Cairn Docs Claims Blog Packages

Claim ยท cairn 0.5.2

cairn^975 An environment secret is read from the environment or its file, and never shown

An assumption of cairn 0.5.2.

Id
cairn^975
Kind
assume
Reads as
assumed
Version
0.5.2

All of cairn 0.5.2's claims

What it says

An environment secret's value is the environment variable if set and not empty, else its line in the KEY=value file as Yap's Secrets.parseDotEnv reads it (comments, export, quotes, a later line wins); a missing one is failed notFound; the value appears in the request's header and in no reply, failure message or debug description.

Evidence

assumedStated, not proved. The proofs rely on it.
fuzzedNot shown yet: the trusted-base fuzzer's check effects.secret held. A CI step will publish it (#95).

Where it's defined

Declaration
Cairn.Fuzz.Trusted.Claims.hostEnvSecret
Module
Cairn.Fuzz.Trusted.Claims
Source
lean/Cairn/Fuzz/Trusted/Claims.lean:140 at v0.5.2
Statement hash
-

Ledger

cairn^975 is active in this version's claims.lock. An id never moves or changes meaning.