Repository navigation
fix(evidence): actionable error when verify reads a corrupt bundle - #426
Merged
Merged
Conversation
Truncated, invalid JSON, and schema-broken evidence bundles now fail vg evidence verify with a stable operator error and a non-zero exit. The message names the failure and does not include bundle contents. Signed-off-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: vibgrate-team <vibgrate-team@users.noreply.github.com>
vg evidence verify exits 1 when the envelope or result.json is truncated, not JSON, or not a document this version can read. The message says what failed and how to restore the bundle. It does not print a stack or the file contents. A readable bundle still reports verified, unverified, or failed. Signed-off-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: vibgrate-team <vibgrate-team@users.noreply.github.com>
Signed-off-by: Cursor Agent <cursoragent@cursor.com> # Conflicts: # CHANGELOG.md Co-authored-by: vibgrate-team <vibgrate-team@users.noreply.github.com>
vibgrate-team
marked this pull request as ready for review
October 10, 2026 22:57
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
vg evidence verifyused toJSON.parsethe envelope and result directly, so a truncated file, invalid JSON, or a document that is not an evidence bundle surfaced a raw parser error.Verification now loads the bundle first. A truncated or invalid envelope or result, or a schema this version cannot read, fails with a stable error and exit code
1. The message names the envelope or the result and says to restore the bundle or re-create it withvg evidence exposure --bundle. It does not include file contents, parser excerpts, environment values, or a stack.A missing bundle is still "not found" (exit
3), and a readable bundle still reportsverified,unverifiedorfailed.Related issues
Closes #287
Checklist
pnpm testpassespnpm lintis cleanpnpm typecheckis cleanHow to verify
pnpm test pnpm lint pnpm typecheck