Skip to content

feat(stealth-registry): add Kani formal verification for top 3 invariants (#108)#146

Open
Michvista wants to merge 1 commit into
wraith-protocol:developfrom
Michvista:feat/kani-stealth-registry-invariants
Open

feat(stealth-registry): add Kani formal verification for top 3 invariants (#108)#146
Michvista wants to merge 1 commit into
wraith-protocol:developfrom
Michvista:feat/kani-stealth-registry-invariants

Conversation

@Michvista

Copy link
Copy Markdown

Summary

This PR sets up Kani formal verification in stealth-registry/src/proofs/ to prove correctness-critical invariants.

Proved Invariants

  1. Register-then-Resolve (proof_register_then_resolve): Proves that registering a 64-byte stealth meta-address payload and resolving it immediately returns the exact registered payload.
  2. No Double-Registration / Key Uniqueness (proof_no_duplicate_keys): Proves that active storage entries maintain key uniqueness across mutations.
  3. Expiry Monotonicity (proof_expiry_monotonicity): Proves that TTL extensions during registration and lookup operations result in monotonically non-decreasing expiry ledgers (new_expiry >= old_expiry).

CI & Documentation

  • Added stellar-kani job in .github/workflows/ci.yml using model-checking/kani-github-action@v1.
  • Documented proof claims and non-goals in stellar/stealth-registry/README.md.

Closes #108

@drips-wave

drips-wave Bot commented Jul 26, 2026

Copy link
Copy Markdown

@Michvista Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Kani formal verification of stealth-registry invariants

1 participant