pub fn claude_cli_version() -> Option<String>Expand description
The claude --version string, for the run’s provenance.
Recorded alongside a canary outcome so a later forensic read can tell WHICH
CLI the behaviour was (or was not) witnessed on — the whole premise is
version-fragile, and an outcome with no version attached cannot be compared
against a later one. Fail-soft: None when the binary is missing or says
nothing, because a guard’s provenance must never be the reason a launch
fails.
This is NOT the guard. A version string is a proxy for the behaviour, which is exactly what D-13 rejected; it is recorded as context beside the real measurement, never in place of it.