invariant-check

name	invariant-check
description	Audit Rust source code against Palimpsest's Six Laws. Use when reviewing code changes, before commits, or when asked to verify invariant compliance across the codebase.
version	0.1.0
user-invocable	true
allowed-tools	Grep Read Glob Bash(cargo *)
argument-hint	[crate-name or file path]

Invariant Compliance Audit

Scan the specified crate (or the entire workspace if no argument given) for violations of the Six Laws.

Target

If $ARGUMENTS is provided, scope to that crate or file. Otherwise scan all crates.

Checklist

For each source file, check:

Law 1 — Determinism

• No use rand or rand:: imports (only seeded PRNG via CrawlSeed allowed)
• No Instant::now() or SystemTime::now() in non-test code
• No HashMap iteration where ordering is observable
• No thread::spawn — all concurrency via tokio
• No global mutable state (static mut, lazy_static with mutation)

Law 2 — Idempotence

• Functions that produce artifacts are pure given the same ExecutionEnvelope
• No side effects in hash computation paths

Law 3 — Content Addressability

• All artifact outputs go through ContentHash::of()
• No artifact is stored without a hash

Law 4 — Temporal Integrity

• Every capture includes both wall and logical timestamps
• CaptureInstant used (not raw DateTime)

Law 5 — Replay Fidelity

• HTTP exchanges capture both request and response
• Browser captures include DOM snapshot and resource graph

Law 6 — Observability as Proof

• tracing spans on all public functions
• Errors use PalimpsestError taxonomy, not string errors

Output

Report findings as a table:

File	Law	Violation	Severity	Line

Severity: critical (blocks merge), warning (should fix), info (style preference).

After the table, summarize: total violations by severity, and whether the crate is merge-ready.