# The caller has compiled this package and its exact recursive candidate graph.
# No credentials, mutable references, or workspace-wide unrelated schema enter
# the package derivation. Ordinary #server builds are not promotion evidence.
{ source, schema, generator, packageRevisionId, system ? builtins.currentSystem }:
let
  package = builtins.getFlake ("path:" + source);
  checked = package.quixosPackages.${system}.checkedServer or
    (throw "Package ${packageRevisionId} lacks checkedServer. Upgrade its Nix helper and adopt generated implementation bindings before cutover.");
in checked {
  inherit packageRevisionId;
  schema = builtins.path { path = /. + schema; name = "candidate-package-bindings.json"; };
  generator = builtins.storePath generator;
}