External-process workspace integrity persistence — external_process_workspace

Creates, validates, writes, and reads deterministic provenance snapshots for isolated external-process workspaces. Records protect command linkage, workspace identity, retention state, staged-input manifests, final contents fingerprints, and ordered lifecycle events using versioned runtime integrity envelopes and whole-file SHA-256 sidecars.

Usage

new_external_process_workspace(result)

validate_external_process_workspace(workspace)

write_external_process_workspace(workspace, path, overwrite = FALSE)

read_external_process_workspace(path)

Arguments

result: A workspace-backed PopgenVCFExternalProcessResult.
workspace: A canonical PopgenVCFExternalProcessWorkspace record or, when writing, a workspace-backed process result.
path: Destination or source .rds path.
overwrite: Whether existing record and sidecar files may be replaced.

Value

new_external_process_workspace() and read_external_process_workspace() return a validated PopgenVCFExternalProcessWorkspace. Validation returns its input invisibly, and writing returns the normalized destination path invisibly.

Details

The persistence record protects workspace provenance, not the potentially large workspace directory itself. A retained directory is represented by its recorded path and final canonical contents fingerprint. Readers fail closed on malformed sidecars, file corruption, unsupported schemas, envelope mutation, invalid manifests, inconsistent retention metadata, and malformed lifecycle histories.