbe3d0ecbbc7a"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/gitlab/gitlab-runner/0.89.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/gitlab/gitlab-runner/0.89.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 2
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=gitlab/gitlab-runner",
            "version=0.89.0",
            "base=default",
            "valuesProfile=recipes/gitlab/gitlab-runner/0.89.0/effective-values.yaml",
            "namespace=default",
            "releaseName=gitlab-runner",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-helm-confighub-compare/gitlab-gitlab-runner-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/gitlab/gitlab-runner/0.89.0 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/gitlab-gitlab-runner-default/receipt.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "external-api",
                "prerequisiteName": "unknown",
                "actionKind": "provide-external-service",
                "ownerClass": "operator-review",
                "requiredInputs": "the upstream service/endpoint the workload connects to",
                "evidenceRequired": "the upstream service/endpoint reachable from the workload; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-kind-parity/gitlab-gitlab-runner-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart gitlab/gitlab-runner --version 0.89.0 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/gitlab-gitlab-runner-default/receipt.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "2 observed prerequisite action records exist, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "watch",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-alloy-1-8-2-default",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/alloy",
          "sourceVersion": "1.8.2",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/alloy",
          "version": "1.8.2",
          "record": "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-alloy:1.8.2"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "2a3257cb0501718709370f54310d6de3ef9a411225df0165eb2599ac90b51b8c"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/alloy/1.8.2/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/alloy/1.8.2/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/alloy",
            "version=1.8.2",
            "base=default",
            "valuesProfile=recipes/grafana/alloy/1.8.2/effective-values.yaml",
            "namespace=default",
            "releaseName=alloy",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "blocked"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-alloy-1-8-2-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/alloy",
          "sourceVersion": "1.8.2",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/alloy",
          "version": "1.8.2",
          "record": "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-alloy:1.8.2"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/alloy/1.8.2/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/alloy/1.8.2/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/alloy",
            "version=1.8.2",
            "base=no-crds",
            "valuesProfile=recipes/grafana/alloy/1.8.2/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=alloy",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "blocked"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-grafana-10-5-15-existing-secret-ingress",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/grafana",
          "sourceVersion": "10.5.15",
          "base": "existing-secret-ingress"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/grafana",
          "version": "10.5.15",
          "record": "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-grafana:10.5.15"
        },
        "baseVariant": {
          "name": "existing-secret-ingress",
          "revision": "r001",
          "digest": "e09cf943695cd0a968513386e745382ef0dc99be69991e6021ed56c9d0bf1488"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/grafana/10.5.15/revisions/existing-secret-ingress/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/grafana/10.5.15/revisions/existing-secret-ingress/r001/rendered/object-inventory.yaml",
          "objectCount": 9
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/grafana",
            "version=10.5.15",
            "base=existing-secret-ingress",
            "valuesProfile=recipes/grafana/grafana/10.5.15/effective-values-existing-secret-ingress.yaml",
            "namespace=grafana",
            "releaseName=grafana",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "grafana-admin",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "admin-user",
                  "admin-password"
                ],
                "name": "grafana-admin",
                "namespace": "grafana",
                "purpose": "Grafana administrator username and password"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "admin-user",
                    "admin-password"
                  ],
                  "name": "grafana-admin",
                  "namespace": "grafana",
                  "purpose": "Grafana administrator username and password"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "grafana/grafana-admin",
                "namespace": "grafana",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Grafana administrator username and password",
                "check": "",
                "declarationPath": "recipes/grafana/grafana/10.5.15/variants/existing-secret-ingress/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/grafana/grafana/10.5.15/variants/existing-secret-ingress/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/grafana/grafana/10.5.15/variants/existing-secret-ingress/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-grafana-10-5-15-static-passwords",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/grafana",
          "sourceVersion": "10.5.15",
          "base": "static-passwords"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/grafana",
          "version": "10.5.15",
          "record": "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-grafana:10.5.15"
        },
        "baseVariant": {
          "name": "static-passwords",
          "revision": "r001",
          "digest": "af8b2f7687eba631899ec64b6b64fc05422e5402eaad15f698cfe883f90a9b4e"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/grafana/10.5.15/revisions/static-passwords/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/grafana/10.5.15/revisions/static-passwords/r001/rendered/object-inventory.yaml",
          "objectCount": 9
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/grafana",
            "version=10.5.15",
            "base=static-passwords",
            "valuesProfile=recipes/grafana/grafana/10.5.15/effective-values.yaml",
            "namespace=grafana",
            "releaseName=grafana",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-loki-7-0-0-simple-scalable-minio",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/loki",
          "sourceVersion": "7.0.0",
          "base": "simple-scalable-minio"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/loki",
          "version": "7.0.0",
          "record": "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-loki:7.0.0"
        },
        "baseVariant": {
          "name": "simple-scalable-minio",
          "revision": "r001",
          "digest": "8fbbaca079a979957bd8a1788f3a4f493432dfd5fb133d8e9ae05000cbd13140"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/loki/7.0.0/revisions/simple-scalable-minio/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/loki/7.0.0/revisions/simple-scalable-minio/r001/rendered/object-inventory.yaml",
          "objectCount": 33
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/loki",
            "version=7.0.0",
            "base=simple-scalable-minio",
            "valuesProfile=recipes/grafana/loki/7.0.0/effective-values-simple-scalable-minio.yaml",
            "namespace=loki",
            "releaseName=loki",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-loki-7-0-0-single-binary-filesystem",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/loki",
          "sourceVersion": "7.0.0",
          "base": "single-binary-filesystem"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/loki",
          "version": "7.0.0",
          "record": "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-loki:7.0.0"
        },
        "baseVariant": {
          "name": "single-binary-filesystem",
          "revision": "r001",
          "digest": "2021a326aa0034593a1eadecce34863923ca5c5f4a76c57c21bde36800033040"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/loki/7.0.0/revisions/single-binary-filesystem/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/loki/7.0.0/revisions/single-binary-filesystem/r001/rendered/object-inventory.yaml",
          "objectCount": 19
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/loki",
            "version=7.0.0",
            "base=single-binary-filesystem",
            "valuesProfile=recipes/grafana/loki/7.0.0/effective-values.yaml",
            "namespace=loki",
            "releaseName=loki",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-promtail-6-17-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/promtail",
          "sourceVersion": "6.17.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/promtail",
          "version": "6.17.1",
          "record": "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-promtail:6.17.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "1e6ae5d174e1afc3eb7fe873f759fa33355584538d34b30327736f6a384ce430"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/promtail/6.17.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/promtail/6.17.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/promtail",
            "version=6.17.1",
            "base=default",
            "valuesProfile=recipes/grafana/promtail/6.17.1/effective-values.yaml",
            "namespace=default",
            "releaseName=promtail",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-pyroscope-2-0-2-default",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/pyroscope",
          "sourceVersion": "2.0.2",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/pyroscope",
          "version": "2.0.2",
          "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-pyroscope:2.0.2"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "b997f5f154951092ba2d583bce6a1f00e8ff89ae2c0dfd28b096df2fbfe99945"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/pyroscope/2.0.2/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/pyroscope/2.0.2/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 18
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/pyroscope",
            "version=2.0.2",
            "base=default",
            "valuesProfile=recipes/grafana/pyroscope/2.0.2/effective-values.yaml",
            "namespace=default",
            "releaseName=pyroscope",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/grafana/pyroscope/2.0.2/runtime-review.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/grafana-pyroscope-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/grafana/pyroscope/2.0.2 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/grafana-pyroscope-default/receipt.yaml",
                  "recipes/grafana/pyroscope/2.0.2/runtime-review.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "1 observed prerequisite action record exists, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-pyroscope-2-0-2-ha",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/pyroscope",
          "sourceVersion": "2.0.2",
          "base": "ha"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/pyroscope",
          "version": "2.0.2",
          "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-pyroscope:2.0.2"
        },
        "baseVariant": {
          "name": "ha",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/pyroscope/2.0.2/revisions/ha/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/pyroscope/2.0.2/revisions/ha/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/pyroscope",
            "version=2.0.2",
            "base=ha",
            "valuesProfile=recipes/grafana/pyroscope/2.0.2/effective-values-ha.yaml",
            "namespace=default",
            "releaseName=pyroscope",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/grafana/pyroscope/2.0.2/runtime-review.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/grafana-pyroscope-ha/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/grafana/pyroscope/2.0.2 --base ha",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/grafana-pyroscope-ha/receipt.yaml",
                  "recipes/grafana/pyroscope/2.0.2/runtime-review.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "1 observed prerequisite action record exists, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-pyroscope-2-0-2-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/pyroscope",
          "sourceVersion": "2.0.2",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/pyroscope",
          "version": "2.0.2",
          "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-pyroscope:2.0.2"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/pyroscope/2.0.2/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/pyroscope/2.0.2/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/pyroscope",
            "version=2.0.2",
            "base=no-crds",
            "valuesProfile=recipes/grafana/pyroscope/2.0.2/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=pyroscope",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/grafana/pyroscope/2.0.2/runtime-review.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/grafana-pyroscope-no-crds/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/grafana/pyroscope/2.0.2 --base no-crds",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/grafana-pyroscope-no-crds/receipt.yaml",
                  "recipes/grafana/pyroscope/2.0.2/runtime-review.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "1 observed prerequisite action record exists, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-rollout-operator-0-49-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/rollout-operator",
          "sourceVersion": "0.49.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/rollout-operator",
          "version": "0.49.0",
          "record": "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-rollout-operator:0.49.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "b608def0b2aa3fb67360e919b132e0552bae164c60a54ab270f1945ba6e8d1b6"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/rollout-operator/0.49.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/rollout-operator/0.49.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 15
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/rollout-operator",
            "version=0.49.0",
            "base=default",
            "valuesProfile=recipes/grafana/rollout-operator/0.49.0/effective-values.yaml",
            "namespace=default",
            "releaseName=rollout-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-rollout-operator-0-49-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/rollout-operator",
          "sourceVersion": "0.49.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/rollout-operator",
          "version": "0.49.0",
          "record": "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-rollout-operator:0.49.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/rollout-operator/0.49.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/rollout-operator/0.49.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/rollout-operator",
            "version=0.49.0",
            "base=no-crds",
            "valuesProfile=recipes/grafana/rollout-operator/0.49.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=rollout-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "replicatemplates.rollout-operator.grafana.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "replicatemplates.rollout-operator.grafana.com",
                "purpose": "ReplicaTemplate CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <rollout-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "zoneawarepoddisruptionbudgets.rollout-operator.grafana.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "zoneawarepoddisruptionbudgets.rollout-operator.grafana.com",
                "purpose": "ZoneAwarePodDisruptionBudget CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <rollout-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "replicatemplates.rollout-operator.grafana.com",
                  "purpose": "ReplicaTemplate CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <rollout-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "zoneawarepoddisruptionbudgets.rollout-operator.grafana.com",
                  "purpose": "ZoneAwarePodDisruptionBudget CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <rollout-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "replicatemplates.rollout-operator.grafana.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "ReplicaTemplate CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/grafana/rollout-operator/0.49.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/grafana/rollout-operator/0.49.0/variants/no-crds/variant.yaml",
                  "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "zoneawarepoddisruptionbudgets.rollout-operator.grafana.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "ZoneAwarePodDisruptionBudget CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/grafana/rollout-operator/0.49.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/grafana/rollout-operator/0.49.0/variants/no-crds/variant.yaml",
                  "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "2 target prerequisites declared by this base.",
              "declarationSource": "recipes/grafana/rollout-operator/0.49.0/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-tempo-1-24-4-local-persistent",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/tempo",
          "sourceVersion": "1.24.4",
          "base": "local-persistent"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/tempo",
          "version": "1.24.4",
          "record": "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-tempo:1.24.4"
        },
        "baseVariant": {
          "name": "local-persistent",
          "revision": "r001",
          "digest": "75c99c0e86a430f8ff1c9967da77a5fc59f5bad8498961eb024cdac68be36cc8"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/tempo/1.24.4/revisions/local-persistent/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/tempo/1.24.4/revisions/local-persistent/r001/rendered/object-inventory.yaml",
          "objectCount": 4
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/tempo",
            "version=1.24.4",
            "base=local-persistent",
            "valuesProfile=recipes/grafana/tempo/1.24.4/effective-values.yaml",
            "namespace=tempo",
            "releaseName=tempo",
            "capabilityProfile={\"apiVersions\":[\"networking.k8s.io/v1\"],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "grafana-tempo-1-24-4-s3-query-observability",
        "labels": {
          "sourceType": "helm",
          "component": "grafana/tempo",
          "sourceVersion": "1.24.4",
          "base": "s3-query-observability"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "grafana/tempo",
          "version": "1.24.4",
          "record": "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-tempo:1.24.4"
        },
        "baseVariant": {
          "name": "s3-query-observability",
          "revision": "r001",
          "digest": "7b0f4953c927613a0fe94df67ae5ec22b62672da793f0dd65f123536e7a24ed6"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/grafana/tempo/1.24.4/revisions/s3-query-observability/r001/rendered/release-objects.yaml",
          "inventory": "recipes/grafana/tempo/1.24.4/revisions/s3-query-observability/r001/rendered/object-inventory.yaml",
          "objectCount": 8
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=grafana/tempo",
            "version=1.24.4",
            "base=s3-query-observability",
            "valuesProfile=recipes/grafana/tempo/1.24.4/effective-values-s3-query-observability.yaml",
            "namespace=tempo",
            "releaseName=tempo",
            "capabilityProfile={\"apiVersions\":[\"networking.k8s.io/v1\",\"monitoring.coreos.com/v1\"],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "servicemonitors.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "servicemonitors.monitoring.coreos.com",
                "purpose": "Prometheus Operator ServiceMonitor CRD required by Tempo's ServiceMonitor object",
                "sourcePath": "../../../prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "prometheus-community/kube-prometheus-stack@85.3.3/default",
                "packageSource": "package://prerequisites/target-facts/s3-query-observability-crds.yaml",
                "packagePath": "packages/grafana/tempo/1.24.4/prerequisites/target-facts/s3-query-observability-crds.yaml"
              }
            },
            {
              "name": "tempo-object-store",
              "type": "requiredObjectStores",
              "required": true,
              "details": {
                "bucket": "tempo-traces",
                "credentialsSecret": {
                  "accessKey": "access_key",
                  "name": "tempo-s3-credentials",
                  "secretKey": "secret_key"
                },
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply"
                ],
                "endpoint": "tempo-object-store.tempo.svc.cluster.local:9000",
                "kind": "S3CompatibleObjectStore",
                "name": "tempo-object-store",
                "namespace": "tempo",
                "purpose": "Local S3-compatible object-store fixture used to prove the S3 base can become ready when its target prerequisite exists",
                "serviceName": "tempo-object-store"
              }
            },
            {
              "name": "tempo-s3-credentials",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "access_key",
                  "secret_key"
                ],
                "name": "tempo-s3-credentials",
                "namespace": "tempo",
                "purpose": "S3 access credentials referenced by Tempo environment variables"
              }
            },
            {
              "name": "requiredValues-1",
              "type": "requiredValues",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "recipe"
                ],
                "path": "tempo.storage.trace.s3.endpoint",
                "purpose": "S3-compatible endpoint that Tempo will write traces to",
                "stage": "pre-render"
              }
            },
            {
              "name": "requiredValues-2",
              "type": "requiredValues",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "recipe"
                ],
                "path": "tempo.storage.trace.s3.bucket",
                "purpose": "Existing bucket for Tempo trace blocks",
                "stage": "pre-render"
              }
            },
            {
              "name": "requiredValues-3",
              "type": "requiredValues",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "recipe"
                ],
                "path": "tempo.storage.trace.s3.region",
                "purpose": "Object-store region used with the selected endpoint and bucket",
                "stage": "pre-render"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "servicemonitors.monitoring.coreos.com",
                  "purpose": "Prometheus Operator ServiceMonitor CRD required by Tempo's ServiceMonitor object",
                  "sourcePath": "../../../prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "prometheus-community/kube-prometheus-stack@85.3.3/default",
                  "packageSource": "package://prerequisites/target-facts/s3-query-observability-crds.yaml",
                  "packagePath": "packages/grafana/tempo/1.24.4/prerequisites/target-facts/s3-query-observability-crds.yaml"
                }
              ],
              "requiredObjectStores": [
                {
                  "bucket": "tempo-traces",
                  "credentialsSecret": {
                    "accessKey": "access_key",
                    "name": "tempo-s3-credentials",
                    "secretKey": "secret_key"
                  },
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply"
                  ],
                  "endpoint": "tempo-object-store.tempo.svc.cluster.local:9000",
                  "kind": "S3CompatibleObjectStore",
                  "name": "tempo-object-store",
                  "namespace": "tempo",
                  "purpose": "Local S3-compatible object-store fixture used to prove the S3 base can become ready when its target prerequisite exists",
                  "serviceName": "tempo-object-store"
                }
              ],
              "requiredSecrets": [
                {
                  "keys": [
                    "access_key",
                    "secret_key"
                  ],
                  "name": "tempo-s3-credentials",
                  "namespace": "tempo",
                  "purpose": "S3 access credentials referenced by Tempo environment variables"
                }
              ],
              "requiredValues": [
                {
                  "deliveryLanes": [
                    "recipe"
                  ],
                  "path": "tempo.storage.trace.s3.endpoint",
                  "purpose": "S3-compatible endpoint that Tempo will write traces to",
                  "stage": "pre-render"
                },
                {
                  "deliveryLanes": [
                    "recipe"
                  ],
                  "path": "tempo.storage.trace.s3.bucket",
                  "purpose": "Existing bucket for Tempo trace blocks",
                  "stage": "pre-render"
                },
                {
                  "deliveryLanes": [
                    "recipe"
                  ],
                  "path": "tempo.storage.trace.s3.region",
                  "purpose": "Object-store region used with the selected endpoint and bucket",
                  "stage": "pre-render"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "servicemonitors.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator ServiceMonitor CRD required by Tempo's ServiceMonitor object",
                "check": "package://prerequisites/target-facts/s3-query-observability-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/s3-query-observability-crds.yaml",
                "packagePath": "packages/grafana/tempo/1.24.4/prerequisites/target-facts/s3-query-observability-crds.yaml",
                "declarationPath": "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml",
                "sourceVariant": "prometheus-community/kube-prometheus-stack@85.3.3/default",
                "sourcePath": "../../../prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml",
                  "packages/grafana/tempo/1.24.4/prerequisites/target-facts/s3-query-observability-crds.yaml"
                ]
              },
              {
                "category": "object-store",
                "name": "tempo-object-store",
                "namespace": "tempo",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Local S3-compatible object-store fixture used to prove the S3 base can become ready when its target prerequisite exists",
                "check": "",
                "declarationPath": "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "tempo/tempo-s3-credentials",
                "namespace": "tempo",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "S3 access credentials referenced by Tempo environment variables",
                "check": "",
                "declarationPath": "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml"
                ]
              },
              {
                "category": "value",
                "name": "tempo.storage.trace.s3.endpoint",
                "namespace": "",
                "requiredBefore": "render",
                "freshness": {
                  "policy": "recheck-before-render",
                  "maxAge": "one-render"
                },
                "purpose": "S3-compatible endpoint that Tempo will write traces to",
                "check": "",
                "declarationPath": "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "recipe"
                ],
                "evidence": [
                  "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml"
                ]
              },
              {
                "category": "value",
                "name": "tempo.storage.trace.s3.bucket",
                "namespace": "",
                "requiredBefore": "render",
                "freshness": {
                  "policy": "recheck-before-render",
                  "maxAge": "one-render"
                },
                "purpose": "Existing bucket for Tempo trace blocks",
                "check": "",
                "declarationPath": "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "recipe"
                ],
                "evidence": [
                  "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml"
                ]
              },
              {
                "category": "value",
                "name": "tempo.storage.trace.s3.region",
                "namespace": "",
                "requiredBefore": "render",
                "freshness": {
                  "policy": "recheck-before-render",
                  "maxAge": "one-render"
                },
                "purpose": "Object-store region used with the selected endpoint and bucket",
                "check": "",
                "declarationPath": "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "recipe"
                ],
                "evidence": [
                  "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "6 target prerequisites declared by this base.",
              "declarationSource": "recipes/grafana/tempo/1.24.4/variants/s3-query-observability/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "haproxytech-kubernetes-ingress-1-52-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "haproxytech/kubernetes-ingress",
          "sourceVersion": "1.52.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "haproxytech/kubernetes-ingress",
          "version": "1.52.0",
          "record": "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/haproxytech-kubernetes-ingress:1.52.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "3e41229b4e62ca37c89acc31102d97429ca55671d8b90fc507bc982ae5043cf0"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/haproxytech/kubernetes-ingress/1.52.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/haproxytech/kubernetes-ingress/1.52.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=haproxytech/kubernetes-ingress",
            "version=1.52.0",
            "base=default",
            "valuesProfile=recipes/haproxytech/kubernetes-ingress/1.52.0/effective-values.yaml",
            "namespace=default",
            "releaseName=kubernetes-ingress",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "hashicorp-consul-2-0-0-default-control-plane",
        "labels": {
          "sourceType": "helm",
          "component": "hashicorp/consul",
          "sourceVersion": "2.0.0",
          "base": "default-control-plane"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "hashicorp/consul",
          "version": "2.0.0",
          "record": "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-consul:2.0.0"
        },
        "baseVariant": {
          "name": "default-control-plane",
          "revision": "r001",
          "digest": "b83c19e0fd112cd7ef9080d42a3a16d6b3b22c5b2021c5a30a93372d1ff3f0de"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/hashicorp/consul/2.0.0/revisions/default-control-plane/r001/rendered/release-objects.yaml",
          "inventory": "recipes/hashicorp/consul/2.0.0/revisions/default-control-plane/r001/rendered/object-inventory.yaml",
          "objectCount": 68
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=hashicorp/consul",
            "version=2.0.0",
            "base=default-control-plane",
            "valuesProfile=recipes/hashicorp/consul/2.0.0/effective-values.yaml",
            "namespace=consul",
            "releaseName=consul",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "hashicorp-consul-2-0-0-secure-mesh-existing-secrets",
        "labels": {
          "sourceType": "helm",
          "component": "hashicorp/consul",
          "sourceVersion": "2.0.0",
          "base": "secure-mesh-existing-secrets"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "hashicorp/consul",
          "version": "2.0.0",
          "record": "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-consul:2.0.0"
        },
        "baseVariant": {
          "name": "secure-mesh-existing-secrets",
          "revision": "r001",
          "digest": "f1c903c0195ac960a1108142730b10044eeba6c0ad8649c743b483a4c88976d3"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/hashicorp/consul/2.0.0/revisions/secure-mesh-existing-secrets/r001/rendered/release-objects.yaml",
          "inventory": "recipes/hashicorp/consul/2.0.0/revisions/secure-mesh-existing-secrets/r001/rendered/object-inventory.yaml",
          "objectCount": 97
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=hashicorp/consul",
            "version=2.0.0",
            "base=secure-mesh-existing-secrets",
            "valuesProfile=recipes/hashicorp/consul/2.0.0/effective-values-secure-mesh-existing-secrets.yaml",
            "namespace=consul",
            "releaseName=consul",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "consul-ca-cert",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "tls.crt"
                ],
                "name": "consul-ca-cert",
                "namespace": "consul",
                "purpose": "Consul TLS CA certificate; must sign consul-server-cert"
              }
            },
            {
              "name": "consul-server-cert",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "caSecretName": "consul-ca-cert",
                "keys": [
                  "tls.crt",
                  "tls.key"
                ],
                "name": "consul-server-cert",
                "namespace": "consul",
                "purpose": "Consul server TLS certificate and private key; certificate SANs must cover server.dc1.consul and rendered consul-consul-server service DNS names",
                "requiredDNSNames": [
                  "server.dc1.consul",
                  "consul-consul-server",
                  "consul-consul-server.consul",
                  "consul-consul-server.consul.svc",
                  "consul-consul-server.consul-helm",
                  "consul-consul-server.consul-helm.svc",
                  "consul-consul-server.consul-apply",
                  "consul-consul-server.consul-apply.svc",
                  "consul-consul-server.consul-oci",
                  "consul-consul-server.consul-oci.svc"
                ]
              }
            },
            {
              "name": "consul-gossip-encryption-key",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "key"
                ],
                "name": "consul-gossip-encryption-key",
                "namespace": "consul",
                "purpose": "Consul gossip encryption key"
              }
            },
            {
              "name": "consul-bootstrap-acl-token",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "token"
                ],
                "name": "consul-bootstrap-acl-token",
                "namespace": "consul",
                "purpose": "Consul ACL bootstrap token"
              }
            },
            {
              "name": "requiredTopology-1",
              "type": "requiredTopology",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply"
                ],
                "minimumSchedulableNodes": 3,
                "purpose": "Consul secure mesh renders three server replicas with anti-affinity and gateway workloads."
