[verified] fix: enforce canonical native runtime pin

packages/node/meshnet_node/native_backend.py

@@ -12,6 +12,7 @@ from __future__ import annotations
 from dataclasses import dataclass
 
 from .native_protocol import BUNDLE_VERSION, SCHEMA_VERSION, pb
+from .runtime_pin import load_runtime_pin
 from .runtime_recipe import (
     ArtifactIdentity,
     DerivativeBinding,
@@ -72,7 +73,6 @@ class NativeNumericalRecipe:
     kv_layout: str
     architecture_adapter: str
     backend_id: str
-    runtime_version: str
     recipe_id: str
     recipe_version: str
     catalogue_version: str
@@ -95,6 +95,11 @@ def shard_identity_from_native_report(inputs: NativeIdentityInputs) -> ShardIden
     report = inputs.loaded_artifact
     pin = inputs.artifact_pin
     recipe = inputs.numerical_recipe
+    if recipe.backend_id.strip().lower() not in {"llama.cpp", "llama-cpp"}:
+        raise RecipeIdentityError(
+            "native llama.cpp identity requires backend_id 'llama.cpp' or 'llama-cpp'"
+        )
+    runtime_version = load_runtime_pin().runtime_version
     artifact = ArtifactIdentity(
         artifact_id=pin.artifact_id,
         revision=pin.revision,
@@ -115,7 +120,7 @@ def shard_identity_from_native_report(inputs: NativeIdentityInputs) -> ShardIden
             tokenizer_revision=inputs.tokenizer_revision,
             architecture_adapter=recipe.architecture_adapter,
             backend_id=recipe.backend_id,
-            runtime_version=recipe.runtime_version,
+            runtime_version=runtime_version,
             boundary_schema_version=recipe.boundary_schema_version,
             protocol_schema_version=recipe.protocol_schema_version,
             recipe_id=recipe.recipe_id,