boundgraph-check 0.1.0

Layer 5 of BoundGraph: the checker engine and the ed25519 signing that makes a verdict evidence.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

[package]

name = "boundgraph-check"

description = "Layer 5 of BoundGraph: the checker engine and the ed25519 signing that makes a verdict evidence."

version.workspace = true

edition.workspace = true

rust-version.workspace = true

license.workspace = true

repository.workspace = true

authors.workspace = true

homepage.workspace = true

readme.workspace = true

keywords = ["boundgraph", "evidence", "ed25519", "verification", "agents"]

categories = ["cryptography", "development-tools::testing"]



[lib]

name = "boundgraph_check"

path = "src/lib.rs"



[features]

# The compile and test-run checkers (US-0804, US-0805) have to run a command,

# and feature 09's sandbox does not exist yet. `Unconfined` is the stand-in: it

# runs a subprocess on this machine with no isolation at all, and refuses any

# grant it cannot honour. Default on, because without it the two checkers have

# nothing to run through; a deployment that wants it impossible to build turns

# default features off.

default = ["unconfined"]

unconfined = ["dep:tokio"]



[dependencies]

async-trait.workspace = true

# Deterministic by construction (RFC 8032 ยง5.1.6): the nonce is derived from the

# key and the message, never sampled. A checker that signed differently on every

# run would make a replayed run's evidence fail to compare (US-1006).

ed25519-dalek = { workspace = true, features = ["signature"] }

boundgraph-core.workspace = true

boundgraph-grant.workspace = true

# For `Store` only (US-0806 reads the raw patch out of the content store), so

# the AST slicer's parser tree is not wanted here. Spelled out rather than

# inherited because a workspace dependency cannot have its default features

# turned off by a member.

boundgraph-slice = { path = "../boundgraph-slice", version = "0.1.0", default-features = false }

rand.workspace = true

serde.workspace = true

serde_json.workspace = true

thiserror.workspace = true



tokio = { workspace = true, features = [

    "process",

    "rt",

    "time",

], optional = true }



[dev-dependencies]

tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }



[lints]

workspace = true