Answer A-152: the toolchain digest is the sha256 of the program run

Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h
2026-11-12 09:41:28 +01:00
parent df569ad63a
commit 82c483fccc
1 changed files with 3 additions and 0 deletions
@@ -568,3 +568,6 @@ names the principle that settles it, and is cited as "design 47 G A-n".
  group member's build, with a `binds` file as go-package-registry's (`at`, `serves.port`), and read the blob by the
  store's own path `<at>:<port>/v2/<module>/<artifact>/blobs/<digest>`; they never write into it, so ADR 0614 §2
  holds, and their manifest tests assert the read.
+- **A-152** (§472, §492; principles 3 and 7) The toolchain's `digest` is the sha256 of the toolchain program the build
+  module runs (the `go` or `node` it finds), computed at its start and again when the toolchain's version changes; no
+  field is added to the provision.