mirror of
https://github.com/luxfi/corona.git
synced 2026-09-24 00:25:54 +00:00
zeekay
90e96df805
- proofs/easycrypt/: 13 EC files mirroring Pulsar layout, admit budget 0/0 statically pinned by scripts/checks/ec-admits.sh
- proofs/lean-easycrypt-bridge.md: 5-axiom Lean ↔ EC bridge (lagrange_inverse_eval, threshold_partial_response_identity, reconstruct_linear, shamir_correct, add_share_zeroR)
- jasmin/{lib,rlwe,threshold}/: round1/round2/combine .jazz with #ct annotations
- ct/dudect/: Verify + Combine harness (arm64 + x86_64 build tags)
- scripts/check-high-assurance.sh + scripts/checks/{ec-admits,ec-regressions,ec-refinement-scaffold,ec-compile,jasmin,extraction}.sh + check-lean-bridge.sh
- AXIOM-INVENTORY: residual axioms enumerated with closure pathways
- CRYPTOGRAPHER-SIGN-OFF: APPROVED WITH ROADMAP GATES; GATE-1+2+3a CLOSED; GATE-3b (dudect 10⁹ pinned CPU) + GATE-4 (external audit) + GATE-5 (Jasmin extraction filling out byte-walk) roadmap v0.8.0
Tier label: Tier A full closure scaffold landed; matches Pulsar v1.0.7 posture (admit 0/0 + Lean bridges + Jasmin + dudect harness wired). The submission-grade dudect run + external audit are v0.8.0 audit-track items.
50 lines
1.4 KiB
Bash
Executable File
50 lines
1.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# scripts/checks/ec-admits.sh -- EasyCrypt admit-budget gate for Corona.
|
|
#
|
|
# Counts admit. occurrences across the canonical EC file set and
|
|
# fails if the count exceeds the hard-pinned ADMIT_BUDGET. The
|
|
# budget is checked statically (does NOT require easycrypt itself
|
|
# to be installed) so a regression on a CI-host without EC still
|
|
# trips.
|
|
|
|
set -euo pipefail
|
|
|
|
REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
|
|
cd "$REPO_ROOT"
|
|
|
|
EC_ROOT="$REPO_ROOT/proofs/easycrypt"
|
|
|
|
ADMIT_BUDGET=0
|
|
|
|
EC_FILES=(
|
|
"$EC_ROOT/Corona_N1.ec"
|
|
"$EC_ROOT/Corona_N4.ec"
|
|
"$EC_ROOT/lemmas/Corona_CT.ec"
|
|
"$EC_ROOT/lemmas/RLWE_Functional.ec"
|
|
"$EC_ROOT/Corona_N1_Memory.ec"
|
|
"$EC_ROOT/Corona_N1_Signature_Codec.ec"
|
|
"$EC_ROOT/Corona_N1_Combine_Layout.ec"
|
|
"$EC_ROOT/Corona_N1_Sign_Layout.ec"
|
|
"$EC_ROOT/Corona_N1_Combine_Refinement.ec"
|
|
"$EC_ROOT/Corona_N1_Sign_Refinement.ec"
|
|
"$EC_ROOT/Corona_N1_Combine_Wrapper.ec"
|
|
"$EC_ROOT/Corona_N1_Sign_Wrapper.ec"
|
|
"$EC_ROOT/Corona_N1_Extracted.ec"
|
|
)
|
|
|
|
ADMIT_COUNT=0
|
|
for f in "${EC_FILES[@]}"; do
|
|
if [[ -f "$f" ]]; then
|
|
n=$(grep -cE "^[[:space:]]*admit\.[[:space:]]*$" "$f" 2>/dev/null || true)
|
|
[[ -z "$n" ]] && n=0
|
|
ADMIT_COUNT=$((ADMIT_COUNT + n))
|
|
fi
|
|
done
|
|
|
|
echo "==> EasyCrypt admit budget: $ADMIT_COUNT / $ADMIT_BUDGET"
|
|
if [[ $ADMIT_COUNT -gt $ADMIT_BUDGET ]]; then
|
|
echo " [FAIL] admit count exceeds budget"
|
|
exit 2
|
|
fi
|
|
exit 0
|