# radroots_sdk

This standalone public repository owns Radroots SDK generated package outputs,
package/export contracts, provenance, and the exact source lock that selects
their canonical public producer revision.

The Rust workspace contains only the unpublished source-lock verification
capsule. Generated TypeScript, Wasm, Swift, and Kotlin surfaces are produced
through `tools/radroots_sdk_artifact.mjs` from the exact
`radrootslabs/lib` revision recorded in `radroots.lib.source-lock.v1.toml`.

Use `pnpm run supply-chain:check` for locked dependency, source, and license
validation, `pnpm run boundaries:check` for forbidden-surface, secret, API
baseline, and exact generated-inventory validation, and `pnpm run
contracts:check` for standalone contract validation. Run `pnpm run check` with
an exact `RADROOTS_LIB_SOURCE_ROOT` for the complete producer-backed generated
freshness lane. Verification is non-mutating; `pnpm run generate` is the
explicit write command. Generated package license bytes remain bound to the
selected Lib producer revision, while repository-root licenses remain owned by
this SDK repository. See `AGENTS.md` and `CONTRIBUTING.md` for repository rules
and command requirements.

## Copyright

Except as otherwise noted, all files in the `sdk` distribution are

    Copyright (c) 2026 Tyson Lupul

## License

This repository is licensed under either MIT or Apache-2.0, at your option.
See LICENSE-MIT and LICENSE-APACHE.