Glossary

resolver -> source -> variable -> value
metadata -> requirements -> audit -> graph

Audit

A static report of executable and external surfaces. See audit schema.

Config path

The dot-path location of a value in the parsed config object. See graph schema.

Eval

A sandboxed expression variable for config-time comparisons, arithmetic, boolean logic, and ternaries. See eval variables.

Fallback

An alternate value in a variable expression, such as ${env:HOST, "localhost"}. See resolution model.

Requirement

A normalized input contract derived from metadata. See requirements schema.

Safe mode

A policy that blocks executable files, custom code, dotenv mutation, and file traversal during resolution. See security policies.

Source class

The broad category of a value source: user, config, readonly, or remote. See introspection model.