Zachery Aaron Shores-Chmielewski
1f8a67231c
Replaces the generic SimNode/gossip/dashboard framework with a virtual-time discrete-event engine (priority queue ordered by time/node/fiber/seq), a TOML spec parser, bundle writer, replay, divergence detector, lint, and postproc, plus the parity-bar test harness with fixtures and xtask parity-lock tooling. Rewrites transport identity/crypto and adds the SPEC/TESTING_SPEC/OBSERVABILITY/NORTH_STAR docs. Signed-off-by: Zachery Aaron Shores-Chmielewski <zacheryasc@gmail.com>
134 lines
4 KiB
TOML
134 lines
4 KiB
TOML
# Banned-API set enforced by the lint-deterministic scanner.
|
|
#
|
|
# Closed list per TESTING_SPEC §4.1. Items can be added but not
|
|
# removed without a separate `parity-bar: update lock` commit
|
|
# (TESTING_SPEC §12.1).
|
|
#
|
|
# `pattern` is a substring match against source text. Comments and
|
|
# string literals are *not* stripped first — false positives in
|
|
# such cases can be silenced inline with the marker:
|
|
#
|
|
# // lint-deterministic: allow <pattern>
|
|
#
|
|
# placed on the same line. The marker is checked verbatim by the
|
|
# scanner, so it's auditable in `git grep`.
|
|
|
|
[[banned]]
|
|
pattern = "std::time::SystemTime"
|
|
replacement = "Facade::clock().now() (runtime-facade::Clock)"
|
|
|
|
[[banned]]
|
|
pattern = "std::time::Instant"
|
|
replacement = "Facade::clock().now() (runtime-facade::Clock)"
|
|
|
|
[[banned]]
|
|
pattern = "std::thread::sleep"
|
|
replacement = "Facade::clock().sleep_until(...) (runtime-facade::Clock)"
|
|
|
|
[[banned]]
|
|
pattern = "std::thread::spawn"
|
|
replacement = "Facade::spawn(...) (runtime-facade::Spawn)"
|
|
|
|
[[banned]]
|
|
pattern = "tokio::spawn"
|
|
replacement = "Facade::spawn(...) (runtime-facade::Spawn)"
|
|
|
|
[[banned]]
|
|
pattern = "tokio::time::sleep"
|
|
replacement = "Facade::clock().sleep_until(...) (runtime-facade::Clock)"
|
|
|
|
[[banned]]
|
|
pattern = "tokio::time::Instant"
|
|
replacement = "Facade::clock().now() (runtime-facade::Clock)"
|
|
|
|
[[banned]]
|
|
pattern = "std::collections::HashMap"
|
|
replacement = "indexmap::IndexMap or std::collections::BTreeMap"
|
|
|
|
[[banned]]
|
|
pattern = "std::collections::HashSet"
|
|
replacement = "indexmap::IndexSet or std::collections::BTreeSet"
|
|
|
|
[[banned]]
|
|
pattern = "rand::thread_rng"
|
|
replacement = "Facade::rng(stream_label) (runtime-facade::Rng)"
|
|
|
|
[[banned]]
|
|
pattern = "getrandom::getrandom"
|
|
replacement = "Facade::rng(stream_label) (runtime-facade::Rng)"
|
|
|
|
[[banned]]
|
|
pattern = "std::env::var"
|
|
replacement = "Facade::env(name) (runtime-facade::Env)"
|
|
|
|
[[banned]]
|
|
pattern = "std::env::vars"
|
|
replacement = "Facade::env_iter() (runtime-facade::Env)"
|
|
|
|
[[banned]]
|
|
pattern = "std::fs"
|
|
replacement = "Facade::fs() (runtime-facade::Fs, sandboxed per node)"
|
|
|
|
[[banned]]
|
|
pattern = "std::net"
|
|
replacement = "Facade::udp() / Facade::tcp() (runtime-facade::Udp/Tcp)"
|
|
|
|
[[banned]]
|
|
pattern = "std::process::Command"
|
|
replacement = "Facade::process(...) (errors in sim)"
|
|
|
|
# ── Scope ─────────────────────────────────────────────────────────
|
|
# Paths the scanner inspects. Allowlist paths are exempt — they
|
|
# *are* the facade implementations, so they have to call the real
|
|
# APIs.
|
|
|
|
[scope]
|
|
# Peer-code paths the scanner audits. This is the closed list of
|
|
# crates that have been migrated onto runtime-facade. Stage 6
|
|
# widens the list to include `crates/distribution` and friends.
|
|
#
|
|
# xtask, examples/, top-level swactor (src/), and the binding
|
|
# crates are intentionally absent: xtask is build tooling (not
|
|
# peer code), and the rest are out of facade scope until Stage 6.
|
|
include = [
|
|
"crates/simulation/src",
|
|
]
|
|
# Allowlisted paths inside `include` are skipped because they are
|
|
# the facade impls themselves (which have to call the real std/tokio
|
|
# surface to do their job), the detector probes (which name the std
|
|
# surfaces by design), or the scanner itself (which lists the banned
|
|
# strings as patterns).
|
|
allowlist = [
|
|
"crates/simulation/src/runtime",
|
|
"crates/simulation/src/facade/sim",
|
|
"crates/simulation/src/detector.rs",
|
|
"crates/simulation/src/lint.rs",
|
|
"crates/simulation/src/bin",
|
|
]
|
|
|
|
# ── Parity-test hygiene (TESTING_SPEC §12.2/§12.3/§12.4) ──────────
|
|
# Applied only under `--check-parity-bar`.
|
|
|
|
[parity_bar]
|
|
root = "crates/simulation/tests/parity-bar"
|
|
|
|
# §12.2 — no probabilistic primitives.
|
|
banned_substrings = [
|
|
"proptest::",
|
|
"quickcheck::",
|
|
"rand::random",
|
|
"rand::thread_rng",
|
|
]
|
|
banned_fn_prefixes = ["fuzz_"]
|
|
|
|
# §12.3 — no conditional skips.
|
|
banned_attrs = [
|
|
"#[ignore]",
|
|
"#[cfg(not(",
|
|
"#[cfg_attr(",
|
|
]
|
|
|
|
# Env-driven skip pattern (substring match — heuristic).
|
|
banned_skip_patterns = [
|
|
"std::env::var",
|
|
]
|