Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
160 changes: 160 additions & 0 deletions research/h25-c05-v03-parent-interface-audit/ARTIFACTS.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,160 @@
{
"schema": "source-archive-exact-bytes-v1",
"files": [
{
"path": "INDEPENDENT-REVIEW.json",
"bytes": 937,
"sha256": "20bbf9fd7812a0ebe84ffb95fc82fdaefb5450f752c7dba6ac43ba52957bc749"
},
{
"path": "README.md",
"bytes": 6595,
"sha256": "b86b6b59e5961ec44a6617091869be386e9809b2b5f3b756835ec6ca6cf2934f"
},
{
"path": "SOURCE-FINDINGS.json",
"bytes": 4930,
"sha256": "8156af0a05e1354f65061dd97704dd749a8387b825798ddf089235980b3b26bc"
},
{
"path": "SOURCE-ORIGIN.json",
"bytes": 3468,
"sha256": "311faf6bedf41c5cb7ebf965029bd2c999963d68a800af760fc5b9b9a617ae56"
},
{
"path": "SOURCES.json",
"bytes": 584,
"sha256": "911ffe8b456c49ccd19ee42c8e21b226a56dacba515e857300aa28cc1db87be7"
},
{
"path": "TASK.json",
"bytes": 4079,
"sha256": "fcfc16a88d6b663f139c6cbe62a3d056c957c373c95a8878532f5c7a6f6c7407"
},
{
"path": "VALIDATION.json",
"bytes": 1005,
"sha256": "8e766f0dcaa9e8ccb6734eecf849d3770c1b726679804d8165bfcdaa463995c4"
},
{
"path": "VERIFY.json",
"bytes": 394,
"sha256": "678f6e84b7f6975f8d32d72a8f98075c95e226b03229a3c7990555ca99e8ca52"
},
{
"path": "evidence/INPUT-PINS.json",
"bytes": 48454,
"sha256": "c8dc314f3330819c4d9cb8183532f4f5d90f2a1229a4b1202d2ccba6dac0ee33"
},
{
"path": "evidence/PACKAGE-METADATA-FAILURE-v1.json",
"bytes": 611,
"sha256": "489cce094e2c2108d8944f19399bf567cb5a9dde99614fea3ddcd132c099bb35"
},
{
"path": "evidence/PACKAGE-METADATA-FAILURE-v2.json",
"bytes": 597,
"sha256": "82861b9cbc8c87896672dfa2c2517b35defa249e69452aba72523a4f172e4d22"
},
{
"path": "evidence/PACKAGE-METADATA-FAILURE-v3.json",
"bytes": 484,
"sha256": "d57d69b3c5cf9fab3fdf78f39f0ff54f1c9795a8d859cdff0faef9a5705fda4e"
},
{
"path": "evidence/PARENT-SOURCE-RECOVERY.json",
"bytes": 3292,
"sha256": "539937886f7b74cff4f3369050b33e0061004b70abdf01c7f75850110a195835"
},
{
"path": "evidence/PR-COVERAGE.json",
"bytes": 11316,
"sha256": "752e6f03be4566548793a830f7322eaa58d6ca72d94d65026ea84cd93d269031"
},
{
"path": "evidence/RECEIVER-SOURCE-MAP.json",
"bytes": 20868,
"sha256": "532733f4d78fc327f00851f33e1db20ae8ef34fd904fc56327d44a4ebea11067"
},
{
"path": "evidence/SOURCE-GATE-CLOSE.json",
"bytes": 1279,
"sha256": "3abffbf85adae35018eab393d403493990640df862752e730445944d7764368a"
},
{
"path": "evidence/SOURCE-MANIFEST.json",
"bytes": 5849,
"sha256": "574d9b20f139847728be65d8aec10c375b866b51f32e20dfdd603804c2d34c42"
},
{
"path": "evidence/UNIT-PLAN.json",
"bytes": 1541,
"sha256": "dadd09d1e34e07e2f69574c159db01668d01bf79dd53844a0c67ba9f0cc928d9"
},
{
"path": "evidence/initial-copy-name-collision.txt",
"bytes": 6046,
"sha256": "5c5b3509ec8eff3fe2e8fe5e7b1e95c7790a964fb0fe401ed5c0049d88ea6520"
},
{
"path": "snapshot/epoch_copy_v5.py.txt",
