testutil: update v1alpha6 platform1 fixture to use struct for components

v1alpha6: define top level platform schema (#435 )
tasks: add v1alpha6 design task
2026-03-19 08:44:58 +00:00 · 2025-05-22 17:26:40 -07:00 · 2025-05-22 15:29:41 -07:00 · 2025-05-22 15:29:41 -07:00 · 2025-05-22 15:29:40 -07:00 · 2025-05-22 15:29:40 -07:00
149 changed files with 22810 additions and 665 deletions
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -0,0 +1,18 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(make:*)",
+      "Bash(holos:*)",
+      "Bash(cue:*)",
+      "Bash(grep:*)",
+      "Bash(cd:*)",
+      "Bash(mkdir:*)",
+      "Bash(find:*)",
+      "Bash(echo:*)",
+      "Bash(head:*)",
+      "Bash(git commit:*)",
+      "Bash(git add:*)"
+    ],
+    "deny": []
+  }
+}
--- a/.cspell.json
+++ b/.cspell.json
@@ -308,6 +308,7 @@
    "sysfs",
    "systemconnect",
    "tablewriter",
+    "taskset",
    "templatable",
    "testscript",
    "testutil",
--- a/.github/workflows/golangci-lint.yaml
+++ b/.github/workflows/golangci-lint.yaml
@@ -25,6 +25,6 @@ jobs:
        with:
          go-version: stable
      - name: golangci-lint
-        uses: golangci/golangci-lint-action@v6
+        uses: golangci/golangci-lint-action@v7
        with:
-          version: v1.64.5
+          version: v2.1.6
--- a/.github/workflows/spelling.yaml
+++ b/.github/workflows/spelling.yaml
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -30,6 +30,8 @@ jobs:

      - name: Set up Helm
        uses: azure/setup-helm@v4
+        with:
+          version: '3.17.3'

      - name: Set up Kubectl
        uses: azure/setup-kubectl@v4
--- a/.gitignore
+++ b/.gitignore
@@ -16,4 +16,7 @@ node_modules/

 # nix
 /.direnv/
-result
+result
+
+# claude
+/.claude/settings.local.json
--- a/.golangci.yaml
+++ b/.golangci.yaml
@@ -1,2 +1,20 @@
-run:
-  timeout: 5m
+version: "2"
+linters:
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+formatters:
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -0,0 +1,116 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+Holos is a configuration management tool for Kubernetes that implements the rendered manifests pattern using CUE. It unifies Helm charts, Kustomize bases, and raw Kubernetes manifests into a single, declarative pipeline.
+
+### Core Flow
+```
+Platform → Components → BuildPlan → Generators → Transformers → Validators → Manifests
+```
+
+## Key Commands
+
+```bash
+# Development
+make build         # Build the binary
+make install       # Install binary (REQUIRED before testing holos commands)
+make test          # Run all tests
+make fmt           # Format Go code
+make lint          # Run linters
+make coverage      # Generate coverage report
+
+# Documentation
+make update-docs   # Update generated docs
+make website       # Build the documentation website
+
+# Usage (run 'make install' first to test code changes)
+holos render platform    # Render entire platform
+holos render component   # Render single component
+holos show buildplans    # Show build plans
+holos init platform      # Initialize new platform
+```
+
+## Architecture
+
+### Directory Structure
+- `/api/` - API definitions (v1alpha5 stable, v1alpha6 in development)
+- `/cmd/` - CLI entry point
+- `/internal/cli/` - Command implementations
+- `/internal/component/` - Component handling logic
+- `/internal/platform/` - Platform handling logic
+- `/internal/generate/` - Code generation
+
+### Key Files
+- `/internal/cli/render/render.go` - Core render logic
+- `/internal/component/component.go` - Component processing
+- `/api/core/v1alpha*/types.go` - API type definitions
+
+### Component Types
+1. **Helm** - Wraps Helm charts
+2. **Kustomize** - Wraps Kustomize bases  
+3. **Kubernetes** - Raw Kubernetes manifests
+
+## CUE Patterns
+
+Components are defined in CUE:
+```cue
+package holos
+
+holos: Component.BuildPlan
+
+Component: #Helm & {
+    Name: "example"
+    Chart: {
+        version: "1.0.0"
+        repository: {
+            name: "example"
+            url:  "https://charts.example.com"
+        }
+    }
+}
+```
+
+## Testing
+
+- Unit tests: `*_test.go` files colocated with source
+- Integration tests: `/cmd/holos/tests/`
+- Example platforms: `/internal/testutil/fixtures/`
+- Run single test: `go test -run TestName ./path/to/package`
+
+## Development Patterns
+
+1. Error handling: Prefer `errors.Format()` from `/internal/errors/` over `fmt.Errorf()`
+2. Logging: Use structured `slog`, get logger with `logger.FromContext(ctx)`
+3. CLI commands: Follow Cobra patterns in `/internal/cli/`
+4. CUE formatting: Always run `cue fmt` on CUE files
+5. Go formatting: Always run `go fmt` on go files
+6. Develop against v1alpha6 packages.
+7. Commits: Use the package name as the first word in the commit, lower case.  Commit without asking permission.  Always run `make lint` and `make test` before committing.
+
+## Version Management
+
+- Version files: `/version/embedded/{major,minor,patch}`
+- Bump version: `make bump`
+- API versions: v1alpha5 (stable), v1alpha6 (development)
+
+## Key Concepts
+
+- **Platform**: Top-level configuration containing all components
+- **Component**: Unit of configuration (DAG of Tasks producing deployment configs for one component)
+- **TaskSet**: DAG of Tasks (Similar to how make tasks behave)
+- **BuildPlan**: Instructions for building a component.  Deprecated in v1alpha6, use TaskSet instead.
+- **Generator**: Creates manifests (Helm, Kustomize, etc.) author schema only in v1alpha6
+- **Transformer**: Modifies generated manifests, author schema only in v1alpha6
+- **Validator**: Validates final manifests, author schema only in v1alpha6
+
+## Resources
+
+- Tutorials: `/doc/md/tutorial/`
+- Platform templates: `/internal/generate/platforms/`
+- Test fixtures: `/internal/testutil/fixtures/`
+- Core schemas: `/api/core/` (Abstraction over low level data pipeline tasks)
+- Author schemas: `/api/author/` (User facing abstractions over core Schemas)
+- Task planning documents are located in the `/tasks/` directory
--- a/api/author/v1alpha6/definitions.go
+++ b/api/author/v1alpha6/definitions.go
@@ -27,9 +27,9 @@ import core "github.com/holos-run/holos/api/core/v1alpha6"
 // platform command.  Use the Components field to register components with the
 // platform.
 type Platform struct {
-	Name       string
-	Components map[NameLabel]core.Component
-	Resource   core.Platform
+	Name       string                       `json:"name" yaml:"name" cue:"string | *\"default\""`
+	Components map[NameLabel]core.Component `json:"components" yaml:"components"`
+	Resource   core.Platform                `json:"resource" yaml:"resource"`
 }

 // ComponentConfig represents the configuration common to all kinds of
--- a/api/core/v1alpha6/types.go
+++ b/api/core/v1alpha6/types.go
@@ -46,10 +46,10 @@ const ComponentAnnotationsTag = "holos_component_annotations"
 //
 // [external credential provider]: https://github.com/kubernetes/enhancements/blob/313ad8b59c80819659e1fbf0f165230f633f2b22/keps/sig-auth/541-external-credential-providers/README.md
 type BuildPlan struct {
-	// Kind represents the type of the resource.
-	Kind string `json:"kind" yaml:"kind" cue:"\"BuildPlan\""`
 	// APIVersion represents the versioned schema of the resource.
 	APIVersion string `json:"apiVersion" yaml:"apiVersion" cue:"\"v1alpha6\""`
+	// Kind represents the type of the resource.
+	Kind string `json:"kind" yaml:"kind" cue:"\"BuildPlan\""`
 	// Metadata represents data about the resource such as the Name.
 	Metadata Metadata `json:"metadata" yaml:"metadata"`
 	// Spec specifies the desired state of the resource.
@@ -382,6 +382,10 @@ type Command struct {
 	IsStdoutOutput bool `json:"isStdoutOutput,omitempty" yaml:"isStdoutOutput,omitempty"`
 }

+// NameLabel indicates a field name matching the name of the value.  Usually the
+// name or metadata.name field of the struct value.
+type NameLabel string
+
 // InternalLabel is an arbitrary unique identifier internal to holos itself.
 // The holos cli is expected to never write a InternalLabel value to rendered
 // output files, therefore use a InternalLabel when the identifier must be
@@ -412,10 +416,10 @@ type Metadata struct {
 //
 //	cue export --out yaml ./platform
 type Platform struct {
-	// Kind is a string value representing the resource.
-	Kind string `json:"kind" yaml:"kind" cue:"\"Platform\""`
 	// APIVersion represents the versioned schema of this resource.
 	APIVersion string `json:"apiVersion" yaml:"apiVersion" cue:"string | *\"v1alpha6\""`
+	// Kind is a string value representing the resource.
+	Kind string `json:"kind" yaml:"kind" cue:"\"Platform\""`
 	// Metadata represents data about the resource such as the Name.
 	Metadata Metadata `json:"metadata" yaml:"metadata"`

@@ -426,7 +430,7 @@ type Platform struct {
 // PlatformSpec represents the platform specification.
 type PlatformSpec struct {
 	// Components represents a collection of holos components to manage.
-	Components []Component `json:"components" yaml:"components"`
+	Components map[NameLabel]Component `json:"components" yaml:"components" cue:"{[NAME=string]: name: NAME}"`
 }

 // Component represents the complete context necessary to produce a [BuildPlan]
--- a/cmd/holos/tests/v1alpha5/guides/helm.txt
+++ b/cmd/holos/tests/v1alpha5/guides/helm.txt
@@ -12,7 +12,8 @@ stderr -count=1 '^rendered platform'

 # Holos uses CUE to build a platform specification.
 exec holos show platform
-cmp stdout want/1.platform_spec.yaml
+cp stdout platform.yaml
+exec holos compare yaml platform.yaml want/1.platform_spec.yaml

 # Define the host and port in projects/blackbox.schema.cue
 mv projects/blackbox.schema.cue.disabled projects/blackbox.schema.cue
@@ -25,7 +26,7 @@ mv platform/prometheus.cue.disabled platform/prometheus.cue
 exec holos render platform
 stderr -count=1 '^rendered prometheus'
 stderr -count=1 '^rendered platform'
-cmp deploy/components/prometheus/prometheus.gen.yaml want/1.prometheus.gen.yaml
+exec holos compare yaml deploy/components/prometheus/prometheus.gen.yaml want/1.prometheus.gen.yaml

 # Add the CUE configuration to manage the blackbox Helm Chart component.
 mv projects/platform/components/blackbox/blackbox.cue.disabled projects/platform/components/blackbox/blackbox.cue
@@ -37,7 +38,7 @@ exec holos render platform ./platform
 stderr -count=1 '^rendered prometheus'
 stderr -count=1 '^rendered blackbox'
 stderr -count=1 '^rendered platform'
-cmp deploy/components/blackbox/blackbox.gen.yaml want/1.blackbox.gen.yaml
+exec holos compare yaml deploy/components/blackbox/blackbox.gen.yaml want/1.blackbox.gen.yaml

 # Import helm values
 exec cue import --package holos --path 'Helm: Values:' --outfile projects/platform/components/prometheus/values.cue projects/platform/components/prometheus/vendor/25.27.0/prometheus/values.yaml
@@ -55,7 +56,7 @@ mv platform/httpbin.cue.disabled platform/httpbin.cue
 # Render the platform with httpbin
 exec holos render platform ./platform
 stderr -count=1 '^rendered httpbin'
-cmp deploy/components/httpbin/httpbin.gen.yaml want/1.httpbin.gen.yaml
+exec holos compare yaml deploy/components/httpbin/httpbin.gen.yaml want/1.httpbin.gen.yaml

 # Verify the labels are correct
 grep 'replacement: blackbox:9115' deploy/components/prometheus/prometheus.gen.yaml
--- a/cmd/holos/tests/v1alpha5/issues/issue348-kustomize-patch-name.txt
+++ b/cmd/holos/tests/v1alpha5/issues/issue348-kustomize-patch-name.txt
@@ -3,7 +3,8 @@
 exec holos init platform v1alpha5 --force
 # want a buildplan shown
 exec holos show buildplans
-cmp stdout buildplan.yaml
+cp stdout buildplan-output.yaml
+exec holos compare yaml buildplan-output.yaml buildplan.yaml
 # want this error to go away
 ! stderr 'cannot convert non-concrete value string'
 -- platform/example.cue --
--- a/cmd/holos/tests/v1alpha5/issues/issue366-cue-build-tags.txt
+++ b/cmd/holos/tests/v1alpha5/issues/issue366-cue-build-tags.txt
@@ -4,10 +4,12 @@ env HOME=$WORK

 exec holos init platform v1alpha5 --force
 exec holos show platform
-cmp stdout want/empty.yaml
+cp stdout empty.yaml
+exec holos compare yaml empty.yaml want/empty.yaml

 exec holos show platform -t foo
-cmp stdout want/foo.yaml
+cp stdout foo.yaml
+exec holos compare yaml foo.yaml want/foo.yaml

