Crate lonca_verify 

Evidence producers. The Gatekeeper runs build and test commands itself, in a sandbox, on the merged tree; the agent’s own reports are ignored.

Results are nondeterministic by nature, so they are recorded as Attestations in the operation log and never recomputed on replay.

Modules

jail

The sandbox lonca run puts an agent in: Lonca’s own, so that an agent with no hooks at all can be held to it. Unlike the verifier’s, which runs a project’s own build, this one assumes the process inside is hostile.

sweep

What a command leaves running in its sandbox, on macOS. On Linux the sandbox’s pid namespace goes with the command and takes everything in it; Seatbelt has nothing like that, and a process that forked twice and left its session is out of reach of any signal to a group.

Structs

Verifier

Enums

Sandbox

Functions

materialize

Writes files below dir. Symlinks are written as plain files holding their target so a tree can never point the verifier outside dir.