Environment-variable reference

Pulse canonical handlers do not receive ambient process environment access. Handler authority comes only through the documented ctx capabilities and project/provider bindings. The variables here configure public Pulse project selection, provider tooling, or repository tests.

Do not use these variables as a substitute for ctx.config, ctx.secret, or provider bindings. Secret-bearing compatibility URIs must be handled as credentials and must not be copied into diagnostics.

Choose a project profile

Set PULSE_PROFILE to a profile declared in .pulse/config.ts, or use --profile for one command:

PULSE_PROFILE=local pulse doctor
pulse doctor --profile local

These examples assume a profile named local. An explicit --profile wins over PULSE_PROFILE; otherwise the configured pulse.defaultProfile is used. See profile selection for the full selection rules. Handler configuration and secrets still come through explicit bindings, not ambient environment reads.

Index

1. Public Pulse project configuration
2. Fastly and Viceroy tooling
3. Contributor and test-only configuration

Supported tooling configuration

Public Pulse project configuration. These inputs configure tools, not handler authority.

Variable	Purpose	Default
PULSE_PROFILE	Selects the flat Pulse project profile when no explicit --profile option is supplied.	Unset; use pulse.defaultProfile when declared.

Public Pulse project configuration

PULSE_PROFILE

Selects the flat Pulse project profile when no explicit --profile option is supplied.

Property	Contract
Value	Pulse profile name
Default	Unset; use pulse.defaultProfile when declared.
Precedence	--profile wins, then PULSE_PROFILE, then pulse.defaultProfile.
Consumer	Project-aware Pulse CLI commands using the .pulse/config.ts convention.
Secret safety	Not a secret. It selects a committed profile and never carries resolved binding values.
Stability	Supported project-selection input.
Source owners	wasm/packages/cli/src/project-config.js

Fastly and Viceroy tooling

Provider-specific executable overrides; separate from public Pulse project selection.

Variable	Purpose	Default
PULSE_FASTLY_BIN	Selects the Fastly CLI binary used for external target inspection and local Compute execution.	No explicit path; discover fastly on PATH.
PULSE_VICEROY_BIN	Selects an inspected Viceroy executable for direct local Compute execution when no explicit Fastly CLI launcher is selected.	Unset; discover the Fastly CLI first, then Viceroy, on PATH.

PULSE_FASTLY_BIN

Selects the Fastly CLI binary used for external target inspection and local Compute execution.

Property	Contract
Value	Absolute or relative executable path
Default	No explicit path; discover fastly on PATH.
Precedence	An explicit binary option wins, then PULSE_FASTLY_BIN, then PATH discovery.
Consumer	Fastly CLI inspection and the external Compute reality gate.
Secret safety	Not a secret. Do not point it at an untrusted executable.
Stability	Supported Beta tooling override.
Source owners	packages/provider-fastly/src/testing/fastly-cli.js

PULSE_VICEROY_BIN

Selects an inspected Viceroy executable for direct local Compute execution when no explicit Fastly CLI launcher is selected.

Property	Contract
Value	Absolute or relative executable path
Default	Unset; discover the Fastly CLI first, then Viceroy, on PATH.
Precedence	An explicit launcher choice wins. Without one, an explicit Fastly CLI path selects CLI ownership; otherwise an explicit viceroyBinary or PULSE_VICEROY_BIN selects direct Viceroy execution.
Consumer	External Fastly Compute reality gates, either as the direct local engine or as an explicit Fastly CLI engine override.
Secret safety	Not a secret. Do not point it at an untrusted executable.
Stability	Supported Beta tooling override.
Source owners	packages/provider-fastly/src/testing/fastly-cli.js

Contributor and test-only configuration

Repository harness controls. They are intentionally outside the application compatibility contract.

