# Helm Render Intent Contract Gaps

**UNOFFICIAL/EXPERIMENTAL.** Generated by
`scripts/generate-helm-render-intents.mjs`; do not hand-edit.

This list prevents missing lifecycle and target-prerequisite work from being
mistaken for “nothing extra required.” A row remains here until the exact base
records a route, declares its prerequisites, or explicitly records that none are
required.

## Snapshot

| Area | Gaps |
| --- | ---: |
| Lifecycle route | 3 |
| Target prerequisite | 132 |
| Total | 135 |

## Work List

| Chart | Base | Area | Why it is here | Next action | Render intent |
| --- | --- | --- | --- | --- | --- |
| aqua/trivy-operator@0.32.1 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/aqua-trivy-operator-0-32-1-default.yaml) |
| argo-cd/argo-events@2.4.21 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/argo-cd-argo-events-2-4-21-default.yaml) |
| argo-cd/argo-events@2.4.21 | `no-crds` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/argo-cd-argo-events-2-4-21-no-crds.yaml) |
| argo-cd/argo-rollouts@2.40.9 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/argo-cd-argo-rollouts-2-40-9-default.yaml) |
| argo-cd/argo-rollouts@2.40.9 | `no-crds` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml) |
| argo-cd/argo-workflows@1.0.14 | `minimal-crds` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml) |
| argo-cd/argocd-image-updater@1.2.2 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/argo-cd-argocd-image-updater-1-2-2-default.yaml) |
| autoscaler/cluster-autoscaler@9.57.0 | `default` | target-prerequisite | 1 observed prerequisite action record exists, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml) |
| aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1 | `default` | target-prerequisite | 1 observed prerequisite action record exists, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml) |
| bitnami/apache@11.4.29 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-apache-11-4-29-default.yaml) |
| bitnami/apache@11.4.29 | `legacy` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-apache-11-4-29-legacy.yaml) |
| bitnami/elasticsearch@22.1.6 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-elasticsearch-22-1-6-default.yaml) |
| bitnami/elasticsearch@22.1.6 | `ha` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-elasticsearch-22-1-6-ha.yaml) |
| bitnami/elasticsearch@22.1.6 | `legacy` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-elasticsearch-22-1-6-legacy.yaml) |
| bitnami/memcached@8.5.5 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-memcached-8-5-5-default.yaml) |
| bitnami/mongodb@19.0.7 | `static-passwords` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-mongodb-19-0-7-static-passwords.yaml) |
| bitnami/mongodb@19.0.9 | `static-passwords` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-mongodb-19-0-9-static-passwords.yaml) |
| bitnami/mongodb@19.1.0 | `static-passwords` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-mongodb-19-1-0-static-passwords.yaml) |
| bitnami/mysql@14.0.3 | `static-passwords` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-mysql-14-0-3-static-passwords.yaml) |
| bitnami/nginx@24.0.2 | `http-clusterip` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-nginx-24-0-2-http-clusterip.yaml) |
| bitnami/nginx@24.0.4 | `http-clusterip` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-nginx-24-0-4-http-clusterip.yaml) |
| bitnami/nginx@25.0.0 | `http-clusterip` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-nginx-25-0-0-http-clusterip.yaml) |
| bitnami/opensearch@2.0.10 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-opensearch-2-0-10-default.yaml) |
| bitnami/opensearch@2.0.10 | `ha` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-opensearch-2-0-10-ha.yaml) |
| bitnami/opensearch@2.0.10 | `legacy` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-opensearch-2-0-10-legacy.yaml) |
| bitnami/phpmyadmin@20.0.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-phpmyadmin-20-0-0-default.yaml) |
| bitnami/phpmyadmin@20.0.0 | `legacy` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-phpmyadmin-20-0-0-legacy.yaml) |
| bitnami/postgresql@18.6.10 | `static-passwords` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-postgresql-18-6-10-static-passwords.yaml) |
| bitnami/postgresql@18.6.7 | `static-passwords` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-postgresql-18-6-7-static-passwords.yaml) |
| bitnami/postgresql@18.7.0 | `static-passwords` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-postgresql-18-7-0-static-passwords.yaml) |
| bitnami/rabbitmq@16.0.14 | `static-passwords` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml) |
| bitnami/redis@25.5.3 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-redis-25-5-3-default.yaml) |
| bitnami/redis@27.0.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-redis-27-0-0-default.yaml) |
