lib

Core libraries for Radroots
git clone https://radroots.dev/git/lib.git
Log | Files | Refs | README

services_hardening_source_lock.v1.json (3916B)


      1 {
      2   "schema": "radroots.services-hardening.source-lock-decisions.v1",
      3   "contract_version": 1,
      4   "decision_state": "active",
      5   "lock_filename": "radroots.service.source-lock.v1.toml",
      6   "lock_schema": "radroots.service.source-lock.v1",
      7   "canonical_encoding": "compact_canonical_toml_with_final_newline",
      8   "maximum_lock_utf8_bytes": 4096,
      9   "maximum_service_utf8_bytes": 128,
     10   "canonical_field_order": [
     11     "schema",
     12     "contract_version",
     13     "service",
     14     "repository",
     15     "revision",
     16     "architecture",
     17     "workspace_catalog_sha256",
     18     "version",
     19     "source_archive_sha256",
     20     "cargo_lock_sha256",
     21     "flake_lock_sha256",
     22     "rust_version",
     23     "host_feature_profile",
     24     "contract_versions.config",
     25     "contract_versions.state",
     26     "contract_versions.admin",
     27     "contract_versions.status",
     28     "contract_versions.provider"
     29   ],
     30   "fixed": {
     31     "repository": "https://github.com/radrootslabs/lib",
     32     "architecture": "radroots.crates.release.v2",
     33     "version": "0.1.0-alpha",
     34     "rust_version": "1.97.1",
     35     "host_feature_profile": "service-host"
     36   },
     37   "revision_encoding": "git_oid_lowercase_hex_40",
     38   "digest_encoding": "sha256_lowercase_hex_64",
     39   "digest_subjects": {
     40     "workspace_catalog_sha256": "lib/contracts/crates/catalog.v2.toml",
     41     "source_archive_sha256": "canonical_lib_revision_source_archive",
     42     "cargo_lock_sha256": "service/Cargo.lock",
     43     "flake_lock_sha256": "service/flake.lock"
     44   },
     45   "service_identifier": "ascii_lower_snake_case_starting_with_letter_ending_with_letter_or_digit_no_empty_segments_1_to_128_bytes",
     46   "contract_version_rule": "u32_nonzero",
     47   "negative_error_codes": [
     48     "invalid_contract_version",
     49     "invalid_digest",
     50     "invalid_feature_profile",
     51     "invalid_fixed_identity",
     52     "invalid_revision",
     53     "invalid_service",
     54     "invalid_toolchain",
     55     "malformed",
     56     "noncanonical",
     57     "too_large"
     58   ],
     59   "canonical_vector": {
     60     "toml": "schema = \"radroots.service.source-lock.v1\"\ncontract_version = 1\nservice = \"fixture_service\"\nrepository = \"https://github.com/radrootslabs/lib\"\nrevision = \"2222222222222222222222222222222222222222\"\narchitecture = \"radroots.crates.release.v2\"\nworkspace_catalog_sha256 = \"2222222222222222222222222222222222222222222222222222222222222222\"\nversion = \"0.1.0-alpha\"\nsource_archive_sha256 = \"3333333333333333333333333333333333333333333333333333333333333333\"\ncargo_lock_sha256 = \"3f32f227550b26ffccf6ee73ceab7471b3d8ce40b3e7c345d2ed65af7e9affa0\"\nflake_lock_sha256 = \"13638c254efcc7ccc5798242d2c095934e84fbc406a9af244fc754b18a6f9353\"\nrust_version = \"1.97.1\"\nhost_feature_profile = \"service-host\"\n\n[contract_versions]\nconfig = 1\nstate = 2\nadmin = 3\nstatus = 4\nprovider = 5\n",
     61     "sha256": "7251222df95da414d8cb073b8907f4a53c9ac4c89354bb2d895ac78fab79d81a"
     62   },
     63   "operations": {
     64     "command": "cargo xtask service-source-lock",
     65     "modes": [
     66       "check",
     67       "write"
     68     ],
     69     "required_arguments": [
     70       "mode",
     71       "service_root",
     72       "source_archive"
     73     ],
     74     "service_metadata_path": "Cargo.toml.workspace.metadata.radroots.service_source_lock",
     75     "service_metadata_fields": [
     76       "service",
     77       "host_feature_profile",
     78       "config_contract_version",
     79       "state_contract_version",
     80       "admin_contract_version",
     81       "status_contract_version",
     82       "provider_contract_version"
     83     ],
     84     "lib_dependency_inventory": "verified_source_archive_workspace_catalog",
     85     "source_cleanliness": "all_changes_forbidden_except_exact_generated_lock_path",
     86     "service_revision_stability": "same_head_before_and_after_evidence_and_output",
     87     "revision_agreement": [
     88       "cargo_manifests",
     89       "cargo_lock",
     90       "direct_exact_nix_input",
     91       "source_archive",
     92       "canonical_public_remote"
     93     ],
     94     "maximum_source_archive_bytes": 1073741824
     95   },
     96   "deferred_operations": [
     97     "embedded_build_information_agreement"
     98   ]
     99 }