Skip to content

feat: emit verified macOS-native MLX CPU receipt #260

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
seonghobae merged 1 commit into from
Aug 26, 2026
Merged

feat: emit verified macOS-native MLX CPU receipt #260

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
173 changes: 172 additions & 1 deletion Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 2 additions & 0 deletions Cargo.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,6 +58,7 @@ members = [
"crates/topic_measurement",
"crates/psychometric_core",
"crates/orchestrator_live",
"crates/mlx_native_receipt",

@devin-ai-integration devin-ai-integration Bot Aug 26, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 New crate missing from CHANGELOG

The mlx_native_receipt crate is added to the workspace but has no CHANGELOG.md entry, though the Added section lists every other new crate and CONTRIBUTING.md requires the changelog be updated for each change.

Prompt for agents 
Add an entry to CHANGELOG.md under the appropriate Added section documenting the new mlx_native_receipt crate (macOS-native MLX CPU execution receipt probe), matching the style of the existing crate entries. CONTRIBUTING.md step 7 and the AGENTS.md release contract require CHANGELOG.md updates for changes, and every other new crate is listed there.
Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

]
default-members = [
"crates/evidence_core",
Expand Down Expand Up @@ -117,6 +118,7 @@ default-members = [
"crates/topic_measurement",
"crates/psychometric_core",
"crates/orchestrator_live",
"crates/mlx_native_receipt",
]

[workspace.package]
Expand Down
34 changes: 34 additions & 0 deletions crates/mlx_native_receipt/Cargo.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
[package]
name = "mlx_native_receipt"
description = "macOS-native MLX execution receipt probe for TEPP."
version.workspace = true
edition.workspace = true
rust-version.workspace = true
license.workspace = true
authors.workspace = true
repository.workspace = true
homepage.workspace = true
readme.workspace = true
keywords.workspace = true
categories.workspace = true
publish = false

[dependencies]
serde.workspace = true
serde_json.workspace = true
sha2.workspace = true

[target.'cfg(target_os = "macos")'.dependencies]
# Use the C contract directly because mlx-rs 0.25.3 unconditionally enables
# mlx-sys's default Metal feature even when its own default features are off.
mlx-sys = { version = "=0.2.0", default-features = false, features = ["accelerate"] }

[lints.rust]
# Unsafe is isolated to the audited opaque-handle C FFI function; callers and
# every mathematical operation remain safe Rust.
unsafe_code = "allow"
unsafe_op_in_unsafe_fn = "deny"

[lints.clippy]
all = "deny"
pedantic = "deny"
Comment on lines +26 to +34

@devin-ai-integration devin-ai-integration Bot Aug 26, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📝 Info: Crate opts out of all workspace lints, not just unsafe_code

Defining its own [lints.rust] table without workspace = true lets the crate set unsafe_code = allow (intended per ADR 0025), but it also drops every other inherited workspace lint such as warnings = deny. Only missing_docs is re-added, via #![deny(missing_docs)] in main.rs.

Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

Loading
Loading