Files
heretek-rigs/rust-toolchain.toml
John Smith abbc24652f feat(checker-batch-d): close checker evasion gaps + canonical drift guard sources
Implements REQ-D94/D95/D98/D101/D102/G1 (T1 sources; generated trees
follow after clean regen):

- manifest-closure: $-word NEEDS-DECLARATION, node/npx argv resolution,
  node -e / python -c / git -c alias shell-out flags, .gitlab-ci.yml +
  CircleCI/pipelines discovery (REQ-D94) + corpus
- policy-verifier: tomllib structural lints walk (inline tables,
  header-less dotted keys) with line-scan attribution; pin derives from
  rust-toolchain.toml channel 1.89.0 (REQ-D95) + corpus
- generate-rigs: fleet/skill-patches/ vendor-patch mechanism + regen
  (REQ-D101, never a specs/ hand-edit); 64->68 comment fixes
- verify-rigs.sh: appended V17 (SKILL.md frontmatter parse +
  name==dirname), V18 (contract pin + red-proof + native verbs),
  V19 (SUMMARY-vs-doc stale-count guard) (REQ-D101/D98/D102)
- drift corrections through proper sources: audit prompt 64->68 +
  0.6.11->0.6.13, tech docs, README/USER_GUIDE/AGENTS.md counts
  (REQ-D102); schemas/contract-schemas.sha256 freeze pin (REQ-D98)

Refs #94 #95 #98 #101 #102
2026-10-24 21:41:31 -04:00

11 lines
503 B
TOML

# rust-toolchain.toml — repo toolchain pin (issue #95, REQ-D95).
#
# Source of truth for the policy-verifier toolchain pin: the verifier
# derives its expected snapshot pin from this file's `channel`
# (fail-closed when absent), instead of comparing two hand-kept
# revision strings. On a toolchain bump, change `channel` here AND the
# `pin:` line in scripts/policy-verifier.known-lints.txt together; any
# mismatch fails EVERY verifier invocation as a stale snapshot.
[toolchain]
channel = "1.89.0"