feat(evidence): add deterministic exact snapshot manifests - #44

Open

wolfiesch wants to merge 21 commits into

masterfrom

feat/evidence-manifest-v1-20260831

Commits on Aug 31, 2026

feat(evidence): add deterministic exact snapshot manifests
wolfiesch
committed
4fea8bf
fix(evidence): use collections ABC imports
wolfiesch
committed
a8aaac5
fix(evidence): report empty snapshots as exact mismatches
wolfiesch
committed
e819e4f
fix(evidence): make manifest helper type explicit
wolfiesch
committed
b44b7d8
fix(evidence): harden manifest replacement boundaries
wolfiesch
committed
6636682
test(evidence): cover destination and schema attacks
wolfiesch
committed
621f003
fix(evidence): enforce portable artifact paths
wolfiesch
committed
4842924
test(evidence): cover path aliases and decoder limits
wolfiesch
committed
d9b77c6
docs(evidence): render the CLI example as a code block
wolfiesch
committed
7ad5311
fix(evidence): require portable manifest filenames
wolfiesch
committed
e6f2c9d
test(evidence): reject nonportable manifest names
wolfiesch
committed
9420e6c
fix(evidence): reject unstable and manifest-aliased artifacts
wolfiesch
committed
1d54474
test(evidence): cover unstable files and name aliases
wolfiesch
committed
adfb5bf
fix(evidence): require a stable portable inventory
wolfiesch
committed
95d5c41
fix(evidence): bind hashes to the initial walk
wolfiesch
committed
bbc5c3e
fix(evidence): align manifest generation and read limits
wolfiesch
committed
a1c8859
fix(evidence): verify snapshot after publication
wolfiesch
committed
05a75a7
test(evidence): cover publish races and size bounds
wolfiesch
committed
f5735a2
fix(evidence): harden manifest validation and reads
wolfiesch
committed
dbce556
fix(evidence): close verification race windows
wolfiesch
committed
4ee48cb
test(evidence): keep deep refusal cross-version
wolfiesch
committed
a16160a

Navigation Menu

Uh oh!

feat(evidence): add deterministic exact snapshot manifests - #44

feat(evidence): add deterministic exact snapshot manifests#44
wolfiesch wants to merge 21 commits into
masterfrom
feat/evidence-manifest-v1-20260831

Commits on Aug 31, 2026

feat(evidence): add deterministic exact snapshot manifests

fix(evidence): use collections ABC imports

fix(evidence): report empty snapshots as exact mismatches

fix(evidence): make manifest helper type explicit

fix(evidence): harden manifest replacement boundaries

test(evidence): cover destination and schema attacks

fix(evidence): enforce portable artifact paths

test(evidence): cover path aliases and decoder limits

docs(evidence): render the CLI example as a code block

fix(evidence): require portable manifest filenames

test(evidence): reject nonportable manifest names

fix(evidence): reject unstable and manifest-aliased artifacts

test(evidence): cover unstable files and name aliases

fix(evidence): require a stable portable inventory

fix(evidence): bind hashes to the initial walk

fix(evidence): align manifest generation and read limits

fix(evidence): verify snapshot after publication

test(evidence): cover publish races and size bounds

fix(evidence): harden manifest validation and reads

fix(evidence): close verification race windows

test(evidence): keep deep refusal cross-version