Skip to content

feat(contracts): migrate to hawk-core-contracts and enforce boundaries#15

Open
Patel230 wants to merge 6 commits into
mainfrom
feat/contracts-migration
Open

feat(contracts): migrate to hawk-core-contracts and enforce boundaries#15
Patel230 wants to merge 6 commits into
mainfrom
feat/contracts-migration

Conversation

@Patel230

Copy link
Copy Markdown
Contributor

Summary

  • Migrate severity and finding types from removed hawk/shared/types to hawk-core-contracts
  • Add contracts.go adapters for neutral verification report contracts
  • Pin hawk-core-contracts v0.1.0 and add check-ecosystem-boundaries.sh in CI

Test plan

  • bash scripts/check-ecosystem-boundaries.sh
  • go test ./...
  • Merge before hawk integration PR

Made with Cursor

Patel230 and others added 6 commits June 21, 2026 08:21
Move inspect off the hawk umbrella dependency and onto the shared
hawk-core-contracts module:

- severity.go re-exports hawk-core-contracts/types instead of hawk/shared/types
- add contracts.go adapters converting inspect findings/reports to and from the
  shared verification contracts (hawk-core-contracts/verify)
- go.mod: depend on hawk-core-contracts via local replace
- add scripts/check-ecosystem-boundaries.sh, wired into Makefile + CI
- document the one-way ecosystem boundary in README/AGENTS/docs
- ignore the local .gocache build directory

build, vet, tests, and the boundary guard all pass.
…lace

Match the ecosystem binding convention: depend on the published module version
and keep local-dev overrides in a gitignored go.work, not in committed files.

- go.mod: require hawk-core-contracts v0.1.0 (was v0.0.0), remove the
  `replace => ../hawk-core-contracts`
- stop tracking go.work and gitignore it (it held a now-stale `replace hawk`
  override; inspect no longer depends on hawk)
Now that hawk-core-contracts v0.1.0 is published, record its module checksums
so CI (which has no local go.work override) resolves it from the network.
Verified: GOWORK=off go build ./... passes.
…ontracts

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant