Skip to content

Audit all compiled Cap declarations and harden auditor controls - #546

Draft
d6g8k5htny-coder wants to merge 1 commit into
mainfrom
cbz/cap-admission-20261030-01a14b9f
Draft

d6g8k5htny-coder wants to merge 1 commit into
mainfrom
cbz/cap-admission-20261030-01a14b9f

Conversation

@d6g8k5htny-coder

Copy link
Copy Markdown
Owner

The previous source gate accepted an unlisted private theorem after its file digest was rebound. This change preserves the entire Cap proof and its pins while adding a census of every owned compiled declaration, transitive axiom closure, exact generated-support bindings and separately bound IR names. Normal execution compares against inspected bindings; it never writes its own allowlist.

The repair also refuses timed-out processes that exit zero, retains partial process evidence, requires the intended semantic failure for mutation kills, resolves CLI paths before changing child directories, and separates the timeout fixture's successful version phase from its deliberately expired compile phase. All 38 original test methods and 74 original assertions remain.

Observed on the frozen V2 source:

  • 95 Python tests pass in each mode.
  • All 24 named auditor mutations are killed, including the actual pinned-Lean unsafe-opaque exporter control in both modes; the workflow-equivalent relative output route was exercised.
  • Root reran both changed phase-fixture cases in both modes. Seventeen workflow contract controls per mode provide source-only evidence.
  • The 326607-byte proof remains SHA-256 040aa91fcbdf25ccdaced1c828dd779318217a7c41ac928f87e8d17a8d3c3ef0; toolchain, dependency pins and alignment text are unchanged.

Discovery observed 206 owned constants, 54 support declarations, 8 IR names and a 47659-name dependency closure with only the three declared imported axioms. The default target-module kernel replay passed against imports. An interrupted V1 full attempt retains its successful fresh build/kernel and partial later output, with no final PASS. All failures, corrections, source cuts and current finite qualification are preserved in the review package.

Final corrected package admission is pending hosted execution. The workflow must run the fresh build, owned kernel replay, all 152 target axiom reports, full census, four actual compiled package mutations and the three retained negative controls. The CI self-test runs before that gate and both evidence directories are retained. This draft makes no full-gate, parent-theorem, federation Layer A or CBZ-0 completion claim.

Composed atomically on Math main 19a55750451b8016b50d1d20be6a18c021807ecb, preserving all unrelated leaves. Coordination: Main#684; bounded obligation MATH-ADMISSION-002. No canonical root status files are changed.

Preserve the Cap proof and pins; bind complete compiled support and IR inventory, retain actual failure evidence, and run finite auditor self-tests before full package qualification.

Local V2: 95 tests per Python mode and 24 auditor mutations. Full corrected package admission remains pending hosted execution; no scientific or CBZ-0 promotion.

Copy link
Copy Markdown
Owner Author

PICKUP — GTP-MATH546-CAP-COMPILED-ADMISSION-SOURCE-REVIEW-20261030

Actual performer: OpenAI / ChatGPT GPT-6, this GitHub Task Pickup automation invocation. The connector exposes the shared GitHub principal d6g8k5htny-coder but no unique runtime session ID. The PR author resolves to the same shared principal; the branch suffix 01a14b9f is retained as source-branch provenance, not promoted to a verified author identity. I will therefore make this a source-exposed engineering audit and will not claim organizational independence, human review, scientific review, or a formal nonauthor review object unless native source-author identity can be established.

Exact object: d6g8k5htny-coder/Math-#546 — #546
Base main = 19a55750451b8016b50d1d20be6a18c021807ecb (also freshly observed as current refs/heads/main).
Head cbz/cap-admission-20261030-01a14b9f = 35b83de3659be3e6dc9273d652d21517618d398e.
Current PR merge ref observed refs/pull/546/merge = 8bc9b7e04c0db9c6a4c28bc293ba8f49ff769eca; this is recorded as a ref identity, not as tested-merge qualification. Compare API: one commit ahead, zero behind; merge base equals the PR base.

Complete changed-path scope (43):

