lib

Core libraries for Radroots
git clone https://radroots.dev/git/lib.git
Log | Files | Refs | README

services_hardening_repro_install.v1.json (2821B)

      1 {
      2   "schema": "radroots.services-hardening.repro-install-decisions.v1",
      3   "contract_version": 1,
      4   "decision_state": "active",
      5   "owner_step": 306,
      6   "command": "cargo xtask service-repro-install",
      7   "required_arguments": [
      8     "plan",
      9     "source_root",
     10     "root_preimage_root",
     11     "predecessor_artifact_root",
     12     "git_executable",
     13     "adapter_executable",
     14     "output"
     15   ],
     16   "plan_schema": "radroots.services-hardening.repro-install-plan.v1",
     17   "result_schema": "radroots.services-hardening.repro-install-result.v1",
     18   "phase_witness_schema": "radroots.services-hardening.repro-install-phase-witness.v1",
     19   "candidate_binding": "explicit_sha256_candidate_identity_digest",
     20   "source_binding": "exact_clean_git_revision_and_tree",
     21   "checkout_policy": "two_fresh_detached_no_local_no_checkout_clones",
     22   "checkout_count": 2,
     23   "store_policy": "one_distinct_empty_harness_owned_store_per_build",
     24   "source_date_epoch": "exact_root_preimage_commit_timestamp",
     25   "normalization": "identity_exact_bytes_v1_no_exclusions",
     26   "reproducibility_comparison": "exact_relative_path_mode_size_and_sha256_inventory",
     27   "tool_binding": "exact_regular_executable_bytes_sha256",
     28   "process_policy": "bounded_process_group_closed_stdin_replacement_environment",
     29   "result_write_policy": "create_new_regular_file_only_with_failure_diff_preserved",
     30   "install_roots": "distinct_fresh_and_lifecycle_harness_owned_roots",
     31   "phase_inventory": [
     32     "fresh_install_candidate",
     33     "fresh_health_candidate",
     34     "install_predecessor",
     35     "pre_upgrade_health",
     36     "upgrade_candidate",
     37     "post_upgrade_health",
     38     "rollback_predecessor",
     39     "post_rollback_health"
     40   ],
     41   "phase_state_policy": "canonical_witnesses_form_two_closed_state_chains_and_health_is_nonmutating",
     42   "maximums": {
     43     "plan_bytes": 1048576,
     44     "result_bytes": 4194304,
     45     "process_stream_bytes": 33554432,
     46     "process_deadline_seconds": 3600,
     47     "artifact_files": 65536,
     48     "artifact_total_bytes": 17179869184,
     49     "artifact_file_bytes": 2147483648,
     50     "diff_entries": 256,
     51     "argv_tokens": 128,
     52     "argv_token_bytes": 4096
     53   },
     54   "required_negative_vectors": [
     55     "dirty_source",
     56     "wrong_source_tree",
     57     "wrong_root_preimage_epoch",
     58     "reused_checkout_or_store",
     59     "artifact_path_mode_size_or_digest_mismatch",
     60     "open_normalization",
     61     "missing_or_reordered_phase",
     62     "noncanonical_witness",
     63     "mutating_health_witness",
     64     "broken_upgrade_or_rollback_chain",
     65     "replaced_tool_executable",
     66     "preexisting_output"
     67   ],
     68   "negative_error_codes": [
     69     "invalid_contract",
     70     "invalid_plan",
     71     "invalid_source",
     72     "dirty_source",
     73     "invalid_tool",
     74     "checkout_failure",
     75     "build_failure",
     76     "invalid_artifacts",
     77     "reproducibility_mismatch",
     78     "install_failure",
     79     "invalid_witness",
     80     "invalid_output"
     81   ]
     82 }