[ORESoftware]

Summary

Add an independent Rust contract suite for the exact multiversion graph implemented by zed-pkg/zed-cli#315:

A@1 -> B@1 -> A@2 -> B@0 -> A@2

The test model is deliberately standalone and uses only the Rust standard library, so it does not merely call back into the product implementation.

Independent assertions

• registry/org/name/version is the exact node identity
• A@1 and A@2 remain distinct
• B@1 and B@0 remain distinct
• DFS terminates after four exact nodes
• only B@0 -> A@2 is classified as the back-edge
• deterministic version-qualified diagnostics
• one finite consumer root link plus one link per dependency edge
• malformed graphs fail before materialization
• real Unix symlinks point to canonical nodes
• a second application is idempotent and does not add node directories

Product pin

product-source-pin.json pins the exact clean product head:

ebe42c6385aacdbfe3d37d17a253e900db1bc8a1

CI verifies the immutable checkout, then reruns the product executable cycle regressions, exact-node unit tests, formatting, and Clippy in addition to the independent model.

Validation

The independent suite has passed formatting, compilation with warnings denied, and all exact-node/real-symlink tests:

• https://github.com/zed-pkg-test/version-solver-e2e/actions/runs/33784706933
• https://github.com/zed-pkg-test/version-solver-e2e/actions/runs/33785197897

The enabled product-integration run is attached to this branch:

• https://github.com/zed-pkg-test/version-solver-e2e/actions/runs/33787065409

Linear: DEN-3488
Product PR: zed-pkg/zed-cli#315
Logger prerequisite: ores-otel/ores.otel.log#45

[linear-code]

DEN-3488