{ "check": "research_seals", "n": 12, "n_ok": 7, "n_diverged": 5, "rows": [ { "name": "outward_provers", "status": "OK", "integrity_ok": true, "match_ok": true, "diverged": [], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "1f3263921040acc10856074761eb698df2d8dd04", "worktree_blob": "1f3263921040acc10856074761eb698df2d8dd04", "reason": "working copy equals the committed blob" }, "actual": { "pv:apple_pq3_kpk_hunt.pv": "NO_BREAK", "pv:cms_allpqc_multirecipient_hunt.pv": "NO_BREAK", "pv:cms_kyber_rfc9629_kpk_fixed_hunt.pv": "NO_BREAK", "pv:cms_kyber_rfc9629_kpk_hunt.pv": "BREAK", "pv:cms_multirecipient_mixedmode_hunt.pv": "BREAK", "pv:composite_kem_kct_control_hunt.pv": "NO_BREAK", "pv:composite_kem_kpk_fixed_hunt.pv": "NO_BREAK", "pv:composite_kem_kpk_hunt.pv": "BREAK", "pv:composite_kem_leak_kpk_hunt.pv": "NO_BREAK", "pv:composite_kem_xwing_control_hunt.pv": "NO_BREAK", "pv:eap_mlkem_xlayer_hunt.pv": "NO_BREAK", "pv:eap_mlkem_xlayer_naive_hunt.pv": "BREAK", "pv:hpke_mlkem_kpk_documented_hunt.pv": "BREAK", "pv:ikev2_no_transform_binding_teeth_hunt.pv": "BREAK", "pv:ikev2_rfc9370_multi_ke_downgrade_hunt.pv": "NO_BREAK", "pv:jose_cose_pqc_kem_kpk_fixed_hunt.pv": "NO_BREAK", "pv:jose_cose_pqc_kem_kpk_hunt.pv": "BREAK", "pv:kem_combiner_cfrg_generic_hunt.pv": "NO_BREAK", "pv:kem_combiner_naive_pkbind_hunt.pv": "BREAK", "pv:mls_no_groupinfo_binding_teeth_hunt.pv": "BREAK", "pv:mls_pq_ciphersuite_downgrade_hunt.pv": "NO_BREAK", "pv:openpgp_pqc_kpk_fixed_hunt.pv": "NO_BREAK", "pv:openpgp_pqc_kpk_hunt.pv": "BREAK", "pv:pqc_handshake_forward_secrecy_hunt.pv": "NO_BREAK", "pv:pqc_keytransport_no_fs_teeth_hunt.pv": "BREAK", "pv:pqxdh_hunt.pv": "NO_BREAK", "pv:pqxdh_signal_kpk_hunt.pv": "NO_BREAK", "pv:pqxdh_unbound_hunt.pv": "BREAK", "pv:ssh_no_kexinit_binding_teeth_hunt.pv": "BREAK", "pv:ssh_pq_kex_downgrade_hunt.pv": "NO_BREAK", "pv:tls13_hybrid_downgrade_hunt.pv": "NO_BREAK", "pv:tls13_no_transcript_binding_teeth_hunt.pv": "BREAK", "pv:tls_hybrid_kemlevel_kpk_hunt.pv": "BREAK", "pv:wifi_pqc_no_rsne_binding_teeth_hunt.pv": "BREAK", "pv:wifi_pqc_owe_downgrade_teeth_hunt.pv": "BREAK", "pv:wifi_pqc_sae_downgrade_hunt.pv": "NO_BREAK", "pv:wifi_pqc_sae_injective_downgrade_hunt.pv": "NO_BREAK", "pv:wifi_pqc_sae_injective_teeth_hunt.pv": "BREAK", "spthy:cms_kyber_rfc9629_kpk_hunt.spthy": "BREAK", "spthy:composite_kem_kpk_fixed_hunt.spthy": "NO_BREAK", "spthy:composite_kem_kpk_hunt.spthy": "BREAK", "spthy:jose_cose_pqc_kem_kpk_hunt.spthy": "BREAK", "spthy:openpgp_pqc_kpk_hunt.spthy": "BREAK", "n_models_pv": 38, "n_novel_break_candidates": 0 } }, { "name": "farkas_payload_kind", "status": "OK", "integrity_ok": true, "match_ok": true, "diverged": [], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "fcf41387736189940418077e3f0a378803f2d6ed", "worktree_blob": "fcf41387736189940418077e3f0a378803f2d6ed", "reason": "working copy equals the committed blob" }, "actual": { "payload_kind": "farkas-linear-bound/1", "n_controls": 6, "verdicts_are_four_valued": true, "native_exit_codes": { "VALID": 0, "REJECTED": 1, "MALFORMED": 2, "REFUSED": 3 }, "controls_expected_exits": [ 0, 1, 3, 1, 2, 4 ], "n_controls_the_payload_checker_decides": 5, "root_check_is_the_envelopes_job": true, "n_vector_digests_recorded": 6, "checker_trusted_base": [ "c99-compiler", "posix-shell", "make" ], "checker_needs_no_json": true, "verify_sh_all_controls_pass": true, "acceptance_count": 1, "manifest_digest_detects_mutation": true } }, { "name": "public_surfaces", "status": "OK", "integrity_ok": true, "match_ok": true, "diverged": [], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "17698ae994a5d7f7b09613eb8a54e8075983066f", "worktree_blob": "17698ae994a5d7f7b09613eb8a54e8075983066f", "reason": "working