Freeze canonical manifest fixtures and hashes #16

Merged

lost-rob0t merged 5 commits from agent/canonical-manifest-fixtures into main

2026-08-13 04:58:28 +00:00

lost-rob0t commented

2026-08-13 04:49:44 +00:00

(Migrated from github.com)

What changed

freeze byte-identical canonical manifest outputs for the FEC and BBP fixtures from a successful StarLang CI run
record SHA-256 hashes for both frozen artifacts
make CI compare newly generated manifests byte-for-byte against the frozen fixtures
make CI verify the fixture hashes independently

Why

The StarLang implementation hardening ledger requires stable canonical-manifest fixtures and hashes before package extraction. Deterministic serialization tests alone only prove repeatability within one run; these fixtures turn wire-shape drift into an explicit compatibility change.

Frozen artifacts

fixtures/canonical/fec-manifest-v1.json
fixtures/canonical/bbp-domain-manifest-v1.json
fixtures/canonical/SHA256SUMS

The fixture bytes were taken from the successful star-lang CI run for PR #15, which is now merged into main.

Validation

GitHub CI now regenerates both manifests, compares the exact bytes, and verifies SHA256SUMS. Nix remains the independent ASDF/package validation lane.

## What changed - freeze byte-identical canonical manifest outputs for the FEC and BBP fixtures from a successful StarLang CI run - record SHA-256 hashes for both frozen artifacts - make CI compare newly generated manifests byte-for-byte against the frozen fixtures - make CI verify the fixture hashes independently ## Why The StarLang implementation hardening ledger requires stable canonical-manifest fixtures and hashes before package extraction. Deterministic serialization tests alone only prove repeatability within one run; these fixtures turn wire-shape drift into an explicit compatibility change. ## Frozen artifacts - `fixtures/canonical/fec-manifest-v1.json` - `fixtures/canonical/bbp-domain-manifest-v1.json` - `fixtures/canonical/SHA256SUMS` The fixture bytes were taken from the successful `star-lang CI` run for PR #15, which is now merged into `main`. ## Validation GitHub CI now regenerates both manifests, compares the exact bytes, and verifies `SHA256SUMS`. Nix remains the independent ASDF/package validation lane.