Cairn Docs Claims Blog Packages

Claim ยท cairn 0.2.1

cairn^971 A secret is read from the environment or its file, and never shown

An assumption of cairn 0.2.1.

Id
cairn^971
Kind
assume
Reads as
assumed
Version
0.2.1

All of cairn 0.2.1's claims

What it says

A secret's value is the environment variable if set and not empty, else its line in the KEY=value file as Yap's Secrets.parseDotEnv reads it (comments, export, quotes, a later line wins); a missing one is failed notFound; the value appears in the request's header and in no reply, failure message or debug description.

Evidence

assumedStated, not proved. The proofs rely on it.
fuzzedNot shown yet: the trusted-base fuzzer's check effects.secret held. A CI step will publish it (#95).

Where it's defined

Declaration
Cairn.Fuzz.Trusted.Claims.hostSecret
Module
Cairn.Fuzz.Trusted.Claims
Source
lean/Cairn/Fuzz/Trusted/Claims.lean:125 at v0.2.1
Statement hash
-

Ledger

cairn^971 is active in this version's claims.lock. An id never moves or changes meaning.