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "tls.crt"
                  ],
                  "name": "consul-ca-cert",
                  "namespace": "consul",
                  "purpose": "Consul TLS CA certificate; must sign consul-server-cert"
                },
                {
                  "caSecretName": "consul-ca-cert",
                  "keys": [
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "consul-server-cert",
                  "namespace": "consul",
                  "purpose": "Consul server TLS certificate and private key; certificate SANs must cover server.dc1.consul and rendered consul-consul-server service DNS names",
                  "requiredDNSNames": [
                    "server.dc1.consul",
                    "consul-consul-server",
                    "consul-consul-server.consul",
                    "consul-consul-server.consul.svc",
                    "consul-consul-server.consul-helm",
                    "consul-consul-server.consul-helm.svc",
                    "consul-consul-server.consul-apply",
                    "consul-consul-server.consul-apply.svc",
                    "consul-consul-server.consul-oci",
                    "consul-consul-server.consul-oci.svc"
                  ]
                },
                {
                  "keys": [
                    "key"
                  ],
                  "name": "consul-gossip-encryption-key",
                  "namespace": "consul",
                  "purpose": "Consul gossip encryption key"
                },
                {
                  "keys": [
                    "token"
                  ],
                  "name": "consul-bootstrap-acl-token",
                  "namespace": "consul",
                  "purpose": "Consul ACL bootstrap token"
                }
              ],
              "requiredTopology": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply"
                ],
                "minimumSchedulableNodes": 3,
                "purpose": "Consul secure mesh renders three server replicas with anti-affinity and gateway workloads."
              }
            },
            "requirements": [
              {
                "category": "secret",
                "name": "consul/consul-ca-cert",
                "namespace": "consul",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Consul TLS CA certificate; must sign consul-server-cert",
                "check": "",
                "declarationPath": "recipes/hashicorp/consul/2.0.0/variants/secure-mesh-existing-secrets/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/hashicorp/consul/2.0.0/variants/secure-mesh-existing-secrets/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "consul/consul-server-cert",
                "namespace": "consul",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Consul server TLS certificate and private key; certificate SANs must cover server.dc1.consul and rendered consul-consul-server service DNS names",
                "check": "",
                "declarationPath": "recipes/hashicorp/consul/2.0.0/variants/secure-mesh-existing-secrets/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/hashicorp/consul/2.0.0/variants/secure-mesh-existing-secrets/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "consul/consul-gossip-encryption-key",
                "namespace": "consul",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Consul gossip encryption key",
                "check": "",
                "declarationPath": "recipes/hashicorp/consul/2.0.0/variants/secure-mesh-existing-secrets/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/hashicorp/consul/2.0.0/variants/secure-mesh-existing-secrets/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "consul/consul-bootstrap-acl-token",
                "namespace": "consul",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Consul ACL bootstrap token",
                "check": "",
                "declarationPath": "recipes/hashicorp/consul/2.0.0/variants/secure-mesh-existing-secrets/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/hashicorp/consul/2.0.0/variants/secure-mesh-existing-secrets/variant.yaml"
                ]
              },
              {
                "category": "topology",
                "name": "target topology",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Consul secure mesh renders three server replicas with anti-affinity and gateway workloads.",
                "check": "",
                "declarationPath": "recipes/hashicorp/consul/2.0.0/variants/secure-mesh-existing-secrets/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/hashicorp/consul/2.0.0/variants/secure-mesh-existing-secrets/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "5 target prerequisites declared by this base.",
              "declarationSource": "recipes/hashicorp/consul/2.0.0/variants/secure-mesh-existing-secrets/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "no",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "hashicorp-terraform-1-1-2-default",
        "labels": {
          "sourceType": "helm",
          "component": "hashicorp/terraform",
          "sourceVersion": "1.1.2",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "hashicorp/terraform",
          "version": "1.1.2",
          "record": "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-terraform:1.1.2"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "40c409175a95558a0683036dc80b3b7877540cfc68ea6eceeae017c731fd5b95"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=hashicorp/terraform",
            "version=1.1.2",
            "base=default",
            "valuesProfile=recipes/hashicorp/terraform/1.1.2/effective-values.yaml",
            "namespace=default",
            "releaseName=terraform",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "terraformrc",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml",
                  "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml"
                ],
                "keys": [
                  "credentials"
                ],
                "name": "terraformrc",
                "namespace": "default",
                "purpose": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "suggestedSource": "kubectl -n default create secret generic terraformrc --from-file=credentials=<path-to-terraform-cli-config>"
              }
            },
            {
              "name": "workspacesecrets",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml",
                  "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml"
                ],
                "name": "workspacesecrets",
                "namespace": "default",
                "purpose": "Sensitive Terraform workspace variables mounted at /tmp/secrets",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "suggestedSource": "kubectl -n default apply -f <workspacesecrets-manifest.yaml>"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts-and-observed-action-records",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml",
                    "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml"
                  ],
                  "keys": [
                    "credentials"
                  ],
                  "name": "terraformrc",
                  "namespace": "default",
                  "purpose": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc",
                  "sourcePath": "../../target-prerequisite-plan.yaml",
                  "suggestedSource": "kubectl -n default create secret generic terraformrc --from-file=credentials=<path-to-terraform-cli-config>"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml",
                    "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml"
                  ],
                  "name": "workspacesecrets",
                  "namespace": "default",
                  "purpose": "Sensitive Terraform workspace variables mounted at /tmp/secrets",
                  "sourcePath": "../../target-prerequisite-plan.yaml",
                  "suggestedSource": "kubectl -n default apply -f <workspacesecrets-manifest.yaml>"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "default/terraformrc",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc",
                "check": "kubectl -n default create secret generic terraformrc --from-file=credentials=<path-to-terraform-cli-config>",
                "declarationPath": "recipes/hashicorp/terraform/1.1.2/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/hashicorp/terraform/1.1.2/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml",
                  "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/workspacesecrets",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Sensitive Terraform workspace variables mounted at /tmp/secrets",
                "check": "kubectl -n default apply -f <workspacesecrets-manifest.yaml>",
                "declarationPath": "recipes/hashicorp/terraform/1.1.2/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/hashicorp/terraform/1.1.2/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml",
                  "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml"
                ]
              }
            ],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/hashicorp/terraform/1.1.2/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/hashicorp/terraform/1.1.2 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml",
                  "recipes/hashicorp/terraform/1.1.2/target-prerequisite-plan.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "attached-with-observed-actions",
              "reason": "2 prerequisite declarations and 1 follow-up action record are attached.",
              "declarationSource": "recipes/hashicorp/terraform/1.1.2/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "hashicorp-terraform-1-1-2-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "hashicorp/terraform",
          "sourceVersion": "1.1.2",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "hashicorp/terraform",
          "version": "1.1.2",
          "record": "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-terraform:1.1.2"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=hashicorp/terraform",
            "version=1.1.2",
            "base=no-crds",
            "valuesProfile=recipes/hashicorp/terraform/1.1.2/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=terraform",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "workspaces.app.terraform.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml"
                ],
                "name": "workspaces.app.terraform.io",
                "purpose": "Terraform Workspace CRD managed outside this no-crds preset",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <terraform-workspace-crd.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/hashicorp/terraform/1.1.2/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "terraformrc",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml",
                  "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
                ],
                "keys": [
                  "credentials"
                ],
                "name": "terraformrc",
                "namespace": "default",
                "purpose": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "suggestedSource": "kubectl -n default create secret generic terraformrc --from-file=credentials=<path-to-terraform-cli-config>"
              }
            },
            {
              "name": "workspacesecrets",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml",
                  "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
                ],
                "name": "workspacesecrets",
                "namespace": "default",
                "purpose": "Sensitive Terraform workspace variables mounted at /tmp/secrets",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "suggestedSource": "kubectl -n default apply -f <workspacesecrets-manifest.yaml>"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts-and-observed-action-records",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml"
                  ],
                  "name": "workspaces.app.terraform.io",
                  "purpose": "Terraform Workspace CRD managed outside this no-crds preset",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <terraform-workspace-crd.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/hashicorp/terraform/1.1.2/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml",
                    "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
                  ],
                  "keys": [
                    "credentials"
                  ],
                  "name": "terraformrc",
                  "namespace": "default",
                  "purpose": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc",
                  "sourcePath": "../../target-prerequisite-plan.yaml",
                  "suggestedSource": "kubectl -n default create secret generic terraformrc --from-file=credentials=<path-to-terraform-cli-config>"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml",
                    "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
                  ],
                  "name": "workspacesecrets",
                  "namespace": "default",
                  "purpose": "Sensitive Terraform workspace variables mounted at /tmp/secrets",
                  "sourcePath": "../../target-prerequisite-plan.yaml",
                  "suggestedSource": "kubectl -n default apply -f <workspacesecrets-manifest.yaml>"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "workspaces.app.terraform.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Terraform Workspace CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/hashicorp/terraform/1.1.2/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml",
                  "packages/hashicorp/terraform/1.1.2/prerequisites/target-facts/no-crds-crds.yaml",
                  "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/terraformrc",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc",
                "check": "kubectl -n default create secret generic terraformrc --from-file=credentials=<path-to-terraform-cli-config>",
                "declarationPath": "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml",
                  "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml",
                  "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/workspacesecrets",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Sensitive Terraform workspace variables mounted at /tmp/secrets",
                "check": "kubectl -n default apply -f <workspacesecrets-manifest.yaml>",
                "declarationPath": "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml",
                  "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml",
                  "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
                ]
              }
            ],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/hashicorp/terraform/1.1.2/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/hashicorp/terraform/1.1.2 --base no-crds",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml",
                  "recipes/hashicorp/terraform/1.1.2/target-prerequisite-plan.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "secret",
                "prerequisiteName": "Secret workspacesecrets; Secret terraformrc",
                "actionKind": "stage-secret",
                "ownerClass": "user-stage",
                "requiredInputs": "Secret workspacesecrets; Secret terraformrc",
                "evidenceRequired": "the named Secret(s) present in the target namespace before apply; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/hashicorp/terraform/1.1.2/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart hashicorp/terraform --version 1.1.2 --base no-crds",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml",
                  "recipes/hashicorp/terraform/1.1.2/target-prerequisite-plan.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "attached-with-observed-actions",
              "reason": "3 prerequisite declarations and 2 follow-up action records are attached.",
              "declarationSource": "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "hashicorp-vault-0-32-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "hashicorp/vault",
          "sourceVersion": "0.32.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "hashicorp/vault",
          "version": "0.32.0",
          "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-vault:0.32.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "9ffbc08ecd91c99f37e8428ea8ff3b9a3c32709b7c0d524e99d08fd7cfcbf7d6"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/hashicorp/vault/0.32.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/hashicorp/vault/0.32.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 12
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=hashicorp/vault",
            "version=0.32.0",
            "base=default",
            "valuesProfile=recipes/hashicorp/vault/0.32.0/effective-values.yaml",
            "namespace=vault",
            "releaseName=vault",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "hashicorp-vault-0-32-0-dev-mode",
        "labels": {
          "sourceType": "helm",
          "component": "hashicorp/vault",
          "sourceVersion": "0.32.0",
          "base": "dev-mode"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "hashicorp/vault",
          "version": "0.32.0",
          "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-vault:0.32.0"
        },
        "baseVariant": {
          "name": "dev-mode",
          "revision": "r001",
          "digest": "d12dc23745e26709b232036d5899853314a71a907746284d01041a1f59a7c937"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/hashicorp/vault/0.32.0/revisions/dev-mode/r001/rendered/release-objects.yaml",
          "inventory": "recipes/hashicorp/vault/0.32.0/revisions/dev-mode/r001/rendered/object-inventory.yaml",
          "objectCount": 11
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=hashicorp/vault",
            "version=0.32.0",
            "base=dev-mode",
            "valuesProfile=recipes/hashicorp/vault/0.32.0/effective-values-dev-mode.yaml",
            "namespace=vault",
            "releaseName=vault",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "hashicorp-vault-0-32-0-ha-raft-ui",
        "labels": {
          "sourceType": "helm",
          "component": "hashicorp/vault",
          "sourceVersion": "0.32.0",
          "base": "ha-raft-ui"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "hashicorp/vault",
          "version": "0.32.0",
          "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-vault:0.32.0"
        },
        "baseVariant": {
          "name": "ha-raft-ui",
          "revision": "r001",
          "digest": "8961fc7dfc008815d652289b9591f2c4ec407ff9f9869d6a91f835d72476c6be"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/hashicorp/vault/0.32.0/revisions/ha-raft-ui/r001/rendered/release-objects.yaml",
          "inventory": "recipes/hashicorp/vault/0.32.0/revisions/ha-raft-ui/r001/rendered/object-inventory.yaml",
          "objectCount": 18
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=hashicorp/vault",
            "version=0.32.0",
            "base=ha-raft-ui",
            "valuesProfile=recipes/hashicorp/vault/0.32.0/effective-values-ha-raft-ui.yaml",
            "namespace=vault",
            "releaseName=vault",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "requiredTopology-1",
              "type": "requiredTopology",
              "required": true,
              "details": {
                "minimumSchedulableNodes": 3,
                "purpose": "schedule the three Vault server replicas rendered by the HA Raft base"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts-and-observed-action-records",
            "declared": {
              "requiredTopology": {
                "minimumSchedulableNodes": 3,
                "purpose": "schedule the three Vault server replicas rendered by the HA Raft base"
              }
            },
            "requirements": [
              {
                "category": "topology",
                "name": "target topology",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "schedule the three Vault server replicas rendered by the HA Raft base",
                "check": "",
                "declarationPath": "recipes/hashicorp/vault/0.32.0/variants/ha-raft-ui/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/hashicorp/vault/0.32.0/variants/ha-raft-ui/variant.yaml"
                ]
              }
            ],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/hashicorp/vault/0.32.0/operating-policy.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/hashicorp-vault-ha-raft-ui/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/hashicorp/vault/0.32.0 --base ha-raft-ui",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/hashicorp-vault-ha-raft-ui/receipt.yaml",
                  "recipes/hashicorp/vault/0.32.0/operating-policy.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "attached-with-observed-actions",
              "reason": "1 prerequisite declaration and 1 follow-up action record are attached.",
              "declarationSource": "recipes/hashicorp/vault/0.32.0/variants/ha-raft-ui/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "ingress-nginx-ingress-nginx-4-15-1-admission-disabled",
        "labels": {
          "sourceType": "helm",
          "component": "ingress-nginx/ingress-nginx",
          "sourceVersion": "4.15.1",
          "base": "admission-disabled"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "ingress-nginx/ingress-nginx",
          "version": "4.15.1",
          "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/ingress-nginx-ingress-nginx:4.15.1"
        },
        "baseVariant": {
          "name": "admission-disabled",
          "revision": "r001",
          "digest": "c559f8547f3716cddff683df312790c09786c8bff4284023d7ad59ad6139e7b7"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/admission-disabled/r001/rendered/release-objects.yaml",
          "inventory": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/admission-disabled/r001/rendered/object-inventory.yaml",
          "objectCount": 9
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=ingress-nginx/ingress-nginx",
            "version=4.15.1",
            "base=admission-disabled",
            "valuesProfile=recipes/ingress-nginx/ingress-nginx/4.15.1/effective-values-admission-disabled.yaml",
            "namespace=ingress-nginx",
            "releaseName=ingress-nginx",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "watch",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "ingress-nginx-ingress-nginx-4-15-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "ingress-nginx/ingress-nginx",
          "sourceVersion": "4.15.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "ingress-nginx/ingress-nginx",
          "version": "4.15.1",
          "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/ingress-nginx-ingress-nginx:4.15.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "fcb4d06cd9078d87226aad3c100f9e80ced6398e0a358f54334b5bd45a4f26d8"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 11
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=ingress-nginx/ingress-nginx",
            "version=4.15.1",
            "base=default",
            "valuesProfile=recipes/ingress-nginx/ingress-nginx/4.15.1/effective-values.yaml",
            "namespace=ingress-nginx",
            "releaseName=ingress-nginx",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "ingress-nginx-admission",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "keys": [
                  "cert",
                  "key",
                  "ca"
                ],
                "name": "ingress-nginx-admission",
                "namespace": "ingress-nginx",
                "purpose": "admission webhook certificate normally created by Helm hook jobs"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply"
                  ],
                  "keys": [
                    "cert",
                    "key",
                    "ca"
                  ],
                  "name": "ingress-nginx-admission",
                  "namespace": "ingress-nginx",
                  "purpose": "admission webhook certificate normally created by Helm hook jobs"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "ingress-nginx/ingress-nginx-admission",
                "namespace": "ingress-nginx",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "admission webhook certificate normally created by Helm hook jobs",
                "check": "",
                "declarationPath": "recipes/ingress-nginx/ingress-nginx/4.15.1/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply"
                ],
                "evidence": [
                  "recipes/ingress-nginx/ingress-nginx/4.15.1/variants/default/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/ingress-nginx/ingress-nginx/4.15.1/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "ingress-nginx-ingress-nginx-4-15-1-internal-clusterip",
        "labels": {
          "sourceType": "helm",
          "component": "ingress-nginx/ingress-nginx",
          "sourceVersion": "4.15.1",
          "base": "internal-clusterip"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "ingress-nginx/ingress-nginx",
          "version": "4.15.1",
          "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/ingress-nginx-ingress-nginx:4.15.1"
        },
        "baseVariant": {
          "name": "internal-clusterip",
          "revision": "r001",
          "digest": "7083577d9a18c7d732a95318c6fa9aa5619f0603d2217394f805dbefcf3600cc"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/internal-clusterip/r001/rendered/release-objects.yaml",
          "inventory": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/internal-clusterip/r001/rendered/object-inventory.yaml",
          "objectCount": 9
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=ingress-nginx/ingress-nginx",
            "version=4.15.1",
            "base=internal-clusterip",
            "valuesProfile=recipes/ingress-nginx/ingress-nginx/4.15.1/effective-values-internal-clusterip.yaml",
            "namespace=ingress-nginx",
            "releaseName=ingress-nginx",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "istio-gateway-1-30-0-controller-default-reviewed",
        "labels": {
          "sourceType": "helm",
          "component": "istio/gateway",
          "sourceVersion": "1.30.0",
          "base": "controller-default-reviewed"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "istio/gateway",
          "version": "1.30.0",
          "record": "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/istio-gateway:1.30.0"
        },
        "baseVariant": {
          "name": "controller-default-reviewed",
          "revision": "r001",
          "digest": "e0f999321bc8f539b567f66392c0573dd4727ab7533d95b2701180b598207011"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/istio/gateway/1.30.0/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml",
          "inventory": "recipes/istio/gateway/1.30.0/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=istio/gateway",
            "version=1.30.0",
            "base=controller-default-reviewed",
            "valuesProfile=recipes/istio/gateway/1.30.0/effective-values.yaml",
            "namespace=default",
            "releaseName=gateway",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "istio-gateway-1-30-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "istio/gateway",
          "sourceVersion": "1.30.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "istio/gateway",
          "version": "1.30.0",
          "record": "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/istio-gateway:1.30.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "1841f26edd8ff88a49ae40776f75e6901eab32ac85193401669e046737c3f208"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/istio/gateway/1.30.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/istio/gateway/1.30.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=istio/gateway",
            "version=1.30.0",
            "base=default",
            "valuesProfile=recipes/istio/gateway/1.30.0/effective-values.yaml",
            "namespace=default",
            "releaseName=gateway",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "istio-istiod-1-30-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "istio/istiod",
          "sourceVersion": "1.30.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "istio/istiod",
          "version": "1.30.0",
          "record": "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/istio-istiod:1.30.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "add9fe5f59c4bee135be299995f91da3b8411969240948dcf387d04cbde45663"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/istio/istiod/1.30.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/istio/istiod/1.30.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 17
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=istio/istiod",
            "version=1.30.0",
            "base=default",
            "valuesProfile=recipes/istio/istiod/1.30.0/effective-values.yaml",
            "namespace=default",
            "releaseName=istiod",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "istio-system",
              "type": "requiredNamespaces",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/istio-istiod-default/receipt.yaml",
                  "runs/live-kind-parity/istio-istiod-default/receipt.yaml"
                ],
                "name": "istio-system",
                "purpose": "The chart renders service-account and RBAC objects into istio-system, and Helm blocks when the namespace is absent.",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "suggestedSource": "kubectl create namespace istio-system --dry-run=client -o yaml | kubectl apply -f -"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts-and-observed-action-records",
            "declared": {
              "requiredNamespaces": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/istio-istiod-default/receipt.yaml",
                    "runs/live-kind-parity/istio-istiod-default/receipt.yaml"
                  ],
                  "name": "istio-system",
                  "purpose": "The chart renders service-account and RBAC objects into istio-system, and Helm blocks when the namespace is absent.",
                  "sourcePath": "../../target-prerequisite-plan.yaml",
                  "suggestedSource": "kubectl create namespace istio-system --dry-run=client -o yaml | kubectl apply -f -"
                }
              ]
            },
            "requirements": [
              {
                "category": "namespace",
                "name": "istio-system",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "The chart renders service-account and RBAC objects into istio-system, and Helm blocks when the namespace is absent.",
                "check": "kubectl create namespace istio-system --dry-run=client -o yaml | kubectl apply -f -",
                "declarationPath": "recipes/istio/istiod/1.30.0/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/istio/istiod/1.30.0/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/istio-istiod-default/receipt.yaml",
                  "runs/live-kind-parity/istio-istiod-default/receipt.yaml"
                ]
              }
            ],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "namespace",
                "prerequisiteName": "unknown",
                "actionKind": "create-namespace",
                "ownerClass": "user-stage",
                "requiredInputs": "the target Namespace named by the chart",
                "evidenceRequired": "the named Namespace exists on the target before apply; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/istio/istiod/1.30.0/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/istio-istiod-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/istio/istiod/1.30.0 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/istio-istiod-default/receipt.yaml",
                  "recipes/istio/istiod/1.30.0/target-prerequisite-plan.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "namespace",
                "prerequisiteName": "Namespace istio-system",
                "actionKind": "create-namespace",
                "ownerClass": "user-stage",
                "requiredInputs": "Namespace istio-system",
                "evidenceRequired": "the named Namespace exists on the target before apply; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/istio/istiod/1.30.0/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-kind-parity/istio-istiod-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart istio/istiod --version 1.30.0 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/istio-istiod-default/receipt.yaml",
                  "recipes/istio/istiod/1.30.0/target-prerequisite-plan.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "attached-with-observed-actions",
              "reason": "1 prerequisite declaration and 2 follow-up action records are attached.",
              "declarationSource": "recipes/istio/istiod/1.30.0/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "no",
          "liveDualParity": "no",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "jaegertracing-jaeger-4-8-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "jaegertracing/jaeger",
          "sourceVersion": "4.8.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "jaegertracing/jaeger",
          "version": "4.8.0",
          "record": "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jaegertracing-jaeger:4.8.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "756f8eb6e6899bcd4715a437f077dbffe440daf5bf7cf86c40a7f890f226dd0b"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/jaegertracing/jaeger/4.8.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/jaegertracing/jaeger/4.8.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 3
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=jaegertracing/jaeger",
            "version=4.8.0",
            "base=default",
            "valuesProfile=recipes/jaegertracing/jaeger/4.8.0/effective-values.yaml",
            "namespace=default",
            "releaseName=jaeger",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "jaegertracing-jaeger-operator-2-57-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "jaegertracing/jaeger-operator",
          "sourceVersion": "2.57.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "jaegertracing/jaeger-operator",
          "version": "2.57.0",
          "record": "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jaegertracing-jaeger-operator:2.57.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "7ae3130bd89242695bc77f2336fb4f939f2b384e97e934359cc79ec035787983"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 11
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=jaegertracing/jaeger-operator",
            "version=2.57.0",
            "base=default",
            "valuesProfile=recipes/jaegertracing/jaeger-operator/2.57.0/effective-values.yaml",
            "namespace=default",
            "releaseName=jaeger-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "certificates.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml",
                  "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml"
                ],
                "name": "certificates.cert-manager.io",
                "purpose": "The chart renders a cert-manager Certificate for the Jaeger admission webhook.",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "suggestedSource": "kubectl apply -f <cert-manager-install-manifest.yaml>",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "issuers.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml",
                  "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml"
                ],
                "name": "issuers.cert-manager.io",
                "purpose": "The chart renders a cert-manager Issuer for the Jaeger admission webhook.",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "suggestedSource": "kubectl apply -f <cert-manager-install-manifest.yaml>",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts-and-observed-action-records",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml",
                    "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml"
                  ],
                  "name": "certificates.cert-manager.io",
                  "purpose": "The chart renders a cert-manager Certificate for the Jaeger admission webhook.",
                  "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "suggestedSource": "kubectl apply -f <cert-manager-install-manifest.yaml>",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml",
                    "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml"
                  ],
                  "name": "issuers.cert-manager.io",
                  "purpose": "The chart renders a cert-manager Issuer for the Jaeger admission webhook.",
                  "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "suggestedSource": "kubectl apply -f <cert-manager-install-manifest.yaml>",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "certificates.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "The chart renders a cert-manager Certificate for the Jaeger admission webhook.",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/jaegertracing/jaeger-operator/2.57.0/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jaegertracing/jaeger-operator/2.57.0/variants/default/variant.yaml",
                  "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml",
                  "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml",
                  "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "issuers.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "The chart renders a cert-manager Issuer for the Jaeger admission webhook.",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/jaegertracing/jaeger-operator/2.57.0/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jaegertracing/jaeger-operator/2.57.0/variants/default/variant.yaml",
                  "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml",
                  "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml",
                  "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml"
