cem/

Package cemcode registers the stable CEM error taxonomy shared by every CEM seam.

Package cli is the thin CEM command dispatch.

Package coverprofile is the Go coverprofile grammar shared by the bounded runner (internal/liveverify/gorunner) and `cem cover` (TCQ-V0-051).

Package gitauth is the isolated Git authority kernel for CEM: it validates the repository boundary (reciprocal worktree metadata, alternates denial, attribute isolation), resolves revisions, reads tree entries and blobs through Git object identity, and derives canonical CEM 0.2 patch bytes that are independent of repository configuration, attributes, diff drivers, object redirection, shallow/partial state, and linked-worktree layout.

Package gitrun executes bounded, contained Git child processes for the CEM seams.

Package mdreport renders values into CEM and OCM review-report Markdown safely.

Package patch implements the frozen CEM 0.1 bounded unified-diff parser specified by interop/cem-0.1/ALGORITHMS.md.

Package publish is the descriptor-rooted bounded reader and transactional output publisher for CEM artifacts.

Package sim proves a parsed CEM patch against exact base-tree bytes, per interop/cem-0.1/ALGORITHMS.md "Patch/base simulation".

Package verify composes the CEM seams into the frozen repository-conformant verifier: exact-patch (cem/0.1) and canonical (cem/0.2, cem/0.3) verification with the frozen validation precedence, mechanical byte and Go structural proofs, and same-path evidence drift.

Package wire reads and validates CEM 0.1/0.2 wire documents.

Package workflow implements the CEM producer/verifier operations — begin, prepare, cite, mark, status, verify, and report — over the CEM seams, with the frozen CEM-CB envelope table, validation precedence, and resume rules.