Skip to main content

Requirements

  • Go 1.23 or later; Go 1.26 is recommended.
  • GCC with C2x support.
  • Clang 17 or later for sanitizer tests.
  • Bash, Python 3, and curl.

Run the complete demonstration

From the repository root:
The script performs these steps:
  1. Starts a controlled origin on loopback.
  2. Observes one JSON representation under an explicit local-fixture policy.
  3. Stores the body by SHA-256 digest.
  4. Writes a deterministic CBOR observation envelope and JSON view.
  5. Verifies the evidence in Go.
  6. Verifies it independently in C.
  7. Stops the origin.
  8. Executes the adapter from preserved evidence only.
  9. Prints a result carrying native and semantic values with field-level provenance.

Run tests

The suite includes Go unit and mutation fuzz tests, a GCC build, a Clang sanitizer build, a bounded C libFuzzer run, shared-corpus independent C verification, corrupted-evidence rejection, an offline end-to-end test, and documentation navigation checks. All normal tests use only local fixtures.

Inspect artifacts

After make demo:
The body is not copied into the run directory. body.ref points to immutable content-addressed evidence.

Safety note

--allow-loopback exists only for the controlled fixture. Public policy rejects loopback, private, link-local, multicast, reserved, and documentation network ranges.
Last modified on August 10, 2026