From 8ab1f85556ba9c16eb49b9c88761dba693858080 Mon Sep 17 00:00:00 2001 From: mrwulf Date: Mon, 17 Aug 2026 11:01:05 +0200 Subject: [PATCH] site polish: the last four coherence fixes (de-numbered claim binding, witness in plain words, R5 out of prose, legend without boundary-exact) --- provider/src/pacta_provider/webdocs.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/provider/src/pacta_provider/webdocs.py b/provider/src/pacta_provider/webdocs.py index 2026252..f344337 100644 --- a/provider/src/pacta_provider/webdocs.py +++ b/provider/src/pacta_provider/webdocs.py @@ -302,7 +302,7 @@ picture is computed from the live log at page render — the leaf hashes, nodes, signature are the real ones:

{tree_svg}

-verified attestation (all certificates proven, axiom cones boundary-exact) +verified attestation — every certificate proven, every assumption list exactly as declared historical audit-failure attestation — kept forever; an append-only ledger does not erase its bad day (leaves 0–3: an early audit round that failed; leaves 4–7 re-attest the same four libraries cleanly)

The library that signs the log is itself an entry in the log — what that entry proves is its verify path (no signing code is proven, here or anywhere) — and it checks its own entry before signing. In detail: before signing this @@ -332,13 +332,13 @@ identical. which observed axiom cones (the exact set of assumptions each proof ultimately rests on), what machine protection — signed by the provider. table below, or mirror entries/ 3<library>.receipt.json -The proof of inclusion. Binds artifact 2 into the signed tree: +The proof of inclusion. Binds the claim into the signed tree: leaf index, sibling hashes, the Signed Tree Head (STH). About forty lines of ordinary Python verify it; the mirror’s verify.py contains exactly that core, wrapped in fail-closed safety checks (stdlib hashing; signature checks shell out to the openssl binary). table below, or mirror receipts/ +the full mirror clone -Maximal benefit: become a witness. Every leaf + every signed head +Maximal benefit: hold the complete history yourself (rung 1 of the ladder). Every leaf + every signed head ever issued + verify.py (Python stdlib + the openssl binary for signatures; fails closed without them). python3 verify.py --all recomputes the entire tree and every historical head — you then hold a retained view that can @@ -362,7 +362,7 @@ view. proofs cover Rust source; clone the attested commit (the commit id identifies the committed git tree — not external dependencies, toolchain downloads, or generated artifacts) and build it yourself — compiler and build are declared trusted base (assumed, not proven) -until the reproducible-builds program lands and retires risk class R5. Every attestation carries its full +until the reproducible-builds program lands. Every attestation carries its full residual-risk list — the enumerated assumptions inside its attestation.json. Honesty about the boundary is the product.

You hold the ruler