                ]
              }
            ],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "crd",
                "prerequisiteName": "cert-manager CRDs",
                "actionKind": "install-crds",
                "ownerClass": "operator-review",
                "requiredInputs": "cert-manager CRDs",
                "evidenceRequired": "the required CRDs Established on the target before apply; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/jaegertracing/jaeger-operator/2.57.0/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/jaegertracing/jaeger-operator/2.57.0 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml",
                  "recipes/jaegertracing/jaeger-operator/2.57.0/target-prerequisite-plan.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "crd",
                "prerequisiteName": "cert-manager CRDs",
                "actionKind": "install-crds",
                "ownerClass": "operator-review",
                "requiredInputs": "cert-manager CRDs",
                "evidenceRequired": "the required CRDs Established on the target before apply; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/jaegertracing/jaeger-operator/2.57.0/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart jaegertracing/jaeger-operator --version 2.57.0 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml",
                  "recipes/jaegertracing/jaeger-operator/2.57.0/target-prerequisite-plan.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "attached-with-observed-actions",
              "reason": "2 prerequisite declarations and 2 follow-up action records are attached.",
              "declarationSource": "recipes/jaegertracing/jaeger-operator/2.57.0/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "no",
          "liveDualParity": "no",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "jaegertracing-jaeger-operator-2-57-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "jaegertracing/jaeger-operator",
          "sourceVersion": "2.57.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "jaegertracing/jaeger-operator",
          "version": "2.57.0",
          "record": "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jaegertracing-jaeger-operator:2.57.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=jaegertracing/jaeger-operator",
            "version=2.57.0",
            "base=no-crds",
            "valuesProfile=recipes/jaegertracing/jaeger-operator/2.57.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=jaeger-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "jaegers.jaegertracing.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/rendered/release-objects.yaml"
                ],
                "name": "jaegers.jaegertracing.io",
                "purpose": "Jaeger CRD managed outside this no-crds preset",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <jaeger-crd.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "certificates.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-no-crds/receipt.yaml"
                ],
                "name": "certificates.cert-manager.io",
                "purpose": "The no-crds preset still renders a cert-manager Certificate for the Jaeger admission webhook.",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "suggestedSource": "kubectl apply -f <cert-manager-install-manifest.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "issuers.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-no-crds/receipt.yaml"
                ],
                "name": "issuers.cert-manager.io",
                "purpose": "The no-crds preset still renders a cert-manager Issuer for the Jaeger admission webhook.",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "suggestedSource": "kubectl apply -f <cert-manager-install-manifest.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts-and-observed-action-records",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/rendered/release-objects.yaml"
                  ],
                  "name": "jaegers.jaegertracing.io",
                  "purpose": "Jaeger CRD managed outside this no-crds preset",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <jaeger-crd.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-no-crds/receipt.yaml"
                  ],
                  "name": "certificates.cert-manager.io",
                  "purpose": "The no-crds preset still renders a cert-manager Certificate for the Jaeger admission webhook.",
                  "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "suggestedSource": "kubectl apply -f <cert-manager-install-manifest.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-no-crds/receipt.yaml"
                  ],
                  "name": "issuers.cert-manager.io",
                  "purpose": "The no-crds preset still renders a cert-manager Issuer for the Jaeger admission webhook.",
                  "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "suggestedSource": "kubectl apply -f <cert-manager-install-manifest.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "jaegers.jaegertracing.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Jaeger CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/jaegertracing/jaeger-operator/2.57.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jaegertracing/jaeger-operator/2.57.0/variants/no-crds/variant.yaml",
                  "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml",
                  "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/rendered/release-objects.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "certificates.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "The no-crds preset still renders a cert-manager Certificate for the Jaeger admission webhook.",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/jaegertracing/jaeger-operator/2.57.0/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jaegertracing/jaeger-operator/2.57.0/variants/no-crds/variant.yaml",
                  "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml",
                  "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-no-crds/receipt.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "issuers.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "The no-crds preset still renders a cert-manager Issuer for the Jaeger admission webhook.",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/jaegertracing/jaeger-operator/2.57.0/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jaegertracing/jaeger-operator/2.57.0/variants/no-crds/variant.yaml",
                  "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml",
                  "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-no-crds/receipt.yaml"
                ]
              }
            ],
            "actions": [
              {
                "lane": "K",
                "prerequisiteKind": "crd",
                "prerequisiteName": "cert-manager CRDs",
                "actionKind": "install-crds",
                "ownerClass": "operator-review",
                "requiredInputs": "cert-manager CRDs",
                "evidenceRequired": "the required CRDs Established on the target before apply; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/jaegertracing/jaeger-operator/2.57.0/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-kind-parity/jaegertracing-jaeger-operator-no-crds/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart jaegertracing/jaeger-operator --version 2.57.0 --base no-crds",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/jaegertracing-jaeger-operator-no-crds/receipt.yaml",
                  "recipes/jaegertracing/jaeger-operator/2.57.0/target-prerequisite-plan.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "attached-with-observed-actions",
              "reason": "3 prerequisite declarations and 1 follow-up action record are attached.",
              "declarationSource": "recipes/jaegertracing/jaeger-operator/2.57.0/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "jetstack-cert-manager-csi-driver-v0-14-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "jetstack/cert-manager-csi-driver",
          "sourceVersion": "v0.14.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "jetstack/cert-manager-csi-driver",
          "version": "v0.14.0",
          "record": "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-cert-manager-csi-driver:v0.14.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "9d14ba2db88889bbef70caf5419a3ad88e80c0a32fd95198904165b8cb5ff6cb"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/jetstack/cert-manager-csi-driver/v0.14.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/jetstack/cert-manager-csi-driver/v0.14.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=jetstack/cert-manager-csi-driver",
            "version=v0.14.0",
            "base=default",
            "valuesProfile=recipes/jetstack/cert-manager-csi-driver/v0.14.0/effective-values.yaml",
            "namespace=default",
            "releaseName=cert-manager-csi-driver",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "jetstack-cert-manager-v1-20-2-crds-enabled",
        "labels": {
          "sourceType": "helm",
          "component": "jetstack/cert-manager",
          "sourceVersion": "v1.20.2",
          "base": "crds-enabled"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "jetstack/cert-manager",
          "version": "v1.20.2",
          "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-cert-manager:v1.20.2"
        },
        "baseVariant": {
          "name": "crds-enabled",
          "revision": "r001",
          "digest": "6e697e31c685743b784066bf67a2959b4f1f7226cc7b4f2a0c5bdd24c7359e20"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
          "inventory": "recipes/jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/object-inventory.yaml",
          "objectCount": 48
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=jetstack/cert-manager",
            "version=v1.20.2",
            "base=crds-enabled",
            "valuesProfile=recipes/jetstack/cert-manager/v1.20.2/effective-values-crds-enabled.yaml",
            "namespace=cert-manager",
            "releaseName=cert-manager",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "jetstack-cert-manager-v1-20-2-default",
        "labels": {
          "sourceType": "helm",
          "component": "jetstack/cert-manager",
          "sourceVersion": "v1.20.2",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "jetstack/cert-manager",
          "version": "v1.20.2",
          "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-cert-manager:v1.20.2"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "e747dfea1ea7cbe63b36e863857beb23c20f2cce59285b6f2d1e0d1c48579ed2"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/jetstack/cert-manager/v1.20.2/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/jetstack/cert-manager/v1.20.2/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 42
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=jetstack/cert-manager",
            "version=v1.20.2",
            "base=default",
            "valuesProfile=recipes/jetstack/cert-manager/v1.20.2/effective-values.yaml",
            "namespace=cert-manager",
            "releaseName=cert-manager",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "challenges.acme.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "challenges.acme.cert-manager.io",
                "purpose": "cert-manager CRD managed outside this default base",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "crds-enabled",
                "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "orders.acme.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "orders.acme.cert-manager.io",
                "purpose": "cert-manager CRD managed outside this default base",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "crds-enabled",
                "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "certificaterequests.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "certificaterequests.cert-manager.io",
                "purpose": "cert-manager CRD managed outside this default base",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "crds-enabled",
                "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "certificates.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "certificates.cert-manager.io",
                "purpose": "cert-manager CRD managed outside this default base",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "crds-enabled",
                "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "clusterissuers.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "clusterissuers.cert-manager.io",
                "purpose": "cert-manager CRD managed outside this default base",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "crds-enabled",
                "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "issuers.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "name": "issuers.cert-manager.io",
                "purpose": "cert-manager CRD managed outside this default base",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "crds-enabled",
                "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "name": "challenges.acme.cert-manager.io",
                  "purpose": "cert-manager CRD managed outside this default base",
                  "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "crds-enabled",
                  "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "name": "orders.acme.cert-manager.io",
                  "purpose": "cert-manager CRD managed outside this default base",
                  "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "crds-enabled",
                  "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "name": "certificaterequests.cert-manager.io",
                  "purpose": "cert-manager CRD managed outside this default base",
                  "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "crds-enabled",
                  "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "name": "certificates.cert-manager.io",
                  "purpose": "cert-manager CRD managed outside this default base",
                  "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "crds-enabled",
                  "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "name": "clusterissuers.cert-manager.io",
                  "purpose": "cert-manager CRD managed outside this default base",
                  "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "crds-enabled",
                  "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "name": "issuers.cert-manager.io",
                  "purpose": "cert-manager CRD managed outside this default base",
                  "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "crds-enabled",
                  "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "challenges.acme.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager CRD managed outside this default base",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                "sourceVariant": "crds-enabled",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                  "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "orders.acme.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager CRD managed outside this default base",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                "sourceVariant": "crds-enabled",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                  "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "certificaterequests.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager CRD managed outside this default base",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                "sourceVariant": "crds-enabled",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                  "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "certificates.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager CRD managed outside this default base",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                "sourceVariant": "crds-enabled",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                  "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clusterissuers.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager CRD managed outside this default base",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                "sourceVariant": "crds-enabled",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                  "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "issuers.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager CRD managed outside this default base",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                "sourceVariant": "crds-enabled",
                "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
                  "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "6 target prerequisites declared by this base.",
              "declarationSource": "recipes/jetstack/cert-manager/v1.20.2/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "jetstack-trust-manager-v0-22-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "jetstack/trust-manager",
          "sourceVersion": "v0.22.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "jetstack/trust-manager",
          "version": "v0.22.1",
          "record": "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-trust-manager:v0.22.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "b2230146b96c81c8d8d8f7f031d90a72915b599d62d8dcf4ef304a08b290cb57"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 14
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=jetstack/trust-manager",
            "version=v0.22.1",
            "base=default",
            "valuesProfile=recipes/jetstack/trust-manager/v0.22.1/effective-values.yaml",
            "namespace=default",
            "releaseName=trust-manager",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "certificates.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "certificates.cert-manager.io",
                "purpose": "cert-manager Certificate CRD required by trust-manager certificate.yaml",
                "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "issuers.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "issuers.cert-manager.io",
                "purpose": "cert-manager Issuer CRD required by trust-manager certificate.yaml",
                "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "cert-manager",
              "type": "requiredNamespaces",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "cert-manager",
                "purpose": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for this base"
              }
            },
            {
              "name": "trust-manager-tls",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "tls.crt",
                  "tls.key"
                ],
                "name": "trust-manager-tls",
                "namespace": "default",
                "purpose": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "certificates.cert-manager.io",
                  "purpose": "cert-manager Certificate CRD required by trust-manager certificate.yaml",
                  "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "issuers.cert-manager.io",
                  "purpose": "cert-manager Issuer CRD required by trust-manager certificate.yaml",
                  "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
                }
              ],
              "requiredNamespaces": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "cert-manager",
                  "purpose": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for this base"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "trust-manager-tls",
                  "namespace": "default",
                  "purpose": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "certificates.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager Certificate CRD required by trust-manager certificate.yaml",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml",
                  "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "issuers.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager Issuer CRD required by trust-manager certificate.yaml",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml",
                  "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "namespace",
                "name": "cert-manager",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for this base",
                "check": "",
                "declarationPath": "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/trust-manager-tls",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle",
                "check": "",
                "declarationPath": "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "4 target prerequisites declared by this base.",
              "declarationSource": "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "jetstack-trust-manager-v0-22-1-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "jetstack/trust-manager",
          "sourceVersion": "v0.22.1",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "jetstack/trust-manager",
          "version": "v0.22.1",
          "record": "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-trust-manager:v0.22.1"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=jetstack/trust-manager",
            "version=v0.22.1",
            "base=no-crds",
            "valuesProfile=recipes/jetstack/trust-manager/v0.22.1/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=trust-manager",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "bundles.trust.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "bundles.trust.cert-manager.io",
                "purpose": "trust-manager CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "certificates.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "certificates.cert-manager.io",
                "purpose": "cert-manager Certificate CRD required by trust-manager certificate.yaml",
                "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "issuers.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "issuers.cert-manager.io",
                "purpose": "cert-manager Issuer CRD required by trust-manager certificate.yaml",
                "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "cert-manager",
              "type": "requiredNamespaces",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "cert-manager",
                "purpose": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for the no-crds base"
              }
            },
            {
              "name": "trust-manager-tls",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "tls.crt",
                  "tls.key"
                ],
                "name": "trust-manager-tls",
                "namespace": "default",
                "purpose": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "bundles.trust.cert-manager.io",
                  "purpose": "trust-manager CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "certificates.cert-manager.io",
                  "purpose": "cert-manager Certificate CRD required by trust-manager certificate.yaml",
                  "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "issuers.cert-manager.io",
                  "purpose": "cert-manager Issuer CRD required by trust-manager certificate.yaml",
                  "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ],
              "requiredNamespaces": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "cert-manager",
                  "purpose": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for the no-crds base"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "trust-manager-tls",
                  "namespace": "default",
                  "purpose": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "bundles.trust.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "trust-manager CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml",
                  "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "certificates.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager Certificate CRD required by trust-manager certificate.yaml",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml",
                  "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "issuers.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager Issuer CRD required by trust-manager certificate.yaml",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml",
                  "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "namespace",
                "name": "cert-manager",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for the no-crds base",
                "check": "",
                "declarationPath": "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/trust-manager-tls",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle",
                "check": "",
                "declarationPath": "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "5 target prerequisites declared by this base.",
              "declarationSource": "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "kedacore-keda-2-19-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "kedacore/keda",
          "sourceVersion": "2.19.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "kedacore/keda",
          "version": "2.19.0",
          "record": "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kedacore-keda:2.19.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "b18f3e4598cc6e873ce132e0af29ca9ec651675e832423de0a05d74f22eb5c69"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/kedacore/keda/2.19.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/kedacore/keda/2.19.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 29
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=kedacore/keda",
            "version=2.19.0",
            "base=default",
            "valuesProfile=recipes/kedacore/keda/2.19.0/effective-values.yaml",
            "namespace=default",
            "releaseName=keda",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "kedacore-keda-2-19-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "kedacore/keda",
          "sourceVersion": "2.19.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "kedacore/keda",
          "version": "2.19.0",
          "record": "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kedacore-keda:2.19.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=kedacore/keda",
            "version=2.19.0",
            "base=no-crds",
            "valuesProfile=recipes/kedacore/keda/2.19.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=keda",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "cloudeventsources.eventing.keda.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "cloudeventsources.eventing.keda.sh",
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clustercloudeventsources.eventing.keda.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clustercloudeventsources.eventing.keda.sh",
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clustertriggerauthentications.keda.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clustertriggerauthentications.keda.sh",
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "scaledjobs.keda.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "scaledjobs.keda.sh",
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "scaledobjects.keda.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "scaledobjects.keda.sh",
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "triggerauthentications.keda.sh",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "triggerauthentications.keda.sh",
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "webhook-readiness-observation",
              "quirkClass": "webhook-readiness",
              "lifecyclePhase": "observe",
              "actionKind": "observe-webhook",
              "executionMode": "target-owned",
              "automatic": false,
              "whoRuns": "Your delivery waits for the controller-created or operator-supplied certificate, then checks webhook readiness",
              "operatingDetails": "The operator mounts kedaorg-certs as optional, starts certificate rotation, and creates the Secret used by the webhook and metrics API pods.",
              "command": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "2.19.0",
              "evidence": [
                "data/hook-route-candidates/selected-routes/kedacore-keda-no-crds.yaml",
                "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/live-kind-parity/kedacore-keda-no-crds/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "wait for the certificate handoff, then observe webhook and workload health after sync",
                "flux": "wait for the certificate handoff, then run post-apply webhook and workload health checks",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/live-kind-parity/kedacore-keda-no-crds/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "wait for the certificate handoff, then observe webhook and workload health after sync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "wait for the certificate handoff, then run post-apply webhook and workload health checks",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "cloudeventsources.eventing.keda.sh",
                  "purpose": "KEDA CRD managed outside this no-crds preset",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clustercloudeventsources.eventing.keda.sh",
                  "purpose": "KEDA CRD managed outside this no-crds preset",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clustertriggerauthentications.keda.sh",
                  "purpose": "KEDA CRD managed outside this no-crds preset",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "scaledjobs.keda.sh",
                  "purpose": "KEDA CRD managed outside this no-crds preset",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "scaledobjects.keda.sh",
                  "purpose": "KEDA CRD managed outside this no-crds preset",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "triggerauthentications.keda.sh",
                  "purpose": "KEDA CRD managed outside this no-crds preset",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <keda-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "cloudeventsources.eventing.keda.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                  "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clustercloudeventsources.eventing.keda.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                  "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clustertriggerauthentications.keda.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                  "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "scaledjobs.keda.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                  "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "scaledobjects.keda.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                  "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "triggerauthentications.keda.sh",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KEDA CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
                  "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "6 target prerequisites declared by this base.",
              "declarationSource": "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "kubara-local-platform-v0-12-0-base",
        "labels": {
          "sourceType": "kubara",
          "component": "kubara-local-platform",
          "sourceVersion": "v0.12.0",
          "base": "base"
        }
      },
      "spec": {
        "source": {
          "type": "kubara",
          "name": "local-platform",
          "version": "v0.12.0",
          "record": "examples/kubara/local-platform/generation-receipt.yaml",
          "packageOciRef": ""
        },
        "baseVariant": {
          "name": "base",
          "revision": "generated-v0.12.0",
          "digest": "sha256:b5cc98615a93c708870ecc80d92af488e7a7e517c8da8c8af0bc3b6ae5bfdf54"
        },
        "configuration": {
          "format": "kubara-argocd-bootstrap-yaml",
          "objects": "examples/kubara/local-platform/rendered/release-objects.yaml",
          "inventory": "examples/kubara/local-platform/rendered/object-inventory.json",
          "objectCount": 77
        },
        "inputs": {
          "fixedAtBuildTime": [
            "cluster=test-cluster",
            "stage=local",
            "clusterType=hub",
            "enabledServices=argocd,cert-manager,external-secrets,homer-dashboard,kube-prometheus-stack,metrics-server,traefik",
            "helmKubeVersion=1.34.0",
            "releaseName=kubara-platform",
            "namespace=argocd"
          ],
          "installTime": [
            "Argo CD target cluster",
            "External Secrets ClusterExternalSecret CRD",
            "ClusterSecretStore=test-cluster-local",
            "remote image-pull key when private images are used",
            "approved handling for argocd-secret and cluster-kubernetes.default.svc"
          ],
          "installTimeStatus": "declared-not-live-checked"
        },
        "routing": {
          "routes": [
            {
              "action": "apply the CRDs first and wait for Established before applying Argo CD custom resources",
              "id": "argocd-crds-first",
              "objects": [
                "customresourcedefinitions.apiextensions.k8s.io/applications.argoproj.io",
                "customresourcedefinitions.apiextensions.k8s.io/applicationsets.argoproj.io",
                "customresourcedefinitions.apiextensions.k8s.io/appprojects.argoproj.io"
              ],
              "reason": "Argo CD custom resources cannot be applied until their three CRDs exist and report Established.",
              "status": "recorded-not-live"
            },
            {
              "action": "apply the hook RBAC and Job, wait for the Job to complete, record the result, then continue",
              "id": "argocd-redis-secret-init",
              "objects": [
                "serviceaccounts/kubara-platform-argocd-redis-secret-init",
                "roles.rbac.authorization.k8s.io/kubara-platform-argocd-redis-secret-init",
                "rolebindings.rbac.authorization.k8s.io/kubara-platform-argocd-redis-secret-init",
                "jobs.batch/kubara-platform-argocd-redis-secret-init"
              ],
              "reason": "The upstream Argo CD chart marks four resources as a Helm pre-install and pre-upgrade hook so a Job can create the Redis Secret before Argo CD starts.",
              "status": "recorded-not-live"
            },
            {
              "action": "check the CRD and Secret-store facts before applying the ClusterExternalSecret",
              "id": "external-secrets-crd",
              "objects": [
                "clusterexternalsecrets.external-secrets.io/image-pull-secret-ces"
              ],
              "reason": "The render contains a ClusterExternalSecret, so the External Secrets CRD must exist before that object can be applied.",
              "status": "recorded-not-live",
              "targetFacts": [
                "external-secrets.io/v1 ClusterExternalSecret is served",
                "ClusterSecretStore test-cluster-local exists",
                "remote key test-cluster/local/cluster_secrets/docker_config exists when a private image pull Secret is required"
              ]
            },
            {
              "action": "create or bind these two Secrets through the approved Secret path before applying the remaining objects",
              "id": "rendered-secrets",
              "objects": [
                "secrets/argocd-secret",
                "secrets/cluster-kubernetes.default.svc"
              ],
              "reason": "cub variant upload does not upload rendered Secret objects, including Secrets whose current data is not sensitive.",
              "status": "recorded-not-live"
            }
          ],
          "targetFacts": {
            "clusterName": "test-cluster",
            "clusterType": "hub",
            "requiredApis": [
              "apiextensions.k8s.io/v1",
              "external-secrets.io/v1"
            ],
            "requiredSecretStore": "test-cluster-local"
          },
          "sourceRecord": "examples/kubara/local-platform/route-intent.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "local-only",
            "localDigest": "sha256:b5cc98615a93c708870ecc80d92af488e7a7e517c8da8c8af0bc3b6ae5bfdf54",
            "localLayout": "examples/kubara/local-platform/oci-layout",
            "localPush": "pass",
            "localPull": "pass",
            "publicPush": "not-run",
            "publicPull": "not-run",
            "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kubara-local-platform-config:0.12.0"
          },
          "configHubReleaseOci": {
            "status": "not-run"
          },
          "argoCd": "not-run",
          "flux": "not-applicable-to-this-base"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ],
          "normalSet": "approvalRequired",
          "approvalReason": "system-configuration"
        },
        "evidence": {
          "generationReceipt": "examples/kubara/local-platform/generation-receipt.yaml",
          "sourceLock": "examples/kubara/local-platform/source-lock.yaml",
          "generatedChecksums": "examples/kubara/local-platform/generated/checksums.txt",
          "renderedChecksums": "examples/kubara/local-platform/rendered/checksums.txt",
          "routeIntent": "examples/kubara/local-platform/route-intent.yaml",
          "localOciManifest": "examples/kubara/local-platform/local-config-oci-manifest.json",
          "configHubUploadReceipt": "examples/kubara/local-platform/confighub-upload-receipt.yaml"
        },
        "operations": {
          "changeCadence": "planned-platform-release",
          "ownerClass": "platform-team",
          "resourceClass": "system-configuration",
          "classificationSource": "config-catalog/operational-class-examples.yaml",
          "classificationReason": "This configuration changes cluster-wide platform behavior, so every environment requires approval and rollout starts with one test cluster.",
          "liveSpace": "kubara-local-platform-v0-12-0",
          "target": {
            "ownerClass": "platform-team",
            "scope": "cluster",
            "selection": "Select one test cluster first; expand only after the platform configuration and its dependent service are healthy."
