top repos

{
  "id": "P14-R-001",
  "repo": "xataio/pgroll",
  "category": "db_migration",
  "source_url": "https://github.com/xataio/pgroll",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Zero-downtime reversible Postgres schema migrations by serving old and new schema versions simultaneously via versioned views over physical tables; expand/contract with backfill triggers.",
  "runtime_profile_relevance": "Directly models the 'two client app versions live at once' problem. Clients pick a version with SET search_path TO 'public_<migration>', which is exactly the per-profile version selection Actionist needs — but bounded to 2.",
  "rollback_restores": "Drops the new versioned view schema and the added physical columns/tables, leaving the old schema as it was before migration start. Reversible only while the migration is in-flight (not completed).",
  "rollback_omits": "Once 'pgroll complete' runs, old columns/tables are dropped and rollback is no longer possible — the reversibility window closes permanently. Does not restore application config or data written through the new schema's semantics.",
  "digest_pinning": "n/a",
  "production_evidence": "Xata ships it as a product component; 6562 stars. No independent large-scale postmortem observed.",
  "license_observed": "Apache-2.0 — README: 'This project is licensed under the Apache License 2.0'; GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-19T06:03:51Z (GitHub API), not archived",
  "limitations": "CONFIRMED: exactly two concurrent schema versions (old + new). README says 'multiple schema versions' but every concrete statement is a pair: 'Keep old and new schema versions working simultaneously.' No support for K long-lived versions.",
  "disposition": "top10",
  "top10_rank": 1,
  "top10_rationale": "The closest OSS analogue to Actionist's multi-version requirement, and the tool that most precisely defines the gap: it proves versioned-view schema switching works in production Postgres, while capping K at 2. Actionist needs K>2 across independently-upgrading client apps, so pgroll is the mechanism to extend, not adopt as-is."
}

{
  "id": "P14-R-002",
  "repo": "fabianlindfors/reshape",
  "category": "db_migration",
  "source_url": "https://github.com/fabianlindfors/reshape",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Zero-downtime Postgres schema migration tool using views + triggers so old and new schema are both usable during rollout.",
  "runtime_profile_relevance": "Same versioned-view pattern as pgroll; migration start/complete/abort maps to a three-phase release with an explicit abort path.",
  "rollback_restores": "'reshape migration abort' removes the new schema, triggers and intermediate data, restoring the pre-migration state.",
  "rollback_omits": "After 'migration complete' the old schema, triggers and intermediate data are removed — no rollback afterwards. Does not touch application-side config.",
  "digest_pinning": "n/a",
  "production_evidence": "1850 stars; no documented large-scale production users or postmortems found.",
  "license_observed": "MIT — README: 'Reshape is released under the MIT license'; GitHub API license.spdx_id = MIT",
  "maintenance_state": "Nominally active — pushed_at 2026-08-04T12:45:48Z, not archived, 7 open issues. README points readers to the author's newer project (pgfdb), a possible attention-shift signal.",
  "limitations": "CONFIRMED: exactly two concurrent versions. 'During a migration, Reshape ensures both the old and new schema are available at the same time.' Not K versions.",
  "disposition": "top10",
  "top10_rank": 6,
  "top10_rationale": "Independent confirmation that the versioned-view technique converges on the same design under a permissive MIT licence, which matters if Actionist must vendor and extend rather than adopt. Ranked below pgroll on maintenance depth and adoption."
}

{
  "id": "P14-R-003",
  "repo": "computesdk/computesdk",
  "category": "isolation",
  "source_url": "https://github.com/computesdk/computesdk/blob/main/packages/computesdk/src/types/universal-sandbox.ts",
  "observed_date": "2026-08-27",
  "evidence_class": "observed_behavior",
  "claim": "Multi-provider sandbox abstraction over 28+ compute providers with a single 'Universal Sandbox Interface'. READ THE SOURCE: the canonical interface does NOT model pause/resume.",
  "runtime_profile_relevance": "Proposed as the portability layer under E2B for Actionist preview isolation. Portability is real for exec+filesystem only.",
  "rollback_restores": "Sandbox destroy/recreate from a snapshotId. For E2B, snapshotId is passed as a template/image ID — a filesystem image, not a memory image.",
  "rollback_omits": "Memory/process state. No pause/resume in the abstraction, so a restored sandbox is a cold boot: running processes, loaded variables and in-memory data are lost.",
  "digest_pinning": "unknown",
  "production_evidence": "none_found — 260 stars, self-described as a 'benchmark harness'. No documented production users at scale.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-26T11:11:04Z",
  "limitations": "DECISIVE FINDING. The Sandbox interface in universal-sandbox.ts (271 lines, read in full) declares only: sandboxId, provider, runCommand, getInfo, getUrl, destroy, filesystem{readFile,writeFile,readdir,mkdir,exists,remove}. No pause/resume/suspend. SandboxInfo.status is typed 'running'|'stopped'|'error' — it cannot even REPRESENT a paused sandbox. packages/provider/src/index.ts has 0 occurrences of pause/resume/memory. The E2B provider (packages/e2b/src/index.ts) has 0 occurrences of pause, resume, keepMemory, or memory. The CreateOS provider header states at L10-11 that getInstance() 'hands callers the full stateful API (pause / resume / fork / disks / networks / bandwidth) that ComputeSDK's core surface does not model' — i.e. pause is reachable ONLY through the provider-specific escape hatch, which forfeits portability by definition.",
  "disposition": "top10",
  "top10_rank": 9,
  "top10_rationale": "Included because the lane's top open question resolves against it. As a portable abstraction it degrades exactly as feared — to a filesystem lowest common denominator — so if Actionist depends on memory-preserving pause it must bind to E2B directly or use getInstance() and accept a non-portable path. Useful as a provider-inventory map, not as the load-bearing abstraction."
}

{
  "id": "P14-R-004",
  "repo": "e2b-dev/infra",
  "category": "isolation",
  "source_url": "https://docs.e2b.dev/sandbox/persistence",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Firecracker-based sandbox infrastructure with memory-preserving pause/resume. Docs: 'This includes not only state of the sandbox's filesystem but also the sandbox's memory' and 'all the running processes, loaded variables, data, etc. will be restored.'",
  "runtime_profile_relevance": "The memory-preserving pause is the justifying property for warm preview environments: a paused preview restores in ~1s with processes intact rather than cold-booting a dev server.",
  "rollback_restores": "Filesystem AND memory state — running processes, loaded variables and in-process data. Resume via Sandbox.connect(sandboxId), which auto-resumes a paused sandbox.",
  "rollback_omits": "Does not restore anything outside the sandbox boundary: external DB state, config/secrets held by the control plane, or work committed to other services during the paused window.",
  "digest_pinning": "unknown",
  "production_evidence": "Widely used as the sandbox layer for AI coding products; performance figures are documented first-party ('approximately 4 seconds per 1 GiB of RAM' to pause, 'approximately 1 second' to resume) rather than independently benchmarked here.",
  "license_observed": "Apache-2.0 — VERIFIED THIS RUN by reading https://raw.githubusercontent.com/e2b-dev/infra/main/LICENSE: standard 'Apache License, Version 2.0, January 2004', 'Copyright 2023 FoundryLabs, Inc.' NO Additional Use Grant, NO field-of-use limitation, NO hosted-service restriction, NO change-date mechanism — i.e. genuinely Apache-2.0, not ELv2 or BSL wearing an Apache name. GitHub API license.spdx_id = Apache-2.0 agrees.",
  "maintenance_state": "Active — pushed_at 2026-08-27 (GitHub API).",
  "limitations": "Memory preservation has a cost proportional to RAM (~4s/GiB to pause). keepMemory:false is an explicit opt-out that reverts to a filesystem-only snapshot which reboots on resume — confirming the two modes are genuinely different products, and that a wrapper defaulting to snapshot silently selects the weaker one.",
  "disposition": "top10",
  "top10_rank": 2,
  "top10_rationale": "The only surveyed sandbox that documents memory-state restore as a first-class lifecycle operation, and the property that makes warm previews cheap. Wave-1's read stands: this is the justifying capability — and this run shows the proposed ComputeSDK wrapper cannot express it."
}

{
  "id": "P14-R-005",
  "repo": "argoproj/argo-rollouts",
  "category": "progressive_delivery",
  "source_url": "https://argo-rollouts.readthedocs.io/en/stable/features/rollback/",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Progressive delivery controller for Kubernetes providing blue-green and canary strategies with analysis-gated promotion and a rollback window.",
  "runtime_profile_relevance": "Models gated promotion of one workload shape (long-running service). Does not model heterogeneous profiles — a scheduled job or a package-in-host artifact has no ReplicaSet to promote.",
  "rollback_restores": "A prior ReplicaSet, i.e. the pod template (.spec.template) including the container image reference. With the rollback window configured, promotion to a ReplicaSet inside the window 'will skip all steps'.",
  "rollback_omits": "CONFIRMED STRUCTURAL GAP: ConfigMap and Secret CONTENTS, and database schema. A K8s revision is a ReplicaSet, which stores only the pod template — the NAME of a referenced ConfigMap, not its contents. Rolled-back pods read whatever the ConfigMap holds now. Worse, editing a ConfigMap in place does not change the pod template, so it creates no new revision and triggers no rollout — there is nothing to roll back to. The Argo Rollouts rollback doc never mentions ConfigMaps, Secrets or schema at all.",
  "digest_pinning": "false — by default the pod template carries whatever image reference the user supplies, commonly a tag. Digest pinning is a user discipline, not enforced by the controller.",
  "production_evidence": "3561 stars, CNCF-adjacent, widely deployed with Argo CD. Documented feature set is first-party; no independent postmortem read this run.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Kubernetes-only. Rollback is artifact-scoped, exactly the gap wave-1 found in Vercel and Fly, reproduced in OSS. Mitigation requires user discipline (content-hashed ConfigMap names via kustomize configMapGenerator, or a checksum annotation on the pod template) to pull config into the revision.",
  "disposition": "top10",
  "top10_rank": 3,
  "top10_rationale": "The clearest OSS proof that artifact rollback != composition rollback, and it fails in a MORE dangerous way than the commercial PaaS platforms: an in-place config edit produces no revision at all, so the platform cannot even tell you a change happened. Actionist's composition manifest must therefore carry config by content hash, not by reference."
