Module distribution 

Relocatable source-package distributions.

A distribution keeps the generic native host and canonical HAL separate: the copied host sits in bin/, while the verified HARP archive and its declarative launch contract sit in lib/ next to it.

Structs

Manifest

SealArchive

SealSpec

SealedArchive

SealedInstallation

SealedManifest

Constants

ARCHIVE_PATH

FORMAT

MANIFEST_PATH

SEALED_FORMAT

A self-contained native executable. The native loader treats the final fixed-size footer as an opt-in marker, so ordinary platform executables remain valid hosts without a Hara payload.

Functions

build

Builds a directory that can be relocated as one unit. The caller supplies the native executable that is copied as the launcher; the package is built from the declared project and verified again before this function succeeds.

inspect_sealed

Returns None for an ordinary native executable. A footer with the Hara magic is never ignored: malformed or tampered sealed binaries fail closed.

install_sealed

Installs a sealed executable’s archives into the normal content-addressed package cache. The only temporary HARP copies are deleted on every path; the executable itself has no adjacent package files.

read

seal

Writes a single executable that contains a verified native host and an ordered set of canonical HARP archives. The archive marked :primary owns the entry point; all other archives are installed first so its project lock can resolve them from the normal content-addressed package cache.

verify

Reads and verifies the local companion contract before a host loads any source from its HARP archive. A release archive’s signature authenticates release.edn; this function enforces the exact digests it records.

verify_sealed

Revalidates a sealed executable’s envelope and every embedded archive’s package manifest. It does not mutate the package cache.