Deterministic CI flow
Use a deterministic scan + diff flow and parse the stable summary line.
Minimal recipe
This flow relies on the default scan rotation (scan_old.json → scan.json).
To diff two explicit artifacts, use:
Outputs
.nuky/out/diff_summary.txt(human-readable).nuky/out/diff.json(canonical JSON).nuky/out/diff.md(markdown summary)
Exit codes
- 0: No contract or behavior changes.
- 2: Behavior changes only.
- 3: Contract changes present.
Exit codes are deterministic for the same inputs and toolchain.