2026-07-03 08:51:03 +00:00
|
|
|
from pacta.config import RepoConfig, load_config
|
|
|
|
|
from pacta.profiles import get_profile
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_ed25519_profile_defaults():
|
|
|
|
|
profile = get_profile("ed25519")
|
|
|
|
|
assert "Proofs.FieldMain" in profile.axiom_imports
|
|
|
|
|
assert "CurveFieldProofs.fieldImplementation" in profile.default_certificates
|
Estate sync: boundary-axiom vocabulary + the four-tier apex reality (R4)
The verified corpus completed its phase 2 on 2026-07-06: every ed25519
fork now carries FOUR button-enforced apex tiers up to the full lift
(accept <=> decompress(R) = [k](-A)+[s]B as points), the complete scalar
layer, and the constructive encoding/decoding chain. pacta was calibrated
to the pre-apex corpus and - worse - had no vocabulary for
boundary-audited certificates: its axiom audit knew only "clean = exactly
the three standard axioms", so the apex tiers would have scored dirty.
New vocabulary:
- Profile.certificate_axioms: per-certificate ALLOWED axiom sets;
expected_axioms_for(cert) resolves each certificate's own boundary.
- RepoConfig.apex_boundary: a simple per-fork key (dalek-wrappers /
hash3 / anza) expanded by the ed25519 profile into the exact
per-tier allowed sets. AUTHORITY NOTE in profiles/ed25519.py: each
repo's check.sh Phase 3b is the enforcement point; if the button and
this table disagree, the button wins.
- run_axiom_audit compares each certificate against ITS allowed set;
deviation in EITHER direction (extra axiom or missing boundary
axiom) is dirty.
New risk reality:
- R4 is now reachable: full four-tier apex + constructive chain +
scalar arithmetic, all proven with cones pinned to their documented
boundaries. R4 always carries explicit residual blockers (SHA-512
oracle, hypothesis-parametric wire parses, translation faithfulness,
no side-channel/build assurance - those gate R5).
- R3 unchanged (arithmetic pair) and now explains exactly which apex
certificates are missing for R4.
Attestation trust model hardened:
- The provider is trusted for its OBSERVATION, never its VERDICT:
axiom_status is re-derived locally from observed_axioms against the
agent's own boundary policy. A provider that labels a dirty cone
"clean" gains nothing; "proven" with no observed axioms is
"unverifiable".
- Partial attestations degrade instead of being rejected: uncovered
certificates stay unproven and the score caps accordingly (an
arithmetic-only attestation still authorizes an R3 library capsule,
never a wallet).
Also: scripts/mini_pytest.py - a dependency-free test runner (tmp_path,
raises, monkeypatch, capsys) for hosts without pytest; examples
regenerated FROM the tool (dalek/anza fixtures now R4, 16 certs; new
full four-tier attestation example); tests updated + new
tests/test_boundaries.py (lying-provider, missing-boundary-axiom,
partial-coverage cases). 40/40 tests green.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-06 08:04:43 +00:00
|
|
|
# Since phase 2 landed in the corpus, EdDSA verification IS proven; the
|
|
|
|
|
# honest exclusions are the hash oracle, the parse hypotheses, and signing.
|
|
|
|
|
assert any("SHA-512" in exclusion for exclusion in profile.exclusions)
|
|
|
|
|
assert any("hypothesis-parametric" in exclusion for exclusion in profile.exclusions)
|
|
|
|
|
assert any("Signing" in exclusion for exclusion in profile.exclusions)
|
|
|
|
|
assert "CurveFieldProofs.verify_accepts_iff_decompress" in profile.default_certificates
|
|
|
|
|
assert "CurveFieldProofs.verify_accepts_iff_decompress" in profile.r4_requirements
|
2026-07-03 08:51:03 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_repo_config_merges_backend_warning():
|
|
|
|
|
repo = RepoConfig(
|
|
|
|
|
name="risc0-ed25519-verified",
|
|
|
|
|
kind="ed25519",
|
|
|
|
|
backend_warning="pure Rust path only; do not treat zkVM accelerator/syscall path as verified",
|
|
|
|
|
)
|
|
|
|
|
profile = get_profile("ed25519", repo)
|
|
|
|
|
assert any("zkVM" in item for item in profile.deployment_constraints)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
def test_load_examples_config():
|
|
|
|
|
config = load_config("examples/repos.yaml")
|
|
|
|
|
assert config.repo_named("dalek-ed25519-verified").kind == "ed25519"
|
2026-07-03 09:24:13 +00:00
|
|
|
assert config.repo_named("dalek-ed25519-verified").env_script == "~/aeneas-toolchain/env.sh"
|
2026-07-03 08:51:03 +00:00
|
|
|
assert config.repo_named("pasta-pallas-verified").kind == "pasta_pallas"
|