Directories
¶
| Path | Synopsis |
|---|---|
|
Package allocpolicy is the canonical, dependency-neutral owner of the #1327 GPU allocation-policy descriptor and the shared advertiser vocabulary and tuple-coherence rules (ADR-015, "GKE amendment to the #1327 allocation-policy model").
|
Package allocpolicy is the canonical, dependency-neutral owner of the #1327 GPU allocation-policy descriptor and the shared advertiser vocabulary and tuple-coherence rules (ADR-015, "GKE amendment to the #1327 allocation-policy model"). |
|
Package bom builds CycloneDX 1.6 software bills-of-materials describing the container images AICR can deploy.
|
Package bom builds CycloneDX 1.6 software bills-of-materials describing the container images AICR can deploy. |
|
Package bundler provides orchestration for generating deployment bundles from recipes.
|
Package bundler provides orchestration for generating deployment bundles from recipes. |
|
attestation
Package attestation provides bundle attestation using Sigstore signing.
|
Package attestation provides bundle attestation using Sigstore signing. |
|
checksum
Package checksum provides closed-world SHA256 bundle inventories.
|
Package checksum provides closed-world SHA256 bundle inventories. |
|
config
Package config provides configuration options for bundler implementations.
|
Package config provides configuration options for bundler implementations. |
|
deployer
Package deployer defines the shared interface and types for bundle deployers.
|
Package deployer defines the shared interface and types for bundle deployers. |
|
deployer/argocd
Package argocd provides Argo CD Application generation for recipes.
|
Package argocd provides Argo CD Application generation for recipes. |
|
deployer/argocdhelm
Package argocdhelm generates a Helm chart app-of-apps for Argo CD with dynamic install-time values.
|
Package argocdhelm generates a Helm chart app-of-apps for Argo CD with dynamic install-time values. |
|
deployer/flux
Package flux provides Flux manifest generation for AICR recipes.
|
Package flux provides Flux manifest generation for AICR recipes. |
|
deployer/helm
Package helm generates per-component Helm bundles from recipe results.
|
Package helm generates per-component Helm bundles from recipe results. |
|
deployer/helmfile
Package helmfile generates a helmfile.yaml release graph from a configured recipe.
|
Package helmfile generates a helmfile.yaml release graph from a configured recipe. |
|
deployer/localformat
Package localformat writes the uniform numbered local-chart bundle layout.
|
Package localformat writes the uniform numbered local-chart bundle layout. |
|
gatemanifest
Package gatemanifest synthesizes the Kubernetes manifests for a component readiness gate Job (ServiceAccount, RBAC, ConfigMap, Job).
|
Package gatemanifest synthesizes the Kubernetes manifests for a component readiness gate Job (ServiceAccount, RBAC, ConfigMap, Job). |
|
registry
Package registry provides thread-safe registration and retrieval of bundler implementations.
|
Package registry provides thread-safe registration and retrieval of bundler implementations. |
|
result
Package result provides types for tracking bundle generation results.
|
Package result provides types for tracking bundle generation results. |
|
types
Package types defines the type system for bundler implementations.
|
Package types defines the type system for bundler implementations. |
|
verifier
Package verifier implements offline bundle verification with a four-level trust model.
|
Package verifier implements offline bundle verification with a four-level trust model. |
|
Package chainsaw executes Chainsaw-style assertions against a live Kubernetes cluster, in-process.
|
Package chainsaw executes Chainsaw-style assertions against a live Kubernetes cluster, in-process. |
|
chainsawgate
|
|
|
runner
Package runner contains the chainsaw-test evaluation machinery used by the standalone `gate` CLI.
|
Package runner contains the chainsaw-test evaluation machinery used by the standalone `gate` CLI. |
|
Package cli implements the command-line interface for the AICR aicr tool.
|
Package cli implements the command-line interface for the AICR aicr tool. |
|
client
|
|
|
v1
Package aicr is the public, compatibility-reviewed Go library surface for external consumers of the AI Cluster Runtime.
|
Package aicr is the public, compatibility-reviewed Go library surface for external consumers of the AI Cluster Runtime. |
|
Package collector provides interfaces and implementations for collecting system configuration data.
