mirror of
https://github.com/saymrwulf/fips205-slhdsa-verified.git
synced 2026-09-04 20:03:44 +00:00
Round-8 estate review (GPT-5.6). Their central complaint across the estate was
that documents promise more than code checks. Here the drift ran the other way
as well: two phases were added this week and the documents described neither,
so the repository was UNDER-claiming while its own header still listed four
phases.
check.sh header now lists Phase 0d and Phase 3b, each with the reason it
exists rather than only what it does
README "binds four things" -> six, and says plainly that four are
checked inside Lean by Proofs/Audit.lean while the last two
deliberately do NOT rely on that file. "four model files"
-> five (the template is pinned now). The Phase 3b bullet
carries its demonstration: axiom planted after the audit
command, Phase 3 passed it, Phase 3b rejected it
TRUSTED-BASE 3 extraction reproducibility split honestly in two. The
committed .llbc means the LLBC -> Lean half re-runs on
demand and did reproduce Types.lean and Funs.lean
byte-identically. The Rust -> LLBC half still needs charon
and still rests on the author alone. "Do not read the first
half as evidence for the second."
TRUSTED-BASE 3b NEW, and it is a limit rather than a capability: Phase 0d
is TEXTUAL. It does not ask Lean how names resolve — the
ed25519 repositories have a semantic phase for that and
this one does not. All eleven externals here happen to be
answered by the model itself, the narrow case where the
textual and semantic answers coincide; that is a property
of today's corpus, not a guarantee of the check.
RECORDED-RUN.md is deliberately untouched again: its "all four model files" and
its `797b4ef` pin describe the state at the run it records. A record edited to
match today is not a corrected record.
Button re-run after every edit: green, 11 externals, 298 declarations across 9
modules, none an axiom.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| gen/SlhVerify | ||
| Proofs | ||
| AUDIT-MANIFEST.txt | ||
| check-selftest.sh | ||
| check.sh | ||
| drill.sh | ||
| extract.sh | ||
| lean-guard | ||
| model-correspondence.py | ||
| MODEL-CORRESPONDENCE.txt | ||
| PROVENANCE.json | ||
| RECORDED-RUN.md | ||