betrusted-ed25519-verified/verification
mrwulf 15ef99fd50 verification: separate the two accounting questions (round-9 review, Claude N2)
Phase 2c-accounting asked one question with a name-keyed identity: is every
kernel constant covered by the corpus inventory or the instrument surface?
Keying on the name alone conflates that with a second, different question --
does the kernel attribute a declaration to the same module the walk does?

Pair-keying the identity (module|name) was the obvious fix and is wrong: it
fails on legitimate per-module duplicates. Lean materialises equation lemmas
lazily, so each module forcing an unfold gets its own copy in its object file
(GPT-5.6 round-7 F8). Those records differ from the walk only in module
attribution, and every one of their names is accounted for elsewhere.

So the block now asks both questions and reports them separately: coverage
stays name-keyed and fail-closed, module attribution is counted and printed
rather than suppressed. A divergence is now visible instead of either passing
silently or failing for the wrong reason.

The accumulator declines the second question and says why: its INV rows carry
no module column (4 fields), so its records cannot be compared as pairs at
all. Gating on the field count rather than on the row tag -- the shape of the
record, not the spelling of its label. Adding that column is the open
follow-up; until then the identity there is name-keyed only, which is weaker
and now says so.

Certified by the round-14 sweep: 50/50 green across all six repositories,
both buttons and every self-test.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-04 03:17:05 +02:00
..
gen correspondence: a named section is not a namespace; an extra axiom is a failure 2026-08-02 21:29:54 +02:00
Proofs audit: bind the scalar statements, and make the accounting identity mean audit 2026-08-03 12:15:26 +02:00
AUDIT-MANIFEST.txt verification: bind the statements, the specifications, and the model (P1-a) 2026-07-29 00:38:22 +02:00
check-scalar.sh audit: bind the scalar statements, and make the accounting identity mean audit 2026-08-03 12:15:26 +02:00
check.sh verification: separate the two accounting questions (round-9 review, Claude N2) 2026-08-04 03:17:05 +02:00
CurveField.llbc PHASE 2 COMPLETE ON BETRUSTED: THE FULL POINT-LEVEL LIFT 2026-07-06 01:53:39 +02:00
CurveSig.llbc PHASE 2 COMPLETE ON BETRUSTED: THE FULL POINT-LEVEL LIFT 2026-07-06 01:53:39 +02:00
driver-allowlist.txt audit: bind the scalar statements, and make the accounting identity mean audit 2026-08-03 12:15:26 +02:00
extract.sh P2-c: classify and pin the extraction boundary 2026-07-31 17:53:31 +02:00
GEN-MODEL.sha256 correspondence: a named section is not a namespace; an extra axiom is a failure 2026-08-02 21:29:54 +02:00
HARNESS.sha256 verification: separate the two accounting questions (round-9 review, Claude N2) 2026-08-04 03:17:05 +02:00
inventory-allowlist-scalar.txt audit: bind the scalar statements, and make the accounting identity mean audit 2026-08-03 12:15:26 +02:00
inventory-allowlist.txt verification: pin the whole declaration surface (P1-b) 2026-07-30 01:20:20 +02:00
inventory_gate.sh audit: bind the scalar statements, and make the accounting identity mean audit 2026-08-03 12:15:26 +02:00
lean-guard Coherence pass 3: post-apex accuracy sweep, hygiene, guard ladder 2026-07-05 11:48:20 +02:00
lift-guard.sh lift-guard: eleven more classes, two of them regressions I introduced 2026-08-03 21:03:35 +02:00
model-correspondence.py correspondence: a named section is not a namespace; an extra axiom is a failure 2026-08-02 21:29:54 +02:00
MODEL-CORRESPONDENCE.txt correspondence: a named section is not a namespace; an extra axiom is a failure 2026-08-02 21:29:54 +02:00
SCALAR-AUDIT-MANIFEST.txt audit: bind the scalar statements, and make the accounting identity mean audit 2026-08-03 12:15:26 +02:00
selftest-auditonly.sh verification: --audit-only mode, and the guard that keeps it from becoming evidence (T1) 2026-07-30 19:16:21 +02:00
selftest-axgate.sh verification: derive lift dependencies instead of hand-keeping them 2026-08-02 13:07:28 +02:00
selftest-correspondence.sh verification: derive lift dependencies instead of hand-keeping them 2026-08-02 13:07:28 +02:00
selftest-harness.sh verification: derive lift dependencies instead of hand-keeping them 2026-08-02 13:07:28 +02:00
selftest-inventory.sh verification: pin the whole declaration surface (P1-b) 2026-07-30 01:20:20 +02:00
selftest-scalar-statements.sh audit: bind the scalar statements, and make the accounting identity mean audit 2026-08-03 12:15:26 +02:00
selftest-shapes.sh verification: derive lift dependencies instead of hand-keeping them 2026-08-02 13:07:28 +02:00
selftest-statements.sh verification: derive lift dependencies instead of hand-keeping them 2026-08-02 13:07:28 +02:00
selftest-tiers.sh verification: derive lift dependencies instead of hand-keeping them 2026-08-02 13:07:28 +02:00