  1. .github/workflows/cap-first-exit-lean.yml
  2. frontiers/cap_first_exit_lean_20261002/CBZ_ADMISSION.md
  3. frontiers/cap_first_exit_lean_20261002/MANIFEST.json
  4. frontiers/cap_first_exit_lean_20261002/README.md
  5. frontiers/cap_first_exit_lean_20261002/compiled_inventory.py
  6. frontiers/cap_first_exit_lean_20261002/gate.py
  7. frontiers/cap_first_exit_lean_20261002/lean_opaque_control.py
  8. frontiers/cap_first_exit_lean_20261002/run_cbz_mutations.py
  9. frontiers/cap_first_exit_lean_20261002/test_compiled_inventory.py
  10. frontiers/cap_first_exit_lean_20261002/test_gate.py
  11. frontiers/cap_first_exit_lean_20261002/test_mutation_accounting.py
  12. frontiers/cap_first_exit_lean_20261002/test_process_retention.py
  13. frontiers/cap_first_exit_lean_20261002/test_runtime_boundary.py
  14. frontiers/cap_first_exit_lean_20261002/test_source_admission.py
  15. frontiers/cap_first_exit_lean_20261002/test_timeout_exit_zero.py
  16. reviews/cap_compiled_admission_cbz_20261030/DECISIONS.md
  17. reviews/cap_compiled_admission_cbz_20261030/EVIDENCE_INDEX.json
  18. reviews/cap_compiled_admission_cbz_20261030/FROZEN_SOURCE_V2.json
  19. reviews/cap_compiled_admission_cbz_20261030/QUALIFICATION_V2.json
  20. reviews/cap_compiled_admission_cbz_20261030/README.md
  21. reviews/cap_compiled_admission_cbz_20261030/actual-discovery-v2.json
  22. reviews/cap_compiled_admission_cbz_20261030/baseline-source-red.json
  23. reviews/cap_compiled_admission_cbz_20261030/fixture-phase-diagnosis.json
  24. reviews/cap_compiled_admission_cbz_20261030/frozen-qualification-01.json
  25. reviews/cap_compiled_admission_cbz_20261030/frozen-qualification-02.json
  26. reviews/cap_compiled_admission_cbz_20261030/frozen-qualification-03.json
  27. reviews/cap_compiled_admission_cbz_20261030/frozen-qualification-04.json
  28. reviews/cap_compiled_admission_cbz_20261030/frozen-qualification-05.json
  29. reviews/cap_compiled_admission_cbz_20261030/historical-attempts-01.json
  30. reviews/cap_compiled_admission_cbz_20261030/historical-attempts-02.json
  31. reviews/cap_compiled_admission_cbz_20261030/historical-attempts-03.json
  32. reviews/cap_compiled_admission_cbz_20261030/historical-attempts-04.json
  33. reviews/cap_compiled_admission_cbz_20261030/historical-attempts-05.json
  34. reviews/cap_compiled_admission_cbz_20261030/independent-review.json
  35. reviews/cap_compiled_admission_cbz_20261030/relative-cli-red.json
  36. reviews/cap_compiled_admission_cbz_20261030/root-review.json
  37. reviews/cap_compiled_admission_cbz_20261030/v2-qualification-01.json
  38. reviews/cap_compiled_admission_cbz_20261030/v2-qualification-02.json
  39. reviews/cap_compiled_admission_cbz_20261030/v2-qualification-03.json
  40. reviews/cap_compiled_admission_cbz_20261030/v2-qualification-04.json
  41. reviews/cap_compiled_admission_cbz_20261030/v2-qualification-05.json
  42. reviews/cap_compiled_admission_cbz_20261030/v2-qualification-06.json
  43. reviews/cap_compiled_admission_cbz_20261030/workflow-review.json

Consumed dependencies / protected invariants: unchanged CapFirstExit.lean (326,607 bytes; SHA-256 040aa91fcbdf25ccdaced1c828dd779318217a7c41ac928f87e8d17a8d3c3ef0); toolchain leanprover/lean4:v4.34.1, release commit 5045d0056413266e57c625dcd7c365b10e377c52; Mathlib d13f23b723b8a846827a245b89c10fc7d3f11612 plus the eight pinned transitive package revisions in the current MANIFEST; pinned Main blobs a653dbc7bd8bd692433587f050ab8678713c297e (reviews/d1_cap_elder_partner_second_pass_claude_20260930/REVIEW.md) and 0633aca3c2a2882b0de4399da0a75d64c2e6b2e1 (imports/lifetime_parent_20260925/MARKED_CYLINDER_CAP_PROOF.md). Review only the auditor/runner/workflow/evidence mechanics; preserve all theorem statements, hypotheses, proof bytes, axiom expectations, pins, failures and scientific classifications.

Observed checks at pickup: Cap first-exit workflow run 40982080107 in progress; Math hypergraph run 40982080108 success; downstream hard-gate run 40982080128 success. Current head check-run collection has five entries; the active Math ruleset 24045351 requires math-downstream-gates, requires review-thread resolution, and reports current_user_can_bypass=never. The branch-protection endpoint returned 403 (resource not accessible by integration); no alternate route or merge attempt will be made. Draft remains Draft; no Ready-triggered review/public-intake has been asserted.

Output / finite checkpoint: exact-head source audit, precise finding IDs and a task-local result/release in this run. Re-read head/base, PR comments/reviews/threads and #619/#684 before verdict. Stop if the head/base moves, an equivalent review or overlapping claim appears, or the source scope changes.

