| -rw-r--r-- | .cargo/config.toml | 2L |
| -rw-r--r-- | .gitignore | 42L |
| -rw-r--r-- | .radroots-consumer-root | 1L |
| -rw-r--r-- | AGENTS.md | 573L |
| -rw-r--r-- | Cargo.lock | 3417L |
| -rw-r--r-- | Cargo.toml | 94L |
| -rw-r--r-- | LICENSE | 661L |
| -rw-r--r-- | README | 880L |
| -rw-r--r-- | contracts/api_baselines/rhi.txt | 2526L |
| -rw-r--r-- | contracts/conformance/vectors/reconciliation_attestation_signed_event.v1.json | 1L |
| -rw-r--r-- | contracts/conformance/vectors/trade_ingest_proposal.v1.json | 1L |
| -rw-r--r-- | contracts/release/rhi-artifact-contract.v3.json | 1L |
| -rw-r--r-- | contracts/rshr-202-step-301-gates.v1.json | 1L |
| -rw-r--r-- | contracts/services_hardening/admin_common.v1.json | 54L |
| -rw-r--r-- | contracts/services_hardening/admin_domain.v1.json | 63L |
| -rw-r--r-- | contracts/services_hardening/admin_identity_offline.v1.json | 58L |
| -rw-r--r-- | contracts/services_hardening/admin_wave_qualification.v1.json | 104L |
| -rw-r--r-- | contracts/services_hardening/config.v1.example.toml | 137L |
| -rw-r--r-- | contracts/services_hardening/config.v1.schema.json | 426L |
| -rw-r--r-- | contracts/services_hardening/encrypted_identity_envelope.v1.json | 43L |
| -rw-r--r-- | contracts/services_hardening/evidence_policy.v1.json | 200L |
| -rw-r--r-- | contracts/services_hardening/failure_qualification.v1.json | 94L |
| -rw-r--r-- | contracts/services_hardening/native_release.v1.json | 121L |
| -rw-r--r-- | contracts/services_hardening/native_release.v2.json | 139L |
| -rw-r--r-- | contracts/services_hardening/operator_contract.v1.json | 303L |
| -rw-r--r-- | contracts/services_hardening/presence_desired_state.v1.json | 94L |
| -rw-r--r-- | contracts/services_hardening/presence_publication.v1.json | 115L |
| -rw-r--r-- | contracts/services_hardening/process_qualification.v1.json | 55L |
| -rw-r--r-- | contracts/services_hardening/publication_attempt_evidence.v1.json | 99L |
| -rw-r--r-- | contracts/services_hardening/publication_execution.v1.json | 106L |
| -rw-r--r-- | contracts/services_hardening/publication_outbox.v1.json | 86L |
| -rw-r--r-- | contracts/services_hardening/publication_submission.v1.json | 63L |
| -rw-r--r-- | contracts/services_hardening/publication_wave_qualification.v1.json | 68L |
| -rw-r--r-- | contracts/services_hardening/reconciliation_attempts.v1.json | 117L |
| -rw-r--r-- | contracts/services_hardening/reconciliation_attestation.v1.json | 93L |
| -rw-r--r-- | contracts/services_hardening/reconciliation_commit.v1.json | 101L |
| -rw-r--r-- | contracts/services_hardening/reconciliation_finalization.v1.json | 86L |
| -rw-r--r-- | contracts/services_hardening/reconciliation_finalization_commit.v1.json | 89L |
| -rw-r--r-- | contracts/services_hardening/reconciliation_jobs.v1.json | 76L |
| -rw-r--r-- | contracts/services_hardening/reconciliation_manifest.v1.json | 121L |
| -rw-r--r-- | contracts/services_hardening/reconciliation_outcome.v1.json | 100L |
| -rw-r--r-- | contracts/services_hardening/reconciliation_reducer.v1.json | 81L |
| -rw-r--r-- | contracts/services_hardening/reconciliation_replay.v1.json | 98L |
| -rw-r--r-- | contracts/services_hardening/runtime_adapters.v1.json | 46L |
| -rw-r--r-- | contracts/services_hardening/runtime_foundation.v1.json | 47L |
| -rw-r--r-- | contracts/services_hardening/state_repository_topology.v1.json | 38L |
| -rw-r--r-- | contracts/services_hardening/status_cache.v1.json | 48L |
| -rw-r--r-- | contracts/services_hardening/systemd_qualification.v1.json | 106L |
| -rw-r--r-- | contracts/services_hardening/tcp_operations.v1.json | 53L |
| -rw-r--r-- | contracts/services_hardening/trade_evidence_persistence.v1.json | 50L |