 -- platform/empty.cue --
@if(foo)
--- a/cmd/holos/tests/v1alpha5/schemas/capabilities.txt
+++ b/cmd/holos/tests/v1alpha5/schemas/capabilities.txt
@@ -1,4 +1,5 @@
 # https://github.com/holos-run/holos/issues/330
+# take care to install helm 3.17.3 otherwise kube versions may not align
 exec holos init platform v1alpha5 --force
 # Make sure the helm chart works with plain helm
 exec helm template ./components/capabilities/vendor/0.1.0/capabilities
@@ -6,13 +7,13 @@ stdout 'name: has-foo-v1beta1'
 stdout 'kubeVersion: v'
 exec holos render platform ./platform
 # When no capabilities are specified
-cmp deploy/components/capabilities/capabilities.gen.yaml want/when-no-capabilities-specified.yaml
+exec holos compare yaml deploy/components/capabilities/capabilities.gen.yaml want/when-no-capabilities-specified.yaml
 # With APIVersions specified
-cmp deploy/components/specified/specified.gen.yaml want/with-capabilities-specified.yaml
+exec holos compare yaml deploy/components/specified/specified.gen.yaml want/with-capabilities-specified.yaml
 # With KubeVersion specified
-cmp deploy/components/kubeversion1/kubeversion1.gen.yaml want/with-kubeversion-specified.yaml
+exec holos compare yaml deploy/components/kubeversion1/kubeversion1.gen.yaml want/with-kubeversion-specified.yaml
 # With both APIVersions and KubeVersion specified
-cmp deploy/components/kubeversion2/kubeversion2.gen.yaml want/with-both-specified.yaml
+exec holos compare yaml deploy/components/kubeversion2/kubeversion2.gen.yaml want/with-both-specified.yaml
 -- want/with-both-specified.yaml --
 apiVersion: v1
 kind: Service
@@ -44,7 +45,7 @@ apiVersion: v1
 kind: Service
 metadata:
  annotations:
-    kubeVersion: v1.31.0
+    kubeVersion: v1.99.0
  name: has-foo-v1beta1
 spec:
  ports:
@@ -57,7 +58,7 @@ apiVersion: v1
 kind: Service
 metadata:
  annotations:
-    kubeVersion: v1.31.0
+    kubeVersion: v1.99.0
  name: has-foo-v1
 spec:
  ports:
@@ -103,7 +104,7 @@ Component: #Helm & {
        Chart: version: "0.1.0"
        _APIVersions: string | *"[]" @tag(apiVersions, type=string)
        APIVersions: json.Unmarshal(_APIVersions)
-        KubeVersion: string | *"v1.31.0" @tag(kubeVersion, type=string)
+        KubeVersion: string | *"v1.99.0" @tag(kubeVersion, type=string)
 }
 -- components/capabilities/vendor/0.1.0/capabilities/Chart.yaml --
 apiVersion: v2
@@ -137,7 +138,7 @@ kind: Service
 metadata:
  name: has-foo-v1beta1
  annotations:
-    kubeVersion: v1.31.0
+    kubeVersion: v1.99.0
 spec:
  ports:
    - port: 80
--- a/cmd/holos/tests/v1alpha5/schemas/kubernetes.txt
+++ b/cmd/holos/tests/v1alpha5/schemas/kubernetes.txt
@@ -12,7 +12,8 @@ stderr -count=1 '^rendered platform'

 # When author.#Kubernetes is empty
 exec holos cue export --expression holos --out=yaml ./components/empty
-cmp stdout want.txt
+cp stdout empty.yaml
+exec holos compare yaml empty.yaml want.txt

 -- components/empty/empty.cue --
 package holos
--- a/doc/md/api/author.md
+++ b/doc/md/api/author.md
@@ -180,9 +180,9 @@ Platform assembles a core Platform in the Resource field for the holos render pl

 ```go
 type Platform struct {
-    Name       string
-    Components map[NameLabel]core.Component
-    Resource   core.Platform
+    Name       string                       `json:"name" yaml:"name" cue:"string | *\"default\""`
+    Components map[NameLabel]core.Component `json:"components" yaml:"components"`
+    Resource   core.Platform                `json:"resource" yaml:"resource"`
 }
 ```

--- a/doc/md/api/core.md
+++ b/doc/md/api/core.md
@@ -37,6 +37,7 @@ Package core contains schemas for a [Platform](<#Platform>) and [BuildPlan](<#Bu
 - [type Kustomization](<#Kustomization>)
 - [type Kustomize](<#Kustomize>)
 - [type Metadata](<#Metadata>)
+- [type NameLabel](<#NameLabel>)
 - [type Platform](<#Platform>)
 - [type PlatformSpec](<#PlatformSpec>)
 - [type Repository](<#Repository>)
@@ -209,10 +210,10 @@ Holos uses CUE to construct a BuildPlan. Holos injects late binding values such

 ```go
 type BuildPlan struct {
-    // Kind represents the type of the resource.
-    Kind string `json:"kind" yaml:"kind" cue:"\"BuildPlan\""`
    // APIVersion represents the versioned schema of the resource.
    APIVersion string `json:"apiVersion" yaml:"apiVersion" cue:"\"v1alpha6\""`
+    // Kind represents the type of the resource.
+    Kind string `json:"kind" yaml:"kind" cue:"\"BuildPlan\""`
    // Metadata represents data about the resource such as the Name.
    Metadata Metadata `json:"metadata" yaml:"metadata"`
    // Spec specifies the desired state of the resource.
@@ -478,6 +479,15 @@ type Metadata struct {
 }
 ```

+<a name="NameLabel"></a>
+## type NameLabel {#NameLabel}
+
+NameLabel indicates a field name matching the name of the value. Usually the name or metadata.name field of the struct value.
+
+```go
+type NameLabel string
+```
+
 <a name="Platform"></a>
 ## type Platform {#Platform}

