Runtime environment inventory

Generated by python3 scripts/check_runtime_env_contract.py --write; do not edit by hand.

This page answers a source-ownership question: which code under crates/ reads or mutates the process environment, and why is that access allowed? It is exhaustive for the scanner's direct-read APIs; it is not a list of settings that operators should copy into a shell.

The machine-readable source of truth is contracts/runtime-env-direct-reads-v1.json; python3 scripts/check_runtime_env_contract.py rejects any source, classification, or generated-report drift.

Start here

A name appearing below is not automatically public. Most entries are compiler or build inputs, test controls, provenance reads, or closed safety boundaries. The only supported public overrides are the names documented by the typed configuration registry.

External driver visibility and remapping variables are also not Kiln settings. Kiln snapshots only their presence at first accelerator validation and fails device identity closed when a remap would make the probe ambiguous. It does not turn those names into request-time policy or a device allowlist.

Current baseline

The scanner records 448 direct read call sites and 19 process-mutation call sites. It can statically name 38 distinct literal KILN_* read names across 128 call sites. Dynamically named reads remain listed separately and are classified by their owner boundary.

The counts are call sites, not configuration-field counts. The central typed loader deliberately uses a small number of dynamic reads to resolve all public registry entries once. Conversely, compile-time code and tests can contribute many call sites without adding a single public runtime setting.

Classification policy

#[cfg(test)] modules and #[test] functions are recognized as test surfaces, including tests colocated in production source files. Simple file-local string constants used as environment names are resolved before classification. Unknown dynamic expressions are retained verbatim rather than guessed.

Production migration owners

These files contain the runtime accesses still outside the typed startup boundary. This table is the prioritized deletion/migration queue.

Literal KILN_* catalog

A name can appear in more than one class, such as a build control that is also asserted by a test. Paths are deduplicated; counts retain duplicate call sites.

Dynamic read catalog

These direct reads do not expose one literal name at the call site. They include central registry loops, the narrow credential adapter, startup safety snapshots, helper functions, and whole-environment provenance scans. A dynamic read does not mean “accept any setting”: its owner constrains which names it may resolve. The exact expression remains ratcheted so a helper cannot conceal source growth.

Mutation boundary

Process-environment mutation is forbidden in production execution. The current inventory contains only test/example mutation and build-script toolchain setup; the classification check will fail if a production mutation is introduced. Tests should still migrate toward scoped typed configuration because process-global mutation creates ordering and parallelism hazards even when it is test-only.

Migration rule

The repository check rejects every experimental/debug migration read even if the JSON baseline is regenerated. A new production read must instead be removed or belong to a reviewed closed boundary above. For each production owner, move a coherent policy family at once: define typed fields, derive canonical KILN_<SECTION>_<FIELD> compatibility inputs mechanically, validate once at startup, inject immutable policy, expose effective value/source/restart semantics, remove lower rereads, and lower this ratchet in the same commit. Do not promote one-off kernel flags into permanent public API merely to preserve them.

Retired or unknown public spellings do not become safe because a test, build script, or provenance scan mentions them. Public recognition requires the typed configuration registry; every lower-level runtime reread remains forbidden.