| -rw-r--r-- | contracts/services_hardening/trade_ingest.v1.json | 58L |
| -rw-r--r-- | contracts/services_hardening/trade_source_ingest.v1.json | 61L |
| -rw-r--r-- | contracts/services_hardening/wrapping_credential_resolution.v1.json | 41L |
| -rw-r--r-- | deny.toml | 64L |
| -rw-r--r-- | flake.lock | 152L |
| -rw-r--r-- | flake.nix | 185L |
| -rw-r--r-- | identity.example.json | 4L |
| -rw-r--r-- | packaging/systemd/rhi@.service | 55L |
| -rw-r--r-- | radroots.service.source-lock.v3.toml | 67L |
| -rw-r--r-- | rust-toolchain.toml | 2L |
| -rwxr-xr-x | scripts/release-acceptance.sh | 17L |
| -rwxr-xr-x | scripts/verify-boundaries.sh | 27L |
| -rwxr-xr-x | scripts/verify-supply-chain.sh | 10L |
| -rwxr-xr-x | scripts/verify-systemd.sh | 45L |
| -rw-r--r-- | src/adapters/mod.rs | 1L |
| -rw-r--r-- | src/adapters/nostr/event.rs | 145L |
| -rw-r--r-- | src/adapters/nostr/mod.rs | 1L |
| -rw-r--r-- | src/admin_v1.rs | 2320L |
| -rw-r--r-- | src/cli_bootstrap.rs | 96L |
| -rw-r--r-- | src/cli_v1.rs | 1562L |
| -rw-r--r-- | src/config_loader.rs | 650L |
| -rw-r--r-- | src/config_v1.rs | 1662L |
| -rw-r--r-- | src/diagnostics_v1.rs | 189L |
| -rw-r--r-- | src/doctor_v1.rs | 647L |
| -rw-r--r-- | src/features/mod.rs | 1L |
| -rw-r--r-- | src/features/trade_agreement_attestation.rs | 427L |
| -rw-r--r-- | src/identity_credential.rs | 466L |
| -rw-r--r-- | src/identity_envelope.rs | 1673L |
| -rw-r--r-- | src/lib.rs | 329L |
| -rw-r--r-- | src/main.rs | 71L |
| -rw-r--r-- | src/operations_v1.rs | 267L |
| -rw-r--r-- | src/presence_desired.rs | 1076L |
| -rw-r--r-- | src/presence_publication.rs | 3091L |
| -rw-r--r-- | src/process_result_v1.rs | 51L |
| -rw-r--r-- | src/process_v1.rs | 768L |
| -rw-r--r-- | src/publication.rs | 558L |
| -rw-r--r-- | src/publication_attempt.rs | 553L |
| -rw-r--r-- | src/publication_execution.rs | 1905L |
| -rw-r--r-- | src/publication_submission.rs | 313L |
| -rw-r--r-- | src/reconciliation_attempt.rs | 692L |
| -rw-r--r-- | src/reconciliation_attestation.rs | 658L |
| -rw-r--r-- | src/reconciliation_commit.rs | 815L |
| -rw-r--r-- | src/reconciliation_finalization.rs | 388L |
| -rw-r--r-- | src/reconciliation_finalization_commit.rs | 1110L |
| -rw-r--r-- | src/reconciliation_job.rs | 1277L |
| -rw-r--r-- | src/reconciliation_manifest.rs | 483L |
| -rw-r--r-- | src/reconciliation_reducer.rs | 764L |
| -rw-r--r-- | src/reconciliation_replay.rs | 976L |
| -rw-r--r-- | src/runtime_adapters.rs | 863L |
| -rw-r--r-- | src/runtime_admin.rs | 2023L |
| -rw-r--r-- | src/runtime_context.rs | 183L |
| -rw-r--r-- | src/runtime_foundation.rs | 461L |
| -rw-r--r-- | src/runtime_graph.rs | 1716L |
| -rw-r--r-- | src/runtime_signal.rs | 50L |
| -rw-r--r-- | src/source_ingest.rs | 1184L |
| -rw-r--r-- | src/state_admin.rs | 807L |
| -rw-r--r-- | src/state_catalog.rs | 3114L |
| -rw-r--r-- | src/state_config.rs | 620L |
| -rw-r--r-- | src/state_host.rs | 588L |
| -rw-r--r-- | src/state_maintenance.rs | 307L |
| -rw-r--r-- | src/state_metadata.rs | 516L |
| -rw-r--r-- | src/state_repository.rs | 567L |
| -rw-r--r-- | src/state_trade.rs | 599L |
| -rw-r--r-- | src/status_v1.rs | 1186L |
| -rw-r--r-- | src/system_doctor.rs | 341L |
| -rw-r--r-- | src/trade_ingest.rs | 974L |
| -rw-r--r-- | src/transport_nostr_adapter.rs | 635L |
| -rw-r--r-- | supply-chain/audits.toml | 4L |
| -rw-r--r-- | supply-chain/config.toml | 1309L |
| -rw-r--r-- | supply-chain/imports.lock | 2L |
| -rw-r--r-- | tests/build_policy.rs | 114L |
| -rw-r--r-- | tests/package_boundary.rs | 1890L |
| -rw-r--r-- | tests/services_hardening_admin_common.rs | 73L |
| -rw-r--r-- | tests/services_hardening_admin_domain.rs | 135L |