|
Package collector provides interfaces and implementations for collecting system configuration data. |
|
file
Package file provides a configurable parser for line-oriented configuration files (e.g., /etc/default/grub, /etc/os-release, /proc/sys entries).
|
Package file provides a configurable parser for line-oriented configuration files (e.g., /etc/default/grub, /etc/os-release, /proc/sys entries). |
|
gpu
Package gpu collects GPU hardware data via driver-free NFD/PCI enumeration.
|
Package gpu collects GPU hardware data via driver-free NFD/PCI enumeration. |
|
k8s
Package k8s collects Kubernetes cluster configuration data.
|
Package k8s collects Kubernetes cluster configuration data. |
|
network
Package network collects per-hardware-group network topology by ingesting k8s-launch-kit (l8k) cluster-config data and translating it into the NetworkTopology Measurement shape documented in docs/integrator/measurement-api.md.
|
Package network collects per-hardware-group network topology by ingesting k8s-launch-kit (l8k) cluster-config data and translating it into the NetworkTopology Measurement shape documented in docs/integrator/measurement-api.md. |
|
os
Package os collects operating system configuration data.
|
Package os collects operating system configuration data. |
|
systemd
Package systemd collects systemd service configuration data.
|
Package systemd collects systemd service configuration data. |
|
talos
Package talos provides Talos-specific collector implementations used in place of the systemd D-Bus and /proc-based OS collectors when the recipe criteria declares os: talos.
|
Package talos provides Talos-specific collector implementations used in place of the systemd D-Bus and /proc-based OS collectors when the recipe criteria declares os: talos. |
|
Package component provides shared bundler utilities used by pkg/bundler and its deployers.
|
Package component provides shared bundler utilities used by pkg/bundler and its deployers. |
|
Package config defines the AICRConfig file schema accepted by the aicr CLI's --config flag on the snapshot, recipe, bundle, validate, and verify commands.
|
Package config defines the AICRConfig file schema accepted by the aicr CLI's --config flag on the snapshot, recipe, bundle, validate, and verify commands. |
|
Package constraints parses and evaluates constraint expressions (e.g.
|
Package constraints parses and evaluates constraint expressions (e.g. |
|
Package corroborate computes the recipe corroboration consensus model and emits the deterministic interim-evidence dashboard (GP4, design doc docs/design/013-interim-evidence-dashboard.md).
|
Package corroborate computes the recipe corroboration consensus model and emits the deterministic interim-evidence dashboard (GP4, design doc docs/design/013-interim-evidence-dashboard.md). |
|
Package defaults provides centralized configuration constants for the AICR system.
|
Package defaults provides centralized configuration constants for the AICR system. |
|
Package deprecation implements the runtime half of the AICR deprecation channel.
|
Package deprecation implements the runtime half of the AICR deprecation channel. |
|
Package diff compares AICR snapshots to detect configuration drift.
|
Package diff compares AICR snapshots to detect configuration drift. |
|
Package errors provides structured error types for better observability and programmatic error handling across the application.
|
Package errors provides structured error types for better observability and programmatic error handling across the application. |
|
Package evidence is an umbrella for AICR's evidence kinds.
|
Package evidence is an umbrella for AICR's evidence kinds. |
|
allowlist
Package allowlist loads and validates the maintained signer allowlist at recipes/evidence/allowlist.yaml.
|
Package allowlist loads and validates the maintained signer allowlist at recipes/evidence/allowlist.yaml. |
|
attestation
Package attestation implements the recipe-test-attestation evidence kind defined in ADR-007 (docs/design/007-recipe-evidence.md).
|
Package attestation implements the recipe-test-attestation evidence kind defined in ADR-007 (docs/design/007-recipe-evidence.md). |
|
cncf
Package cncf renders CNCF AI Conformance evidence markdown from CTRF reports.
|
Package cncf renders CNCF AI Conformance evidence markdown from CTRF reports. |
|
internal/boundedio
Package boundedio puts blocking local-filesystem work behind a cancellation boundary so the evidence publish/sign/verify paths cannot hang indefinitely on a dead NFS/FUSE mount.
