Packet Certifier
Certify that an agent implementation packet changed only approved Git paths, stayed within file and line budgets, and preserved ignored runtime state.
Global Arguments
| Argument | Type | Description |
|---|---|---|
| allowedIgnoredPaths | array | |
| allowedIgnoredPathPrefixes | array | |
| excludedIgnoredPathPrefixes | array | |
| mayVaryIgnoredPathPrefixes | array |
| Argument | Type | Description |
|---|---|---|
| cwd | string | |
| baseRef | string | |
| allowedBinaryFiles | array |
| Argument | Type | Description |
|---|---|---|
| cwd | string | |
| allowedPaths | array | |
| maxChangedFiles | number | |
| maxChangedLines | number | |
| checks | array |
Resources
Add may-vary ignored-path category so volatile build byproducts (logs, caches) can change without failing certification, while allow-listed paths stay content-pinned for secrets. Fixes certification failing on the agent's own mandated test-log writes.
Raise candidate byte ceilings to 128/256 MiB, extend the Git command timeout to 60s, and disable the commit-graph cache for CompanyCam-scale repositories
Certify large repositories by comparing only candidate paths, and compare tracked symlinks instead of refusing them. Hash encoding moves to packet-certifier-v7, so a snapshot captured under v6 must be re-taken before certifying.
Make excludedIgnoredPathPrefixes work for trees Git will not enumerate: prune nested repositories in code, keep them off the packet path limit, and reject a prefix spelling that would silently exclude nothing.
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License declared1/1earned
- Verified public repository2/2earned