Safe macro scripting: preservation → interpreter → capability broker → signatures → network

.claude/settings.local.json

@@ -103,7 +103,9 @@
       "mcp__code-review-graph__list_graph_stats_tool",
       "mcp__Claude_Code_Remote__send_later",
       "mcp__code-review-graph__refactor_tool",
-      "mcp__code-review-graph__build_or_update_graph_tool"
+      "mcp__code-review-graph__build_or_update_graph_tool",
+      "Bash(sed -n '/\\\\[features\\\\]/,/\\\\[/p' /root/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rcgen-0.13.2/Cargo.toml)",
+      "Read(//root/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/rcgen-0.13.2/src/**)"
     ]
   },
   "enableAllProjectMcpServers": true,

.github/workflows/rust.yml

@@ -17,8 +17,15 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - name: Install toolchain (rustfmt + clippy)
-      uses: dtolnay/rust-toolchain@stable
+      # Pinned, NOT `@stable`. Clippy widens lints between releases, so a
+      # floating CI toolchain can fail on lints a developer's older local
+      # toolchain cannot report — a drift only discoverable by pushing.
+      # Keep this version in step with rust-toolchain.toml, which is what
+      # cargo actually honours; naming it here just avoids installing a
+      # second, unused toolchain.
+      uses: dtolnay/rust-toolchain@master
       with:
+        toolchain: "1.97.1"
         components: rustfmt, clippy
     - uses: Swatinem/rust-cache@v2
     - name: License-header gate (per-crate SPDX on line 1)
@@ -43,6 +50,10 @@ jobs:
     - name: Dependency-direction gate (acyclic, downhill-only)
       # Spec 01 audit A-13 / ADR-0009. Fails on any uphill internal edge.
       run: python3 scripts/check-dependency-direction.py
+    - name: Macro-interpreter purity gate (no I/O deps; not server-linked)
+      # Macro spec §4.3/§10/§12: loki-basic links only its tiny allow-list and
+      # no server/headless crate links the interpreter.
+      run: python3 scripts/check-loki-basic-pure.py
     - name: Viewport-dimension guard (no assumed screen sizes)
       # Spec 01 audit A-1. No bare 1280-class literals in editor input/viewport paths.
       run: python3 scripts/check-no-hardcoded-viewport-dims.py
@@ -59,7 +70,10 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - name: Install toolchain
-      uses: dtolnay/rust-toolchain@stable
+      # Pinned — see the lint job and rust-toolchain.toml.
+      uses: dtolnay/rust-toolchain@master
+      with:
+        toolchain: "1.97.1"
     - uses: Swatinem/rust-cache@v2
     - name: Install conformance tools (xmllint, pdftoppm)
       # Spec 02 gates, all running as ordinary cargo tests in this job:

CLAUDE.md

@@ -110,12 +110,31 @@ These conventions apply to all crates in the workspace.
 - **Checkpoints:** Run `cargo check --workspace` after each logical unit of
   work. Do not accumulate failures across steps.
 - **Documentation Sync:** Any change to layout, rendering, or import/export properties must update the living status registry in [docs/fidelity-status.md](docs/fidelity-status.md).
-- **Final pass:** `cargo fmt --all` and `cargo clippy --workspace -- -D warnings`
-  must both pass before any PR or commit is considered complete.
+- **Final pass:** `cargo fmt --all --check` and the **exact CI clippy command**
+  (below) must both pass before any PR or commit is considered complete.
+
+### Toolchain is pinned
+
+[`rust-toolchain.toml`](rust-toolchain.toml) pins the workspace toolchain, and
+CI installs that same version. Do **not** work around it by switching your local
+toolchain: clippy widens lints between releases, so a floating toolchain lets CI
+fail on lints a local run cannot report — a drift only discoverable by pushing.
+Upgrade the pin deliberately (see the file's header for the procedure).
 
 ### Clippy compliance
 
-The entire workspace must pass `cargo clippy --workspace -- -D warnings`.
+The whole workspace must pass **the command CI runs** — note `--all-features`
+and the two extra deny flags, which a plain `cargo clippy --workspace` does
+*not* apply. Running anything narrower is how `.unwrap()`/`.expect()` in library
+code reaches CI:
+
+```
+cargo clippy --workspace --all-features -- -D warnings \
+    -D clippy::unwrap_used -D clippy::expect_used
+```
+
+`clippy.toml` exempts `#[cfg(test)]` code from the panic-accessor lints, so the
+gate targets shipped code only.
 
 For pre-existing code in `loki-layout`, `loki-odf`, and `loki-ooxml` that
 required structural changes beyond the scope of the cleanup pass, targeted