}

{
  "id": "P14-R-006",
  "repo": "argoproj/argo-cd",
  "category": "progressive_delivery",
  "source_url": "https://github.com/argoproj/argo-cd",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Declarative GitOps continuous delivery for Kubernetes; desired state lives in git, controller reconciles cluster to it.",
  "runtime_profile_relevance": "The git-as-source-of-truth model is the closest OSS analogue to a pinned composition: a commit SHA names an entire desired state, not one artifact.",
  "rollback_restores": "Reverting to a prior git commit restores every manifest tracked in that commit — which, unlike a ReplicaSet revision, CAN include ConfigMap contents if they are committed to git.",
  "rollback_omits": "Anything not in git: Secrets held externally (sealed-secrets/vault references resolve at apply time to CURRENT values), database schema, and any out-of-band cluster mutation. Reconciliation restores manifests, not data.",
  "digest_pinning": "false by default — manifests commonly reference image tags; digest pinning is available but is a user convention.",
  "production_evidence": "24005 stars, CNCF graduated project, very broad enterprise deployment. Adoption is well established; no specific postmortem read this run.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "Kubernetes-only, so it cannot express Actionist's package-in-host or microfrontend profiles. Secret indirection reintroduces the config-rollback gap even in a GitOps model.",
  "disposition": "top10",
  "top10_rank": 4,
  "top10_rationale": "Demonstrates the one architecture in this survey where rollback CAN restore a whole composition rather than one artifact — because the unit of versioning is a commit covering all manifests. That is the pattern Actionist should copy, with the explicit caveat that externally-resolved secrets punch a hole straight through it."
}

{
  "id": "P14-R-007",
  "repo": "keptn/keptn",
  "category": "progressive_delivery",
  "source_url": "https://github.com/keptn/keptn",
  "observed_date": "2026-08-27",
  "evidence_class": "observed_behavior",
  "claim": "Event-driven control plane for continuous delivery and automated operations with quality gates.",
  "runtime_profile_relevance": "Quality-gate concept is relevant to workflow qualification, but the project is dead.",
  "rollback_restores": "n/a — not evaluated further.",
  "rollback_omits": "n/a",
  "digest_pinning": "unknown",
  "production_evidence": "none_found",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "ARCHIVED. GitHub API archived=true, pushed_at 2023-12-21 — no activity in ~2.7 years.",
  "limitations": "Archived and unmaintained; must not be adopted.",
  "disposition": "excluded",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-008",
  "repo": "flipt-io/flipt",
  "category": "progressive_delivery",
  "source_url": "https://raw.githubusercontent.com/flipt-io/flipt/main/LICENSE",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Self-hosted feature flag and experimentation server.",
  "runtime_profile_relevance": "Feature flags decouple deploy from release, giving a rollback path that does not require redeploying an artifact — relevant to fast composition-level kill switches.",
  "rollback_restores": "Flag state only — flipping a flag reverts BEHAVIOUR without touching the deployed artifact.",
  "rollback_omits": "Everything else: the artifact, config, and schema all stay where they are. A flag flip cannot undo a migration already applied.",
  "digest_pinning": "n/a",
  "production_evidence": "4883 stars; no large-scale production evidence read this run.",
  "license_observed": "GPL-3.0 — READ THE LICENSE BODY: GitHub API reports NOASSERTION, but the LICENSE file is the GNU General Public License Version 3, 29 June 2007. NOT FSL and NOT BSL: no competing-product restriction and no change date. Note GPL-3.0 copyleft: 'does not permit incorporating your program into proprietary programs.'",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "GPL-3.0 is a genuine constraint if Actionist were to embed or modify it; running it as a separate self-hosted service is the safer posture. The API-badge NOASSERTION would have hidden this.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-009",
  "repo": "bytebase/bytebase",
  "category": "db_migration",
  "source_url": "https://raw.githubusercontent.com/bytebase/bytebase/main/LICENSE",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Database DevOps and CI/CD tool for schema change management, review and rollout across engines.",
  "runtime_profile_relevance": "Governs schema change as a reviewed, staged rollout — the release-management half of the migration problem rather than the concurrent-version half.",
  "rollback_restores": "Schema change rollout state; engine-dependent.",
  "rollback_omits": "Does not provide concurrent multi-version schema access the way pgroll/reshape do — it governs the change process, it does not serve two schemas at once.",
  "digest_pinning": "n/a",
  "production_evidence": "14421 stars; no independent postmortem read this run.",
  "license_observed": "DUAL/SPLIT — READ THE LICENSE BODY: GitHub API reports NOASSERTION. The LICENSE splits the repo: files in directories containing 'enterprise', PLUS 'Any code controlling feature, permission, role and plan enablement', fall under a separate LICENSE.enterprise; everything else is 'MIT Expat'.",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "LICENCE HAZARD: the enterprise carve-out is a FUNCTIONAL description ('code controlling feature, permission, role and plan enablement'), not a file-path boundary, so the MIT/enterprise line cannot be determined from the directory tree alone. LICENSE.enterprise was not read this run — its restrictions are UNVERIFIED.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-010",
  "repo": "golang-migrate/migrate",
  "category": "db_migration",
  "source_url": "https://raw.githubusercontent.com/golang-migrate/migrate/master/LICENSE",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Database migration CLI and Go library supporting many database drivers, with up/down migrations.",
  "runtime_profile_relevance": "The baseline imperative migration model: an ordered list of up/down steps, one live schema at a time.",
  "rollback_restores": "Only what the hand-written 'down' migration says to restore. Rollback correctness is entirely the author's responsibility — the tool does not derive it.",
  "rollback_omits": "Data destroyed by a down migration is not recoverable; a down migration that drops a column loses its data. No concurrent old/new schema, so rolling back requires the application to already be compatible.",
  "digest_pinning": "n/a",
  "production_evidence": "18854 stars — the most widely adopted tool in the migration category by that measure.",
  "license_observed": "MIT — READ THE LICENSE BODY: GitHub API reports NOASSERTION (due to dual copyright lines from the mattes/migrate fork), but the file is 'The MIT License (MIT)' with copyright lines for Matthias Kadenbach (2016) and Dale Hui (2018).",
  "maintenance_state": "Active — pushed_at 2026-07-05",
  "limitations": "Single live schema version. Cannot support two application versions across a migration, which is precisely the property Actionist needs. Useful as the execution layer beneath a versioning scheme, not as the versioning scheme.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-011",
  "repo": "firecracker-microvm/firecracker",
  "category": "isolation",
  "source_url": "https://github.com/firecracker-microvm/firecracker/blob/main/docs/snapshotting/snapshot-support.md",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "MicroVM monitor providing hardware-virtualized isolation with full-state snapshotting; snapshots save 'the guest memory' plus 'the emulated HW state (both KVM and Firecracker emulated HW)'.",
  "runtime_profile_relevance": "The substrate under E2B and most serious sandbox providers. Restore uses a MAP_PRIVATE mapping giving 'runtime on-demand loading of memory pages', which is why resume is fast.",
  "rollback_restores": "Full guest memory (memory file holds 'a full copy of the guest memory') and device/emulation state from the microVM state file.",
  "rollback_omits": "CRITICAL CAVEATS, first-party: (a) 'Guest network connectivity is not guaranteed to be preserved after resume'; open vsock connections 'are closed'. (b) Wall-clock continues from snapshot time, so the guest clock is wrong on resume. (c) Disk files are NOT part of the snapshot — 'managed by the users'. (d) MMDS data store 'is not persisted across snapshots'; logger and metrics config must be reconfigured.",
  "digest_pinning": "n/a — but the memory file 'must be considered immutable'; external modification 'corrupts the guest memory and leads to undefined behavior', which is a content-integrity requirement analogous to digest pinning.",
  "production_evidence": "36309 stars. Underpins AWS Lambda and Fargate at very large scale, and is the substrate for E2B and most sandbox vendors surveyed. The strongest production evidence in this census.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "MAJOR SECURITY CAVEAT for Actionist's fan-out preview model: resuming the SAME snapshot more than once is treated as insecure. Guest data 'assumed to be unique may in fact not be' — identifiers, RNG seeds, entropy pool, and cryptographic tokens are 'replicated across multiple microVMs resumed from the same snapshot'. VMGenID reseeds the Linux PRNG on kernel >=5.18 but other state still duplicates, and de-duplication is left to users. Also: restore requires identical software/hardware config; arm64 cannot restore across GIC versions.",
  "disposition": "top10",
  "top10_rank": 5,
  "top10_rationale": "The ground truth beneath the whole isolation category, and it supplies the caveat nobody else states: if Actionist forks many previews from one warm snapshot, every fork shares seeds and tokens unless explicitly re-randomized. That is a correctness and security requirement on the preview design, discoverable only by reading these docs."
