proof-aware-crypto-tooling-.../notebooks
mrwulf 1086a3ba02 course refresh: the notebooks enter the SLH-DSA era
The 14-notebook course predated the post-quantum campaign entirely
(coherence findings 10, 11). Now, authored in the GENERATOR and
regenerated (AGENTS.md rule):
- notebook 06: new section 'The second signature that actually shipped:
  SLH-DSA' — the deterministic co-signature since tree size 14, chosen
  because the log attests its own parameter set's verify path (leaf 18,
  11 certs); absent-not-failed for older heads; determinism as an audit
  primitive; verify-only always. Plus a runnable keygen/sign/verify/
  re-sign-byte-equality demo (honest skip below OpenSSL 3.5) and the
  --slhdsa-public-key consumer flag in the policy list.
- notebook 09: the 'post-quantum line' is now three-legged — Ed25519
  proven-verify dogfood, SLH-DSA shipped-and-attested, ML-DSA required-
  but-honest-unavailable — with the closing point that a slot stops
  being aspirational the day its verify path enters the log; stale
  16/16 provenance count -> 44/44 (leaf 13 re-attestation).
- notebook 07: policy exercise extended with the co-signature question;
  00 course map goal updated; README course listing for 06/09.
- GENERATOR DRIFT REPAIRED in passing: notebook 10's cockpit cell had
  been added to the .ipynb but never backported to the generator —
  regeneration would have silently dropped it; the cell is now IN the
  generator and round-trips (19 cells, content identical).
Suite 157 green.
2026-08-22 21:18:01 +02:00
..
00_course_map.ipynb course refresh: the notebooks enter the SLH-DSA era 2026-08-22 21:18:01 +02:00
01_threat_model_and_truth_boundary.ipynb Curriculum: the ratchet rule, the four-tier reality, and lecture 9 (dogfood) 2026-07-06 10:18:06 +02:00
02_claim_cards_and_risk_model.ipynb Curriculum: the ratchet rule, the four-tier reality, and lecture 9 (dogfood) 2026-07-06 10:18:06 +02:00
03_lean_replay_and_axiom_audit.ipynb add proof-aware crypto curriculum notebooks 2026-07-03 14:42:59 +02:00
04_proof_hygiene_and_boundaries.ipynb add proof-aware crypto curriculum notebooks 2026-07-03 14:42:59 +02:00
05_third_party_attestation_provider.ipynb REAL EVIDENCE: guarded replay of all four repos, attested, logged, dogfooded 2026-07-06 14:54:48 +02:00
06_merkle_transparency_logs.ipynb course refresh: the notebooks enter the SLH-DSA era 2026-08-22 21:18:01 +02:00
06a_provider_build_the_log.ipynb Mirrored lectures 6a/6b: the authenticated structure, drawn and domain-separated 2026-07-06 15:26:32 +02:00
06b_agent_verify_inclusion.ipynb publish assets: sync the fail-open time bomb; llms/course/test docs refreshed (doc audit 2026-07-19) 2026-07-19 13:10:55 +02:00
07_agent_consequences.ipynb course refresh: the notebooks enter the SLH-DSA era 2026-08-22 21:18:01 +02:00
08_capstone_research_program.ipynb Curriculum: the ratchet rule, the four-tier reality, and lecture 9 (dogfood) 2026-07-06 10:18:06 +02:00
09_dogfood_verified_crypto.ipynb course refresh: the notebooks enter the SLH-DSA era 2026-08-22 21:18:01 +02:00
10_verified_custody_wallet.ipynb course refresh: the notebooks enter the SLH-DSA era 2026-08-22 21:18:01 +02:00
11_the_customers_eye_view.ipynb course refresh: the notebooks enter the SLH-DSA era 2026-08-22 21:18:01 +02:00
README.md curriculum: lecture 11 - the customer's-eye view (requirements card, wish-meets-supply, grow-the-supply) 2026-07-07 22:16:05 +02:00

PACTA Curriculum Notebooks

This directory contains a zero-to-hero teaching sequence for proof-aware cryptographic tooling.

Start with 00_course_map.ipynb, then proceed in order. The notebooks are intentionally output-free in git. Run them from the repository root or from this directory; each notebook locates the repo root and imports pacta from src/.

The course teaches:

  • theorem-boundary thinking,
  • claim cards and residual risk,
  • Lean replay and axiom audit concepts,
  • proof hygiene,
  • third-party proof-check provider trust,
  • RFC 9162-style Merkle transparency logs,
  • the mirrored provider/agent domain split (6a: one provider builds and dogfood-signs the log; 6b: many agents verify inclusion in ~25 lines, no Lean),
  • receipt-gated agent consequences (including the R4 wallet gate, now reachable),
  • split-view defense: STH pinning, consistency enforcement, freshness, monitoring,
  • dogfood verified cryptography and the honest hybrid post-quantum posture,
  • the verified-custody wallet (warden): a quorum boundary of four proven forks, the signing firewall, and the agent-native MCP surface,
  • the customer's-eye view: the allowed-axioms list as a requirements card you own and could write yourself, and what happens when your card is stricter than the supply,
  • research roadmaps from R4 evidence toward R5 assurance.

This curriculum is not financial advice, not a trading bot, and not a wallet-building guide. It is a training path for engineers and researchers who need to evaluate formal-verification-enhanced cryptographic tooling without overclaiming.