copy equals the committed blob" }, "actual": { "n_rows": 45, "row_ids": [ "f4:github:nickharris808/farkas-check", "f4:github:nickharris808/pqc-bounds-lean", "f4:github:nickharris808/pqc-dos-embedded", "f4:github:nickharris808/pqc-dos-gate-rtl", "f4:github:nickharris808/pqc-guard-action", "f4:github:nickharris808/pqc-mfb", "f4:github:nickharris808/pqc-migration-mcp", "f4:github:nickharris808/pqc-sizes", "f4:github:nickharris808/pqc-sizes-js", "f4:github:nickharris808/pqc-toolkit", "f4:github:nickharris808/pqc-formal-corpus", "f4:hf_dataset:nickh007/pqc-formal-corpus", "f4:hf_dataset:nickh007/pqc-mfb", "f4:hf_space:nickh007/pqc-explorer", "f4:pypi:pqc-mfb", "f4:pypi:pqc-migration-mcp", "f4:pypi:pqc-sizes", "f4:pypi:pco", "f4:npm:pqc-sizes-js", "f5:pypi:floorgen", "f5:pypi:formal-proof-mcp", "f5:pypi:gatecount", "f5:pypi:gridlock-certify", "f5:pypi:honestbench", "f5:pypi:kvprobe", "f5:pypi:proof-carrying-ci", "f5:pypi:proof-to-code-drift", "f5:pypi:signoff-cert", "f5:hf_search:abstain-corpus", "f5:hf_search:kv-reuse-econ-traces", "f5:hf_search:kv-tenant-isolation-bench", "f5:hf_search:illusion-bench", "f5:hf_search:kv-reuse-econ-bench", "f5:hf_search:llm-tenant-isolation-bench", "f8:pypi:patchproof", "genesis:pypi:interval-core", "genesis:pypi:maxwell-lint", "genesis:pypi:physics-lint", "genesis:pypi:physics-lint-mcp", "genesis:pypi:sparam-lint", "genesis:pypi:touchstone-tools", "genesis:pypi:abstain-bench", "genesis:pypi:chipletos", "lattice:pypi:latticegraph", "lattice:pypi:lattice-graph" ], "n_lanes_with_named_surfaces": 5, "lanes_named_no_name": [ "f2", "f3", "f6" ], "lanes_claiming_no_public_surface": [ "vllm" ], "vocabulary": [ "LIVE_AND_OURS", "LIVE_NOT_OURS", "ABSENT", "UNREACHABLE", "RATE_LIMITED", "WRONG_PAYLOAD" ], "all_verdicts_in_vocabulary": true, "n_rows_without_an_http_status": 0, "control_invented_pypi": "ABSENT", "control_invented_npm": "ABSENT", "control_known_foreign_pypi": "LIVE_NOT_OURS", "control_known_foreign_npm": "LIVE_NOT_OURS", "control_synthetic_403_is_rate_limited_not_absent": true, "control_synthetic_404_is_absent": true, "control_synthetic_200_html_is_wrong_payload": true, "no_row_verdicted_from_register_text": true } }, { "name": "hybrid_citation", "status": "OK", "integrity_ok": true, "match_ok": true, "diverged": [], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "dc73d7e42e8511424708d15193f2fcba8ed65fb7", "worktree_blob": "dc73d7e42e8511424708d15193f2fcba8ed65fb7", "reason": "working copy equals the committed blob" }, "actual": { "n_protocols": 7, "n_valid_certs": 7, "all_resist_teeth_verified": true, "n_rows_with_both_digests": 7, "n_model_files_missing": 0, "main_models": [ "ikev2_rfc9370_multi_ke_downgrade_hunt.pv", "tls13_hybrid_downgrade_hunt.pv", "ssh_pq_kex_downgrade_hunt.pv", "wifi_pqc_sae_downgrade_hunt.pv", "mls_pq_ciphersuite_downgrade_hunt.pv", "eap_mlkem_xlayer_hunt.pv", "pqxdh_hunt.pv" ], "teeth_models": [ "ikev2_no_transform_binding_teeth_hunt.pv", "tls13_no_transcript_binding_teeth_hunt.pv", "ssh_no_kexinit_binding_teeth_hunt.pv", "wifi_pqc_no_rsne_binding_teeth_hunt.pv", "mls_no_groupinfo_binding_teeth_hunt.pv", "eap_mlkem_xlayer_naive_hunt.pv", "pqxdh_unbound_hunt.pv" ], "all_main_RESIST": true, "all_teeth_BREAK": true, "owe_boundary_model": "wifi_pqc_owe_downgrade_teeth_hunt.pv", "owe_boundary_verdict": "BREAK", "family_seal_name": "hybrid_family_seven", "family_seal_blob_matches": true, "digest_binding_detects_mutation": true } }, { "name": "crossproto_budgets_restored", "status": "DIVERGED", "integrity_ok": true, "match_ok": false, "diverged": [ { "key": "n_budgets_without_protocol", "expected": 3, "actual": 0, "tol": null }, { "key": "n_protocols", "expected": 19, "actual": 22, "tol": null } ], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "a5f41f3a93e17323d583ef8617c2a0d53f7bd263", "worktree_blob": "a5f41f3a93e17323d583ef8617c2a0d53f7bd263", "reason": "working copy equals the committed blob" }, "actual": { "n_protocols": 22, "excluded_no_budget": [ "uec" ], "rdma_rocev2_budget": 1024, "cxl_budget": 42, "n_budgets_without_protocol": 0 } }, { "name": "hostapd_2_11_swap", "status": "DIVERGED", "integrity_ok": true, "match_ok": false, "diverged": [ { "key": "all_checks_true", "expected": true, "actual": false, "tol": null }, { "key": "status", "expected": "PASS", "actual": "FAIL", "tol": null } ], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "c9ae8d1acb4b3d04610adbef20522800eb07a42f", "worktree_blob": "c9ae8d1acb4b3d04610adbef20522800eb07a42f", "reason": "working copy equals the committed blob" }, "actual": { "status": "FAIL", "n_checks": 8, "all_checks_true": false, "hostapd_is_2_11": true, "check_names": [ "accept_pcap_has_auth_assoc_eapol", "accept_reaches_completed", "accept_runs_real_pqc_before_access_accept", "pcaps_decode", "reject_invokes_zero_pqc_work", "reject_is_policy_budget_refusal", "reject_pcap_stops_before_assoc_eapol", "reject_prevents_completed" ] } }, { "name": "eap_freeradius_persistent", "status": "DIVERGED", "integrity_ok": true, "match_ok": false, "diverged": [ { "key": "oqs_provider_path_persistent", "expected": true, "actual": false, "tol": null } ], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "5ef258ebc255a69c01dbb0e1d815568d3677a086", "worktree_blob": "5ef258ebc255a69c01dbb0e1d815568d3677a086", "reason": "working copy equals the committed blob" }, "actual": { "downgrade_rejected": true, "tls_pqc_handshake": true, "radius_eaptls_accept": true, "eapol_test_built": true, "oqs_provider_path_persistent": false, "ok": true, "pqc_eaptls_accept_recorded_blind": false, "oqs_provider": "built:/tmp/eap_pqc/oqs-provider/_build/lib/oqsprovider.so" } }, { "name": "claimbom_dilithium", "status": "OK", "integrity_ok": true, "match_ok": true, "diverged": [], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "97ff48d5f0cabae185061d73e9503357cf219062", "worktree_blob": "97ff48d5f0cabae185061d73e9503357cf219062", "reason": "working copy equals the committed blob" }, "actual": { "target_commit": "d35ba3fe5449bee3e6d43e1f296c3ca818bd36be", "n_claim_rows": 9, "n_question_rows": 4, "row_ids": [ "D-C1-official-reference-implementation", "D-C2-fips-204-identification", "D-C3-build-status-badge", "D-C4-coverage-badge", "D-C5-build-procedure", "D-C6-selftest-contract", "D-C7-deterministic-vectors", "D-C8-shared-libraries", "D-C9-hedged-signing-default" ], "row_wheres": { "D-C1-official-reference-implementation": "README.md:5", "D-C2-fips-204-identification": "README.md:5", "D-C3-build-status-badge": "README.md:3", "D-C4-coverage-badge": "README.md:3", "D-C5-build-procedure": "README.md:29-38", "D-C6-selftest-contract": "README.md:40", "D-C7-deterministic-vectors": "README.md:41", "D-C8-shared-libraries": "README.md:69-76", "D-C9-hedged-signing-default": "README.md:61" }, "citations_all_recovered": true, "connectors_expected": [ "ci", "cloud_logs", "datasets", "github", "notebooks", "patents", "registries", "regulatory_docs" ], "connectors_blind": [], "all_verdicts_in_vocabulary": true, "n_unverifiable_from_connector_failure": 0, "has_counterfactual_row": true, "checker_accepts_bom": true, "kyber_bom_spec_digest_unchanged": true, "tally_recorded_blind": { "PARTIAL": 