Repository navigation
Conversation
Cover proof-only receipt variants and ensure the fuzz oracle independently replays a reported PASS against the registry entry root and leaf count. Signed-off-by: Srinivasa Dinakar Jainti <dinakarjs@gmail.com>
Contributor
|
🟡 Contributor Check: MEDIUM
Automated check by AgenTrust Contributor Check. |
Signed-off-by: Srinivasa Dinakar Jainti <dinakarjs@gmail.com>
Contributor
Author
|
Publication check: head 81b3e8d preserves the fuzz target's existing executable mode. Its complete tree 2365dcccc2e1ea83c0c086e9cb14a72e275f9dc5 exactly matches the locally validated tree (823 passed, 5 xpassed); no content changes since that validation. Hosted fuzz results remain pending. |
dinakarjs
marked this pull request as ready for review
October 17, 2026 08:14
dinakarjs
requested review from
a team,
lywinged and
rajnisht7
as code owners
October 17, 2026 08:14
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A valid proof-only receipt now passes TR-ANC-002 using the supplied registry entry, but the fuzz target's post-PASS assertion reparses it as a self-contained receipt and raises InclusionError. This reproduces the missing-leaf_count failure in ClusterFuzzLite run 38987830178 (job 117263304673).
This companion targets #533's branch at 6a9d803. The post-PASS oracle parses index/path from the proof and root/count from the entry, then independently replays inclusion. It retains the standalone parse_receipt exception-safety probe and the expected-claim/root assertions.
Five deterministic tests exercise the actual TestOneInput callback with only Atheris instrumentation and raw-byte selection stubbed: a self-contained receipt; each optional copy omitted individually; both omitted; and a deliberately false module PASS over an invalid proof, which the independent replay must catch. The parser, verifier and callback assertions are real.
Validation on Python 3.12: full conformance suite 823 passed, 5 xpassed; Ruff on both changed files and diff whitespace check pass. A process-memory restoration of the old oracle produces four expected failures and one passing complete-receipt control; source files remain unchanged. Local validation is deterministic harness coverage. Hosted exact-head ClusterFuzzLite run 39007093181 subsequently passed both its build and Run fuzzers steps; CI, Docs, Conformance docs and package build also pass. No claim is made about an extended fuzz campaign. Independent review remains required before incorporation.
No normative or runtime verifier changes. The 30-day breaking-change comment period and Project Lead sign-off for #533 remain required. URI-to-entry linkage and entry-origin authentication remain outside this fix.