• Test execution and output
• Release evidence and source identity
• Manual proof reproduction
• Provider test evidence and fixtures

Test execution and output

Variable	Purpose	Default
PULSE_CONTEXT_QUALITY_DIR	Routes incremental actual, growth and repeated-call receipts. Does not change cases, acceptance criteria or runtime budgets.	wasm/.test-results/context-quality in the source checkout.
PULSE_CALLABLE_LIFETIME_RECEIPT	Retains an incremental receipt when the proof runs through the shared test runner. Does not change test coverage or runtime limits.	Unset; the callable lifetime proof only prints its terminal summary.
PULSEWASM_TEST_PHASE_DIR	Enables optional compiler/test phase spans and nested filesystem/hash counters. Does not change task coverage or authorize reuse.	Unset; phase observation is disabled.
PULSEWASM_SUITE_TASK	Identifies the current registered test task so forwarding target proofs have distinct reports.	Assigned by the test runner for each task.
PULSEWASM_ARTIFACTS_DIR	Redirects generated build and test artifacts away from the default repository directory.	wasm/artifacts.
PULSEWASM_TEST_TMP_ROOT	Pins test workspaces beneath a caller-managed temporary root.	A suite-specific temporary directory.

PULSE_CONTEXT_QUALITY_DIR

Routes incremental actual, growth and repeated-call receipts. Does not change cases, acceptance criteria or runtime budgets.

Property	Contract
Value	Writable receipt directory path
Default	wasm/.test-results/context-quality in the source checkout.
Precedence	The environment value selects the output directory for each quality task.
Consumer	The internal B10-MCP-06B complete-request quality and cost proof.
Secret safety	Not a secret. Contains fixture queries, source/artifact identities, timing, allocation counters and failure evidence.
Stability	Contributor/test-only; no application compatibility or seal authority.
Source owners	wasm/test/mcp/assert-context-quality.cjs

PULSE_CALLABLE_LIFETIME_RECEIPT

Retains an incremental receipt when the proof runs through the shared test runner. Does not change test coverage or runtime limits.

Property	Contract
Value	Writable JSON receipt file path
Default	Unset; the callable lifetime proof only prints its terminal summary.
Precedence	The proof script positional output path takes precedence.
Consumer	The internal B10-MCP-05F callable lifetime proof.
Secret safety	Not a secret. Records fixture artifact hashes, source identity, failure codes and memory measurements.
Stability	Contributor/test-only; no application compatibility or seal authority.
Source owners	wasm/test/callables/assert-callable-lifetime.cjs

PULSEWASM_TEST_PHASE_DIR

Enables optional compiler/test phase spans and nested filesystem/hash counters. Does not change task coverage or authorize reuse.

Property	Contract
Value	Existing diagnostic output directory
Default	Unset; phase observation is disabled.
Precedence	The operator supplies a fresh directory to the test-only preload.
Consumer	Bounded B10-01 phase attribution, including the copied installed JWT helper.
Secret safety	Not a secret. Records timing, counters and artifact digests; no argument, source or environment contents.
Stability	Contributor/test-only; no qualification or cache authority.
Source owners	wasm/test/support/phase-observer.cjs, wasm/test/jwt/assert-jwt-installed-workflow.cjs

PULSEWASM_SUITE_TASK

Identifies the current registered test task so forwarding target proofs have distinct reports.

Property	Contract
Value	Registered task ID
Default	Assigned by the test runner for each task.
Precedence	The runner overrides any inherited task identity.
Consumer	Installed acceptance report routing and task harnesses.
Secret safety	Not a secret. It selects only the report filename.
Stability	Harness-internal; not a user or application setting.
Source owners	wasm/test/support/installed-acceptance-report.cjs

PULSEWASM_ARTIFACTS_DIR

Redirects generated build and test artifacts away from the default repository directory.

Property	Contract
Value	Directory path
Default	wasm/artifacts.
Precedence	Overrides the repository artifact root for scripts that opt into it.
Consumer	Build and test isolation.
Secret safety	Not a secret. Use an isolated writable directory.
Stability	Contributor/test-only.
Source owners	wasm/packages/build-support/src/artifacts-dir.js, wasm/scripts/build.cjs, wasm/scripts/run-wasm-tests.cjs

PULSEWASM_TEST_TMP_ROOT

Pins test workspaces beneath a caller-managed temporary root.

