Skip to content

fix: validate released ASTER compiled bundles - #22

Merged
tuzuminami merged 3 commits into
mainfrom
codex/drift-aster-producer-contract
Jul 13, 2026
Merged

fix: validate released ASTER compiled bundles#22
tuzuminami merged 3 commits into
mainfrom
codex/drift-aster-producer-contract

Conversation

@tuzuminami

@tuzuminami tuzuminami commented Jul 13, 2026

Copy link
Copy Markdown
Owner

Summary

  • pin the ASTER producer contract to immutable v2.0.0 artifacts and SHA-256 values
  • derive DRIFT references only after recomputing the ASTER canonical content hash and validating identity, provenance, and runtime context projections
  • reject unknown fields and unsupported producer metadata fail-closed

Verification

  • npm run check

Closes #21
Closes #23

@tuzuminami
tuzuminami merged commit 2ed42c7 into main Jul 13, 2026
1 check passed
@tuzuminami
tuzuminami deleted the codex/drift-aster-producer-contract branch July 13, 2026 13:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

P2: prove ASTER resolver integrity before scenario publication P1: validate ASTER compatibility fixtures against the upstream bundle schema

1 participant