1, "REFUTED": 2, "REPRODUCED": 7, "UNSUPPORTED": 2, "UNVERIFIABLE": 1 } } }, { "name": "claimbom_mlkem_native", "status": "OK", "integrity_ok": true, "match_ok": true, "diverged": [], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "a4abc0dfa47d7b372fb53877c80247db45b894ac", "worktree_blob": "a4abc0dfa47d7b372fb53877c80247db45b894ac", "reason": "working copy equals the committed blob" }, "actual": { "dilithium_bom_spec_digest_unchanged": true, "target_commit": "a1b94a1d903072d5ea1d8ecf434bd9d5518014c0", "n_claim_rows": 7, "n_question_rows": 4, "row_ids": [ "M-C1-mlkem-c90-identification", "M-C2-fork-of-reference", "M-C3-ci-badge", "M-C4-formal-verification", "M-C5-quickstart-build-test", "M-C6-acvp-wycheproof", "M-C7-liboqs-default-since-0-13-0" ], "row_wheres": { "M-C1-mlkem-c90-identification": "README.md:13", "M-C2-fork-of-reference": "README.md:14", "M-C3-ci-badge": "README.md:5", "M-C4-formal-verification": "README.md:16-18", "M-C5-quickstart-build-test": "README.md:35-37", "M-C6-acvp-wycheproof": "README.md:107-108", "M-C7-liboqs-default-since-0-13-0": "README.md:50" }, "citations_all_recovered": true, "connectors_expected": [ "ci", "cloud_logs", "datasets", "github", "notebooks", "patents", "registries", "regulatory_docs" ], "connectors_blind": [], "all_verdicts_in_vocabulary": true, "n_unverifiable_from_connector_failure": 0, "has_counterfactual_row": true, "checker_accepts_bom": true, "kyber_bom_spec_digest_unchanged": true, "tally_recorded_blind": { "PARTIAL": 4, "REFUTED": 1, "REPRODUCED": 5, "UNVERIFIABLE": 1 } } }, { "name": "hybrid_family_seven", "status": "OK", "integrity_ok": true, "match_ok": true, "diverged": [], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "3309c21dad7f7b3e06a30dbe93674fd08c7055ec", "worktree_blob": "3309c21dad7f7b3e06a30dbe93674fd08c7055ec", "reason": "working copy equals the committed blob" }, "actual": { "n_protocols": 7, "n_valid_certs": 7, "all_resist_teeth_verified": true, "eap_main": "RESIST", "eap_teeth": "BREAK", "pqxdh_main": "RESIST", "pqxdh_teeth": "BREAK", "ikev2_main": "RESIST", "tls13_main": "RESIST", "ssh_main": "RESIST", "wifi_sae_main": "RESIST", "mls_main": "RESIST" } }, { "name": "ap_resource_tail_latency", "status": "DIVERGED", "integrity_ok": true, "match_ok": false, "diverged": [ { "key": "accept_all_p95_under_threshold_at_every_load", "expected": false, "actual": true, "tol": null } ], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "9b79e11033ce31917c42640e9edfb363f4225f4f", "worktree_blob": "9b79e11033ce31917c42640e9edfb363f4225f4f", "reason": "working copy equals the committed blob" }, "actual": { "n_arms": 5, "n_loads": 14, "n_seeds": 5, "n_legitimate_rows": 19650, "n_overload_rows": 78600, "n_control_rows": 1750, "threshold_legitimate_p95_us": 25000.0, "constitution_p95_under_threshold_at_every_load": true, "accept_all_p95_under_threshold_at_every_load": true } }, { "name": "dos_law_linux4k", "status": "DIVERGED", "integrity_ok": true, "match_ok": false, "diverged": [ { "key": "naive_slope", "expected": 1.0, "actual": 0.9545957765960068, "tol": 0.02 } ], "git_blob_matches": { "tracked": true, "blob_ok": true, "head_blob": "eabaa0ecf77786f0a87f4abdf6942dbd97aea948", "worktree_blob": "eabaa0ecf77786f0a87f4abdf6942dbd97aea948", "reason": "working copy equals the committed blob" }, "actual": { "page_size_bytes": 4096, "n_abstained": 0, "headline_corroborated_decided": true, "naive_slope": 0.9545957765960068, "incr_slope_ci_contains_zero": true, "incr_bounded_by_cap": true } } ], "note": "A DIVERGED seal is a finding, recorded in NEGATIVE_RESULTS.md; seals are never edited after their run." }