Constellation · 06

Trust

Deputy: supply chain you can audit

Why this band exists

Your product is your dependency graph. Most teams treat that graph like weather. Remade Trust is how you own it: offline when needed, scanned on change, deployable on purpose, so a remade internet does not ship on a poisoned lockfile.

Why now

Memory-safe Rust removes a class of accidents. It does not stop a malicious build.rs. Supply chain casual became normal when yellow CI badges replaced review. Disco firmware and Home Computer apps cannot depend on crates.io staying honest and online forever.

How it fits

Every other constellation star pulls crates. Media codecs, Mind weights glue, Memory stores, Identity verifiers, Edge firmware: Trust is the gate in front of all of them. Without it, Digital Freedom for users is theater while your build is a lottery ticket.

Stars in Trust

Each crate is open under Remade-With-Rust. Open the repo, then the field note, then compose with the rest of the sky.

  • Deputy · replaces unchecked supply chains

    Dependency discovery, offline vault, change scan

What to build first

  1. A Deputy-backed mirror of the crates you actually ship
  2. CI that treats Cargo.lock diffs as code review, not weather
  3. Release trains that still compile when the public registry has a day off

Field notes in Trust