Expand description
Bounded artifact inspection and verified host tools for the Internet Computer.
Consumers supply byte limits, admitted digests, and artifact acceptance policy. Tool execution requires explicit digest/version authority and an environment, working directory, output bounds and deadline. No installation or deployment targets are selected here.
Modulesยง
- archive
- Verify a gzip-compressed tar archive and select one admitted regular member.
- artifact
- Bounded reads and raw SHA-256 identities for files and downloaded bytes.
- candid
- Bounded Candid extractor invocation and Canic-compatible text normalization.
- provenance
- Bounded Git observations through a consumer-admitted executable.
- tool
- Digest/version admission and bounded execution of explicit Unix host tools.
- wasm
- Borrowed structural facts from core WebAssembly artifacts.