fix(spacecraft): publish review-cleared v1.7.5 certification - #17
Merged
AnubisQuantumCipher merged 21 commits intoAug 26, 2026
Merged
Conversation
added 12 commits
August 25, 2026 01:53
Bind proof identity dc786a6e73a01278b09b899abd54555a5d268a305d745f66c4bf5480527bf876 (internal 418854abbb009a25b020be6cb3799dfd3ae75d6619ad4f26032cc64fead924be) and receipt 489eaffcdb5445262a07443c7d02421d2363f9a7e52fbc081e21a1ed29d5a8ed. Evidence: two complete campaigns were byte-identical; 110 spacecraft, 93 release, 20 proof-identity, 35 capability, and 220 plugin tests passed. Lean built 8705 jobs; admission audit found 0 admissions across 57 files. Claim gate scanned 16 surfaces with 0 findings.
Enforce exact-case public verdicts, bounded source-contract extraction, private verifier/formal/source mutation snapshots, receipt-bound source identity, exact mutation refusal/digest predicates, and checker-bound package records. TDD: all newly added focused regressions were observed RED before implementation. The affected 147-test wave reached 146 passes with only the expected stale committed mutation-evidence schema error; evidence regeneration follows. Ruff and git diff hygiene passed.
Regenerate both complete v1.7.5 campaigns after independent-review hardening. Receipt and witness bytes remained identical across runs; mutation evidence now binds checker digest and private source/verifier/formal-input snapshots. Observed: both mutation campaigns emitted MUTATION_ABA_PASS; all five decisive outputs matched byte-for-byte; 147 affected release tests passed. mutation_aba_v2.json sha256=542d0bb66359bb4960255c16bb9d8bf160f1d681e5960e630456d3995535ab35.
Bind 18 internal independent review passes to evidence commit 04fd09e. Record 9 resolved findings, 1 invalid finding, and 0 unresolved release blockers. Review sha256=0616bbec7352c1fcf3da3e00ce9336cba4c14ce78254d155b06920bf19b58f31. Only the two review-administration files differ from the reviewed commit.
Launch the authoritative instrument validator with -E -s -S -B instead of -I so importlib-loaded certify.py can resolve its exact private sibling witness_codec.py. Keep the independent verifier on -I -B. Reproduction: both candidate package builds refused at authoritative instrument validation with ModuleNotFoundError for witness_codec. The regression was observed RED, then passed; all 43 v1.7.5 package tests passed.
Extend the v1.7.5 review to exact commit 746c16d after the full package smoke exposed the isolated-validator sibling import defect. Record 22 completed passes, 10 resolved findings, 1 invalid finding, and 0 unresolved release blockers. Review sha256=8ad449e3b653896cf64e49b7cc46918bff6f7a68deefb979267722bfa68112ee.
|
Important
This repository does not receive automatic reviews because it has fewer than 10 stars. ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Plus Run ID: Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
added 9 commits
August 25, 2026 10:22
Keep proof/source/axiom checks cross-platform, but run the committed checker-byte rebuild only when all recorded platform launcher paths, symlink targets, sizes, and SHA-256 values match exactly. GitHub macOS-14 correctly produced platform-local attestation a46bbc... instead of owning-platform 416f27.... Synthetic matcher regression was observed RED, then passed. Local owning-platform suite passed 21 tests, including the full checker/build binding.
Independently pin the committed proof-identity bytes, reject malformed launcher records and inspection errors, fully observe every launcher before classifying platform drift, and skip only on exact GitHub Actions macOS mismatch. Ordinary Darwin/arm64 drift fails. All new regressions were observed RED before implementation. Final local proof-identity suite passed 27 tests, including owning-platform checker/build binding. Independent security and integration re-reviews report zero remaining fail-open paths.
Extend internal independent review to exact hosted-gate commit 62c5cd7 after GitHub macOS-14 exposed the owning-platform byte-test boundary. Record 28 passes, 12 resolved findings, 1 invalid finding, and 0 unresolved release blockers. Review sha256=4115aea32097f5a2969884288fbc48eb89fa0f203470392bd5212151c98d8976.
Keep the publication packager fail-closed on non-owning GitHub macOS runtimes while making hosted tests require the exact expected refusal instead of incorrectly requiring owning-platform success. Owning-compatible success still exercises exact Git binding. Hosted/local conditional regressions were observed RED before implementation. Local and simulated hosted focused paths passed; all 45 package tests passed.
