runpack_verify

Verify a runpack manifest and artifacts offline.

Key notes

• Validates hashes, integrity root, and decision log structure.
• Fails closed on missing or tampered files.
• Use in CI or offline audit pipelines.

Inputs

• manifest_path (required): Manifest path relative to runpack root.
• runpack_dir (required): Runpack root directory.

Input Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "additionalProperties": false,
  "properties": {
    "manifest_path": {
      "description": "Manifest path relative to runpack root.",
      "type": "string"
    },
    "runpack_dir": {
      "description": "Runpack root directory.",
      "type": "string"
    }
  },
  "required": [
    "runpack_dir",
    "manifest_path"
  ],
  "type": "object"
}

Outputs

• report (required): Type: object.
• status (required): Runpack verification status.

Output Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "additionalProperties": false,
  "properties": {
    "report": {
      "additionalProperties": false,
      "properties": {
        "checked_files": {
          "minimum": 0,
          "type": "integer"
        },
        "errors": {
          "description": "Verification error messages.",
          "items": {
            "type": "string"
          },
          "type": "array"
        },
        "status": {
          "description": "Runpack verification status.",
          "enum": [
            "pass",
            "fail"
          ],
          "type": "string"
        }
      },
      "required": [
        "status",
        "checked_files",
        "errors"
      ],
      "type": "object"
    },
    "status": {
      "description": "Runpack verification status.",
      "enum": [
        "pass",
        "fail"
      ],
      "type": "string"
    }
  },
  "required": [
    "report",
    "status"
  ],
  "type": "object"
}

Examples

Verify a runpack manifest and artifacts offline.

Input:

{
  "manifest_path": "manifest.json",
  "runpack_dir": "/var/lib/decision-gate/runpacks/run-0001"
}

Output:

{
  "report": {
    "checked_files": 12,
    "errors": [],
    "status": "pass"
  },
  "status": "pass"
}