          },
          "gates": {
            "normalSet": "approvalRequired",
            "productionSet": "approvalRequired"
          },
          "rollout": {
            "limit": "One kind cluster and one downstream service passed; a multi-cluster wave has not run.",
            "method": "pilot-cluster-then-platform-wave",
            "sequence": [
              "test cluster",
              "selected fleet wave"
            ],
            "status": "single-cluster-observed"
          }
        }
      },
      "status": {
        "level": "partial",
        "claim": "Kubara v0.12.0 generated the committed platform source and 77 literal Argo CD bootstrap objects. The routes for 3 CRDs, 4 Helm hook resources, 2 Secrets, and the External Secrets prerequisite are recorded beside the base.",
        "limits": [
          "The literal OCI artifact is local until the public push and anonymous pull receipts pass.",
          "The recorded routes have not been executed on a live target.",
          "No live Argo CD reconciliation or downstream platform health is claimed.",
          "This base records the generated Argo CD bootstrap and platform assignments; it does not claim that every downstream service chart has been flattened into this one object set."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "kyverno-kyverno-3-8-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "kyverno/kyverno",
          "sourceVersion": "3.8.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "kyverno/kyverno",
          "version": "3.8.1",
          "record": "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kyverno-kyverno:3.8.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "3bc62d1f7d56d6bbe3d8aa1b8c6d55fb4218931082e1d3a3b41620e998d674a0"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/kyverno/kyverno/3.8.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/kyverno/kyverno/3.8.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 69
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=kyverno/kyverno",
            "version=3.8.1",
            "base=default",
            "valuesProfile=recipes/kyverno/kyverno/3.8.1/effective-values.yaml",
            "namespace=default",
            "releaseName=kyverno",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "delete-cleanup-policy",
              "quirkClass": "hook-delete-policy",
              "lifecyclePhase": "observe",
              "actionKind": "accept-target-policy",
              "executionMode": "target-owned",
              "automatic": false,
              "whoRuns": "Your cluster — at uninstall, automatically",
              "operatingDetails": "Webhook and APIService cleanup belongs to delete or rollback policy.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "3.8.1",
              "evidence": [
                "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml",
                "data/hook-lifecycle/top100-hooks.csv",
                "recipes/kyverno/kyverno/3.8.1/helm-pain-report.yaml",
                "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — your cluster handles it",
                "flux": "none — your cluster handles it",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your cluster — at uninstall, automatically",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "upgrade-action-with-receipt",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "pre-apply",
              "actionKind": "run-job",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a GitOps PreSync/PostSync or cub action (receipted)",
              "operatingDetails": "Resource migration after upgrade must be recorded as an upgrade operation.",
              "command": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "3.8.1",
              "evidence": [
                "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml",
                "data/hook-lifecycle/top100-hooks.csv",
                "recipes/kyverno/kyverno/3.8.1/helm-pain-report.yaml",
                "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "explicit-test-check",
              "quirkClass": "hook-test",
              "lifecyclePhase": "observe",
              "actionKind": "run-test",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Opt-in check — run from CI or on demand (tests are explicit by design)",
              "operatingDetails": "Test hooks become checks, not hidden install behavior.",
              "command": "# run the chart's test/check (helm test equivalent)",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "3.8.1",
              "evidence": [
                "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml",
                "data/hook-lifecycle/top100-hooks.csv",
                "recipes/kyverno/kyverno/3.8.1/helm-pain-report.yaml",
                "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PostSync test Job (Argo has no native helm test)",
                "flux": "HelmRelease .spec.test.enable=true",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PostSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "# run the chart's test/check (helm test equivalent)",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PostSync test Job (Argo has no native helm test)",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "HelmRelease .spec.test.enable=true",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preserve-ordering",
              "quirkClass": "hook-weight-ordering",
              "lifecyclePhase": "pre-apply",
              "actionKind": "preserve-ordering",
              "executionMode": "target-owned",
              "automatic": false,
              "whoRuns": "Your applier — must apply CRDs before dependent objects",
              "operatingDetails": "",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "3.8.1",
              "evidence": [
                "data/hook-lifecycle/receipt-index.csv",
                "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "no extra hook — keep CRDs before dependent objects",
                "flux": "no extra hook — make sure CRDs are applied before workloads",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your applier — must apply CRDs before dependent objects",
                  "status": "not-run",
                  "evidence": []
                },
                "argoCd": {
                  "implementation": "no extra hook — keep CRDs before dependent objects",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "no extra hook — make sure CRDs are applied before workloads",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "target-facts-or-preflight",
              "quirkClass": "target-facts",
              "lifecyclePhase": "preflight",
              "actionKind": "stage-target-facts",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Prerequisite — supply once (Secret / CRD / storage), like values",
              "operatingDetails": "",
              "command": "# create the required target facts (Secret/StorageClass/etc.) before apply",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "3.8.1",
              "evidence": [
                "data/hook-lifecycle/receipt-index.csv",
                "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — supply the inputs before sync",
                "flux": "none — supply the inputs before sync",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "# create the required target facts (Secret/StorageClass/etc.) before apply",
                  "status": "not-run",
                  "evidence": []
                },
                "argoCd": {
                  "implementation": "none — supply the inputs before sync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — supply the inputs before sync",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "kyverno-kyverno-3-8-1-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "kyverno/kyverno",
          "sourceVersion": "3.8.1",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "kyverno/kyverno",
          "version": "3.8.1",
          "record": "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kyverno-kyverno:3.8.1"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=kyverno/kyverno",
            "version=3.8.1",
            "base=no-crds",
            "valuesProfile=recipes/kyverno/kyverno/3.8.1/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=kyverno",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "cleanuppolicies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "cleanuppolicies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clustercleanuppolicies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clustercleanuppolicies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clusterpolicies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clusterpolicies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "globalcontextentries.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "globalcontextentries.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "policyexceptions.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "policyexceptions.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "updaterequests.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "updaterequests.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clusterephemeralreports.reports.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clusterephemeralreports.reports.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "ephemeralreports.reports.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "ephemeralreports.reports.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "clusterpolicyreports.wgpolicyk8s.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clusterpolicyreports.wgpolicyk8s.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "policyreports.wgpolicyk8s.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "policyreports.wgpolicyk8s.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "deletingpolicies.policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "deletingpolicies.policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "generatingpolicies.policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "generatingpolicies.policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "imagevalidatingpolicies.policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "imagevalidatingpolicies.policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "mutatingpolicies.policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "mutatingpolicies.policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "namespaceddeletingpolicies.policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "namespaceddeletingpolicies.policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "namespacedgeneratingpolicies.policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "namespacedgeneratingpolicies.policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "namespacedimagevalidatingpolicies.policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "namespacedimagevalidatingpolicies.policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "namespacedmutatingpolicies.policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "namespacedmutatingpolicies.policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "namespacedvalidatingpolicies.policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "namespacedvalidatingpolicies.policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "policyexceptions.policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "policyexceptions.policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "validatingpolicies.policies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "validatingpolicies.policies.kyverno.io",
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "sourceVariant": "default",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "delete-cleanup-policy",
              "quirkClass": "hook-delete-policy",
              "lifecyclePhase": "observe",
              "actionKind": "accept-target-policy",
              "executionMode": "target-owned",
              "automatic": false,
              "whoRuns": "Your cluster — at uninstall, automatically",
              "operatingDetails": "",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "3.8.1",
              "evidence": [
                "data/hook-lifecycle/receipt-index.csv",
                "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — your cluster handles it",
                "flux": "none — your cluster handles it",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your cluster — at uninstall, automatically",
                  "status": "not-run",
                  "evidence": []
                },
                "argoCd": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preserve-cleanup-policy",
              "quirkClass": "hook-delete-policy",
              "lifecyclePhase": "observe",
              "actionKind": "accept-target-policy",
              "executionMode": "target-owned",
              "automatic": false,
              "whoRuns": "Your cluster — at uninstall, automatically",
              "operatingDetails": "",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "3.8.1",
              "evidence": [
                "data/hook-lifecycle/receipt-index.csv",
                "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — your cluster handles it",
                "flux": "none — your cluster handles it",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your cluster — at uninstall, automatically",
                  "status": "not-run",
                  "evidence": []
                },
                "argoCd": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "upgrade-action-with-receipt",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "pre-apply",
              "actionKind": "run-job",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a GitOps PreSync/PostSync or cub action (receipted)",
              "operatingDetails": "",
              "command": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "3.8.1",
              "evidence": [
                "data/hook-lifecycle/receipt-index.csv",
                "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "not-run",
                  "evidence": []
                },
                "argoCd": {
                  "implementation": "PreSync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "explicit-test-check",
              "quirkClass": "hook-test",
              "lifecyclePhase": "observe",
              "actionKind": "run-test",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Opt-in check — run from CI or on demand (tests are explicit by design)",
              "operatingDetails": "",
              "command": "# run the chart's test/check (helm test equivalent)",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "3.8.1",
              "evidence": [
                "data/hook-lifecycle/receipt-index.csv",
                "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PostSync test Job (Argo has no native helm test)",
                "flux": "HelmRelease .spec.test.enable=true",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PostSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "# run the chart's test/check (helm test equivalent)",
                  "status": "not-run",
                  "evidence": []
                },
                "argoCd": {
                  "implementation": "PostSync test Job (Argo has no native helm test)",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "HelmRelease .spec.test.enable=true",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preserve-ordering",
              "quirkClass": "hook-weight-ordering",
              "lifecyclePhase": "pre-apply",
              "actionKind": "preserve-ordering",
              "executionMode": "target-owned",
              "automatic": false,
              "whoRuns": "Your applier — must apply CRDs before dependent objects",
              "operatingDetails": "",
              "command": "",
              "disposition": "observed",
              "delta": "reduced",
              "reason": "CRD-first ordering is not needed in a base that installs no CRDs",
              "routeSourceVersion": "3.8.1",
              "evidence": [
                "data/hook-lifecycle/receipt-index.csv",
                "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "no extra hook — keep CRDs before dependent objects",
                "flux": "no extra hook — make sure CRDs are applied before workloads",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your applier — must apply CRDs before dependent objects",
                  "status": "not-run",
                  "evidence": []
                },
                "argoCd": {
                  "implementation": "no extra hook — keep CRDs before dependent objects",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "no extra hook — make sure CRDs are applied before workloads",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "target-facts-or-preflight",
              "quirkClass": "target-facts",
              "lifecyclePhase": "preflight",
              "actionKind": "stage-target-facts",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Prerequisite — supply once (Secret / CRD / storage), like values",
              "operatingDetails": "",
              "command": "# create the required target facts (Secret/StorageClass/etc.) before apply",
              "disposition": "observed",
              "delta": "strengthened",
              "reason": "this base needs 22 CRDs supplied before deploy (the default base installs them for you)",
              "routeSourceVersion": "3.8.1",
              "evidence": [
                "data/hook-lifecycle/receipt-index.csv",
                "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — supply the inputs before sync",
                "flux": "none — supply the inputs before sync",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "# create the required target facts (Secret/StorageClass/etc.) before apply",
                  "status": "not-run",
                  "evidence": []
                },
                "argoCd": {
                  "implementation": "none — supply the inputs before sync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — supply the inputs before sync",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "cleanuppolicies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clustercleanuppolicies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clusterpolicies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "globalcontextentries.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "policyexceptions.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "updaterequests.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clusterephemeralreports.reports.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "ephemeralreports.reports.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clusterpolicyreports.wgpolicyk8s.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "policyreports.wgpolicyk8s.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "deletingpolicies.policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "generatingpolicies.policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "imagevalidatingpolicies.policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "mutatingpolicies.policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "namespaceddeletingpolicies.policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "namespacedgeneratingpolicies.policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "namespacedimagevalidatingpolicies.policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "namespacedmutatingpolicies.policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "namespacedvalidatingpolicies.policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "policyexceptions.policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "validatingpolicies.policies.kyverno.io",
                  "purpose": "Kyverno CRD managed outside this no-crds base",
                  "sourceVariant": "default",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "cleanuppolicies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clustercleanuppolicies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clusterpolicies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "globalcontextentries.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "policyexceptions.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "updaterequests.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clusterephemeralreports.reports.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "ephemeralreports.reports.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "clusterpolicyreports.wgpolicyk8s.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "policyreports.wgpolicyk8s.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "deletingpolicies.policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "generatingpolicies.policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "imagevalidatingpolicies.policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "mutatingpolicies.policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "namespaceddeletingpolicies.policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "namespacedgeneratingpolicies.policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "namespacedimagevalidatingpolicies.policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "namespacedmutatingpolicies.policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "namespacedvalidatingpolicies.policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "policyexceptions.policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "validatingpolicies.policies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
                  "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "22 target prerequisites declared by this base.",
              "declarationSource": "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "kyverno-kyverno-policies-3-8-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "kyverno/kyverno-policies",
          "sourceVersion": "3.8.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "kyverno/kyverno-policies",
          "version": "3.8.0",
          "record": "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kyverno-kyverno-policies:3.8.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "41fb18e489d57e051cfe02a5bed5c069a2ee88396bc54557b3e46f4f03e36bc4"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/kyverno/kyverno-policies/3.8.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/kyverno/kyverno-policies/3.8.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 11
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=kyverno/kyverno-policies",
            "version=3.8.0",
            "base=default",
            "valuesProfile=recipes/kyverno/kyverno-policies/3.8.0/effective-values.yaml",
            "namespace=default",
            "releaseName=kyverno-policies",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "clusterpolicies.kyverno.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "clusterpolicies.kyverno.io",
                "purpose": "Kyverno ClusterPolicy CRD required before kyverno-policies ClusterPolicy objects can be applied",
                "sourcePath": "../../kyverno/3.8.1/revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "kyverno/kyverno@3.8.1/default",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/kyverno/kyverno-policies/3.8.0/prerequisites/target-facts/default-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "clusterpolicies.kyverno.io",
                  "purpose": "Kyverno ClusterPolicy CRD required before kyverno-policies ClusterPolicy objects can be applied",
                  "sourcePath": "../../kyverno/3.8.1/revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "kyverno/kyverno@3.8.1/default",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/kyverno/kyverno-policies/3.8.0/prerequisites/target-facts/default-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "clusterpolicies.kyverno.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kyverno ClusterPolicy CRD required before kyverno-policies ClusterPolicy objects can be applied",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/kyverno/kyverno-policies/3.8.0/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/kyverno/kyverno-policies/3.8.0/variants/default/variant.yaml",
                "sourceVariant": "kyverno/kyverno@3.8.1/default",
                "sourcePath": "../../kyverno/3.8.1/revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/kyverno/kyverno-policies/3.8.0/variants/default/variant.yaml",
                  "packages/kyverno/kyverno-policies/3.8.0/prerequisites/target-facts/default-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/kyverno/kyverno-policies/3.8.0/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "watch",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "linkerd-linkerd-crds-1-8-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "linkerd/linkerd-crds",
          "sourceVersion": "1.8.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "linkerd/linkerd-crds",
          "version": "1.8.0",
          "record": "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/linkerd-linkerd-crds:1.8.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "13837b92c4feda268fdeeb08dfd92c1adf95a7656211f963d8ae76de3a2f94b0"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/linkerd/linkerd-crds/1.8.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/linkerd/linkerd-crds/1.8.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 8
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=linkerd/linkerd-crds",
            "version=1.8.0",
            "base=default",
            "valuesProfile=recipes/linkerd/linkerd-crds/1.8.0/effective-values.yaml",
            "namespace=default",
            "releaseName=linkerd-crds",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "longhorn-longhorn-1-11-2-default",
        "labels": {
          "sourceType": "helm",
          "component": "longhorn/longhorn",
          "sourceVersion": "1.11.2",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "longhorn/longhorn",
          "version": "1.11.2",
          "record": "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "9e6c451504370e5485db7acdfa4fbfc25f9df0b5a03d6f4d159a4df7dfa57fd3"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/longhorn/longhorn/1.11.2/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/longhorn/longhorn/1.11.2/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 41
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=longhorn/longhorn",
            "version=1.11.2",
            "base=default",
            "valuesProfile=recipes/longhorn/longhorn/1.11.2/effective-values.yaml",
            "namespace=longhorn-system",
            "releaseName=longhorn",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "longhorn-longhorn-1-11-2-ui-ingress",
        "labels": {
          "sourceType": "helm",
          "component": "longhorn/longhorn",
          "sourceVersion": "1.11.2",
          "base": "ui-ingress"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "longhorn/longhorn",
          "version": "1.11.2",
          "record": "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2"
        },
        "baseVariant": {
          "name": "ui-ingress",
          "revision": "r001",
          "digest": "1069fea32675f30aedba7d7678d756e05855ac2e60eeffaa673f5684e566d917"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/longhorn/longhorn/1.11.2/revisions/ui-ingress/r001/rendered/release-objects.yaml",
          "inventory": "recipes/longhorn/longhorn/1.11.2/revisions/ui-ingress/r001/rendered/object-inventory.yaml",
          "objectCount": 42
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=longhorn/longhorn",
            "version=1.11.2",
            "base=ui-ingress",
            "valuesProfile=recipes/longhorn/longhorn/1.11.2/effective-values-ui-ingress.yaml",
            "namespace=longhorn-system",
            "releaseName=longhorn",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "metrics-server-metrics-server-3-13-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "metrics-server/metrics-server",
          "sourceVersion": "3.13.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "metrics-server/metrics-server",
          "version": "3.13.0",
          "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/metrics-server-metrics-server:3.13.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "952cb755c9ec6a959401b1babbd685b908f00bc16e631637323a7d03a094f277"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 9
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=metrics-server/metrics-server",
            "version=3.13.0",
            "base=default",
            "valuesProfile=recipes/metrics-server/metrics-server/3.13.0/effective-values.yaml",
            "namespace=kube-system",
            "releaseName=metrics-server",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "metrics-server-metrics-server-3-13-0-external-tls-ca",
        "labels": {
          "sourceType": "helm",
          "component": "metrics-server/metrics-server",
          "sourceVersion": "3.13.0",
          "base": "external-tls-ca"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "metrics-server/metrics-server",
          "version": "3.13.0",
          "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/metrics-server-metrics-server:3.13.0"
        },
        "baseVariant": {
          "name": "external-tls-ca",
          "revision": "r001",
          "digest": "25119409096b4e7c94b8101f0f14be839252f40bb455fe6fa1a38c9b808179d1"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/rendered/release-objects.yaml",
          "inventory": "recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/rendered/object-inventory.yaml",
          "objectCount": 9
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=metrics-server/metrics-server",
            "version=3.13.0",
            "base=external-tls-ca",
            "valuesProfile=recipes/metrics-server/metrics-server/3.13.0/effective-values-external-tls-ca.yaml",
            "namespace=kube-system",
            "releaseName=metrics-server",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "metrics-server-tls",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "keys": [
                  "tls.crt",
                  "tls.key"
                ],
                "name": "metrics-server-tls",
                "namespace": "kube-system",
                "purpose": "metrics-server serving certificate"
              }
            },
            {
              "name": "requiredValues-1",
              "type": "requiredValues",
              "required": true,
              "details": {
                "installerInput": "apiServiceCaBundle",
                "installerInputFormat": "base64-pem",
                "path": "apiService.caBundle",
                "purpose": "APIService CA bundle that validates kube-system/metrics-server-tls",
                "regularHelmFormat": "pem",
                "source": "metrics-server-tls-ca",
                "stage": "pre-render"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredSecrets": [
                {
                  "keys": [
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "metrics-server-tls",
                  "namespace": "kube-system",
                  "purpose": "metrics-server serving certificate"
                }
              ],
              "requiredValues": [
                {
                  "installerInput": "apiServiceCaBundle",
                  "installerInputFormat": "base64-pem",
                  "path": "apiService.caBundle",
                  "purpose": "APIService CA bundle that validates kube-system/metrics-server-tls",
                  "regularHelmFormat": "pem",
                  "source": "metrics-server-tls-ca",
                  "stage": "pre-render"
                }
              ]
            },
            "requirements": [
              {
                "category": "secret",
                "name": "kube-system/metrics-server-tls",
                "namespace": "kube-system",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "metrics-server serving certificate",
                "check": "",
                "declarationPath": "recipes/metrics-server/metrics-server/3.13.0/variants/external-tls-ca/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/metrics-server/metrics-server/3.13.0/variants/external-tls-ca/variant.yaml"
                ]
              },
              {
                "category": "value",
                "name": "apiService.caBundle",
                "namespace": "",
                "requiredBefore": "render",
                "freshness": {
                  "policy": "recheck-before-render",
                  "maxAge": "one-render"
                },
                "purpose": "APIService CA bundle that validates kube-system/metrics-server-tls",
                "check": "",
                "declarationPath": "recipes/metrics-server/metrics-server/3.13.0/variants/external-tls-ca/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/metrics-server/metrics-server/3.13.0/variants/external-tls-ca/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "2 target prerequisites declared by this base.",
              "declarationSource": "recipes/metrics-server/metrics-server/3.13.0/variants/external-tls-ca/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "minio-operator-operator-7-1-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "minio-operator/operator",
          "sourceVersion": "7.1.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "minio-operator/operator",
          "version": "7.1.1",
          "record": "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/minio-operator-operator:7.1.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "b61c977706c6a57288817bf5f0349d29df500fa8777ef645a4160e53274ceb68"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/minio-operator/operator/7.1.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/minio-operator/operator/7.1.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 8
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=minio-operator/operator",
            "version=7.1.1",
            "base=default",
            "valuesProfile=recipes/minio-operator/operator/7.1.1/effective-values.yaml",
            "namespace=default",
            "releaseName=operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "minio-operator-tenant-7-1-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "minio-operator/tenant",
          "sourceVersion": "7.1.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "minio-operator/tenant",
          "version": "7.1.1",
          "record": "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/minio-operator-tenant:7.1.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "9357bee0a8525bd7869a7027d5fb94d37af03d0d3fdeb1996af9a92b5715fcca"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/minio-operator/tenant/7.1.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/minio-operator/tenant/7.1.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 2
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=minio-operator/tenant",
            "version=7.1.1",
            "base=default",
            "valuesProfile=recipes/minio-operator/tenant/7.1.1/effective-values.yaml",
            "namespace=default",
            "releaseName=tenant",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "tenants.minio.min.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "tenants.minio.min.io",
                "purpose": "MinIO Tenant CRD required before tenant custom resources can be applied",
                "sourcePath": "../../operator/7.1.1/revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "minio-operator/operator@7.1.1/default",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/minio-operator/tenant/7.1.1/prerequisites/target-facts/default-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "tenants.minio.min.io",
                  "purpose": "MinIO Tenant CRD required before tenant custom resources can be applied",
                  "sourcePath": "../../operator/7.1.1/revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "minio-operator/operator@7.1.1/default",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/minio-operator/tenant/7.1.1/prerequisites/target-facts/default-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "tenants.minio.min.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "MinIO Tenant CRD required before tenant custom resources can be applied",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/minio-operator/tenant/7.1.1/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/minio-operator/tenant/7.1.1/variants/default/variant.yaml",
                "sourceVariant": "minio-operator/operator@7.1.1/default",
                "sourcePath": "../../operator/7.1.1/revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/minio-operator/tenant/7.1.1/variants/default/variant.yaml",
                  "packages/minio-operator/tenant/7.1.1/prerequisites/target-facts/default-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/minio-operator/tenant/7.1.1/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "nats-nack-0-34-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "nats/nack",
          "sourceVersion": "0.34.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "nats/nack",
          "version": "0.34.0",
          "record": "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-nack:0.34.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "1d1fd00a7f6111d03babd0a988a718e1acc1842684313b79f4ac87e1e9cf3bcc"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/nats/nack/0.34.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/nats/nack/0.34.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 10
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=nats/nack",
            "version=0.34.0",
            "base=default",
            "valuesProfile=recipes/nats/nack/0.34.0/effective-values.yaml",
            "namespace=default",
            "releaseName=nack",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "nats-nack-0-34-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "nats/nack",
          "sourceVersion": "0.34.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "nats/nack",
          "version": "0.34.0",
          "record": "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-nack:0.34.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/nats/nack/0.34.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/nats/nack/0.34.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=nats/nack",
            "version=0.34.0",
            "base=no-crds",
            "valuesProfile=recipes/nats/nack/0.34.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=nack",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "nats-nats-2-14-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "nats/nats",
          "sourceVersion": "2.14.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "nats/nats",
          "version": "2.14.0",
          "record": "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-nats:2.14.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "84db89cdb408a46e259210c6a98fd4a8c32df4f1c3874030e089e4f2b676ee0f"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/nats/nats/2.14.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/nats/nats/2.14.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=nats/nats",
            "version=2.14.0",
            "base=default",
            "valuesProfile=recipes/nats/nats/2.14.0/effective-values.yaml",
            "namespace=default",
            "releaseName=nats",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "nats-nats-2-14-0-ha",
        "labels": {
          "sourceType": "helm",
          "component": "nats/nats",
          "sourceVersion": "2.14.0",
          "base": "ha"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "nats/nats",
          "version": "2.14.0",
          "record": "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-nats:2.14.0"
        },
        "baseVariant": {
          "name": "ha",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/nats/nats/2.14.0/revisions/ha/r001/rendered/release-objects.yaml",
          "inventory": "recipes/nats/nats/2.14.0/revisions/ha/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=nats/nats",
            "version=2.14.0",
            "base=ha",