}

{
  "id": "P14-R-012",
  "repo": "getsentry/sentry",
  "category": "observability",
  "source_url": "https://github.com/getsentry/sentry/blob/master/LICENSE.md",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Error tracking and performance monitoring platform, self-hostable.",
  "runtime_profile_relevance": "Cross-profile error aggregation: one place to see failures from a microfrontend, a worker and a scheduled job, which is what whole-workflow verification needs.",
  "rollback_restores": "n/a — observability, not a release mechanism. Relevant as the signal that TRIGGERS a rollback.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "44628 stars; very broad commercial and self-hosted adoption.",
  "license_observed": "FSL-1.1-Apache-2.0 — READ THE LICENSE BODY (GitHub API reports NOASSERTION). Header: 'Functional Source License, Version 1.1, Apache 2.0 Future License'. Converts to Apache-2.0 after the change period.",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "LICENCE CONSTRAINT that matters for a client deliverable: FSL forbids a 'Competing Use', defined as making the Software available in a commercial product or service that 'substitutes for the Software' or 'offers the same or substantially similar functionality'. Permitted Purposes explicitly include 'for your internal use and access' and use 'in connection with professional services that you provide to a licensee'. So Actionist self-hosting Sentry for its own ops is permitted; bundling it INTO a client-facing product as the monitoring feature needs legal review.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-013",
  "repo": "windmill-labs/windmill",
  "category": "worker_runtime",
  "source_url": "https://github.com/windmill-labs/windmill/blob/main/LICENSE",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Developer platform turning scripts into workflows, UIs, and scheduled jobs across multiple languages.",
  "runtime_profile_relevance": "HIGH — natively runs the mixed shapes Actionist needs: scripts, flows, scheduled jobs and worker execution in one runtime, across languages.",
  "rollback_restores": "Script/flow versions are tracked, so a prior version can be redeployed.",
  "rollback_omits": "Does not restore external side effects of a job already executed (rows written, emails sent, third-party API calls). Job-level rollback is inherently partial.",
  "digest_pinning": "unknown",
  "production_evidence": "17693 stars; no independent postmortem read this run.",
  "license_observed": "AGPLv3 + proprietary enterprise — READ THE LICENSE BODY (GitHub API reports NOASSERTION). 'Every file is under License AGPL unless otherwise specified.' backend/ is AGPLv3 'except any snippets of code under the compile flag \"enterprise\"'; frontend/ AGPLv3 'except any snippets of code that require a positive license check'. The clients (python-client/, deno-client/, go-client/, powershell-client/) and the OpenAPI/OpenFlow spec are Apache-2.0.",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "LICENCE HAZARD, explicit in the text: 'Private and public forks MUST not include any of the above proprietary and commercial code.' AGPL network-copyleft applies to the self-hosted server, so building Actionist's product surface on a modified Windmill would trigger source obligations. The Apache-2.0 client SDKs are the safe integration surface.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-014",
  "repo": "module-federation/core",
  "category": "microfrontend",
  "source_url": "https://github.com/module-federation/core",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Runtime module federation: independently built and deployed JS bundles load each other's modules at runtime with shared dependency negotiation.",
  "runtime_profile_relevance": "DIRECTLY models Actionist's microfrontend profile — independently-versioned capabilities composed into one host at runtime, which is the defining mixed-shape case.",
  "rollback_restores": "Reverting a remote's manifest/entry URL points the host back at a prior remote build. Because remotes are independently deployed, one capability can be rolled back without redeploying the host.",
  "rollback_omits": "Shared-dependency negotiation is resolved at RUNTIME against whatever versions are live, so rolling back one remote can change the shared singleton resolution for others. Does not restore host-side config or any state the reverted remote already wrote.",
  "digest_pinning": "false by default — remotes are referenced by URL (commonly a mutable path such as remoteEntry.js). Content-addressed remote entries are achievable but are a user convention, mirroring the Render mutable-tag hazard from wave-1.",
  "production_evidence": "2624 stars on the core repo, but the technique is Webpack/Rspack-native and very widely deployed in large enterprise frontends. Adoption is broader than the star count implies.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Shared-singleton version skew is the classic failure mode: two remotes wanting incompatible React majors is unresolvable at runtime. This is the microfrontend analogue of the K-concurrent-versions problem pgroll hits in the database.",
  "disposition": "top10",
  "top10_rank": 7,
  "top10_rationale": "The only surveyed runtime that natively composes independently-versioned, independently-deployed capabilities into a single host — Actionist's microfrontend profile exactly. It also surfaces the same mutable-reference pinning hazard as the commercial PaaS wave, in the frontend layer."
}

{
  "id": "P14-R-015",
  "repo": "single-spa/single-spa",
  "category": "microfrontend",
  "source_url": "https://github.com/single-spa/single-spa",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Router/orchestrator for microfrontends: mounts and unmounts independently-deployed applications, framework-agnostic.",
  "runtime_profile_relevance": "Lifecycle orchestration (bootstrap/mount/unmount) is a clean model for Actionist's capability lifecycle within a host page.",
  "rollback_restores": "Application registration can point at a prior bundle URL; unmount/remount swaps the running app.",
  "rollback_omits": "Does not restore DOM or in-app state accumulated by the unmounted version, nor host config.",
  "digest_pinning": "false — apps are referenced by URL, typically via an import map.",
  "production_evidence": "13878 stars; long-established with substantial enterprise use.",
  "license_observed": "NOASSERTION per GitHub API — LICENSE body NOT read this run. UNVERIFIED (widely reported as MIT; do not quote without reading).",
  "maintenance_state": "Slowing — pushed_at 2026-02-28, roughly six months without a push, though not archived.",
  "limitations": "Orchestration only; no dependency sharing or version negotiation, which Module Federation provides.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-016",
  "repo": "microsoft/playwright",
  "category": "verification",
  "source_url": "https://github.com/microsoft/playwright",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Cross-browser end-to-end browser automation and testing framework with tracing, video, and network interception.",
  "runtime_profile_relevance": "The qualification mechanism for WHOLE CLIENT WORKFLOWS rather than builds — it drives a real browser through a multi-step journey that may cross a microfrontend, an API and a worker.",
  "rollback_restores": "n/a — verification gate, not a release mechanism. It is what decides whether a composition qualifies.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a — but browser binaries are version-pinned per Playwright release, which makes the qualification environment reproducible.",
  "production_evidence": "95216 stars — the highest in this census. Extremely broad industry adoption; Microsoft-maintained.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Verifies observable browser behaviour only; cannot by itself assert backend invariants or post-conditions in a database. Flakiness management is the operator's problem.",
  "disposition": "top10",
  "top10_rank": 8,
  "top10_rationale": "Actionist's stated bar is verifying whole client workflows, not builds, and this is the most production-proven OSS tool that does exactly that across heterogeneous profiles. Pinned browser binaries also make the qualification result reproducible, which a release gate requires."
}

{
  "id": "P14-R-017",
  "repo": "testcontainers/testcontainers-java",
  "category": "verification",
  "source_url": "https://github.com/testcontainers/testcontainers-java",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Throwaway, containerized dependencies (databases, brokers, browsers) for integration tests.",
  "runtime_profile_relevance": "Qualifies a capability against a REAL dependency rather than a mock, which is what whole-workflow verification requires; also the natural place to exercise a schema migration before release.",
  "rollback_restores": "n/a — containers are ephemeral by design.",
  "rollback_omits": "n/a",
  "digest_pinning": "true (available and idiomatic) — images are specified by name and can be pinned by digest; the project maintains explicit image-name substitution and compatibility checks.",
  "production_evidence": "8721 stars on the Java implementation, with sibling ports across languages; very broad adoption in enterprise CI.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Requires a container runtime in CI; startup cost per test suite. Does not verify the frontend layer.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-018",
  "repo": "lost-pixel/lost-pixel",
  "category": "visual_regression",
  "source_url": "https://github.com/lost-pixel/lost-pixel",
  "observed_date": "2026-08-27",
  "evidence_class": "observed_behavior",
  "claim": "Open-source visual regression testing, positioned as a Percy/Chromatic alternative.",
  "runtime_profile_relevance": "Visual diffing would qualify a microfrontend composition's rendered output.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "unknown",
  "production_evidence": "none_found",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "ARCHIVED. GitHub API archived=true, pushed_at 2026-04-22.",
  "limitations": "Archived; must not be adopted as a dependency.",
  "disposition": "excluded",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-019",
  "repo": "garris/BackstopJS",
  "category": "visual_regression",
  "source_url": "https://github.com/garris/BackstopJS",
  "observed_date": "2026-08-27",
  "evidence_class": "observed_behavior",
  "claim": "Visual regression testing for web UIs via scenario-based screenshot comparison.",
  "runtime_profile_relevance": "Scenario-driven screenshot diffing across viewports for composition qualification.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "unknown",
  "production_evidence": "7177 stars; historically widely used.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "DORMANT — pushed_at 2024-09-07, roughly two years without a push. Not archived, but effectively unmaintained.",
  "limitations": "Staleness risk against current browser engines.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-020",
  "repo": "reg-viz/reg-suit",
  "category": "visual_regression",
  "source_url": "https://github.com/reg-viz/reg-suit",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Visual regression testing suite that stores snapshots in cloud storage and reports diffs on pull requests.",
  "runtime_profile_relevance": "Snapshot-per-commit model ties visual qualification to a specific revision, aligning verification with a pinned composition.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "unknown",
  "production_evidence": "1287 stars; used in the Japanese frontend ecosystem notably.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Requires external object storage; diff thresholds need tuning to control false positives.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-021",
  "repo": "basecamp/kamal",
  "category": "paas",
  "source_url": "https://kamal-deploy.org/docs/commands/rollback/",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Deploys containerized apps to bare servers over SSH with zero-downtime cutover and a rollback command.",
  "runtime_profile_relevance": "Closest OSS analogue to Actionist's package-in-host/sidecar deployment on owned infrastructure rather than a managed PaaS.",
  "rollback_restores": "The container image only. Docs: on rollback it will 'stop <container>' and 'then start a new container running the same image' as the older one. Fast because 'Nothing needs to be downloaded from the registry.'",
  "rollback_omits": "CONFIRMED BY MECHANISM: environment variables and secrets. Kamal env docs state clear vars 'are passed to the docker run command when deploying' and, decisively, 'Unlike clear values, secrets are not passed directly to the container but are stored in an env file on the host.' Because secrets live in a host-side file decoupled from the image, rolling the image back starts the old container against the CURRENT env file. Accessories (databases, brokers) are managed by a separate command and are untouched by rollback. NOTE: the rollback doc itself never warns about this — the gap is only visible by reading the env docs.",
  "digest_pinning": "false by default — rollback targets are identified by container/image SHA from 'kamal app containers -q', but routine deploys reference tags.",
  "production_evidence": "14534 stars; Basecamp/37signals run their own products on it, including their documented cloud-exit. Real first-party production use.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-12",
  "limitations": "ROLLBACK HORIZON: 'By default, old containers are pruned after 3 days when you run kamal deploy' — so the rollback target expires in 3 days. This is a concrete instance of wave-1's retention finding: retention is the platform's by default, not yours.",
  "disposition": "top10",
  "top10_rank": 10,
  "top10_rationale": "The cleanest OSS restatement of wave-1's central gap on infrastructure Actionist would actually own: image reverts in seconds, secrets do not revert at all, accessories are out of scope, and the rollback target self-destructs after 3 days. It makes the case that the composition manifest — not the container — must be the unit of rollback."
