# Acceptance checklist

This document maps each review requirement to reproducible evidence in the
public repository. Run commands from the repository root with the current
MoonBit toolchain.

| Requirement | Repository evidence | Verification |
| --- | --- | --- |
| MoonBit is the primary language | Root and `cmd/main` contain the implementation in `.mbt` files | `git ls-files "*.mbt"` |
| Public repository | `https://github.com/liyun6666/moonseal` | Open the URL without signing in |
| Complete README | `README.md` and checked `README.mbt.md` | Review purpose, scope, installation, commands, and examples |
| Purpose and main functions | README sections “Why MoonSeal?”, “Capabilities”, and “Functional boundaries” | Read the linked sections |
| Runnable example | `cmd/main` plus the quick-start workflow | `moon run cmd/main scan .` |
| Continuous integration | `.github/workflows/ci.yml` | Check the latest GitHub Actions run |
| Runnable tests | 145 unit and integration tests across root and CLI packages | `moon test --target wasm` |
| Successful build | Wasm release build in local verification and CI | `moon build --target wasm --release` |
| Mooncakes publication | Module metadata is publication-ready and the archive is privacy-checked | `moon package --list`, then `moon publish --frozen` while logged in |
| Traceable development | Git history, changelog, issue forms, and pull request template | `git log --oneline --decorate` |
| Clear boundaries and maintenance value | `README.md`, `docs/ARCHITECTURE.md`, and `docs/DECISIONS.md` | Review the stated non-goals and extension points |
| License compliance | Apache-2.0 project license and `THIRD_PARTY.md` | `moon tree` and license-file review |

## One-command review sequence

Run the commands in this order:

```shell
moon update
moon info
moon fmt --check
moon check --target wasm -d
moon test --target wasm
moon build --target wasm --release
moon run --target wasm cmd/main scan .
moon run --target wasm cmd/main dependencies .
moon run --target wasm cmd/main policy . --policy moonseal-policy.json
moon package --list
```

Expected high-level results:

- formatting and type checking complete without diagnostics;
- all tests pass;
- the release build completes;
- self-audit reports `READY` with no errors or warnings;
- dependency analysis reports no third-party runtime dependencies;
- repository policy reports `POLICY PASSED`;
- package listing excludes `MoonSeal项目申报书.md` and `项目申报书.docx`.

## Review artifacts

The CI workflow uploads two artifacts on every commit:

- `moonseal-cyclonedx`: generated CycloneDX 1.6 SBOM;
- `moonseal-review-evidence`: package file listing and coverage report.

The release process and Mooncakes verification steps are documented in
[`RELEASING.md`](RELEASING.md).