{"protocol":"clank-doc/1","frameworkVersion":"0.8.0","slug":"conformance","title":"Packaged-release conformance","description":"npm run conformance proves the complete Clank golden path using a clean temporary installation of the package produced by npm pack .","group":{"id":"security","title":"Security and resilience"},"url":"https://docs.clank.run/docs/conformance","source":"docs/conformance.md","headings":[],"tableOfContents":[],"markdown":"# Packaged-release conformance\n\n`npm run conformance` proves the complete Clank golden path using a clean temporary installation of the package produced by `npm pack`.\n\nThe runner does not import framework source from the repository. It:\n\n1. packs Clank and installs the tarball into a clean tool consumer;\n2. statically parses the packaged Todoist-style AI blueprint and generates an authenticated application using that installed CLI;\n3. installs the same tarball into the generated application and builds it;\n4. starts the packaged deployment platform;\n5. creates a browser account and completes the real CLI device-authorization flow;\n6. deploys the generated application through the packaged CLI;\n7. creates two independent authenticated sessions and proves live SSE synchronization;\n8. proves a separate account cannot read the first account's owned rows;\n9. deploys an immutable second migration and verifies the resulting SQLite history;\n10. forces a failed health activation and proves the prior application and data remain available;\n11. rolls back code and restores the pre-migration snapshot; and\n12. verifies both application rows and migration schema returned to the expected state.\n\nThe test uses loopback HTTP, temporary owner-only directories, isolated CLI credentials, a one-port application range, and no registry downloads beyond the local tarball.\n\n`npm run check` runs this suite after the build, zero-dependency check, coverage-enforced unit/integration tests, and documentation/declaration audit, then finishes with the security audit. A release is not acceptable if any stage fails.\n"}