}

{
  "id": "P14-R-022",
  "repo": "Dokploy/dokploy",
  "category": "paas",
  "source_url": "https://github.com/Dokploy/dokploy/blob/canary/LICENSE_PROPRIETARY.md",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Self-hostable PaaS alternative to Vercel/Netlify/Heroku with Docker/Compose app management.",
  "runtime_profile_relevance": "Self-hosted preview + deploy for mixed app shapes.",
  "rollback_restores": "Not verified this run.",
  "rollback_omits": "unknown",
  "digest_pinning": "unknown",
  "production_evidence": "36897 stars; no independent postmortem read this run.",
  "license_observed": "SPLIT: Apache-2.0 + Dokploy Source Available License (DSAL) v1.0 — READ BOTH FILES (GitHub API reports NOASSERTION). LICENSE.MD: content under a '/proprietary' directory is under LICENSE_PROPRIETARY; everything else is Apache-2.0.",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "MOST SERIOUS LICENCE HAZARD IN THIS CENSUS relative to its reputation. The DSAL states the proprietary portion 'may only be used in production, if you (and any entity that you represent) have agreed to, and are in compliance with, a valid commercial agreement from Dokploy'; copying for 'development and testing purposes' is allowed without a subscription. It further states it is 'forbidden to copy, merge, publish, distribute, sublicense, and/or sell the Software', and that Dokploy retains title to YOUR modifications and patches. A 36.9k-star project widely read as open source carries a paid-production requirement on part of the tree.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-023",
  "repo": "coollabsio/coolify",
  "category": "paas",
  "source_url": "https://github.com/coollabsio/coolify",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Self-hostable Heroku/Netlify alternative managing apps, databases and services on your own servers.",
  "runtime_profile_relevance": "Runs heterogeneous shapes (web apps, databases, scheduled tasks) on owned infrastructure, close to Actionist's profile spread.",
  "rollback_restores": "UNVERIFIED — the servers-introduction doc fetched does not address rollback, and no rollback-specific page was read this run.",
  "rollback_omits": "unknown",
  "digest_pinning": "unknown",
  "production_evidence": "61094 stars — the largest self-hosted PaaS by stars. No postmortem read this run.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Rollback semantics not established this run; must be verified before any adoption claim.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-024",
  "repo": "caprover/caprover",
  "category": "paas",
  "source_url": "https://github.com/caprover/caprover/blob/master/LICENSE",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Self-hosted PaaS with one-click app deployment on Docker Swarm.",
  "runtime_profile_relevance": "Swarm-based app + worker deployment on owned hardware.",
  "rollback_restores": "Not verified this run.",
  "rollback_omits": "unknown",
  "digest_pinning": "unknown",
  "production_evidence": "15142 stars.",
  "license_observed": "Apache-2.0 — READ THE LICENSE BODY (GitHub API reports NOASSERTION): 'Copyright 2017-2024 BigZee Ventures LLC / Licensed under the Apache License, Version 2.0'. No additional use grant observed in the header.",
  "maintenance_state": "Active — pushed_at 2026-08-20",
  "limitations": "Docker Swarm dependency is a strategic risk given Swarm's declining ecosystem investment.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-025",
  "repo": "inngest/inngest",
  "category": "worker_runtime",
  "source_url": "https://github.com/inngest/inngest/blob/main/LICENSE.md",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Durable execution engine for background jobs, workflows and scheduled functions with event-driven triggers.",
  "runtime_profile_relevance": "Covers two of Actionist's profiles directly — worker and scheduled job — with durable step semantics.",
  "rollback_restores": "Function versions; durable state lets in-flight runs continue across deploys.",
  "rollback_omits": "External side effects already committed by completed steps. Durable execution makes REPLAY safe, not side effects undoable.",
  "digest_pinning": "unknown",
  "production_evidence": "5766 stars; no independent postmortem read this run.",
  "license_observed": "SSPL-1.0 — READ THE LICENSE BODY (GitHub API reports NOASSERTION): 'Server Side Public License, Version 1.0, Oct 16, 2018 / Apache 2.0 Future License'. Copyright Inngest, Inc.",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "LICENCE HAZARD: SSPL is the most restrictive licence found in this census. Its service clause obliges anyone offering the software as a service to release the entire service source. For Actionist — which would run this as part of a client-facing platform — SSPL requires legal review before any adoption. An 'Apache 2.0 Future License' conversion applies after the change period.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-026",
  "repo": "SigNoz/signoz",
  "category": "observability",
  "source_url": "https://github.com/SigNoz/signoz/blob/main/LICENSE",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Open-source OpenTelemetry-native APM: traces, metrics and logs in one self-hosted stack.",
  "runtime_profile_relevance": "OTel-native ingest means one trace can span a microfrontend call, an API and a worker — the cross-profile view whole-workflow verification needs.",
  "rollback_restores": "n/a — observability. It is the evidence source that a rollback is required.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "31935 stars; substantial self-hosted adoption.",
  "license_observed": "MIT Expat + enterprise carve-out — READ THE LICENSE BODY (GitHub API reports NOASSERTION): content under 'ee/' and 'cmd/enterprise/' is under 'ee/LICENSE'; 'Content outside of the above mentioned directories' is 'MIT Expat'.",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "Carve-out is PATH-BASED ('ee/', 'cmd/enterprise/'), which is materially safer to comply with than Bytebase's functional description. ee/LICENSE not read this run — its terms are UNVERIFIED.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-027",
  "repo": "growthbook/growthbook",
  "category": "progressive_delivery",
  "source_url": "https://github.com/growthbook/growthbook/blob/main/LICENSE",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Open-source feature flagging and A/B testing platform with a warehouse-native experimentation engine.",
  "runtime_profile_relevance": "Flag-based release decoupling; percentage rollout gives a rollback path that does not redeploy an artifact.",
  "rollback_restores": "Flag/experiment state only.",
  "rollback_omits": "Artifact, config and schema are untouched by a flag change.",
  "digest_pinning": "n/a",
  "production_evidence": "8160 stars.",
  "license_observed": "MIT Expat + GrowthBook Enterprise License — READ THE LICENSE BODY (GitHub API reports NOASSERTION). Enterprise dirs are path-based: packages/back-end/src/enterprise, packages/front-end/enterprise, packages/shared/src/enterprise; everything else MIT Expat.",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "Path-based carve-out, straightforward to comply with. Enterprise LICENSE files not read this run — UNVERIFIED.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-028",
  "repo": "Unleash/unleash",
  "category": "progressive_delivery",
  "source_url": "https://github.com/Unleash/unleash",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Enterprise-ready feature flag service with gradual rollout strategies and per-environment configuration.",
  "runtime_profile_relevance": "Gradual rollout strategies and environment scoping map onto staged release across client apps.",
  "rollback_restores": "Flag configuration state.",
  "rollback_omits": "Artifact, config and schema.",
  "digest_pinning": "n/a",
  "production_evidence": "13762 stars; substantial enterprise adoption.",
  "license_observed": "AGPL-3.0 per GitHub API license.spdx_id — LICENSE body NOT read this run; the enterprise/OSS split is UNVERIFIED. AGPL network copyleft would apply to a modified self-hosted server.",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "AGPL is a genuine constraint for embedding; running unmodified as a separate service is the safer posture.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-029",
  "repo": "grafana/k6",
  "category": "verification",
  "source_url": "https://github.com/grafana/k6",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Load and performance testing tool with scriptable scenarios and thresholds.",
  "runtime_profile_relevance": "Thresholds turn performance into a PASS/FAIL release gate, which is what qualifying a composition (rather than eyeballing a dashboard) requires.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "31329 stars; Grafana Labs maintained, broad adoption.",
  "license_observed": "AGPL-3.0 per GitHub API license.spdx_id — LICENSE body NOT read this run. UNVERIFIED. Note: as a CI tool run as a binary, AGPL obligations are far lighter than for an embedded service.",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "Load testing only; no functional or visual assertions.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-030",
  "repo": "open-telemetry/opentelemetry-collector",
  "category": "observability",
  "source_url": "https://github.com/open-telemetry/opentelemetry-collector",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Vendor-neutral collector for receiving, processing and exporting traces, metrics and logs.",
  "runtime_profile_relevance": "HIGH for mixed-shape runtime: one wire format and one collector spanning package-in-host, microfrontend, sidecar, worker and scheduled job, so a single trace can cross profile boundaries.",
  "rollback_restores": "n/a — instrumentation layer.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "7458 stars on the collector core; the OTel project overall is CNCF-graduated and the de facto industry telemetry standard, adopted by every major APM vendor.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Collector is plumbing, not analysis; needs a backend. Config surface is large and version-sensitive.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-031",
  "repo": "sigstore/cosign",
  "category": "release_tooling",
  "source_url": "https://github.com/sigstore/cosign",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Container signing, verification and transparency-log storage for OCI artifacts.",
  "runtime_profile_relevance": "Provides the cryptographic binding that makes a pinned composition trustworthy rather than merely recorded.",
  "rollback_restores": "n/a — supply-chain integrity, not a release mechanism. Guarantees a rolled-back artifact is the one you actually signed.",
  "rollback_omits": "n/a",
  "digest_pinning": "true — ANSWERS THE PINNING QUESTION. First-party docs: 'you should always sign images based on their digest (@sha256:...) rather than a tag (:latest) because otherwise you might sign something you didn't intend to!' and 'cosign signatures protect the digests of objects stored in a registry'. Signatures are LOCATED by a digest-derived tag. Tag-to-digest mapping is NOT inherently covered — it requires an explicit annotation (-a tag=$TAG).",
  "production_evidence": "6258 stars; Sigstore is a Linux Foundation/OpenSSF project used by Kubernetes, npm provenance and major distributions.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-24",
  "limitations": "Signs artifacts, not compositions. Nothing in cosign asserts that a given set of digests belongs together as one release — that manifest is Actionist's to build.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-032",
  "repo": "anchore/syft",
  "category": "release_tooling",
  "source_url": "https://github.com/anchore/syft",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "SBOM generator for container images and filesystems.",
  "runtime_profile_relevance": "An SBOM per profile makes a composition's contents auditable and diffable between two releases.",
  "rollback_restores": "n/a — records what was in a release, enabling a precise diff of what changed.",
  "rollback_omits": "n/a",
  "digest_pinning": "true (supports digest-referenced images as input).",
