# `MishkaCmsCore.Runtime.PageBuilder.CodeAudit`
[🔗](https://github.com/mishka-group/mishka_cms_core/blob/v0.0.1/lib/mishka_cms_core/runtime/page_builder/code_audit.ex#L5)

How much of the stored code in this database carries a signature this deployment cannot verify.

## What it is for

`MishkaCmsCore.Runtime.PageBuilder.CodeSignature` names each unverified snippet as it compiles,
which is the right thing to say and the wrong shape to read: the lines are scattered through a boot
that also logs every site, page and component, and there is no moment at which somebody learns
"none of the code in this database runs here". A deployment that configures a key for the first
time, or restores a dump from somewhere else, gets exactly that failure — everything renders, and
every handler and every live component's `handle_event/3` quietly does nothing.

So this counts them and says the total once, with the command that fixes it.

## What it costs

Nothing when signing is off, which is the default: `untrusted/0` answers `0` without reading
anything. With a key configured it is one streamed pass over the four resources that store code,
run once at boot.

## Not a health check

A non-zero count is not necessarily wrong — a developer holding a production dump SHOULD see one,
and running `mix mishka.resign_code` on a machine whose database was tampered with is the one
situation where the count is the honest answer and re-signing is not. The log line says so.

# `report`

```elixir
@spec report() :: :ok
```

Counts them and logs the total at `warning`, or says nothing at all when there is nothing to say.

Always answers `:ok`: a database it cannot read is not a reason to fail a boot that otherwise
succeeded, and the per-snippet warnings still name whatever did compile.

# `sources`

```elixir
@spec sources() :: [{module(), [atom()]}]
```

The resources that store Elixir, and which of their fields hold it.

`Mix.Tasks.Mishka.ResignCode` re-signs exactly what this counts, and reads the list from here so
that a fifth resource gaining a code field cannot be audited and left unsigned, or the reverse.

# `untrusted`

```elixir
@spec untrusted() :: non_neg_integer()
```

How many stored snippets this deployment's key does not verify.

`0` when signing is off, without reading the database.

---

*Consult [api-reference.md](api-reference.md) for complete listing*