@@ -491,10 +501,10 @@ cue export --out yaml ./platform

 ```go
 type Platform struct {
-    // Kind is a string value representing the resource.
-    Kind string `json:"kind" yaml:"kind" cue:"\"Platform\""`
    // APIVersion represents the versioned schema of this resource.
    APIVersion string `json:"apiVersion" yaml:"apiVersion" cue:"string | *\"v1alpha6\""`
+    // Kind is a string value representing the resource.
+    Kind string `json:"kind" yaml:"kind" cue:"\"Platform\""`
    // Metadata represents data about the resource such as the Name.
    Metadata Metadata `json:"metadata" yaml:"metadata"`

@@ -511,7 +521,7 @@ PlatformSpec represents the platform specification.
 ```go
 type PlatformSpec struct {
    // Components represents a collection of holos components to manage.
-    Components []Component `json:"components" yaml:"components"`
+    Components map[NameLabel]Component `json:"components" yaml:"components" cue:"{[NAME=string]: name: NAME}"`
 }
 ```

--- a/doc/md/tutorial/setup.mdx
+++ b/doc/md/tutorial/setup.mdx
@@ -84,10 +84,14 @@ Install these tools to use Holos's full capabilities:
 - [Kubectl] for [kustomize] operations

 :::note
-Holos is tested with Helm `v3.16.2`. If you see `Error: chart requires
+Holos is tested with Helm `v3.17.3`. If you see `Error: chart requires
 kubeVersion` errors, try upgrading Helm.
 :::

+## Known Issues
+
+Helm `v3.18.0` has a [known issue](https://github.com/NixOS/nixpkgs/pull/322994) that causes it to produce incorrect output. This may affect Holos users. For more details, see [Holos issue #433](https://github.com/holos-run/holos/issues/433).
+
 ## Next Steps

 With your platform structure initialized, proceed to [Hello Holos] to learn Helm
--- a/go.mod
+++ b/go.mod
@@ -1,28 +1,29 @@
 module github.com/holos-run/holos

-go 1.23
+go 1.23.0

-toolchain go1.23.2
+toolchain go1.23.6

 require (
-	cuelang.org/go v0.12.0
+	cuelang.org/go v0.13.0-rc.1
+	github.com/google/go-cmp v0.7.0
 	github.com/mattn/go-isatty v0.0.20
 	github.com/mattn/go-runewidth v0.0.15
 	github.com/olekukonko/tablewriter v0.0.5
 	github.com/princjef/gomarkdoc v1.1.0
-	github.com/rogpeppe/go-internal v1.13.2-0.20241226121412-a5dc8ff20d0a
-	github.com/spf13/cobra v1.8.1
-	github.com/spf13/pflag v1.0.5
-	github.com/stretchr/testify v1.9.0
-	golang.org/x/sync v0.10.0
-	golang.org/x/tools v0.29.0
+	github.com/rogpeppe/go-internal v1.14.1
+	github.com/spf13/cobra v1.9.1
+	github.com/spf13/pflag v1.0.6
+	github.com/stretchr/testify v1.10.0
+	golang.org/x/sync v0.13.0
+	golang.org/x/tools v0.32.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.16.3
 	sigs.k8s.io/kustomize/kustomize/v5 v5.5.0
 )

 require (
-	cuelabs.dev/go/oci/ociregistry v0.0.0-20241125120445-2c00c104c6e1 // indirect
+	cuelabs.dev/go/oci/ociregistry v0.0.0-20250304105642-27e071d2c9b1 // indirect
 	dario.cat/mergo v1.0.1 // indirect
 	github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect
 	github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 // indirect
@@ -33,7 +34,7 @@ require (
 	github.com/Masterminds/sprig/v3 v3.3.0 // indirect
 	github.com/Masterminds/squirrel v1.5.4 // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect
-	github.com/ProtonMail/go-crypto v0.0.0-20230923063757-afb1ddc0824c // indirect
+	github.com/ProtonMail/go-crypto v1.1.3 // indirect
 	github.com/VividCortex/ewma v1.2.0 // indirect
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
@@ -52,12 +53,12 @@ require (
 	github.com/distribution/reference v0.6.0 // indirect
 	github.com/docker/cli v26.1.4+incompatible // indirect
 	github.com/docker/distribution v2.8.3+incompatible // indirect
-	github.com/docker/docker v27.0.0+incompatible // indirect
+	github.com/docker/docker v27.1.1+incompatible // indirect
 	github.com/docker/docker-credential-helpers v0.8.2 // indirect
 	github.com/docker/go-connections v0.5.0 // indirect
 	github.com/docker/go-metrics v0.0.1 // indirect
 	github.com/emicklei/go-restful/v3 v3.11.0 // indirect
-	github.com/emicklei/proto v1.13.4 // indirect
+	github.com/emicklei/proto v1.14.0 // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
 	github.com/evanphx/json-patch v5.9.0+incompatible // indirect
 	github.com/exponent-io/jsonpath v0.0.0-20151013193312-d6023ce2651d // indirect
@@ -67,8 +68,8 @@ require (
 	github.com/fxamacker/cbor/v2 v2.7.0 // indirect
 	github.com/go-errors/errors v1.4.2 // indirect
 	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
-	github.com/go-git/go-billy/v5 v5.5.0 // indirect
-	github.com/go-git/go-git/v5 v5.11.0 // indirect
+	github.com/go-git/go-billy/v5 v5.6.0 // indirect
+	github.com/go-git/go-git/v5 v5.13.0 // indirect
 	github.com/go-gorp/gorp/v3 v3.1.0 // indirect
 	github.com/go-logr/logr v1.4.2 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
@@ -81,7 +82,6 @@ require (
 	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/google/btree v1.0.1 // indirect
 	github.com/google/gnostic-models v0.6.9-0.20230804172637-c7be7c783f49 // indirect
-	github.com/google/go-cmp v0.6.0 // indirect
 	github.com/google/gofuzz v1.2.0 // indirect
 	github.com/google/pprof v0.0.0-20240622144329-c177fd99eaa9 // indirect
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
@@ -128,8 +128,8 @@ require (
 	github.com/nxadm/tail v1.4.11 // indirect
 	github.com/onsi/ginkgo v1.16.4 // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
-	github.com/opencontainers/image-spec v1.1.0 // indirect
-	github.com/pelletier/go-toml/v2 v2.2.3 // indirect
+	github.com/opencontainers/image-spec v1.1.1 // indirect
+	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
 	github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
 	github.com/pjbgf/sha1cd v0.3.0 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
@@ -140,16 +140,16 @@ require (
 	github.com/prometheus/client_model v0.6.1 // indirect
 	github.com/prometheus/common v0.55.0 // indirect
 	github.com/prometheus/procfs v0.15.1 // indirect
-	github.com/protocolbuffers/txtpbfmt v0.0.0-20241112170944-20d2c9ebc01d // indirect
+	github.com/protocolbuffers/txtpbfmt v0.0.0-20250129171521-feedd8250727 // indirect
 	github.com/rivo/uniseg v0.4.7 // indirect
 	github.com/rubenv/sql-migrate v1.7.0 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/sagikazarmark/locafero v0.4.0 // indirect
 	github.com/sagikazarmark/slog-shim v0.1.0 // indirect
-	github.com/sergi/go-diff v1.3.1 // indirect
+	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
 	github.com/shopspring/decimal v1.4.0 // indirect
 	github.com/sirupsen/logrus v1.9.3 // indirect
-	github.com/skeema/knownhosts v1.2.1 // indirect
+	github.com/skeema/knownhosts v1.3.0 // indirect
 	github.com/sourcegraph/conc v0.3.0 // indirect
 	github.com/spf13/afero v1.11.0 // indirect
 	github.com/spf13/cast v1.7.0 // indirect
@@ -168,14 +168,14 @@ require (
 	go.opentelemetry.io/otel/metric v1.28.0 // indirect
 	go.opentelemetry.io/otel/trace v1.28.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/crypto v0.32.0 // indirect
-	golang.org/x/exp v0.0.0-20240613232115-7f521ea00fb8 // indirect
-	golang.org/x/mod v0.22.0 // indirect
-	golang.org/x/net v0.34.0 // indirect
-	golang.org/x/oauth2 v0.25.0 // indirect
-	golang.org/x/sys v0.29.0 // indirect
-	golang.org/x/term v0.28.0 // indirect
-	golang.org/x/text v0.21.0 // indirect
+	golang.org/x/crypto v0.37.0 // indirect
+	golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
+	golang.org/x/mod v0.24.0 // indirect
+	golang.org/x/net v0.39.0 // indirect
+	golang.org/x/oauth2 v0.29.0 // indirect
+	golang.org/x/sys v0.32.0 // indirect
+	golang.org/x/term v0.31.0 // indirect
+	golang.org/x/text v0.24.0 // indirect
 	golang.org/x/time v0.5.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20240701130421-f6361c86f094 // indirect
 	google.golang.org/grpc v1.65.0 // indirect
--- a/go.sum
+++ b/go.sum
@@ -1,7 +1,7 @@
-cuelabs.dev/go/oci/ociregistry v0.0.0-20241125120445-2c00c104c6e1 h1:mRwydyTyhtRX2wXS3mqYWzR2qlv6KsmoKXmlz5vInjg=
-cuelabs.dev/go/oci/ociregistry v0.0.0-20241125120445-2c00c104c6e1/go.mod h1:5A4xfTzHTXfeVJBU6RAUf+QrlfTCW+017q/QiW+sMLg=
-cuelang.org/go v0.12.0 h1:q4W5I+RtDIA27rslQyyt6sWkXX0YS9qm43+U1/3e0kU=
-cuelang.org/go v0.12.0/go.mod h1:B4+kjvGGQnbkz+GuAv1dq/R308gTkp0sO28FdMrJ2Kw=
+cuelabs.dev/go/oci/ociregistry v0.0.0-20250304105642-27e071d2c9b1 h1:Dmbd5Q+ENb2C6carvwrMsrOUwJ9X9qfL5JdW32gYAHo=
+cuelabs.dev/go/oci/ociregistry v0.0.0-20250304105642-27e071d2c9b1/go.mod h1:dqrnoZx62xbOZr11giMPrWbhlaV8euHwciXZEy3baT8=
+cuelang.org/go v0.13.0-rc.1 h1:0y3LZKA5LpJehVMHTJhjR7jQxBdYZ5fg05htMaKHaJg=
+cuelang.org/go v0.13.0-rc.1/go.mod h1:kA/8D9/d32IBp2lISWo90BEJhLyS9tqBcvqw2QAEhEg=
 dario.cat/mergo v1.0.1 h1:Ra4+bf83h2ztPIQYNP99R6m+Y7KfnARDfID+a+vLl4s=
 dario.cat/mergo v1.0.1/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
 filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA=
@@ -29,8 +29,8 @@ github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERo
 github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU=
 github.com/Microsoft/hcsshim v0.11.7 h1:vl/nj3Bar/CvJSYo7gIQPyRWc9f3c6IeSNavBTSZNZQ=
 github.com/Microsoft/hcsshim v0.11.7/go.mod h1:MV8xMfmECjl5HdO7U/3/hFVnkmSBjAjmA09d4bExKcU=
-github.com/ProtonMail/go-crypto v0.0.0-20230923063757-afb1ddc0824c h1:kMFnB0vCcX7IL/m9Y5LO+KQYv+t1CQOiFe6+SV2J7bE=
-github.com/ProtonMail/go-crypto v0.0.0-20230923063757-afb1ddc0824c/go.mod h1:EjAoLdwvbIOoOQr3ihjnSoLZRtE8azugULFRteWMNc0=
+github.com/ProtonMail/go-crypto v1.1.3 h1:nRBOetoydLeUb4nHajyO2bKqMLfWQ/ZPwkXqXxPxCFk=
+github.com/ProtonMail/go-crypto v1.1.3/go.mod h1:rA3QumHc/FZ8pAHreoekgiAbzpNsfQAosU5td4SnOrE=
 github.com/Shopify/logrus-bugsnag v0.0.0-20171204204709-577dee27f20d h1:UrqY+r/OJnIp5u0s1SbQ8dVfLCZJsnvazdBP5hS4iRs=
 github.com/Shopify/logrus-bugsnag v0.0.0-20171204204709-577dee27f20d/go.mod h1:HI8ITrYtUY+O+ZhtlqUnD8+KwNPOyugEhfP9fdUIaEQ=
 github.com/VividCortex/ewma v1.1.1/go.mod h1:2Tkkvm3sRDVXaiyucHiACn4cqf7DpdyLvmxzcbUokwA=
@@ -58,7 +58,6 @@ github.com/bugsnag/osext v0.0.0-20130617224835-0dd3f918b21b h1:otBG+dV+YK+Soembj
 github.com/bugsnag/osext v0.0.0-20130617224835-0dd3f918b21b/go.mod h1:obH5gd0BsqsP2LwDJ9aOkm/6J86V6lyAXCoQWGw3K50=
 github.com/bugsnag/panicwrap v0.0.0-20151223152923-e2c28503fcd0 h1:nvj0OLI3YqYXer/kZD8Ri1aaunCxIEsOst1BVJswV0o=
 github.com/bugsnag/panicwrap v0.0.0-20151223152923-e2c28503fcd0/go.mod h1:D/8v3kj0zr8ZAKg1AQ6crr+5VwKN5eIywRkfhyM/+dE=
-github.com/bwesterb/go-ristretto v1.2.3/go.mod h1:fUIoIZaG73pV5biE2Blr2xEzDoMj7NFEuV9ekS419A0=
 github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=
 github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
 github.com/chai2010/gettext-go v1.0.2 h1:1Lwwip6Q2QGsAdl/ZKPCwTe9fe0CjlUbqj5bFNSjIRk=
@@ -67,7 +66,6 @@ github.com/cheggaaa/pb v2.0.7+incompatible/go.mod h1:pQciLPpbU0oxA0h+VJYYLxO+XeD
 github.com/cheggaaa/pb/v3 v3.0.4/go.mod h1:7rgWxLrAUcFMkvJuv09+DYi7mMUYi8nO9iOWcvGJPfw=
 github.com/cheggaaa/pb/v3 v3.0.8 h1:bC8oemdChbke2FHIIGy9mn4DPJ2caZYQnfbRqwmdCoA=
 github.com/cheggaaa/pb/v3 v3.0.8/go.mod h1:UICbiLec/XO6Hw6k+BHEtHeQFzzBH4i2/qk/ow1EJTA=
-github.com/cloudflare/circl v1.3.3/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA=
 github.com/cloudflare/circl v1.3.7 h1:qlCDlTPz2n9fu58M0Nh1J/JzcFpfgkFHHX3O35r5vcU=
 github.com/cloudflare/circl v1.3.7/go.mod h1:sRTcRWXGLrKw6yIGJ+l7amYJFfAXbZG0kBSc8r4zxgA=
 github.com/cockroachdb/apd/v3 v3.2.1 h1:U+8j7t0axsIgvQUqthuNm82HIrYXodOV2iWLWtEaIwg=
@@ -84,7 +82,7 @@ github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I=
 github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo=
 github.com/containerd/platforms v0.2.1 h1:zvwtM3rz2YHPQsF2CHYM8+KtB5dvhISiXh5ZpSBQv6A=
 github.com/containerd/platforms v0.2.1/go.mod h1:XHCb+2/hzowdiut9rkudds9bE5yJ7npe7dG/wG+uFPw=
-github.com/cpuguy83/go-md2man/v2 v2.0.4/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
+github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
 github.com/creack/pty v1.1.18 h1:n56/Zwd5o6whRC5PMGretI4IdRLlmBXYNjScPaBgsbY=
 github.com/creack/pty v1.1.18/go.mod h1:MOBLtS5ELjhRRrroQr9kyvTxUAFNvYEK993ew/Vr4O4=
 github.com/cyphar/filepath-securejoin v0.3.4 h1:VBWugsJh2ZxJmLFSM06/0qzQyiQX2Qs0ViKrUAcqdZ8=
@@ -101,8 +99,8 @@ github.com/docker/cli v26.1.4+incompatible h1:I8PHdc0MtxEADqYJZvhBrW9bo8gawKwwen
 github.com/docker/cli v26.1.4+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
 github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
 github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
-github.com/docker/docker v27.0.0+incompatible h1:JRugTYuelmWlW0M3jakcIadDx2HUoUO6+Tf2C5jVfwA=
-github.com/docker/docker v27.0.0+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
+github.com/docker/docker v27.1.1+incompatible h1:hO/M4MtV36kzKldqnA37IWhebRA+LnqqcqDja6kVaKY=
+github.com/docker/docker v27.1.1+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
 github.com/docker/docker-credential-helpers v0.8.2 h1:bX3YxiGzFP5sOXWc3bTPEXdEaZSeVMrFgOr3T+zrFAo=
 github.com/docker/docker-credential-helpers v0.8.2/go.mod h1:P3ci7E3lwkZg6XiHdRKft1KckHiO9a2rNtyFbZ/ry9M=
 github.com/docker/go-connections v0.5.0 h1:USnMq7hx7gwdVZq1L49hLXaFtUdTADjXGp+uj1Br63c=
@@ -113,12 +111,12 @@ github.com/docker/go-metrics v0.0.1 h1:AgB/0SvBxihN0X8OR4SjsblXkbMvalQ8cjmtKQ2rQ
 github.com/docker/go-metrics v0.0.1/go.mod h1:cG1hvH2utMXtqgqqYE9plW6lDxS3/5ayHzueweSI3Vw=
 github.com/docker/libtrust v0.0.0-20150114040149-fa567046d9b1 h1:ZClxb8laGDf5arXfYcAtECDFgAgHklGI8CxgjHnXKJ4=
 github.com/docker/libtrust v0.0.0-20150114040149-fa567046d9b1/go.mod h1:cyGadeNEkKy96OOhEzfZl+yxihPEzKnqJwvfuSUqbZE=
-github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a h1:mATvB/9r/3gvcejNsXKSkQ6lcIaNec2nyfOdlTBR2lU=
-github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a/go.mod h1:Ro8st/ElPeALwNFlcTpWmkr6IoMFfkjXAvTHpevnDsM=
+github.com/elazarl/goproxy v1.2.1 h1:njjgvO6cRG9rIqN2ebkqy6cQz2Njkx7Fsfv/zIZqgug=
