This example treats service/boundary.json as the declared contract for svc. The raw json-file provider detects content and formatting changes; choose json-canonical when formatting-insensitive structural hashing is more appropriate.
boundary.config.jsondeclares thesvccomponent.service/boundary.jsonis the boundary artifact.expected.boundary.lock.jsonrecords the expected fingerprints.
Install boundver, then run from the boundver repository root:
boundver generate \
--config examples/json-file/boundary.config.json \
--out examples/json-file/expected.boundary.lock.json \
--source working-tree
boundver verify \
--config examples/json-file/boundary.config.json \
--lock examples/json-file/expected.boundary.lock.json \
--source working-treeA stable digest means the declared artifact is stable; it is not a semantic compatibility proof.