A workspace manifest records what a reviewer had open and how they were
looking at it. It is never a source of truth (ADR-0002): it names a compiled
package and the sources that package was built from, and it stores enough
identity to say, on reopen, whether either has moved underneath it.
The parser is a trust boundary. It performs no network access, resolves no
filesystem path, accepts no unknown key, and refuses any schema version it
was not written for.
A workspace manifest records what a reviewer had open and how they were looking at it. It is never a source of truth (ADR-0002): it names a compiled package and the sources that package was built from, and it stores enough identity to say, on reopen, whether either has moved underneath it.
The parser is a trust boundary. It performs no network access, resolves no filesystem path, accepts no unknown key, and refuses any schema version it was not written for.