Module bundle_schema 

Schema/identity validation for assembled artifact bundles.

The trusted publish stage assembles the bundle tar the edge later streams byte-for-byte; before the tar is pushed it must prove to be a well-formed stow bundle whose embedded config matches the stable public-cache identity, because nothing between GHCR and the CLI inspects it again.

Structs

BundleSchemaError

An assembled bundle failed schema or identity validation.

Functions

validate_bundle_schema

Validate an assembled bundle tar: it must carry a manifest.json whose config names a stable public-cache identity and canonical output files.