Runtime evidence / smoke tested

zod4.6.5

Observed 2026-10-05 02:58 UTC · Linux amd64 / glibc

Download JSON

Observation 0 · Report history · Maintainer tools (coming soon)

Inconclusive

Coverage is limited. Inspect the groups and omissions below.

This is loading evidence. It does not establish functional correctness or package safety.

Runtime matrix

4 pinned runtimes · production_f10071512e0e7e24c6867f11e90a7da0

Loading outcomes by runtime and consumer mode
Runtime	Root import	Root require	Subpath imports	Subpath requires
Node.js24.21.0	Passed	Passed	Passed9 passed · 0 failed	Passed9 passed · 0 failed
Node.js26.10.0	Passed	Passed	Passed9 passed · 0 failed	Passed9 passed · 0 failed
Bun1.4.2	Passed	Passed	Passed9 passed · 0 failed	Passed9 passed · 0 failed
Deno2.9.7	Passed	Passed	Passed9 passed · 0 failed	Passed9 passed · 0 failed

Node.js 24.21.0

Root importPassed

Root requirePassed

Subpath importsPassed9 passed · 0 failed

Subpath requiresPassed9 passed · 0 failed

Node.js 26.10.0

Root importPassed

Root requirePassed

Subpath importsPassed9 passed · 0 failed

Subpath requiresPassed9 passed · 0 failed

Bun 1.4.2

Root importPassed

Root requirePassed

Subpath importsPassed9 passed · 0 failed

Subpath requiresPassed9 passed · 0 failed

Deno 2.9.7

Root importPassed

Root requirePassed

Subpath importsPassed9 passed · 0 failed

Subpath requiresPassed9 passed · 0 failed

Import uses ESM; require uses CommonJS. Root modes use fresh sandboxes. Subpath batches share module caches and globals. Select a result to inspect its evidence.

Shared preparation

Passed

1 installed packages · 0 optional dependencies omitted · lifecycle scripts disabled

Static manifest, native and script observations

Static indicators are context; their presence alone does not establish a prerequisite or failure.

{
  "native": {
    "count": 0,
    "paths": [],
    "buildIndicators": [],
    "prerequisiteProven": false
  },
  "declared": {
    "main": "./index.cjs",
    "type": "module",
    "module": "./index.js",
    "exports": {
      ".": {
        "types": "./index.d.cts",
        "import": "./index.js",
        "require": "./index.cjs",
        "@zod/source": "./src/index.ts"
      },
      "./v3": {
        "types": "./v3/index.d.cts",
        "import": "./v3/index.js",
        "require": "./v3/index.cjs",
        "@zod/source": "./src/v3/index.ts"
      },
      "./v4": {
        "types": "./v4/index.d.cts",
        "import": "./v4/index.js",
        "require": "./v4/index.cjs",
        "@zod/source": "./src/v4/index.ts"
      },
      "./mini": {
        "types": "./mini/index.d.cts",
        "import": "./mini/index.js",
        "require": "./mini/index.cjs",
        "@zod/source": "./src/mini/index.ts"
      },
      "./compile": {
        "types": "./compile.d.cts",
        "import": "./compile.js",
        "require": "./compile.cjs",
        "@zod/source": "./src/compile.ts"
      },
      "./locales": {
        "types": "./locales/index.d.cts",
        "import": "./locales/index.js",
        "require": "./locales/index.cjs",
        "@zod/source": "./src/locales/index.ts"
      },
      "./v4-mini": {
        "types": "./v4-mini/index.d.cts",
        "import": "./v4-mini/index.js",
        "require": "./v4-mini/index.cjs",
        "@zod/source": "./src/v4-mini/index.ts"
      },
      "./v4/core": {
        "types": "./v4/core/index.d.cts",
        "import": "./v4/core/index.js",
        "require": "./v4/core/index.cjs",
        "@zod/source": "./src/v4/core/index.ts"
      },
      "./v4/mini": {
        "types": "./v4/mini/index.d.cts",
        "import": "./v4/mini/index.js",
        "require": "./v4/mini/index.cjs",
        "@zod/source": "./src/v4/mini/index.ts"
      },
      "./v4/locales": {
        "types": "./v4/locales/index.d.cts",
        "import": "./v4/locales/index.js",
        "require": "./v4/locales/index.cjs",
        "@zod/source": "./src/v4/locales/index.ts"
      },
      "./package.json": "./package.json",
      "./v4/locales/*": {
        "types": "./v4/locales/*",
        "import": "./v4/locales/*",
        "require": "./v4/locales/*",
        "@zod/source": "./src/v4/locales/*"
      }
    },
    "scripts": {
      "test": "nub exec --node vitest run",
      "build": "nub exec --node zshy --project tsconfig.build.json",
      "clean": "git clean -xdf . -e node_modules",
      "postbuild": "nub ../../scripts/write-stub-package-jsons.ts && nub exec --node biome check --write .",
      "test:watch": "nub exec --node vitest",
      "prepublishOnly": "nub ../../scripts/check-versions.ts"
    }
  },
  "platform": {
    "os": true,
    "cpu": true,
    "libc": true
  },
  "evidenceLevel": "static_only",
  "lifecycleScripts": []
}

