From f1a55721e5453c0fc3ef3b61c3c7fa3d7ee88857 Mon Sep 17 00:00:00 2001 From: mrwulf Date: Wed, 29 Jul 2026 20:33:09 +0200 Subject: [PATCH] ESTATE: the SLH-DSA rows said zero certificates; there are eleven The estate document had SLH-DSA at 'zero certificates, check.sh non-green by design' since 2026-07-22, through the entire eight-round review campaign and the completion of the verify-path pyramid. A hand-maintained document describing repositories it never reads will go stale exactly this way. The durable fix is formal-verification-control/tools/estate-progress.py, which derives its numbers from the repositories at run time and refuses to report progress while its ledger contradicts them. These rows are corrected by hand only because this file is prose, not a dashboard. Co-Authored-By: Claude Opus 4.8 --- ESTATE.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/ESTATE.md b/ESTATE.md index cf9fb49..3aa6fe4 100644 --- a/ESTATE.md +++ b/ESTATE.md @@ -9,7 +9,7 @@ machinery hub and the only repo that changes freely. State snapshot (2026-07-22): log **13 leaves**, root `3488a2d0…`, key fingerprint `874c8a00…`, paper **v0.9 camera-ready (23 pp)**, five -attested components, one campaign open (SLH-DSA — **zero +attested components, one campaign open (SLH-DSA — **eleven certificates**), pacta suite 144 green. ```mermaid @@ -28,7 +28,7 @@ flowchart LR r["risc0-ed25519-verified
16 certs · leaf 10"] b["betrusted-ed25519-verified
16 certs · leaf 11"] p["pasta-pallas-verified
field layer only · NOT attested"] - f["fips205-slhdsa-verified
campaign in progress · 0 certs · NOT attested"] + f["fips205-slhdsa-verified
11 certs proven · reviewer attest-with-conditions · NOT in the log"] c["ltl-accumulator-verified
61 certs · entry-13 subject · frozen 172a1d0"] end subgraph M["MACHINERY — pacta + operator-held"] @@ -122,7 +122,7 @@ deployed verifier; see the corpus KNOWN-GAPS ledger). | `fips205-source` | upstream | verbatim snapshot of `integritychain/fips205` (pure-Rust FIPS 205 / SLH-DSA); upstream pin `30bac08`, snapshot head `5dca0db` — single deviation: upstream CI workflows stripped, documented in-commit | pinned; moves only for transparent, individually-justified Aeneas-compat patches (nothing proposed upstream) | | `dalek-` / `anza-` / `risc0-` / `betrusted-ed25519-verified` | subject | Rust source + Lean proofs; 16 certs each; attested (leaves 8–11, generations at 0–7) | frozen at attested commits; branch moves only for docs | | `pasta-pallas-verified` | subject | field layer proven; curve layer pending; **not attested** | changes freely | -| `fips205-slhdsa-verified` | subject | SLH-DSA (FIPS 205) verify-path campaign, parameter set SLH-DSA-SHA2-128s; **campaign in progress — zero certificates, `check.sh` non-green by design**; not attested | changes freely — campaign | +| `fips205-slhdsa-verified` | subject | SLH-DSA (FIPS 205) verify-path campaign, parameter set SLH-DSA-SHA2-128s; **11 certificates proven, `check.sh` green with an 18-attack self-test, outside-reviewer attest-with-conditions**; not appended to the log | changes freely — campaign | | `ltl-accumulator-verified` | subject | 61-cert corpus about the log's accumulator model; **entry-13 subject**, frozen `172a1d0` | frozen; doc-only commits allowed | | `proof-aware-crypto-tooling-agent` (this repo) | machinery | provider service, consumer library, warden (+ local read-only cockpit), dogfood signer, paper, course, tests | **changes freely — the hub** | | `lean-transparency-log` | published | the public mirror: leaves, heads, receipts, fail-closed `verify.py` + selftest | **generated by publish** — canonical files here, templates in pacta, CI-pinned | @@ -149,7 +149,7 @@ deployed verifier; see the corpus KNOWN-GAPS ledger). | provider write side (check / append / publish / sign) | **on demand** | operator machine | runs only during an append ceremony, minutes at a time; the signing key is offline otherwise | | warden (the financial agent) | **not running** | nowhere | implemented prototype: a wallet directory plus CLI/MCP/cockpit processes that exist only while explicitly started; no deployed instance, no funds watched | | custody cockpit | **on demand** | operator machine, localhost | `pacta wallet cockpit`, stops with Ctrl-C; read-only | -| SLH-DSA campaign (`fips205-source` + `fips205-slhdsa-verified`) | **no process** | — | static repos, **zero certificates yet**; extraction/proof sessions are episodic operator-machine runs under lean-guard | +| SLH-DSA campaign (`fips205-source` + `fips205-slhdsa-verified`) | **no process** | — | static repos, **11 certificates**; extraction/proof sessions are episodic operator-machine runs under lean-guard | | everything else (repos, paper, book, mirror, SD) | **no process** | — | static files; consumers and reviewers are external and episodic | The human-facing interactive rendering of this whole map, runtime