            "valuesProfile=recipes/nats/nats/2.14.0/effective-values-ha.yaml",
            "namespace=default",
            "releaseName=nats",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "nats-surveyor-0-20-9-default",
        "labels": {
          "sourceType": "helm",
          "component": "nats/surveyor",
          "sourceVersion": "0.20.9",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "nats/surveyor",
          "version": "0.20.9",
          "record": "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-surveyor:0.20.9"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "a97870c81f4fd0c14a158763365ddb131f848c1324fd70e3da181a5faadbb598"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/nats/surveyor/0.20.9/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/nats/surveyor/0.20.9/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 3
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=nats/surveyor",
            "version=0.20.9",
            "base=default",
            "valuesProfile=recipes/nats/surveyor/0.20.9/effective-values.yaml",
            "namespace=default",
            "releaseName=surveyor",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/nats/surveyor/0.20.9/runtime-review.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/nats-surveyor-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/nats/surveyor/0.20.9 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/nats-surveyor-default/receipt.yaml",
                  "recipes/nats/surveyor/0.20.9/runtime-review.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/nats/surveyor/0.20.9/runtime-review.yaml",
                "sourceReceipt": "runs/live-kind-parity/nats-surveyor-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart nats/surveyor --version 0.20.9 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/nats-surveyor-default/receipt.yaml",
                  "recipes/nats/surveyor/0.20.9/runtime-review.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "2 observed prerequisite action records exist, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "nats-surveyor-0-20-9-default-reviewed",
        "labels": {
          "sourceType": "helm",
          "component": "nats/surveyor",
          "sourceVersion": "0.20.9",
          "base": "default-reviewed"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "nats/surveyor",
          "version": "0.20.9",
          "record": "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-surveyor:0.20.9"
        },
        "baseVariant": {
          "name": "default-reviewed",
          "revision": "r001",
          "digest": "c6bacf768440e4207e99fa4f30c12fb48e1ecbcb265cac9d4577290f991852dd"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/nats/surveyor/0.20.9/revisions/default-reviewed/r001/rendered/release-objects.yaml",
          "inventory": "recipes/nats/surveyor/0.20.9/revisions/default-reviewed/r001/rendered/object-inventory.yaml",
          "objectCount": 3
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=nats/surveyor",
            "version=0.20.9",
            "base=default-reviewed",
            "valuesProfile=recipes/nats/surveyor/0.20.9/effective-values.yaml",
            "namespace=default",
            "releaseName=surveyor",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/nats/surveyor/0.20.9/runtime-review.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/nats-surveyor-default-reviewed/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/nats/surveyor/0.20.9 --base default-reviewed",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/nats-surveyor-default-reviewed/receipt.yaml",
                  "recipes/nats/surveyor/0.20.9/runtime-review.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "external-api",
                "prerequisiteName": "unknown",
                "actionKind": "provide-external-service",
                "ownerClass": "operator-review",
                "requiredInputs": "the upstream service/endpoint the workload connects to",
                "evidenceRequired": "the upstream service/endpoint reachable from the workload; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/nats/surveyor/0.20.9/runtime-review.yaml",
                "sourceReceipt": "runs/live-kind-parity/nats-surveyor-default-reviewed/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart nats/surveyor --version 0.20.9 --base default-reviewed",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/nats-surveyor-default-reviewed/receipt.yaml",
                  "recipes/nats/surveyor/0.20.9/runtime-review.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "2 observed prerequisite action records exist, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default",
        "labels": {
          "sourceType": "helm",
          "component": "nfs-subdir-external-provisioner/nfs-subdir-external-provisioner",
          "sourceVersion": "4.0.18",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "nfs-subdir-external-provisioner/nfs-subdir-external-provisioner",
          "version": "4.0.18",
          "record": "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner:4.0.18"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "e518dc96bc16b557b6786b5a2d5b453d2f8fd1c39f24993274518eb4651b9c9c"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=nfs-subdir-external-provisioner/nfs-subdir-external-provisioner",
            "version=4.0.18",
            "base=default",
            "valuesProfile=recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/effective-values.yaml",
            "namespace=default",
            "releaseName=nfs-subdir-external-provisioner",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "K",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "value nfs.server",
                "actionKind": "unknown-preflight",
                "ownerClass": "user-stage",
                "requiredInputs": "value nfs.server",
                "evidenceRequired": "the missing input(s) supplied and the re-render matching regular Helm; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-kind-parity/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart nfs-subdir-external-provisioner/nfs-subdir-external-provisioner --version 4.0.18 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-default/receipt.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "1 observed prerequisite action record exists, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "no",
          "liveDualParity": "no",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "open-telemetry-opentelemetry-operator-0-114-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "open-telemetry/opentelemetry-operator",
          "sourceVersion": "0.114.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "open-telemetry/opentelemetry-operator",
          "version": "0.114.0",
          "record": "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/open-telemetry-opentelemetry-operator:0.114.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "797b4cd079028aee9f5f62340506590fe0c656f24188170da684b5b1d936baca"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 17
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=open-telemetry/opentelemetry-operator",
            "version=0.114.0",
            "base=default",
            "valuesProfile=recipes/open-telemetry/opentelemetry-operator/0.114.0/effective-values.yaml",
            "namespace=default",
            "releaseName=opentelemetry-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "certificates.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "certificates.cert-manager.io",
                "purpose": "cert-manager Certificate CRD required by the chart-rendered serving certificate object",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "suggestedSource": "Install cert-manager or apply the cert-manager Certificate CRD before applying this base",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "issuers.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "issuers.cert-manager.io",
                "purpose": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "suggestedSource": "Install cert-manager or apply the cert-manager Issuer CRD before applying this base",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "opentelemetry-operator-controller-manager-service-cert",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "tls.crt",
                  "tls.key"
                ],
                "name": "opentelemetry-operator-controller-manager-service-cert",
                "namespace": "default",
                "purpose": "Webhook serving certificate Secret mounted by the operator Deployment",
                "suggestedSource": "Run cert-manager controller to satisfy the chart-rendered Certificate, or stage a valid TLS Secret before waiting for the operator"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "certificates.cert-manager.io",
                  "purpose": "cert-manager Certificate CRD required by the chart-rendered serving certificate object",
                  "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                  "suggestedSource": "Install cert-manager or apply the cert-manager Certificate CRD before applying this base",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "issuers.cert-manager.io",
                  "purpose": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object",
                  "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                  "suggestedSource": "Install cert-manager or apply the cert-manager Issuer CRD before applying this base",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "opentelemetry-operator-controller-manager-service-cert",
                  "namespace": "default",
                  "purpose": "Webhook serving certificate Secret mounted by the operator Deployment",
                  "suggestedSource": "Run cert-manager controller to satisfy the chart-rendered Certificate, or stage a valid TLS Secret before waiting for the operator"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "certificates.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager Certificate CRD required by the chart-rendered serving certificate object",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/default/variant.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/default/variant.yaml",
                  "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "issuers.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/default/variant.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/default/variant.yaml",
                  "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/opentelemetry-operator-controller-manager-service-cert",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Webhook serving certificate Secret mounted by the operator Deployment",
                "check": "Run cert-manager controller to satisfy the chart-rendered Certificate, or stage a valid TLS Secret before waiting for the operator",
                "declarationPath": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/default/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "3 target prerequisites declared by this base.",
              "declarationSource": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "open-telemetry-opentelemetry-operator-0-114-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "open-telemetry/opentelemetry-operator",
          "sourceVersion": "0.114.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "open-telemetry/opentelemetry-operator",
          "version": "0.114.0",
          "record": "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/open-telemetry-opentelemetry-operator:0.114.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=open-telemetry/opentelemetry-operator",
            "version=0.114.0",
            "base=no-crds",
            "valuesProfile=recipes/open-telemetry/opentelemetry-operator/0.114.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=opentelemetry-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "certificates.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "certificates.cert-manager.io",
                "purpose": "cert-manager Certificate CRD required by the chart-rendered serving certificate object",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "suggestedSource": "Install cert-manager or apply the cert-manager Certificate CRD before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "issuers.cert-manager.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "issuers.cert-manager.io",
                "purpose": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "suggestedSource": "Install cert-manager or apply the cert-manager Issuer CRD before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "instrumentations.opentelemetry.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "instrumentations.opentelemetry.io",
                "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "opampbridges.opentelemetry.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "opampbridges.opentelemetry.io",
                "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "opentelemetrycollectors.opentelemetry.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "opentelemetrycollectors.opentelemetry.io",
                "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "targetallocators.opentelemetry.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "targetallocators.opentelemetry.io",
                "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "default",
                "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "opentelemetry-operator-controller-manager-service-cert",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "tls.crt",
                  "tls.key"
                ],
                "name": "opentelemetry-operator-controller-manager-service-cert",
                "namespace": "default",
                "purpose": "Webhook serving certificate Secret mounted by the operator Deployment",
                "suggestedSource": "Run cert-manager controller to satisfy the chart-rendered Certificate, or stage a valid TLS Secret before waiting for the operator"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "certificates.cert-manager.io",
                  "purpose": "cert-manager Certificate CRD required by the chart-rendered serving certificate object",
                  "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                  "suggestedSource": "Install cert-manager or apply the cert-manager Certificate CRD before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "issuers.cert-manager.io",
                  "purpose": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object",
                  "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                  "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                  "suggestedSource": "Install cert-manager or apply the cert-manager Issuer CRD before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "instrumentations.opentelemetry.io",
                  "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "opampbridges.opentelemetry.io",
                  "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "opentelemetrycollectors.opentelemetry.io",
                  "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "targetallocators.opentelemetry.io",
                  "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                  "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "default",
                  "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "tls.crt",
                    "tls.key"
                  ],
                  "name": "opentelemetry-operator-controller-manager-service-cert",
                  "namespace": "default",
                  "purpose": "Webhook serving certificate Secret mounted by the operator Deployment",
                  "suggestedSource": "Run cert-manager controller to satisfy the chart-rendered Certificate, or stage a valid TLS Secret before waiting for the operator"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "certificates.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager Certificate CRD required by the chart-rendered serving certificate object",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                  "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "issuers.cert-manager.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled",
                "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                  "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "instrumentations.opentelemetry.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                  "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "opampbridges.opentelemetry.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                  "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "opentelemetrycollectors.opentelemetry.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                  "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "targetallocators.opentelemetry.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                  "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "default/opentelemetry-operator-controller-manager-service-cert",
                "namespace": "default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Webhook serving certificate Secret mounted by the operator Deployment",
                "check": "Run cert-manager controller to satisfy the chart-rendered Certificate, or stage a valid TLS Secret before waiting for the operator",
                "declarationPath": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "7 target prerequisites declared by this base.",
              "declarationSource": "recipes/open-telemetry/opentelemetry-operator/0.114.0/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "opencost-opencost-2-5-21-default",
        "labels": {
          "sourceType": "helm",
          "component": "opencost/opencost",
          "sourceVersion": "2.5.21",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "opencost/opencost",
          "version": "2.5.21",
          "record": "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/opencost-opencost:2.5.21"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "97573d32f4ca5bdd024f31bdf651f35ab1e39e6580b2428f1f172c19a8fed036"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/opencost/opencost/2.5.21/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/opencost/opencost/2.5.21/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=opencost/opencost",
            "version=2.5.21",
            "base=default",
            "valuesProfile=recipes/opencost/opencost/2.5.21/effective-values.yaml",
            "namespace=default",
            "releaseName=opencost",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-helm-confighub-compare/opencost-opencost-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/opencost/opencost/2.5.21 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/opencost-opencost-default/receipt.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "unknown",
                "prerequisiteName": "unknown",
                "actionKind": "operator-review",
                "ownerClass": "operator-review",
                "requiredInputs": "operator review of the runtime residue",
                "evidenceRequired": "an operator decision recorded for this base/target; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-kind-parity/opencost-opencost-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart opencost/opencost --version 2.5.21 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/opencost-opencost-default/receipt.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "2 observed prerequisite action records exist, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "percona-pg-operator-3-0-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "percona/pg-operator",
          "sourceVersion": "3.0.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "percona/pg-operator",
          "version": "3.0.0",
          "record": "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-pg-operator:3.0.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "f2a192ad34eefd277962ba266d3a14d55551cab1041158e0379b7b71a9897f74"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/percona/pg-operator/3.0.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/percona/pg-operator/3.0.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 12
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=percona/pg-operator",
            "version=3.0.0",
            "base=default",
            "valuesProfile=recipes/percona/pg-operator/3.0.0/effective-values.yaml",
            "namespace=default",
            "releaseName=pg-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "percona-pg-operator-3-0-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "percona/pg-operator",
          "sourceVersion": "3.0.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "percona/pg-operator",
          "version": "3.0.0",
          "record": "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-pg-operator:3.0.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/percona/pg-operator/3.0.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/percona/pg-operator/3.0.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=percona/pg-operator",
            "version=3.0.0",
            "base=no-crds",
            "valuesProfile=recipes/percona/pg-operator/3.0.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=pg-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "crunchybridgeclusters.upstream.pgv2.percona.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "crunchybridgeclusters.upstream.pgv2.percona.com",
                "purpose": "CrunchyBridgeCluster CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "perconapgbackups.pgv2.percona.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "perconapgbackups.pgv2.percona.com",
                "purpose": "PerconaPGBackup CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "perconapgclusters.pgv2.percona.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "perconapgclusters.pgv2.percona.com",
                "purpose": "PerconaPGCluster CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "perconapgrestores.pgv2.percona.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "perconapgrestores.pgv2.percona.com",
                "purpose": "PerconaPGRestore CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "perconapgupgrades.pgv2.percona.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "perconapgupgrades.pgv2.percona.com",
                "purpose": "PerconaPGUpgrade CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "pgadmins.upstream.pgv2.percona.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "pgadmins.upstream.pgv2.percona.com",
                "purpose": "PGAdmin CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "pgupgrades.upstream.pgv2.percona.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "pgupgrades.upstream.pgv2.percona.com",
                "purpose": "PGUpgrade CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "postgresclusters.upstream.pgv2.percona.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "postgresclusters.upstream.pgv2.percona.com",
                "purpose": "PostgresCluster CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "crunchybridgeclusters.upstream.pgv2.percona.com",
                  "purpose": "CrunchyBridgeCluster CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "perconapgbackups.pgv2.percona.com",
                  "purpose": "PerconaPGBackup CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "perconapgclusters.pgv2.percona.com",
                  "purpose": "PerconaPGCluster CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "perconapgrestores.pgv2.percona.com",
                  "purpose": "PerconaPGRestore CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "perconapgupgrades.pgv2.percona.com",
                  "purpose": "PerconaPGUpgrade CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "pgadmins.upstream.pgv2.percona.com",
                  "purpose": "PGAdmin CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "pgupgrades.upstream.pgv2.percona.com",
                  "purpose": "PGUpgrade CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "postgresclusters.upstream.pgv2.percona.com",
                  "purpose": "PostgresCluster CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <pg-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "crunchybridgeclusters.upstream.pgv2.percona.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "CrunchyBridgeCluster CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                  "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "perconapgbackups.pgv2.percona.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PerconaPGBackup CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                  "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "perconapgclusters.pgv2.percona.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PerconaPGCluster CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                  "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "perconapgrestores.pgv2.percona.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PerconaPGRestore CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                  "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "perconapgupgrades.pgv2.percona.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PerconaPGUpgrade CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                  "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "pgadmins.upstream.pgv2.percona.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PGAdmin CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                  "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "pgupgrades.upstream.pgv2.percona.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PGUpgrade CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                  "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "postgresclusters.upstream.pgv2.percona.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PostgresCluster CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
                  "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "8 target prerequisites declared by this base.",
              "declarationSource": "recipes/percona/pg-operator/3.0.0/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "percona-psmdb-operator-1-22-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "percona/psmdb-operator",
          "sourceVersion": "1.22.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "percona/psmdb-operator",
          "version": "1.22.0",
          "record": "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-psmdb-operator:1.22.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "68c3a3db7bda2e1fd691bddd1e4b9d1337c512a3dbad37eb3cd6356bfc471a30"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/percona/psmdb-operator/1.22.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/percona/psmdb-operator/1.22.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=percona/psmdb-operator",
            "version=1.22.0",
            "base=default",
            "valuesProfile=recipes/percona/psmdb-operator/1.22.0/effective-values.yaml",
            "namespace=default",
            "releaseName=psmdb-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "percona-psmdb-operator-1-22-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "percona/psmdb-operator",
          "sourceVersion": "1.22.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "percona/psmdb-operator",
          "version": "1.22.0",
          "record": "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-psmdb-operator:1.22.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/percona/psmdb-operator/1.22.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/percona/psmdb-operator/1.22.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=percona/psmdb-operator",
            "version=1.22.0",
            "base=no-crds",
            "valuesProfile=recipes/percona/psmdb-operator/1.22.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=psmdb-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "percona-pxc-operator-1-19-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "percona/pxc-operator",
          "sourceVersion": "1.19.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "percona/pxc-operator",
          "version": "1.19.1",
          "record": "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-pxc-operator:1.19.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "198ea46bf181803a130b8face0c72f08cf2faaf29d92fea31232ff028f0148e0"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/percona/pxc-operator/1.19.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/percona/pxc-operator/1.19.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 7
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=percona/pxc-operator",
            "version=1.19.1",
            "base=default",
            "valuesProfile=recipes/percona/pxc-operator/1.19.1/effective-values.yaml",
            "namespace=default",
            "releaseName=pxc-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "percona-pxc-operator-1-19-1-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "percona/pxc-operator",
          "sourceVersion": "1.19.1",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "percona/pxc-operator",
          "version": "1.19.1",
          "record": "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-pxc-operator:1.19.1"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/percona/pxc-operator/1.19.1/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/percona/pxc-operator/1.19.1/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=percona/pxc-operator",
            "version=1.19.1",
            "base=no-crds",
            "valuesProfile=recipes/percona/pxc-operator/1.19.1/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=pxc-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "perconaxtradbclusterbackups.pxc.percona.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "perconaxtradbclusterbackups.pxc.percona.com",
                "purpose": "PerconaXtraDBClusterBackup CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <pxc-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "perconaxtradbclusterrestores.pxc.percona.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "perconaxtradbclusterrestores.pxc.percona.com",
                "purpose": "PerconaXtraDBClusterRestore CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <pxc-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "perconaxtradbclusters.pxc.percona.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "perconaxtradbclusters.pxc.percona.com",
                "purpose": "PerconaXtraDBCluster CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <pxc-operator-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "perconaxtradbclusterbackups.pxc.percona.com",
                  "purpose": "PerconaXtraDBClusterBackup CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <pxc-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "perconaxtradbclusterrestores.pxc.percona.com",
                  "purpose": "PerconaXtraDBClusterRestore CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <pxc-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "perconaxtradbclusters.pxc.percona.com",
                  "purpose": "PerconaXtraDBCluster CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <pxc-operator-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "perconaxtradbclusterbackups.pxc.percona.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PerconaXtraDBClusterBackup CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/percona/pxc-operator/1.19.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/percona/pxc-operator/1.19.1/variants/no-crds/variant.yaml",
                  "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "perconaxtradbclusterrestores.pxc.percona.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PerconaXtraDBClusterRestore CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/percona/pxc-operator/1.19.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/percona/pxc-operator/1.19.1/variants/no-crds/variant.yaml",
                  "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "perconaxtradbclusters.pxc.percona.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "PerconaXtraDBCluster CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/percona/pxc-operator/1.19.1/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/percona/pxc-operator/1.19.1/variants/no-crds/variant.yaml",
                  "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "3 target prerequisites declared by this base.",
              "declarationSource": "recipes/percona/pxc-operator/1.19.1/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "projectcalico-tigera-operator-v3-32-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "projectcalico/tigera-operator",
          "sourceVersion": "v3.32.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "projectcalico/tigera-operator",
          "version": "v3.32.0",
          "record": "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/projectcalico-tigera-operator:v3.32.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "8abc7074cbf61a78fbd594cfc8386e8dd43f4825ac9617e2ee087433f33d3ab3"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/projectcalico/tigera-operator/v3.32.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/projectcalico/tigera-operator/v3.32.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 10
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=projectcalico/tigera-operator",
            "version=v3.32.0",
            "base=default",
            "valuesProfile=recipes/projectcalico/tigera-operator/v3.32.0/effective-values.yaml",
            "namespace=default",
            "releaseName=tigera-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "apiservers.operator.tigera.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "evidence": [
                  "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                ],
                "name": "apiservers.operator.tigera.io",
                "provisioningMode": "operator-bootstrap",
                "purpose": "Required before Kubernetes can accept the rendered APIServer object.",
                "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml"
              }
            },
            {
              "name": "goldmanes.operator.tigera.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "evidence": [
                  "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                ],
                "name": "goldmanes.operator.tigera.io",
                "provisioningMode": "operator-bootstrap",
                "purpose": "Required before Kubernetes can accept the rendered Goldmane object.",
                "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml"
              }
            },
            {
              "name": "installations.operator.tigera.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "evidence": [
                  "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                ],
                "name": "installations.operator.tigera.io",
                "provisioningMode": "operator-bootstrap",
                "purpose": "Required before Kubernetes can accept the rendered Installation object.",
                "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml"
              }
            },
            {
              "name": "whiskers.operator.tigera.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "evidence": [
                  "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                ],
                "name": "whiskers.operator.tigera.io",
                "provisioningMode": "operator-bootstrap",
                "purpose": "Required before Kubernetes can accept the rendered Whisker object.",
                "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "explicit-delete-cleanup-action",
              "quirkClass": "hook-delete-policy",
              "lifecyclePhase": "observe",
              "actionKind": "run-job",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a GitOps PreSync/PostSync or cub action (receipted)",
              "operatingDetails": "Deleting this chart may require cleanup that depends on the cluster's current state. Run that cleanup as a separate, recorded step instead of assuming that deleting the rendered files is enough.",
              "command": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "v3.32.0",
              "evidence": [
                "data/hook-lifecycle/receipts/projectcalico-tigera-operator/default/latest.yaml",
                "data/hook-lifecycle/top100-hooks.csv",
                "recipes/projectcalico/tigera-operator/v3.32.0/helm-pain-report.yaml",
                "runs/hook-lifecycle/projectcalico-tigera-operator/default/latest/receipt.yaml",
                "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml",
                "runs/public-preset-script/projectcalico-tigera-operator-default/latest/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PostSync",
                "flux": "post-apply Job / follow-on Kustomization",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PostSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/hook-lifecycle/projectcalico-tigera-operator/default/latest/receipt.yaml",
                    "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml",
                    "runs/public-preset-script/projectcalico-tigera-operator-default/latest/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PostSync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "post-apply Job / follow-on Kustomization",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preflight-or-presync",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "preflight",
              "actionKind": "run-preflight",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a preflight step before apply (receipted)",
              "operatingDetails": "Before installing the rendered resources, the Tigera operator must create four operator.tigera.io CRDs so Kubernetes can accept the APIServer, Goldmane, Installation, and Whisker objects.",
              "command": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "v3.32.0",
              "evidence": [
                "data/hook-lifecycle/receipts/projectcalico-tigera-operator/default/latest.yaml",
                "data/hook-lifecycle/top100-hooks.csv",
                "recipes/projectcalico/tigera-operator/v3.32.0/helm-pain-report.yaml",
                "runs/hook-lifecycle/projectcalico-tigera-operator/default/latest/receipt.yaml",
                "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml",
                "runs/public-preset-script/projectcalico-tigera-operator-default/latest/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -1",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-1\""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/hook-lifecycle/projectcalico-tigera-operator/default/latest/receipt.yaml",
                    "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml",
                    "runs/public-preset-script/projectcalico-tigera-operator-default/latest/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync · sync-wave -1",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "evidence": [
                    "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                  ],
                  "name": "apiservers.operator.tigera.io",
                  "provisioningMode": "operator-bootstrap",
                  "purpose": "Required before Kubernetes can accept the rendered APIServer object.",
                  "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                  "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml"
                },
                {
                  "evidence": [
                    "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                  ],
                  "name": "goldmanes.operator.tigera.io",
                  "provisioningMode": "operator-bootstrap",
                  "purpose": "Required before Kubernetes can accept the rendered Goldmane object.",
