rhi

commit bc1a4ac7a8c4e5e4d368ef0e8111c9f5039cd5fb
parent 28efdc18b283cc4ddaf65203fcfc7e40a88ce498
Author: triesap <tyson@radroots.org>
Date:   Mon, 24 Aug 2026 07:38:01 +0000

build(rhi): align schema v6 source identity

- advance the package state contract identity to schema version six
- bind the standalone source lock to the same governed state version
- update boundary tests to reject stale release identity metadata
- preserve Step190 history with a separately verified forward repair

Diffstat:
M
Cargo.toml
 | 
2
+-
M
radroots.service.source-lock.v2.toml
 | 
2
+-
M
tests/build_policy.rs
 | 
4
++--

3 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/Cargo.toml b/Cargo.toml
@@ -20,7 +20,7 @@ service = "rhi"
 host_feature_profile = "service-host"
 nix_material = "absent"
 config_contract_version = 1
-state_contract_version = 5
+state_contract_version = 6
 admin_contract_version = 1
 status_contract_version = 1
 provider_contract_version = 1
diff --git a/radroots.service.source-lock.v2.toml b/radroots.service.source-lock.v2.toml
@@ -16,7 +16,7 @@ material = "absent"
 
 [contract_versions]
 config = 1
-state = 5
+state = 6
 admin = 1
 status = 1
 provider = 1
diff --git a/tests/build_policy.rs b/tests/build_policy.rs
@@ -27,7 +27,7 @@ fn source_lock_metadata_is_exact_and_nix_is_absent() {
     ));
     for field in [
         "config_contract_version = 1",
-        "state_contract_version = 5",
+        "state_contract_version = 6",
         "admin_contract_version = 1",
         "status_contract_version = 1",
         "provider_contract_version = 1",
@@ -93,7 +93,7 @@ fn source_lock_binds_the_current_cargo_lock() {
     assert!(!SOURCE_LOCK.contains("flake_lock_sha256"));
     assert!(!SOURCE_LOCK.contains("lib_revision ="));
     assert!(SOURCE_LOCK.ends_with(
-        "[contract_versions]\nconfig = 1\nstate = 5\nadmin = 1\nstatus = 1\nprovider = 1\n"
+        "[contract_versions]\nconfig = 1\nstate = 6\nadmin = 1\nstatus = 1\nprovider = 1\n"
     ));
 }