  "production_evidence": "9463 stars; Anchore-maintained, widely used in compliance pipelines.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "Inventory only; no policy enforcement (that is Grype/other tooling).",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-033",
  "repo": "changesets/changesets",
  "category": "release_tooling",
  "source_url": "https://github.com/changesets/changesets",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Monorepo versioning and changelog tool that batches intent-to-release declarations into coordinated version bumps.",
  "runtime_profile_relevance": "HIGH for pinned compositions: it computes a consistent multi-package version set, which is structurally what pinning K capabilities into one release requires.",
  "rollback_restores": "n/a — versioning, not deployment. Produces the immutable version set that a rollback would target.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a — pins by semver, not content digest.",
  "production_evidence": "12331 stars; standard tooling in large JS monorepos.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "npm/JS ecosystem only. Semver ranges reintroduce mutability unless exact versions and a lockfile are enforced.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-034",
  "repo": "semantic-release/semantic-release",
  "category": "release_tooling",
  "source_url": "https://github.com/semantic-release/semantic-release",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Fully automated version management and package publishing driven by commit message conventions.",
  "runtime_profile_relevance": "Automates the version-assignment half of release, removing human error from what a composition pins to.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "24007 stars; very broad adoption.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Single-package oriented; monorepo composition is where changesets fits better.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-035",
  "repo": "oras-project/oras",
  "category": "release_tooling",
  "source_url": "https://github.com/oras-project/oras",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Push and pull arbitrary artifacts to and from OCI registries, not just container images.",
  "runtime_profile_relevance": "DIRECTLY ENABLING for mixed-shape release: a microfrontend bundle, a worker image and a package artifact can all live in one OCI registry, addressed by digest, under one retention policy.",
  "rollback_restores": "n/a — storage/distribution layer. Its value is that all profile artifacts become digest-addressable in one place.",
  "rollback_omits": "n/a",
  "digest_pinning": "true — OCI content-addressable storage is digest-native by construction.",
  "production_evidence": "2403 stars; CNCF project; the mechanism behind Helm OCI charts and many artifact-distribution flows.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-25",
  "limitations": "Distribution only; retention/pruning is the registry operator's policy, which is exactly where wave-1 found Fly pruning images. Self-hosting the registry is what makes retention truly yours.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-036",
  "repo": "google/gvisor",
  "category": "isolation",
  "source_url": "https://github.com/google/gvisor",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Application kernel implementing a substantial portion of the Linux surface in userspace, providing an isolation boundary without full hardware virtualization.",
  "runtime_profile_relevance": "Alternative isolation for untrusted preview code with container-like startup rather than VM boot.",
  "rollback_restores": "Checkpoint/restore exists but was not verified this run.",
  "rollback_omits": "unknown — UNVERIFIED this run.",
  "digest_pinning": "n/a",
  "production_evidence": "19168 stars. Runs Google Cloud Run and App Engine workloads at very large scale — among the strongest production evidence in the isolation category.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Syscall compatibility is incomplete relative to a real kernel; some workloads break. Syscall interception imposes a performance cost.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-037",
  "repo": "kata-containers/kata-containers",
  "category": "isolation",
  "source_url": "https://github.com/kata-containers/kata-containers",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "OCI-compatible container runtime that runs each container in a lightweight VM for hardware-backed isolation.",
  "runtime_profile_relevance": "Bridges container ergonomics and VM isolation — relevant if Actionist wants standard OCI tooling with a stronger preview boundary.",
  "rollback_restores": "n/a — runtime, not release tooling.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a — consumes OCI images, so digest pinning is available upstream.",
  "production_evidence": "8610 stars; OpenInfra Foundation project with documented cloud-provider adoption.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "Higher resource overhead than plain containers; requires nested virtualization support in cloud environments.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-038",
  "repo": "cloud-hypervisor/cloud-hypervisor",
  "category": "isolation",
  "source_url": "https://github.com/cloud-hypervisor/cloud-hypervisor",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Rust VMM for modern cloud workloads, supporting live migration and snapshot/restore.",
  "runtime_profile_relevance": "Alternative microVM monitor to Firecracker with a broader device model.",
  "rollback_restores": "Snapshot/restore supported; specifics NOT verified this run.",
  "rollback_omits": "unknown — UNVERIFIED.",
  "digest_pinning": "n/a",
  "production_evidence": "6150 stars; Linux Foundation project with contributions from Intel, Microsoft, ARM and others.",
  "license_observed": "UNVERIFIED — GitHub API returns license=null. Commonly Apache-2.0 with a BSD-3-Clause component, but the LICENSE files were NOT read this run. Must be read before any adoption claim.",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Licence unverified; smaller sandbox-vendor ecosystem than Firecracker.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-039",
  "repo": "cloudflare/workerd",
  "category": "isolation",
  "source_url": "https://github.com/cloudflare/workerd",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "The JavaScript/Wasm runtime powering Cloudflare Workers, using V8 isolates rather than containers or VMs.",
  "runtime_profile_relevance": "The isolate model gives near-zero cold start, attractive for many short-lived per-client capabilities. Maps to Actionist's worker profile at the low-latency end.",
  "rollback_restores": "n/a — runtime.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "8643 stars; the actual runtime behind Cloudflare Workers at global scale — very strong production evidence.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Isolates share a process, so the security boundary is weaker than a microVM for untrusted code. Restricted API surface — no arbitrary native binaries, which rules it out for general preview workloads.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-040",
  "repo": "bytecodealliance/wasmtime",
  "category": "isolation",
  "source_url": "https://github.com/bytecodealliance/wasmtime",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Standalone WebAssembly runtime with WASI support and a capability-based security model.",
  "runtime_profile_relevance": "Capability-based sandboxing is a strong conceptual fit for Actionist's explicit runtime profiles: a capability gets exactly the host access its profile grants.",
  "rollback_restores": "n/a — runtime.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "18571 stars; Bytecode Alliance project used as an embedded runtime across the industry.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0 (commonly Apache-2.0 WITH LLVM-exception; the exception was NOT verified this run)",
  "maintenance_state": "Very active — pushed_at 2026-08-26",
  "limitations": "Wasm-only: existing Node/Python client capabilities do not run unmodified. Ecosystem maturity for full applications lags containers.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-041",
  "repo": "WasmEdge/WasmEdge",
  "category": "isolation",
  "source_url": "https://github.com/WasmEdge/WasmEdge",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Lightweight, high-performance WebAssembly runtime for edge, cloud-native and serverless applications.",
  "runtime_profile_relevance": "CNCF Wasm runtime with container-ecosystem integration.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "10788 stars; CNCF project.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Same Wasm ecosystem constraints as wasmtime.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-042",
  "repo": "spinframework/spin",
  "category": "isolation",
  "source_url": "https://github.com/spinframework/spin",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Framework for building and running event-driven serverless applications with WebAssembly components.",
  "runtime_profile_relevance": "The component model is a genuine analogue of Actionist's composition: independently-built components with typed interfaces composed into one application.",
  "rollback_restores": "n/a — component versions are the unit; not verified this run.",
  "rollback_omits": "unknown",
  "digest_pinning": "true (available) — Spin apps can be distributed as OCI artifacts, which are digest-addressable.",
  "production_evidence": "6505 stars; CNCF sandbox, Fermyon-backed. Limited independent large-scale evidence.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Wasm component model is still maturing; a smaller talent pool and ecosystem than Node/containers.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-043",
  "repo": "laverdet/isolated-vm",
  "category": "isolation",
  "source_url": "https://github.com/laverdet/isolated-vm",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Library exposing access to multiple V8 isolates from Node.js for running untrusted JS in-process.",
  "runtime_profile_relevance": "In-process isolation for package-in-host untrusted code, without a separate VM or container.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "2906 stars; used in several commercial products for untrusted user scripts.",
  "license_observed": "ISC — GitHub API license.spdx_id = ISC",
  "maintenance_state": "Active — pushed_at 2026-08-23",
  "limitations": "SECURITY POSTURE: in-process isolates share the host process. The maintainer has historically cautioned that this is not a substitute for a real sandbox against determined attackers. Not appropriate for arbitrary untrusted client code where a microVM is warranted.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-044",
  "repo": "temporalio/temporal",
  "category": "worker_runtime",
  "source_url": "https://github.com/temporalio/temporal",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Durable execution platform: workflows resume from persisted event history across process and host failures.",
  "runtime_profile_relevance": "The strongest OSS answer to long-running, resumable work spanning Actionist's worker and scheduled-job profiles. Its VERSIONING model is directly relevant: workflow versioning lets old and new workflow code coexist for in-flight executions.",
  "rollback_restores": "Worker code can be rolled back, but in-flight workflow histories must remain replay-compatible — this is the constraint, not a free rollback.",
  "rollback_omits": "Does not undo activity side effects already committed; compensation must be written explicitly (saga pattern). Rolling back worker code with an incompatible change breaks replay of in-flight workflows.",
  "digest_pinning": "n/a — but Temporal's Worker Versioning pins executions to a build ID, which is a content/version identity for workers analogous to digest pinning.",
  "production_evidence": "22559 stars. Documented very large-scale use (Temporal originated from Uber's Cadence); among the strongest production track records in the worker category.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Operationally heavy to self-host (requires Cassandra/Postgres/Elasticsearch depending on config). Determinism constraints on workflow code are a real developer burden. Worker Versioning specifics were NOT verified from docs this run — UNVERIFIED.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-045",