                  "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                  "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml"
                },
                {
                  "evidence": [
                    "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                  ],
                  "name": "installations.operator.tigera.io",
                  "provisioningMode": "operator-bootstrap",
                  "purpose": "Required before Kubernetes can accept the rendered Installation object.",
                  "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                  "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml"
                },
                {
                  "evidence": [
                    "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                  ],
                  "name": "whiskers.operator.tigera.io",
                  "provisioningMode": "operator-bootstrap",
                  "purpose": "Required before Kubernetes can accept the rendered Whisker object.",
                  "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                  "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "apiservers.operator.tigera.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Required before Kubernetes can accept the rendered APIServer object.",
                "check": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "declarationPath": "recipes/projectcalico/tigera-operator/v3.32.0/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/projectcalico/tigera-operator/v3.32.0/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "goldmanes.operator.tigera.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Required before Kubernetes can accept the rendered Goldmane object.",
                "check": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "declarationPath": "recipes/projectcalico/tigera-operator/v3.32.0/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/projectcalico/tigera-operator/v3.32.0/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "installations.operator.tigera.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Required before Kubernetes can accept the rendered Installation object.",
                "check": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "declarationPath": "recipes/projectcalico/tigera-operator/v3.32.0/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/projectcalico/tigera-operator/v3.32.0/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "whiskers.operator.tigera.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Required before Kubernetes can accept the rendered Whisker object.",
                "check": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "declarationPath": "recipes/projectcalico/tigera-operator/v3.32.0/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml",
                "deliveryLanes": [],
                "evidence": [
                  "recipes/projectcalico/tigera-operator/v3.32.0/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "4 target prerequisites declared by this base.",
              "declarationSource": "recipes/projectcalico/tigera-operator/v3.32.0/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-alertmanager-1-37-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/alertmanager",
          "sourceVersion": "1.37.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/alertmanager",
          "version": "1.37.0",
          "record": "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-alertmanager:1.37.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "a863cfd5eaeab88508e3c96efd79e0eeb53e52a03e7f956ecd54d10b6bdaa787"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/alertmanager/1.37.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/alertmanager/1.37.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/alertmanager",
            "version=1.37.0",
            "base=default",
            "valuesProfile=recipes/prometheus-community/alertmanager/1.37.0/effective-values.yaml",
            "namespace=default",
            "releaseName=alertmanager",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-alertmanager-1-37-0-ha",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/alertmanager",
          "sourceVersion": "1.37.0",
          "base": "ha"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/alertmanager",
          "version": "1.37.0",
          "record": "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-alertmanager:1.37.0"
        },
        "baseVariant": {
          "name": "ha",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/alertmanager/1.37.0/revisions/ha/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/alertmanager/1.37.0/revisions/ha/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/alertmanager",
            "version=1.37.0",
            "base=ha",
            "valuesProfile=recipes/prometheus-community/alertmanager/1.37.0/effective-values-ha.yaml",
            "namespace=default",
            "releaseName=alertmanager",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-kube-prometheus-stack-85-3-3-default",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/kube-prometheus-stack",
          "sourceVersion": "85.3.3",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/kube-prometheus-stack",
          "version": "85.3.3",
          "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:85.3.3"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "ecd433cd701d7b9138f9d90e56124b6945685e0abc801348d63ce82efa79eee4"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 124
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/kube-prometheus-stack",
            "version=85.3.3",
            "base=default",
            "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/85.3.3/effective-values.yaml",
            "namespace=monitoring",
            "releaseName=kube-prometheus-stack",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "alertmanagerconfigs.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "alertmanagerconfigs.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "alertmanagers.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "alertmanagers.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "podmonitors.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "podmonitors.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "probes.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "probes.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheusagents.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheusagents.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheuses.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheuses.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheusrules.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheusrules.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "scrapeconfigs.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "scrapeconfigs.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "servicemonitors.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "servicemonitors.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "thanosrulers.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "thanosrulers.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "kube-prometheus-stack-admission",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "ca",
                  "cert",
                  "key"
                ],
                "name": "kube-prometheus-stack-admission",
                "namespace": "monitoring",
                "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "preflight-or-presync-crd-apply",
              "quirkClass": "crd-install",
              "lifecyclePhase": "pre-apply",
              "actionKind": "install-crd",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Handled — the generated package script applies the CRDs first",
              "operatingDetails": "The package applies the locked CRDs before the chart objects that use them.",
              "command": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
              "disposition": "observed",
              "delta": "resolved",
              "reason": "the package carries and applies the 10 CRDs before the workload (observed live)",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -2 · ServerSideApply",
                "flux": "HelmRelease .spec.install.crds=Create (or apply CRDs first)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-2\"\n    argocd.argoproj.io/sync-options: ServerSideApply=true"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync · sync-wave -2 · ServerSideApply",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "HelmRelease .spec.install.crds=Create (or apply CRDs first)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preserve-cleanup-policy",
              "quirkClass": "hook-delete-policy",
              "lifecyclePhase": "observe",
              "actionKind": "accept-target-policy",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The run removes both completed Jobs and their temporary RBAC objects.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — your cluster handles it",
                "flux": "none — your cluster handles it",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — an explicit, receipted step",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "postsync-check-or-observation",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "post-apply",
              "actionKind": "run-check",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a post-apply check (receipted)",
              "operatingDetails": "The package runs the chart's webhook patch Job after the webhook objects exist.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PostSync",
                "flux": "post-apply Job / follow-on Kustomization",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PostSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — a post-apply check (receipted)",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PostSync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "post-apply Job / follow-on Kustomization",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preflight-or-presync",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "preflight",
              "actionKind": "run-preflight",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a preflight step before apply (receipted)",
              "operatingDetails": "The package runs the chart's certificate creation Job before applying the admission webhooks.",
              "command": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -1",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-1\""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync · sync-wave -1",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "upgrade-action-with-receipt",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "pre-apply",
              "actionKind": "run-job",
              "executionMode": "not-yet-executable",
              "automatic": false,
              "whoRuns": "Not tested for this path",
              "operatingDetails": "The fresh-install receipt does not test the 85.3.3 to 86.1.0 upgrade.",
              "command": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "not-run",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [],
              "nextAction": "Run the packaged route during an 85.3.3 to 86.1.0 upgrade and record the result.",
              "evidenceRequired": "run this route for the named path and capture a live receipt",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "not-run",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preserve-ordering",
              "quirkClass": "hook-weight-ordering",
              "lifecyclePhase": "pre-apply",
              "actionKind": "preserve-ordering",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "no extra hook — keep CRDs before dependent objects",
                "flux": "no extra hook — make sure CRDs are applied before workloads",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — an explicit, receipted step",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "no extra hook — keep CRDs before dependent objects",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "no extra hook — make sure CRDs are applied before workloads",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "target-facts-or-preflight",
              "quirkClass": "target-facts",
              "lifecyclePhase": "preflight",
              "actionKind": "stage-target-facts",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Handled — the recorded package script creates or checks this prerequisite",
              "operatingDetails": "The certificate Job creates the required admission Secret with ca, cert, and key.",
              "command": "# create the required target facts (Secret/StorageClass/etc.) before apply",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — supply the inputs before sync",
                "flux": "none — supply the inputs before sync",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "# create the required target facts (Secret/StorageClass/etc.) before apply",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "none — supply the inputs before sync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — supply the inputs before sync",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "webhook-readiness-observation",
              "quirkClass": "webhook-readiness",
              "lifecyclePhase": "observe",
              "actionKind": "observe-webhook",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.",
              "command": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "wait for the certificate handoff, then observe webhook and workload health after sync",
                "flux": "wait for the certificate handoff, then run post-apply webhook and workload health checks",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "wait for the certificate handoff, then observe webhook and workload health after sync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "wait for the certificate handoff, then run post-apply webhook and workload health checks",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "alertmanagerconfigs.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "alertmanagers.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "podmonitors.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "probes.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheusagents.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheuses.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheusrules.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "scrapeconfigs.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "servicemonitors.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "thanosrulers.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "ca",
                    "cert",
                    "key"
                  ],
                  "name": "kube-prometheus-stack-admission",
                  "namespace": "monitoring",
                  "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "alertmanagerconfigs.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "alertmanagers.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "podmonitors.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "probes.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheusagents.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheuses.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheusrules.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "scrapeconfigs.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "servicemonitors.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "thanosrulers.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "monitoring/kube-prometheus-stack-admission",
                "namespace": "monitoring",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "11 target prerequisites declared by this base.",
              "declarationSource": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven",
          "lifecycleDirectFreshInstall": "yes",
          "lifecycleDirectFreshInstallReceipt": "runs/kps-lifecycle-route-proof/receipt.yaml",
          "lifecycleArgoCd": "not-run",
          "lifecycleFlux": "not-run",
          "lifecycleUpgrade": "not-run"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-kube-prometheus-stack-85-3-3-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/kube-prometheus-stack",
          "sourceVersion": "85.3.3",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/kube-prometheus-stack",
          "version": "85.3.3",
          "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:85.3.3"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": "6566541a9f0bf6dfee41fafac9aef3099a6d6cfe2a2fe4e218ef08d2d754bec0"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 114
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/kube-prometheus-stack",
            "version=85.3.3",
            "base=no-crds",
            "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/85.3.3/effective-values-no-crds.yaml",
            "namespace=monitoring",
            "releaseName=kube-prometheus-stack",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "alertmanagerconfigs.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "alertmanagerconfigs.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "alertmanagers.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "alertmanagers.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "podmonitors.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "podmonitors.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "probes.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "probes.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheusagents.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheusagents.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheuses.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheuses.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheusrules.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheusrules.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "scrapeconfigs.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "scrapeconfigs.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "servicemonitors.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "servicemonitors.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "thanosrulers.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "thanosrulers.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "kube-prometheus-stack-admission",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "ca",
                  "cert",
                  "key"
                ],
                "name": "kube-prometheus-stack-admission",
                "namespace": "monitoring",
                "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "preflight-or-presync-crd-apply",
              "quirkClass": "crd-install",
              "lifecyclePhase": "pre-apply",
              "actionKind": "install-crd",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Handled — the generated package script applies the CRDs first",
              "operatingDetails": "The no-crds render omits CRDs, so the package applies the locked CRDs before the workload.",
              "command": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
              "disposition": "observed",
              "delta": "resolved",
              "reason": "the package carries and applies the 10 CRDs before the workload (observed live)",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -2 · ServerSideApply",
                "flux": "HelmRelease .spec.install.crds=Create (or apply CRDs first)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-2\"\n    argocd.argoproj.io/sync-options: ServerSideApply=true"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "flux": {
                  "implementation": "One OCIRepository fed four Flux Kustomizations ordered with dependsOn.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                }
              }
            },
            {
              "routeName": "preserve-cleanup-policy",
              "quirkClass": "hook-delete-policy",
              "lifecyclePhase": "observe",
              "actionKind": "accept-target-policy",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The run removes both completed Jobs and their temporary RBAC objects.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — your cluster handles it",
                "flux": "none — your cluster handles it",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — an explicit, receipted step",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "The controller paused before upgrade while the two completed hook Jobs were removed, then replaced them during the staged upgrade.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "flux": {
                  "implementation": "The controller paused before upgrade while the two completed hook Jobs were removed, then replaced them during the staged upgrade.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                }
              }
            },
            {
              "routeName": "postsync-check-or-observation",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "post-apply",
              "actionKind": "run-check",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a post-apply check (receipted)",
              "operatingDetails": "The package runs the chart's webhook patch Job after the webhook objects exist.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PostSync",
                "flux": "post-apply Job / follow-on Kustomization",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PostSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — a post-apply check (receipted)",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "flux": {
                  "implementation": "One OCIRepository fed four Flux Kustomizations ordered with dependsOn.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                }
              }
            },
            {
              "routeName": "preflight-or-presync",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "preflight",
              "actionKind": "run-preflight",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a preflight step before apply (receipted)",
              "operatingDetails": "The package runs the chart's certificate creation Job before applying the admission webhooks.",
              "command": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -1",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-1\""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "flux": {
                  "implementation": "One OCIRepository fed four Flux Kustomizations ordered with dependsOn.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                }
              }
            },
            {
              "routeName": "upgrade-action-with-receipt",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "pre-apply",
              "actionKind": "run-job",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a GitOps PreSync/PostSync or cub action (receipted)",
              "operatingDetails": "Argo CD and Flux upgraded the no-crds preset from 85.3.3 to 86.1.0, reran the four ordered stages, replaced both hook Jobs, and passed the runtime checks.",
              "command": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "not-run",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "Argo CD moved from the 85.3.3 staged digest to 86.1.0 and reran the ordered CRD, preparation, workload, and finish stages.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "flux": {
                  "implementation": "Flux moved from the 85.3.3 staged digest to 86.1.0 and reran the four ordered Kustomizations.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                }
              }
            },
            {
              "routeName": "preserve-ordering",
              "quirkClass": "hook-weight-ordering",
              "lifecyclePhase": "pre-apply",
              "actionKind": "preserve-ordering",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "no extra hook — keep CRDs before dependent objects",
                "flux": "no extra hook — make sure CRDs are applied before workloads",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — an explicit, receipted step",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "flux": {
                  "implementation": "One OCIRepository fed four Flux Kustomizations ordered with dependsOn.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                }
              }
            },
            {
              "routeName": "target-facts-or-preflight",
              "quirkClass": "target-facts",
              "lifecyclePhase": "preflight",
              "actionKind": "stage-target-facts",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Handled — the recorded package script creates or checks this prerequisite",
              "operatingDetails": "The certificate Job creates the required admission Secret with ca, cert, and key.",
              "command": "# create the required target facts (Secret/StorageClass/etc.) before apply",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — supply the inputs before sync",
                "flux": "none — supply the inputs before sync",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "# create the required target facts (Secret/StorageClass/etc.) before apply",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "flux": {
                  "implementation": "One OCIRepository fed four Flux Kustomizations ordered with dependsOn.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                }
              }
            },
            {
              "routeName": "webhook-readiness-observation",
              "quirkClass": "webhook-readiness",
              "lifecyclePhase": "observe",
              "actionKind": "observe-webhook",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.",
              "command": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "wait for the certificate handoff, then observe webhook and workload health after sync",
                "flux": "wait for the certificate handoff, then run post-apply webhook and workload health checks",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "flux": {
                  "implementation": "One OCIRepository fed four Flux Kustomizations ordered with dependsOn.",
                  "status": "pass",
                  "evidence": [
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                }
              }
            }
          ],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "alertmanagerconfigs.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "alertmanagers.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "podmonitors.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "probes.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheusagents.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheuses.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheusrules.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "scrapeconfigs.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "servicemonitors.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "thanosrulers.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "ca",
                    "cert",
                    "key"
                  ],
                  "name": "kube-prometheus-stack-admission",
                  "namespace": "monitoring",
                  "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "alertmanagerconfigs.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "alertmanagers.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "podmonitors.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "probes.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheusagents.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheuses.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheusrules.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "scrapeconfigs.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "servicemonitors.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "thanosrulers.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "monitoring/kube-prometheus-stack-admission",
                "namespace": "monitoring",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "11 target prerequisites declared by this base.",
              "declarationSource": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ],
          "normalSet": "baseline"
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven",
          "lifecycleDirectFreshInstall": "yes",
          "lifecycleDirectFreshInstallReceipt": "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
          "lifecycleArgoCd": "fresh-install-and-upgrade-pass",
          "lifecycleFlux": "fresh-install-and-upgrade-pass",
          "lifecycleGitOpsReceipt": "runs/kps-gitops-lifecycle-proof/receipt.yaml",
          "lifecycleGitOpsInstallArtifactDigest": "sha256:0e37d8b94457ff9f13b77fd5898a18981cfbc4c8f879fc45e07bf2e306ad9e59",
          "lifecycleGitOpsUpgradeArtifactDigest": "sha256:f1213d6e8ce657b672bd341eb266d89ac95908d674df1375f9e0eef4dd787513",
          "lifecycleUpgrade": "85.3.3-to-86.1.0-pass",
          "lifecycleUpgradeFromVersion": "85.3.3",
          "lifecycleUpgradeToVersion": "86.1.0"
        },
        "operations": {
          "changeCadence": "planned-service-release",
          "ownerClass": "platform-service-team",
          "resourceClass": "system-service",
          "classificationSource": "config-catalog/operational-class-examples.yaml",
          "classificationReason": "Monitoring is shared by many workloads, so a platform service team owns it and introduces changes more deliberately.",
          "liveSpace": "prometheus-community-kube-prometheus-stack-85-3-3-no-crds",
          "target": {
            "ownerClass": "platform-service-team",
            "scope": "shared-service-namespace",
            "selection": "Install on one non-production cluster first, then move the reviewed service release to the remaining clusters."
          },
          "gates": {
            "normalSet": "baseline",
            "productionSet": "approvalRequired"
          },
          "rollout": {
            "limit": "Fresh install passed on one kind cluster; the chart upgrade and multi-cluster wave have not run.",
            "method": "pilot-cluster-then-service-wave",
            "sequence": [
              "non-production pilot",
              "production service wave"
            ],
            "status": "fresh-install-observed"
          }
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-kube-prometheus-stack-86-1-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/kube-prometheus-stack",
          "sourceVersion": "86.1.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/kube-prometheus-stack",
          "version": "86.1.0",
          "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:86.1.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "e7acdd59cbd99e9c8d02b9e96a74550b5ce0adc292de1d0c079f4c83c9f3b2c3"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 124
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/kube-prometheus-stack",
            "version=86.1.0",
            "base=default",
            "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/86.1.0/effective-values.yaml",
            "namespace=monitoring",
            "releaseName=kube-prometheus-stack",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "alertmanagerconfigs.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "alertmanagerconfigs.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "alertmanagers.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "alertmanagers.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "podmonitors.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "podmonitors.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "probes.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "probes.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheusagents.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheusagents.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheuses.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheuses.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheusrules.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheusrules.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "scrapeconfigs.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "scrapeconfigs.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "servicemonitors.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "servicemonitors.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "thanosrulers.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "thanosrulers.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "kube-prometheus-stack-admission",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "ca",
                  "cert",
                  "key"
                ],
                "name": "kube-prometheus-stack-admission",
                "namespace": "monitoring",
                "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "preflight-or-presync-crd-apply",
              "quirkClass": "crd-install",
              "lifecyclePhase": "pre-apply",
              "actionKind": "install-crd",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Handled — the generated package script applies the CRDs first",
              "operatingDetails": "The package applies the locked CRDs before the chart objects that use them.",
              "command": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
              "disposition": "observed",
              "delta": "resolved",
              "reason": "the package carries and applies the 10 CRDs before the workload (observed live)",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -2 · ServerSideApply",
                "flux": "HelmRelease .spec.install.crds=Create (or apply CRDs first)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-2\"\n    argocd.argoproj.io/sync-options: ServerSideApply=true"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync · sync-wave -2 · ServerSideApply",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "HelmRelease .spec.install.crds=Create (or apply CRDs first)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preserve-cleanup-policy",
              "quirkClass": "hook-delete-policy",
              "lifecyclePhase": "observe",
              "actionKind": "accept-target-policy",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The run removes both completed Jobs and their temporary RBAC objects.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — your cluster handles it",
                "flux": "none — your cluster handles it",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — an explicit, receipted step",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "postsync-check-or-observation",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "post-apply",
              "actionKind": "run-check",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a post-apply check (receipted)",
              "operatingDetails": "The package runs the chart's webhook patch Job after the webhook objects exist.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PostSync",
                "flux": "post-apply Job / follow-on Kustomization",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PostSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — a post-apply check (receipted)",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PostSync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "post-apply Job / follow-on Kustomization",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preflight-or-presync",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "preflight",
              "actionKind": "run-preflight",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a preflight step before apply (receipted)",
              "operatingDetails": "The package runs the chart's certificate creation Job before applying the admission webhooks.",
              "command": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -1",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-1\""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync · sync-wave -1",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "upgrade-action-with-receipt",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "pre-apply",
              "actionKind": "run-job",
              "executionMode": "not-yet-executable",
              "automatic": false,
              "whoRuns": "Not tested for this path",
              "operatingDetails": "The fresh-install receipt does not test the 85.3.3 to 86.1.0 upgrade.",
              "command": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "not-run",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [],
              "nextAction": "Run the packaged route during an 85.3.3 to 86.1.0 upgrade and record the result.",
              "evidenceRequired": "run this route for the named path and capture a live receipt",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "not-run",
                  "evidence": []
                },
                "argoCd": {
                  "implementation": "PreSync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preserve-ordering",
              "quirkClass": "hook-weight-ordering",
              "lifecyclePhase": "pre-apply",
              "actionKind": "preserve-ordering",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "no extra hook — keep CRDs before dependent objects",
                "flux": "no extra hook — make sure CRDs are applied before workloads",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — an explicit, receipted step",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "no extra hook — keep CRDs before dependent objects",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "no extra hook — make sure CRDs are applied before workloads",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "target-facts-or-preflight",
              "quirkClass": "target-facts",
              "lifecyclePhase": "preflight",
              "actionKind": "stage-target-facts",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Handled — the recorded package script creates or checks this prerequisite",
              "operatingDetails": "The certificate Job creates the required admission Secret with ca, cert, and key.",
              "command": "# create the required target facts (Secret/StorageClass/etc.) before apply",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — supply the inputs before sync",
                "flux": "none — supply the inputs before sync",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "# create the required target facts (Secret/StorageClass/etc.) before apply",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "none — supply the inputs before sync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — supply the inputs before sync",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "webhook-readiness-observation",
              "quirkClass": "webhook-readiness",
              "lifecyclePhase": "observe",
              "actionKind": "observe-webhook",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.",
              "command": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml",
                "runs/kps-lifecycle-route-proof/receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "wait for the certificate handoff, then observe webhook and workload health after sync",
                "flux": "wait for the certificate handoff, then run post-apply webhook and workload health checks",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "wait for the certificate handoff, then observe webhook and workload health after sync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "wait for the certificate handoff, then run post-apply webhook and workload health checks",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "alertmanagerconfigs.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "alertmanagers.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "podmonitors.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "probes.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheusagents.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheuses.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheusrules.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "scrapeconfigs.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "servicemonitors.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "applyMode": "server-side-force-conflicts",