"bytes": 82957,
"sha256": "4f459d0336d59975df787c24373e18dad4044c3a24137392e890115f811b3211"
},
{
"path": "snapshot/epoch_parent_v5.py.txt",
"bytes": 26833,
"sha256": "058059912144863a4b2bfe4fc9ffc5233b4ab20ee5a7355bde66f4d3f6f28712"
},
{
"path": "snapshot/epoch_schema_v5.py.txt",
"bytes": 30668,
"sha256": "b89a789654be87bde40a47300f4d9702dce2b90e6ab3be9a2025f6d8041b3e9a"
},
{
"path": "snapshot/field-negative-epoch-v5--SOURCE-READINESS.json.txt",
"bytes": 6055,
"sha256": "611a9dff18b50442fe61702655180d69790746dc3c8154b9ff25098c5c5c6714"
},
{
"path": "snapshot/field-parent-completion-v2--SOURCE-READINESS.json.txt",
"bytes": 6046,
"sha256": "5c5b3509ec8eff3fe2e8fe5e7b1e95c7790a964fb0fe401ed5c0049d88ea6520"
},
{
"path": "snapshot/group01_evidence_v1.py.txt",
"bytes": 15610,
"sha256": "05ec6a63c57340ba929aea1fab71b096efc143e099346640f6def41310bd3e25"
},
{
"path": "snapshot/h25_parent_supervisor.py.txt",
"bytes": 23047,
"sha256": "cfb09a18dd10b597cc6d5a8139ee769bef679bc44ae029329755e3d97b055075"
},
{
"path": "snapshot/native_tcb_v1.py.txt",
"bytes": 11353,
"sha256": "865943df5cfdbf9383362d7fb2b76c6d0fd895cf0a0e20d550a26b579606b5d7"
},
{
"path": "snapshot/parent_closure_v1.py.txt",
"bytes": 13400,
"sha256": "2d831cff8bd444de2d6941645d571e07618ede404a1f45692b557f61494b334a"
},
{
"path": "snapshot/parent_completion_v1.py.txt",
"bytes": 54168,
"sha256": "d4ee1b7ce4a42b73261984ffb1b9ceb5bb0165223e04a253588f83b99f6981a5"
},
{
"path": "snapshot/parent_domain_v1.py.txt",
"bytes": 20456,
"sha256": "9205e14d6661fb5df0597f0ad7b2206006f2d31f01f784805f64c13875663282"
},
{
"path": "verify.py",
"bytes": 2724,
"sha256": "c3ac137a61e2ee0f8cd31a0789254255732312c77b20afe16efb8c956f468b32"
}
]
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
{
"reviewer": "v03_source_route_review,SolMax",
"scope": "Independent read-only original source/profile/domain/closure findings; not human/kernel/full original qualification",
"original_source_findings_accepted": true,
"publication_export_review": "PASS adjusted source-audit export subject to final manifest regeneration and replay",
"original_modules_imported": false,
"full_C05": false,
"full_V03": false,
"publication_reviewer": "c05_component_review,SolMax",
"corrections": [
"Restrict mapped-inode scope to declared file-backed executable mappings",
"Restrict deep-mutation claim to captured literal data and preserve gate suffix exemptions"
],
"source_copies_verified": 11,
"scope_exclusions": [
"No original runtime/source acceptance or universal Python theorem",
"New PR metadata graph is reporting/provenance, not source-depth acceptance"
],
"final_manifest_and_replay_by": "root"
}
37 changes: 37 additions & 0 deletions research/h25-c05-v03-parent-interface-audit/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
# C05/V03: exact parent, domain and copied-runtime compatibility audit

