Skip to content

Reference

Quick reference for exit codes, error codes, related documents, and the security model.

The CLI returns these exit codes. They are stable, part of the public API, and will not change in future versions:

CodeStatusMeaning
0OK_VERIFIEDPackage verified with valid signature
1OK_UNSIGNEDPackage valid but unsigned
2FAIL_INTEGRITYMissing file, size mismatch, or digest mismatch
3FAIL_SCHEMASchema validation failed
4FAIL_SIGNATURESignature verification failed
5FAIL_THRESHOLDApproval threshold not met
6FAIL_UNAUTHORIZEDActor not authorized

When verification fails, the structured JSON output includes a specific error code:

Error codeMeaning
MISSING_FILEReferenced file does not exist
SIZE_MISMATCHFile size differs from manifest
DIGEST_MISMATCHSHA-256 hash differs from manifest
SCHEMA_INVALIDJSON does not match schema
SIGNATURE_INVALIDEd25519 signature verification failed
ACTOR_NOT_AUTHORIZEDApprover or signer not in policy
THRESHOLD_NOT_METApproval count below required
SIGNATURE_QUORUM_NOT_METSignature quorum not satisfied
APPROVAL_QUORUM_NOT_METApproval quorum not satisfied
SIGNATURE_NOT_ALLOWEDKey not in allowlist (signature ignored)
PURPOSE_MISMATCHSignature purpose does not match requirement (ignored)
LEGACY_SIGNATURE_IGNOREDLegacy-format signature ignored in quorum mode

These artifacts are frozen and protected by CI:

ArtifactLocationGuarantee
JSON schemas/schemas/*.v0.1.jsonAdditive changes only
CLI verify --json outputcodeteam.cli.verify.schema.v0.1.jsonBackward compatible
Error codesErrorCode.csNo removals or renames
Severity mappingseverity-map.v0.1.jsonNew codes require mapping

The repository includes several normative and informative documents:

DocumentPurpose
CONTRACT.mdAuthoritative package semantics — the single source of truth for what packages, approvals, and signatures mean
VERIFICATION.mdNormative verification rules, phases, and pseudocode algorithm
EDITOR_INTEGRATION.mdEditor extension contract for VS Code and Visual Studio
sealing.mdSealing design (informative, not normative)
SECURITY.mdSecurity policy and vulnerability reporting

CodeTeam Suite is a local-first tool. Here is what it accesses and what it does not:

Data accessed:

  • Reads package manifests, approval files, and signature files for cryptographic verification (Ed25519 + SHA-256)
  • Writes approval and signature records to package directories
  • All operations are local and deterministic

Data NOT accessed:

  • No network requests (except optional XRPL anchoring)
  • No telemetry
  • No cloud services
  • No credential storage beyond local Ed25519 keys

Permissions:

  • File system read/write for package directories
  • No elevated permissions required

If you discover a security issue, email 64996768+mcp-tool-shop@users.noreply.github.com with a description, reproduction steps, and potential impact. Response timeline: acknowledgment within 48 hours, assessment within 7 days, fix within 30 days.

MIT — see LICENSE in the repository.