The committed catalog-currency digest registry

Reads and fully validates the provenance sidecar that makes msuiter's pinned COSMIC catalog snapshot mechanically verifiable: the canonical official-site URLs, the SHA-256 digests of the measured release and availability source documents, the pinned/target version labels, the BSD-2 mirror provenance and the refdb cross-reference pointers.

Usage

ms_catalog_registry(path = NULL)

Arguments

path

NULL (default; the bundled `inst/catalog-currency/catalog_registry.rds`) or a single path to an alternative sidecar (review candidates, test fixtures).

Value

A named list: the validated registry (schema_version, kind, pinned_release, mirror provenance, refdb pointers, the official documents/releases/structure block, and the UNMEASURED matrix-bytes record).

Details

**Governance (fail-closed, the refdb loader pattern).** The sidecar's `schema_version` gates the read (a newer schema is refused, never read best-effort), every digests/URL/label field is validated against its documented shape, and the login-gated matrix-bytes leg must be recorded `UNMEASURED` – a fabricated digests there is a hard stop.

See also

[ms_catalog_currency()] for the verdict, [ms_refdb_manifest()] for the shipped-bytes governance it cross-checks.