Documentation
¶
Overview ¶
Package receipt exposes the reproducibility-receipt REST endpoints: emit a content-addressed receipt for a run, and verify a committed receipt against a run's current persisted state (drift detection).
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Get ¶
Get handles GET /jobs/:id/runs/:run_id/receipt.
It re-derives the run's reproducibility receipt from persisted state and returns it as JSON — a small, content-addressed artifact intended to be committed to git alongside the pipeline. The receipt's `degraded` flag is honest: if any task ran on an unpinned, mutable image tag, the receipt cannot attest reproducibility and says so.
func Verify ¶
Verify handles POST /jobs/:id/runs/:run_id/receipt/verify.
The request body is a previously-emitted (committed) receipt. The handler re-derives the receipt from the run's current persisted state and returns a drift report: whether the run still matches, and if not, every divergence ("image tag mutated: digest mismatch", "manifest changed", …). A run whose tasks were not digest-pinned is reported as degraded and never as a clean match.
Types ¶
This section is empty.
Source Files