Hermetic Build Audit - hermetic-build-audit.skillsafe.ai

This app's agent prompt is a derivative work of one agent skill. It paraphrases and adapts its guidance;
it does not reproduce the skill or its reference files verbatim.

1. bazel-build-optimization
   Source:  github.com/wshobson/agents
   Path:    plugins/developer-essentials/skills/bazel-build-optimization/SKILL.md (and references/details.md)
   Author:  Seth Hobson (wshobson)
   Licence: MIT License
   Modifications: the skill's best practices (pin dependencies for reproducible builds, use fine-grained
   targets for better caching, enable remote caching to share build artifacts, use visibility to enforce
   architecture, one BUILD file per directory, never glob deps, never commit bazel-* directories, do not
   ignore build warnings) and its .bazelrc, WORKSPACE, BUILD and remote-execution templates were restated
   as deterministic browser checks (bazelkit.js) and as the audit and fix lanes of this app's prompt, with
   what keeps a shared cache and the sandbox honest (a strict action environment, CI-only cache writes,
   stamping and repeated tests in named configs, no network or clock inside actions, Bzlmod over
   WORKSPACE). The exact before/after edit contract, the re-check of every edit and returned file, the
   target/repository/config preservation check and the changes list tied to the page's flags are additions
   of this app.

The browser-side checks (bazelkit.js), the reconciliation (recon.js) and the rest of the page are original
to this app; the edit-apply routine and the page shell are shared with other SkillSafe desks. Bazel is a
trademark of Google LLC; this app is not affiliated with or endorsed by Google or the Bazel project.