[chen21019]

Summary

• Add Network Services revision 13 (visible v0.3.11), consuming the formally published Network Plugin Manager v0.8.25 and Metadata Service v0.10.6. Keep DNS and runtime configuration unchanged.
• Preserve revision 12 byte-for-byte and retain all old image records and direct version lookups.
• Record exact new producer, OCI digest, SBOM and publication/SLSA evidence. Both runtime GitHub Releases report immutable=false; OCI content identity is not a GitHub release lock.
• Retain Metadata106's 44 reviewed unfixed raw findings (38 Medium, 6 Low), rather than claiming zero findings. Environment acceptance remains separate.

Validation

• Local canonical-LF source fixture: deployable image/history audit (22 templates, 169 image references, 69 locks, zero blockers), version labels and firewall contract passed.
• Focused revision 12→13 exact runtime-delta and both published identity assertions passed.
• Five Metadata106 release assets matched their publication receipt; original full-severity NPM25 gates and OCI/SBOM-file SLSA provenance were checked. Metadata106 OCI SLSA binds the exact published digest and producer.
• git diff --check and SSH commit signature verification passed.
• Full pinned Python/flake8/Catalog Service integration validation is run by the normal PR workflow. No environment deployment or runtime acceptance is claimed.

Formal component runs

• NPM25: https://github.com/PastureStack/network-plugin-manager/actions/runs/40013313015
• Metadata106: https://github.com/PastureStack/metadata-service/actions/runs/40016315561