The proposed V03 prefix driver is **not a drop-in for the unchanged parent-completion route**. This source audit recovers the missing ordinary parent/domain/closure/epoch/supervisor libraries and records concrete predicates that require an explicit control-only successor. It does not implement or admit that successor, complete C05/V03, run the original modules, or claim a generic impossibility.

## Exact findings

The original parent validates the original `variant_driver_v1.py`, its 26-file/two-build evidence contract and producer order. Its completion path requires empty stderr, then the full receiver, then source/stage/closure checks before production completion. A prefix source refusal with a traceback cannot pass that unchanged path.

The recovered domain adds two further restrictions: `terminal_facts` requires actual returncode zero along with complete owned cleanup, and `create_domain` permits fewer than four existing domains. The proposed 89 DATA cases per profile (178 in total) are not 178 admissible launches in one unchanged parent. No registry reset or cap increase is justified.

The receiver closure captures namespace size, bindings and literal data, with a source-fixed mutable-registry allowlist. Adding prefix functions after capture or mutating an unlisted control registry captured as literal data violates those checks. A successor must define/capture its complete namespace and preserve all original production checks.

The copied filesystem is only conditionally compatible. The native TCB compares every declared file-backed executable mapping's device/inode with the actual opened pathname. Pivoting an already running host-mapped process and hashing new copied inodes is insufficient. A fresh interpreter/loader exec inside the copied view is required, with genuine proc and exact original paths, before actual Root launch. This is a necessary source condition, not an executed namespace result.

The exact supervisor requires the original three system sys.path entries, six-entry environment, interpreter flags and one task. Its subreaper install authenticates fixed native files and uses real same-process prctl with a retained native keeper. No clean executable parent bootstrap was found in the bounded supplied snapshots. The recovered readiness explicitly labels the full orchestrator EXTERNAL_UNIMPLEMENTED; recovering these libraries does not construct it.

## Source and provenance

Base `7c49fe32c55de02c2c873655c804b16e4c3fef0a`; canonical investigation [PR6321](https://github.com/CrocSwap/integer-mult-bounds/pull/6321). [PR6352](https://github.com/CrocSwap/integer-mult-bounds/pull/6352) preserves the earlier parent snapshot and entry questions; [PR6362](https://github.com/CrocSwap/integer-mult-bounds/pull/6362), head `120072d58ddb46f0e02886756243174d41fce42e`, supplies the partial new input-edge/prefix/data helpers. Those scopes remain unchanged. Other provenance follows the23-node bounded PR metadata graph in evidence/PR-COVERAGE.json. This explicitly exports the local graph that was mistakenly referenced as an exported file in the earlier PR6362 prompt/body; the prior access gap remains recorded. Current metadata does not mean all current-head source was rereviewed.

SOURCE-ORIGIN.json maps each exact local ordinary source to this inert .txt copy and hash. Parent/domain/closure/group01 and three epoch copies match their respective historical source manifests. Parent completion is byte-identical to PR6352's d4ee1b7c snapshot. Supervisor's exact path/hash is named by the parent's RECEIVER-SOURCE-MAP and INPUT-PINS, copied here. The source-only readiness records retain null approvals and open cost/qualification. No protected runtime directory or old conversation was read.

SOURCE-FINDINGS.json supplies function/line/anchor references. verify.py authenticates the packet and checks the stated anchors in AST-located functions; it does not execute those functions or provide a general Python semantic proof. This registered replay is source-archive verification only. No original/native/compiler/process/mount workload is in VERIFY.json.

## Open next questions

A separately reviewed prefix-control owner may preserve the original Popen/domain/resource/first-error/raw machinery, with a distinct expected-outcome terminal accessor and control reservation. It must never mint an original production completion or weaken original two-build/empty-stderr criteria. Review any new registry and source-closure treatment explicitly. Reconstruct genuine live capabilities after a clean parent exec; a serialized lease or keeper is not authority.

Complete effective GCC configuration, source-derived lookup closure, actual input interval, caps/cost bill and independent stage/command/funding/execution admissions remain open. The original 512 source rows, 64MiB/file,256MiB/capture and all other limits are fixed. Source blocks from Pro's namespace answer remain unadopted.

## Timebox, verification and credit

The next integration unit ran its source gate from08:31:54 to08:46:20UTC on2026-11-02 and closed before its08:46:54 deadline, with no implementation or tests. Concrete parent-interface findings prevented opening implementation. This audit/export is a separate publication disposition, not an hour extension or automatic retry. Subsequent Pro4 completed before its wait deadline and confirmed the parent correction. It identified the exact same-build plugin package and final-stage build data as the next distinct GCC dependency; no source from that answer is adopted in this audit. Full C05/V03 remain false; original43.5%,22/49,stage2/10,milestones1/10,24components and52helpers are unchanged. Recorded guard debit94.550533479/2400 is not complete physical cost; preparation/review/publication/final costs remain OPEN_NOT_ZERO. The goal service was separately observed paused.

Run `python3 scripts/research_package.py --package research/h25-c05-v03-parent-interface-audit` for the source-only check. Exact observed results are in VALIDATION.json; proposed target work is not included.