Property	Contract
Value	Directory path
Default	A suite-specific temporary directory.
Precedence	When set, tests create their working directories beneath this root.
Consumer	Documentation, CLI, provider, package-release, and clean-machine acceptance tests.
Secret safety	Not a secret. The directory may contain generated projects and test data.
Stability	Contributor/test-only; may change with test-runner updates.
Source owners	wasm/test/docs/assert-executable-documentation.cjs, wasm/test/release/assert-release-packages.cjs

Release evidence and source identity

Variable	Purpose	Default
PULSEWASM_SEAL_WORKER_LAYOUT	Allows exact shared-package consumption by registered local children of one controller; foreign checkouts and remote proof pooling remain rejected.	Unset; shared packages belong only to their original checkout.
PULSE_RELEASE_SHARED_PACK	Reuses one clean-source package set through verified private copies; independent determinism construction bypasses reuse.	Unset; packing constructs fresh packages.
PULSE_RELEASE_SHARED_PACK_SHA256	Rejects receipt changes before validating source identity and every shared package file.	Unset; required when a shared package directory is supplied.
PULSE_RELEASE_FEATURE_REPORT_DIR	Routes each installed proof into a task-specific report for the candidate release decision.	Unset; focused installed tests use their own report directories.
PULSE_RELEASE_REF	Carries the sealed candidate release ref into the protected publish process for an equality check against GitHub's native identity.	Unset; the protected npm workflow derives it from the sealed candidate.
PULSE_RELEASE_SHA	Carries the sealed candidate source commit into the protected publish process for an equality check against GitHub's native identity.	Unset; the protected npm workflow derives it from the sealed candidate.
PULSE_SOURCE_REVISION	Propagates one source identity through an aggregate release replay so independently written evidence cannot drift.	Current Git commit, or a deterministic archive-tree identity outside a Git checkout.
PULSE_SOURCE_IDENTITY_KIND	Labels the provenance class of the propagated source identity.	git-commit in a checkout or archive-tree-sha256-160 for an extracted source tree.
PULSE_SOURCE_DIGEST_SHA256	Preserves the full archive-tree digest behind the compatibility-width source revision field.	Unset for Git commits; the full archive-tree digest outside a Git checkout.
PULSE_SOURCE_FILE_COUNT	Carries the source-file count associated with an archive-tree digest for audit clarity.	Unset for Git commits; the deterministic archive-tree inventory count otherwise.

PULSEWASM_SEAL_WORKER_LAYOUT

Allows exact shared-package consumption by registered local children of one controller; foreign checkouts and remote proof pooling remain rejected.

Property	Contract
Value	Absolute controller-owned layout path
Default	Unset; shared packages belong only to their original checkout.
Precedence	The release controller supplies the registered layout to each isolated worker.
Consumer	Shared package verification in local seal workers.
Secret safety	Not a secret. Identifies private worktrees and their clean candidate.
Stability	Harness-internal; outside the application compatibility contract.
Source owners	scripts/release-shared-pack.cjs, wasm/scripts/run-wasm-tests.cjs

PULSE_RELEASE_SHARED_PACK

Reuses one clean-source package set through verified private copies; independent determinism construction bypasses reuse.

Property	Contract
Value	Directory path
Default	Unset; packing constructs fresh packages.
Precedence	The seal supplies its own attempt-local directory to consumer tasks.
Consumer	Release package construction and installed acceptance.
Secret safety	Not a secret. Contains verified candidate tarballs and their receipt.
Stability	Harness-internal; outside the application compatibility contract.
Source owners	scripts/pack-release.cjs, scripts/release-shared-pack.cjs

PULSE_RELEASE_SHARED_PACK_SHA256

Rejects receipt changes before validating source identity and every shared package file.

Property	Contract
Value	SHA-256 digest
Default	Unset; required when a shared package directory is supplied.
Precedence	The seal pins the receipt digest before launching consumer tasks.
Consumer	Shared release package receipt verification.
Secret safety	Not a secret. Identifies source-bound package evidence.
Stability	Harness-internal; outside the application compatibility contract.
Source owners	scripts/release-shared-pack.cjs

PULSE_RELEASE_FEATURE_REPORT_DIR

Routes each installed proof into a task-specific report for the candidate release decision.

Property	Contract
Value	Directory path
Default	Unset; focused installed tests use their own report directories.
Precedence	The complete feature replay assigns a fresh directory to its child runner.
Consumer	Installed feature acceptance report routing.
Secret safety	Not a secret. Contains source, package and acceptance evidence only.
Stability	Harness-internal; outside the application compatibility contract.
Source owners	wasm/test/support/installed-acceptance-report.cjs

PULSE_RELEASE_REF

Carries the sealed candidate release ref into the protected publish process for an equality check against GitHub's native identity.

