Expand description
Standalone package verification (spec §8 integrity, §9 signing).
lean-ctx pack verify and the import path share these primitives. All
hashing operates on the document text of the content member — never on
re-serialized parsed values, which would be lossy across languages
(a writer’s 1.0 re-serializes as 1 in JavaScript and breaks the hash).
Structs§
- Verify
Report - Per-check verification report, mirroring the checks every conforming reader runs (and the shape of the @ctxpkg/verify reference output).
Enums§
- Check
Outcome - Outcome of one verification check.
Functions§
- validate_
kind_ coherence - Kind ↔ payload coherence (GH #724/#726): the declared
kindmust match the content payload it ships, so a mislabeled package can never route into the wrong trust chain (an “addon” without an addon manifest, or a context pack smuggling one in). - verify_
package_ file - Read and verify a
.ctxpkgfile (size- and extension-gated like import). - verify_
package_ text - Verify a
.ctxpkgdocument without installing anything.