mirror of
https://github.com/luxfi/consensus.git
synced 2026-09-24 00:26:58 +00:00
zeekay
001c57dc1b
Proves the Track-A claim end to end with real SLH-DSA-192s keys:
- independent FIPS-205 sigs -> MagnetarQuorumCert -> VerifyMagnetarQuorum
accepts (standalone + leg + full VerifyConsensusCert envelope);
- each inner record verifies under the STOCK FIPS-205 verifier (magnetar
VerifyCtx over circl/slhdsa) with no Lux machinery — the trustless,
independently-auditable wire-identity claim;
- tamper (flipped sig, re-committed), sub-threshold, and root-mismatch are
hard rejects; the BFT floor is the verifier's, not the cert's;
- cross-family diversity: an ML-DSA cert set is refused at BOTH build and
verify (ErrMagnetarNotHashBased) — a Module-LWE break can't satisfy the
hash-based leg;
- the STARK succinct seam fails closed (ErrMagnetarBackendNotAuditGated);
- suite dispatch can't cross lanes (P3Q suite rejected), hit an unknown
suite, downgrade the param set, or land on the wrong leg kind;
- POLARIS_HASH_PQ / POLARIS_MAX require the right legs and admit Magnetar
ONLY as the trustless rollup, NEVER a threshold sig;
- structural no-dealer/no-shared-secret: disjoint committees with fully
independent keypairs each verify; no shared public key anywhere.
All 16 green (53s).