Development
The host only needs Docker. Rust, Node, Go, maturin and build outputs stay in containers and their cache volumes, with the source mounted read-only.
./scripts/test-container.sh # full verification: crate tests, feature matrix, bindings, UI build, Web smoke test
./scripts/run-container.sh cli … # run the CLI in a container; data lives in the cipherfs-data Docker volume
./scripts/run-container.sh web # build and run Web, mapped to 127.0.0.1:3000
The workspace commits Cargo.lock and the UI package-lock.json. Verification results are recorded per source stage in docs/IMPLEMENTATION_AUDIT.md and docs/evidence/; a script existing is not evidence that it passed.