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "thanosrulers.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "ca",
                    "cert",
                    "key"
                  ],
                  "name": "kube-prometheus-stack-admission",
                  "namespace": "monitoring",
                  "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "alertmanagerconfigs.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "alertmanagers.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "podmonitors.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "probes.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheusagents.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheuses.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheusrules.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "scrapeconfigs.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "servicemonitors.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "thanosrulers.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "applyMode": "server-side-force-conflicts",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "monitoring/kube-prometheus-stack-admission",
                "namespace": "monitoring",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "11 target prerequisites declared by this base.",
              "declarationSource": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-kube-prometheus-stack-86-1-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/kube-prometheus-stack",
          "sourceVersion": "86.1.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/kube-prometheus-stack",
          "version": "86.1.0",
          "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:86.1.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": "f2b1270f1f1841b72f8f905cb9e986e5af44c31f0ec7e05e74424c464873f026"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 114
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/kube-prometheus-stack",
            "version=86.1.0",
            "base=no-crds",
            "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/86.1.0/effective-values-no-crds.yaml",
            "namespace=monitoring",
            "releaseName=kube-prometheus-stack",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "alertmanagerconfigs.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "alertmanagerconfigs.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "alertmanagers.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "alertmanagers.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "podmonitors.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "podmonitors.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "probes.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "probes.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheusagents.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheusagents.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheuses.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheuses.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "prometheusrules.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "prometheusrules.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "scrapeconfigs.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "scrapeconfigs.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "servicemonitors.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "servicemonitors.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "thanosrulers.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "thanosrulers.monitoring.coreos.com",
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
              }
            },
            {
              "name": "kube-prometheus-stack-admission",
              "type": "requiredSecrets",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "keys": [
                  "ca",
                  "cert",
                  "key"
                ],
                "name": "kube-prometheus-stack-admission",
                "namespace": "monitoring",
                "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [
            {
              "routeName": "preflight-or-presync-crd-apply",
              "quirkClass": "crd-install",
              "lifecyclePhase": "pre-apply",
              "actionKind": "install-crd",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Handled — the generated package script applies the CRDs first",
              "operatingDetails": "The no-crds render omits CRDs, so the package applies the locked CRDs before the workload.",
              "command": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
              "disposition": "observed",
              "delta": "resolved",
              "reason": "the package carries and applies the 10 CRDs before the workload (observed live)",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -2 · ServerSideApply",
                "flux": "HelmRelease .spec.install.crds=Create (or apply CRDs first)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-2\"\n    argocd.argoproj.io/sync-options: ServerSideApply=true"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply --server-side -f <chart-crds>   # placeholder, not verified",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync · sync-wave -2 · ServerSideApply",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "HelmRelease .spec.install.crds=Create (or apply CRDs first)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preserve-cleanup-policy",
              "quirkClass": "hook-delete-policy",
              "lifecyclePhase": "observe",
              "actionKind": "accept-target-policy",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The run removes both completed Jobs and their temporary RBAC objects.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — your cluster handles it",
                "flux": "none — your cluster handles it",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — an explicit, receipted step",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — your cluster handles it",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "postsync-check-or-observation",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "post-apply",
              "actionKind": "run-check",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a post-apply check (receipted)",
              "operatingDetails": "The package runs the chart's webhook patch Job after the webhook objects exist.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PostSync",
                "flux": "post-apply Job / follow-on Kustomization",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PostSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — a post-apply check (receipted)",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PostSync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "post-apply Job / follow-on Kustomization",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preflight-or-presync",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "preflight",
              "actionKind": "run-preflight",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a preflight step before apply (receipted)",
              "operatingDetails": "The package runs the chart's certificate creation Job before applying the admission webhooks.",
              "command": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync · sync-wave -1",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded\n    argocd.argoproj.io/sync-wave: \"-1\""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <preflight-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync · sync-wave -1",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "upgrade-action-with-receipt",
              "quirkClass": "hook-phase",
              "lifecyclePhase": "pre-apply",
              "actionKind": "run-job",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — a GitOps PreSync/PostSync or cub action (receipted)",
              "operatingDetails": "Argo CD and Flux upgraded the no-crds preset from 85.3.3 to 86.1.0, reran the four ordered stages, replaced both hook Jobs, and passed the runtime checks.",
              "command": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": true,
                "argoCd": "PreSync",
                "flux": "apply before the release (Kustomization dependsOn)",
                "argoCdSnippet": "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "PreSync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "apply before the release (Kustomization dependsOn)",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "preserve-ordering",
              "quirkClass": "hook-weight-ordering",
              "lifecyclePhase": "pre-apply",
              "actionKind": "preserve-ordering",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.",
              "command": "",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "no extra hook — keep CRDs before dependent objects",
                "flux": "no extra hook — make sure CRDs are applied before workloads",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "Your delivery — an explicit, receipted step",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "no extra hook — keep CRDs before dependent objects",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "no extra hook — make sure CRDs are applied before workloads",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "target-facts-or-preflight",
              "quirkClass": "target-facts",
              "lifecyclePhase": "preflight",
              "actionKind": "stage-target-facts",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Handled — the recorded package script creates or checks this prerequisite",
              "operatingDetails": "The certificate Job creates the required admission Secret with ca, cert, and key.",
              "command": "# create the required target facts (Secret/StorageClass/etc.) before apply",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "none — supply the inputs before sync",
                "flux": "none — supply the inputs before sync",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "# create the required target facts (Secret/StorageClass/etc.) before apply",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "none — supply the inputs before sync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "none — supply the inputs before sync",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            },
            {
              "routeName": "webhook-readiness-observation",
              "quirkClass": "webhook-readiness",
              "lifecyclePhase": "observe",
              "actionKind": "observe-webhook",
              "executionMode": "user-executes",
              "automatic": false,
              "whoRuns": "Your delivery — an explicit, receipted step",
              "operatingDetails": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.",
              "command": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations",
              "disposition": "observed",
              "delta": "kept",
              "reason": "",
              "routeSourceVersion": "85.3.3",
              "evidence": [
                "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml",
                "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml",
                "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml",
                "runs/kps-gitops-lifecycle-proof/receipt.yaml"
              ],
              "nextAction": "",
              "evidenceRequired": "already has a live receipt; keep it fresh when chart, base, or cluster version changes",
              "sourceDrift": "route source version 85.3.3; recipe version 86.1.0",
              "gitOps": {
                "emitsControllerStep": false,
                "argoCd": "wait for the certificate handoff, then observe webhook and workload health after sync",
                "flux": "wait for the certificate handoff, then run post-apply webhook and workload health checks",
                "argoCdSnippet": ""
              },
              "runners": {
                "direct": {
                  "implementation": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations",
                  "status": "evidence-linked",
                  "evidence": [
                    "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml",
                    "runs/kps-gitops-lifecycle-proof/receipt.yaml"
                  ]
                },
                "argoCd": {
                  "implementation": "wait for the certificate handoff, then observe webhook and workload health after sync",
                  "status": "mapping-only",
                  "evidence": []
                },
                "flux": {
                  "implementation": "wait for the certificate handoff, then run post-apply webhook and workload health checks",
                  "status": "mapping-only",
                  "evidence": []
                }
              }
            }
          ],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "alertmanagerconfigs.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "alertmanagers.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "podmonitors.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "probes.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheusagents.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheuses.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "prometheusrules.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "scrapeconfigs.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "servicemonitors.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "thanosrulers.monitoring.coreos.com",
                  "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                  "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                }
              ],
              "requiredSecrets": [
                {
                  "deliveryLanes": [
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "keys": [
                    "ca",
                    "cert",
                    "key"
                  ],
                  "name": "kube-prometheus-stack-admission",
                  "namespace": "monitoring",
                  "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                  "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "alertmanagerconfigs.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "alertmanagers.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "podmonitors.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "probes.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheusagents.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheuses.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "prometheusrules.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "scrapeconfigs.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "servicemonitors.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "thanosrulers.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator CRD managed outside this no-crds preset",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                  "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml"
                ]
              },
              {
                "category": "secret",
                "name": "monitoring/kube-prometheus-stack-admission",
                "namespace": "monitoring",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job",
                "check": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh",
                "declarationPath": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "",
                "deliveryLanes": [
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "11 target prerequisites declared by this base.",
              "declarationSource": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "yes",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven",
          "lifecycleUpgradeTarget": "pass-from-85.3.3",
          "lifecycleUpgradeReceipt": "runs/kps-gitops-lifecycle-proof/receipt.yaml",
          "lifecycleGitOpsUpgradeArtifactDigest": "sha256:f1213d6e8ce657b672bd341eb266d89ac95908d674df1375f9e0eef4dd787513"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/kube-state-metrics",
          "sourceVersion": "7.4.0",
          "base": "cluster-metrics-readonly"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/kube-state-metrics",
          "version": "7.4.0",
          "record": "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-state-metrics:7.4.0"
        },
        "baseVariant": {
          "name": "cluster-metrics-readonly",
          "revision": "r001",
          "digest": "3538ece277c56fe569b451f8775169f194992d31722d3a6b68bf6d338a61702e"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/kube-state-metrics",
            "version=7.4.0",
            "base=cluster-metrics-readonly",
            "valuesProfile=recipes/prometheus-community/kube-state-metrics/7.4.0/effective-values.yaml",
            "namespace=default",
            "releaseName=kube-state-metrics",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-kube-state-metrics-7-4-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/kube-state-metrics",
          "sourceVersion": "7.4.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/kube-state-metrics",
          "version": "7.4.0",
          "record": "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-state-metrics:7.4.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "8ecc8dfe44642c564d3efb21806d47fb7362b583e4e13057eeafe8b75a433669"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/kube-state-metrics",
            "version=7.4.0",
            "base=default",
            "valuesProfile=recipes/prometheus-community/kube-state-metrics/7.4.0/effective-values.yaml",
            "namespace=default",
            "releaseName=kube-state-metrics",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-29-8-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus",
          "sourceVersion": "29.8.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus",
          "version": "29.8.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus:29.8.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "6e2bda6fa0ba0314da74cfe139630ec34f2a95da1c10a57c45a48a47615d54fb"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus/29.8.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus/29.8.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 23
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus",
            "version=29.8.0",
            "base=default",
            "valuesProfile=recipes/prometheus-community/prometheus/29.8.0/effective-values.yaml",
            "namespace=monitoring",
            "releaseName=prometheus",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-29-8-0-server-only-ephemeral",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus",
          "sourceVersion": "29.8.0",
          "base": "server-only-ephemeral"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus",
          "version": "29.8.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus:29.8.0"
        },
        "baseVariant": {
          "name": "server-only-ephemeral",
          "revision": "r001",
          "digest": "5c943a249ba70681b117981dd109e59b8be537df7148c3e5d37b6e5c9711bddc"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus",
            "version=29.8.0",
            "base=server-only-ephemeral",
            "valuesProfile=recipes/prometheus-community/prometheus/29.8.0/effective-values-server-only-ephemeral.yaml",
            "namespace=monitoring",
            "releaseName=prometheus",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "todo",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-29-9-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus",
          "sourceVersion": "29.9.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus",
          "version": "29.9.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus:29.9.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "833b2a228103aa0f32d59192a120a95f9aa664233b399c85e0baf5edd9356f9a"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus/29.9.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus/29.9.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 23
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus",
            "version=29.9.0",
            "base=default",
            "valuesProfile=recipes/prometheus-community/prometheus/29.9.0/effective-values.yaml",
            "namespace=monitoring",
            "releaseName=prometheus",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-29-9-0-server-only-ephemeral",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus",
          "sourceVersion": "29.9.0",
          "base": "server-only-ephemeral"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus",
          "version": "29.9.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus:29.9.0"
        },
        "baseVariant": {
          "name": "server-only-ephemeral",
          "revision": "r001",
          "digest": "0644d6f162631146c2c76f639a02397046b73b7d5cde06be9f993186791126ff"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus/29.9.0/revisions/server-only-ephemeral/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus/29.9.0/revisions/server-only-ephemeral/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus",
            "version=29.9.0",
            "base=server-only-ephemeral",
            "valuesProfile=recipes/prometheus-community/prometheus/29.9.0/effective-values-server-only-ephemeral.yaml",
            "namespace=monitoring",
            "releaseName=prometheus",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus-adapter",
          "sourceVersion": "5.3.0",
          "base": "apiservice-v1-capability"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus-adapter",
          "version": "5.3.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-adapter:5.3.0"
        },
        "baseVariant": {
          "name": "apiservice-v1-capability",
          "revision": "r001",
          "digest": "7de173f4905c68aaa7d2ac5f87d6b8740223b5b510265589a389767d4607b9c5"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/apiservice-v1-capability/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/apiservice-v1-capability/r001/rendered/object-inventory.yaml",
          "objectCount": 11
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus-adapter",
            "version=5.3.0",
            "base=apiservice-v1-capability",
            "valuesProfile=recipes/prometheus-community/prometheus-adapter/5.3.0/effective-values.yaml",
            "namespace=default",
            "releaseName=prometheus-adapter",
            "capabilityProfile={\"apiVersions\":[\"apiregistration.k8s.io/v1\"],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus-adapter",
          "sourceVersion": "5.3.0",
          "base": "cluster-metrics-readonly"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus-adapter",
          "version": "5.3.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-adapter:5.3.0"
        },
        "baseVariant": {
          "name": "cluster-metrics-readonly",
          "revision": "r001",
          "digest": "407514c513a9e78bd51228d08b152e31f17afcc13ba05128197a0ec4cca21a9a"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml",
          "objectCount": 11
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus-adapter",
            "version=5.3.0",
            "base=cluster-metrics-readonly",
            "valuesProfile=recipes/prometheus-community/prometheus-adapter/5.3.0/effective-values.yaml",
            "namespace=default",
            "releaseName=prometheus-adapter",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "K",
                "prerequisiteKind": "crd",
                "prerequisiteName": "unknown",
                "actionKind": "install-crds",
                "ownerClass": "user-stage",
                "requiredInputs": "the chart's CRDs",
                "evidenceRequired": "the required CRDs Established on the target before apply; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-kind-parity/prometheus-community-prometheus-adapter-cluster-metrics-readonly/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart prometheus-community/prometheus-adapter --version 5.3.0 --base cluster-metrics-readonly",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/prometheus-community-prometheus-adapter-cluster-metrics-readonly/receipt.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "1 observed prerequisite action record exists, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "no",
          "liveDualParity": "no",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-adapter-5-3-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus-adapter",
          "sourceVersion": "5.3.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus-adapter",
          "version": "5.3.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-adapter:5.3.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "2e21719fdf3b6ea902bbe41c6800cf2d62bedcc4c1ff0e1f37fcb576c0512e85"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 11
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus-adapter",
            "version=5.3.0",
            "base=default",
            "valuesProfile=recipes/prometheus-community/prometheus-adapter/5.3.0/effective-values.yaml",
            "namespace=default",
            "releaseName=prometheus-adapter",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "K",
                "prerequisiteKind": "crd",
                "prerequisiteName": "unknown",
                "actionKind": "install-crds",
                "ownerClass": "user-stage",
                "requiredInputs": "the chart's CRDs",
                "evidenceRequired": "the required CRDs Established on the target before apply; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-kind-parity/prometheus-community-prometheus-adapter-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart prometheus-community/prometheus-adapter --version 5.3.0 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/prometheus-community-prometheus-adapter-default/receipt.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "1 observed prerequisite action record exists, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "no",
          "liveDualParity": "no",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus-blackbox-exporter",
          "sourceVersion": "11.10.0",
          "base": "cluster-metrics-readonly"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus-blackbox-exporter",
          "version": "11.10.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-blackbox-exporter:11.10.0"
        },
        "baseVariant": {
          "name": "cluster-metrics-readonly",
          "revision": "r001",
          "digest": "c8012eaac44f39c58d78bebf8e2fad63bf4400e7180c61a3b2d0f35477b96133"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml",
          "objectCount": 4
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus-blackbox-exporter",
            "version=11.10.0",
            "base=cluster-metrics-readonly",
            "valuesProfile=recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/effective-values.yaml",
            "namespace=default",
            "releaseName=prometheus-blackbox-exporter",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-blackbox-exporter-11-10-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus-blackbox-exporter",
          "sourceVersion": "11.10.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus-blackbox-exporter",
          "version": "11.10.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-blackbox-exporter:11.10.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "571356bcb6fcd9b00cea2b9b9be7cfc2d4f5eb764fdb5b4e700c1d4d70430c79"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 4
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus-blackbox-exporter",
            "version=11.10.0",
            "base=default",
            "valuesProfile=recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/effective-values.yaml",
            "namespace=default",
            "releaseName=prometheus-blackbox-exporter",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus-node-exporter",
          "sourceVersion": "4.55.0",
          "base": "cluster-metrics-readonly"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus-node-exporter",
          "version": "4.55.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-node-exporter:4.55.0"
        },
        "baseVariant": {
          "name": "cluster-metrics-readonly",
          "revision": "r001",
          "digest": "8d0a34ec191af63663ea2ff2609f86a917340b0fdf7d4a5640a9fab7a1f6809f"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml",
          "objectCount": 4
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus-node-exporter",
            "version=4.55.0",
            "base=cluster-metrics-readonly",
            "valuesProfile=recipes/prometheus-community/prometheus-node-exporter/4.55.0/effective-values-cluster-metrics-readonly.yaml",
            "namespace=default",
            "releaseName=prometheus-node-exporter",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "servicemonitors.monitoring.coreos.com",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "servicemonitors.monitoring.coreos.com",
                "purpose": "Prometheus Operator ServiceMonitor CRD required by the cluster-metrics-readonly ServiceMonitor object",
                "sourcePath": "../../../prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "prometheus-community/prometheus-operator-crds@29.0.0/default",
                "packageSource": "package://prerequisites/target-facts/cluster-metrics-readonly-crds.yaml",
                "packagePath": "packages/prometheus-community/prometheus-node-exporter/4.55.0/prerequisites/target-facts/cluster-metrics-readonly-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "servicemonitors.monitoring.coreos.com",
                  "purpose": "Prometheus Operator ServiceMonitor CRD required by the cluster-metrics-readonly ServiceMonitor object",
                  "sourcePath": "../../../prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "prometheus-community/prometheus-operator-crds@29.0.0/default",
                  "packageSource": "package://prerequisites/target-facts/cluster-metrics-readonly-crds.yaml",
                  "packagePath": "packages/prometheus-community/prometheus-node-exporter/4.55.0/prerequisites/target-facts/cluster-metrics-readonly-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "servicemonitors.monitoring.coreos.com",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Prometheus Operator ServiceMonitor CRD required by the cluster-metrics-readonly ServiceMonitor object",
                "check": "package://prerequisites/target-facts/cluster-metrics-readonly-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/cluster-metrics-readonly-crds.yaml",
                "packagePath": "packages/prometheus-community/prometheus-node-exporter/4.55.0/prerequisites/target-facts/cluster-metrics-readonly-crds.yaml",
                "declarationPath": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/variants/cluster-metrics-readonly/variant.yaml",
                "sourceVariant": "prometheus-community/prometheus-operator-crds@29.0.0/default",
                "sourcePath": "../../../prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/prometheus-community/prometheus-node-exporter/4.55.0/variants/cluster-metrics-readonly/variant.yaml",
                  "packages/prometheus-community/prometheus-node-exporter/4.55.0/prerequisites/target-facts/cluster-metrics-readonly-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "1 target prerequisite declared by this base.",
              "declarationSource": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/variants/cluster-metrics-readonly/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-node-exporter-4-55-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus-node-exporter",
          "sourceVersion": "4.55.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus-node-exporter",
          "version": "4.55.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-node-exporter:4.55.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "fdad73078ab47c93c3964f9f070e34f85a3e4b315a1ee26ebbea3ddfc45476aa"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 3
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus-node-exporter",
            "version=4.55.0",
            "base=default",
            "valuesProfile=recipes/prometheus-community/prometheus-node-exporter/4.55.0/effective-values.yaml",
            "namespace=default",
            "releaseName=prometheus-node-exporter",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-operator-crds-29-0-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus-operator-crds",
          "sourceVersion": "29.0.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus-operator-crds",
          "version": "29.0.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-operator-crds:29.0.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "f779402363cf1dc32f6050c24fc0a5663759463b873e46758e365e25448cad71"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 10
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus-operator-crds",
            "version=29.0.0",
            "base=default",
            "valuesProfile=recipes/prometheus-community/prometheus-operator-crds/29.0.0/effective-values.yaml",
            "namespace=default",
            "releaseName=prometheus-operator-crds",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "prometheus-community-prometheus-pushgateway-3-6-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "prometheus-community/prometheus-pushgateway",
          "sourceVersion": "3.6.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "prometheus-community/prometheus-pushgateway",
          "version": "3.6.0",
          "record": "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-pushgateway:3.6.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "dc0bbdc714b1dced38f3eb5140fb163f082fcc459fe100a1b698f33c7e94ac34"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/prometheus-community/prometheus-pushgateway/3.6.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/prometheus-community/prometheus-pushgateway/3.6.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 3
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=prometheus-community/prometheus-pushgateway",
            "version=3.6.0",
            "base=default",
            "valuesProfile=recipes/prometheus-community/prometheus-pushgateway/3.6.0/effective-values.yaml",
            "namespace=default",
            "releaseName=prometheus-pushgateway",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "rook-release-rook-ceph-cluster-v1-19-5-default",
        "labels": {
          "sourceType": "helm",
          "component": "rook-release/rook-ceph-cluster",
          "sourceVersion": "v1.19.5",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "rook-release/rook-ceph-cluster",
          "version": "v1.19.5",
          "record": "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/rook-release-rook-ceph-cluster:v1.19.5"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "1271579e77bf408c1e8dbdc549a04cb876c2dd6e4855640472f2a43ae6bf2d7f"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/rook-release/rook-ceph-cluster/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/rook-release/rook-ceph-cluster/v1.19.5/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 27
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=rook-release/rook-ceph-cluster",
            "version=v1.19.5",
            "base=default",
            "valuesProfile=recipes/rook-release/rook-ceph-cluster/v1.19.5/effective-values.yaml",
            "namespace=default",
            "releaseName=rook-ceph-cluster",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "cephblockpools.ceph.rook.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "cephblockpools.ceph.rook.io",
                "purpose": "Rook Ceph cluster base creates CephBlockPool resources",
                "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "cephclusters.ceph.rook.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "cephclusters.ceph.rook.io",
                "purpose": "Rook Ceph cluster base creates CephCluster resources",
                "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "cephfilesystems.ceph.rook.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "cephfilesystems.ceph.rook.io",
                "purpose": "Rook Ceph cluster base creates CephFilesystem resources",
                "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "cephfilesystemsubvolumegroups.ceph.rook.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "cephfilesystemsubvolumegroups.ceph.rook.io",
                "purpose": "Rook Ceph cluster base creates CephFilesystemSubVolumeGroup resources",
                "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "cephobjectstores.ceph.rook.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "cephobjectstores.ceph.rook.io",
                "purpose": "Rook Ceph cluster base creates CephObjectStore resources",
                "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
              }
            },
            {
              "name": "rook-ceph",
              "type": "requiredNamespaces",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "runs/live-helm-confighub-compare/rook-release-rook-ceph-cluster-default/receipt.yaml",
                  "runs/live-kind-parity/rook-release-rook-ceph-cluster-default/receipt.yaml"
                ],
                "name": "rook-ceph",
                "purpose": "The chart renders a RoleBinding into rook-ceph, and Helm blocks when the namespace is absent.",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "suggestedSource": "kubectl create namespace rook-ceph --dry-run=client -o yaml | kubectl apply -f -"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts-and-observed-action-records",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "cephblockpools.ceph.rook.io",
                  "purpose": "Rook Ceph cluster base creates CephBlockPool resources",
                  "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "cephclusters.ceph.rook.io",
                  "purpose": "Rook Ceph cluster base creates CephCluster resources",
                  "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "cephfilesystems.ceph.rook.io",
                  "purpose": "Rook Ceph cluster base creates CephFilesystem resources",
                  "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "cephfilesystemsubvolumegroups.ceph.rook.io",
                  "purpose": "Rook Ceph cluster base creates CephFilesystemSubVolumeGroup resources",
                  "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "cephobjectstores.ceph.rook.io",
                  "purpose": "Rook Ceph cluster base creates CephObjectStore resources",
                  "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                  "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                  "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                  "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
                }
              ],
              "requiredNamespaces": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "evidence": [
                    "runs/live-helm-confighub-compare/rook-release-rook-ceph-cluster-default/receipt.yaml",
                    "runs/live-kind-parity/rook-release-rook-ceph-cluster-default/receipt.yaml"
                  ],
                  "name": "rook-ceph",
                  "purpose": "The chart renders a RoleBinding into rook-ceph, and Helm blocks when the namespace is absent.",
                  "sourcePath": "../../target-prerequisite-plan.yaml",
