Add `stellar contract verify` command - #2586

Closed

fnando wants to merge 58 commits into

contract-build-verifiablefrom

contract-verify

Commits on Jul 16, 2026

Add --verifiable flag to stellar contract build.
fnando
committed
e0963f2
Record every build-affecting flag as bldopt.
fnando
committed
b04676d
Remove duplicate 'contract build' in container error hint.
fnando
committed
1a118d1
Probe container cli version for --optimize syntax.
fnando
committed
196405d
Add SEP-58 source-id flags to --verifiable.
fnando
committed
c81c6d5
Move --locked info banner after validation.
fnando
committed
e000d84
Group --docker-host under Verifiable on contract build.
fnando
committed
5f59fb8
Plumb verbose flag through run_in_container.
fnando
committed
17c2fc8
Capitalize info and warn messages on verifiable build.
fnando
committed
9c3b31f
Rewrite docker pull status lines for clarity.
fnando
committed
c20a1d5
Anchor verifiable build bind-mount to git root or cwd.
fnando
committed
4d7fcd6
Pull bldimg when --image is set.
fnando
committed
d5a7209
Avoid duplicate Image prefix in pull status.
fnando
committed
38d09ee
Factor enforce_hardened_tree out of fix_config_permissions.
fnando
committed
ae73bcc
Generate source archive for verifiable builds.
fnando
committed
7014661
Record each contract's package in verifiable builds.
fnando
committed
5653489
Document reproducible source archive guarantees.
fnando
committed
4518c1a
Add stellar contract archive command.
fnando
committed
36552c9
Add --env to set build environment variables.
fnando
committed
9892d6e
Pin the rust toolchain in verifiable builds.
fnando
committed
3af186c
Build source archives from the working directory.
fnando
committed
bf7cf3a
Skip --locked on build images that lack it.
fnando
committed
1833606
Run verifiable builds through the docker CLI.
fnando
committed
ef4993c

Commits on Jul 17, 2026

Support other container engines in verifiable builds.
fnando
committed
b556382
Stop the build container when the build is interrupted.
fnando
committed
6018142
Scaffold stellar contract verify with metadata extraction.
fnando
committed
e182c7e
Add trust gates to stellar contract verify.
fnando
committed
2df7217
Materialize source for stellar contract verify.
fnando
committed
8ad2ff8
Rebuild and byte-compare in stellar contract verify.
fnando
committed
5164cf2
Use direct --docker-host field on contract verify.
fnando
committed
63d0d33
Use question and warn emojis on trust prompt.
fnando
committed
cb21dc9
Respect --verbose and --quiet on contract verify.
fnando
committed
ee11961
Force trust prompts visible even under --quiet.
fnando
committed
c0fd99e
Capitalize Verified result line.
fnando
committed
525724a
Capitalize info, warn, and check messages on contract verify.
fnando
committed
519f4aa
Expand github:user/repo source_repo before git clone.
fnando
committed
4894a02
Validate retrieval channel before trust prompts.
fnando
committed
3f012ee
Anchor verify rebuilt-wasm search at manifest-path parent.
fnando
committed
f8e3960
Add stellar contract verify integration tests.
fnando
committed
df0ad61
Add tarball-sha256 + local --tarball-url verify test.
fnando
committed
872e1c4
Move verify integration tests into integration tier.
fnando
committed
1d3902e
Restrict permissions on materialized verify source.
fnando
committed
4e21de4
Share build logic and fix contract verify rebuild.
fnando
committed
de2fc15
Add --wasm-hash to stellar contract verify.
fnando
committed
eb6ddd0
Stop requiring source hash when setting source URI.
fnando
committed
5ffd7ac
Skip --locked when verifying against older images.
fnando
committed
54291d5
Find rebuilt contract in workspace target folders.
fnando
committed
1c8d8f7
Strip shell quotes from build options when rebuilding.
fnando
committed
8a11c08
Add --keep to save build files for debugging.
fnando
committed
557918a
Show the source file actually used when overriding.
fnando
committed
4d82b0a
Reject unknown source formats.
fnando
committed
a65557a
Support zip files as verifiable build sources.
fnando
committed
0c23e77
Reject duplicate build metadata when verifying.
fnando
committed
d702bc0
Replay recorded metadata in order when verifying.
fnando
committed
d72a039
Skip source metadata when verifying a contract.
fnando
committed
e71431f
Fall back to the last metadata block when verifying.
fnando
committed
da0b601
Run contract verify through the docker CLI.
fnando
committed
7027bd9
Support other container engines in contract verify.
fnando
committed
3f94258