lib

Core libraries for Radroots
git clone https://radroots.dev/git/lib.git
Log | Files | Refs | README

services_hardening_release_artifacts.v2.json (3108B)

      1 {
      2   "schema": "radroots.services-hardening.release-artifacts-decisions.v2",
      3   "contract_version": 2,
      4   "decision_state": "active",
      5   "predecessor": {
      6     "schema": "radroots.services-hardening.release-artifacts-decisions.v1",
      7     "filename": "services_hardening_release_artifacts.v1.json",
      8     "transition": "forward_only_replace"
      9   },
     10   "command": "cargo xtask service-release-artifacts",
     11   "modes": [
     12     "check",
     13     "write"
     14   ],
     15   "required_arguments": [
     16     "mode",
     17     "service_root",
     18     "input_root",
     19     "output_root",
     20     "target",
     21     "source_date_epoch"
     22   ],
     23   "service_metadata_path": "Cargo.toml.workspace.metadata.radroots.service_release",
     24   "service_metadata_fields": [
     25     "service",
     26     "service_package",
     27     "binary_name",
     28     "version"
     29   ],
     30   "supported_targets": [
     31     "aarch64-unknown-linux-gnu",
     32     "x86_64-unknown-linux-gnu"
     33   ],
     34   "input_inventory": [
     35     "config.example.toml",
     36     "config.schema.json",
     37     "lib-source.bundle",
     38     "nixos-module.nix",
     39     "oci-image.tar.gz",
     40     "service-binary",
     41     "service-source.bundle",
     42     "systemd.service"
     43   ],
     44   "excluded_parent_owned_inputs": [
     45     "backup_restore_runbook",
     46     "operator_runbook"
     47   ],
     48   "service_root_inventory": [
     49     "LICENSE-APACHE",
     50     "LICENSE-MIT",
     51     "radroots.service.source-lock.v2.toml"
     52   ],
     53   "output_inventory": [
     54     "LICENSE-APACHE",
     55     "LICENSE-MIT",
     56     "SHA256SUMS",
     57     "THIRD-PARTY-NOTICES.txt",
     58     "artifact-manifest.v1.json",
     59     "binary.tar.gz",
     60     "config.example.toml",
     61     "config.schema.json",
     62     "lib-source.bundle",
     63     "nixos-module.nix",
     64     "oci-image.tar.gz",
     65     "oci-image.v1.json",
     66     "provenance-input.v1.json",
     67     "radroots.service.source-lock.v2.toml",
     68     "sbom.cdx.json",
     69     "service-source.bundle",
     70     "source-bundles.v2.json",
     71     "systemd.service"
     72   ],
     73   "canonical_json": "compact_utf8_json_with_one_final_lf",
     74   "checksum_format": "sha256_lower_hex_two_spaces_path_lf_sorted_by_path",
     75   "sbom_format": "cyclonedx_json_1_5_locked_cargo_graph",
     76   "provenance_posture": "deterministic_unsigned_slsa_v1_signing_input_external_keys_only",
     77   "protected_material_scan_scope": "all_textual_release_inputs_and_generated_documents",
     78   "source_cleanliness": "no_tracked_staged_or_untracked_changes",
     79   "revision_stability": "same_service_head_before_and_after_generation",
     80   "no_protected_material": true,
     81   "maximums": {
     82     "text_input_bytes": 1048576,
     83     "generated_document_bytes": 16777216,
     84     "service_cargo_lock_bytes": 16777216,
     85     "service_flake_lock_bytes": 4194304,
     86     "binary_bytes": 536870912,
     87     "source_bundle_bytes": 1073741824,
     88     "oci_bytes": 2147483648,
     89     "cargo_metadata_bytes": 33554432,
     90     "packages": 8192,
     91     "workspace_packages": 64
     92   },
     93   "negative_error_codes": [
     94     "invalid_contract",
     95     "invalid_service_root",
     96     "dirty_service_source",
     97     "invalid_service_metadata",
     98     "invalid_input_root",
     99     "invalid_input_artifact",
    100     "invalid_source_lock",
    101     "invalid_source_bundle",
    102     "invalid_package_inventory",
    103     "protected_material_detected",
    104     "invalid_output_root",
    105     "stale_output",
    106     "generation_failure"
    107   ]
    108 }