+github.com/elazarl/goproxy v1.2.1/go.mod h1:YfEbZtqP4AetfO6d40vWchF3znWX7C7Vd6ZMfdL8z64=
 github.com/emicklei/go-restful/v3 v3.11.0 h1:rAQeMHw1c7zTmncogyy8VvRZwtkmkZ4FxERmMY4rD+g=
 github.com/emicklei/go-restful/v3 v3.11.0/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
-github.com/emicklei/proto v1.13.4 h1:myn1fyf8t7tAqIzV91Tj9qXpvyXXGXk8OS2H6IBSc9g=
-github.com/emicklei/proto v1.13.4/go.mod h1:rn1FgRS/FANiZdD2djyH7TMA9jdRDcYQ9IEN9yvjX0A=
+github.com/emicklei/proto v1.14.0 h1:WYxC0OrBuuC+FUCTZvb8+fzEHdZMwLEF+OnVfZA3LXU=
+github.com/emicklei/proto v1.14.0/go.mod h1:rn1FgRS/FANiZdD2djyH7TMA9jdRDcYQ9IEN9yvjX0A=
 github.com/emirpasic/gods v1.18.1 h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc=
 github.com/emirpasic/gods v1.18.1/go.mod h1:8tpGGwCnJ5H4r6BWwaV6OrWmMoPhUl5jm/FMNAnJvWQ=
 github.com/evanphx/json-patch v5.9.0+incompatible h1:fBXyNpNMuTTDdquAq/uisOr2lShz4oaXpDTX2bLe7ls=
@@ -143,18 +141,18 @@ github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nos
 github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM=
 github.com/fxamacker/cbor/v2 v2.7.0 h1:iM5WgngdRBanHcxugY4JySA0nk1wZorNOpTgCMedv5E=
 github.com/fxamacker/cbor/v2 v2.7.0/go.mod h1:pxXPTn3joSm21Gbwsv0w9OSA2y1HFR9qXEeXQVeNoDQ=
-github.com/gliderlabs/ssh v0.3.5 h1:OcaySEmAQJgyYcArR+gGGTHCyE7nvhEMTlYY+Dp8CpY=
-github.com/gliderlabs/ssh v0.3.5/go.mod h1:8XB4KraRrX39qHhT6yxPsHedjA08I/uBVwj4xC+/+z4=
+github.com/gliderlabs/ssh v0.3.8 h1:a4YXD1V7xMF9g5nTkdfnja3Sxy1PVDCj1Zg4Wb8vY6c=
+github.com/gliderlabs/ssh v0.3.8/go.mod h1:xYoytBv1sV0aL3CavoDuJIQNURXkkfPA/wxQ1pL1fAU=
 github.com/go-errors/errors v1.4.2 h1:J6MZopCL4uSllY1OfXM374weqZFFItUbrImctkmUxIA=
 github.com/go-errors/errors v1.4.2/go.mod h1:sIVyrIiJhuEF+Pj9Ebtd6P/rEYROXFi3BopGUQ5a5Og=
 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI=
 github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376/go.mod h1:an3vInlBmSxCcxctByoQdvwPiA7DTK7jaaFDBTtu0ic=
-github.com/go-git/go-billy/v5 v5.5.0 h1:yEY4yhzCDuMGSv83oGxiBotRzhwhNr8VZyphhiu+mTU=
-github.com/go-git/go-billy/v5 v5.5.0/go.mod h1:hmexnoNsr2SJU1Ju67OaNz5ASJY3+sHgFRpCtpDCKow=
+github.com/go-git/go-billy/v5 v5.6.0 h1:w2hPNtoehvJIxR00Vb4xX94qHQi/ApZfX+nBE2Cjio8=
+github.com/go-git/go-billy/v5 v5.6.0/go.mod h1:sFDq7xD3fn3E0GOwUSZqHo9lrkmx8xJhA0ZrfvjBRGM=
 github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399 h1:eMje31YglSBqCdIqdhKBW8lokaMrL3uTkpGYlE2OOT4=
 github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399/go.mod h1:1OCfN199q1Jm3HZlxleg+Dw/mwps2Wbk9frAWm+4FII=
-github.com/go-git/go-git/v5 v5.11.0 h1:XIZc1p+8YzypNr34itUfSvYJcv+eYdTnTvOZ2vD3cA4=
-github.com/go-git/go-git/v5 v5.11.0/go.mod h1:6GFcX2P3NM7FPBfpePbpLd21XxsgdAt+lKqXmCUiUCY=
+github.com/go-git/go-git/v5 v5.13.0 h1:vLn5wlGIh/X78El6r3Jr+30W16Blk0CTcxTYcYPWi5E=
+github.com/go-git/go-git/v5 v5.13.0/go.mod h1:Wjo7/JyVKtQgUNdXYXIepzWfJQkUEIGvkvVkiXRR/zw=
 github.com/go-gorp/gorp/v3 v3.1.0 h1:ItKF/Vbuj31dmV4jxA1qblpSwkl9g1typ24xoe70IGs=
 github.com/go-gorp/gorp/v3 v3.1.0/go.mod h1:dLEjIyyRNiXvNZ8PSmzpt1GsWAUK8kjVhEpjH8TixEw=
 github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
@@ -208,8 +206,8 @@ github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMyw
 github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
-github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
+github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
 github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
@@ -360,14 +358,14 @@ github.com/onsi/ginkgo/v2 v2.19.0 h1:9Cnnf7UHo57Hy3k6/m5k3dRfGTMXGvxhHFvkDTCTpvA
 github.com/onsi/ginkgo/v2 v2.19.0/go.mod h1:rlwLi9PilAFJ8jCg9UE1QP6VBpd6/xj3SRC0d6TU0To=
 github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7JYyY=
 github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo=
-github.com/onsi/gomega v1.33.1 h1:dsYjIxxSR755MDmKVsaFQTE22ChNBcuuTWgkUDSubOk=
-github.com/onsi/gomega v1.33.1/go.mod h1:U4R44UsT+9eLIaYRB2a5qajjtQYn0hauxvRm16AVYg0=
+github.com/onsi/gomega v1.34.1 h1:EUMJIKUjM8sKjYbtxQI9A4z2o+rruxnzNvpknOXie6k=
+github.com/onsi/gomega v1.34.1/go.mod h1:kU1QgUvBDLXBJq618Xvm2LUX6rSAfRaFRTcdOeDLwwY=
 github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
-github.com/opencontainers/image-spec v1.1.0 h1:8SG7/vwALn54lVB/0yZ/MMwhFrPYtpEHQb2IpWsCzug=
-github.com/opencontainers/image-spec v1.1.0/go.mod h1:W4s4sFTMaBeK1BQLXbG4AdM2szdn85PY75RI83NrTrM=
-github.com/pelletier/go-toml/v2 v2.2.3 h1:YmeHyLY8mFWbdkNWwpr+qIL2bEqT0o95WSdkNHvL12M=
-github.com/pelletier/go-toml/v2 v2.2.3/go.mod h1:MfCQTFTvCcUyyvvwm1+G6H/jORL20Xlb6rzQu9GuUkc=
+github.com/opencontainers/image-spec v1.1.1 h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=
+github.com/opencontainers/image-spec v1.1.1/go.mod h1:qpqAh3Dmcf36wStyyWU+kCeDgrGnAve2nCC8+7h8Q0M=
+github.com/pelletier/go-toml/v2 v2.2.4 h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4=
+github.com/pelletier/go-toml/v2 v2.2.4/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY=
 github.com/peterbourgon/diskv v2.0.1+incompatible h1:UBdAOUP5p4RWqPBg048CAvpKN+vxiaj6gdUUzhl4XmI=
 github.com/peterbourgon/diskv v2.0.1+incompatible/go.mod h1:uqqh8zWWbv1HBMNONnaR/tNboyR3/BZd58JJSHlUSCU=
 github.com/phayes/freeport v0.0.0-20220201140144-74d24b5ae9f5 h1:Ii+DKncOVM8Cu1Hc+ETb5K+23HdAMvESYE3ZJ5b5cMI=
@@ -406,15 +404,15 @@ github.com/prometheus/procfs v0.0.2/go.mod h1:TjEm7ze935MbeOT/UhFTIMYKhuLP4wbCsT
 github.com/prometheus/procfs v0.0.3/go.mod h1:4A/X28fw3Fc593LaREMrKMqOKvUAntwMDaekg4FpcdQ=
 github.com/prometheus/procfs v0.15.1 h1:YagwOFzUgYfKKHX6Dr+sHT7km/hxC76UB0learggepc=
 github.com/prometheus/procfs v0.15.1/go.mod h1:fB45yRUv8NstnjriLhBQLuOUt+WW4BsoGhij/e3PBqk=
-github.com/protocolbuffers/txtpbfmt v0.0.0-20241112170944-20d2c9ebc01d h1:HWfigq7lB31IeJL8iy7jkUmU/PG1Sr8jVGhS749dbUA=
-github.com/protocolbuffers/txtpbfmt v0.0.0-20241112170944-20d2c9ebc01d/go.mod h1:jgxiZysxFPM+iWKwQwPR+y+Jvo54ARd4EisXxKYpB5c=
+github.com/protocolbuffers/txtpbfmt v0.0.0-20250129171521-feedd8250727 h1:A8EM8fVuYc0qbVMw9D6EiKdKTIm1SmLvAWcCc2mipGY=
+github.com/protocolbuffers/txtpbfmt v0.0.0-20250129171521-feedd8250727/go.mod h1:VmWrOlMnBZNtToCWzRlZlIXcJqjo0hS5dwQbRD62gL8=
 github.com/rivo/uniseg v0.1.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
 github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ=
 github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
 github.com/rogpeppe/go-internal v1.5.2/go.mod h1:xXDCJY+GAPziupqXw64V24skbSoqbTEfhy4qGm1nDQc=
-github.com/rogpeppe/go-internal v1.13.2-0.20241226121412-a5dc8ff20d0a h1:w3tdWGKbLGBPtR/8/oO74W6hmz0qE5q0z9aqSAewaaM=
-github.com/rogpeppe/go-internal v1.13.2-0.20241226121412-a5dc8ff20d0a/go.mod h1:S8kfXMp+yh77OxPD4fdM6YUknrZpQxLhvxzS4gDHENY=
+github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=
+github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc=
 github.com/rubenv/sql-migrate v1.7.0 h1:HtQq1xyTN2ISmQDggnh0c9U3JlP8apWh8YO2jzlXpTI=
 github.com/rubenv/sql-migrate v1.7.0/go.mod h1:S4wtDEG1CKn+0ShpTtzWhFpHHI5PvCUtiGI+C+Z2THE=
 github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk=
@@ -423,26 +421,26 @@ github.com/sagikazarmark/locafero v0.4.0 h1:HApY1R9zGo4DBgr7dqsTH/JJxLTTsOt7u6ke
 github.com/sagikazarmark/locafero v0.4.0/go.mod h1:Pe1W6UlPYUk/+wc/6KFhbORCfqzgYEpgQ3O5fPuL3H4=
 github.com/sagikazarmark/slog-shim v0.1.0 h1:diDBnUNK9N/354PgrxMywXnAwEr1QZcOr6gto+ugjYE=
 github.com/sagikazarmark/slog-shim v0.1.0/go.mod h1:SrcSrq8aKtyuqEI1uvTDTK1arOWRIczQRv+GVI1AkeQ=
-github.com/sergi/go-diff v1.3.1 h1:xkr+Oxo4BOQKmkn/B9eMK0g5Kg/983T9DqqPHwYqD+8=
-github.com/sergi/go-diff v1.3.1/go.mod h1:aMJSSKb2lpPvRNec0+w3fl7LP9IOFzdc9Pa4NFbPK1I=
+github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8=
+github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
 github.com/shopspring/decimal v1.4.0 h1:bxl37RwXBklmTi0C79JfXCEBD1cqqHt0bbgBAGFp81k=
 github.com/shopspring/decimal v1.4.0/go.mod h1:gawqmDU56v4yIKSwfBSFip1HdCCXN8/+DMd9qYNcwME=
 github.com/sirupsen/logrus v1.2.0/go.mod h1:LxeOpSwHxABJmUn/MG1IvRgCAasNZTLOkJPxbbu5VWo=
 github.com/sirupsen/logrus v1.7.0/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
 github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
 github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
-github.com/skeema/knownhosts v1.2.1 h1:SHWdIUa82uGZz+F+47k8SY4QhhI291cXCpopT1lK2AQ=
-github.com/skeema/knownhosts v1.2.1/go.mod h1:xYbVRSPxqBZFrdmDyMmsOs+uX1UZC3nTN3ThzgDxUwo=
+github.com/skeema/knownhosts v1.3.0 h1:AM+y0rI04VksttfwjkSTNQorvGqmwATnvnAHpSgc0LY=
+github.com/skeema/knownhosts v1.3.0/go.mod h1:sPINvnADmT/qYH1kfv+ePMmOBTH6Tbl7b5LvTDjFK7M=
 github.com/sourcegraph/conc v0.3.0 h1:OQTbbt6P72L20UqAkXXuLOj79LfEanQ+YQFNpLA9ySo=
 github.com/sourcegraph/conc v0.3.0/go.mod h1:Sdozi7LEKbFPqYX2/J+iBAM6HpqSLTASQIKqDmF7Mt0=
 github.com/spf13/afero v1.11.0 h1:WJQKhtpdm3v2IzqG8VMqrr6Rf3UYpEF239Jy9wNepM8=
 github.com/spf13/afero v1.11.0/go.mod h1:GH9Y3pIexgf1MTIWtNGyogA5MwRIDXGUr+hbWNoBjkY=
 github.com/spf13/cast v1.7.0 h1:ntdiHjuueXFgm5nzDRdOS4yfT43P5Fnud6DH50rz/7w=
 github.com/spf13/cast v1.7.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo=
-github.com/spf13/cobra v1.8.1 h1:e5/vxKd/rZsfSJMUX1agtjeTDf+qv1/JdBF8gg5k9ZM=
-github.com/spf13/cobra v1.8.1/go.mod h1:wHxEcudfqmLYa8iTfL+OuZPbBZkmvliBWKIezN3kD9Y=
-github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
-github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/spf13/cobra v1.9.1 h1:CXSaggrXdbHK9CF+8ywj8Amf7PBRmPCOJugH954Nnlo=
+github.com/spf13/cobra v1.9.1/go.mod h1:nDyEzZ8ogv936Cinf6g1RU9MRY64Ir93oCnqb9wxYW0=
+github.com/spf13/pflag v1.0.6 h1:jFzHGLGAlb3ruxLB8MhbI6A8+AQX/2eW4qeyNZXNp2o=
+github.com/spf13/pflag v1.0.6/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
 github.com/spf13/viper v1.18.2 h1:LUXCnvUvSM6FXAsj6nnfc8Q2tp1dIgUfY9Kc8GsSOiQ=
 github.com/spf13/viper v1.18.2/go.mod h1:EKmWIqdnk5lOcmR72yw6hS+8OPYcwD0jteitLMVB+yk=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
@@ -454,8 +452,8 @@ github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UV
 github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
 github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg=
-github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
+github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
 github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=
 github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=
 github.com/tetratelabs/wazero v1.6.0 h1:z0H1iikCdP8t+q341xqepY4EWvHEw8Es7tlqiVzlP3g=
@@ -477,7 +475,6 @@ github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ=
 github.com/xlab/treeprint v1.2.0/go.mod h1:gj5Gd3gPdKtR1ikdDK6fnFLdmIS0X30kTTuNd/WEJu0=
 github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
 github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
-github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 github.com/yvasiyarov/go-metrics v0.0.0-20140926110328-57bccd1ccd43 h1:+lm10QQTNSBd8DVTNGHx7o/IKu9HYDvLMffDhbyLccI=
 github.com/yvasiyarov/go-metrics v0.0.0-20140926110328-57bccd1ccd43/go.mod h1:aX5oPXxHm3bOH+xeAttToC8pqch2ScQN/JoXYupl6xs=
 github.com/yvasiyarov/gorelic v0.0.0-20141212073537-a9bba5b9ab50 h1:hlE8//ciYMztlGpl/VA+Zm1AcTPHYkHJPbHqE6WJUXE=
@@ -502,20 +499,15 @@ golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnf
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
-golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
-golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
-golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
-golang.org/x/crypto v0.32.0 h1:euUpcYgM8WcP71gNpTqQCn6rC2t6ULUPiOzfWaXVVfc=
-golang.org/x/crypto v0.32.0/go.mod h1:ZnnJkOaASj8g0AjIduWNlq2NRxL0PlBrbKVyZ6V/Ugc=
-golang.org/x/exp v0.0.0-20240613232115-7f521ea00fb8 h1:yixxcjnhBmY0nkL253HFVIm0JsFHwrHdT3Yh6szTnfY=
-golang.org/x/exp v0.0.0-20240613232115-7f521ea00fb8/go.mod h1:jj3sYF3dwk5D+ghuXyeI3r5MFf+NT2An6/9dOA95KSI=
+golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=
+golang.org/x/crypto v0.37.0/go.mod h1:vg+k43peMZ0pUMhYmVAWysMK35e6ioLh3wB8ZCAfbVc=
+golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 h1:2dVuKD2vS7b0QIHQbpyTISPd0LeHDbnYEryqj5Q1ug8=
+golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56/go.mod h1:M4RDyNAINzryxdtnbRXRL/OHtkFuWGRjvuhBJpk2IlY=
 golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
-golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
-golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.22.0 h1:D4nJWe9zXqHOmWqj4VMOJhvzj7bEZg4wEYa759z1pH4=
-golang.org/x/mod v0.22.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY=
+golang.org/x/mod v0.24.0 h1:ZfthKaKaT4NrhGVZHO1/WDTwGES4De8KtWO0SIbNJMU=
+golang.org/x/mod v0.24.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
@@ -524,26 +516,19 @@ golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLL
 golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200520004742-59133d7f0dd7/go.mod h1:qpuaurCH72eLCgpAm/N6yyVIVM9cpaDIP3A8BGJEC5A=
 golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
-golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
-golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
-golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
-golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
-golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
-golang.org/x/net v0.34.0 h1:Mb7Mrk043xzHgnRM88suvJFwzVrRfHEHJEl5/71CKw0=
-golang.org/x/net v0.34.0/go.mod h1:di0qlW3YNM5oh6GqDGQr92MyTozJPmybPK4Ev/Gm31k=
-golang.org/x/oauth2 v0.25.0 h1:CY4y7XT9v0cRI9oupztF8AgiIu99L/ksR/Xp/6jrZ70=
-golang.org/x/oauth2 v0.25.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI=
+golang.org/x/net v0.39.0 h1:ZCu7HMWDxpXpaiKdhzIfaltL9Lp31x/3fCP11bc6/fY=
+golang.org/x/net v0.39.0/go.mod h1:X7NRbYVEA+ewNkCNyJ513WmMdQ3BineSwVtN2zD/d+E=
+golang.org/x/oauth2 v0.29.0 h1:WdYw2tdTK1S8olAzWHdgeqfy+Mtm9XNhv/xJsY65d98=
+golang.org/x/oauth2 v0.29.0/go.mod h1:onh5ek6nERTohokkhCD/y2cV4Do3fxFHFuAejCkRWT8=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ=
-golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.13.0 h1:AauUjRAJ9OSnvULf/ARrrVywoJDy0YS2AwQ98I37610=
+golang.org/x/sync v0.13.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20181116152217-5ac8a444bdc5/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -570,31 +555,19 @@ golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220908164124-27713097b956/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.3.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.29.0 h1:TPYlXGxvx1MGTn2GiZDhnjPA9wZzZeGKHHmKhHYvgaU=
-golang.org/x/sys v0.29.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.32.0 h1:s77OFDvIQeibCmezSnk/q6iAfkdiQaJi4VzroCFrN20=
+golang.org/x/sys v0.32.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
-golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
-golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
-golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
-golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
-golang.org/x/term v0.28.0 h1:/Ts8HFuMR2E6IP/jlo7QVLZHggjKQbhu/7H0LJFr3Gg=
-golang.org/x/term v0.28.0/go.mod h1:Sw/lC2IAUZ92udQNf3WodGtn4k/XoLyZoh8v/8uiwek=
+golang.org/x/term v0.31.0 h1:erwDkOK1Msy6offm1mOgvspSkslFnIGsFnxOKoufg3o=
+golang.org/x/term v0.31.0/go.mod h1:R4BeIy7D95HzImkxGkTW1UQTtP54tio2RyHz7PwK0aw=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
-golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
-golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
-golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo=
-golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
+golang.org/x/text v0.24.0 h1:dd5Bzh4yt5KYA8f9CJHCP4FB4D51c2c6JvN37xJJkJ0=
+golang.org/x/text v0.24.0/go.mod h1:L8rBsPeo2pSS+xqN0d5u2ikmjtmoJbDBT1b7nHvFCdU=
 golang.org/x/time v0.5.0 h1:o7cqy6amK/52YcAKIPlM3a+Fpj35zvRj2TP+e1xFSfk=
 golang.org/x/time v0.5.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
@@ -602,10 +575,8 @@ golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtn
 golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
 golang.org/x/tools v0.0.0-20201224043029-2b0845dc783e/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
-golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
-golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
-golang.org/x/tools v0.29.0 h1:Xx0h3TtM9rzQpQuR4dKLrdglAmCEN5Oi+P74JdhdzXE=
-golang.org/x/tools v0.29.0/go.mod h1:KMQVMRsVxU6nHCFXrBPhDB8XncLNLM0lIy/F14RP588=
+golang.org/x/tools v0.32.0 h1:Q7N1vhpkQv7ybVzLFtTjvQya2ewbwNDZzUgfXGqtMWU=
+golang.org/x/tools v0.32.0/go.mod h1:ZxrU41P/wAbZD8EDa6dDCa6XfpkhJ7HFMjHJXfBDu8s=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
--- a/internal/cli/compare.go
+++ b/internal/cli/compare.go
@@ -0,0 +1,70 @@
+package cli
+
+import (
+	"github.com/holos-run/holos/internal/compare"
+	"github.com/holos-run/holos/internal/errors"
+	"github.com/spf13/cobra"
+)
+
+// New for the compare command.
+func NewCompareCmd() *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   "compare",
+		Short: "Compare Holos resources",
+		Long:  "Compare Holos resources to verify semantic equivalence",
+		Args: func(cmd *cobra.Command, args []string) error {
+			if len(args) > 0 {
+				return errors.Format("unknown command %q for %q", args[0], cmd.CommandPath())
+			}
+			return nil
+		},
+		RunE: func(cmd *cobra.Command, args []string) error {
+			return cmd.Help()
+		},
+	}
+
+	cmd.AddCommand(NewCompareBuildPlansCmd())
+	cmd.AddCommand(NewCompareYAMLCmd())
+	return cmd
+}
+
+// New for the compare buildplans subcommand.
+func NewCompareBuildPlansCmd() *cobra.Command {
+	var backwardsCompatible bool
+
+	cmd := &cobra.Command{
+		Use:   "buildplans [file1] [file2]",
+		Short: "Compare two BuildPlan files",
+		Long:  "Compare two BuildPlan files to verify they are semantically equivalent",
+		Args:  cobra.ExactArgs(2),
+		RunE: func(cmd *cobra.Command, args []string) error {
+			c := compare.New()
+			return c.BuildPlans(args[0], args[1], backwardsCompatible)
+		},
+	}
+
+	cmd.Flags().BoolVar(&backwardsCompatible, "backwards-compatible", false, "Enable backwards compatibility mode where file2 may have fields missing from file1")
+
+	return cmd
+}
+
+// New for the compare yaml subcommand.
+func NewCompareYAMLCmd() *cobra.Command {
+	var backwardsCompatible bool
+
+	cmd := &cobra.Command{
+		Use:   "yaml [file1] [file2]",
+		Short: "Compare two yaml object streams",
+		Long:  "Compare two yaml object streams to verify they are structurally equivalent",
+		Args:  cobra.ExactArgs(2),
+		RunE: func(cmd *cobra.Command, args []string) error {
+			c := compare.New()
+			// TODO(jeff): Add a YAML() function.
+			return c.BuildPlans(args[0], args[1], backwardsCompatible)
+		},
+	}
+
+	cmd.Flags().BoolVar(&backwardsCompatible, "backwards-compatible", false, "Enable backwards compatibility mode where file2 may have fields missing from file1")
+
+	return cmd
+}
--- a/internal/cli/compile.txt
+++ b/internal/cli/compile.txt
@@ -9,4 +9,9 @@ render platform' to run concurrent cue exports safely.

 For example:

-  holos show platform --format=json | jq '.spec.components[]' | holos compile
+  holos show platform --format=json \
+    | jq '.spec.components[] | {kind: "Component", apiVersion: "v1alpha6", component: .}' \
+    | holos compile --log-level=debug
+
+Note each platform components element is embedded into the component field of an
+enveloping object for the purpose of conveying type metadata.
--- a/internal/cli/render/render.go
+++ b/internal/cli/render/render.go
@@ -61,6 +61,8 @@ func (r *renderPlatform) Run(ctx context.Context, p *platform.Platform) error {
 				args := make([]string, 0, 100)
 				args = append(args, prefixArgs...)
 				args = append(args, "render", "component")
+				// Add the write-to flag
+				args = append(args, "--write-to", r.pcfg.WriteTo)
 				// holos render platform --inject tags
 				for _, tag := range r.pcfg.TagMap.Tags() {
 					args = append(args, "--inject", tag)
--- a/internal/cli/root.go
+++ b/internal/cli/root.go
@@ -76,6 +76,9 @@ func New(cfg *holos.Config) *cobra.Command {
 	// Show
 	rootCmd.AddCommand(NewShowCmd(platform.NewConfig()))

+	// Compare
+	rootCmd.AddCommand(NewCompareCmd())
+
 	// Compile
 	rootCmd.AddCommand(NewCompileCmd())

@@ -110,9 +113,9 @@ func HandleError(ctx context.Context, err error, hc *holos.Config) (exitCode int
 	if errors.As(err, &errAt) {
 		loc := errAt.Source.Loc()
 		err2 := errAt.Unwrap()
-		log.ErrorContext(ctx, fmt.Sprintf("could not run: %s at %s", err2, loc), "err", err2, "loc", loc)
+		log.ErrorContext(ctx, fmt.Sprintf("error at %s: %s", loc, err2), "err", err2, "loc", loc)
 	} else {
-		log.ErrorContext(ctx, fmt.Sprintf("could not run: %s", err), "err", err)
+		log.ErrorContext(ctx, err.Error(), "err", err)
 	}

 	// cue errors are bundled up as a list and refer to multiple files / lines.
--- a/internal/cli/show.go
+++ b/internal/cli/show.go
@@ -3,10 +3,15 @@ package cli
 import (
 	"context"
 	_ "embed"
+	"encoding/json"
+	"fmt"
 	"io"
+	"log/slog"

+	v1alpha5 "github.com/holos-run/holos/api/core/v1alpha5"
+	v1alpha6 "github.com/holos-run/holos/api/core/v1alpha6"
 	"github.com/holos-run/holos/internal/cli/command"
-	"github.com/holos-run/holos/internal/component"
+	"github.com/holos-run/holos/internal/compile"
 	"github.com/holos-run/holos/internal/errors"
 	"github.com/holos-run/holos/internal/holos"
 	"github.com/holos-run/holos/internal/platform"
@@ -77,37 +82,62 @@ func (s *showBuildPlans) flagSet() *pflag.FlagSet {
 }

 func (s *showBuildPlans) Run(ctx context.Context, p *platform.Platform) error {
-	encoder, err := holos.NewSequentialEncoder(s.format, s.cfg.Stdout)
+	components := p.Select(s.cfg.ComponentSelectors...)
+	reqs := make([]compile.BuildPlanRequest, len(components))
+
+	for idx, c := range components {
+		tags, err := c.Tags()
+		if err != nil {
+			return errors.Wrap(err)
+		}
+		reqs[idx] = compile.BuildPlanRequest{
+			APIVersion: "v1alpha6",
+			Kind:       "BuildPlanRequest",
+			Root:       p.Root(),
+			Leaf:       c.Path(),
+			WriteTo:    s.cfg.WriteTo,
+			TempDir:    "${TMPDIR_PLACEHOLDER}",
+			Tags:       tags,
+		}
+	}
+
+	resp, err := compile.Compile(ctx, s.cfg.Concurrency, reqs)
 	if err != nil {
 		return errors.Wrap(err)
 	}
-	defer encoder.Close()

-	opts := platform.BuildOpts{
-		PerComponentFunc: func(ctx context.Context, idx int, pc holos.Component) error {
-			c := component.New(p.Root(), pc.Path(), component.NewConfig())
-			tm, err := c.TypeMeta()
-			if err != nil {
-				return errors.Wrap(err)
-			}
-			opts := holos.NewBuildOpts(p.Root(), pc.Path(), s.cfg.WriteTo, "${TMPDIR_PLACEHOLDER}")
-
-			// TODO(jjm): refactor into [holos.NewBuildOpts] as functional options.
-			// Component name, label, annotations passed via tags to cue.
-			tags, err := pc.Tags()
-			if err != nil {
-				return errors.Wrap(err)
-			}
-			opts.Tags = tags
-
-			bp, err := c.BuildPlan(tm, opts)
-			if err != nil {
-				return errors.Wrap(err)
-			}
-			// Export the build plan using the sequential encoder.
-			return errors.Wrap(bp.Export(idx, encoder))
-		},
+	encoder, err := holos.NewEncoder(s.format, s.cfg.Stdout)
+	if err != nil {
+		return errors.Wrap(err)
 	}

-	return errors.Wrap(p.Build(ctx, opts))
+	for _, buildPlanResponse := range resp {
+		var tm holos.TypeMeta
+		if err := json.Unmarshal(buildPlanResponse.RawMessage, &tm); err != nil {
+			return errors.Format("could not discriminate type meta: %w", err)
+		}
+		if tm.Kind != "BuildPlan" {
+			return errors.Format("invalid kind %s: must be BuildPlan", tm.Kind)
+		}
+
+		var buildPlan any
+		switch tm.APIVersion {
+		case "v1alpha5":
+			buildPlan = &v1alpha5.BuildPlan{}
+		case "v1alpha6":
+			buildPlan = &v1alpha6.BuildPlan{}
+		default:
+			slog.WarnContext(ctx, fmt.Sprintf("unknown BuildPlan APIVersion %s: assuming v1alpha6 schema", tm.APIVersion))
+			buildPlan = &v1alpha6.BuildPlan{}
+		}
+
+		if err := json.Unmarshal(buildPlanResponse.RawMessage, buildPlan); err != nil {
+			return errors.Wrap(err)
+		}
+		if err := encoder.Encode(buildPlan); err != nil {
+			return errors.Wrap(err)
+		}
+	}
+
+	return nil
 }
--- a/internal/cli/show_test.go
+++ b/internal/cli/show_test.go
@@ -66,7 +66,7 @@ func TestShowAlpha6(t *testing.T) {

 	t.Run("BuildPlans", func(t *testing.T) {
 		t.Run("EmptyPlatform", func(t *testing.T) {
-			platformDir := filepath.Join(tempDir, "platform")
+			platformDir := filepath.Join(tempDir, "fixtures", "v1alpha6", "empty-platform")
 			h := newHarness()
 			err := h.Run(ctx, "buildplans", platformDir)
 			require.NoError(t, err)
@@ -81,7 +81,8 @@ func TestShowAlpha6(t *testing.T) {
 			err = yaml.Unmarshal(wantBytes, &want)
 			require.NoError(t, err)
 			want.BuildContext.RootDir = tempDir
-			want.BuildContext.HolosExecutable = "holos"
+			want.BuildContext.HolosExecutable, err = util.Executable()
+			require.NoError(t, err)
 			want.BuildContext.LeafDir = "fixtures/v1alpha6/components/slice"

 			t.Run("FormatYAML", func(t *testing.T) {
--- a/internal/compare/compare.go
+++ b/internal/compare/compare.go
@@ -0,0 +1,401 @@
+package compare
+
+import (
+	"bytes"
+	"io"
+	"os"
+	"sort"
+	"strings"
+
+	"github.com/google/go-cmp/cmp"
+	"github.com/google/go-cmp/cmp/cmpopts"
+	"github.com/holos-run/holos/internal/errors"
+	"gopkg.in/yaml.v3"
+)
+
+// Comparer handles comparison operations between BuildPlans
+type Comparer struct {
+}
+
+// New creates a new Comparer instance
+func New() *Comparer {
+	return &Comparer{}
+}
+
+// BuildPlans compares two BuildPlan Files for semantic equivalence.
+//
+// The holos show buildplans command writes a BuildPlan File to standard output.
+// A BuildPlan File is a yaml encoded stream of BuildPlan objects.
+//
+// BuildPlan File one is equivalent to two when:
+//  1. one and two have an equal number of BuildPlan objects.
+//  2. each object in one is equivalent to exactly one unique object in two.
+//
+// Two BuildPlans, before and after, are equivalent when:
+//
+//  1. All field values in before are equivalent to the same field in after
+//  2. Both 1 and 2 apply to nested objects, recursively.
+//  3. Field f is equivalent when before.f exactly equals after.f, except for:
+//     3.1. Objects in the spec.artifacts list may appear in any arbitrary order.
+//     3.2. The ordering of keys does not matter.
+//  4. Backwards compatibility behavior (controlled by isBackwardsCompatible):
+//     - When false: after and before must have exactly the same fields
+//     - When true: after may have additional fields that don't exist in before
+//     (e.g., new features added in a newer version)
+//     Example:
+//     before has {name: "x", version: "1.0"}
+//     after has  {name: "x", version: "1.0", newFeature: "enabled"}
+//     This comparison passes when isBackwardsCompatible=true
+//  5. Fields in before must always be present in after (regardless of backwards
+//     compatibility mode).
+//  6. List type fields with a null value are equivalent to:
+//     6.1. null values
+//     6.2. empty values ([])
+//     6.2. a missing field
+//
+// A BuildPlan File is valid when:
+//  1. Two or more identical objects exist in the same file.  They must be
+//     treated as unique objects when comparing BuildPlan Files
+//  2. Two objects may have the same value for the metadata.name field.
+//  3. The kind field of all objects in the file stream is "BuildPlan"
+func (c *Comparer) BuildPlans(one, two string, isBackwardsCompatible bool) error {
+	// Read both files
+	file1, err := os.Open(one)
+	if err != nil {
+		return errors.Format("opening first file: %w", err)
+	}
+	defer file1.Close()
+
+	file2, err := os.Open(two)
+	if err != nil {
+		return errors.Format("opening second file: %w", err)
+	}
+	defer file2.Close()
+
+	// Read all content from both files
+	content1, err := io.ReadAll(file1)
+	if err != nil {
+		return errors.Format("reading first file: %w", err)
