From bc3b4659e7c5ad596725d46d27aac6ffb0888e03 Mon Sep 17 00:00:00 2001
From: Srinivasa Consultants <78673153+dinakarjs@users.noreply.github.com>
Date: Sat, 17 Oct 2026 11:08:17 +0530
Subject: [PATCH 1/2] test(anchor): replay fuzz verdicts against the supplied
 entry

Cover proof-only receipt variants and ensure the fuzz oracle independently
replays a reported PASS against the registry entry root and leaf count.

Signed-off-by: Srinivasa Dinakar Jainti <dinakarjs@gmail.com>
---
 conformance/.clusterfuzzlite/fuzz_receipt.py |  8 ++-
 conformance/tests/test_fuzz_receipt.py       | 58 ++++++++++++++++++++
 2 files changed, 65 insertions(+), 1 deletion(-)
 mode change 100755 => 100644 conformance/.clusterfuzzlite/fuzz_receipt.py
 create mode 100644 conformance/tests/test_fuzz_receipt.py

diff --git a/conformance/.clusterfuzzlite/fuzz_receipt.py b/conformance/.clusterfuzzlite/fuzz_receipt.py
old mode 100755
new mode 100644
index 2e9573ce..5040eecd
--- a/conformance/.clusterfuzzlite/fuzz_receipt.py
+++ b/conformance/.clusterfuzzlite/fuzz_receipt.py
@@ -25,6 +25,8 @@
     from trace_tests.inclusion import (
         InclusionError,
         canonical_claim_bytes,
+        parse_entry,
+        parse_proof,
         parse_receipt,
         verify_inclusion,
     )
@@ -121,8 +123,12 @@ def TestOneInput(data: bytes) -> None:
     findings = tr_anc.check(claim, receipt=receipt, entry=_ENTRY)
     if any(f.code == "TR-ANC-002" and f.passed() for f in findings):
         assert claim is _CLAIMS[_TARGET], f"inclusion proven for the wrong claim: {receipt!r}"
-        root = parse_receipt(receipt)[3]
+        index, path, _, _ = parse_proof(receipt)
+        root, count, _, _ = parse_entry(_ENTRY)
         assert root == _ROOT, f"inclusion proven under another root: {receipt!r}"
+        assert verify_inclusion(claim, index, path, count, root), (
+            f"inclusion not reproduced against the supplied entry: {receipt!r}"
+        )
 
 
 def main() -> None:
diff --git a/conformance/tests/test_fuzz_receipt.py b/conformance/tests/test_fuzz_receipt.py
new file mode 100644
index 00000000..be010b29
--- /dev/null
+++ b/conformance/tests/test_fuzz_receipt.py
@@ -0,0 +1,58 @@
+"""Deterministic receipt-harness regressions without requiring Atheris."""
+
+import contextlib
+import json
+import runpy
+import sys
+import types
+from pathlib import Path
+
+import pytest
+
+
+@pytest.fixture
+def harness(monkeypatch):
+    # Exercise the real fuzz callback's raw-JSON branch; only instrumentation
+    # and byte selection are replaced, not the parser, verifier, or assertions.
+    class DataProvider:
+        def __init__(self, data):
+            self.data = data
+
+        def ConsumeIntInRange(self, lower, upper):
+            return 3  # The genuine fixture's target claim.
+
+        def ConsumeBool(self):
+            return False
+
+        def remaining_bytes(self):
+            return len(self.data)
+
+        def ConsumeBytes(self, length):
+            return self.data[:length]
+
+    stub = types.ModuleType("atheris")
+    stub.instrument_imports = contextlib.nullcontext
+    stub.FuzzedDataProvider = DataProvider
+    monkeypatch.setitem(sys.modules, "atheris", stub)
+    path = Path(__file__).parents[1] / ".clusterfuzzlite" / "fuzz_receipt.py"
+    return runpy.run_path(str(path))
+
+
+@pytest.mark.parametrize(
+    "omitted",
+    [(), ("leaf_count",), ("merkle_root",), ("leaf_count", "merkle_root")],
+)
+def test_pass_oracle_accepts_entry_backed_proofs(harness, omitted):
+    receipt = {k: v for k, v in harness["_RECEIPT"].items() if k not in omitted}
+    claim = harness["_CLAIMS"][harness["_TARGET"]]
+    findings = harness["tr_anc"].check(claim, receipt=receipt, entry=harness["_ENTRY"])
+    assert any(f.code == "TR-ANC-002" and f.passed() for f in findings)
+    harness["TestOneInput"](json.dumps(receipt).encode())
+
+
+def test_pass_oracle_independently_replays_proof(harness, monkeypatch):
+    receipt = {"leaf_index": harness["_TARGET"], "audit_path": []}
+    fake_pass = types.SimpleNamespace(code="TR-ANC-002", passed=lambda: True)
+    monkeypatch.setattr(harness["tr_anc"], "check", lambda *a, **kw: [fake_pass])
+    with pytest.raises(AssertionError, match="not reproduced against the supplied entry"):
+        harness["TestOneInput"](json.dumps(receipt).encode())

From 81b3e8dca0a45ad1c1f0c42e11b297647302bae4 Mon Sep 17 00:00:00 2001
From: Srinivasa Consultants <78673153+dinakarjs@users.noreply.github.com>
Date: Sat, 17 Oct 2026 11:09:44 +0530
Subject: [PATCH 2/2] test(anchor): preserve fuzz target executable mode

Signed-off-by: Srinivasa Dinakar Jainti <dinakarjs@gmail.com>
---
 conformance/.clusterfuzzlite/fuzz_receipt.py | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 mode change 100644 => 100755 conformance/.clusterfuzzlite/fuzz_receipt.py

diff --git a/conformance/.clusterfuzzlite/fuzz_receipt.py b/conformance/.clusterfuzzlite/fuzz_receipt.py
old mode 100644
new mode 100755