|
Package boundedio puts blocking local-filesystem work behind a cancellation boundary so the evidence publish/sign/verify paths cannot hang indefinitely on a dead NFS/FUSE mount. |
|
project
Package project synthesizes the source-keyed evidence tree that the GP4 corroborate consensus generator consumes.
|
Package project synthesizes the source-keyed evidence tree that the GP4 corroborate consensus generator consumes. |
|
redact
Package redact minimizes the sensitive operational detail an evidence bundle physically ships, while leaving the cryptographic verification story intact.
|
Package redact minimizes the sensitive operational detail an evidence bundle physically ships, while leaving the cryptographic verification story intact. |
|
verifier
Package verifier implements `aicr evidence verify`: offline verification of a recipe-evidence bundle (v1 or v2) produced by `aicr validate --emit-attestation`.
|
Package verifier implements `aicr evidence verify`: offline verification of a recipe-evidence bundle (v1 or v2) produced by `aicr validate --emit-attestation`. |
|
Package fingerprint extracts a structured cluster identity from a snapshot's collector measurements and compares it against a recipe's criteria.
|
Package fingerprint extracts a structured cluster identity from a snapshot's collector measurements and compares it against a recipe's criteria. |
|
Package header provides common header types for AICR data structures.
|
Package header provides common header types for AICR data structures. |
|
Package health computes per-recipe structural health across the whole criteria matrix, as specified by ADR-009 (Recipe Health Tracking).
|
Package health computes per-recipe structural health across the whole criteria matrix, as specified by ADR-009 (Recipe Health Tracking). |
|
Package helm provides shared Helm chart rendering utilities used by both the mirror image discovery pipeline and the BOM generator.
|
Package helm provides shared Helm chart rendering utilities used by both the mirror image discovery pipeline and the BOM generator. |
|
helmtest
Package helmtest provides test helpers for consumers of pkg/helm.
|
Package helmtest provides test helpers for consumers of pkg/helm. |
|
Package k8s provides Kubernetes integration for AI Cluster Runtime.
|
Package k8s provides Kubernetes integration for AI Cluster Runtime. |
|
agent
Package agent provides Kubernetes Job deployment for automated snapshot capture.
|
Package agent provides Kubernetes Job deployment for automated snapshot capture. |
|
client
Package client provides a singleton Kubernetes client for efficient cluster interactions.
|
Package client provides a singleton Kubernetes client for efficient cluster interactions. |
|
labels
Package labels provides shared Kubernetes label constants used by both the validator (pkg/validator) and the snapshot agent (pkg/k8s/agent), so neither has to import the other to agree on label keys and values.
|
Package labels provides shared Kubernetes label constants used by both the validator (pkg/validator) and the snapshot agent (pkg/k8s/agent), so neither has to import the other to agree on label keys and values. |
|
pod
Package pod provides shared utilities for Kubernetes Job and Pod operations.
|
Package pod provides shared utilities for Kubernetes Job and Pod operations. |
|
Package logging provides structured logging utilities for AICR components.
|
Package logging provides structured logging utilities for AICR components. |
|
Package manifest provides Helm-compatible template rendering for manifest files.
|
Package manifest provides Helm-compatible template rendering for manifest files. |
|
Package measurement provides types and utilities for collecting, comparing, and filtering system measurements from various sources (Kubernetes, GPU, OS, SystemD, NodeTopology, NetworkTopology).
|
Package measurement provides types and utilities for collecting, comparing, and filtering system measurements from various sources (Kubernetes, GPU, OS, SystemD, NodeTopology, NetworkTopology). |
|
Package mirror discovers container images and Helm charts referenced by a recipe and emits the list in formats consumable by air-gap tools (Hauler, Zarf) and general-purpose formats (JSON, YAML).
|
Package mirror discovers container images and Helm charts referenced by a recipe and emits the list in formats consumable by air-gap tools (Hauler, Zarf) and general-purpose formats (JSON, YAML). |
|
Package netutil holds small, dependency-free networking helpers shared across packages that have no other reason to depend on one another (e.g.
|
Package netutil holds small, dependency-free networking helpers shared across packages that have no other reason to depend on one another (e.g. |
|
Package oci provides functionality for packaging and pushing artifacts to OCI-compliant registries.
