forjar 1.25.1

Rust-native Infrastructure as Code — bare-metal first, BLAKE3 state, provenance tracing
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117

//! Core infrastructure logic — types, parsing, resolution, planning, execution.

pub mod cis_ubuntu_pack;
pub mod codegen;
pub mod compliance;
pub mod compliance_gate;
pub mod compliance_pack;
pub mod compliance_pack_builtin;
pub mod conditions;
pub mod config_hash;
pub mod cron_source;
pub mod ephemeral;
pub mod error;
pub mod executor;
pub mod gitenv;
pub mod key_source;
pub mod metric_collector;
pub mod metric_source;
pub mod migrate;
pub mod observation_mask;
pub mod observe;
pub mod parser;
pub mod plan_seal;
pub mod plan_selectors;
pub mod planner;
pub mod plugin_dispatch;
pub mod plugin_hot_reload;
pub mod plugin_loader;
pub mod plugin_runtime;
pub mod policy_boundary;
pub mod policy_coverage;
pub mod promotion;
pub mod promotion_events;
pub mod prove;
pub mod purifier;
pub mod quality_gate;
pub mod recipe;
pub mod remediate;
pub mod resolver;
pub mod rollout;
pub mod rulebook_template;
pub mod rules_engine;
pub mod rules_runtime;
pub mod scoring;
pub mod script_secret_lint;
pub mod secret_audit;
pub mod secret_namespace;
pub mod secret_provider;
pub mod secrets;
pub mod security_scanner;
pub mod shell_escape;
pub mod shell_install;
pub mod shell_provider;
pub mod state;
pub mod state_encryption;
pub mod store;
pub mod strutil;
pub mod task;
#[cfg(test)]
mod tests_webhook_http;
#[cfg(test)]
mod tests_webhook_server;
#[cfg(test)]
mod tests_webhook_sig;
pub mod types;
/// forjar#372: what a config may make a ReadOnly verb execute, removed.
pub mod unattended;
pub mod verify;
pub mod watch_daemon;
pub mod webhook_http;
pub mod webhook_server;
pub mod webhook_sig;
pub mod webhook_source;
pub mod yaml_edit;

pub mod do330;
pub mod dogfood;
pub mod ferrocene;
pub mod flight_grade;
mod kani_production_proofs;
mod kani_proofs;
mod kani_proofs_backup_sync;
mod kani_proofs_disk_budget;
mod kani_proofs_nas_archive;
mod kani_proofs_verb_surface;
pub mod mcdc;
pub mod repro_build;
mod scoring_b;
#[cfg(test)]
mod tests_compliance;
#[cfg(test)]
mod tests_kani_proofs;
#[cfg(test)]
mod tests_policy_boundary;
#[cfg(test)]
mod tests_proptest_convergence;
#[cfg(test)]
mod tests_proptest_handlers;
#[cfg(test)]
mod tests_proptest_idempotency;
#[cfg(test)]
mod tests_purifier;
#[cfg(test)]
mod tests_purifier_b;
#[cfg(test)]
mod tests_scoring;
#[cfg(test)]
mod tests_scoring_b;
#[cfg(all(test, feature = "encryption"))]
mod tests_secrets;
#[cfg(test)]
mod tests_security_scanner;
#[cfg(all(test, feature = "encryption"))]
mod tests_state_encryption_enc;
#[cfg(test)]
mod tests_watch_daemon;
mod verus_spec;