lib

Core libraries for Radroots
git clone https://radroots.dev/git/lib.git
Log | Files | Refs | README

services_hardening_release_artifacts.v1.json (2903B)

      1 {
      2   "schema": "radroots.services-hardening.release-artifacts-decisions.v1",
      3   "contract_version": 1,
      4   "decision_state": "active",
      5   "command": "cargo xtask service-release-artifacts",
      6   "modes": [
      7     "check",
      8     "write"
      9   ],
     10   "required_arguments": [
     11     "mode",
     12     "service_root",
     13     "input_root",
     14     "output_root",
     15     "target",
     16     "source_date_epoch"
     17   ],
     18   "service_metadata_path": "Cargo.toml.workspace.metadata.radroots.service_release",
     19   "service_metadata_fields": [
     20     "service",
     21     "service_package",
     22     "binary_name",
     23     "version"
     24   ],
     25   "supported_targets": [
     26     "aarch64-unknown-linux-gnu",
     27     "x86_64-unknown-linux-gnu"
     28   ],
     29   "input_inventory": [
     30     "config.example.toml",
     31     "config.schema.json",
     32     "lib-source.bundle",
     33     "nixos-module.nix",
     34     "oci-image.tar.gz",
     35     "service-binary",
     36     "service-source.bundle",
     37     "systemd.service"
     38   ],
     39   "excluded_parent_owned_inputs": [
     40     "backup_restore_runbook",
     41     "operator_runbook"
     42   ],
     43   "service_root_inventory": [
     44     "LICENSE-APACHE",
     45     "LICENSE-MIT",
     46     "radroots.service.source-lock.v1.toml"
     47   ],
     48   "output_inventory": [
     49     "LICENSE-APACHE",
     50     "LICENSE-MIT",
     51     "SHA256SUMS",
     52     "THIRD-PARTY-NOTICES.txt",
     53     "artifact-manifest.v1.json",
     54     "binary.tar.gz",
     55     "config.example.toml",
     56     "config.schema.json",
     57     "lib-source.bundle",
     58     "nixos-module.nix",
     59     "oci-image.tar.gz",
     60     "oci-image.v1.json",
     61     "provenance-input.v1.json",
     62     "radroots.service.source-lock.v1.toml",
     63     "sbom.cdx.json",
     64     "service-source.bundle",
     65     "source-bundles.v1.json",
     66     "systemd.service"
     67   ],
     68   "canonical_json": "compact_utf8_json_with_one_final_lf",
     69   "checksum_format": "sha256_lower_hex_two_spaces_path_lf_sorted_by_path",
     70   "sbom_format": "cyclonedx_json_1_5_locked_cargo_graph",
     71   "provenance_posture": "deterministic_unsigned_slsa_v1_signing_input_external_keys_only",
     72   "protected_material_scan_scope": "all_textual_release_inputs_and_generated_documents",
     73   "source_cleanliness": "no_tracked_staged_or_untracked_changes",
     74   "revision_stability": "same_service_head_before_and_after_generation",
     75   "no_protected_material": true,
     76   "maximums": {
     77     "text_input_bytes": 1048576,
     78     "generated_document_bytes": 16777216,
     79     "service_cargo_lock_bytes": 16777216,
     80     "service_flake_lock_bytes": 4194304,
     81     "binary_bytes": 536870912,
     82     "source_bundle_bytes": 1073741824,
     83     "oci_bytes": 2147483648,
     84     "cargo_metadata_bytes": 33554432,
     85     "packages": 8192,
     86     "workspace_packages": 64
     87   },
     88   "negative_error_codes": [
     89     "invalid_contract",
     90     "invalid_service_root",
     91     "dirty_service_source",
     92     "invalid_service_metadata",
     93     "invalid_input_root",
     94     "invalid_input_artifact",
     95     "invalid_source_lock",
     96     "invalid_source_bundle",
     97     "invalid_package_inventory",
     98     "protected_material_detected",
     99     "invalid_output_root",
    100     "stale_output",
    101     "generation_failure"
    102   ]
    103 }