package: verify lock checksums in doctor

2026-09-03 10:38:24 +00:00
parent 011a60f140
commit fd28ee7ec1
6 changed files with 18 additions and 6 deletions
@@ -63,7 +63,7 @@ source: local
 checksum: 1234abcd
 ```

-`claro.lock` records the release version, lock format, packages, and checksums so future registry work has a stable safety foundation.
+`claro.lock` records the release version, lock format, packages, and checksums so future registry work has a stable safety foundation. `claro package doctor` checks those lockfile checksums for listed packages and reports `BAD lock checksum: name` if the lockfile is stale or edited incorrectly.

 ## Project-name safety