Files
zeekay 90e96df805 Tier A full closure (v0.7.0): EC theories admit 0/0 + Lean bridges + Jasmin CT + dudect harness + e2e/fuzz
- proofs/easycrypt/: 13 EC files mirroring Pulsar layout, admit budget 0/0 statically pinned by scripts/checks/ec-admits.sh
- proofs/lean-easycrypt-bridge.md: 5-axiom Lean ↔ EC bridge (lagrange_inverse_eval, threshold_partial_response_identity, reconstruct_linear, shamir_correct, add_share_zeroR)
- jasmin/{lib,rlwe,threshold}/: round1/round2/combine .jazz with #ct annotations
- ct/dudect/: Verify + Combine harness (arm64 + x86_64 build tags)
- scripts/check-high-assurance.sh + scripts/checks/{ec-admits,ec-regressions,ec-refinement-scaffold,ec-compile,jasmin,extraction}.sh + check-lean-bridge.sh
- AXIOM-INVENTORY: residual axioms enumerated with closure pathways
- CRYPTOGRAPHER-SIGN-OFF: APPROVED WITH ROADMAP GATES; GATE-1+2+3a CLOSED; GATE-3b (dudect 10⁹ pinned CPU) + GATE-4 (external audit) + GATE-5 (Jasmin extraction filling out byte-walk) roadmap v0.8.0

Tier label: Tier A full closure scaffold landed; matches Pulsar v1.0.7 posture (admit 0/0 + Lean bridges + Jasmin + dudect harness wired). The submission-grade dudect run + external audit are v0.8.0 audit-track items.
2026-05-19 08:38:09 -07:00

32 lines
1.3 KiB
Bash
Executable File

#!/usr/bin/env bash
# scripts/checks/ec-regressions.sh -- Regression-axiom guards for Corona.
#
# Specific axiom SHAPES that have been retired (or never existed in the
# Corona EC theories) but would silently expand the trust footprint if
# introduced. CI grep-fails if they ever come back.
#
# Currently guarded:
#
# - `declare axiom reshare_preserves_secret`
# Would be the v0.1 behavioral axiom on an abstract R; the Corona
# v0.7.0 theories use a concrete `ReshareHonest` module + an
# algebraic lemma `reshare_preserves_secret_honest` reducing to
# Shamir-zero re-randomisation. Reintroducing the bad shape would
# silently re-open the trust footprint.
set -euo pipefail
REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
EC_ROOT="$REPO_ROOT/proofs/easycrypt"
echo "==> Regression guard: behavioral reshare_preserves_secret axiom"
if grep -RE "^[[:space:]]*declare axiom[[:space:]]+reshare_preserves_secret" \
"$EC_ROOT" >/dev/null 2>&1 ; then
echo " [FAIL] behavioral reshare_preserves_secret axiom reintroduced"
echo " (must remain a discharged lemma on ReshareHonest,"
echo " not a declare axiom on an abstract R)."
exit 2
fi
echo " [ok] no abstract reshare_preserves_secret axiom present"
exit 0