| bitnami/spark@10.0.3 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-spark-10-0-3-default.yaml) |
| bitnami/spark@10.0.3 | `ha` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-spark-10-0-3-ha.yaml) |
| bitnami/spark@10.0.3 | `legacy` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-spark-10-0-3-legacy.yaml) |
| bitnami/zookeeper@13.8.7 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-zookeeper-13-8-7-default.yaml) |
| bitnami/zookeeper@13.8.7 | `ha` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-zookeeper-13-8-7-ha.yaml) |
| bitnami/zookeeper@13.8.7 | `legacy` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/bitnami-zookeeper-13-8-7-legacy.yaml) |
| cloudnative-pg/cloudnative-pg@0.28.2 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml) |
| coredns/coredns@1.45.2 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/coredns-coredns-1-45-2-default.yaml) |
| crossplane-stable/crossplane@2.3.1 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/crossplane-stable-crossplane-2-3-1-default.yaml) |
| descheduler/descheduler@0.36.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/descheduler-descheduler-0-36-0-default.yaml) |
| dex/dex@0.24.0 | `default` | target-prerequisite | 2 observed prerequisite action records exist, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/dex-dex-0-24-0-default.yaml) |
| elastic/eck-operator@3.4.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/elastic-eck-operator-3-4-0-default.yaml) |
| elastic/eck-operator@3.4.0 | `ha` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/elastic-eck-operator-3-4-0-ha.yaml) |
| elastic/eck-operator@3.4.0 | `no-crds` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/elastic-eck-operator-3-4-0-no-crds.yaml) |
| elastic/kibana@8.5.1 | `default` | target-prerequisite | 2 observed prerequisite action records exist, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/elastic-kibana-8-5-1-default.yaml) |
| elastic/logstash@8.5.1 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/elastic-logstash-8-5-1-default.yaml) |
| external-dns/external-dns@1.21.1 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/external-dns-external-dns-1-21-1-default.yaml) |
| external-dns/external-dns@1.21.1 | `dry-run-txt-registry` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml) |
| external-dns/external-dns@1.21.1 | `no-crds` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/external-dns-external-dns-1-21-1-no-crds.yaml) |
| fairwinds-stable/goldilocks@10.3.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/fairwinds-stable-goldilocks-10-3-0-default.yaml) |
| falcosecurity/falco@9.0.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/falcosecurity-falco-9-0-0-default.yaml) |
| falcosecurity/falcosidekick@0.13.1 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/falcosecurity-falcosidekick-0-13-1-default.yaml) |
| fluent/fluent-bit@0.57.6 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/fluent-fluent-bit-0-57-6-default.yaml) |
| fluent/fluentd@0.5.3 | `default` | target-prerequisite | 1 observed prerequisite action record exists, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/fluent-fluentd-0-5-3-default.yaml) |
| gatekeeper/gatekeeper@3.22.2 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/gatekeeper-gatekeeper-3-22-2-default.yaml) |
| gatekeeper/gatekeeper@3.22.2 | `no-crds` | lifecycle-route | 4 source hooks are recorded, but this base has no attached lifecycle route. | Choose how each source hook runs for direct apply, Argo CD, and Flux; attach the route records and version-matched receipts. | [intent](./intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml) |
| gitlab/gitlab-runner@0.89.0 | `default` | target-prerequisite | 2 observed prerequisite action records exist, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/gitlab-gitlab-runner-0-89-0-default.yaml) |
| grafana/alloy@1.8.2 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/grafana-alloy-1-8-2-default.yaml) |
| grafana/alloy@1.8.2 | `no-crds` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/grafana-alloy-1-8-2-no-crds.yaml) |
| grafana/grafana@10.5.15 | `static-passwords` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/grafana-grafana-10-5-15-static-passwords.yaml) |
| grafana/loki@7.0.0 | `simple-scalable-minio` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/grafana-loki-7-0-0-simple-scalable-minio.yaml) |
| grafana/loki@7.0.0 | `single-binary-filesystem` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/grafana-loki-7-0-0-single-binary-filesystem.yaml) |
| grafana/promtail@6.17.1 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/grafana-promtail-6-17-1-default.yaml) |
| grafana/pyroscope@2.0.2 | `default` | target-prerequisite | 1 observed prerequisite action record exists, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/grafana-pyroscope-2-0-2-default.yaml) |
| grafana/pyroscope@2.0.2 | `ha` | target-prerequisite | 1 observed prerequisite action record exists, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/grafana-pyroscope-2-0-2-ha.yaml) |