+	}
+
+	content2, err := io.ReadAll(file2)
+	if err != nil {
+		return errors.Format("reading second file: %w", err)
+	}
+
+	// Handle empty files case
+	if len(content1) == 0 && len(content2) == 0 {
+		return errors.NotImplemented()
+	}
+
+	// Parse YAML streams (multiple documents)
+	docs1, err := parseYAMLStream(content1)
+	if err != nil {
+		return errors.Format("parsing first file: %w", err)
+	}
+
+	docs2, err := parseYAMLStream(content2)
+	if err != nil {
+		return errors.Format("parsing second file: %w", err)
+	}
+
+	// Compare the document lists
+	return c.compareDocumentLists(docs1, docs2, isBackwardsCompatible)
+}
+
+// normalizeStructure processes a structure to handle null, empty, and missing fields
+// according to the BuildPlan spec requirement 6
+func (c *Comparer) normalizeStructure(v interface{}) interface{} {
+	switch val := v.(type) {
+	case map[string]interface{}:
+		normalized := make(map[string]interface{})
+		for k, v := range val {
+			normalizedValue := c.normalizeStructure(v)
+			// Only add fields that are not nil or empty slices
+			if !c.isNullOrEmpty(normalizedValue) {
+				normalized[k] = normalizedValue
+			}
+		}
+		return normalized
+	case []interface{}:
+		// Handle empty slices as nil
+		if len(val) == 0 {
+			return nil
+		}
+		normalized := make([]interface{}, len(val))
+		for i, v := range val {
+			normalized[i] = c.normalizeStructure(v)
+		}
+		return normalized
+	default:
+		return v
+	}
+}
+
+// isNullOrEmpty checks if a value is nil or an empty slice
+func (c *Comparer) isNullOrEmpty(v interface{}) bool {
+	if v == nil {
+		return true
+	}
+	if slice, ok := v.([]interface{}); ok {
+		return len(slice) == 0
+	}
+	return false
+}
+
+// filterToCommonFields filters v1 to only include fields that exist in v2
+// This is used for backwards compatibility to allow the "after" file to have extra fields
+// that don't exist in the "before" file
+func (c *Comparer) filterToCommonFields(v1, v2 interface{}) interface{} {
+	switch m1 := v1.(type) {
+	case map[string]interface{}:
+		m2, ok := v2.(map[string]interface{})
+		if !ok {
+			return v1
+		}
+		filtered := make(map[string]interface{})
+		for k, val1 := range m1 {
+			if val2, exists := m2[k]; exists {
+				filtered[k] = c.filterToCommonFields(val1, val2)
+			}
+		}
+		return filtered
+
+	case []interface{}:
+		slice2, ok := v2.([]interface{})
+		if !ok {
+			return v1
+		}
+		var filtered []interface{}
+		for i, elem1 := range m1 {
+			if i < len(slice2) {
+				filtered = append(filtered, c.filterToCommonFields(elem1, slice2[i]))
+			}
+		}
+		return filtered
+
+	default:
+		return v1
+	}
+}
+
+// compareStructures compares two BuildPlan structures for semantic equivalence
+func (c *Comparer) compareStructures(bp1, bp2 map[string]interface{}, isBackwardsCompatible bool) error {
+	// Normalize the structures to handle null, empty, and missing fields
+	norm1 := c.normalizeStructure(bp1).(map[string]interface{})
+	norm2 := c.normalizeStructure(bp2).(map[string]interface{})
+
+	// If backwards compatible, remove fields from norm2 that don't exist in norm1
+	// This allows "after" to have extra fields that "before" doesn't have
+	if isBackwardsCompatible {
+		filtered := c.filterToCommonFields(norm2, norm1)
+		if m, ok := filtered.(map[string]interface{}); ok {
+			norm2 = m
+		}
+	}
+
+	// Create comparison options for go-cmp
+	opts := []cmp.Option{
+		cmpopts.EquateEmpty(),
+		cmp.Transformer("sortSlices", func(s []interface{}) []interface{} {
+			return c.sortSlice(s)
+		}),
+	}
+
+	// Deep order-independent comparison
+	if cmp.Equal(norm1, norm2, opts...) {
+		return nil
+	}
+
+	// Get the diff for the error message
+	diff := cmp.Diff(norm1, norm2, opts...)
+
+	// Extract specific field differences from the diff
+	fieldDiffs := c.extractFieldDifferences(diff)
+
+	// Return the extracted differences or the full diff
+	if fieldDiffs != "" {
+		return errors.New(fieldDiffs)
+	}
+	return errors.New(diff)
+}
+
+// sortSlice sorts a slice based on comparable string representation
+func (c *Comparer) sortSlice(slice []interface{}) []interface{} {
+	sorted := make([]interface{}, len(slice))
+	copy(sorted, slice)
+
+	sort.Slice(sorted, func(i, j int) bool {
+		iStr := c.toComparableString(sorted[i])
+		jStr := c.toComparableString(sorted[j])
+		return iStr < jStr
+	})
+
+	return sorted
+}
+
+// toComparableString converts a value to a comparable string
+func (c *Comparer) toComparableString(v interface{}) string {
+	switch val := v.(type) {
+	case map[string]interface{}:
+		// Try to get identifying fields
+		if artifact, ok := val["artifact"].(string); ok {
+			return artifact
+		}
+		if name, ok := val["name"].(string); ok {
+			return name
+		}
+		if metadata, ok := val["metadata"].(map[string]interface{}); ok {
+			if name, ok := metadata["name"].(string); ok {
+				return name
+			}
+		}
+		// Fallback to YAML representation
+		yamlBytes, _ := yaml.Marshal(val)
+		return string(yamlBytes)
+
+	default:
+		// Convert to YAML for comparison
+		yamlBytes, _ := yaml.Marshal(v)
+		return string(yamlBytes)
+	}
+}
+
+// parseYAMLStream parses a byte array containing one or more YAML documents
+func parseYAMLStream(content []byte) ([]map[string]interface{}, error) {
+	var documents []map[string]interface{}
+	decoder := yaml.NewDecoder(bytes.NewReader(content))
+
+	for {
+		var doc map[string]interface{}
+		err := decoder.Decode(&doc)
+		if err == io.EOF {
+			break
+		}
+		if err != nil {
+			return nil, err
+		}
+		if doc != nil {
+			documents = append(documents, doc)
+		}
+	}
+
+	return documents, nil
+}
+
+// compareDocumentLists compares two lists of YAML documents
+func (c *Comparer) compareDocumentLists(docs1, docs2 []map[string]interface{}, isBackwardsCompatible bool) error {
+	if len(docs1) != len(docs2) {
+		return errors.New("different number of documents")
+	}
+
+	// Create a bipartite matching between documents
+	used := make([]bool, len(docs2))
+
+	// First pass: try to find exact matches
+	for _, doc1 := range docs1 {
+		for j, doc2 := range docs2 {
+			if used[j] {
+				continue
+			}
+
+			// Check if documents are exactly equal
+			if c.documentsExactlyEqual(doc1, doc2) {
+				used[j] = true
+				break
+			}
+		}
+	}
+
+	// Second pass: handle unmatched documents
+	usedIdx := 0
+	for i, doc1 := range docs1 {
+		// Find if this document was matched in first pass
+		matchFound := false
+		for j, doc2 := range docs2 {
+			if used[j] && c.documentsExactlyEqual(doc1, doc2) {
+				matchFound = true
+				break
+			}
+		}
+
+		if !matchFound {
+			// Find the next unused document to compare against
+			for usedIdx < len(docs2) && used[usedIdx] {
+				usedIdx++
+			}
+
+			if usedIdx < len(docs2) {
+				// Compare structures
+				if err := c.compareStructures(doc1, docs2[usedIdx], isBackwardsCompatible); err != nil {
+					return errors.Format("document %d not equivalent: \n%w", i, err)
+				}
+				used[usedIdx] = true
+			}
+		}
+	}
+
+	return nil
+}
+
+// documentsExactlyEqual checks if two documents are exactly equal
+func (c *Comparer) documentsExactlyEqual(doc1, doc2 map[string]interface{}) bool {
+	// Create comparison options for go-cmp
+	opts := []cmp.Option{
+		cmpopts.EquateEmpty(),
+		cmp.Transformer("sortSlices", func(s []interface{}) []interface{} {
+			return c.sortSlice(s)
+		}),
+	}
+
+	return cmp.Equal(doc1, doc2, opts...)
+}
+
+// extractFieldDifferences extracts specific field differences from a go-cmp diff
+func (c *Comparer) extractFieldDifferences(diff string) string {
+	var differences []string
+	lines := strings.Split(diff, "\n")
+
+	for _, line := range lines {
+		// Look for lines that indicate field differences
+		trimmed := strings.TrimSpace(line)
+
+		// Handle lines with - or + prefixes
+		if strings.HasPrefix(trimmed, "-") || strings.HasPrefix(trimmed, "+") {
+			// Skip formatting markers
+			if strings.HasPrefix(trimmed, "---") || strings.HasPrefix(trimmed, "+++") {
+				continue
+			}
+
+			// Check if this is a field difference (contains a colon)
+			if strings.Contains(trimmed, ":") {
+				// Extract the field name and value
+				parts := strings.SplitN(trimmed[1:], ":", 2)
+				if len(parts) == 2 {
+					fieldName := strings.TrimSpace(parts[0])
+					value := strings.TrimSpace(parts[1])
+
+					// Clean up the field name (remove quotes if present)
+					fieldName = strings.Trim(fieldName, "\"")
+					value = strings.TrimSuffix(value, ",")
+
+					// Clean up value formatting
+					if strings.HasPrefix(value, "string(") {
+						value = strings.TrimPrefix(value, "string(")
+						value = strings.TrimSuffix(value, ")")
+					} else if strings.HasPrefix(value, "int(") {
+						value = strings.TrimPrefix(value, "int(")
+						value = strings.TrimSuffix(value, ")")
+					}
+					value = strings.Trim(value, "\"")
+
+					// Rebuild the difference line
+					prefix := trimmed[:1]
+					differences = append(differences, prefix+"    "+fieldName+": "+value)
+				}
+			}
+		}
+	}
+
+	return strings.Join(differences, "\n")
+}
--- a/internal/compare/compare_test.go
+++ b/internal/compare/compare_test.go
@@ -0,0 +1,88 @@
+package compare
+
+import (
+	"encoding/json"
+	"os"
+	"path/filepath"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+type testCase struct {
+	ExitCode              int      `json:"exitCode"`
+	Name                  string   `json:"name,omitempty"`
+	Msg                   string   `json:"msg,omitempty"`
+	File1                 string   `json:"file1"`
+	File2                 string   `json:"file2"`
+	ExpectedError         string   `json:"expectedError,omitempty"` // Deprecated: use ExpectedErrors
+	ExpectedErrors        []string `json:"expectedErrors,omitempty"`
+	IsBackwardsCompatible *bool    `json:"isBackwardsCompatible,omitempty"`
+}
+
+func TestBuildPlans(t *testing.T) {
+	fixturesDir := "testdata"
+	entries, err := os.ReadDir(fixturesDir)
+	if err != nil {
+		t.Fatalf("could not read fixtures directory: %v", err)
+	}
+
+	for _, entry := range entries {
+		if !entry.IsDir() {
+			continue
+		}
+
+		dirName := entry.Name()
+		t.Run(dirName, func(t *testing.T) {
+			testDir := filepath.Join(fixturesDir, dirName)
+
+			// Read the testcase.json file
+			testcaseData, err := os.ReadFile(filepath.Join(testDir, "testcase.json"))
+			if err != nil {
+				t.Fatalf("could not read testcase.json: %v", err)
+			}
+
+			var tc testCase
+			if err := json.Unmarshal(testcaseData, &tc); err != nil {
+				t.Fatalf("could not parse testcase.json: %v", err)
+			}
+
+			// Use the test name if provided, otherwise use directory name
+			testName := dirName
+			if tc.Name != "" {
+				testName = tc.Name
+			}
+
+			// Run the test with the appropriate name
+			t.Run(testName, func(t *testing.T) {
+				// Build the full file paths
+				file1Path := filepath.Join(testDir, tc.File1)
+				file2Path := filepath.Join(testDir, tc.File2)
+
+				// Create a new comparer and run the comparison
+				c := New()
+				// Use isBackwardsCompatible from test case if provided, default to false
+				isBackwardsCompatible := false
+				if tc.IsBackwardsCompatible != nil {
+					isBackwardsCompatible = *tc.IsBackwardsCompatible
+				}
+				err := c.BuildPlans(file1Path, file2Path, isBackwardsCompatible)
+
+				// Check the result based on expected exit code
+				if tc.ExitCode == 0 {
+					assert.NoError(t, err, tc.Msg)
+				} else {
+					assert.Error(t, err, tc.Msg)
+					// Support both old expectedError and new expectedErrors
+					if tc.ExpectedError != "" {
+						assert.ErrorContains(t, err, tc.ExpectedError, tc.Msg)
+					}
+					// Check each expected error substring
+					for _, expectedErr := range tc.ExpectedErrors {
+						assert.ErrorContains(t, err, expectedErr, tc.Msg)
+					}
+				}
+			})
+		})
+	}
+}
--- a/internal/compare/testdata/annotations/after.yaml
+++ b/internal/compare/testdata/annotations/after.yaml
@@ -0,0 +1,810 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+    example.com/description: bar
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+  annotations:
+    example.com/description: bar
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/annotations/before.yaml
+++ b/internal/compare/testdata/annotations/before.yaml
@@ -0,0 +1,810 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+    example.com/description: foo
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+  annotations:
+    example.com/description: bar
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/annotations/testcase.json
+++ b/internal/compare/testdata/annotations/testcase.json
@@ -0,0 +1,7 @@
+{
+  "exitCode": 1,
+  "name": "DuplicatedAnnotationsInAfter",
+  "msg": "should not match when the same object is duplicated in after and differs only by an arbitrary deeply nested field in before, in this case an annotation",
+  "file1": "before.yaml",
+  "file2": "after.yaml"
+}
--- a/internal/compare/testdata/backwards-compatible/after.yaml
+++ b/internal/compare/testdata/backwards-compatible/after.yaml
@@ -0,0 +1,24 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    holos.run/component.name: component
+    holos.run/stack.name: demo
+  annotations:
+    holos.run/purpose: example
+    holos.run/environment: prod
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+          resources:
+            - name: deployment
+              namespace: default
+      transformers:
+        - kind: SetLabels
+          labels:
+            app: demo
--- a/internal/compare/testdata/backwards-compatible/before.yaml
+++ b/internal/compare/testdata/backwards-compatible/before.yaml
@@ -0,0 +1,17 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    holos.run/component.name: component
+    # Missing holos.run/stack.name
+  # Missing annotations
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+          # Missing resources
+      # Missing transformers
