Repository navigation
Audit the T74 corrupted-word control against payload equality - #89
Draft
unpaidmoon wants to merge 1 commit into
Draft
unpaidmoon wants to merge 1 commit into
unpaidmoon wants to merge 1 commit into
Conversation
The pinned corrupt() check recompresses a gauge44 byte flip and compares container digests. On zlib 1.3 that recompression already misses the committed pin for the unmutated payload, so the control does not witness the edit. Payload equality accepts the original word and a level-1 recompression and rejects the mutant. No new kappa, and the pinned verifier is unchanged. Co-authored-by: unpaidmoon <unpaidmoon@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Change and mathematical scope
Author-checked audit of one container-digest comparison. No new κ and no selected-frontier change. The selected conditional result remains
605457647/200000000000(decimal0.003027288235) incertificates/selected-result.json.corrupt()inresearch/t74-pivot566-kernel/verify.pyflips one byte ofinputs/gauge44-word-566.json.gz, recompresses withgzip.compress(..., mtime=0), and requires that container digest to equal the committed pin. The bounded hook treats the control as passed when the assertion fails.On CPython 3.12.3 with zlib 1.3, that recompression of the unmutated payload already misses pin
0740b6f33927b9e60c9a7f35e7fcb2fd9ac6e2d3982112428b302a6966a18c73. The committed container is 57,411 bytes and its header is1f8b0800with mtime 0. The mutant's recompression also misses the pin, so the control does not witness the edit. Level-1 recompression of the original payload keeps every decompressed byte and still changes the container digest.Payload equality accepts the committed word and the level-1 recompression, and rejects the one-byte mutant. The immutable container pin remains the identity of the committed file. A different compressed byte stream is not a mathematical mismatch.
This is a scoped audit plus an executable predicate. It is not a new supplier, a physical word, or a multiplication theorem. The pinned T74 verifier is not edited.
Task and overlap
Base
32890bc5de034ab8fc93ac88ead7279a6a416d04(upstreamCrocSwap/integer-mult-boundsmain). Cardportable-replay, priority revision 7, scope refined. The card's canonical-payload method is applied to this one control.Item taken: item 18 of the ordered list below.
Ordered eligible list for session r50. Order is the priority table in
docs/research/current-priorities.md, then catalogue cards that are not already in that table. A row stays while its stated next decision is still open. Dropped before the cut: work this account already delivered, results closed on current main, questions covered by an open pull request, and topics already on a forkcursor/*branch. The four 19 October handoffs (comments 19030045, 19030047, 19030049, 19030053) are in that dropped set.uniform-transfer-auditsupplier-boundary-auditjoint-query-controllerr437-carrier-integrationp104-side-correctionindependent-momentformal-interface-lemmabit-helper-contractbit-new-register-modelcomplex-rank-shape-decodercomplex-new-helper-inventorycentre-path-sharingcoverage-law-changeconnector-alphabet-changeselected-stock-envelopecensus-pruning-auditreplay-runtimeportable-replay).Partial notes on CrocSwap#4100, P104, R437, the rank-8/u2 slack and the selected stock do not close those cards' stated next decisions, so those rows stay ahead of this one.
python3 scripts/find_overlap.py 't74 corrupt control' 'gauge44-word-566' 'corrupted_word'on 2026-10-25. Coverage: local notes complete at32890bc5de034ab8fc93ac88ead7279a6a416d04(7402 head records), 390 open PRs, 4808 discussion records, both paginations complete. Closed PRs were searched through local READMEs and TASK metadata. The seven matches name the gauge44 word in other T74 kernel notes. None states this container-digest gap.Nearest work, and why this is distinct:
research/gzip-container-reproducibilitystates the payload convention and points at the balanced-split required digest;research/gzip-mtime-payloadreproduces one mtime mismatch and leaves that verifier unedited;research/bit589-gzip-replayreplaces two selected-bitcmpchecks. This package is the T74corrupt()control only.The fork PR base is
cursor/upstream-main-32890bc-2659, the pin of upstream main, so the diff is this package. Upstream review should useCrocSwap/integer-mult-boundsmain at32890bc5de034ab8fc93ac88ead7279a6a416d04.Validation
Python 3.12.3, standard library only, from the repository root:
Observed:
The optimized (
-O) run printed the same marker. The checker authenticatesverify.py,PINS.jsonand the gauge44 container, requires the auditedcorrupt()source text, and separates container inequality from payload inequality. Not run: Lean, Docker, the selected cold replay, and the T74 SymPy admission.Credit
The control, the gauge44 word and the committed pin are Marius-Paul Dumitrean's
research/t74-pivot566-kernel. The payload-versus-container convention isresearch/gzip-container-reproducibility. The neighbouring mtime fixture is jwr'sresearch/gzip-mtime-payload. The selected-bit container repair isresearch/bit589-gzip-replay.Prepared by unpaidmoon with substantial Cursor Grok assistance. Apache-2.0. No independent human or formal-kernel review.
Open next questions
Can a successor of the bounded T74 hook replace
corrupt()with a payload inequality while leaving the committed gauge44 container pin untouched? Until that hook changes,corrupted_wordpasses whenever recompression misses the container pin, including on the unmutated word. The first step is a copy of the five failure controls that changes only that predicate. The blocker is the pin ofverify.pyinPINS.json(0b9c52118482a1e1e5f488e9d5877a4cf0f3648ac9e782e80f099de64787323f). This audit does not rerun the admission those controls sit inside.Workflow feedback (optional)
The priority table followed by the remaining catalogue cards is a stable 22-row order, and item 18 is
portable-replayin that order and in catalogue order. A one-line note when a card's stated next decision is actually closed would stop later sessions from keeping a finished row in that list.Link: CrocSwap#1200