[package]
name = "sandbox-proof"
version.workspace = true
edition.workspace = true
license.workspace = true
repository.workspace = true
description = "Sandbox — the proof-matrix harness: prove the standard runs (conformance + a sealed run) on a target and emit a signed proof cell."

[[bin]]
name = "sandbox-proof"
path = "src/main.rs"

[dependencies]
sandbox-schema.workspace = true
sandbox-capability.workspace = true
sandbox-meter.workspace = true
sandbox-attest.workspace = true
sandbox-runtime.workspace = true
sandbox-exec-wasm.workspace = true
sandbox-exec-microvm.workspace = true
sandbox-tee.workspace = true
sandbox-conformance.workspace = true
ed25519-dalek.workspace = true
serde = { workspace = true }
serde_json.workspace = true
ureq.workspace = true
hex.workspace = true
blake3.workspace = true
thiserror.workspace = true

# macOS: the local engine is spawned suspended (posix_spawn), so its tree
# meter's start walk is read before it runs, and waited for without reaping
# (waitid WNOWAIT), so its exited record is read before it goes. The tests'
# oracle reads proc_pid_rusage into a raw buffer with it too.
[target.'cfg(target_os = "macos")'.dependencies]
libc = "0.2"