A guarantee that isn't a test is just a promise
A Crossdeck contract is a matched triple: a claim small enough to be true, the source code that implements it, and a test that fails the moment the source drifts from the claim. The product of a contract isn't the sentence in the docs — it's that test. Each one lives as a JSON file under contracts/<pillar>/<id>.json, carrying its claim, a reference to the code, a reference to the test, plus its pillar, status, and which SDK platforms it applies to.
Four layers, each catching a different kind of drift
The contract set isn't decorative — it's enforced before code can ship:
- Schema-lock. A pre-commit and CI validator checks every contract's shape; a mis-shaped one is blocked before review.
- Per-SDK assertion tests. Every test reference must resolve to a real test in the repo — Vitest for TS/Web/Node/React Native, XCTest for Swift, JUnit for Android. If a test was renamed or removed without updating its contract, the Contract Audit workflow fails the build.
- CI + deploy. Every push to
mainruns the suites, audits the references, and publishes the backend — and the logs are publicly readable per run.
Three places, no trust required
This is the part that matters for you: you can audit Crossdeck's entire contract posture without relying on any marketing page, using three public sources.
- The JSON. The canonical contracts live under
contracts/. Diff the directory between two SDK releases and you see exactly which structural guarantees changed. - The CI runs. Every push to
mainruns Test, Contract Audit, and Deploy — and the logs are public. - The SDK source. Each SDK is published to its public GitHub mirror and registry, and the runtime registry inside each artefact reads the same JSON that ships in the monorepo.
That last point is the runtime tie-in: the SDK self-verifies against the same contracts at runtime, and its reliability hook can surface a contract failure straight from your own test harness — so the guarantee you read about is the guarantee running in your app.
Proven, not promised
Anyone can write "we isolate entitlements per user" in their docs. Crossdeck turns that sentence into a JSON contract, a line of source, and a test that goes red the day it stops being true — and lets you read all three. When a platform's claims are falsifiable and the evidence is public, you don't have to trust it. You can check.
Every contract a matched triple, every test reference resolved by CI, every run public. The guarantee is the test, and you can read it.