lib

Core libraries for Radroots
git clone https://radroots.dev/git/lib.git
Log | Files | Refs | README

safety_matrix.toml (2029B)

      1 schema_version = 1
      2 toolchain = "nightly-2026-07-16"
      3 miri_flags = ["-Zmiri-strict-provenance", "-Zmiri-disable-isolation"]
      4 
      5 [[miri]]
      6 package = "radroots_core"
      7 filter = "money::invariant_tests::internal_nonnegative_invariant_covers_invalid_and_signed_zero_states"
      8 authority = "numeric-invariants"
      9 
     10 [[miri]]
     11 package = "radroots_identity"
     12 filter = "key::tests::public_keys_reject_invalid_encodings_and_curve_points"
     13 authority = "identity-validation"
     14 
     15 [[miri]]
     16 package = "radroots_protocol"
     17 filter = "error::v1::tests::native_source_messages_are_redacted_and_secrets_are_rejected"
     18 authority = "secret-safe-errors"
     19 
     20 [[miri]]
     21 package = "radroots_event"
     22 filter = "admission::tests::positive_vector_traverses_the_complete_transition_graph"
     23 authority = "event-admission-state"
     24 
     25 [[miri]]
     26 package = "radroots_event_codec"
     27 filter = "reply::inbound::registry_v7::tests::inbound_relay_syntax_and_tag_element_budgets_remain_separate"
     28 authority = "inbound-event-parsing"
     29 
     30 [[miri]]
     31 package = "radroots_trade"
     32 filter = "trade_contract_v1::tests::reducer_projection_is_identical_for_every_three_record_permutation"
     33 authority = "trade-state-reduction"
     34 
     35 [[miri]]
     36 package = "radroots_secrets"
     37 filter = "envelope::tests::decode_and_validation_reject_every_bounded_wire_failure"
     38 authority = "secret-envelope-decoding"
     39 
     40 [[miri]]
     41 package = "radroots_transport"
     42 filter = "outcome::tests::outcome_classes_cover_success_failure_retry_and_detail_branches"
     43 authority = "transport-outcome-policy"
     44 
     45 [[sanitizer]]
     46 kind = "address"
     47 targets = [
     48   "aarch64-apple-darwin",
     49   "x86_64-apple-darwin",
     50   "aarch64-unknown-linux-gnu",
     51   "x86_64-unknown-linux-gnu",
     52 ]
     53 packages = [
     54   "radroots_sdk_ffi",
     55   "radroots_storage_sqlite",
     56   "radroots_runtime_manager",
     57 ]
     58 authority = "native-ffi-runtime-storage"
     59 
     60 [[exception]]
     61 lane = "sanitizer"
     62 targets = [
     63   "aarch64-pc-windows-msvc",
     64   "x86_64-pc-windows-msvc",
     65   "wasm32-unknown-unknown",
     66 ]
     67 owner = "radroots-security"
     68 expires = "2026-10-01"
     69 reason = "the pinned Rust sanitizer runtime is unavailable for these target families"