Open the .livemd files in Livebook, or execute their code through the repository gate:
python3 scripts/check.py --notebooks-only
- Verify a published HTTP signature runs the real OTP primitive against RFC 9421's independent Ed25519 vector, then rejects altered message and signature bytes.
- Inspect RequestSeal installs
{:request_seal, "~> 0.2.0"}from Hex and inspects its module, toolchain, and cryptographic prerequisites.
The repository gate checks the exported install cell, then substitutes the real checkout for local execution. It verifies local code; the release runbook separately verifies the published Hex install in a clean consumer. No author-machine path is embedded. The shipped notebooks need no secret, service, provider registration or payment data. Their source cells are the actual executed inputs, not copied success output.
The checker uses Livebook's importer and Elixir exporter, refuses unsupported cells/branches instead of silently skipping them, and executes each export in a fresh Elixir process. Do not confuse headless computation with interactive UI verification or external conformance. The RFC notebook is a cryptographic baseline; it does not exercise a RequestSeal parser or profile.
See testing and evidence for the execution contract. Credential-bearing notebooks must use named secrets, redact output, document real endpoints, and never send a payment or create infrastructure simply because the reader opens them.