|
Package oci provides functionality for packaging and pushing artifacts to OCI-compliant registries. |
|
Package recipe provides recipe building and matching functionality.
|
Package recipe provides recipe building and matching functionality. |
|
catalog
Package catalog provides signing and verification for the AICR recipe catalog (registry.yaml + validators/catalog.yaml).
|
Package catalog provides signing and verification for the AICR recipe catalog (registry.yaml + validators/catalog.yaml). |
|
ocisource
Package ocisource provides an owned recipe.DataProvider backed by one immutable-digest-selected OCI recipe artifact.
|
Package ocisource provides an owned recipe.DataProvider backed by one immutable-digest-selected OCI recipe artifact. |
|
oskind
Package oskind is the single source of truth for the string values of the OS recipe criterion.
|
Package oskind is the single source of truth for the string values of the OS recipe criterion. |
|
Package runid generates unique run identifiers shared by the validator and the snapshot agent so both subsystems use one format and one generator.
|
Package runid generates unique run identifiers shared by the validator and the snapshot agent so both subsystems use one format and one generator. |
|
Package schema derives JSON Schema documents from the Go types that define AICR's published artifacts.
|
Package schema derives JSON Schema documents from the Go types that define AICR's published artifacts. |
|
Package serializer provides encoding and decoding of measurement data in multiple formats.
|
Package serializer provides encoding and decoding of measurement data in multiple formats. |
|
Package server implements the aicrd HTTP server: the AICR System Configuration Recommendation API defined in api/aicr/v1/server.yaml.
|
Package server implements the aicrd HTTP server: the AICR System Configuration Recommendation API defined in api/aicr/v1/server.yaml. |
|
Package snapshotter captures comprehensive system configuration snapshots.
|
Package snapshotter captures comprehensive system configuration snapshots. |
|
Package testgrid maps a recipe's canonical coordinate to the AICR evidence dashboard (validation.aicr.run) and answers "does this coordinate have a dashboard presence?" — the two facts RQ1 (#1283) and RQ2 (#1284) share.
|
Package testgrid maps a recipe's canonical coordinate to the AICR evidence dashboard (validation.aicr.run) and answers "does this coordinate have a dashboard presence?" — the two facts RQ1 (#1283) and RQ2 (#1284) share. |
|
Package trust manages Sigstore trusted root material for offline attestation verification.
|
Package trust manages Sigstore trusted root material for offline attestation verification. |
|
Package tuning computes the nodewright tuning-status matrix: for each (service, accelerator) the catalog resolves, which tuning profile is applied and the pinned versions of the nodewright nvidia-setup / nvidia-tuned / nvidia-tuning-gke packages.
|
Package tuning computes the nodewright tuning-status matrix: for each (service, accelerator) the catalog resolves, which tuning profile is applied and the pinned versions of the nodewright nvidia-setup / nvidia-tuned / nvidia-tuning-gke packages. |
|
Package uatbroker resolves the UAT reservation registry (infra/uat/reservations.yaml) and expands the nightly version-matrix schedule for the day/night UAT broker (#1274).
|
Package uatbroker resolves the UAT reservation registry (infra/uat/reservations.yaml) and expands the nightly version-matrix schedule for the day/night UAT broker (#1274). |
|
Package validator evaluates a recipe's constraints and validation checks against a cluster snapshot and the live cluster.
|
Package validator evaluates a recipe's constraints and validation checks against a cluster snapshot and the live cluster. |
|
catalog
Package catalog provides the declarative validator catalog.
|
Package catalog provides the declarative validator catalog. |
|
ctrf
Package ctrf provides Go types and utilities for the Common Test Report Format (CTRF).
|
Package ctrf provides Go types and utilities for the Common Test Report Format (CTRF). |
|
labels
Package labels provides shared label constants for validation resources.
|
Package labels provides shared label constants for validation resources. |
|
v1
Package v1 defines AICR's validator input format (v1alpha1).
|
Package v1 defines AICR's validator input format (v1alpha1). |
|
Package version provides semantic version parsing and comparison with flexible precision support.
|
Package version provides semantic version parsing and comparison with flexible precision support. |
Click to show internal directories.
Click to hide internal directories.