  "repo": "WICG/import-maps",
  "category": "microfrontend",
  "source_url": "https://github.com/WICG/import-maps",
  "observed_date": "2026-08-27",
  "evidence_class": "observed_behavior",
  "claim": "Specification for controlling JS module resolution in browsers via a declarative map.",
  "runtime_profile_relevance": "An import map IS a composition manifest for the browser: it names exactly which URL each bare specifier resolves to, so one document pins the whole frontend composition.",
  "rollback_restores": "Swapping the import map atomically repoints every module specifier — a single-document rollback of the frontend composition.",
  "rollback_omits": "Does not restore anything server-side, nor any state already written by the previous module set.",
  "digest_pinning": "true (achievable) — map targets are arbitrary URLs, so content-hashed URLs make the map a genuinely content-pinned manifest. This is the frontend analogue of digest pinning.",
  "production_evidence": "2720 stars on the spec repo; import maps are now shipped in all major browsers, so real-world adoption far exceeds the repo signal.",
  "license_observed": "UNVERIFIED — GitHub API reports NOASSERTION (typical W3C/WICG document licence). LICENSE not read this run. Note this is a SPECIFICATION, not code to adopt.",
  "maintenance_state": "Repo ARCHIVED (archived=true, pushed_at 2025-02-26) — expected for a WICG spec that has graduated to browser implementations; NOT an abandonment signal in the way an archived library would be.",
  "limitations": "Archived spec repo; the living standard now lives in the HTML specification. Actionist should track the standard, not this repo.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-046",
  "repo": "ariga/atlas",
  "category": "db_migration",
  "source_url": "https://github.com/ariga/atlas/blob/master/LICENSE",
  "observed_date": "2026-08-27",
  "evidence_class": "first_party_docs",
  "claim": "Declarative schema-as-code migration tool: it diffs a desired schema against the live database and plans the migration.",
  "runtime_profile_relevance": "Declarative desired-state model matches the composition-manifest idea — you declare the target schema, the tool derives the path.",
  "rollback_restores": "Generates down migrations from the schema diff rather than relying on hand-written ones, which makes rollback derived rather than authored.",
  "rollback_omits": "Does not provide concurrent multi-version schema serving — no old/new coexistence like pgroll. Data lost to a destructive change is not recoverable by a down migration.",
  "digest_pinning": "n/a — migration directories are integrity-protected by a hash file (atlas.sum), which is a content-integrity mechanism in the same spirit.",
  "production_evidence": "8687 stars; commercially backed by Ariga with a hosted offering.",
  "license_observed": "Apache-2.0 — READ THE LICENSE BODY at repo root: standard 'Apache License, Version 2.0, January 2004'. Repo-wide code search found exactly ONE LICENSE file (path 'LICENSE'), and the README shows no OSS-vs-commercial licensing carve-out. Caveat: Atlas Cloud is a paid hosted service, and per-directory headers were not exhaustively audited.",
  "maintenance_state": "Active — pushed_at 2026-08-02",
  "limitations": "Single live schema version. Some advanced capabilities are gated behind the paid Atlas Pro/Cloud tiers, which is a commercial rather than licensing constraint on the OSS binary.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-047",
  "repo": "sbdchd/squawk",
  "category": "db_migration",
  "source_url": "https://github.com/sbdchd/squawk",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Linter for Postgres migrations that flags unsafe operations before they run.",
  "runtime_profile_relevance": "PREVENTIVE control: catches migrations that would take a destructive lock or break a running application version before release, which is cheaper than any rollback.",
  "rollback_restores": "n/a — a pre-release gate, not a rollback mechanism.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "1158 stars; used in CI at a number of companies.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-24",
  "limitations": "Postgres-only; static analysis cannot catch every application-level incompatibility.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-048",
  "repo": "stripe/pg-schema-diff",
  "category": "db_migration",
  "source_url": "https://github.com/stripe/pg-schema-diff",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Diffs Postgres schemas and generates a migration plan, preferring online/concurrent index builds.",
  "runtime_profile_relevance": "Derives migration plans from declared schema state, with attention to lock-avoiding operations.",
  "rollback_restores": "Plan-based; not verified this run.",
  "rollback_omits": "unknown — UNVERIFIED.",
  "digest_pinning": "n/a",
  "production_evidence": "874 stars; Stripe-authored, which lends engineering credibility, though public adoption evidence is limited.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-06",
  "limitations": "Postgres-only; no concurrent multi-version schema serving.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-049",
  "repo": "liquibase/liquibase",
  "category": "db_migration",
  "source_url": "https://github.com/liquibase/liquibase",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Database-independent change management with changesets, contexts, labels and rollback support across many engines.",
  "runtime_profile_relevance": "Multi-engine coverage and first-class declared rollback per changeset.",
  "rollback_restores": "Executes the rollback declared on each changeset (auto-derived for simple operations, hand-written otherwise), unwinding in reverse order.",
  "rollback_omits": "Data destroyed by a change is not restored unless the rollback explicitly recreates it. No concurrent multi-version schema serving.",
  "digest_pinning": "n/a — changesets are integrity-checked by checksums, which detect post-hoc modification of an applied changeset.",
  "production_evidence": "5596 stars; long-established enterprise adoption, especially in the Java ecosystem.",
  "license_observed": "UNVERIFIED — GitHub API reports NOASSERTION and the LICENSE body was NOT read this run. Liquibase is commonly Apache-2.0 for OSS with a separate Liquibase Pro; must be read before any adoption claim.",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Licence unverified; XML/changelog ceremony is heavyweight; Pro-tier feature gating.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-050",
  "repo": "fluxcd/flagger",
  "category": "progressive_delivery",
  "source_url": "https://github.com/fluxcd/flagger",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Progressive delivery operator automating canary, A/B and blue-green releases using service-mesh or ingress traffic shifting, gated by metric analysis.",
  "runtime_profile_relevance": "Metric-gated automated promotion and automatic rollback on SLO breach — the closed loop between observability and release that Actionist's qualification step needs.",
  "rollback_restores": "Shifts traffic back to the primary deployment and scales down the canary; the primary workload is left as it was.",
  "rollback_omits": "Same structural gap as Argo Rollouts: ConfigMap/Secret CONTENTS and database schema are outside the ReplicaSet-scoped revision. Flagger can detect a bad release via metrics but cannot revert config or schema.",
  "digest_pinning": "false by default — image references follow user convention.",
  "production_evidence": "5395 stars; CNCF (Flux) project with documented production use.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-24",
  "limitations": "Kubernetes plus a supported mesh/ingress required. Automatic rollback is only as good as the metrics; a failure invisible to the configured metrics promotes anyway.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-051",
  "repo": "fluxcd/flux2",
  "category": "progressive_delivery",
  "source_url": "https://github.com/fluxcd/flux2",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "GitOps toolkit continuously reconciling Kubernetes cluster state with declared manifests in git or OCI artifacts.",
  "runtime_profile_relevance": "Notably supports OCI artifacts as a source, so the desired-state bundle itself becomes digest-addressable — closer to a genuinely pinned composition than git-tag-based flows.",
  "rollback_restores": "Reconciles to a prior revision of the source (git commit or OCI digest), restoring every manifest in that bundle.",
  "rollback_omits": "Externally-referenced secrets resolve to current values at apply time; database schema and any out-of-band mutation are untouched.",
  "digest_pinning": "true (available) — OCI sources are referenced by digest, which is the strongest pinning story among the delivery tools surveyed.",
  "production_evidence": "8371 stars; CNCF graduated project with broad enterprise adoption.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-25",
  "limitations": "Kubernetes-only, so it cannot express package-in-host or microfrontend profiles.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-052",
  "repo": "open-feature/spec",
  "category": "progressive_delivery",
  "source_url": "https://github.com/open-feature/spec",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Vendor-neutral specification and SDKs for feature flagging, decoupling application code from any specific flag provider.",
  "runtime_profile_relevance": "Provider-neutral flag evaluation means the same flag interface works across Actionist's heterogeneous profiles without binding each to a vendor SDK.",
  "rollback_restores": "Flag state via whichever provider backs it.",
  "rollback_omits": "Artifact, config and schema.",
  "digest_pinning": "n/a",
  "production_evidence": "1245 stars on the spec repo; CNCF incubating with SDKs across many languages and vendor backing.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "A specification, not an implementation — a provider (Flipt, Unleash, GrowthBook) is still required, and those carry the licence constraints recorded separately.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-053",
  "repo": "umijs/qiankun",
  "category": "microfrontend",
  "source_url": "https://github.com/umijs/qiankun",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Microfrontend framework built on single-spa adding JS sandboxing and style isolation between sub-applications.",
  "runtime_profile_relevance": "Adds the ISOLATION that single-spa lacks — a proxy-based JS sandbox and CSS scoping so one capability cannot corrupt another's globals. Directly relevant to running third-party capabilities in a shared host.",
  "rollback_restores": "Sub-application entry URL can be repointed to a prior build.",
  "rollback_omits": "Host config and any global state a sub-app mutated outside the sandbox boundary.",
  "digest_pinning": "false — sub-apps referenced by URL.",
  "production_evidence": "16671 stars; heavy production use in the Chinese enterprise ecosystem (Ant Group origin).",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-11",
  "limitations": "JS sandbox uses Proxy/snapshot techniques that are not a true security boundary — adequate against accidental collision, not against hostile code. Documentation is substantially Chinese-language.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-054",
  "repo": "smapiot/piral",
  "category": "microfrontend",
  "source_url": "https://github.com/smapiot/piral",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Framework for building modular frontend applications from independently-developed 'pilets' loaded at runtime.",
  "runtime_profile_relevance": "The pilet feed model is close to Actionist's capability catalog: a server decides which capability versions a given host instance receives, enabling per-client composition.",
  "rollback_restores": "The feed can serve a prior pilet version to a host, so rollback is a feed-side decision needing no host redeploy.",
