Outcome Evidence Contract

A repository document, rendered for the site. View source markdown.

Generated at: 2026-07-30T12:38:02.000Z UTC · source: committed helm-expt evidence for this rendered repository document.

This generated contract answers a simple product question: for each user-visible outcome, what do we currently promise, what evidence backs it, what command checks it, and where are the limits?

It is intentionally narrower than the full proof corpus. The rows below are the outcomes a Helm user, platform team, or reviewer is likely to ask about first.

Summary

outcomes: 11
backed: 2
partial: 6
gap: 2
planned: 0
refused: 1

Outcome Rows

OutcomeStatusCurrent metricScopeNext action
Can I see exactly what the chart will produce before I install it?backedrender parity rows 199/199 goodchart/version/base under recorded values and capability profileKeep new bases on the render-parity lane before publishing them.
Can I start from a recommended public catalog path instead of inventing values?partialcatalog-supported charts 20/100 partial; top20 start-here base variants 26/42 partial; public catalog answers 20/100 partialpublic catalog entries and their named start-here basesPromote the next proof-grade charts only after base usefulness and live lanes are reviewed.
Can I prove the ConfigHub/installer path did not secretly change Helm output?backedrender parity rows 199/199 good; two-cluster semantic parity pass rows 155/179 good; ConfigHub/OCI semantic parity defect receipts 0/199 goodselected chart/version/base rows with committed receiptsAdd or refresh live parity receipts when a base, chart version, or target profile changes.
Can I manage the rendered objects as ConfigHub configs with scans and safe operations?partialin-ConfigHub proof rows 198/199 partial; runtime/GitOps wave rows 11/11 partial; high-priority scan rows 4/20 partialcatalog rows with committed ConfigHub upload, scan, safe-op, or runtime receiptsExpand ConfigHub scan/safe-operation receipts beyond the current catalog-supported rows.
Can Argo or Flux pull ConfigHub OCI and can I see that the workload actually works?partialGitOps/OCI live pass rows 139/199 partial; local live rows 148/199 partial; ConfigHub/OCI semantic parity defect receipts 0/199 goodlive receipts for declared targets; local live is not the same as GitOps liveKeep GitOps/runtime receipts fresh and add more target-bound cub-scout witness runs.
Can I create variants without falling back into hidden Helm values sprawl?partialvariant-rich maintained chart rows 77/110 partial; derived variant golden rows 10/10 good; target-bound derived variant receipts 6/10 partialbase variants are render-time choices; derived variants are post-render refinementsAdd more target-bound derived variant receipts and keep routing rules visible before OCI delivery.
Can wrapper charts, values files, and customer overlays be supported without pretending they are simple public-chart installs?gaptop100 user-shaped variant queue 33/80 partial; useful-base proposal rows 43 partial; useful-base realized rows 10/43 partial; useful-base proposals not yet built 33/43 gap; top100 promotion-review queue 37/80 partialmanaged imports and reviewed overlay paths; arbitrary private overlays are not public-catalog guaranteesConvert more user-shaped variant queue rows into reviewed base or overlay examples.
Can hooks, CRDs, webhooks, and controller-populated fields be handled without lying about static YAML?partialtop100 source-scan hook charts 11/100 partial; hook lifecycle observations present 5/5 good; related lifecycle observation receipts passing 4/4 goodmaintained hook queue and candidate source-hook routes; every hook class remains per-chart until observed or refusedTurn candidate hook routes into maintained lifecycle receipts, especially for top-100 source hook charts.
Can I tell what is production-supported, what is review-ready, and what is only proof evidence?partialsupported decision artifacts 17/20 partial; top20 production-review-ready charts 19/20 partial; rejected decision artifacts 1/20 partialtarget-scoped support decisions; production support is not implied by render parityCreate broader or stricter support decisions only after target, image, scan, lifecycle, and live evidence are refreshed.
Can this scale from 20 charts to 100 or 500 without turning into spreadsheet theater?gapproof-grade non-catalog charts 80/100 partial; rows with current recipe proof 91/500 partial; rows with no current recipe proof 409/500 gaptop-100 has maintained proof artifacts; top-500 is planning/reconnaissance unless a row links to current proofPromote proof-grade rows through useful-base review, selected live lanes, and production disposition.
Can I trust the project not to overclaim when a lane is missing or blocked?refusedConfigHub/OCI semantic parity defect receipts 0/199 good; two-cluster semantic parity defect receipts 16/179 good; source-scanned but not surfaced axes 5/26 gappublic claims must name chart, version, base, lane, and target profileKeep rejected, partial, planned, watch, blocked, and missing statuses visible in public-facing summaries.

