saymrwulf/lean-transparency-log
1
0
Fork 0
mirror of https://github.com/saymrwulf/lean-transparency-log.git synced 2026-09-03 19:53:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
Git-published Lean formal-verification transparency log: attestations, Merkle inclusion receipts, signed tree heads (dogfood-signed by the proof-attested Ed25519 library), and a stdlib-only standalone verifier.
4 commits 1 branch 0 tags 275 KiB
Python 100%
Find a file
mrwulf 1726e8ec01 log update: leaf 12 - attestation of ltl-accumulator-verified@172a1d0 (mechanized-model scope; KNOWN-GAPS 14/15) 
The log now carries kernel-checked proofs of its own accumulator
machinery. Entry 13 attests the ltl-accumulator-verified corpus at
freeze 172a1d0: 61 certificates, all proven with exact axiom cones,
single opaque-SHA-256 axiom boundary. Scope (in the leaf): the
mechanized recursive model is kernel-checked; deployed-verifier
correspondence is finite differential testing; the deployed
consistency verifier is not extensionally equal to the model and
relies on an unmechanized authentic-size/root invariant (gaps 14/15).
tree 12 -> 13, root 3488a2d0; head signed verified-dalek-serial.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-16 20:07:49 +02:00
entries log update: leaf 12 - attestation of ltl-accumulator-verified@172a1d0 (mechanized-model scope; KNOWN-GAPS 14/15) 2026-07-16 20:07:49 +02:00
receipts log update: leaf 12 - attestation of ltl-accumulator-verified@172a1d0 (mechanized-model scope; KNOWN-GAPS 14/15) 2026-07-16 20:07:49 +02:00
latest-sth.json log update: leaf 12 - attestation of ltl-accumulator-verified@172a1d0 (mechanized-model scope; KNOWN-GAPS 14/15) 2026-07-16 20:07:49 +02:00
log-metadata.json Genesis publication: 8 leaves, 4 attested libraries, dogfood-signed head 2026-07-06 16:02:23 +02:00
provider.ed25519.pub Genesis publication: 8 leaves, 4 attested libraries, dogfood-signed head 2026-07-06 16:02:23 +02:00
README.md Point the online-service URL at ltl.zkdefi.org 2026-07-06 19:15:03 +02:00
sth-history.jsonl log update: leaf 12 - attestation of ltl-accumulator-verified@172a1d0 (mechanized-model scope; KNOWN-GAPS 14/15) 2026-07-16 20:07:49 +02:00
verify.py Genesis publication: 8 leaves, 4 attested libraries, dogfood-signed head 2026-07-06 16:02:23 +02:00

README.md

Lean Transparency Log — published mirror

This repository is the git-published face of a transparency log of formal-verification attestations: signed statements that the Lean 4 proofs of specific cryptographic Rust libraries, at specific git commits, re-check with exactly their documented assumptions.

Layout:

Path Content
entries/NNNNNN.json one log leaf per file, append-only (git history mirrors log history)
entries/<component>.attestation.json the newest attestation per library, for convenience
receipts/<component>.receipt.json inclusion proof binding that attestation to the latest signed head
sth-history.jsonl every Signed Tree Head ever issued — the witness channel: all cloners see the same heads
latest-sth.json the current head
provider.ed25519.pub the provider's public key (the sole trust anchor)
verify.py standalone verifier, Python standard library only

Verify everything locally, no installation:

python3 verify.py --all
python3 verify.py --receipt receipts/dalek-ed25519-verified.receipt.json

The online service (same data, live endpoints + customer documentation): https://ltl.zkdefi.org

The provider tooling, agent tooling, and course materials: https://github.com/saymrwulf/proof-aware-crypto-tooling-agent

Honesty notes, always in force: attestations cover Rust source at a pinned commit (clone it — the git hash is the content hash — and build it yourself; compilers are declared trusted base). The log deliberately retains early leaves recording a failed audit run: an append-only trust ledger keeps its history. Tree heads are signed by the merkleized, proof-attested Ed25519 library itself, and each signature embeds the provider's own Merkle self-check of that library's leaf.