--- a/internal/compare/testdata/backwards-compatible/testcase.json
+++ b/internal/compare/testdata/backwards-compatible/testcase.json
@@ -0,0 +1,9 @@
+{
+  "exitCode": 0,
+  "name": "BuildPlan_4",
+  "msg": "BuildPlan spec 4: after may have fields missing from before if isBackwardsCompatible is true - should pass when before has missing fields and isBackwardsCompatible is true",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": [],
+  "isBackwardsCompatible": true
+}
--- a/internal/compare/testdata/buildplan/after.yaml
+++ b/internal/compare/testdata/buildplan/after.yaml
@@ -0,0 +1,404 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/buildplan/before.yaml
+++ b/internal/compare/testdata/buildplan/before.yaml
@@ -0,0 +1,404 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/buildplan/testcase.json
+++ b/internal/compare/testdata/buildplan/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 0,
+  "name": "FullBuildPlan",
+  "msg": "should match full build plans",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": []
+}
--- a/internal/compare/testdata/buildplan2/after.yaml
+++ b/internal/compare/testdata/buildplan2/after.yaml
@@ -0,0 +1,404 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
--- a/internal/compare/testdata/buildplan2/before.yaml
+++ b/internal/compare/testdata/buildplan2/before.yaml
@@ -0,0 +1,404 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/buildplan2/testcase.json
+++ b/internal/compare/testdata/buildplan2/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 0,
+  "name": "BuildPlan_3.1",
+  "msg": "BuildPlan spec 3.1: Objects in the spec.artifacts list may appear in any arbitrary order - should match when artifacts are reordered",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": []
+}
--- a/internal/compare/testdata/buildplan3/after.yaml
+++ b/internal/compare/testdata/buildplan3/after.yaml
@@ -0,0 +1,404 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: not-httpbin
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
--- a/internal/compare/testdata/buildplan3/before.yaml
+++ b/internal/compare/testdata/buildplan3/before.yaml
@@ -0,0 +1,404 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/buildplan3/testcase.json
+++ b/internal/compare/testdata/buildplan3/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 1,
+  "name": "FullBuildPlanDifferentLabelValues",
+  "msg": "should not match full build plans with out of order artifacts and different labels",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": ["holos.run/stack.name: not-httpbin"]
+}
--- a/internal/compare/testdata/buildplan4/after.yaml
+++ b/internal/compare/testdata/buildplan4/after.yaml
@@ -0,0 +1,405 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+    extra: not-in-before
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/buildplan4/before.yaml
+++ b/internal/compare/testdata/buildplan4/before.yaml
@@ -0,0 +1,404 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/buildplan4/testcase.json
+++ b/internal/compare/testdata/buildplan4/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 1,
+  "name": "BeforeLabelsAreSubsetOfAfter",
+  "msg": "should not match when before labels are a subset of after labels",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": ["+    extra: not-in-before"]
+}
--- a/internal/compare/testdata/compiler/after.yaml
+++ b/internal/compare/testdata/compiler/after.yaml
--- a/internal/compare/testdata/compiler/before.yaml
+++ b/internal/compare/testdata/compiler/before.yaml
--- a/internal/compare/testdata/compiler/testcase.json
+++ b/internal/compare/testdata/compiler/testcase.json
@@ -0,0 +1,7 @@
+{
+  "exitCode": 0,
+  "name": "CompilerShouldMatch",
+  "msg": "output of the v1alpha6 compiler should match the v1alpha5 output",
+  "file1": "before.yaml",
+  "file2": "after.yaml"
+}
--- a/internal/compare/testdata/different-count/after.yaml
+++ b/internal/compare/testdata/different-count/after.yaml
@@ -0,0 +1,7 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component1
+spec:
+  artifacts:
+    - artifact: test.yaml
--- a/internal/compare/testdata/different-count/before.yaml
+++ b/internal/compare/testdata/different-count/before.yaml
@@ -0,0 +1,15 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component1
+spec:
+  artifacts:
+    - artifact: test.yaml
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component2
+spec:
+  artifacts:
+    - artifact: test2.yaml
--- a/internal/compare/testdata/different-count/testcase.json
+++ b/internal/compare/testdata/different-count/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 1,
+  "name": "BuildPlanFile_1",
+  "msg": "BuildPlan File spec 1: one and two have an equal number of BuildPlan objects - should fail when count differs",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": ["different number of documents"]
+}
--- a/internal/compare/testdata/duplicate-objects/after.yaml
+++ b/internal/compare/testdata/duplicate-objects/after.yaml
@@ -0,0 +1,22 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
--- a/internal/compare/testdata/duplicate-objects/before.yaml
+++ b/internal/compare/testdata/duplicate-objects/before.yaml
@@ -0,0 +1,22 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
--- a/internal/compare/testdata/duplicate-objects/testcase.json
+++ b/internal/compare/testdata/duplicate-objects/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 0,
+  "name": "BuildPlanValid_1",
+  "msg": "BuildPlan File validity 1: Two or more identical objects exist in the same file. They must be treated as unique objects - should match when both files have identical objects",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": []
+}
--- a/internal/compare/testdata/empty/1.yaml
+++ b/internal/compare/testdata/empty/1.yaml
--- a/internal/compare/testdata/empty/2.yaml
+++ b/internal/compare/testdata/empty/2.yaml
--- a/internal/compare/testdata/empty/testcase.json
+++ b/internal/compare/testdata/empty/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 1,
+  "name": "EmptyFiles",
+  "msg": "empty files should return not implemented error",
+  "file1": "1.yaml",
+  "file2": "2.yaml",
+  "expectedErrors": ["not implemented"]
+}
--- a/internal/compare/testdata/fields-must-exist/after.yaml
+++ b/internal/compare/testdata/fields-must-exist/after.yaml
@@ -0,0 +1,13 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    holos.run/component.name: component
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
--- a/internal/compare/testdata/fields-must-exist/before.yaml
+++ b/internal/compare/testdata/fields-must-exist/before.yaml
@@ -0,0 +1,14 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    holos.run/component.name: component
+    holos.run/stack.name: demo
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
--- a/internal/compare/testdata/fields-must-exist/testcase.json
+++ b/internal/compare/testdata/fields-must-exist/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 1,
+  "name": "BuildPlan_5",
+  "msg": "BuildPlan spec 5: Fields in a must always be present in b - should fail when field exists in a but not in b",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": ["-    holos.run/stack.name: demo"]
+}
--- a/internal/compare/testdata/key-order/after.yaml
+++ b/internal/compare/testdata/key-order/after.yaml
@@ -0,0 +1,13 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  labels:
+    env: prod
+    version: "1.0"
+    app: myapp
+  name: component
+spec:
+  config:
+    timeout: 30
+    host: localhost
+    port: 8080
--- a/internal/compare/testdata/key-order/before.yaml
+++ b/internal/compare/testdata/key-order/before.yaml
@@ -0,0 +1,13 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    app: myapp
+    version: "1.0"
+    env: prod
+spec:
+  config:
+    port: 8080
+    host: localhost
+    timeout: 30
--- a/internal/compare/testdata/key-order/testcase.json
+++ b/internal/compare/testdata/key-order/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 0,
+  "name": "BuildPlan_3.2",
+  "msg": "BuildPlan spec 3.2: The ordering of keys does not matter - should match when only key order differs",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": []
+}
--- a/internal/compare/testdata/labels/after.yaml
+++ b/internal/compare/testdata/labels/after.yaml
@@ -0,0 +1,406 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+    some-arbitrary-label: not-in-before
+    another-arbitrary-label: also-not-in-before
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/labels/before.yaml
+++ b/internal/compare/testdata/labels/before.yaml
@@ -0,0 +1,404 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/labels/testcase.json
+++ b/internal/compare/testdata/labels/testcase.json
@@ -0,0 +1,11 @@
+{
+  "exitCode": 1,
+  "name": "ArbitraryLabels",
+  "msg": "should not match when before labels are a subset of arbitrary after labels",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": [
+    "+    some-arbitrary-label: not-in-before",
+    "+    another-arbitrary-label: also-not-in-before"
+  ]
+}
--- a/internal/compare/testdata/labels2/after.yaml
+++ b/internal/compare/testdata/labels2/after.yaml
@@ -0,0 +1,811 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+    seq: 2
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+    seq: 1
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/labels2/before.yaml
+++ b/internal/compare/testdata/labels2/before.yaml
@@ -0,0 +1,811 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+    seq: 1
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+    seq: 2
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/labels2/testcase.json
+++ b/internal/compare/testdata/labels2/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 0,
+  "name": "IdenticalObjectsToleration",
+  "msg": "Toleration 1: multiple identical BuildPlans may exist and must be treated as unique - should match when identical objects exist",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": []
+}
--- a/internal/compare/testdata/labels3/after.yaml
+++ b/internal/compare/testdata/labels3/after.yaml
@@ -0,0 +1,811 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+    seq: 1
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+    seq: 1
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/labels3/before.yaml
+++ b/internal/compare/testdata/labels3/before.yaml
@@ -0,0 +1,811 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+    seq: 1
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: kargo-stages
+  labels:
+    holos.run/component.name: kargo-stages
+    holos.run/project.name: httpbin
+    holos.run/stack.name: httpbin
+    seq: 2
+  annotations:
+    app.holos.run/description: kargo-stages for project httpbin
+spec:
+  artifacts:
+    - artifact: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+      generators:
+        - kind: Resources
+          output: resources.gen.yaml
+          resources:
+            Stage:
+              dev:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: dev
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/dev-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/dev-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/dev-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/dev-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-dev-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        direct: true
+              prod-us-central:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-central
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-central-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-central-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-central-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-central-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-central-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-east:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-east
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-east-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-east-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-east-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-east-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-east-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              prod-us-west:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: prod-us-west
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/prod-us-west-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/prod-us-west-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/prod-us-west-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/prod-us-west-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-prod-us-west-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - uat
+              test:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: test
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/test-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/test-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/test-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/test-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-test-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - dev
+              uat:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Stage
+                metadata:
+                  name: uat
+                  namespace: httpbin
+                spec:
+                  promotionTemplate:
+                    spec:
+                      steps:
+                        - config:
+                            checkout:
+                              - branch: main
+                                path: ./src
+                              - branch: project/httpbin/component/uat-httpbin
+                                create: true
+                                path: ./out
+                            repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: git-clone
