wickra-lib/wickra-shazam

No problems traced to this repository code in these checks.

Reviewed as expected for a test run: wrote only to its own open file handles.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• The CLI emits a JSON MatchReport for a history and spec.: Real input produced the expected result: "indexed":60

  Source: Raw MatchReport JSON (the same bytes every binding returns), top 5 matches:

  Input: golden/specs/price_euclid.json and golden/data/history/sym-01.csv

  Expected: JSON MatchReport with five matches and indexed count 60

  Command: /var<guest-path> run -p wickra-shazam -- --spec golden/specs/price_euclid.json --history golden/data/history/sym-01.csv --k 5 --format json

  Observed: …"indexed":60} Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.62s Running `target/debug/wickra-shazam --spec golden/specs/price_euclid.json --history golden/data/history/sym-01.csv --k 5 --format json`

Examples

• Run the documented JSON quickstart.: command completed successfully

  Source: README.md / Quickstart

  Input: golden history and price_euclid spec

  Expected: five-match JSON report

  Command: /var<guest-path> run -p wickra-shazam -- --spec golden/specs/price_euclid.json --history golden/data/history/sym-01.csv --k 5 --format json

  Observed: {"matches":[{"ts":1700226800,"similarity":1.0},{"ts":1700223200,"similarity":0.17274048},{"ts":1700126000,"similarity":0.10377789},{"ts":1700129600,"similarity":0.10171973},{"ts":1700122400,"similarity":0.09302239}],"indexed":60} Finished `dev` profile [unoptimized + debuginfo] target(s) in 0.61s Running `target/debug/wickra-shazam --spec golden/specs/price_euclid.json --history golden/data/history/sym-01.csv --k 5 --format json`

Local or hosted: local

Index historical OHLCV data and match the current fingerprint using the Rust CLI.

pwd && rg --files -g 'README*' -g 'pyproject.toml' -g 'package.json' -g 'requirements*' -g 'setup.py' -g 'AGENTS.md' | head -80 && git status --short && python3 --version && sed -n '1,240p' README.md
pwd; ls -la; python3 --version; find . -maxdepth 3 -type f | sort | head -100
sed -n '1,240p' README.md; cat Cargo.toml; cargo --version; rustc --version; ls -la .coldpass
command -v rustup || true; command -v cargo; ls -la /root/.cargo/bin 2>/dev/null; ls -la <host-path> 2>/dev/null; sed -n '1,220p' crates/shazam-cli/src/main.rs
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs -o /tmp/rustup-init.sh && sh /tmp/rustup-init.sh -y --profile minimal --default-toolchain 1.87.0
export PATH=/var<guest-path>; rustc --version; cargo run -p wickra-shazam -- --spec golden/specs/price_euclid.json --history golden/data/history/sym-01.csv --k 5 --format json
mkdir -p .coldpass; python3 - <<'PY'
import json
p='<guest-path>'
argv=['/var<guest-path>','run','-p','wickra-shazam','--','--spec','golden/specs/price_euclid.json','--history','golden/data/history/sym-01.csv','--k','5','--format','json']
result='{"matches":[{"ts":1700226800,"similarity":1.0},{"ts":1700223200,"similarity":0.17274048},{"ts":1700126000,"similarity":0.10377789},{"ts":1700129600,"similarity":0.10171973},{"ts":1700122400,"similarity":0.09302239}],"indexed":60}'
probe={'kind':'cli','argv':argv,'cwd':p,'expected_text':'"indexed":60'}
claim={'kind':'claim','claim':'The CLI emits a JSON MatchReport for a history and spec.','source':'Raw MatchReport JSON (the same bytes every binding returns), top 5 matches:','input':'golden/specs/price_euclid.json and golden/data/history/sym-01.csv','expected':'JSON MatchReport with five matches and indexed count 60','probe_kind':'cli','argv':argv,'expected_text':'"indexed":60','cwd':p}
example={'kind':'example','claim':'Run the documented JSON quickstart.','source':'README.md / Quickstart','input':'golden history and price_euclid spec','expected':'five-match JSON report','argv':argv,'cwd':p,'expected_text':'"indexed":60'}
for name,obj in [('probe.json',probe),('claims.json',[claim]),('examples.json',[example]),('cycles.json',{'detected':False,'checks':[],'reason':'Inspected the documented CLI entrypoint and README quickstart; no scheduler, recurring loop, or webhook trigger is described.'})]:
 open('.coldpass/'+name,'w').write(json.dumps(obj,indent=2)+'\n')
PY

<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
python3 - <<'PY'
import json
r={'outcome':'working','fault_owner':None,'operation':'Index historical OHLCV data and match the current fingerprint using the Rust CLI.','operation_scope':'README quickstart, requiring Rust 1.87+','steps':['Installed Rust 1.87.0 with rustup after the guest toolchain was <email>.','Built and ran the README JSON quickstart with the supplied price_euclid spec and sample history.','Validated and replayed probe, README claim, example, and cycle evidence successfully.'],'deviations':['Python 3.12.3 also satisfies the README Python 3.9+ binding requirement; Python was not needed for the Rust CLI operation.'],'stuck_step':None,'main_blocker':None,'plain_failure':None,'suggested_fix':None}
open('.coldpass/report.json','w').write(json.dumps(r,indent=2)+'\n')
PY
cat .coldpass/report.json; ls -la .coldpass