mirror of
https://github.com/luxfi/pulsar.git
synced 2026-09-24 00:25:52 +00:00
zeekay
36ccb8b023
GATE-1 (aggregator trust model runbook): DEPLOYMENT-RUNBOOK.md (new) — operator-facing disclosure of the v0.1 reconstruction-aggregator TCB equivalence + mandatory host hardening + pre-deployment checklist + at-runtime monitoring + v0.1 → v0.2 migration plan. GATE-2 (SUBMISSION.md cross-link to BLOCKERS drift): SUBMISSION.md "Headline claim" gains the two-variant disclosure block (v0.1 runnable + v0.2 spec/Jasmin target) with explicit pointer to BLOCKERS.md "Spec ↔ Go-reference protocol drift" and CRYPTOGRAPHER-SIGN-OFF.md §Gates. "What to read first" §12 expanded with load-bearing BLOCKERS entries; §13 adds the cryptographer sign-off as a numbered reviewer step. GATE-4 (doc nits): spec/pulsar.tex §Identifiable abort: Ed25519 → FIPS 204 ML-DSA-65 (CR-6 closure since v1.0.6) at both occurrences (lines 720, 1003). PROOF-CLAIMS.md §3.2 dudect row gains operational-status caveat + cross-link to GATE-3; zeroize.go row added (CR-8 closure). GATE-3 (dudect 10⁹ samples) remains operational — harness arm64 + x86_64 clean per ct/dudect/Makefile + run-submission.sh; submission- grade run is the next nightly gate. Tracked in DEPLOYMENT-RUNBOOK.md.