Coverage and evidence

Node.js 24.21.0 · Root · ESM importPassed

1 passed · 0 failed · 0 interrupted · 0 untested of 1 planned

Evidence JSON

Node.js 24.21.0 · Root · CommonJS requirePassed

1 passed · 0 failed · 0 interrupted · 0 untested of 1 planned

Evidence JSON

Node.js 24.21.0 · Subpaths · ESM importPassed

9 passed · 0 failed · 0 interrupted · 0 untested of 9 planned

Evidence JSON

Node.js 24.21.0 · Subpaths · CommonJS requirePassed

9 passed · 0 failed · 0 interrupted · 0 untested of 9 planned

Evidence JSON

Node.js 26.10.0 · Root · ESM importPassed

1 passed · 0 failed · 0 interrupted · 0 untested of 1 planned

Evidence JSON

Node.js 26.10.0 · Root · CommonJS requirePassed

1 passed · 0 failed · 0 interrupted · 0 untested of 1 planned

Evidence JSON

Node.js 26.10.0 · Subpaths · ESM importPassed

9 passed · 0 failed · 0 interrupted · 0 untested of 9 planned

Evidence JSON

Node.js 26.10.0 · Subpaths · CommonJS requirePassed

9 passed · 0 failed · 0 interrupted · 0 untested of 9 planned

Evidence JSON

Bun 1.4.2 · Root · ESM importPassed

1 passed · 0 failed · 0 interrupted · 0 untested of 1 planned

Evidence JSON

Bun 1.4.2 · Root · CommonJS requirePassed

1 passed · 0 failed · 0 interrupted · 0 untested of 1 planned

Evidence JSON

Bun 1.4.2 · Subpaths · ESM importPassed

9 passed · 0 failed · 0 interrupted · 0 untested of 9 planned

Evidence JSON

Bun 1.4.2 · Subpaths · CommonJS requirePassed

9 passed · 0 failed · 0 interrupted · 0 untested of 9 planned

Evidence JSON

Deno 2.9.7 · Root · ESM importPassed

1 passed · 0 failed · 0 interrupted · 0 untested of 1 planned

Evidence JSON

Deno 2.9.7 · Root · CommonJS requirePassed

1 passed · 0 failed · 0 interrupted · 0 untested of 1 planned

Evidence JSON

Deno 2.9.7 · Subpaths · ESM importPassed

9 passed · 0 failed · 0 interrupted · 0 untested of 9 planned

Evidence JSON

Deno 2.9.7 · Subpaths · CommonJS requirePassed

9 passed · 0 failed · 0 interrupted · 0 untested of 9 planned

Evidence JSON

Planner omissions

pattern: 1
non executable: 1
not exported: 0
invalid subpath: 0
coverage limit: 0

./package.json — non executable
./v4/locales/* — pattern

Reproduce these inputs

Download the recorded inputs and exact dependency lock. These files do not include the CLI, runtime images or installed packages.

Reproduction inputs Exact package lock

Local replay requires setup. The CLI currently runs from the CompatLab source repository on a qualified Linux amd64/runsc host. Hosted runtime images are not yet distributed for public download; an operator must supply the exact images named in this report. A fresh image build does not substitute for them. CLI setup and replay requirements

Command for a configured host

Run from the built CompatLab repository with both downloads in that directory and the exact runtime images loaded. Rebuilding creates a new snapshot generation.

sudo "$(command -v node)" apps/cli/dist/bin.js reproduce ./673f4173-fdec-4d29-a02d-d0cf6f20b08d-reproduction.json --rebuild --lockfile ./package-lock.json --json

The original worker last reported its sealed snapshot as available. Verified reuse requires those actual bytes in your local state directory.

Exact provenance

artifact: zod@4.6.5
integrity: sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==
tarball: https://registry.npmjs.org/zod/-/zod-4.6.5.tgz
snapshot: 33c43b31-6bc0-4cf4-becf-d3a69ffd1abe
generation: 88febbe5-0485-4b23-a2cd-ab6b91a057d1
lockDigest: 49658ad882071e789ebc65c45d80c759c8045f8371a8a219b5b6be30ea56c49f
treeDigest: bdf00d81bbb9b365dbb59caa8e142535f10f9f93e5e5c1f9e2ffc35a7c8c7780
installerImage: node:24.21.0-bookworm-slim@sha256:5cbc7caba8c2c0f0bca675d1b61b9f2857e1cf1853c6164ee9dd409501a936e7
preparationProfile: npm_11_19_0_linux_amd64_v2
harness: load_v2
planner: explicit_exports_v1
policy: runtime_limits_v2
classifier: classifier_v1
classifiedAt: 2026-10-05T02:58:36.883Z

node_24_21_0

sha256:cb6150e21f96e0cced8169843922f9f0363d32d3be86393172958aeb9d653aac

Built 2026-10-04 15:20 UTC · runtime_image_v1

node_26_10_0

sha256:348bbebdc16cde773af001ccf9734936485091fadf0b6162224c796fbf343a81

Built 2026-10-04 15:20 UTC · runtime_image_v1

bun_1_4_2

sha256:58846b11e3e63c83dd1bbfa12097e641025bd57febe737c2bfaf2962a63fbacb

Built 2026-10-04 15:21 UTC · runtime_image_v1

deno_2_9_7

sha256:d2ee9affe35ff6eb8d788fcdc202e2e74802a2936e9acdfc63cd6b7d2aea0777

Built 2026-10-04 15:21 UTC · runtime_image_v1

Evidence limitations

Only installation and loading were observed; functional correctness and package safety are not established.
Subpath batches share module caches and globals; root modes use separate fresh sandboxes.
Package-visible harness observations can be tampered with. They are not adversarial attestation.
Evidence applies to these exact artifacts, dependency snapshot, runtime images and Linux amd64/glibc policy.
Runtime error codes are captured observations and can also be thrown by package code.