Chris R/Clear1nsight with substantial ChatGPT Pro/Codex/Sol Max assistance and independent agent source audit. Preserve original source authors, PR6321/6029/5864 lineage, unpaidmoon/Cursor Grok for PR6339 and Douglas R.Colkitt's native/circuit/verification lineage. Inert originals retain their source notices; package/new verification code Apache-2.0. Agent/source/archive acceptance is distinct from human, native or original scientific qualification.
160 changes: 160 additions & 0 deletions research/h25-c05-v03-parent-interface-audit/SOURCE-FINDINGS.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,160 @@
{
"schema": "c05-v03-parent-interface-audit-v1",
"scope": "Pinned source/structural audit; not original execution or general semantic proof",
"anchors": [
{
"id": "P01",
"path": "snapshot/parent_completion_v1.py.txt",
"function": "_validate_plan",
"function_line": 314,
"line": 392,
"literal": "args[6] == integration + '/variant_driver_v1.py'",
"meaning": "Original driver spelling is fixed"
},
{
"id": "P02",
"path": "snapshot/parent_completion_v1.py.txt",
"function": "_validate_plan",
"function_line": 314,
"line": 395,
"literal": "evidence['raw_file_names'] == list(VARIANT_FILES)",
"meaning": "Full raw inventory expectation is fixed"
},
{
"id": "P03",
"path": "snapshot/parent_completion_v1.py.txt",
"function": "run_producer",
"function_line": 541,
"line": 547,
"literal": "producer_role == schema.PRODUCERS[state['next']]",
"meaning": "Producer order is fixed"
},
{
"id": "P04",
"path": "snapshot/parent_completion_v1.py.txt",
"function": "accept_producer",
"function_line": 763,
"line": 778,
"literal": "schema.need(stderr['bytes'] == 0",
"meaning": "Production completion requires empty stderr"
},
{
"id": "D01",
"path": "snapshot/parent_domain_v1.py.txt",
"function": "create_domain",
"function_line": 188,
"line": 190,
"literal": "schema.need(_LEN(_DOMAINS) < 4",
"meaning": "Four-domain bound"
},
{
"id": "D02",
"path": "snapshot/parent_domain_v1.py.txt",
"function": "terminal_facts",
"function_line": 414,
"line": 419,
"literal": "state['returncode'] == 0",
"meaning": "Unchanged terminal facts reject nonzero refusal exits"
},
{
"id": "D03",
"path": "snapshot/parent_domain_v1.py.txt",
"function": "terminal_facts",
"function_line": 414,
"line": 420,
"literal": "state['final_rows'] == () and not state['after_root'] and not state['reaped']",
"meaning": "Other cleanup predicates must be retained"
},
{
"id": "C01",
"path": "snapshot/parent_closure_v1.py.txt",
"function": "bind_receivers",
"function_line": 131,
"line": 213,
"literal": "key in _MUTABLE_NAMES.get(name, ())",
"meaning": "Source-selected mutable names and gate suffixes are exempt from literal capture; other captured literal data remains fixed"
},
{
"id": "C02",
"path": "snapshot/parent_closure_v1.py.txt",
"function": "check_receivers",
"function_line": 242,
"line": 245,
"literal": "_LEN(namespace) == _LEN(original_items)",
"meaning": "Namespace census cannot change after capture"
},
{
"id": "C03",
"path": "snapshot/parent_closure_v1.py.txt",
"function": "check_receivers",
"function_line": 242,
"line": 248,
"literal": "namespace.get(key) is expected",
"meaning": "Binding identity cannot change after capture"
},
{
"id": "N01",
"path": "snapshot/native_tcb_v1.py.txt",
"function": "verify_native_tcb",
"function_line": 158,
"line": 174,
"literal": "row[2] == observed['device_minor'] and row[3] == observed['inode']",
"meaning": "Mapped inode must match actual pathname object"
},
{
"id": "S01",
"path": "snapshot/h25_parent_supervisor.py.txt",
"function": "launch_contract",
"function_line": 45,
"line": 51,
"literal": "need(tuple(sys.path) == ('/usr/lib/python312.zip', '/usr/lib/python3.12',",
"meaning": "No project sys.path insertion in clean parent"
},
{
"id": "S02",
"path": "snapshot/h25_parent_supervisor.py.txt",
"function": "install_subreaper",
"function_line": 143,
"line": 173,
"literal": "return {'pid': os.getpid()",
"meaning": "Subreaper state belongs to actual clean parent process"
},
{
"id": "S03",
"path": "snapshot/h25_parent_supervisor.py.txt",
"function": "install_subreaper",
"function_line": 143,
"line": 175,
"literal": "(library, call)",
"meaning": "Native keeper retained in process"
}
],
"constants": [
{
"path": "snapshot/epoch_schema_v5.py.txt",
"name": "PRODUCERS",
"expected": [
"group01",
"failure_variants"
]
},
{
"path": "snapshot/parent_completion_v1.py.txt",
"name": "VARIANT_FILES",
"expected_length": 26
},
{
"path": "snapshot/parent_closure_v1.py.txt",
"name": "MAX_MODULES",
"expected": 48
},
{
"path": "snapshot/parent_closure_v1.py.txt",
"name": "MAX_GLOBALS",
"expected": 512
}
],
"full_C05": false,
"full_V03": false,
"original_execution": false
}
Loading