From 58195aae303b473f4e542fab300349c073507362 Mon Sep 17 00:00:00 2001
From: Clusterflux release <release@clusterflux.invalid>
Date: Mon, 20 Jul 2026 14:15:38 +0200
Subject: [PATCH] Public release release-5e0e2bce9be3

Source commit: 5e0e2bce9be3df55b3b7bd4f9a287c58ca2f4385

Public tree identity: sha256:becd5e35a543edf57b183dc847b967ec0d5ad4dd4398b26d4eb836a75dd53c7e
---
 CLUSTERFLUX_PUBLIC_TREE.json         | 4 ++--
 scripts/cli-happy-path-live-smoke.js | 8 +++-----
 scripts/prepare-public-release.js    | 4 +++-
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/CLUSTERFLUX_PUBLIC_TREE.json b/CLUSTERFLUX_PUBLIC_TREE.json
index 57fb27d..52b20f7 100644
--- a/CLUSTERFLUX_PUBLIC_TREE.json
+++ b/CLUSTERFLUX_PUBLIC_TREE.json
@@ -1,7 +1,7 @@
 {
   "kind": "clusterflux-filtered-public-tree",
-  "source_commit": "9b0559e0551ee175275282ed5996a23811f2a1fe",
-  "release_name": "release-9b0559e0551e",
+  "source_commit": "5e0e2bce9be3df55b3b7bd4f9a287c58ca2f4385",
+  "release_name": "release-5e0e2bce9be3",
   "filtered_out": [
     "private/**",
     "internal/**",
diff --git a/scripts/cli-happy-path-live-smoke.js b/scripts/cli-happy-path-live-smoke.js
index b717c17..f2ee2d4 100644
--- a/scripts/cli-happy-path-live-smoke.js
+++ b/scripts/cli-happy-path-live-smoke.js
@@ -2461,7 +2461,7 @@ function deploymentProvenance() {
     hosted_service_sha256: `sha256:${binarySha256}`,
     service_unit: fragment,
     service_unit_sha256: `sha256:${serviceUnitSha256}`,
-    service_configuration_sha256: `sha256:${renderedServiceConfigurationSha256}`,
+    service_configuration_sha256: renderedServiceConfigurationSha256,
   };
 }
 
@@ -2475,7 +2475,7 @@ function configurationProvenance() {
   return {
     repository: configRepo,
     revision,
-    evidence_identity: `sha256:${sha256(Buffer.from(revision))}`,
+    evidence_identity: sha256(Buffer.from(revision)),
     clean: status === "",
     status: status || null,
   };
@@ -2505,9 +2505,7 @@ function proxyConfigurationProvenance() {
     "ssh",
     sshArgs(nginxExecutable, "-T", "-c", nginxConfiguration)
   );
-  const renderedConfigurationIdentity = `sha256:${sha256(
-    Buffer.from(renderedConfiguration)
-  )}`;
+  const renderedConfigurationIdentity = sha256(Buffer.from(renderedConfiguration));
   const activeState = run(
     "ssh",
     sshArgs("systemctl", "is-active", proxyUnit)
diff --git a/scripts/prepare-public-release.js b/scripts/prepare-public-release.js
index 8efd0d1..7ac5d77 100755
--- a/scripts/prepare-public-release.js
+++ b/scripts/prepare-public-release.js
@@ -633,7 +633,9 @@ function stageEvidenceAsset(
         throw new Error("the strict final requirement ledger must be complete and passed");
       }
       const deploymentGeneration =
-        process.env.CLUSTERFLUX_DEPLOYMENT_SYSTEM_GENERATION || null;
+        process.env.CLUSTERFLUX_DEPLOYMENT_SYSTEM_GENERATION ||
+        liveResult.release_binding?.deployment?.system_generation ||
+        null;
       if (!deploymentGeneration && !allowIncomplete) {
         throw new Error(
           "CLUSTERFLUX_DEPLOYMENT_SYSTEM_GENERATION is required for final evidence"