ADR-013 Phase 2: enforcement + signed shelf + adopt (adversarial-review hardened)

shopdb/plugins/signing.py

@@ -23,9 +23,14 @@ from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
 PROVENANCE_NAME = 'PROVENANCE.json'
 PROVENANCE_SIG = 'PROVENANCE.sig'
 
-# Never packed, hashed, or counted as an unexpected artifact member.
+# Never packed or hashed (a signed artifact carries source, never bytecode).
 _EXCLUDE_DIRS = {'__pycache__', '.pytest_cache', '.mypy_cache'}
 _EXCLUDE_SUFFIXES = {'.pyc', '.pyo'}
+# Verification ignores only non-executable dev noise. It deliberately does NOT
+# ignore __pycache__/.pyc: a planted bytecode cache would otherwise run while
+# escaping the hash check (the set of verified bytes must not be smaller than
+# the set of executed bytes). So verify flags any bytecode as an extra file.
+_VERIFY_EXCLUDE_DIRS = {'.pytest_cache', '.mypy_cache', '.git'}
 _CHUNK = 65536