baseline_verify
Verify a rebuild against a pinned baseline by re-resolving items and checking revisions and content fingerprints. Flags drifted or missing inputs to block non-reproducible builds.
Instructions
Verify a rebuild against a pinned baseline (issue #142, C3) — the reproducible- rebuild gate. Re-resolves every pinned item from the current registry + artifacts and checks it still matches the pinned rev AND content fingerprint; a drifted input (changed bytes, a bumped rev, a vanished item) is caught, never silently accepted.
baseline: path to the baseline sidecar. registry: path to the current items.json sidecar. base_dir: artifact root for fingerprinting (defaults to the registry's directory).
Returns {ok, label, drifted (item/field/expected/actual), missing} — ok is True iff the rebuild reproduces the baseline exactly.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| base_dir | No | ||
| baseline | Yes | ||
| registry | Yes |