entropyfs 0.7.15

Entropy-native Linux filesystem: persist irreducible state, materialize structure, preserve exact bytes.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

//! `entropyfs evidence-manifest <out.json>` (Phase 12E.5): capture the
//! machine-readable reproducibility manifest every sealed evidence
//! directory must contain.
//!
//! # PURPOSE
//!
//! Courts and campaigns run in bash; this command gives them a one-call
//! way to write the [`EvidenceManifest`] that turns an archive directory
//! into *sealed evidence*: version, revision, format, feature bits,
//! universe versions, transport, scheduler, kernel/arch/distro/host,
//! compiler, digest, timestamp. Filenames (`court-<ts>-<rev>/`) stay
//! human-readable; the manifest is the semantic authority.
//!
//! # BOUNDARY
//!
//! KNOWS: the environment captures and the build constants. NEVER KNOWS:
//! the store, the corpora, or any run result — it seals context, not
//! conclusions. The caller (court script) records the run's numbers
//! alongside.

#![forbid(unsafe_code)]

use std::path::PathBuf;

use crate::evidence::manifest::EvidenceManifest;

/// Options for evidence-manifest.
#[derive(Debug, Clone, clap::Args)]
pub struct EvidenceManifestArgs {
    /// Output JSON path.
    #[arg(value_name = "OUT")]
    pub out: PathBuf,
    /// Store directory under test (for mount/device context).
    #[arg(long, default_value = ".")]
    pub store: PathBuf,
    /// Storage transport used by the run (`sync` | `uring`).
    #[arg(long, default_value = "sync")]
    pub io_backend: String,
    /// Worker scheduler used by the run (`semaphore` | `pool-<n>`).
    #[arg(long, default_value = "semaphore")]
    pub worker_scheduler: String,
    /// Court/driver schema version (the tool that produced the run).
    #[arg(long, default_value = "1")]
    pub court_schema_version: String,
    /// Immutable container image digest (empty for native runs).
    #[arg(long, default_value = "")]
    pub container_image_digest: String,
}

/// Run evidence-manifest.
pub fn run(args: &EvidenceManifestArgs) -> Result<(), String> {
    let repo_root = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
    let m = EvidenceManifest::capture(
        &repo_root,
        &args.store,
        &args.io_backend,
        &args.worker_scheduler,
        &args.container_image_digest,
        &args.court_schema_version,
    );
    std::fs::write(&args.out, m.to_json())
        .map_err(|e| format!("write {}: {e}", args.out.display()))?;
    println!("evidence manifest written: {}", args.out.display());
    Ok(())
}