Skip to main content

Module artifact_offline

Module artifact_offline 

Source
Expand description

Secret-free, offline inspection and verification of downloaded artifact files. Secret-free offline artifact inspection and verification.

All local files are opened without following their final component, retained while bytes are hashed, and required to have one filesystem link. ZIP inspection is bounded and never extracts. Product validation materializes a private copy only when an existing validator requires a path.

Structs§

OfflineArtifactFile
One exact local artifact record and its client path.
OfflineArtifactInspection
Path-free inspection evidence for one retained local file.
OfflineArtifactVerification
Stable, path-free offline verification result.
OfflineArtifactVerificationRequest
Provider-neutral inputs needed to validate one local artifact offline.
OfflineSourceEvidence
Exact source identity carried separately from provider state.

Enums§

OfflineArtifactContainer
Container shape observed without extraction.
OfflineArtifactError
Stable, path-free offline artifact failure.
OfflineArtifactEvidenceLevel
Highest independently established evidence level.
OfflineArtifactVerificationOutcome
Whether the requested product received strict evidence or only the strongest available proof.
OfflineProductEvidence
Cross-platform product evidence returned by an applicable strict validator.

Constants§

OFFLINE_ARTIFACT_EVIDENCE_SCHEMA_VERSION
Current stable offline-verification result schema.

Functions§

inspect
Inspect one local artifact without trusting its extension or extracting it.
verify
Verify one exact local artifact against request, source, compile, and optional signed evidence.