zeekayandHanzo Dev 2fab570b4b conformance: freeze what the predicate DECIDES, not only what it encodes ...

The corpus stated what a validator signs and what a certificate looks like
on the wire. That is necessary and it is not sufficient: an implementation
can reproduce every byte and still finalize on the wrong number of signers,
because encoding and deciding are different questions. A build carrying no
weighted predicate at all passed a corpus that only ever asked it to encode.

So the corpus now asks the other question. Each case states a validator set,
the distinct signers a certificate carries and the rung it attests, and
records what VerifyWeighted decided about it — read from the live predicate,
never restated, the same way the proof-of-possession vector records what
pop.Verify returns.

Both edges of a forty-one seat set are pinned, seven seats apart, so an
implementation that confuses the majority floor for the supermajority floor
cannot pass by accident. The lone holder of a stake majority is pinned
refusing on the COUNT: stake cannot buy a pass past the signer floor, which
is what stops a single holder self-igniting.

Signatures are not the subject. Every vote is resolved as correctly signed,
so a case can only turn on the weighted half. Braiding the two would mean a
weighted rule could not be stated without a key ceremony, and a runner that
lacked one would report PASS by skipping the case — the failure this closes.

The golden alone would let a moved threshold be re-blessed with -update, so
the boundaries are also stated outright and recomputed in arbitrary
precision: 2*voted > total, and 3*voted > 2*total. Neither can share an
off-by-one with the floors it checks.

The export rung's own signer floor (R4) and the keyless denominator (R5) are
left as open decisions rather than frozen expectations, marked where the next
cut extends this section.

Co-authored-by: Hanzo Dev <[email protected]>

2026-09-01 13:18:51 -07:00

..

vectors

rust: the node-bound proof of possession, conforming to the Go oracle

2026-09-01 08:14:10 -07:00

basic_test.rs

rust: the eligibility rule at registration, on the identity the proof binds

2026-09-01 11:08:02 -07:00

cert_conformance.rs

rust: the eligibility rule at registration, on the identity the proof binds

2026-09-01 11:08:02 -07:00

cert.rs

cert: the weight clause Go runs last, the set admitted whole, and one workspace

2026-09-01 11:53:54 -07:00

confidence.rs

consensus: clear the remaining lints, one default apiece

2026-08-28 23:52:23 -07:00

conformance.rs

quasar: count only members, and certify only what is signed

2026-08-28 23:42:05 -07:00

fpc_conformance.rs

fpc: compute the threshold with SHA-256, the hash the network uses

2026-08-28 23:32:37 -07:00

pop_conformance.rs

rust: the node-bound proof of possession, conforming to the Go oracle

2026-09-01 08:14:10 -07:00

rogue_key.rs

rust: the eligibility rule at registration, on the identity the proof binds

2026-09-01 11:08:02 -07:00

verdict_conformance.rs

conformance: freeze what the predicate DECIDES, not only what it encodes

2026-09-01 13:18:51 -07:00