Convert only publication-startup RuntimeError values into a canonical rc2 one-line refusal, retain uncaught parser/build errors, require the GitHub-hosted runner discriminator, and make hosted test oracles exact on code/stdout/stderr/output. All new regressions were observed RED before implementation. Local and simulated hosted focused paths passed; all 48 package tests passed. Independent security and integration re-reviews report zero remaining hosted outcome gaps.
Extend internal review to exact canonical-startup commit 17eb525 after GitHub macOS-14 exposed the non-owning publication-runtime boundary. Record 33 passes, 15 resolved findings, 1 invalid finding, and 0 unresolved release blockers. Review sha256=352d317febd7414fb08f7a27f3adac2533c3fd8a590b3a4ace8082c73bc59554.
Raise the complete macOS certificate campaign from 240 to the 360-minute GitHub-hosted maximum after both exact PR/push jobs were canceled at 4h while platform-local proof identity generation was still running. Run feature work once via pull_request; retain full master and v* tag campaigns. Missing early-failure logs warn instead of masking the root failure. All three regressions were observed RED before implementation. Six workflow mechanics tests passed. Independent security and integration reviews found zero trigger, scope, or fail-closed gaps.
Anchor the 360-minute timeout to the complete YAML scalar and bind always/warn/upload assertions to the exact final artifact step. This prevents unrelated or prefix values from satisfying the workflow gate. Six workflow mechanics tests passed.
Extend internal review to exact workflow-budget commit 54c9af6 after two exact hosted jobs were canceled at the 240-minute boundary during fresh platform-local proof identity generation. Record 37 passes, 17 resolved findings, 1 invalid finding, and 0 unresolved release blockers. Review sha256=f7700a20d4ff86f010667e019de0dc62b39976e6290f76209bdedcc385144a51.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Purpose
Publish the review-cleared JACKAL v1.7.5 spacecraft finite-burn corrective release without changing the model-conditional result or promoting the Python Picard producer into the formal soundness base.
CERTIFIED SAFE under the stated finite-burn ODE model, supplied input bounds, and machine-checked interval-certificate assumptions.
Exact review and release heads
54c9af66405c445d17735c92ee177cd652fc34b9eb69713918798f5828950d92f1003c66d2eb26caf7700a20d4ff86f010667e019de0dc62b39976e6290f76209bdedcc385144a51c65e33f86e60200643972e8b4f70a81ced214affe23c9049e029e91ee928c51bOnly the review report and clearance differ from the reviewed commit.
Formal and implementation boundary
JackalIv.Spacecraft.spacecraft_burn_certified_safe2e08149b735ff70a1f1b6606aeca46c9e4dbf2a7d12db2cdc0e80d37f325fa59dc786a6e73a01278b09b899abd54555a5d268a305d745f66c4bf5480527bf876418854abbb009a25b020be6cb3799dfd3ae75d6619ad4f26032cc64fead924be489eaffcdb5445262a07443c7d02421d2363f9a7e52fbc081e21a1ed29d5a8ed27d5b16e08dd9f1b39774adb455a43e129bb390b9c7462f87ba93cdade87204cThe Python Picard witness generator is not formally verified. It remains reviewed and adversarially tested, and trusted for termination, witness search/completeness, and reproducibility. The pinned Lean checker independently validates accepted witness mathematics; the outer verifier binds source, request, witness, checker, proof identity, model, epoch, nonce, receipt, and result bytes.
Corrective hardening
-E -s -S -B.v*tag campaigns.Mutation evidence SHA-256:
542d0bb66359bb4960255c16bb9d8bf160f1d681e5960e630456d3995535ab35.Fresh local gates
b2d62d374a54ffdaf090df3a6ea24ef9f6a64f9dde8c5189c29d67bd3b12ece8;Two full producer/checker/verifier/validation/mutation campaigns were byte-identical across all five decisive outputs. Two deterministic candidate package builds produced byte-identical 12-asset directories.
SHA256SUMSverified 11/11 payload rows. Clean extraction produced the canonical checkerACCEPTline and an authoritative outer-verifierACCEPT.Instrument controls reconciled 124,416 tubes and 3,072 cutoff cells; true-answer controls passed 4/4 and per-case wrong-answer controls passed 0/4. These counts are instrument controls, not additional physical-model claims.
Non-claims and compatibility
/Users/sicarii/Desktop/Projects/jackal-calcremains untouched at57739317b24250ff62fd9b23f67c760d9066ab94with its four pre-existing untracked roots;