| grafana/pyroscope@2.0.2 | `no-crds` | target-prerequisite | 1 observed prerequisite action record exists, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/grafana-pyroscope-2-0-2-no-crds.yaml) |
| grafana/rollout-operator@0.49.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/grafana-rollout-operator-0-49-0-default.yaml) |
| grafana/tempo@1.24.4 | `local-persistent` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/grafana-tempo-1-24-4-local-persistent.yaml) |
| haproxytech/kubernetes-ingress@1.52.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml) |
| hashicorp/consul@2.0.0 | `default-control-plane` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/hashicorp-consul-2-0-0-default-control-plane.yaml) |
| hashicorp/vault@0.32.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/hashicorp-vault-0-32-0-default.yaml) |
| hashicorp/vault@0.32.0 | `dev-mode` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/hashicorp-vault-0-32-0-dev-mode.yaml) |
| ingress-nginx/ingress-nginx@4.15.1 | `admission-disabled` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml) |
| ingress-nginx/ingress-nginx@4.15.1 | `internal-clusterip` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml) |
| istio/gateway@1.30.0 | `controller-default-reviewed` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/istio-gateway-1-30-0-controller-default-reviewed.yaml) |
| istio/gateway@1.30.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/istio-gateway-1-30-0-default.yaml) |
| jaegertracing/jaeger@4.8.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/jaegertracing-jaeger-4-8-0-default.yaml) |
| jetstack/cert-manager-csi-driver@v0.14.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml) |
| jetstack/cert-manager@v1.20.2 | `crds-enabled` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml) |
| kedacore/keda@2.19.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/kedacore-keda-2-19-0-default.yaml) |
| kyverno/kyverno@3.8.1 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/kyverno-kyverno-3-8-1-default.yaml) |
| linkerd/linkerd-crds@1.8.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/linkerd-linkerd-crds-1-8-0-default.yaml) |
| longhorn/longhorn@1.11.2 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/longhorn-longhorn-1-11-2-default.yaml) |
| longhorn/longhorn@1.11.2 | `ui-ingress` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/longhorn-longhorn-1-11-2-ui-ingress.yaml) |
| metrics-server/metrics-server@3.13.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/metrics-server-metrics-server-3-13-0-default.yaml) |
| minio-operator/operator@7.1.1 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/minio-operator-operator-7-1-1-default.yaml) |
| nats/nack@0.34.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/nats-nack-0-34-0-default.yaml) |
| nats/nack@0.34.0 | `no-crds` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/nats-nack-0-34-0-no-crds.yaml) |
| nats/nats@2.14.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/nats-nats-2-14-0-default.yaml) |
| nats/nats@2.14.0 | `ha` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/nats-nats-2-14-0-ha.yaml) |
| nats/surveyor@0.20.9 | `default` | target-prerequisite | 2 observed prerequisite action records exist, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/nats-surveyor-0-20-9-default.yaml) |
| nats/surveyor@0.20.9 | `default-reviewed` | target-prerequisite | 2 observed prerequisite action records exist, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/nats-surveyor-0-20-9-default-reviewed.yaml) |
| nfs-subdir-external-provisioner/nfs-subdir-external-provisioner@4.0.18 | `default` | target-prerequisite | 1 observed prerequisite action record exists, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml) |
| opencost/opencost@2.5.21 | `default` | target-prerequisite | 2 observed prerequisite action records exist, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/opencost-opencost-2-5-21-default.yaml) |
| percona/pg-operator@3.0.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/percona-pg-operator-3-0-0-default.yaml) |
| percona/psmdb-operator@1.22.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/percona-psmdb-operator-1-22-0-default.yaml) |
| percona/psmdb-operator@1.22.0 | `no-crds` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/percona-psmdb-operator-1-22-0-no-crds.yaml) |
| percona/pxc-operator@1.19.1 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/percona-pxc-operator-1-19-1-default.yaml) |
| prometheus-community/alertmanager@1.37.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-alertmanager-1-37-0-default.yaml) |
| prometheus-community/alertmanager@1.37.0 | `ha` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-alertmanager-1-37-0-ha.yaml) |
