mirror of
https://github.com/saymrwulf/ltl-accumulator-verified.git
synced 2026-09-04 20:03:44 +00:00
mrwulf
8d67e9519c
Accumulator pyramid layers 1-2, mechanizing paper SS5.3/SS6 groundwork: - gen/LTLAcc/HashExternal.lean: the single sanctioned axiom, opaque sha256 (no properties assumed - the soundness theorems downstream are constructive collision extractors). - Proofs/Basic.lean: hleaf/hnode (0x00/0x01 domain stamps); Lemma 1 (domsep) proven AXIOM-FREE; kbelow (largest power of two below n) with pos/lt/le-two bound lemmas; MTH, Root (Option = rejection), ConsRec (four cases, b-flag, pinned anchor) - all with kernel-checked termination via the kbelow bounds. - check.sh: estate discipline (stub audit, axiom-smuggling gate, lean-guard compilation, boundary-exact per-certificate cone audit). All green; observed cones pinned exactly. Zero contact with the live LTL: no appends, no server, accumulator frozen at 12 leaves throughout this project. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
12 lines
543 B
Text
12 lines
543 B
Text
/- The single sanctioned axiom site of this corpus (mirrors the role of
|
|
gen/ in the *-ed25519-verified repos): SHA-256 as an opaque function.
|
|
No properties are assumed of it — in particular NOT collision
|
|
resistance. The soundness theorems downstream are constructive: they
|
|
EXHIBIT two distinct preimages with equal image. Believing such a
|
|
pair cannot be found is the reader's interpretation step, exactly as
|
|
documented in the paper (§6, Remark 1). -/
|
|
namespace LTLAcc
|
|
|
|
axiom sha256 : List UInt8 → List UInt8
|
|
|
|
end LTLAcc
|