{ "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.", "lane": "wireless-pqc", "repository": "wireless-pqc", "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29", "portfolio_id": "wireless-pqc:mlo-755-zero-accepted", "id": "mlo-755-zero-accepted", "attestation_row": { "attested_at": "2026-09-13", "attestor": "03-wifipqc", "repository": { "withheld": true, "why": "a working-directory name (R8)", "sha256_of_value": "6f37ed958c37482bf7ee04acba61df04492fe3186c1ba6c10b77519cd450c69f", "bytes": 7 }, "source_doc": "CROWN_JEWELS_RESOLVED.md", "source_doc_sha256": "6958cd834026328936c2fbfb51a8b00a4dd5ec6cb65b1d0d8960bcfe0b9e2418", "state": "attested", "top_n": 26, "note_sha256": "c1af3e3220ffc4290cc975a79bf85d216638fd8abd3f4d8e7e67f6f5af0aff3b", "ids_in_row": 26, "file": "dataroom/TOP_N_ATTESTATION.jsonl", "line": 1 }, "claim_source": { "receipt": "wireless-pqc/dataroom/top40.json", "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353", "field": "entries[17].claim", "file": "dataroom/top40.json" }, "top40_entry": { "id": "mlo-755-zero-accepted", "portfolio_id": { "withheld": true, "why": "a working-directory name (R8)", "sha256_of_value": "0de72cd45685df018cfd4cf53d1b272b93af2cf8ed4dd417fc858f9245b5057b", "bytes": 29 }, "rank": 18, "native_rank": 17, "title": "Attacks aimed at the surfaces we admitted were unmodeled: 755 MLO probes, zero accepted, with a naive control that accepts all 755", "claim": "Attacks aimed at surfaces we admitted were unmodeled: 755 MLO probes, zero accepted, with a naive control that accepts all 755.", "scope": "Non-vacuity, not completeness: the naive control is what makes 0/755 meaningful. Modeled surfaces adjudicated by the frozen verifier; no radio.", "artifact_path": "artifacts/native/gap_surfaces_ci.json", "witness_command": "make gap-surfaces", "witness_result": { "status": "RAN", "exit": 0, "line": "ACCEPTANCE: ALL PASS", "seconds": 0.2, "run_at": "2026-09-13T02:32:47Z", "owner_gated": false, "reason": null, "run_of_record": "clean clone at HEAD (S03, dataroom/witness_quality_20260913/clean_clone_baseline.json)" }, "third_party_axis": "—", "facts": { "ran_with_receipt": true, "third_party_graded": false, "negative_control_stated": true, "ip_class_known": false, "reproduce_command": true, "regenerates": false }, "fact_count": 3, "repro_command": "make gap-surfaces", "ip_class": null, "ip_class_basis": "no source in this repository states an IP class for this entry; never guessed" }, "witness_quality_entry": { "id": "mlo-755-zero-accepted", "portfolio_id": { "withheld": true, "why": "a working-directory name (R8)", "sha256_of_value": "0de72cd45685df018cfd4cf53d1b272b93af2cf8ed4dd417fc858f9245b5057b", "bytes": 29 }, "title": "Attacks aimed at the surfaces we admitted were unmodeled: 755 MLO probes, zero accepted, with a naive control that accepts all 755", "claim": "Attacks aimed at surfaces we admitted were unmodeled: 755 MLO probes, zero accepted, with a naive control that accepts all 755.", "class": "ASSERTING", "why": "clean-clone exit 0; every decisive planted defect went red: [0] the shipped MLO admission check stops binding the link-set epoch: a stale-epoch replay is accepted -> exit 2. Clauses the exit code does NOT cover (measured green, not decisive): [1] shorten the probe schedule (n_steps 24 -> 23): the probe count is no longer 755", "witness_command": "make gap-surfaces", "clean_clone": { "exit": 0, "status": "RAN", "seconds": 0.2, "first_line": " [OK ] mlo_multilink_hierarchy: attack 0/755 accepted, legit 36/36, naive control accepts 755", "last_line": "ACCEPTANCE: ALL PASS", "artifact_rewritten": false, "dirtied": [], "run_at": "2026-09-13T02:32:47Z", "reason": null }, "planted_defects": [ { "index": 0, "what": "the shipped MLO admission check stops binding the link-set epoch: a stale-epoch replay is accepted", "falsifies": "property: zero accepted", "decisive": true, "planted": [ { "path": "lib/wifipqc/mlo_dynamic.py", "diff": { "withheld": true, "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)", "sha256_of_value": "380c44e6786bae9558325866c955f4cc081c1a84bbf2c6e28f9543149028e695", "bytes": 180 } } ], "exit": 2, "seconds": 0.2, "last_line": "make: *** [gap-surfaces] Error 1", "failure_moved_by": null }, { "index": 1, "what": "shorten the probe schedule (n_steps 24 -> 23): the probe count is no longer 755", "falsifies": "number: 755 probes", "decisive": false, "planted": [ { "path": "tools/check_gap_surfaces.py", "diff": "'n_steps=24' -> 'n_steps=23' (x2 of 2)" } ], "exit": 0, "seconds": 0.2, "last_line": "ACCEPTANCE: ALL PASS", "failure_moved_by": null } ], "measured": true, "stale_claims_ref": null }, "packet": null, "measured": { "measured": true, "basis": "planted_defects[].exit = 2", "exit": 2, "defect_rejected": true }, "register": { "truth_state": "attested", "truth_line": 125, "measured_per_register": true, "witness_class_per_register": "ASSERTING", "ip_class_public": "unknown", "ip_class_sha256": "b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc", "ip_class_source": "TOP_N_CROWN_JEWELS.md:72 @ 102044d55aab", "receipt": "register/CROWN_JEWELS_TRUTH.md", "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022", "ip_class_receipt": "register/ip_class.jsonl", "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca" }, "withheld_fields": [ { "field": "top40.portfolio_id", "codes": [ "LANE_DIRECTORY_NAME" ] }, { "field": "witness_quality.portfolio_id", "codes": [ "LANE_DIRECTORY_NAME" ] }, { "field": "witness_quality.planted_defects[0].planted[0].diff", "codes": [ "PROCESS_NARRATION" ] }, { "field": "attestation_row.repository", "codes": [ "LANE_DIRECTORY_NAME" ] } ], "sources": { "attestation": { "receipt": "wireless-pqc/dataroom/TOP_N_ATTESTATION.jsonl", "source": "dataroom/TOP_N_ATTESTATION.jsonl", "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29", "sha256": "9bf48d398fc36b52f21264edc3a04b8e2c3cd7da3c53f24ec80636897997097e", "bytes": 3364, "visibility": "sealed" }, "top40": { "receipt": "wireless-pqc/dataroom/top40.json", "source": "dataroom/top40.json", "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29", "sha256": "6076db4027d7499ac53b5cf15f9a07bb7e41c38f56fb0f469a62353e10e65353", "bytes": 167747, "visibility": "sealed" }, "witness_quality": { "receipt": "wireless-pqc/dataroom/witness_quality.json", "source": "dataroom/witness_quality.json", "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29", "sha256": "5d379a10112d400163b35100a423124c28e8bfbbdbe4378b71840eda85f75cfe", "bytes": 143046, "visibility": "sealed" }, "repro_index": { "receipt": "wireless-pqc/repro/INDEX.json", "source": "repro/INDEX.json", "commit": "709160c57c9eb875e239acdf1eb3d0c4462e4c29", "sha256": "378fd4a3ce4f44403b7c9ca6a3f19c11895831f892736376c90cf9423037f9eb", "bytes": 26512, "visibility": "sealed" } } }