| prometheus-community/kube-prometheus-stack@86.1.0 | `default` | lifecycle-route | 8 lifecycle route mappings are attached, but 8 still use evidence from 85.3.3 instead of 86.1.0. | Run the lifecycle proof for 86.1.0, then update the route source version and receipt. | [intent](./intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml) |
| prometheus-community/kube-prometheus-stack@86.1.0 | `no-crds` | lifecycle-route | 8 lifecycle route mappings are attached, but 8 still use evidence from 85.3.3 instead of 86.1.0. | Run the lifecycle proof for 86.1.0, then update the route source version and receipt. | [intent](./intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml) |
| prometheus-community/kube-state-metrics@7.4.0 | `cluster-metrics-readonly` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml) |
| prometheus-community/kube-state-metrics@7.4.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml) |
| prometheus-community/prometheus@29.8.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-prometheus-29-8-0-default.yaml) |
| prometheus-community/prometheus@29.8.0 | `server-only-ephemeral` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml) |
| prometheus-community/prometheus@29.9.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-prometheus-29-9-0-default.yaml) |
| prometheus-community/prometheus@29.9.0 | `server-only-ephemeral` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml) |
| prometheus-community/prometheus-adapter@5.3.0 | `apiservice-v1-capability` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml) |
| prometheus-community/prometheus-adapter@5.3.0 | `cluster-metrics-readonly` | target-prerequisite | 1 observed prerequisite action record exists, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml) |
| prometheus-community/prometheus-adapter@5.3.0 | `default` | target-prerequisite | 1 observed prerequisite action record exists, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml) |
| prometheus-community/prometheus-blackbox-exporter@11.10.0 | `cluster-metrics-readonly` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml) |
| prometheus-community/prometheus-blackbox-exporter@11.10.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml) |
| prometheus-community/prometheus-node-exporter@4.55.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml) |
| prometheus-community/prometheus-operator-crds@29.0.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml) |
| prometheus-community/prometheus-pushgateway@3.6.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml) |
| rook-release/rook-ceph@v1.19.5 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/rook-release-rook-ceph-v1-19-5-default.yaml) |
| runix/pgadmin4@1.62.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/runix-pgadmin4-1-62-0-default.yaml) |
| sealed-secrets/sealed-secrets@2.18.6 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml) |
| sealed-secrets/sealed-secrets@2.18.6 | `no-crds` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml) |
| secrets-store-csi-driver/secrets-store-csi-driver@1.6.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml) |
| secrets-store-csi-driver/secrets-store-csi-driver@1.6.0 | `sync-secret-rotation` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml) |
| stakater/reloader@2.2.12 | `controller-default-reviewed` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml) |
| stakater/reloader@2.2.12 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/stakater-reloader-2-2-12-default.yaml) |
| strimzi/strimzi-kafka-operator@1.0.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml) |
| traefik/traefik@40.2.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/traefik-traefik-40-2-0-default.yaml) |
| traefik/traefik@40.2.0 | `no-crds` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/traefik-traefik-40-2-0-no-crds.yaml) |
| velero/velero@12.0.1 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/velero-velero-12-0-1-default.yaml) |
| velero/velero@12.0.1 | `no-crds` | target-prerequisite | 1 observed prerequisite action record exists, but the base does not declare the prerequisite. | Add the observed prerequisite to spec.targetFacts in the base variant, then rerun its proof. | [intent](./intents/velero-velero-12-0-1-no-crds.yaml) |
| vm/victoria-logs-single@0.12.5 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/vm-victoria-logs-single-0-12-5-default.yaml) |
| vm/victoria-metrics-single@0.39.0 | `default` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/vm-victoria-metrics-single-0-39-0-default.yaml) |
| vm/victoria-metrics-single@0.39.0 | `default-reviewed` | target-prerequisite | This base has not recorded whether it needs a Secret, CRD, namespace, value, storage service, external API, or target topology. | Review the base and record its target prerequisites, or add an explicit empty targetFacts declaration when none are required. | [intent](./intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml) |

Machine-readable copy: [contract-gaps.csv](./contract-gaps.csv).