Add `stellar contract verify` command#2586

Draft

fnando wants to merge 32 commits into

contract-build-verifiablefrom

contract-verify

Commits on Jul 9, 2026

Sort metadata entries added during build.
fnando
committed
Scaffold stellar contract verify with metadata extraction.
fnando
committed
Add trust gates to stellar contract verify.
fnando
committed
Materialize source for stellar contract verify.
fnando
committed
Rebuild and byte-compare in stellar contract verify.
fnando
committed
Use direct --docker-host field on contract verify.
fnando
committed
Use question and warn emojis on trust prompt.
fnando
committed
Respect --verbose and --quiet on contract verify.
fnando
committed
Force trust prompts visible even under --quiet.
fnando
committed
Capitalize Verified result line.
fnando
committed
Capitalize info, warn, and check messages on contract verify.
fnando
committed
Expand github:user/repo source_repo before git clone.
fnando
committed
Validate retrieval channel before trust prompts.
fnando
committed
Anchor verify rebuilt-wasm search at manifest-path parent.
fnando
committed
Add stellar contract verify integration tests.
fnando
committed
Add tarball-sha256 + local --tarball-url verify test.
fnando
committed
Move verify integration tests into integration tier.
fnando
committed
Restrict permissions on materialized verify source.
fnando
committed
Share build logic and fix contract verify rebuild.
fnando
committed
Add --wasm-hash to stellar contract verify.
fnando
committed
Stop requiring source hash when setting source URI.
fnando
committed
Skip --locked when verifying against older images.
fnando
committed
Find rebuilt contract in workspace target folders.
fnando
committed
Strip shell quotes from build options when rebuilding.
fnando
committed
Add --keep to save build files for debugging.
fnando
committed
Show the source file actually used when overriding.
fnando
committed
Reject unknown source formats.
fnando
committed
Support zip files as verifiable build sources.
fnando
committed
Reject duplicate build metadata when verifying.
fnando
committed
Replay recorded metadata in order when verifying.
fnando
committed
Skip source metadata when verifying a contract.
fnando
committed
Fall back to the last metadata block when verifying.
fnando
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add `stellar contract verify` command#2586

Add `stellar contract verify` command#2586
fnando wants to merge 32 commits into
contract-build-verifiablefrom
contract-verify

Commits on Jul 9, 2026

Sort metadata entries added during build.

Scaffold stellar contract verify with metadata extraction.

Add trust gates to stellar contract verify.

Materialize source for stellar contract verify.

Rebuild and byte-compare in stellar contract verify.

Use direct --docker-host field on contract verify.

Use question and warn emojis on trust prompt.

Respect --verbose and --quiet on contract verify.

Force trust prompts visible even under --quiet.

Capitalize Verified result line.

Capitalize info, warn, and check messages on contract verify.

Expand github:user/repo source_repo before git clone.

Validate retrieval channel before trust prompts.

Anchor verify rebuilt-wasm search at manifest-path parent.

Add stellar contract verify integration tests.

Add tarball-sha256 + local --tarball-url verify test.

Move verify integration tests into integration tier.

Restrict permissions on materialized verify source.

Share build logic and fix contract verify rebuild.

Add --wasm-hash to stellar contract verify.

Stop requiring source hash when setting source URI.

Skip --locked when verifying against older images.

Find rebuilt contract in workspace target folders.

Strip shell quotes from build options when rebuilding.

Add --keep to save build files for debugging.

Show the source file actually used when overriding.

Reject unknown source formats.

Support zip files as verifiable build sources.

Reject duplicate build metadata when verifying.

Replay recorded metadata in order when verifying.

Skip source metadata when verifying a contract.

Fall back to the last metadata block when verifying.