anza-ed25519-verified/verification
mrwulf d4497bf555 P2-a': can a declaration hide from the inventory walker?
Phase 2c exists because a source-regex enumerator proved evadable in
ltl-accumulator-verified: attributed, private and `instance` declarations
and a nested-namespace basename collision all slipped past it. The fix was
to stop reading source text and ask the Lean environment, and that fix was
ported here. But a fix ported is not a fix tested. selftest-inventory.sh
proves the GATE reacts to a difference; it feeds synthetic observations and
never runs the walker. Nothing here had ever asked whether the WALKER SEES
a declaration written in an evasive shape.

selftest-shapes.sh adds all four shapes to an audited module, recompiles it,
runs the real Phase 2c, and requires each one to be NAMED in the
UNCLASSIFIED list. Asserting that the gate merely failed would not do: one
shape surfacing fails the run while the other three ride along unseen. All
four forks report all four. Negative-tested by removing the injection — the
run then reports the walker blind and fails.

The victim module is derived from each repo's own manifest, not named: the
forks do not share a corpus (dalek/anza attack Proofs.Basic, risc0/betrusted
Proofs.DecompressMain), and a hard-coded name would have silently found
nothing on half of them. It must be manifested, must not be an inventory or
audit driver, and must be imported by no other manifest module.

Two notes for whoever edits this next. When re-deriving a leaf module, the
inventory drivers must be excluded from the set of IMPORTERS as well as from
the candidates: they import the whole corpus, so leaving them in makes every
module look imported, finds no leaf, and the test silently has no victim at
all. And a lift of Phase 2c needs SCALAR_SH/SCALAR_MANIFEST alongside
PROOFS, or the coverage check dies on an unbound variable.

New executable pinned in HARNESS.sha256. Certified by a full sweep: both
buttons, all four forks, purged trees, machine otherwise idle. 8/8 green.
2026-07-31 11:56:05 +02:00
..
gen/CurveField Coherence pass 4 (the closing pass): 4-tier apex documentation + hygiene 2026-07-06 04:01:17 +02:00
Proofs verification: close the two-button seam and level up the scalar button (P0-b) 2026-07-30 12:30:28 +02:00
AUDIT-MANIFEST.txt verification: bind the statements, the specifications, and the model (P1-a) 2026-07-29 00:38:19 +02:00
check-scalar.sh verification: close the two-button seam and level up the scalar button (P0-b) 2026-07-30 12:30:28 +02:00
check.sh verification: build hygiene, and the hidden dependency it exposed (P0-a) 2026-07-30 22:54:03 +02:00
CurveField.llbc PHASE 2 COMPLETE ON ANZA: THE FULL POINT-LEVEL LIFT 2026-07-06 01:07:14 +02:00
extract.sh PHASE 2 COMPLETE ON ANZA: THE FULL POINT-LEVEL LIFT 2026-07-06 01:07:14 +02:00
GEN-MODEL.sha256 verification: bind the statements, the specifications, and the model (P1-a) 2026-07-29 00:38:19 +02:00
HARNESS.sha256 P2-a': can a declaration hide from the inventory walker? 2026-07-31 11:56:05 +02:00
inventory-allowlist-scalar.txt verification: close the two-button seam and level up the scalar button (P0-b) 2026-07-30 12:30:28 +02:00
inventory-allowlist.txt verification: pin the whole declaration surface (P1-b) 2026-07-30 01:20:17 +02:00
inventory_gate.sh verification: pin the whole declaration surface (P1-b) 2026-07-30 01:20:17 +02:00
lean-guard Coherence pass 3: post-apex accuracy sweep, hygiene, guard ladder 2026-07-05 11:48:18 +02:00
selftest-auditonly.sh verification: --audit-only mode, and the guard that keeps it from becoming evidence (T1) 2026-07-30 19:16:18 +02:00
selftest-axgate.sh verification: --audit-only mode, and the guard that keeps it from becoming evidence (T1) 2026-07-30 19:16:18 +02:00
selftest-harness.sh verification: pin the harness, the audit drivers and the policy files (P1-c) 2026-07-29 20:12:58 +02:00
selftest-inventory.sh verification: pin the whole declaration surface (P1-b) 2026-07-30 01:20:17 +02:00
selftest-shapes.sh P2-a': can a declaration hide from the inventory walker? 2026-07-31 11:56:05 +02:00
selftest-statements.sh verification: --audit-only mode, and the guard that keeps it from becoming evidence (T1) 2026-07-30 19:16:18 +02:00
selftest-tiers.sh P2-a: attack the arithmetic/apex tier boundary itself 2026-07-31 02:39:34 +02:00