Property	Contract
Value	Full Git ref (refs/tags/v<version>)
Default	Unset; the protected npm workflow derives it from the sealed candidate.
Precedence	When set by the workflow, it must exactly equal GitHub's native release-tag ref.
Consumer	Protected npm publication identity binding.
Secret safety	Not a secret. It is validated rather than trusted as independent authority.
Stability	Repository release-workflow internal; not an application setting.
Source owners	scripts/release-publication.cjs

PULSE_RELEASE_SHA

Carries the sealed candidate source commit into the protected publish process for an equality check against GitHub's native identity.

Property	Contract
Value	Full lowercase 40-character Git commit SHA
Default	Unset; the protected npm workflow derives it from the sealed candidate.
Precedence	When set by the workflow, it must exactly equal GitHub's native release-tag commit.
Consumer	Protected npm publication identity binding.
Secret safety	Not a secret. It is validated rather than trusted as independent authority.
Stability	Repository release-workflow internal; not an application setting.
Source owners	scripts/release-publication.cjs

PULSE_SOURCE_REVISION

Propagates one source identity through an aggregate release replay so independently written evidence cannot drift.

Property	Contract
Value	40-character lowercase source identity
Default	Current Git commit, or a deterministic archive-tree identity outside a Git checkout.
Precedence	When set by the release runner, every child evidence shard validates and reuses this exact identity.
Consumer	Release-seal task, four-mode, and offline deployment-candidate evidence binding.
Secret safety	Not a secret. It identifies source but grants no publication or deployment authority.
Stability	Repository release-evidence internal; not an application setting.
Source owners	scripts/source-identity.cjs

PULSE_SOURCE_IDENTITY_KIND

Labels the provenance class of the propagated source identity.

Property	Contract
Value	Source identity classification
Default	git-commit in a checkout or archive-tree-sha256-160 for an extracted source tree.
Precedence	Meaningful only with PULSE_SOURCE_REVISION; the release runner supplies both together.
Consumer	Release-seal reports, test reports, four-mode evidence, and offline candidate manifests.
Secret safety	Not a secret. It prevents an archive digest from being represented as a Git commit.
Stability	Repository release-evidence internal; not an application setting.
Source owners	scripts/source-identity.cjs

PULSE_SOURCE_DIGEST_SHA256

Preserves the full archive-tree digest behind the compatibility-width source revision field.

Property	Contract
Value	64-character lowercase SHA-256 digest
Default	Unset for Git commits; the full archive-tree digest outside a Git checkout.
Precedence	The release runner supplies it with an archive-tree source identity.
Consumer	Release-seal reports, test reports, four-mode evidence, and offline candidate manifests.
Secret safety	Not a secret. It is integrity metadata and carries no release authority.
Stability	Repository release-evidence internal; not an application setting.
Source owners	scripts/source-identity.cjs

PULSE_SOURCE_FILE_COUNT

Carries the source-file count associated with an archive-tree digest for audit clarity.

Property	Contract
Value	Non-negative integer
Default	Unset for Git commits; the deterministic archive-tree inventory count otherwise.
Precedence	The release runner supplies it with an archive-tree source identity.
Consumer	Release-seal reports, test reports, four-mode evidence, and offline candidate manifests.
Secret safety	Not a secret. It records only the number of source files in the identity inventory.
Stability	Repository release-evidence internal; not an application setting.
Source owners	scripts/source-identity.cjs

Manual proof reproduction

Variable	Purpose	Default
PULSE_B02_BASELINE_ROOT	Identifies a restored pre-B02 checkout for alternating baseline/candidate compiler measurements.	Unset; the manual B02 benchmark requires an explicit baseline checkout.
PULSE_B02_USAGE_DIR	Passes the isolated measurement directory to the temporary compiler preload collector.	Created separately for each sample by the B02 benchmark harness.
PULSE_B03_USAGE_DIR	Keeps compiler-process RSS separate from the planning worker and cold execution measurements.	Created separately for each sample by the B03 benchmark harness.
PULSE_ES256_REPRODUCTION_ROOT	Adds an independent source-identical raw guest artifact and Rust metadata comparison to G5.	Unset; the G5 seal still performs its required local maintainer reconstruction.
PULSE_ES256_REPRODUCTION_ARCHIVE	Records the byte size and hash of the independently supplied ES256 reproduction archive.	Unset; no external archive identity is recorded.
PULSE_RUST_CARGO	Selects the Cargo executable used to reproduce the sealed first-party Rust guest proof.	No explicit path; discover cargo on PATH.
PULSE_RUSTC	Selects the Rust compiler used to reproduce the sealed first-party Rust guest proof.	No explicit path; discover rustc on PATH.
PULSEWASM_MEM03_BASE	Selects an explicit baseline generator revision for paired semantic and allocator measurements.	Merged GEN01 commit 8a6f2ff.

