mirror of
https://github.com/saymrwulf/proof-aware-crypto-tooling-agent.git
synced 2026-09-03 19:53:43 +00:00
mrwulf
caa864a749
The verified corpus completed its phase 2 on 2026-07-06: every ed25519 fork now carries FOUR button-enforced apex tiers up to the full lift (accept <=> decompress(R) = [k](-A)+[s]B as points), the complete scalar layer, and the constructive encoding/decoding chain. pacta was calibrated to the pre-apex corpus and - worse - had no vocabulary for boundary-audited certificates: its axiom audit knew only "clean = exactly the three standard axioms", so the apex tiers would have scored dirty. New vocabulary: - Profile.certificate_axioms: per-certificate ALLOWED axiom sets; expected_axioms_for(cert) resolves each certificate's own boundary. - RepoConfig.apex_boundary: a simple per-fork key (dalek-wrappers / hash3 / anza) expanded by the ed25519 profile into the exact per-tier allowed sets. AUTHORITY NOTE in profiles/ed25519.py: each repo's check.sh Phase 3b is the enforcement point; if the button and this table disagree, the button wins. - run_axiom_audit compares each certificate against ITS allowed set; deviation in EITHER direction (extra axiom or missing boundary axiom) is dirty. New risk reality: - R4 is now reachable: full four-tier apex + constructive chain + scalar arithmetic, all proven with cones pinned to their documented boundaries. R4 always carries explicit residual blockers (SHA-512 oracle, hypothesis-parametric wire parses, translation faithfulness, no side-channel/build assurance - those gate R5). - R3 unchanged (arithmetic pair) and now explains exactly which apex certificates are missing for R4. Attestation trust model hardened: - The provider is trusted for its OBSERVATION, never its VERDICT: axiom_status is re-derived locally from observed_axioms against the agent's own boundary policy. A provider that labels a dirty cone "clean" gains nothing; "proven" with no observed axioms is "unverifiable". - Partial attestations degrade instead of being rejected: uncovered certificates stay unproven and the score caps accordingly (an arithmetic-only attestation still authorizes an R3 library capsule, never a wallet). Also: scripts/mini_pytest.py - a dependency-free test runner (tmp_path, raises, monkeypatch, capsys) for hosts without pytest; examples regenerated FROM the tool (dalek/anza fixtures now R4, 16 certs; new full four-tier attestation example); tests updated + new tests/test_boundaries.py (lying-provider, missing-boundary-axiom, partial-coverage cases). 40/40 tests green. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
32 lines
1.5 KiB
Python
32 lines
1.5 KiB
Python
from pacta.config import RepoConfig, load_config
|
|
from pacta.profiles import get_profile
|
|
|
|
|
|
def test_ed25519_profile_defaults():
|
|
profile = get_profile("ed25519")
|
|
assert "Proofs.FieldMain" in profile.axiom_imports
|
|
assert "CurveFieldProofs.fieldImplementation" in profile.default_certificates
|
|
# Since phase 2 landed in the corpus, EdDSA verification IS proven; the
|
|
# honest exclusions are the hash oracle, the parse hypotheses, and signing.
|
|
assert any("SHA-512" in exclusion for exclusion in profile.exclusions)
|
|
assert any("hypothesis-parametric" in exclusion for exclusion in profile.exclusions)
|
|
assert any("Signing" in exclusion for exclusion in profile.exclusions)
|
|
assert "CurveFieldProofs.verify_accepts_iff_decompress" in profile.default_certificates
|
|
assert "CurveFieldProofs.verify_accepts_iff_decompress" in profile.r4_requirements
|
|
|
|
|
|
def test_repo_config_merges_backend_warning():
|
|
repo = RepoConfig(
|
|
name="risc0-ed25519-verified",
|
|
kind="ed25519",
|
|
backend_warning="pure Rust path only; do not treat zkVM accelerator/syscall path as verified",
|
|
)
|
|
profile = get_profile("ed25519", repo)
|
|
assert any("zkVM" in item for item in profile.deployment_constraints)
|
|
|
|
|
|
def test_load_examples_config():
|
|
config = load_config("examples/repos.yaml")
|
|
assert config.repo_named("dalek-ed25519-verified").kind == "ed25519"
|
|
assert config.repo_named("dalek-ed25519-verified").env_script == "~/aeneas-toolchain/env.sh"
|
|
assert config.repo_named("pasta-pallas-verified").kind == "pasta_pallas"
|