                  "suggestedSource": "kubectl create namespace rook-ceph --dry-run=client -o yaml | kubectl apply -f -"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "cephblockpools.ceph.rook.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Rook Ceph cluster base creates CephBlockPool resources",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                  "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "cephclusters.ceph.rook.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Rook Ceph cluster base creates CephCluster resources",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                  "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "cephfilesystems.ceph.rook.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Rook Ceph cluster base creates CephFilesystem resources",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                  "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "cephfilesystemsubvolumegroups.ceph.rook.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Rook Ceph cluster base creates CephFilesystemSubVolumeGroup resources",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                  "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "cephobjectstores.ceph.rook.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Rook Ceph cluster base creates CephObjectStore resources",
                "check": "package://prerequisites/target-facts/default-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/default-crds.yaml",
                "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml",
                "declarationPath": "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                "sourceVariant": "rook-release/rook-ceph@v1.19.5/default",
                "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                  "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml"
                ]
              },
              {
                "category": "namespace",
                "name": "rook-ceph",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "The chart renders a RoleBinding into rook-ceph, and Helm blocks when the namespace is absent.",
                "check": "kubectl create namespace rook-ceph --dry-run=client -o yaml | kubectl apply -f -",
                "declarationPath": "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                "sourceVariant": "",
                "sourcePath": "../../target-prerequisite-plan.yaml",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
                  "runs/live-helm-confighub-compare/rook-release-rook-ceph-cluster-default/receipt.yaml",
                  "runs/live-kind-parity/rook-release-rook-ceph-cluster-default/receipt.yaml"
                ]
              }
            ],
            "actions": [
              {
                "lane": "G/P",
                "prerequisiteKind": "namespace",
                "prerequisiteName": "Namespace rook-ceph",
                "actionKind": "create-namespace",
                "ownerClass": "user-stage",
                "requiredInputs": "Namespace rook-ceph",
                "evidenceRequired": "the named Namespace exists on the target before apply; then a fresh G/P parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/rook-release/rook-ceph-cluster/v1.19.5/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-helm-confighub-compare/rook-release-rook-ceph-cluster-default/receipt.yaml",
                "rerunCommand": "npm run live-parity:run -- --recipe recipes/rook-release/rook-ceph-cluster/v1.19.5 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-helm-confighub-compare/rook-release-rook-ceph-cluster-default/receipt.yaml",
                  "recipes/rook-release/rook-ceph-cluster/v1.19.5/target-prerequisite-plan.yaml"
                ]
              },
              {
                "lane": "K",
                "prerequisiteKind": "namespace",
                "prerequisiteName": "Namespace rook-ceph",
                "actionKind": "create-namespace",
                "ownerClass": "user-stage",
                "requiredInputs": "Namespace rook-ceph",
                "evidenceRequired": "the named Namespace exists on the target before apply; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "recipes/rook-release/rook-ceph-cluster/v1.19.5/target-prerequisite-plan.yaml",
                "sourceReceipt": "runs/live-kind-parity/rook-release-rook-ceph-cluster-default/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart rook-release/rook-ceph-cluster --version v1.19.5 --base default",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/rook-release-rook-ceph-cluster-default/receipt.yaml",
                  "recipes/rook-release/rook-ceph-cluster/v1.19.5/target-prerequisite-plan.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "attached-with-observed-actions",
              "reason": "6 prerequisite declarations and 2 follow-up action records are attached.",
              "declarationSource": "recipes/rook-release/rook-ceph-cluster/v1.19.5/variants/default/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "no",
          "liveDualParity": "no",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "rook-release-rook-ceph-v1-19-5-default",
        "labels": {
          "sourceType": "helm",
          "component": "rook-release/rook-ceph",
          "sourceVersion": "v1.19.5",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "rook-release/rook-ceph",
          "version": "v1.19.5",
          "record": "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/rook-release-rook-ceph:v1.19.5"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "293d95a7314b06e54f8242891b1fb33b707a74d878eda016d642f81ea87662a1"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/rook-release/rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/rook-release/rook-ceph/v1.19.5/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 133
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=rook-release/rook-ceph",
            "version=v1.19.5",
            "base=default",
            "valuesProfile=recipes/rook-release/rook-ceph/v1.19.5/effective-values.yaml",
            "namespace=default",
            "releaseName=rook-ceph",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "runix-pgadmin4-1-62-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "runix/pgadmin4",
          "sourceVersion": "1.62.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "runix/pgadmin4",
          "version": "1.62.0",
          "record": "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/runix-pgadmin4:1.62.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "fa823b56740dd7c854c54d5f23a14c6d471fae708f132a6b32c420472f5349c8"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/runix/pgadmin4/1.62.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/runix/pgadmin4/1.62.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 5
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=runix/pgadmin4",
            "version=1.62.0",
            "base=default",
            "valuesProfile=recipes/runix/pgadmin4/1.62.0/effective-values.yaml",
            "namespace=default",
            "releaseName=pgadmin4",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "sealed-secrets-sealed-secrets-2-18-6-default",
        "labels": {
          "sourceType": "helm",
          "component": "sealed-secrets/sealed-secrets",
          "sourceVersion": "2.18.6",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "sealed-secrets/sealed-secrets",
          "version": "2.18.6",
          "record": "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/sealed-secrets-sealed-secrets:2.18.6"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "830ce0d08a78cac87fd631790131d77ff469a2cb1070f35cbdbc41918155fc1d"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 11
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=sealed-secrets/sealed-secrets",
            "version=2.18.6",
            "base=default",
            "valuesProfile=recipes/sealed-secrets/sealed-secrets/2.18.6/effective-values.yaml",
            "namespace=default",
            "releaseName=sealed-secrets",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "sealed-secrets-sealed-secrets-2-18-6-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "sealed-secrets/sealed-secrets",
          "sourceVersion": "2.18.6",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "sealed-secrets/sealed-secrets",
          "version": "2.18.6",
          "record": "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/sealed-secrets-sealed-secrets:2.18.6"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=sealed-secrets/sealed-secrets",
            "version=2.18.6",
            "base=no-crds",
            "valuesProfile=recipes/sealed-secrets/sealed-secrets/2.18.6/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=sealed-secrets",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "secrets-store-csi-driver/secrets-store-csi-driver",
          "sourceVersion": "1.6.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "secrets-store-csi-driver/secrets-store-csi-driver",
          "version": "1.6.0",
          "record": "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/secrets-store-csi-driver-secrets-store-csi-driver:1.6.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "56ee9b012674930637151b2f833c259a2686d61ef189053954c0f1c6b0813653"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 10
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=secrets-store-csi-driver/secrets-store-csi-driver",
            "version=1.6.0",
            "base=default",
            "valuesProfile=recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/effective-values.yaml",
            "namespace=kube-system",
            "releaseName=secrets-store-csi-driver",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven-with-watch"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation",
        "labels": {
          "sourceType": "helm",
          "component": "secrets-store-csi-driver/secrets-store-csi-driver",
          "sourceVersion": "1.6.0",
          "base": "sync-secret-rotation"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "secrets-store-csi-driver/secrets-store-csi-driver",
          "version": "1.6.0",
          "record": "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/secrets-store-csi-driver-secrets-store-csi-driver:1.6.0"
        },
        "baseVariant": {
          "name": "sync-secret-rotation",
          "revision": "r001",
          "digest": "d31b6c656165766ab0f538f2589836a8fe2c7d1c4b4b85f808bd4fa36e22bcf1"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/sync-secret-rotation/r001/rendered/release-objects.yaml",
          "inventory": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/sync-secret-rotation/r001/rendered/object-inventory.yaml",
          "objectCount": 12
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=secrets-store-csi-driver/secrets-store-csi-driver",
            "version=1.6.0",
            "base=sync-secret-rotation",
            "valuesProfile=recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/effective-values-sync-secret-rotation.yaml",
            "namespace=kube-system",
            "releaseName=secrets-store-csi-driver",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "stakater-reloader-2-2-12-controller-default-reviewed",
        "labels": {
          "sourceType": "helm",
          "component": "stakater/reloader",
          "sourceVersion": "2.2.12",
          "base": "controller-default-reviewed"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "stakater/reloader",
          "version": "2.2.12",
          "record": "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/stakater-reloader:2.2.12"
        },
        "baseVariant": {
          "name": "controller-default-reviewed",
          "revision": "r001",
          "digest": "dd5515670b808b776594418e711ad3230bab02d2db853461dcc12fd3d8f11281"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/stakater/reloader/2.2.12/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml",
          "inventory": "recipes/stakater/reloader/2.2.12/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=stakater/reloader",
            "version=2.2.12",
            "base=controller-default-reviewed",
            "valuesProfile=recipes/stakater/reloader/2.2.12/effective-values.yaml",
            "namespace=default",
            "releaseName=reloader",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "stakater-reloader-2-2-12-default",
        "labels": {
          "sourceType": "helm",
          "component": "stakater/reloader",
          "sourceVersion": "2.2.12",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "stakater/reloader",
          "version": "2.2.12",
          "record": "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/stakater-reloader:2.2.12"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "72146487afac39062ec6bbd172803779ef9676f8f0d3933050709edfef483e04"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/stakater/reloader/2.2.12/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/stakater/reloader/2.2.12/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 6
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=stakater/reloader",
            "version=2.2.12",
            "base=default",
            "valuesProfile=recipes/stakater/reloader/2.2.12/effective-values.yaml",
            "namespace=default",
            "releaseName=reloader",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "strimzi-strimzi-kafka-operator-1-0-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "strimzi/strimzi-kafka-operator",
          "sourceVersion": "1.0.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "strimzi/strimzi-kafka-operator",
          "version": "1.0.0",
          "record": "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/strimzi-strimzi-kafka-operator:1.0.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "45d45a5fd99dabd09d7beef1a62ee67e84b03a4f6a08d6ce56791815edc4c29b"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 27
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=strimzi/strimzi-kafka-operator",
            "version=1.0.0",
            "base=default",
            "valuesProfile=recipes/strimzi/strimzi-kafka-operator/1.0.0/effective-values.yaml",
            "namespace=default",
            "releaseName=strimzi-kafka-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "strimzi-strimzi-kafka-operator-1-0-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "strimzi/strimzi-kafka-operator",
          "sourceVersion": "1.0.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "strimzi/strimzi-kafka-operator",
          "version": "1.0.0",
          "record": "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/strimzi-strimzi-kafka-operator:1.0.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=strimzi/strimzi-kafka-operator",
            "version=1.0.0",
            "base=no-crds",
            "valuesProfile=recipes/strimzi/strimzi-kafka-operator/1.0.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=strimzi-kafka-operator",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [
            {
              "name": "kafkas.kafka.strimzi.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "kafkas.kafka.strimzi.io",
                "purpose": "Kafka CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "kafkaconnects.kafka.strimzi.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "kafkaconnects.kafka.strimzi.io",
                "purpose": "KafkaConnect CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "strimzipodsets.core.strimzi.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "strimzipodsets.core.strimzi.io",
                "purpose": "StrimziPodSet CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "kafkatopics.kafka.strimzi.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "kafkatopics.kafka.strimzi.io",
                "purpose": "KafkaTopic CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "kafkausers.kafka.strimzi.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "kafkausers.kafka.strimzi.io",
                "purpose": "KafkaUser CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "kafkanodepools.kafka.strimzi.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "kafkanodepools.kafka.strimzi.io",
                "purpose": "KafkaNodePool CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "kafkabridges.kafka.strimzi.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "kafkabridges.kafka.strimzi.io",
                "purpose": "KafkaBridge CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "kafkaconnectors.kafka.strimzi.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "kafkaconnectors.kafka.strimzi.io",
                "purpose": "KafkaConnector CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "kafkamirrormaker2s.kafka.strimzi.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "kafkamirrormaker2s.kafka.strimzi.io",
                "purpose": "KafkaMirrorMaker2 CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            },
            {
              "name": "kafkarebalances.kafka.strimzi.io",
              "type": "requiredCRDs",
              "required": true,
              "details": {
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "name": "kafkarebalances.kafka.strimzi.io",
                "purpose": "KafkaRebalance CRD managed outside this no-crds preset",
                "sourceVariant": "default",
                "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
              }
            }
          ],
          "installTimeStatus": "partly-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "declared-target-facts",
            "declared": {
              "requiredCRDs": [
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "kafkas.kafka.strimzi.io",
                  "purpose": "Kafka CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "kafkaconnects.kafka.strimzi.io",
                  "purpose": "KafkaConnect CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "strimzipodsets.core.strimzi.io",
                  "purpose": "StrimziPodSet CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "kafkatopics.kafka.strimzi.io",
                  "purpose": "KafkaTopic CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "kafkausers.kafka.strimzi.io",
                  "purpose": "KafkaUser CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "kafkanodepools.kafka.strimzi.io",
                  "purpose": "KafkaNodePool CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "kafkabridges.kafka.strimzi.io",
                  "purpose": "KafkaBridge CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "kafkaconnectors.kafka.strimzi.io",
                  "purpose": "KafkaConnector CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "kafkamirrormaker2s.kafka.strimzi.io",
                  "purpose": "KafkaMirrorMaker2 CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                },
                {
                  "deliveryLanes": [
                    "regularHelm",
                    "cubInstallerApply",
                    "configHubKubectlApply",
                    "configHubOciArgo"
                  ],
                  "name": "kafkarebalances.kafka.strimzi.io",
                  "purpose": "KafkaRebalance CRD managed outside this no-crds preset",
                  "sourceVariant": "default",
                  "suggestedSource": "kubectl apply -f <strimzi-crds.yaml>",
                  "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                  "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                }
              ]
            },
            "requirements": [
              {
                "category": "crd",
                "name": "kafkas.kafka.strimzi.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "Kafka CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                  "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "kafkaconnects.kafka.strimzi.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KafkaConnect CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                  "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "strimzipodsets.core.strimzi.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "StrimziPodSet CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                  "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "kafkatopics.kafka.strimzi.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KafkaTopic CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                  "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "kafkausers.kafka.strimzi.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KafkaUser CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                  "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "kafkanodepools.kafka.strimzi.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KafkaNodePool CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                  "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "kafkabridges.kafka.strimzi.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KafkaBridge CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                  "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "kafkaconnectors.kafka.strimzi.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KafkaConnector CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                  "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "kafkamirrormaker2s.kafka.strimzi.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KafkaMirrorMaker2 CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                  "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              },
              {
                "category": "crd",
                "name": "kafkarebalances.kafka.strimzi.io",
                "namespace": "",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "purpose": "KafkaRebalance CRD managed outside this no-crds preset",
                "check": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml",
                "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml",
                "declarationPath": "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                "sourceVariant": "default",
                "sourcePath": "",
                "deliveryLanes": [
                  "regularHelm",
                  "cubInstallerApply",
                  "configHubKubectlApply",
                  "configHubOciArgo"
                ],
                "evidence": [
                  "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
                  "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml"
                ]
              }
            ],
            "actions": [],
            "coverage": {
              "state": "attached",
              "reason": "10 target prerequisites declared by this base.",
              "declarationSource": "recipes/strimzi/strimzi-kafka-operator/1.0.0/variants/no-crds/variant.yaml",
              "nextAction": ""
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "sveltos-kyverno-fleet-3-8-1-staging",
        "labels": {
          "sourceType": "sveltos",
          "component": "kyverno-fleet",
          "sourceVersion": "v1.12.0",
          "base": "staging"
        }
      },
      "spec": {
        "source": {
          "type": "sveltos",
          "name": "kyverno-fleet",
          "version": "v1.12.0",
          "record": "examples/sveltos/kyverno-fleet/source-lock.yaml",
          "packageOciRef": ""
        },
        "baseVariant": {
          "name": "staging",
          "revision": "live-r001",
          "digest": "1fba789198af3d5cba564ba9777b86ec8e5db8aaf07f4f25e8bc2766c0317396"
        },
        "configuration": {
          "format": "sveltos-clusterprofile-yaml",
          "objects": "examples/sveltos/kyverno-fleet/clusterprofile.yaml",
          "inventory": "",
          "objectCount": 1
        },
        "inputs": {
          "fixedAtBuildTime": [
            "sveltos=v1.12.0",
            "chart=kyverno/kyverno",
            "version=3.8.1",
            "clusterSelector=environment=staging",
            "syncMode=ContinuousWithDriftDetection",
            "admissionController.replicas=3"
          ],
          "installTime": [
            {
              "name": "management cluster",
              "value": "Kubernetes v1.35.0 with Sveltos v1.12.0",
              "status": "live-pass"
            },
            {
              "name": "workload cluster registration",
              "value": "SveltosCluster labeled environment=staging",
              "status": "live-pass"
            }
          ],
          "installTimeStatus": "declared"
        },
        "routing": {
          "routes": [
            {
              "id": "confighub-to-management-cluster",
              "status": "live-pass",
              "note": "The current receipt records two approved ConfigHub revisions, two portable OCI digests, and Argo CD reconciliation on the management cluster."
            },
            {
              "id": "sveltos-cluster-selection",
              "status": "live-pass",
              "note": "Sveltos selected the rollout=pilot cluster first. Removing that one selector in the second approved revision selected both staging clusters."
            },
            {
              "id": "sveltos-helm-reconciliation",
              "status": "live-pass",
              "note": "Sveltos installed Kyverno 3.8.1 and reported the Helm feature as Provisioned on both targets."
            },
            {
              "id": "sveltos-drift-recovery",
              "status": "live-pass",
              "note": "After the admission-controller replica count was changed from three to one on each target, Sveltos restored both to three."
            }
          ],
          "targetFacts": {
            "managementClusterRequiresSveltos": true,
            "managementKubernetesVersion": "v1.35.0",
            "sveltosVersion": "v1.12.0",
            "selectedClusterLabel": "environment=staging",
            "workloadKubernetesVersion": "v1.35.0"
          },
          "sourceRecord": "examples/sveltos/kyverno-fleet/live-receipt.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "temporary-pass",
            "pilotDigest": "sha256:0de702823d0d0cb41bfa667e29f40871f6d28e3122815ccd2f2931a9aacbc3bc",
            "fleetDigest": "sha256:a9907fd5f277f4dff5a4ec78841562657b7fd706e2ddf1e14a347d6a66493911"
          },
          "configHubReleaseOci": {
            "status": "private-pass",
            "pilotDigest": "sha256:f7f8fbfd93b6f33ce0cd5e5ea23250eae096d09ff08c0d8e55077ad2f9d6610a",
            "fleetDigest": "sha256:0e177fbb247e4642ff925a1beef0f403f7999a72b36d70eff88a26a2f997c179"
          },
          "argoCd": "live-pass-two-revisions",
          "flux": "not-used-in-this-run"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ],
          "normalSet": "approvalRequired",
          "approvalReason": "system-configuration"
        },
        "evidence": {
          "readme": "examples/sveltos/kyverno-fleet/README.md",
          "readmeUnit": "data/helm-catalog-readmes/units/sveltos-kyverno-fleet-3-8-1-staging/readme.yaml",
          "sourceLock": "examples/sveltos/kyverno-fleet/source-lock.yaml",
          "liveReceipt": "examples/sveltos/kyverno-fleet/live-receipt.yaml",
          "pilotProfile": "examples/sveltos/kyverno-fleet/clusterprofile-pilot.yaml",
          "ociDeliveryReceipt": "runs/sveltos-oci-delivery-proof/receipt.yaml",
          "ociDeliverySummary": "data/sveltos-oci-delivery-proof/summary.md",
          "configHubSpace": "sveltos-kyverno-fleet-3-8-1-staging",
          "configHubUnit": "clusterprofile",
          "clusterSummary": "projectsveltos/kyverno-staging-sveltos-helm-expt-sveltos-workload"
        },
        "operations": {
          "resourceClass": "system-configuration",
          "ownerClass": "platform-team",
          "changeCadence": "planned-platform-release"
        }
      },
      "status": {
        "level": "partial",
        "claim": "ConfigHub approved a pilot Sveltos ClusterProfile and a second selector revision at different OCI digests. Sveltos installed Kyverno 3.8.1 on the pilot first, then on both staging clusters, and restored replica drift on each target.",
        "limits": [
          "Sveltos itself was installed directly as a pinned management-cluster prerequisite.",
          "The portable OCI artifacts used a temporary local registry.",
          "The live test used two local kind clusters; it did not test a large production fleet or a rollout that pauses after a failed target.",
          "The receipt proves this profile and drift test, not every Sveltos feature."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "traefik-traefik-40-2-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "traefik/traefik",
          "sourceVersion": "40.2.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "traefik/traefik",
          "version": "40.2.0",
          "record": "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/traefik-traefik:40.2.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "ac5aa9750da6d7769c06285834a6f3bb6fdd86b39a4f6aabcf7853241b5e9be1"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/traefik/traefik/40.2.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/traefik/traefik/40.2.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 31
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=traefik/traefik",
            "version=40.2.0",
            "base=default",
            "valuesProfile=recipes/traefik/traefik/40.2.0/effective-values.yaml",
            "namespace=default",
            "releaseName=traefik",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "traefik-traefik-40-2-0-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "traefik/traefik",
          "sourceVersion": "40.2.0",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "traefik/traefik",
          "version": "40.2.0",
          "record": "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/traefik-traefik:40.2.0"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/traefik/traefik/40.2.0/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/traefik/traefik/40.2.0/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=traefik/traefik",
            "version=40.2.0",
            "base=no-crds",
            "valuesProfile=recipes/traefik/traefik/40.2.0/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=traefik",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "watch"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "todo",
          "gitopsOciLive": "watch",
          "liveDualParity": "watch",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "velero-velero-12-0-1-default",
        "labels": {
          "sourceType": "helm",
          "component": "velero/velero",
          "sourceVersion": "12.0.1",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "velero/velero",
          "version": "12.0.1",
          "record": "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/velero-velero:12.0.1"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "12f87f14fed242c5a31222d7bcd2c1ff26489d97e18746b909a941c8aea89790"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/velero/velero/12.0.1/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/velero/velero/12.0.1/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 23
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=velero/velero",
            "version=12.0.1",
            "base=default",
            "valuesProfile=recipes/velero/velero/12.0.1/effective-values.yaml",
            "namespace=default",
            "releaseName=velero",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "no",
          "liveDualParity": "no",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "velero-velero-12-0-1-no-crds",
        "labels": {
          "sourceType": "helm",
          "component": "velero/velero",
          "sourceVersion": "12.0.1",
          "base": "no-crds"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "velero/velero",
          "version": "12.0.1",
          "record": "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/velero-velero:12.0.1"
        },
        "baseVariant": {
          "name": "no-crds",
          "revision": "r001",
          "digest": ""
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/velero/velero/12.0.1/revisions/no-crds/r001/rendered/release-objects.yaml",
          "inventory": "recipes/velero/velero/12.0.1/revisions/no-crds/r001/rendered/object-inventory.yaml",
          "objectCount": 0
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=velero/velero",
            "version=12.0.1",
            "base=no-crds",
            "valuesProfile=recipes/velero/velero/12.0.1/effective-values-no-crds.yaml",
            "namespace=default",
            "releaseName=velero",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "observed-action-records",
            "declared": {},
            "requirements": [],
            "actions": [
              {
                "lane": "K",
                "prerequisiteKind": "crd",
                "prerequisiteName": "unknown",
                "actionKind": "install-crds",
                "ownerClass": "user-stage",
                "requiredInputs": "the chart's CRDs",
                "evidenceRequired": "the required CRDs Established on the target before apply; then a fresh K parity receipt for this base",
                "automatic": false,
                "supportArtifact": "",
                "sourceReceipt": "runs/live-kind-parity/velero-velero-no-crds/receipt.yaml",
                "rerunCommand": "npm run kind-parity:run -- --chart velero/velero --version 12.0.1 --base no-crds",
                "requiredBefore": "apply",
                "freshness": {
                  "policy": "recheck-before-apply",
                  "maxAge": "one-apply"
                },
                "evidence": [
                  "runs/live-kind-parity/velero-velero-no-crds/receipt.yaml"
                ]
              }
            ],
            "coverage": {
              "state": "actionable-gap",
              "reason": "1 observed prerequisite action record exists, but the base does not declare the prerequisite.",
              "declarationSource": "",
              "nextAction": "Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "no"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "no",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "no",
          "liveDualParity": "no",
          "twoClusterKind": "no",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "vm-victoria-logs-single-0-12-5-default",
        "labels": {
          "sourceType": "helm",
          "component": "vm/victoria-logs-single",
          "sourceVersion": "0.12.5",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "vm/victoria-logs-single",
          "version": "0.12.5",
          "record": "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/vm-victoria-logs-single:0.12.5"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "9e2678385c7c4b2ba0bdc7ac9c0a12216d140cba8dfb52ecb07123bb34caa478"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/vm/victoria-logs-single/0.12.5/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/vm/victoria-logs-single/0.12.5/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 2
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=vm/victoria-logs-single",
            "version=0.12.5",
            "base=default",
            "valuesProfile=recipes/vm/victoria-logs-single/0.12.5/effective-values.yaml",
            "namespace=default",
            "releaseName=victoria-logs-single",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "vm-victoria-metrics-single-0-39-0-default",
        "labels": {
          "sourceType": "helm",
          "component": "vm/victoria-metrics-single",
          "sourceVersion": "0.39.0",
          "base": "default"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "vm/victoria-metrics-single",
          "version": "0.39.0",
          "record": "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/vm-victoria-metrics-single:0.39.0"
        },
        "baseVariant": {
          "name": "default",
          "revision": "r001",
          "digest": "be30f6cfed24fe1620b2d6b8c705a7d0c7f581bd8dc29783661df3040664cf10"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default/r001/rendered/release-objects.yaml",
          "inventory": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default/r001/rendered/object-inventory.yaml",
          "objectCount": 3
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=vm/victoria-metrics-single",
            "version=0.39.0",
            "base=default",
            "valuesProfile=recipes/vm/victoria-metrics-single/0.39.0/effective-values.yaml",
            "namespace=default",
            "releaseName=victoria-metrics-single",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    },
    {
      "apiVersion": "catalog.confighub.com/v1alpha1",
      "kind": "BaseVariantRecord",
      "metadata": {
        "name": "vm-victoria-metrics-single-0-39-0-default-reviewed",
        "labels": {
          "sourceType": "helm",
          "component": "vm/victoria-metrics-single",
          "sourceVersion": "0.39.0",
          "base": "default-reviewed"
        }
      },
      "spec": {
        "source": {
          "type": "helm",
          "name": "vm/victoria-metrics-single",
          "version": "0.39.0",
          "record": "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml",
          "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/vm-victoria-metrics-single:0.39.0"
        },
        "baseVariant": {
          "name": "default-reviewed",
          "revision": "r001",
          "digest": "f9dd6161a753504ce30ac4a3e6bd514b8a657e89ec088abc7cdc35d7f535f6bf"
        },
        "configuration": {
          "format": "kubernetes-yaml",
          "objects": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default-reviewed/r001/rendered/release-objects.yaml",
          "inventory": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default-reviewed/r001/rendered/object-inventory.yaml",
          "objectCount": 3
        },
        "inputs": {
          "fixedAtBuildTime": [
            "chart=vm/victoria-metrics-single",
            "version=0.39.0",
            "base=default-reviewed",
            "valuesProfile=recipes/vm/victoria-metrics-single/0.39.0/effective-values.yaml",
            "namespace=default",
            "releaseName=victoria-metrics-single",
            "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
          ],
          "installTime": [],
          "installTimeStatus": "not-yet-declared"
        },
        "routing": {
          "routes": [],
          "targetFacts": {
            "status": "none-declared-or-observed",
            "declared": {},
            "requirements": [],
            "actions": [],
            "coverage": {
              "state": "actionable-gap",
              "reason": "This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology.",
              "declarationSource": "",
              "nextAction": "Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required."
            }
          },
          "sourceRecord": "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml"
        },
        "delivery": {
          "literalConfigOci": {
            "status": "not-published-in-this-record",
            "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
          },
          "configHubReleaseOci": {
            "status": "not-recorded-for-this-base",
            "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base."
          },
          "argoCd": "not-recorded-for-this-base",
          "flux": "not-recorded-for-this-base",
          "direct": "not-recorded-for-this-base",
          "historicalGitopsOciStatus": "yes"
        },
        "policy": {
          "profile": "catalog-standard",
          "productionAdds": [
            "human-approval"
          ]
        },
        "evidence": {
          "renderParity": "yes",
          "confighubScanOps": "yes",
          "localKind": "yes",
          "lifecycleObserved": "n/a",
          "gitopsOciLive": "yes",
          "liveDualParity": "yes",
          "twoClusterKind": "yes",
          "variantPromotion": "proven"
        },
        "operations": {
          "resourceClass": "not-yet-classified",
          "ownerClass": "not-yet-classified",
          "changeCadence": "not-yet-classified"
        }
      },
      "status": {
        "level": "available",
        "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.",
        "limits": [
          "This record does not claim that the base has been uploaded to a live ConfigHub Space.",
          "The small typed install-time surface is not yet complete for every Helm base.",
          "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
        ]
      }
    }
  ]
}
