Expand description
speccoder-verify check and speccoder attest verify --branch: every
ticked task of the units a branch touches, mapped to the commit that
carries its evidence and checked with attest verify’s own rules
(super::verify::object), plus what only a branch can show: a tick
with no evidence at all, a task line edited after its tick, a cited
requirement changed since, a commit a squash merge lost.
Everything is read from git objects of the repository at the given head, never from a working tree, and trust comes only from the caller: a key the branch itself declares is never trusted.
Structs§
- Checked
- A finished check: the report and where it was read from.
- Options
- What a branch check is asked.
- Refusal
- A check that could not start.
Enums§
- Allowed
Signers - Where the verifier’s SSH trust comes from.
Constants§
- NO_
TRUST - The refusal when the caller gave no trust.
Functions§
- check
- Checks the ticks of the units the branch touches.
- closed
- The tasks of
featureclosed onhead: ticked there, with the commit reachable from it that carries the task’s verdict —(task, commit). Whatprpublishes held-out sets for; read as recorded, no trust. - locate
- One task of
featureat the head, for its tour: checked with the caller’s trust when given, else read as recorded (signatures not checked, said in its detail). The report holds that tick alone, or none. - recorded
- Every tick of
featureathead, read as recorded (no trust, no signature checked): whatpr’s body tours show before a maintainer’s verifier checks them. - result
- The report as a command result.
- verify
speccoder-verify check/attest verify --branchfor the repository containingstart, as a command result namedcommand(payloadbranch_verify).