  "rollback_omits": "Host shell config and any state the reverted pilet wrote.",
  "digest_pinning": "unknown — pilets are versioned artifacts served by the feed; content-addressing not verified this run.",
  "production_evidence": "1925 stars; commercial backing from smapiot. Limited independent large-scale evidence.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-18",
  "limitations": "Requires running a pilet feed service. Smaller ecosystem than Module Federation.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-055",
  "repo": "luigi-project/luigi",
  "category": "microfrontend",
  "source_url": "https://github.com/luigi-project/luigi",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Micro-frontend orchestration framework where a host application embeds views via iframes or web components with a defined client API.",
  "runtime_profile_relevance": "IFRAME-BASED isolation gives the strongest in-browser boundary between capabilities — genuine origin isolation rather than a JS-level sandbox.",
  "rollback_restores": "Navigation config repoints a view to a prior URL.",
  "rollback_omits": "Host config; cross-microfrontend state.",
  "digest_pinning": "false — views referenced by URL.",
  "production_evidence": "923 stars; SAP-maintained and used in SAP product UIs.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-27",
  "limitations": "Iframe isolation costs UX integration (shared routing, modals, styling) and has performance overhead. Smallest community of the microfrontend options surveyed.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-056",
  "repo": "guybedford/es-module-shims",
  "category": "microfrontend",
  "source_url": "https://github.com/guybedford/es-module-shims",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Polyfill providing import maps and module features in browsers lacking native support.",
  "runtime_profile_relevance": "Makes the import-map composition manifest usable where native support is absent.",
  "rollback_restores": "n/a — resolution shim.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a — inherits whatever the import map specifies.",
  "production_evidence": "1729 stars; widely used alongside single-spa and import-map deployments.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-17",
  "limitations": "Declining relevance as native import-map support is now broad.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-057",
  "repo": "triggerdotdev/trigger.dev",
  "category": "worker_runtime",
  "source_url": "https://github.com/triggerdotdev/trigger.dev",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Open-source background jobs and durable workflow platform for TypeScript with self-hosting support.",
  "runtime_profile_relevance": "Covers worker and scheduled-job profiles in a TypeScript-native way, matching a JS-centric capability stack.",
  "rollback_restores": "Deployed task versions; in-flight runs are pinned to the version they started on.",
  "rollback_omits": "External side effects of completed task runs.",
  "digest_pinning": "unknown",
  "production_evidence": "16137 stars; commercial cloud offering plus self-hosting.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0. NOTABLE: this is the most permissive licence among the mature worker-runtime options (vs Inngest SSPL-1.0 and Windmill AGPL+proprietary).",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Self-hosting is operationally involved. TypeScript-only.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-058",
  "repo": "hatchet-dev/hatchet",
  "category": "worker_runtime",
  "source_url": "https://github.com/hatchet-dev/hatchet",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Distributed, fault-tolerant task queue built on Postgres, with DAG workflows and durable execution.",
  "runtime_profile_relevance": "Postgres-backed durable workers reduce infrastructure surface — no separate broker — which suits a smaller-footprint deployment.",
  "rollback_restores": "Worker code versions.",
  "rollback_omits": "Completed step side effects.",
  "digest_pinning": "unknown",
  "production_evidence": "7795 stars.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Younger than Temporal; Postgres becomes the throughput ceiling at high volume.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-059",
  "repo": "riverqueue/river",
  "category": "worker_runtime",
  "source_url": "https://github.com/riverqueue/river",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Fast, reliable background job queue for Go built on Postgres with transactional enqueueing.",
  "runtime_profile_relevance": "Transactional enqueue means a job is queued in the same transaction as the data change, eliminating the dual-write inconsistency that complicates rollback.",
  "rollback_restores": "n/a — job execution; jobs can be cancelled or retried.",
  "rollback_omits": "Side effects of completed jobs.",
  "digest_pinning": "n/a",
  "production_evidence": "5607 stars; authored by former Stripe engineers.",
  "license_observed": "MPL-2.0 — GitHub API license.spdx_id = MPL-2.0. File-level copyleft: weaker than AGPL, but modifications to River's own files must be shared.",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Go-only.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-060",
  "repo": "graphile/worker",
  "category": "worker_runtime",
  "source_url": "https://github.com/graphile/worker",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Job queue for PostgreSQL running on Node.js with low latency via LISTEN/NOTIFY.",
  "runtime_profile_relevance": "Minimal-dependency worker profile: Postgres plus Node, no extra broker.",
  "rollback_restores": "n/a",
  "rollback_omits": "Side effects of completed jobs.",
  "digest_pinning": "n/a",
  "production_evidence": "2378 stars; established in the PostGraphile ecosystem.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-06",
  "limitations": "No DAG/workflow orchestration; single-database scope.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-061",
  "repo": "taskforcesh/bullmq",
  "category": "worker_runtime",
  "source_url": "https://github.com/taskforcesh/bullmq",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Redis-based message queue for Node.js with flows, rate limiting, repeatable jobs and priorities.",
  "runtime_profile_relevance": "Covers worker and scheduled-job profiles with repeatable jobs; the most widely deployed Node queue.",
  "rollback_restores": "n/a",
  "rollback_omits": "Side effects of completed jobs; Redis persistence configuration determines what survives a restart.",
  "digest_pinning": "n/a",
  "production_evidence": "9336 stars; very broad Node.js production adoption.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Requires Redis; at-least-once delivery means handlers must be idempotent. Not durable execution — no replay-from-history semantics like Temporal.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-062",
  "repo": "activepieces/activepieces",
  "category": "worker_runtime",
  "source_url": "https://github.com/activepieces/activepieces",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Open-source no-code business automation / workflow tool with a large connector library.",
  "runtime_profile_relevance": "Scheduled and event-triggered flows; connector-based integration.",
  "rollback_restores": "Flow versions.",
  "rollback_omits": "External side effects of executed flows.",
  "digest_pinning": "unknown",
  "production_evidence": "24056 stars.",
  "license_observed": "UNVERIFIED — GitHub API reports NOASSERTION and the LICENSE body was NOT read this run. Activepieces is commonly described as MIT with an enterprise carve-out; given this census found real hazards behind three NOASSERTION badges (Dokploy DSAL, Inngest SSPL, Windmill proprietary), this must be read before any adoption claim.",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Licence unverified. No-code orientation may not fit a code-first capability model.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-063",
  "repo": "cypress-io/cypress",
  "category": "verification",
  "source_url": "https://github.com/cypress-io/cypress",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Browser-based end-to-end testing framework with time-travel debugging and automatic waiting.",
  "runtime_profile_relevance": "Workflow-level qualification in a real browser.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "51003 stars; very broad industry adoption.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Runs inside the browser event loop, historically constraining multi-origin and multi-tab flows relative to Playwright. Parallelization has commercial-dashboard ties.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-064",
  "repo": "schemathesis/schemathesis",
  "category": "verification",
  "source_url": "https://github.com/schemathesis/schemathesis",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Property-based API testing that generates cases from an OpenAPI or GraphQL schema and finds spec violations.",
  "runtime_profile_relevance": "Qualifies a capability's CONTRACT rather than a hand-picked happy path — valuable when capabilities are composed and callers rely on the declared interface.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "3565 stars; used in API-first organizations and academically cited.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Only as good as the schema; a wrong or loose spec yields weak tests.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-065",
  "repo": "pact-foundation/pact-specification",
  "category": "verification",
  "source_url": "https://github.com/pact-foundation/pact-specification",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Specification for consumer-driven contract testing between services.",
  "runtime_profile_relevance": "HIGH conceptual fit: consumer-driven contracts verify that independently-deployed capabilities still satisfy their consumers — the exact safety property a pinned composition needs when one capability upgrades alone.",
  "rollback_restores": "n/a — a gate that prevents an incompatible release rather than repairing one.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a — but the pact broker's can-i-deploy check pins verification to specific participant versions, which is the composition-compatibility question in miniature.",
  "production_evidence": "317 stars on the SPEC repo; the Pact ecosystem (language implementations plus broker) is very widely adopted, so this star count badly understates it.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Spec repo quiet — pushed_at 2024-04-11, not archived. Expected for a stable specification; the implementation repos are the active ones.",
  "limitations": "Requires broker infrastructure and discipline from both sides. Spec-repo activity is a poor proxy for ecosystem health here.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-066",
  "repo": "browserbase/stagehand",
  "category": "verification",
  "source_url": "https://github.com/browserbase/stagehand",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "AI-driven browser automation framework layering natural-language act/extract/observe primitives on Playwright.",
  "runtime_profile_relevance": "Potentially reduces the cost of authoring whole-workflow qualification for many client apps, since selectors change per client while intent does not.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "24076 stars — high, but the project is young and stars reflect AI-agent interest more than deployment depth.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "LLM-driven steps are NON-DETERMINISTIC, which is a poor property for a release gate: a qualification suite that can pass or fail for reasons unrelated to the change undermines the gate. Use for exploration, not as the deterministic gate.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-067",
  "repo": "mobile-dev-inc/Maestro",
  "category": "verification",
  "source_url": "https://github.com/mobile-dev-inc/Maestro",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Mobile UI testing framework with declarative YAML flows and built-in tolerance for flakiness.",
