Project configuration

OpenVet is configured per-project through two files at the repo root:

• openvet.toml — committed; declares which logs to trust and what policy your dependencies must satisfy.
• openvet.lock — committed; pins the verified head of each trusted log plus the consumed audits, so openvet check is deterministic on any machine.

For user-level settings (key locations, default editor, terminal preferences) see User configuration.

TODO: document the full openvet.toml schema (logs, policies, criteria, exemptions) with worked examples. For now, run openvet init to generate a starter file with comments.