Expand description
secunit-core — registry parsing, cadence/scope resolution, evidence
hashing, and manifest verification. Library-shaped so tests and the CLI
can drive it without going through clap.
Modules§
- evidence
- Run lifecycle: prepare, capture (the agent’s job), finalize, abort, resume; plus chain verification.
- model
- Strongly-typed registry model.
- registry
- Registry loading + cadence/scope resolution.
- reports
- Report data assembly: the structured JSON behind
secunit report data. - risks
- Risk register: an append-only, hash-chained event log per risk, plus a
derived
risks/index.jsoncache. - schemas
- Compile-time embedded JSON Schemas. The schemas live in
crates/secunit-core/schemas/*.schema.jsonand are baked into the binary so validation does not depend on the install location. - skills
- Bundled standard-library skills + the one resolver every skill reference goes through.
- wisp
- WISP → PDF export.
Constants§
- SCHEMA_
VERSION - Schema version implemented by this crate. Bumped only on breaking on-disk changes; reads of older versions remain best-effort.