Repository navigation
D-BAG-FOLD v4: attested pointer lens and candidate-gated execution (lab) - #1939
Merged
Merged
Conversation
New isolated probe crate .claude/probes/2026-11-03-d-bag-fold/probe-v4/ (own [workspace]); v1-v3 unchanged. 21/21 checks. A. Construction-time witnesses on production types: a presence witness minted from the source edge facts (ordered_lane::digest_of over child keys) refuses a plane misaligned at construction, a permuted plane and a deletion that bypasses generation and frame; a pointer lens minted by witnessed seek_from and origin-checked at mint refuses duplicate keys, out-of-bounds, value-chosen and cross-ClassId pointers. FrameStore and OrderedLaneWitness refuse foreign/stale frames and versions. A re-sealed forged table still passes verification: origin is attestable only at mint. B. One mask-risc program (IR unchanged) gates both Gathers by an in-program register (Range and T_in). Equal to Quack's Arm L and the oracle, both Gather disables red; it scales with candidates rather than lane size (1.2x on the smallest lane, 4.7-46.6x on larger ones). Quack's gate_walk cannot lower it. Arm L stays NO-GO for admission; decision memo in REPORT-V4.md. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01XAqKMNZqKXSaeb9g2ypywF
|
Important
This repository does not receive automatic reviews because it has fewer than 10 stars.
|
AdaWorldAPI
marked this pull request as ready for review
November 3, 2026 15:29
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
This was referenced Nov 3, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR adds D-BAG-FOLD v4. #1938 merged before this commit was pushed, so #1938 contains only v3; v4 arrives here as its own change on top of current
main.Everything lives in the isolated crate
.claude/probes/2026-11-03-d-bag-fold/probe-v4/, which has its own[workspace].MaskOp::Gatherruns only inside the lab crate.Results (21/21 checks)
A. Attested pointer lens. Two witnesses are minted at construction:
ordered_lane::digest_ofover child keys. It refuses a plane misaligned at construction, a permuted plane, and a deletion that bypasses the generation and frame.seek_fromand origin-checked at mint. It refuses duplicate keys, out-of-bounds pointers, value-chosen pointers and cross-ClassId pointers.Production
FrameStoreandOrderedLaneWitnessrefuse foreign or stale frames and versions. Remaining gap: a forged table with a re-sealed digest still passes verification, so origin can only be attested at mint.B. Candidate-gated execution. One mask-risc program gates both
Gathers by an in-program register (Range ∧ T_in).Gatherturns it red.gate_walkonly gates by one resident plane.Verdict: Arm L is still NO-GO for admission. It is ready to be written up as a narrowly scoped proposal. The decision memo is
REPORT-V4.md.Board
New entry
D-BAG-FOLD-V4; the entries index is regenerated.Validation
Run
cargo +1.99.0 run --release -qinprobe-v4/; it exits non-zero if any check fails. The sibling../ndarraycheckout is required.Generated by Claude Code