- Gateway audit append no longer panics on
serde_jsonerrors; the error is propagated asio::Error(crates/proofpath-gateway/src/main.rs). - Verifier
block()now uses!is_blank(...)forcausal_valid/scope_validso future call sites without pre-validation stay correct.
RequestContext::headerskips the lowercase allocation when the lookup name is already lowercase (true for allHEADER_*constants).RequestContext::with_headerlowercases in place instead of allocating a secondString.Reversibility::parseuseseq_ignore_ascii_caseinstead of allocating a lowercased copy.audit::compute_audit_hashwrites canonical JSON into a singleStringbuffer instead of building intermediateVec<String>and concatenating viaformat!. Hash output is byte-identical (verified by the existing conformance test).
ProofPath v0.1 is the first product milestone for a CI-verifiable action-boundary evidence gate.
- Live action-boundary CI check.
- Action-boundary metrics collector.
- Action-boundary metrics assertion helper.
- Reusable composite GitHub Action in
action.yml. - GitHub Action quickstart documentation.
- Downstream-style adoption example.
- Fixture and CI baseline reports.
- v0.1 product milestone note.
formatting
clippy
Rust tests
Compute Witness Rust CLI fixture
live action-boundary metrics
reusable ProofPath GitHub Action self-test
ProofPath turns action-boundary audit logs into CI-verifiable evidence.
v0.1 is not a production-security certification, formal verification result, or complete prevention guarantee.
It is the first reusable product slice:
ProofPath audit JSONL
-> metrics JSON
-> expected-value assertions
-> CI pass / fail