crates/bindrift-fixtures/Cargo.toml
# RED-WHEN-BROKEN fixture for Mimir.BinaryDrift.
#
# A crate whose `build.rs` INJECTS a function (reaching `std::process::Command`)
# into `$OUT_DIR` — codegen that never appears in the git diff, exactly the
# malicious-build.rs / compromised-toolchain threat BinaryDrift exists to catch.
# The integration test (`tests/drift_proof.rs`) compiles the `bindrift_probe` bin,
# DWARF-diffs it against the syn AST scan of THIS crate's source, and asserts:
# 1. the injected symbol IS flagged, and
# 2. every legit binary-only delta (monomorphisation, drop glue, derive impls,
# closures) is NOT flagged — zero false positives.
#
# `nornir` (the fold + the syn scanner) and `nornir-introspect` (the DWARF reader)
# are DEV-dependencies: they are needed only by the proof test, so the `probe`
# binary the test analyses stays a small, plain-Rust artifact. The dependency
# direction is fixture → nornir, never the reverse — no cycle, no law touched.
[package]
name = "bindrift-fixtures"
version = "0.0.0"
edition = "2024"
publish = false
license = "MIT OR Apache-2.0"
[lib]
name = "bindrift_fixtures"
path = "src/lib.rs"
[[bin]]
name = "bindrift_probe"
path = "src/bin/bindrift_probe.rs"
[features]
# Mirror nornir's functional-status passthrough so the proof emits testmatrix rows.
testmatrix = ["nornir-testmatrix/testmatrix"]
[dependencies]
# Lean leaf, present only so the `testmatrix` feature can gate the status emit.
nornir-testmatrix = { version = "0.2.4", path = "../../../edda/crates/nornir-testmatrix" }