The trust-nothing package manager. A rederive package ships its CONTRACT (spec + held-out oracle), not trusted bytes — verify the shipped code against it, or re-derive it locally from the spec.

SIR verified-recompose build orchestrator — a mechanical CLI (install → stamp → grade → pack) driven by the sir-factory-runner agent. No API key, no claude -p. Targets SIR Schema v0.2.

Verified-recompose of [email protected]'s PURE helper core (the deprecated HTTP client). The SIR firewall carves the pure leaves out of the HTTP effect spine; this package verifies the leaves, the spine is declared for trace-oracle follow-up.

Re-derived [email protected] — zero-dependency core, behavior-locked to a held-out oracle. Ships its contract (SIR spec + oracle); verify or re-derive locally with the rdv CLI.

The rdv verdict core, re-derived as verified units. The trust-critical decision logic (eq / grade / quorum / hashOk) with adversarial held-out oracles — the verifier, in its own catalog. Verify it or re-derive it with rdv.

The core of Calva's REPL window