proof-aware-crypto-tooling-.../src/pacta
mrwulf ab629f34d8 replay: compile the certificate corpus, not the button's instruments; forks attest 44
Closes the two halves of replay-pipeline-lags-hardened-forks.

(1) The generic replay compiled every .lean under verification/, including the
P1-b kernel-gate instruments (Proofs/Inventory*.lean) that read other modules'
object files via readModuleData and only run inside the button's environment;
it died with "object file does not exist". New RepoConfig.replay_exclude
(globs, per repo, in the config where a reviewer sees them) filters the
compile; every exclusion actually applied is recorded in the attestation's
replay.instruments_excluded, so the LEAF discloses what its replay did not
compile — a silent exclusion here would be the estate's oldest defect class.
The replay checks the certificates; the deeper self-auditing gates are the
repository's own and run there.

(2) The ed25519 profile's default list still carried the 16 pre-hardening
certificates, so a successful replay would have attested 16 and the whole
16->44 point of the re-attestation would have been lost silently. Each fork
entry now carries its own 44 — 27 main + 4 apex + 13 scalar — MEASURED from
the fork's two buttons (CERTS arrays; apex recovered by the same pattern
Phase 3c itself uses), never hand-typed. Correction to the plan on the way
through: the plan said 40; the apex tier makes it 44.

Suite: 152 passed, 0 failed, 0 skipped.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-07 10:24:35 +02:00
..
profiles Estate sync: boundary-axiom vocabulary + the four-tier apex reality (R4) 2026-07-06 10:04:43 +02:00
__init__.py initial proof-aware tooling prototype 2026-07-03 10:51:03 +02:00
__main__.py initial proof-aware tooling prototype 2026-07-03 10:51:03 +02:00
agent.py add policy-gated agent consequences 2026-07-03 11:05:06 +02:00
artifact.py add transparency log trust provider 2026-07-03 14:09:34 +02:00
attestation.py audit v3: paper-reality congruence + external-pointer integrity (Fable-5 Socratic pass) 2026-07-09 21:33:28 +02:00
audit.py initial proof-aware tooling prototype 2026-07-03 10:51:03 +02:00
claims.py Estate sync: boundary-axiom vocabulary + the four-tier apex reality (R4) 2026-07-06 10:04:43 +02:00
cli.py cockpit: the lab manual — a study-club course in six chairs (/manual) 2026-07-21 17:26:09 +02:00
config.py replay: compile the certificate corpus, not the button's instruments; forks attest 44 2026-08-07 10:24:35 +02:00
custodycard.py warden agent-native surfaces: MCP server, self-proving custody card, proof-of-posture 2026-07-06 23:35:47 +02:00
deck.py cockpit: the lab manual — a study-club course in six chairs (/manual) 2026-07-21 17:26:09 +02:00
dogfood.py dogfood: anchor the signer path to the package, not the working directory 2026-08-04 18:10:59 +02:00
estateview.py cockpit: the estate page now MEASURES instead of asserting 2026-07-30 18:24:31 +02:00
lean.py cleanup: remove dead _mentions_no_axioms (round-6 drill) 2026-07-16 15:54:26 +02:00
liveness.py estate: the SLH-DSA (FIPS 205) campaign enters the map — two new entities 2026-07-22 22:02:39 +02:00
logclient.py The log goes public: git-published mirror, online service, witnesses 2026-07-06 16:05:20 +02:00
manifest.py initial proof-aware tooling prototype 2026-07-03 10:51:03 +02:00
mdlite.py cockpit: the lab manual — a study-club course in six chairs (/manual) 2026-07-21 17:26:09 +02:00
postquantum.py add transparency log trust provider 2026-07-03 14:09:34 +02:00
quorum.py warden re-audit (Fable 5): fix ledger race, quorum perf, small-order honesty 2026-07-07 08:24:51 +02:00
repo.py Machine protection: route all pacta Lean compiles through lean-guard 2026-07-06 10:42:59 +02:00
report.py add verifier bootstrap and attestation lane 2026-07-03 11:24:13 +02:00
risk.py Estate sync: boundary-axiom vocabulary + the four-tier apex reality (R4) 2026-07-06 10:04:43 +02:00
signing.py dogfood: anchor the signer path to the package, not the working directory 2026-08-04 18:10:59 +02:00
slhdsa.py slhdsa: the post-quantum signing path (deterministic, parameter-locked, additive) 2026-08-06 22:03:39 +02:00
stations.py cockpit: the bridge — six role stations, the crew law, live liveness 2026-07-21 16:47:43 +02:00
sthstore.py sthstore: equivocation poisons the pin + retains transferable evidence 2026-07-09 17:53:13 +02:00
transparency.py slhdsa: the post-quantum signing path (deterministic, parameter-locked, additive) 2026-08-06 22:03:39 +02:00
treasury.py warden hardening round: policy engine, ledger rotation, MCP UX, treasury LIVE, ops docs 2026-07-07 13:38:42 +02:00
uikit.py cockpit: the lab manual — a study-club course in six chairs (/manual) 2026-07-21 17:26:09 +02:00
wallet.py warden hardening round: policy engine, ledger rotation, MCP UX, treasury LIVE, ops docs 2026-07-07 13:38:42 +02:00
walletmcp.py warden hardening round: policy engine, ledger rotation, MCP UX, treasury LIVE, ops docs 2026-07-07 13:38:42 +02:00
walletui.py cockpit: the estate page now MEASURES instead of asserting 2026-07-30 18:24:31 +02:00
witness.py The log goes public: git-published mirror, online service, witnesses 2026-07-06 16:05:20 +02:00
yamlio.py initial proof-aware tooling prototype 2026-07-03 10:51:03 +02:00