mrwulf 9972ab4198 Review round 3: environment-derived audit surface, self-contained kit ... Round-2 external reviews (GPT-5.6 + second Claude) converged on the coverage gate being evadable (H1/NEW-1); GPT additionally proved the kit's fidelity target could not run (H2) and the namespace-collision attack that defeats any source-regex fix. This round adopts GPT's required correction in full: - Proofs/Inventory.lean: declaration inventory read from the compiled Lean environment — every constant of every corpus module, fully qualified, unfiltered (compiler auxiliaries and _private mangles pinned too), with kind and axiom cone; own cone walker cross-checked in-process against core collectAxioms (hard error on divergence). - verification/inventory-allowlist.txt: all 218 constants pinned. - inventory_gate.sh: fail-closed diff both directions (UNCLASSIFIED / STALE), INV-COUNT truncation guard, exactly-one-axiom invariant. - check.sh Phase 3b rewritten around the gate + manifest⇔inventory drift checks + CONES⇔inventory cone cross-check (two independent computations must agree). EXCLUDE table gone (sha256/Bytes are ordinary audited entries now). - selftest_audit.sh: 9 adversarial cases against the production gate (attributed/indented/private/instance, namespace collision, smuggled axiom, deleted decl, unmanifested Proofs/ and gen/ modules) + positive control — all defeated (GPT release condition 2). - M1: recursive orphan-olean guard (caught a stray dev artifact on its first run), gen/ dead-file check, corpus-wide single-axiom pin. - L1/NEW-2: acceptIncl_sound drops the redundant hm (derived from hacc.1); cone unchanged. - M2/M3: STATEMENT-MAP counts 230,271/230,016; non-vacuity guard wording narrowed to what the guards actually certify. - README layer table: stale L4/pin-store rows fixed (missed by both round-2 reviewers AND the round-2 revision — found in self-review). - KNOWN-GAPS 12 (audit-gate lineage + residual limits), 13 (round-2 kit target not self-contained); gap 2 count fixed. - RESPONSE-TO-REVIEWERS.md: round-3 disposition of every finding. Kit round 3 additionally ships the complete stdlib-only import closure of pacta.transparency (content-addressed vs pacta 3d81d53), the clean-extraction fidelity transcript (exit 0, 230,271+230,016, zero mismatches), the ATTESTATION GREEN check.sh transcript, and the self-test transcript. The live LTL remains untouched (12 leaves, root bcd15f9d…); attestation stays blocked pending ePrint decision + author review + explicit operator order. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-12 00:32:18 +02:00
..
fidelity	revision round 1: address both external reviews (GPT-5.6 + second Claude)	2026-07-11 22:53:47 +02:00
gen/LTLAcc	revision round 1: address both external reviews (GPT-5.6 + second Claude)	2026-07-11 22:53:47 +02:00
Proofs	Review round 3: environment-derived audit surface, self-contained kit	2026-07-12 00:32:18 +02:00
check.sh	Review round 3: environment-derived audit surface, self-contained kit	2026-07-12 00:32:18 +02:00
inventory-allowlist.txt	Review round 3: environment-derived audit surface, self-contained kit	2026-07-12 00:32:18 +02:00
inventory_gate.sh	Review round 3: environment-derived audit surface, self-contained kit	2026-07-12 00:32:18 +02:00
lean-guard	L1+L2: hashing shapes, domain separation, MTH/Root/ConsRec with termination	2026-07-10 23:58:00 +02:00
selftest_audit.sh	Review round 3: environment-derived audit surface, self-contained kit	2026-07-12 00:32:18 +02:00