PULSE_B02_BASELINE_ROOT

Identifies a restored pre-B02 checkout for alternating baseline/candidate compiler measurements.

Property	Contract
Value	Directory path
Default	Unset; the manual B02 benchmark requires an explicit baseline checkout.
Precedence	Selects the baseline; the candidate is the checkout containing the harness.
Consumer	Manual B02 terminal Router body cost proof.
Secret safety	Not a secret. The harness executes compiler code from this checkout; use trusted source.
Stability	Contributor/test-only; outside the application compatibility contract.
Source owners	wasm/test/runtime/compiler-efficiency/b02-handler-cost.cjs

PULSE_B02_USAGE_DIR

Passes the isolated measurement directory to the temporary compiler preload collector.

Property	Contract
Value	Directory path
Default	Created separately for each sample by the B02 benchmark harness.
Precedence	The harness supplies and overrides this value in each child process.
Consumer	B02 AssemblyScript child-process RSS collector.
Secret safety	Not a secret. Contains temporary process IDs and peak RSS measurements.
Stability	Harness-internal test control; not a user or application setting.
Source owners	wasm/test/runtime/compiler-efficiency/b02-handler-cost.cjs

PULSE_B03_USAGE_DIR

Keeps compiler-process RSS separate from the planning worker and cold execution measurements.

Property	Contract
Value	Directory path
Default	Created separately for each sample by the B03 benchmark harness.
Precedence	The harness supplies and overrides this value in each compiler child process.
Consumer	B03 AssemblyScript child-process RSS collector.
Secret safety	Not a secret. Contains temporary process IDs and peak RSS measurements.
Stability	Harness-internal test control; not a user or application setting.
Source owners	wasm/test/runtime/compiler-efficiency/b03-handler-functions.cjs

PULSE_ES256_REPRODUCTION_ROOT

Adds an independent source-identical raw guest artifact and Rust metadata comparison to G5.

Property	Contract
Value	Directory path
Default	Unset; the G5 seal still performs its required local maintainer reconstruction.
Precedence	The --reproduction-root G5 option wins, then PULSE_ES256_REPRODUCTION_ROOT.
Consumer	Optional independent clean-container output comparison in the ES256 G5 seal.
Secret safety	Not a secret. The directory must contain only the public verifier source and build output.
Stability	Contributor/test-only proof reproduction control.
Source owners	wasm/test/jwt/assert-jwt-es256-final-seal.cjs

PULSE_ES256_REPRODUCTION_ARCHIVE

Records the byte size and hash of the independently supplied ES256 reproduction archive.

Property	Contract
Value	File path
Default	Unset; no external archive identity is recorded.
Precedence	The --reproduction-archive G5 option wins, then PULSE_ES256_REPRODUCTION_ARCHIVE.
Consumer	Optional independent clean-container archive identity in the ES256 G5 seal.
Secret safety	Not a secret. The archive must contain only the public verifier source and build output.
Stability	Contributor/test-only proof reproduction control.
Source owners	wasm/test/jwt/assert-jwt-es256-final-seal.cjs

PULSE_RUST_CARGO

Selects the Cargo executable used to reproduce the sealed first-party Rust guest proof.

Property	Contract
Value	Absolute or relative executable path
Default	No explicit path; discover cargo on PATH.
Precedence	PULSE_RUST_CARGO overrides PATH discovery in the guest-link proof harnesses.
Consumer	Phase A guest-link Rust fixture compilation and toolchain recording.
Secret safety	Not a secret. Do not point it at an untrusted executable.
Stability	Contributor/test-only proof reproduction control.
Source owners	wasm/test/guest-link/assert-scalar-link-control.cjs, wasm/test/guest-link/assert-memory-matrix.cjs, wasm/test/guest-link/assert-final-artifact-reality.cjs

PULSE_RUSTC

Selects the Rust compiler used to reproduce the sealed first-party Rust guest proof.