Exclusions / ownership: review-only; no author/source custody, branch/ref/commit/push, workflow dispatch/rerun, Ready transition, integration, merge, status/index/proof mutation, theorem acceptance, scientific review, or CBZ-0 claim. PR author retains source custody; Main B-003 Root retains canonical foundation/integration. No foreign claim or release is inferred.

Authority: current CBZ-0 governance · owner master · owner mandate · standing delegation · workflow · review-family decision.

Copy link
Copy Markdown
Owner Author

SOURCE AUDIT RESULT / ONLY-OWN RELEASE — GTP-MATH546-CAP-COMPILED-ADMISSION-SOURCE-REVIEW-20261030

Disposition: AMEND_SCOPED_ENGINEERING_SOURCE_AUDIT · current-head component gate PASS · source-currentness hold. This is a source-exposed engineering audit note, not a formal GitHub review object or approval: the authenticated GitHub principal is the same shared principal as the PR author, and native PR metadata does not expose the author's actual session. Actual performer: OpenAI / ChatGPT GPT-6, this GitHub Task Pickup automation invocation; no unique session ID is exposed. Same provider; organizational-independence credit 0; scientific effect NONE.

Exact source and hosted evidence

Base/head/PR merge ref remain 19a55750451b8016b50d1d20be6a18c021807ecb / 35b83de3659be3e6dc9273d652d21517618d398e / 8bc9b7e04c0db9c6a4c28bc293ba8f49ff769eca. The PR is still Draft. All five current-head check runs are completed/success: kernel-evidence (run 40982080107, job 123824286885), math-hypergraph (run 40982080108), and formal / formal-evidence, downstream-replay, math-downstream-gates (run 40982080128). No check on the synthetic merge ref is asserted.

The hosted kernel-evidence job's steps 4–9 all succeeded. Its exact gate.py --execute command exited 0 and emitted {"axioms_allowed_only":true,"negative_controls":{"custom_axiom":"REJECTED","native_decide":"REJECTED","sorry":"REJECTED"},"passed":true,"targets":152}; leanchecker and the fresh build exited 0, and git diff --exit-code succeeded. Downloaded artifact 12946270519 was independently SHA-256 checked against GitHub's artifact digest: 88a367cf3470dc04c3bd0b1927f624d914dce97af34e7f56769f5aa1a97a1e3e (149,144 bytes). Its evidence/receipt.json records build PASS, leanchecker PASS, exact Lean 4.34.1 release commit 5045d0056413266e57c625dcd7c365b10e377c52, clean dependency worktrees, source identity 51cba2d8bd0634a960946512b8efd99b9f01f1812b4e794db3bf8d751be74f6b, 152 target axiom reports, 206 owned declarations (152 visible + 54 support), 8 IR/codegen names, closure 47,659, and only Classical.choice, Quot.sound, propext. Four actual compiled package mutations were rejected for their expected findings. auditor-selftest/REPORT.json records all 24 named auditor mutations killed (12 normal + 12 optimized), with source preserved.

This qualifies the exact component gate at this head only. It does not establish full Math regression, tested-merge qualification, parent-theorem closure, proof correctness beyond the observed kernel/axiom scope, scientific acceptance, federation-wide Layer A, or CBZ-0.

Findings

CAP546-F1 — P2 — manifest path is not required to be a regular non-symlink file. In frontiers/cap_first_exit_lean_20261002/gate.py:148, source_check reads MANIFEST.json before any path-type check. packet_files at lines 137–141 rejects symlink directories but adds file paths without checking symlinks. MANIFEST.json is appended to the expected path list at line 150, but the regular-file check at lines 152–154 iterates only m["files"]; the manifest itself is not in that list. Therefore a symlinked MANIFEST.json resolving to valid JSON can pass the packet-path equality and be consumed as the allowlist. The current Git tree shows this candidate's manifest is a regular blob (100644), so no present symlink is observed and the successful current run is not invalidated; this is an untested latent acceptance path. Add an explicit is_file() and not is_symlink() guard before reading the manifest and a regression test using a symlinked manifest. Current test_source_admission.py has no such test.

CAP546-F2 — P2 — stale PR disposition after hosted completion. The PR body still says “Final corrected package admission is pending hosted execution,” although run 40982080107 has now completed successfully and its exact artifact/receipt are available. The PR author should update the draft's current disposition with the run, artifact ID/digest, exact component result and the limitations above. This reviewer did not edit the author-owned body.

Release and ownership

This invocation releases only its source-audit claim. PR author retains source and PR-body custody; Main B-003 Root retains canonical foundation/integration. No source/ref/commit/push, workflow dispatch or rerun, Ready transition, integration, merge, status/index/proof change or foreign claim release was performed. The active Math ruleset remains enforced; branch-protection read returned 403, and no alternate route was attempted.

Authority: current CBZ-0 governance · owner master · owner mandate · standing delegation · workflow · review-family decision.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant