Expand description
§witness-core
Pure-data algorithms for witness, separated from the wasmtime-using
CLI binary so this crate compiles to wasm32-wasip2.
Modules:
instrument— manifest types + walrus-based instrumentation passdecisions— DWARF-grounded MC/DC reconstructiondiff— branch-set / coverage delta between two snapshotspredicate— in-toto coverage Statement builderreport— coverage-report aggregationrivet_evidence— rivet-shape evidence emissionrun_record—RunRecordtypes + cross-run mergeerror—Errorenum andResultalias
Wasmtime-based execution (the witness run CLI path) lives in the
witness binary crate.
Re-exports§
Modules§
- attest
- DSSE-signed attestation for witness coverage predicates.
- decisions
- DWARF-grounded reconstruction of source-level decisions from Wasm
br_ifsequences. - demangle
- Function-symbol demangling for human-readable branch attribution.
- diff
- Branch-set / coverage delta between two manifests or run records.
- error
- Error types for witness.
- instrument
- Wasm instrumentation — inserts branch counters at every decision point.
- lcov
- LCOV emission from a
RunRecord. - mcdc_
report - MC/DC report — truth tables, independent-effect verdicts, gap analysis.
- predicate
- Predicate emission for sigil’s in-toto attestation bundles.
- report
- Coverage report generation from raw run data.
- rivet_
evidence - Rivet-shape coverage evidence emission.
- run_
record - Run-record types and pure-data aggregation.