135-the-toolchain-floor-and-dependencies-are-checked
The toolchain floor and the dependencies are checked
The workspace declares `rust-version = "1.85"` and nothing ever built it there; the code uses let-chains, stable only since 1.88, so the declaration was false. Dependencies were never checked for advisories, licenses or sources, and the dev tree carried two open RustSec advisories through `jsonschema`'s HTTP resolver, which no test uses. CI now builds and tests at the declared `rust-version`, read from `Cargo.toml`, and runs `cargo deny check` against a committed `deny.toml`; both are required through `ci-gate`. `jsonschema` drops its default features, which removes the whole HTTP and TLS dev tree and both advisories, and the declared `rust-version` is corrected to the measured floor. `CONTRIBUTING.md` states the loop.
Read the full pinned specification ↗Relationships
Claimed units
- extends
{ "nature": "additive", "spec": "094-one-gate-and-the-boundaries-it-holds", "unit": { "kind": "file", "path": ".github/workflows/ci.yml" } } - extends
{ "nature": "corrective", "spec": "001-compile-registry", "unit": { "kind": "file", "path": "crates/spec-spine-core/Cargo.toml" } } - extends
{ "nature": "corrective", "spec": "105-governed-scope-is-enabled-here", "unit": { "kind": "file", "path": "CLAUDE.md" } } - extends
{ "nature": "corrective", "spec": "005-coupling-gate", "unit": { "kind": "file", "path": "crates/spec-spine-cli/src/cmd_couple.rs" } } - extends
{ "nature": "corrective", "spec": "021-ledger-seal", "unit": { "kind": "file", "path": "crates/spec-spine-cli/src/seal.rs" } } - extends
{ "nature": "corrective", "spec": "001-compile-registry", "unit": { "kind": "file", "path": "crates/spec-spine-core/src/compile.rs" } } - extends
{ "nature": "corrective", "spec": "005-coupling-gate", "unit": { "kind": "file", "path": "crates/spec-spine-core/src/couple.rs" } } - extends
{ "nature": "corrective", "spec": "004-codebase-index", "unit": { "kind": "file", "path": "crates/spec-spine-core/src/index.rs" } } - extends
{ "nature": "corrective", "spec": "003-conformance-lint", "unit": { "kind": "file", "path": "crates/spec-spine-core/src/lint.rs" } } - extends
{ "nature": "corrective", "spec": "004-codebase-index", "unit": { "kind": "file", "path": "crates/spec-spine-core/src/manifest.rs" } } - extends
{ "nature": "corrective", "spec": "004-codebase-index", "unit": { "kind": "file", "path": "crates/spec-spine-core/src/sections.rs" } } - extends
{ "nature": "corrective", "spec": "004-codebase-index", "unit": { "kind": "file", "path": "crates/spec-spine-core/src/symbols.rs" } } - extends
{ "nature": "corrective", "spec": "094-one-gate-and-the-boundaries-it-holds", "unit": { "kind": "file", "path": "crates/spec-spine-core/tests/gate.rs" } } - extends
{ "nature": "corrective", "spec": "067-a-short-id-names-the-same-spec-at-every-verb", "unit": { "kind": "file", "path": "crates/spec-spine-cli/tests/spec_id.rs" } }
Source headings
- 135: The toolchain floor and the dependencies are checked
- 1. Purpose
- 1.1 The declared floor was false
- 1.2 Dependencies were never checked
- 2. Territory
- 3. Behavior
- 3.1 The declared floor is built and tested
- 3.2 The dependencies are checked
- 3.3 Contributors read the loop
- 4. Out of scope
- 5. Resolved decisions
- Verification
Frozen anchors
No frozen anchors declared.