Packages (.synapse)

Artifact shape

A compose package is canonical structured data (JSON-backed .synapse) including format id, manifest, graph, lockfile, modules, runtime plan, and verification metadata. Digests bind locked content so renaming a download does not forge identity.

.synapse
├─ manifest     name · version · stackId · runtime · executable
├─ graph        nodes · edges · policy · deadline
├─ lockfile     module → version + digest
├─ modules      locked bytes / payloads
├─ runtimePlan  order · rates · delivery
└─ verification policy · replay scope · external hooks

Import rules

Imports are integrity-checked. Unexpected layouts or unlockable modules fail rather than being silently rewritten. Prefer explicit versions when pulling from Discover or a library release.