speccoder-runtime 0.12.0

Application services of speccoder: the only crate that executes anything.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98

//! The judge's configuration as one hash: the policy a VSA names.

use serde_json::{Value, json};

/// The sections of `speccoder.toml` that decide a verdict.
const JUDGE: &[&str] = &[
    "checks",
    "acceptance",
    "tests",
    "mutation",
    "monitor",
    "sandbox",
    "executor",
];

/// sha256 over the canonical JSON of what decides a verdict: speccoder's
/// version, the judge's sections, the model (provider and name only) and
/// the signer. Comments, prices and key-variable names do not change it.
pub fn judge_config_sha256(config: &str) -> Result<String, String> {
    judge_config_sha256_as(config, env!("CARGO_PKG_VERSION"))
}

/// [`judge_config_sha256`] as speccoder `version` computed it: a verifier
/// recomputes a tick's with the version that made the tick, never its own
/// (else no release could verify an earlier one's evidence).
///
/// # Errors
///
/// `config` is not TOML.
pub fn judge_config_sha256_as(config: &str, version: &str) -> Result<String, String> {
    let table: toml::Table = toml::from_str(config).map_err(|e| e.to_string())?;
    let section = |k: &str| {
        table
            .get(k)
            .and_then(|v| serde_json::to_value(v).ok())
            .unwrap_or(Value::Null)
    };
    let mut judge = serde_json::Map::new();
    for k in JUDGE {
        judge.insert((*k).to_owned(), section(k));
    }
    let model = table.get("model");
    let field = |t: Option<&toml::Value>, k: &str| {
        t.and_then(|m| m.get(k))
            .and_then(toml::Value::as_str)
            .map(str::to_owned)
    };
    judge.insert(
        "model".to_owned(),
        json!({ "provider": field(model, "provider"), "model": field(model, "model") }),
    );
    judge.insert(
        "attest".to_owned(),
        json!({ "signer": field(table.get("attest"), "signer").unwrap_or_else(|| "git".to_owned()) }),
    );
    judge.insert("speccoder_version".to_owned(), json!(version));
    Ok(crate::integrity::sha256_hex(&super::statement::canonical(
        &Value::Object(judge),
    )))
}

#[cfg(test)]
mod tests {
    use super::*;

    const CONFIG: &str = "[model]\nprovider = \"openai\"\nmodel = \"m\"\nprice_input_per_mtok = 1.0\n\n[checks.test]\nargv = [\"cargo\", \"test\"]\n";

    #[test]
    fn comments_and_prices_keep_the_hash_and_a_check_changes_it() {
        let base = judge_config_sha256(CONFIG).unwrap();
        let commented = format!("# a note\n{}", CONFIG.replace("1.0", "2.5"));
        assert_eq!(judge_config_sha256(&commented).unwrap(), base);
        let keyed = CONFIG.replace(
            "model = \"m\"\n",
            "model = \"m\"\napi_key_env = \"MY_KEY\"\n",
        );
        assert_eq!(judge_config_sha256(&keyed).unwrap(), base);
        let other = CONFIG.replace("\"test\"]", "\"test\", \"--all\"]");
        assert_ne!(judge_config_sha256(&other).unwrap(), base);
        let model = CONFIG.replace("model = \"m\"", "model = \"n\"");
        assert_ne!(judge_config_sha256(&model).unwrap(), base);
    }

    /// The md2csv example (2026-11-04): ticks of 0.9.7 and 0.9.8 were all
    /// "tampered" to the 0.10.0 verifier, which hashed its own version in.
    /// The tick's version recomputes the tick's hash.
    #[test]
    fn a_tick_is_recomputed_as_the_version_that_made_it() {
        let ours = judge_config_sha256(CONFIG).unwrap();
        assert_eq!(
            judge_config_sha256_as(CONFIG, env!("CARGO_PKG_VERSION")).unwrap(),
            ours
        );
        let older = judge_config_sha256_as(CONFIG, "0.9.7").unwrap();
        assert_ne!(older, ours);
        assert_eq!(judge_config_sha256_as(CONFIG, "0.9.7").unwrap(), older);
    }
}