openlatch-client 0.5.3

OpenLatch runtime enforcement node — the capture-and-enforce adapter that evaluates every covered action against a coding agent's Autonomy Zone before it runs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

# `cross` configuration for the two Linux release builds (x86_64 and
# aarch64). Both build inside cross's prebuilt images so they link against
# those images' old glibc rather than the runner's: a native build on
# ubuntu-latest requires the glibc of that image and refuses to start on
# Debian 12, Ubuntu 22.04, RHEL 9 or Amazon Linux 2023.
#
# There is no `pre-build` hook: nothing in the graph links a system library.
# One that did would be demanded by the loader on every user's host too, and
# ci/check-linux-binary.py fails the release before that ships.
#
# `env.passthrough` forwards the secret baked into the release binary by
# build.rs so the Docker-isolated build can see it, plus the
# CARGO_PROFILE_RELEASE_* debug-info overrides publish.yml sets. Without
# the latter, cargo inside the container falls back to the stripped
# `[profile.release]` from Cargo.toml and these targets ship with no
# debug symbols to upload — silently, since the upload still "succeeds".

[build.env]
passthrough = [
    "OPENLATCH_POSTHOG_KEY",
    "CARGO_PROFILE_RELEASE_DEBUG",
    "CARGO_PROFILE_RELEASE_STRIP",
    "CARGO_PROFILE_RELEASE_SPLIT_DEBUGINFO",
]