Attestable Builds

Attestable builds are a new approach to verifiable software distribution. Source code is compiled inside hardware-isolated environments that produce cryptographic proof linking binaries to their exact inputs.

Download Endpoints

After a successful build, you can download the compiled artifacts and build configuration files using these endpoints.

GET /builds/{build_id}/artifacts/{name}

Download a binary artifact from the build.

Request

curl -O https://api.kettle.build/v1/builds/a1b2c3d4/artifacts/my-binary

Parameters

ParameterTypeDescription
build_idstringThe build ID returned from /build or /build/stream
namestringThe artifact filename (from the build response artifacts array)

Response

Returns the binary file directly with appropriate content headers.

Error Codes

StatusDescription
404Artifact not found (invalid build_id or name)

GET /builds/{build_id}/build-config/{name}

Download build configuration files (e.g., lock files).

Request

curl -O https://api.kettle.build/v1/builds/a1b2c3d4/build-config/Cargo.lock

Parameters

ParameterTypeDescription
build_idstringThe build ID returned from /build or /build/stream
namestringThe config filename (from the build response build_config object)

Response

Returns the configuration file directly.

Error Codes

StatusDescription
404Config file not found (invalid build_id or name)

Usage Example

After receiving a build response:

{
  "build_id": "a1b2c3d4",
  "status": "success",
  "artifacts": [
    {
      "name": "my-binary",
      "sha256": "abc123...",
      "download_url": "/builds/a1b2c3d4/artifacts/my-binary"
    }
  ],
  "build_config": {
    "name": "Cargo.lock",
    "download_url": "/builds/a1b2c3d4/build-config/Cargo.lock"
  }
}

Download the files:

# Download the binary artifact
curl -O https://api.kettle.build/v1/builds/a1b2c3d4/artifacts/my-binary

# Download the lock file
curl -O https://api.kettle.build/v1/builds/a1b2c3d4/build-config/Cargo.lock