Evidence And Commands

OutcomeEvidenceVerify
inspect-before-installdata/outcome-coverage/base-outcomes.csv; data/claims-register/summary.md; data/chart-use-guide/summary.md; data/live-kind-parity/summary.md; data/live-helm-confighub-compare/summary.mdnpm run outcomes:verify; npm run claims:register:verify
try-a-supported-public-pathCATALOG.md; data/chart-use-guide/summary.md; data/top20-base-readiness/summary.md; site/charts/index.html; data/top100-readiness/readiness.csv; data/top20-base-readiness/base-readiness.csv; data/chart-use-guide/chart-use-guide.csv; data/status-dashboard/top20-status.csv; data/live-e2e/summary.md; data/outcome-coverage/base-outcomes.csvnpm run top20:base-readiness:verify; npm run chart-use:guide:verify; npm run site:verify
prove-helm-equivalencedata/live-kind-parity/summary.md; data/live-helm-confighub-compare/summary.md; data/outcome-coverage/base-outcomes.csv; data/live-kind-parity/summary.csv; data/live-helm-confighub-compare/summary.csvnpm run kind-parity:verify; npm run live-parity:verify; npm run outcomes:verify
manage-rendered-configs-in-confighubdata/external-scan-lane/summary.md; data/scan-disposition-workdown/summary.md; runs; data/outcome-coverage/base-outcomes.csv; data/runtime-gitops/wave1.csv; data/scan-disposition-workdown/workdown.csv; docs/user/tutorial-sequence.md; docs/demo/redis/function-scan-lane.md; docs/demo/redis/safe-ops-lane.mdnpm run top20:verify-confighub-proof; npm run external-scan:verify; npm run scan-disposition:workdown:verify
deliver-through-gitops-and-observe-livedata/runtime-gitops/summary.md; data/live-e2e/summary.md; data/live-e2e/cub-scout-watchlist.md; data/outcome-coverage/base-outcomes.csv; data/live-helm-confighub-compare/summary.csv; data/runtime-gitops/wave1.csv; data/serverless-oci-gitops-proof/summary.md; data/kubara-oci-delivery-proof/summary.md; data/sveltos-oci-delivery-proof/summary.md; docs/user/adopting-existing-apps.md; docs/user/chain-of-proof.mdnpm run runtime-gitops:wave:verify; npm run top20:verify-local-e2e; npm run live-parity:verify
create-safe-variantsdocs/user/creating-variants.md; data/variant-goldens/derived-expansion-wave/work-orders.csv; data/outcome-coverage/derived-variant-outcomes.csv; data/outcome-coverage/chart-outcomes.csv; runs/derived-variant-target-bound; docs/user/change-routing-before-oci.md; data/variant-goldens/redis-prod-us-east/README.mdnpm run variant-goldens:verify; npm run derived-variants:verify; npm run derived-variants:target-bound:verify
route-custom-overlaysdocs/user/custom-overlays.md; docs/reference/customization-algorithm.md; data/managed-overlay-goldens/external-dns-customer-acme-prod/README.md; data/useful-base-design-queue/summary.md; data/useful-base-realization-wave/summary.md; data/top100-coverage/work-queue.csv; data/useful-base-design-queue/queue.csv; data/useful-base-realization-wave/wave.csv; docs/corpus/kubara-customized-overlays.mdnpm run variant-goldens:verify; npm run top100:coverage:verify; npm run top100:useful-base-queue:verify; npm run top100:useful-base-realization:verify
handle-hooks-and-lifecycledata/hook-lifecycle/summary.md; data/hook-coverage/summary.md; data/lifecycle-boundary/summary.md; data/lifecycle-observations/cert-manager-eso/summary.md; data/hook-lifecycle/source-top100-hooks.csv; data/hook-lifecycle/maintained-hook-queue.csv; data/lifecycle-observations/cert-manager-eso/summary.csv; docs/user/hook-lifecycle-strategy.md; data/hooks-crds-app/summary.md; data/kps-lifecycle-route-proof/summary.md; runs/hook-lifecycle/gatekeeper-gatekeeper/default/latest/receipt.yaml; runs/kps-lifecycle-route-proof/receipt.yamlnpm run hooks:lifecycle:verify; npm run hooks:coverage:verify; npm run lifecycle:boundary:verify; npm run lifecycle:cert-manager-eso:verify
make-production-scope-explicitdata/production-support-decisions/summary.md; data/hard-chart-production-packets/summary.md; data/production-disposition/summary.md; data/production-support-decisions/decisions.csv; data/production-disposition/top20.csv; data/status-dashboard/top20-status.csv; data/live-e2e/summary.md; data/top20-base-readiness/summary.md; data/outcome-coverage/base-outcomes.csvnpm run production:support-decisions:verify; npm run hard-charts:packets:verify; npm run production:disposition:verify
scale-the-catalog-honestlydata/top100-readiness/summary.md; data/top100-coverage/summary.md; data/top500-catalog-analysis/summary.md; data/status-dashboard/summary.md; data/top100-readiness/readiness.csv; data/top500-catalog-analysis/review.csv; data/top100-catalog-analysis/summary.md; data/next80-full-proofs/summary.mdnpm run top100:readiness:verify; npm run top100:coverage:verify; npm run top500:catalog:verify; npm run status:dashboard:verify
keep-overclaims-outdata/claims-register/summary.md; docs/user/what-we-refuse-to-claim.md; data/status-dashboard/summary.md; data/live-helm-confighub-compare/summary.csv; data/live-kind-parity/summary.csv; data/quirk-coverage/coverage.csv; docs/user/current-proof-status.md; docs/user/live-parity.md; data/live-parity-rerun-plan/summary.mdnpm run claims:register:verify; npm run docs:verify; npm run status:dashboard:verify

Reading Rule

Use the narrowest true status:

Regenerate:

npm run outcomes:contract
npm run outcomes:contract:verify