Property	Contract
Value	Absolute or relative executable path
Default	No explicit path; discover rustc on PATH.
Precedence	PULSE_RUSTC overrides PATH discovery in the guest-link proof harnesses.
Consumer	Phase A guest-link Rust fixture compilation and toolchain recording.
Secret safety	Not a secret. Do not point it at an untrusted executable.
Stability	Contributor/test-only proof reproduction control.
Source owners	wasm/test/guest-link/assert-scalar-link-control.cjs, wasm/test/guest-link/assert-memory-matrix.cjs, wasm/test/guest-link/assert-final-artifact-reality.cjs

PULSEWASM_MEM03_BASE

Selects an explicit baseline generator revision for paired semantic and allocator measurements.

Property	Contract
Value	Git commit or ref
Default	Merged GEN01 commit 8a6f2ff.
Precedence	When set, selects the baseline generator source loaded from git; all other dependencies come from the candidate checkout.
Consumer	Manual MEM03 Fastly schema encode materialization proof.
Secret safety	Not a secret. Use only a trusted baseline generator revision for the proof.
Stability	Contributor/test-only proof reproduction control.
Source owners	wasm/test/runtime/compiler-efficiency/mem03-encode-materialization.cjs

Provider test evidence and fixtures

Variable	Purpose	Default
PULSE_FASTLY_REALITY_EVIDENCE	Selects the output path for the real Fastly host evidence report.	Unset; the reality gate prints its normal test result without retaining a proof file.
PULSE_FOUR_MODE_EVIDENCE	Selects the output path for the four-mode conformance evidence report.	wasm/.test-results/four-mode-conformance.json.
PULSE_FAKE_FASTLY_CAPTURE	Tells the fake Fastly CLI where to write its captured invocation.	Unset.
PULSE_FAKE_VICEROY_CAPTURE	Tells the fake Viceroy launcher where to write its captured invocation.	Unset.

PULSE_FASTLY_REALITY_EVIDENCE

Selects the output path for the real Fastly host evidence report.

Property	Contract
Value	File path
Default	Unset; the reality gate prints its normal test result without retaining a proof file.
Precedence	When set, the real-host gate writes its redacted machine-readable proof to this path.
Consumer	Fastly CLI-managed or direct-Viceroy local Compute reality gate.
Secret safety	Not a secret. The proof intentionally excludes secret values and authorization plaintext.
Stability	Contributor/release tooling override.
Source owners	wasm/test/provider/assert-fastly-compute-reality.cjs

PULSE_FOUR_MODE_EVIDENCE

Selects the output path for the four-mode conformance evidence report.

Property	Contract
Value	File path
Default	wasm/.test-results/four-mode-conformance.json.
Precedence	When set, the four-mode conformance suite writes its revision-bound proof to this path.
Consumer	Node/Fastly Native/JavaScript conformance evidence.
Secret safety	Not a secret. The proof records target identities, support hashes, and test outcomes without application secrets.
Stability	Contributor/release tooling override.
Source owners	wasm/test/contracts/assert-four-mode-conformance.cjs

PULSE_FAKE_FASTLY_CAPTURE

Tells the fake Fastly CLI where to write its captured invocation.

Property	Contract
Value	File path
Default	Unset.
Precedence	Used only by the fake Fastly CLI fixture when present.
Consumer	Fastly CLI surface test fixture.
Secret safety	Not a secret. The file records test arguments and paths.
Stability	Fixture-only; not a public tooling setting.
Source owners	wasm/test/provider/assert-fastly-cli-gate-surface.cjs

PULSE_FAKE_VICEROY_CAPTURE

Tells the fake Viceroy launcher where to write its captured invocation.

Property	Contract
Value	File path
Default	Unset.
Precedence	Used only by the fake direct-Viceroy fixture when present.
Consumer	Fastly local-engine surface test fixture.
Secret safety	Not a secret. The file records test arguments and paths.
Stability	Fixture-only; not a public tooling setting.
Source owners	wasm/test/provider/assert-fastly-cli-gate-surface.cjs

Standard process variables

Pulse also observes normal operating-system inputs such as PATH while locating external tools. Standard process variables are not renamed as Pulse configuration and are outside this catalog.