lib

Core libraries for Radroots
git clone https://radroots.dev/git/lib.git
Log | Files | Refs | README

services_hardening_build_qualification.v3.json (2460B)

      1 {
      2   "schema": "radroots.services-hardening.build-qualification-decisions.v3",
      3   "contract_version": 3,
      4   "decision_state": "active",
      5   "predecessor": {
      6     "schema": "radroots.services-hardening.build-qualification-decisions.v2",
      7     "filename": "services_hardening_build_qualification.v2.json",
      8     "transition": "forward_only_replace"
      9   },
     10   "qualification_scope": "native_and_nix_release_foundation",
     11   "fixture_root": "tools/xtask/fixtures/service-build-qualification",
     12   "supported_rust_targets": [
     13     "aarch64-apple-darwin",
     14     "x86_64-unknown-linux-gnu"
     15   ],
     16   "supported_nix_systems": [
     17     "aarch64-darwin",
     18     "x86_64-linux"
     19   ],
     20   "excluded_nix_systems": [
     21     "x86_64-darwin",
     22     "aarch64-linux"
     23   ],
     24   "required_native_commands": [
     25     "cargo build --locked --release",
     26     "cargo fmt --all --check",
     27     "cargo check --workspace --all-targets --locked",
     28     "cargo test --workspace --all-targets --locked",
     29     "cargo clippy --workspace --all-targets --locked -- -D warnings",
     30     "RUSTDOCFLAGS=-D warnings cargo doc --workspace --no-deps --locked"
     31   ],
     32   "required_xtask_commands": [
     33     "cargo test --locked -p xtask service_source_lock::tests",
     34     "cargo test --locked -p xtask service_release_artifacts::tests",
     35     "cargo test --locked -p xtask service_build_qualification::tests",
     36     "cargo run --locked -q -p xtask -- contract validate",
     37     "cargo run --locked -q -p xtask -- release preflight"
     38   ],
     39   "required_evidence": [
     40     "cargo_lock",
     41     "source_lock",
     42     "package_metadata",
     43     "release_metadata",
     44     "binary_archive",
     45     "oci_source_artifact",
     46     "cyclonedx_sbom",
     47     "notices",
     48     "artifact_manifest",
     49     "unsigned_provenance_input",
     50     "checksums"
     51   ],
     52   "fixture_source_lock": "tools/xtask/fixtures/service-build-qualification/radroots.service.source-lock.v2.toml",
     53   "fixture_contract": "historical_v2_fixture_until_v3_service_instances_are_owned",
     54   "release_artifact_command": "cargo xtask service-release-artifacts",
     55   "source_lock_command": "cargo xtask service-source-lock",
     56   "source_lock_v3_definition": "contracts/architecture/decisions/services_hardening_source_lock.v3.json",
     57   "artifact_contract_v3": "contracts/release/lib-artifact-contract.v3.json",
     58   "nix_output_implementation_owner_step": 299,
     59   "signing_authority": "external_only",
     60   "deferred_outputs": [
     61     "nix_packages",
     62     "nix_apps",
     63     "nix_checks",
     64     "nix_development_shells",
     65     "nixos_modules",
     66     "nix_produced_oci"
     67   ]
     68 }