Package trust
Milestone 5 gates the public tezz tool, launchers, SemVer package pins, lock/registry parity, package checksums, and generated package inventory docs.
powershell -ExecutionPolicy Bypass -File .\tests\conformance\run-package-trust.ps1 -Tezzc .\TezzNative-language\build\tezzc.exebash tests/conformance/run-package-trust.sh ./TezzNative-language/bin/tezzc-linux-x64PACKAGE_TRUST_SUMMARY passed=12 failed=0| Command | Contract |
|---|---|
tezz init | Creates project metadata, cache directories, and template files with SemVer dependency pins. |
tezz add | Installs a package, verifies the package checksum, updates tezz.mod, and updates tezz.lock. |
tezz remove | Removes a dependency and rewrites tezz.mod plus tezz.lock deterministically. |
tezz update | Runs explicit SDK update modes: check, install, reinstall, or uninstall. |
tezz lock | Regenerates tezz.lock from tezz.mod and local first-party package sources. |
tezz publish | Regenerates lock and registry metadata without hidden network side effects. |
tezz test | Keeps the conformance, stdlib, tooling, runtime, and native lanes reachable from the tool. |
tezz build --release | Builds with release defaults and refreshes dependency locks when project metadata exists. |
tezz.mod declares lowercase package names, SemVer package pins, registry URL, and module root.tezz.lock stores sorted name@version CHECKSUM URL rows with payload metadata.registry.tnx stores sorted name@version URL CHECKSUM rows with matching payload metadata.