services_hardening_source_lock.v1.json (3916B)
1 { 2 "schema": "radroots.services-hardening.source-lock-decisions.v1", 3 "contract_version": 1, 4 "decision_state": "active", 5 "lock_filename": "radroots.service.source-lock.v1.toml", 6 "lock_schema": "radroots.service.source-lock.v1", 7 "canonical_encoding": "compact_canonical_toml_with_final_newline", 8 "maximum_lock_utf8_bytes": 4096, 9 "maximum_service_utf8_bytes": 128, 10 "canonical_field_order": [ 11 "schema", 12 "contract_version", 13 "service", 14 "repository", 15 "revision", 16 "architecture", 17 "workspace_catalog_sha256", 18 "version", 19 "source_archive_sha256", 20 "cargo_lock_sha256", 21 "flake_lock_sha256", 22 "rust_version", 23 "host_feature_profile", 24 "contract_versions.config", 25 "contract_versions.state", 26 "contract_versions.admin", 27 "contract_versions.status", 28 "contract_versions.provider" 29 ], 30 "fixed": { 31 "repository": "https://github.com/radrootslabs/lib", 32 "architecture": "radroots.crates.release.v2", 33 "version": "0.1.0-alpha", 34 "rust_version": "1.97.1", 35 "host_feature_profile": "service-host" 36 }, 37 "revision_encoding": "git_oid_lowercase_hex_40", 38 "digest_encoding": "sha256_lowercase_hex_64", 39 "digest_subjects": { 40 "workspace_catalog_sha256": "lib/contracts/crates/catalog.v2.toml", 41 "source_archive_sha256": "canonical_lib_revision_source_archive", 42 "cargo_lock_sha256": "service/Cargo.lock", 43 "flake_lock_sha256": "service/flake.lock" 44 }, 45 "service_identifier": "ascii_lower_snake_case_starting_with_letter_ending_with_letter_or_digit_no_empty_segments_1_to_128_bytes", 46 "contract_version_rule": "u32_nonzero", 47 "negative_error_codes": [ 48 "invalid_contract_version", 49 "invalid_digest", 50 "invalid_feature_profile", 51 "invalid_fixed_identity", 52 "invalid_revision", 53 "invalid_service", 54 "invalid_toolchain", 55 "malformed", 56 "noncanonical", 57 "too_large" 58 ], 59 "canonical_vector": { 60 "toml": "schema = \"radroots.service.source-lock.v1\"\ncontract_version = 1\nservice = \"fixture_service\"\nrepository = \"https://github.com/radrootslabs/lib\"\nrevision = \"2222222222222222222222222222222222222222\"\narchitecture = \"radroots.crates.release.v2\"\nworkspace_catalog_sha256 = \"2222222222222222222222222222222222222222222222222222222222222222\"\nversion = \"0.1.0-alpha\"\nsource_archive_sha256 = \"3333333333333333333333333333333333333333333333333333333333333333\"\ncargo_lock_sha256 = \"3f32f227550b26ffccf6ee73ceab7471b3d8ce40b3e7c345d2ed65af7e9affa0\"\nflake_lock_sha256 = \"13638c254efcc7ccc5798242d2c095934e84fbc406a9af244fc754b18a6f9353\"\nrust_version = \"1.97.1\"\nhost_feature_profile = \"service-host\"\n\n[contract_versions]\nconfig = 1\nstate = 2\nadmin = 3\nstatus = 4\nprovider = 5\n", 61 "sha256": "7251222df95da414d8cb073b8907f4a53c9ac4c89354bb2d895ac78fab79d81a" 62 }, 63 "operations": { 64 "command": "cargo xtask service-source-lock", 65 "modes": [ 66 "check", 67 "write" 68 ], 69 "required_arguments": [ 70 "mode", 71 "service_root", 72 "source_archive" 73 ], 74 "service_metadata_path": "Cargo.toml.workspace.metadata.radroots.service_source_lock", 75 "service_metadata_fields": [ 76 "service", 77 "host_feature_profile", 78 "config_contract_version", 79 "state_contract_version", 80 "admin_contract_version", 81 "status_contract_version", 82 "provider_contract_version" 83 ], 84 "lib_dependency_inventory": "verified_source_archive_workspace_catalog", 85 "source_cleanliness": "all_changes_forbidden_except_exact_generated_lock_path", 86 "service_revision_stability": "same_head_before_and_after_evidence_and_output", 87 "revision_agreement": [ 88 "cargo_manifests", 89 "cargo_lock", 90 "direct_exact_nix_input", 91 "source_archive", 92 "canonical_public_remote" 93 ], 94 "maximum_source_archive_bytes": 1073741824 95 }, 96 "deferred_operations": [ 97 "embedded_build_information_agreement" 98 ] 99 }