+                        - config:
+                            path: ./out
+                          uses: git-clear
+                        - as: update-image
+                          config:
+                            images:
+                              - image: quay.io/holos/mccutchen/go-httpbin
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-set-image
+                        - config:
+                            outPath: ./out/uat-httpbin.gen.yaml
+                            path: ./src/deploy/projects/httpbin/components/uat-httpbin
+                          uses: kustomize-build
+                        - as: commit
+                          config:
+                            messageFromSteps:
+                              - update-image
+                            path: ./out
+                          uses: git-commit
+                        - config:
+                            path: ./out
+                            targetBranch: project/httpbin/component/uat-httpbin
+                          uses: git-push
+                        - config:
+                            apps:
+                              - name: httpbin-uat-httpbin
+                                sources:
+                                  - desiredCommitFromStep: commit
+                                    repoURL: https://github.com/holos-run/kargo-demo.git
+                          uses: argocd-update
+                  requestedFreight:
+                    - origin:
+                        kind: Warehouse
+                        name: httpbin
+                      sources:
+                        stages:
+                          - test
+            Warehouse:
+              httpbin:
+                apiVersion: kargo.akuity.io/v1alpha1
+                kind: Warehouse
+                metadata:
+                  name: httpbin
+                  namespace: httpbin
+                spec:
+                  interval: 5m0s
+                  subscriptions:
+                    - image:
+                        discoveryLimit: 5
+                        repoURL: quay.io/holos/mccutchen/go-httpbin
+                        semverConstraint: ^2.0.0
+                        strictSemvers: true
+      transformers:
+        - kind: Kustomize
+          inputs:
+            - resources.gen.yaml
+          output: projects/httpbin/components/kargo-stages/kargo-stages.gen.yaml
+          kustomize:
+            kustomization:
+              apiVersion: kustomize.config.k8s.io/v1beta1
+              kind: Kustomization
+              labels:
+                - includeSelectors: false
+                  pairs:
+                    argocd.argoproj.io/instance: httpbin-kargo-stages
+              resources:
+                - resources.gen.yaml
+    - artifact: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+      generators:
+        - kind: Resources
+          output: projects/httpbin/gitops/kargo-stages.application.gen.yaml
+          resources:
+            Application:
+              httpbin-kargo-stages:
+                apiVersion: argoproj.io/v1alpha1
+                kind: Application
+                metadata:
+                  labels: {}
+                  name: httpbin-kargo-stages
+                  namespace: argocd
+                spec:
+                  destination:
+                    server: https://kubernetes.default.svc
+                  project: httpbin
+                  source:
+                    path: deploy/projects/httpbin/components/kargo-stages
+                    repoURL: https://github.com/holos-run/kargo-demo.git
+                    targetRevision: main
--- a/internal/compare/testdata/labels3/testcase.json
+++ b/internal/compare/testdata/labels3/testcase.json
@@ -0,0 +1,11 @@
+{
+  "exitCode": 1,
+  "name": "MultipleIdenticalObjectsOutOfOrderAllLabels",
+  "msg": "should not match when the same object is duplicated in after and differs only by an arbitrary deeply nested field in before",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": [
+    "-    seq: 2",
+    "+    seq: 1"
+  ]
+}
--- a/internal/compare/testdata/minimal/after.yaml
+++ b/internal/compare/testdata/minimal/after.yaml
@@ -0,0 +1,2 @@
+version: v1alpha5
+kind: BuildPlan
--- a/internal/compare/testdata/minimal/before.yaml
+++ b/internal/compare/testdata/minimal/before.yaml
@@ -0,0 +1,2 @@
+version: v1alpha5
+kind: BuildPlan
--- a/internal/compare/testdata/minimal/testcase.json
+++ b/internal/compare/testdata/minimal/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 0,
+  "name": "MinimalBuildPlans",
+  "msg": "minimal BuildPlans with same version and kind should match",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": []
+}
--- a/internal/compare/testdata/missing-field/after.yaml
+++ b/internal/compare/testdata/missing-field/after.yaml
@@ -0,0 +1,7 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: test.yaml
--- a/internal/compare/testdata/missing-field/before.yaml
+++ b/internal/compare/testdata/missing-field/before.yaml
@@ -0,0 +1,9 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    test: value
+spec:
+  artifacts:
+    - artifact: test.yaml
--- a/internal/compare/testdata/missing-field/testcase.json
+++ b/internal/compare/testdata/missing-field/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 1,
+  "name": "MissingFieldInTwo",
+  "msg": "BuildPlan spec requirement 1&2: all field values must be equivalent - should fail when field exists in one but not two",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": ["-    labels:"]
+}
--- a/internal/compare/testdata/nested-diff/after.yaml
+++ b/internal/compare/testdata/nested-diff/after.yaml
@@ -0,0 +1,19 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: test.yaml
+      generators:
+        - kind: Resources
+          output: test.yaml
+          resources:
+            Deployment:
+              myapp:
+                apiVersion: apps/v1
+                kind: Deployment
+                metadata:
+                  name: myapp
+                spec:
+                  replicas: 5
--- a/internal/compare/testdata/nested-diff/before.yaml
+++ b/internal/compare/testdata/nested-diff/before.yaml
@@ -0,0 +1,19 @@
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: test.yaml
+      generators:
+        - kind: Resources
+          output: test.yaml
+          resources:
+            Deployment:
+              myapp:
+                apiVersion: apps/v1
+                kind: Deployment
+                metadata:
+                  name: myapp
+                spec:
+                  replicas: 3
--- a/internal/compare/testdata/nested-diff/testcase.json
+++ b/internal/compare/testdata/nested-diff/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 1,
+  "name": "BuildPlan_3_Nested",
+  "msg": "BuildPlan spec 3: Field f is equivalent when a.f exactly equals b.f, including nested objects recursively - should fail when nested values differ",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": ["int(3)", "int(5)"]
+}
--- a/internal/compare/testdata/not-backwards-compatible/after.yaml
+++ b/internal/compare/testdata/not-backwards-compatible/after.yaml
@@ -0,0 +1,24 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    holos.run/component.name: component
+    holos.run/stack.name: demo
+  annotations:
+    holos.run/purpose: example
+    holos.run/environment: prod
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+          resources:
+            - name: deployment
+              namespace: default
+      transformers:
+        - kind: SetLabels
+          labels:
+            app: demo
--- a/internal/compare/testdata/not-backwards-compatible/before.yaml
+++ b/internal/compare/testdata/not-backwards-compatible/before.yaml
@@ -0,0 +1,17 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    holos.run/component.name: component
+    # Missing holos.run/stack.name
+  # Missing annotations
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+          # Missing resources
+      # Missing transformers
--- a/internal/compare/testdata/not-backwards-compatible/testcase.json
+++ b/internal/compare/testdata/not-backwards-compatible/testcase.json
@@ -0,0 +1,15 @@
+{
+  "exitCode": 1,
+  "name": "BuildPlan_4_NotBackwards",
+  "msg": "BuildPlan spec 4: after and before must have exactly the same fields when isBackwardsCompatible is false - should fail when after has additional fields",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": [
+    "+    annotations: map[string]any{\"holos.run/environment\": string(\"prod\"), \"holos.run/purpose\": string(\"example\")}",
+    "+    holos.run/stack.name: demo",
+    "+    resources: []any{map[string]any{\"name\": string(\"deployment\"), \"namespace\": string(\"default\")}}",
+    "+    transformers: []any{",
+    "+    map[string]any{\"kind: SetLabels\"), \"labels\": map[string]any{\"app\": string(\"demo\")}}"
+  ],
+  "isBackwardsCompatible": false
+}
--- a/internal/compare/testdata/null-empty/after.yaml
+++ b/internal/compare/testdata/null-empty/after.yaml
@@ -0,0 +1,13 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+          resources: []
+      transformers: []
--- a/internal/compare/testdata/null-empty/before.yaml
+++ b/internal/compare/testdata/null-empty/before.yaml
@@ -0,0 +1,13 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+          resources: null
+      transformers: null
--- a/internal/compare/testdata/null-empty/testcase.json
+++ b/internal/compare/testdata/null-empty/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 0,
+  "name": "BuildPlan_6.2",
+  "msg": "BuildPlan spec 6.2: List type fields with a null value are equivalent to empty values ([]) - should match when one is null and other is empty array",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": []
+}
--- a/internal/compare/testdata/null-list/after.yaml
+++ b/internal/compare/testdata/null-list/after.yaml
@@ -0,0 +1,13 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+          resources: null
+      transformers: null
--- a/internal/compare/testdata/null-list/before.yaml
+++ b/internal/compare/testdata/null-list/before.yaml
@@ -0,0 +1,13 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+          resources: null
+      transformers: null
--- a/internal/compare/testdata/null-list/testcase.json
+++ b/internal/compare/testdata/null-list/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 0,
+  "name": "BuildPlan_6.1",
+  "msg": "BuildPlan spec 6.1: List type fields with a null value are equivalent to null values - should match when both are null",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": []
+}
--- a/internal/compare/testdata/null-missing/after.yaml
+++ b/internal/compare/testdata/null-missing/after.yaml
@@ -0,0 +1,11 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
--- a/internal/compare/testdata/null-missing/before.yaml
+++ b/internal/compare/testdata/null-missing/before.yaml
@@ -0,0 +1,13 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+spec:
+  artifacts:
+    - artifact: component.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+          resources: null
+      transformers: null
--- a/internal/compare/testdata/null-missing/testcase.json
+++ b/internal/compare/testdata/null-missing/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 0,
+  "name": "BuildPlan_6.3",
+  "msg": "BuildPlan spec 6.3: List type fields with a null value are equivalent to a missing field - should match when one is null and other is missing",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": []
+}
--- a/internal/compare/testdata/same-names/after.yaml
+++ b/internal/compare/testdata/same-names/after.yaml
@@ -0,0 +1,26 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    holos.run/stack.name: stack-b
+spec:
+  artifacts:
+    - artifact: component-b.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    holos.run/stack.name: stack-a
+spec:
+  artifacts:
+    - artifact: component-a.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
--- a/internal/compare/testdata/same-names/before.yaml
+++ b/internal/compare/testdata/same-names/before.yaml
@@ -0,0 +1,26 @@
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    holos.run/stack.name: stack-a
+spec:
+  artifacts:
+    - artifact: component-a.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
+---
+kind: BuildPlan
+apiVersion: v1alpha5
+metadata:
+  name: component
+  labels:
+    holos.run/stack.name: stack-b
+spec:
+  artifacts:
+    - artifact: component-b.yaml
+      generators:
+        - kind: Kubernetes
+          output: manifests.yaml
--- a/internal/compare/testdata/same-names/testcase.json
+++ b/internal/compare/testdata/same-names/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 0,
+  "name": "BuildPlanValid_2",
+  "msg": "BuildPlan File validity 2: Two objects may have the same value for the metadata.name field - should match when objects have same names but different content",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": []
+}
--- a/internal/compare/testdata/streams/after.yaml
+++ b/internal/compare/testdata/streams/after.yaml
@@ -0,0 +1,5 @@
+version: v1alpha5
+kind: BuildPlan
+---
+version: v1alpha6
+kind: BuildPlan
--- a/internal/compare/testdata/streams/before.yaml
+++ b/internal/compare/testdata/streams/before.yaml
@@ -0,0 +1,5 @@
+version: v1alpha5
+kind: BuildPlan
+---
+version: v1alpha6
+kind: BuildPlan
--- a/internal/compare/testdata/streams/testcase.json
+++ b/internal/compare/testdata/streams/testcase.json
@@ -0,0 +1,8 @@
+{
+  "exitCode": 0,
+  "name": "SameOrderBuildPlans",
+  "msg": "File spec requirements 1&2: each BuildPlan must match exactly once - should match when in same order",
+  "file1": "before.yaml",
+  "file2": "after.yaml",
+  "expectedErrors": []
+}
--- a/Show More
+++ b/Show More