| -rw-r--r-- | tests/services_hardening_admin_identity_offline.rs | 101L |
| -rw-r--r-- | tests/services_hardening_admin_wave_qualification.rs | 183L |
| -rw-r--r-- | tests/services_hardening_cli.rs | 759L |
| -rw-r--r-- | tests/services_hardening_config_contract.rs | 844L |
| -rw-r--r-- | tests/services_hardening_config_lifecycle.rs | 400L |
| -rw-r--r-- | tests/services_hardening_config_parser.rs | 50L |
| -rw-r--r-- | tests/services_hardening_credential_resolution.rs | 173L |
| -rw-r--r-- | tests/services_hardening_doctor.rs | 369L |
| -rw-r--r-- | tests/services_hardening_evidence_policy.rs | 429L |
| -rw-r--r-- | tests/services_hardening_failure_qualification.rs | 222L |
| -rw-r--r-- | tests/services_hardening_identity_envelope.rs | 145L |
| -rw-r--r-- | tests/services_hardening_native_release.rs | 434L |
| -rw-r--r-- | tests/services_hardening_operations.rs | 233L |
| -rw-r--r-- | tests/services_hardening_operator_contract.rs | 377L |
| -rw-r--r-- | tests/services_hardening_presence_desired_state.rs | 331L |
| -rw-r--r-- | tests/services_hardening_presence_publication.rs | 650L |
| -rw-r--r-- | tests/services_hardening_process.rs | 751L |
| -rw-r--r-- | tests/services_hardening_publication_attempt_evidence_contract.rs | 99L |
| -rw-r--r-- | tests/services_hardening_publication_contract.rs | 187L |
| -rw-r--r-- | tests/services_hardening_publication_execution_contract.rs | 93L |
| -rw-r--r-- | tests/services_hardening_publication_submission_contract.rs | 53L |
| -rw-r--r-- | tests/services_hardening_publication_wave_qualification_contract.rs | 119L |
| -rw-r--r-- | tests/services_hardening_reconciliation_attempt_contract.rs | 137L |
| -rw-r--r-- | tests/services_hardening_reconciliation_attestation_contract.rs | 141L |
| -rw-r--r-- | tests/services_hardening_reconciliation_commit_contract.rs | 102L |
| -rw-r--r-- | tests/services_hardening_reconciliation_finalization_commit_contract.rs | 72L |
| -rw-r--r-- | tests/services_hardening_reconciliation_finalization_contract.rs | 130L |
| -rw-r--r-- | tests/services_hardening_reconciliation_job_contract.rs | 121L |
| -rw-r--r-- | tests/services_hardening_reconciliation_jobs.rs | 3389L |
| -rw-r--r-- | tests/services_hardening_reconciliation_manifest_contract.rs | 175L |
| -rw-r--r-- | tests/services_hardening_reconciliation_outcome_contract.rs | 147L |
| -rw-r--r-- | tests/services_hardening_reconciliation_reducer_contract.rs | 132L |
| -rw-r--r-- | tests/services_hardening_reconciliation_replay_contract.rs | 124L |
| -rw-r--r-- | tests/services_hardening_runtime_context.rs | 293L |
| -rw-r--r-- | tests/services_hardening_runtime_foundation.rs | 396L |
| -rw-r--r-- | tests/services_hardening_source_ingest.rs | 917L |
| -rw-r--r-- | tests/services_hardening_state_catalog.rs | 615L |
| -rw-r--r-- | tests/services_hardening_state_host.rs | 647L |
| -rw-r--r-- | tests/services_hardening_state_metadata.rs | 195L |
| -rw-r--r-- | tests/services_hardening_state_repository_topology.rs | 290L |
| -rw-r--r-- | tests/services_hardening_state_resilience.rs | 431L |
| -rw-r--r-- | tests/services_hardening_status.rs | 501L |
| -rw-r--r-- | tests/services_hardening_systemd.rs | 159L |
| -rw-r--r-- | tests/services_hardening_trade_ingest.rs | 444L |
| -rw-r--r-- | tests/services_hardening_trade_persistence.rs | 472L |
| -rw-r--r-- | tests/services_hardening_wave_100_a.rs | 79L |
| -rw-r--r-- | tests/services_hardening_wave_100_b.rs | 251L |
| -rw-r--r-- | tests/source_guards.rs | 257L |
| -rw-r--r-- | tools/xtask/Cargo.toml | 21L |
| -rw-r--r-- | tools/xtask/src/main.rs | 1993L |
| -rw-r--r-- | tools/xtask/src/rshr_202_step_301_gate.rs | 474L |
| -rw-r--r-- | tools/xtask/src/rshr_202_step_301_platform.rs | 103L |
