gwk-cert 0.0.2

Contract conformance checker: verifies an event stream against the gwk-domain state machines
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

//! `gwk-cert <stream.json>` — certify an exported event stream against the
//! contract. Findings print to stdout as a JSON array (stable, typed — CI
//! parses them); the human summary goes to stderr. Exit 0 = certified,
//! 1 = findings, 2 = usage.
//!
//! Non-claim: a coherent FORGED stream passes — tamper evidence lives in the
//! storage layer, not in stream inspection.

use gwk_cert::check::{check_stream, parse_stream};

fn main() {
    let Some(path) = std::env::args().nth(1) else {
        eprintln!("usage: gwk-cert <stream.json>");
        std::process::exit(2);
    };
    let raw = match std::fs::read_to_string(&path) {
        Ok(raw) => raw,
        Err(err) => {
            eprintln!("gwk-cert: cannot read {path}: {err}");
            std::process::exit(2);
        }
    };
    let (events, mut findings) = parse_stream(&raw);
    findings.extend(check_stream(&events));

    println!(
        "{}",
        serde_json::to_string_pretty(&findings).expect("findings serialize")
    );
    if findings.is_empty() {
        eprintln!("gwk-cert: certified — {} events, 0 findings", events.len());
    } else {
        eprintln!(
            "gwk-cert: NOT certified — {} events, {} finding(s)",
            events.len(),
            findings.len()
        );
        std::process::exit(1);
    }
}