rust-toolchain.toml

# 🔴 M5H8-5, option (a) adopted (req/38_ERRATA_2026-08-07.md §45): the "Rust toolchain pin" that
# 45 TH-10's mitigation column and 33 NFR-013 require. req/86 §5.2 measured that
# `rust-toolchain.toml` was absent, and §45 ruled "cheap enough to pull forward into the fix batch."
# SBOM generation and SLSA provenance belong to the release pipeline's CI-gate window (M8, 51 §11.2) -- two orders of magnitude more expensive than this file. (sem: SEM-rust-toolchain.toml-001)
#
# As of 2026-08-10, 1.97.1 is exactly the version `stable` resolves to (rustc 1.97.1 (8bab26f4f 2026-07-14)),
# so this pin does not change today's build at all. What it changes is tomorrow's build -- `stable` is
# a moving name, and a supply chain pinned to a moving name is not pinned. 46's CI gate reads this file. (sem: SEM-rust-toolchain.toml-002)
#
# `components` is left undeclared. rustup installs the default profile's components, and both
# the CI image and the dev machine already carry `rustfmt`/`clippy`/`llvm-tools`. Listing them here
# would turn "this list is satisfied" into a second declaration that can drift out of sync with ci.sh's stage set (§30's disease). (sem: SEM-rust-toolchain.toml-003)
[toolchain]
channel = "1.97.1"