  "runtime_profile_relevance": "Only relevant if Actionist capabilities reach mobile surfaces; declarative flows are a clean qualification format.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "15434 stars; substantial mobile-industry adoption.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Mobile-focused; out of scope unless mobile profiles are in play.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-068",
  "repo": "storybookjs/test-runner",
  "category": "verification",
  "source_url": "https://github.com/storybookjs/test-runner",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Turns Storybook stories into executable tests via Playwright/Jest.",
  "runtime_profile_relevance": "COMPONENT-LEVEL qualification: each capability's UI states become tests without separate authoring — cheap coverage across a large catalog.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "278 stars on the runner, but Storybook itself is near-ubiquitous in component development, so effective reach is far larger.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Slowing — pushed_at 2026-05-14, roughly three months without a push; not archived. Storybook is folding test capabilities into its core, which likely explains reduced separate activity.",
  "limitations": "Component-level only; does not verify a cross-capability workflow.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-069",
  "repo": "argos-ci/argos",
  "category": "visual_regression",
  "source_url": "https://github.com/argos-ci/argos",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Open-source visual testing platform with Playwright/Cypress integration and PR review workflow.",
  "runtime_profile_relevance": "Visual qualification of composed UI, with review gating tied to a specific change.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "616 stars; commercial hosted offering alongside the OSS repo.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Self-hosting the full platform is non-trivial; the product is oriented toward the hosted service. NOTE: with Lost Pixel archived and BackstopJS dormant since 2024, this is one of the few actively-maintained OSS options in this category.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-070",
  "repo": "prometheus/prometheus",
  "category": "observability",
  "source_url": "https://github.com/prometheus/prometheus",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Metrics collection and alerting system with a dimensional data model and PromQL.",
  "runtime_profile_relevance": "Supplies the numeric SLO signal that gates promotion and triggers automatic rollback in Flagger/Argo Rollouts analysis.",
  "rollback_restores": "n/a — the evidence source for rollback decisions.",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "65847 stars; CNCF graduated, the de facto metrics standard.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Metrics only; long-term storage and high availability need extra components (Thanos/Mimir).",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-071",
  "repo": "grafana/grafana",
  "category": "observability",
  "source_url": "https://github.com/grafana/grafana",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Visualization and dashboarding for metrics, logs and traces across many data sources.",
  "runtime_profile_relevance": "The human-facing view across all runtime profiles.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "76447 stars; ubiquitous.",
  "license_observed": "AGPL-3.0 per GitHub API license.spdx_id — LICENSE body NOT read this run; relicensed from Apache-2.0 in 2021. UNVERIFIED. Running unmodified as a separate service is the low-risk posture; embedding or modifying triggers AGPL obligations.",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "AGPL constrains embedding into a client-facing product.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-072",
  "repo": "grafana/loki",
  "category": "observability",
  "source_url": "https://github.com/grafana/loki",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Horizontally-scalable log aggregation system indexing labels rather than full text.",
  "runtime_profile_relevance": "Cross-profile log aggregation with the same label model as Prometheus metrics.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "28792 stars; broad adoption alongside Grafana.",
  "license_observed": "AGPL-3.0 per GitHub API license.spdx_id — LICENSE body NOT read this run. UNVERIFIED.",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "AGPL; label-based indexing needs careful cardinality discipline.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-073",
  "repo": "grafana/tempo",
  "category": "observability",
  "source_url": "https://github.com/grafana/tempo",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "High-scale distributed tracing backend using object storage, OTel-compatible.",
  "runtime_profile_relevance": "Traces spanning multiple runtime profiles are what make a whole-workflow failure diagnosable rather than merely visible.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "5455 stars.",
  "license_observed": "AGPL-3.0 per GitHub API license.spdx_id — LICENSE body NOT read this run. UNVERIFIED.",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "AGPL; trace-only, requires companions for metrics and logs.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-074",
  "repo": "hyperdxio/hyperdx",
  "category": "observability",
  "source_url": "https://github.com/hyperdxio/hyperdx",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Open-source observability platform unifying logs, metrics, traces and session replay on ClickHouse.",
  "runtime_profile_relevance": "SESSION REPLAY correlated with backend traces is unusually relevant: it links what the client SAW to what the composition DID, which is the whole-workflow verification story end to end.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "9865 stars; younger than the Grafana stack.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT. Notably the most permissive licence among the full observability platforms surveyed (vs Grafana/Loki/Tempo AGPL, SigNoz MIT+ee carve-out, Sentry FSL).",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Requires ClickHouse operational expertise; smaller ecosystem than Grafana.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-075",
  "repo": "openobserve/openobserve",
  "category": "observability",
  "source_url": "https://github.com/openobserve/openobserve",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Observability platform for logs, metrics and traces claiming substantially lower storage cost than Elasticsearch.",
  "runtime_profile_relevance": "Cost-efficient retention matters because observability retention defines how far back a failure can be investigated after a rollback.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "21502 stars; storage-efficiency claims are vendor benchmarks, NOT independently verified here.",
  "license_observed": "AGPL-3.0 per GitHub API license.spdx_id — LICENSE body NOT read this run. UNVERIFIED.",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "Performance claims unverified; AGPL.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-076",
  "repo": "e2b-dev/E2B",
  "category": "isolation",
  "source_url": "https://github.com/e2b-dev/E2B",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Client SDKs for the E2B sandbox platform (the SDK repo, distinct from e2b-dev/infra which is the self-hostable infrastructure).",
  "runtime_profile_relevance": "The SDK surface exposing pause/resume, filesystem and command execution to Actionist code.",
  "rollback_restores": "Via the platform: memory + filesystem on resume (see P14-R-004).",
  "rollback_omits": "State outside the sandbox boundary.",
  "digest_pinning": "unknown",
  "production_evidence": "13562 stars on the SDK repo vs 1344 on infra — a meaningful gap indicating most users consume the HOSTED service rather than self-hosting. Relevant to any self-hosting plan: the self-hosted path is far less travelled.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Very active — pushed_at 2026-08-27",
  "limitations": "SDK only; the infra repo is what matters for self-hosting, and its comparative star count suggests thinner community validation of that path.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-077",
  "repo": "youki-dev/youki",
  "category": "isolation",
  "source_url": "https://github.com/youki-dev/youki",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "OCI-compliant container runtime written in Rust, an alternative to runc.",
  "runtime_profile_relevance": "Low-level container runtime; relevant only as a runc substitute beneath a higher-level sandbox.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "7566 stars; no large-scale production deployment evidence read this run.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Namespace-based isolation only — a weaker boundary than a microVM for untrusted client code.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-078",
  "repo": "containers/crun",
  "category": "isolation",
  "source_url": "https://github.com/containers/crun",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Fast, low-memory OCI container runtime written in C.",
  "runtime_profile_relevance": "Default runtime under Podman; a lower-overhead runc alternative.",
  "rollback_restores": "n/a",
  "rollback_omits": "n/a",
  "digest_pinning": "n/a",
  "production_evidence": "4083 stars; ships as the default runtime in Podman/Red Hat environments — real distribution-scale deployment.",
  "license_observed": "GPL-2.0 — GitHub API license.spdx_id = GPL-2.0. As a separately-executed binary this imposes no obligation on Actionist code, but it must not be linked into a proprietary binary.",
  "maintenance_state": "Active — pushed_at 2026-08-25",
  "limitations": "Namespace isolation only, same boundary caveat as youki.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-079",
  "repo": "dokku/dokku",
  "category": "paas",
  "source_url": "https://github.com/dokku/dokku",
  "observed_date": "2026-08-27",
  "evidence_class": "secondary",
  "claim": "Docker-powered mini-Heroku: git-push deployment on a single host with buildpack and Dockerfile support.",
  "runtime_profile_relevance": "Simplest self-hosted deploy target for a package-in-host profile.",
  "rollback_restores": "Prior image via ps:rebuild / tag-based deploy; NOT verified in detail this run.",
  "rollback_omits": "unknown — but config is set via dokku config:set, stored SEPARATELY from the image, so the same image/config decoupling that breaks Kamal's rollback very likely applies. UNVERIFIED.",
  "digest_pinning": "unknown",
  "production_evidence": "32111 stars; long-established, widely used for small deployments.",
  "license_observed": "MIT — GitHub API license.spdx_id = MIT",
  "maintenance_state": "Active — pushed_at 2026-08-26",
  "limitations": "Single-host by default; scaling and HA require additional work.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}

{
  "id": "P14-R-080",
  "repo": "UffizziCloud/uffizzi",
  "category": "paas",
  "source_url": "https://github.com/UffizziCloud/uffizzi",
  "observed_date": "2026-08-27",
  "evidence_class": "observed_behavior",
  "claim": "Open-source ephemeral preview environments for Kubernetes and Docker Compose applications.",
  "runtime_profile_relevance": "Ephemeral per-PR preview environments are precisely Actionist's 'previews in isolation' requirement, at composition rather than single-service granularity.",
  "rollback_restores": "n/a — previews are ephemeral by design.",
  "rollback_omits": "n/a",
  "digest_pinning": "unknown",
  "production_evidence": "none_found — only 354 stars.",
  "license_observed": "Apache-2.0 — GitHub API license.spdx_id = Apache-2.0",
  "maintenance_state": "DORMANT — pushed_at 2024-08-07, roughly two years without a push. Not archived, but effectively unmaintained.",
  "limitations": "Conceptually the closest match to composition-level preview environments in this census, but dormant. Its dormancy is itself the finding: there is no actively-maintained OSS project doing multi-service preview compositions well, which is why the commercial platforms dominate this space.",
  "disposition": "census",
  "top10_rank": null,
  "top10_rationale": null
}