0a17c49693
Phase 3.3 of the generalization arc. Estimation (ADR-0175), deduction serving (ADR-0256) and curriculum serving (ADR-0262) had each written the same seal -> ratify -> SHA-verify -> serve-gate machinery. core/ratified_ledger.py now owns it and states the four rules once: only sealed practice writes; tamper-evidence is structural (a load that cannot reproduce content_sha256 REFUSES); ceilings are not negotiable at the call site; absent evidence is never a license. Each capability keeps a thin adapter that names its artifact and preserves its public API. One real difference is now declared rather than implied: missing_ok distinguishes a ledger a capability SHIPS with (absence = broken deployment, refuse) from one whose practice volume is still being built (absence = nothing earned yet, serve disclosed) — curriculum serving is the second kind today. Safety property is byte-identity, asserted not assumed: re-sealing the committed 25-band deduction ledger through the bridge reproduces it byte-for-byte, so no artifact and no lane pin moves. Effect: a new subject arena now needs a gold corpus and a band key, not a re-implementation of ratification — which is what §3 meant by sequencing the bridge ahead of the second subject. [Verification]: tests/test_ratified_ledger_bridge.py 8 passed; core test --suite deductive 252 passed; estimation/license test set 355 passed; committed deduction ledger byte-identical after reseal.
62 lines
2.5 KiB
Python
62 lines
2.5 KiB
Python
"""Serving-side SERVE license for deduction (deduction-serve arc, Phase 3, ADR-0256).
|
|
|
|
Reads the **ratified, committed** deduction-serve ledger
|
|
(``chat/data/deduction_serve_ledger.json``) and exposes, per propositional
|
|
shape-band, whether the FULL serving pipeline (reader → projector → ROBDD
|
|
engine) has earned ``Action.SERVE`` under the safe default ceilings
|
|
(θ_SERVE=0.99). The engine READS this artifact; it never writes it. The
|
|
artifact is the sealed-practice output of
|
|
``evals.deduction_serve.practice.runner.seal_ledger`` — its ``content_sha256``
|
|
is verified on load, so a hand-edited (un-ratified) ledger is rejected rather
|
|
than silently trusted.
|
|
|
|
The load/verify/gate mechanics live in ``core.ratified_ledger`` (ADR-0263) —
|
|
this module is the deduction-serve ADAPTER over that bridge: it names the
|
|
artifact, keeps the memoization, and preserves its own public API. Ceilings
|
|
stay at the safe defaults (invariant #4 — the engine cannot raise its own bar).
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
from functools import lru_cache
|
|
from pathlib import Path
|
|
|
|
from core.ratified_ledger import (
|
|
RatifiedLedgerError,
|
|
load_sealed_ledger,
|
|
serve_license,
|
|
)
|
|
from core.reliability_gate import Ceilings, ClassTally, LicenseDecision
|
|
|
|
_LEDGER_PATH = Path(__file__).resolve().parent / "data" / "deduction_serve_ledger.json"
|
|
|
|
|
|
@lru_cache(maxsize=1)
|
|
def load_ratified_ledger() -> dict[str, ClassTally]:
|
|
"""Load + verify the ratified deduction-serve ledger → per-band ``ClassTally``.
|
|
|
|
Raises :class:`RatifiedLedgerError` if the file is absent/malformed or its
|
|
recomputed ``content_sha256`` does not match the committed one (tamper-evidence:
|
|
only the sealed-practice output is trusted, never a hand-edited ledger).
|
|
"""
|
|
return load_sealed_ledger(_LEDGER_PATH)
|
|
|
|
|
|
def deduction_serve_license(
|
|
shape_band: str,
|
|
*,
|
|
ledger: dict[str, ClassTally] | None = None,
|
|
ceilings: Ceilings | None = None,
|
|
) -> LicenseDecision | None:
|
|
"""The ``Action.SERVE`` license for a propositional ``shape_band``, or ``None``.
|
|
|
|
``None`` means the band is absent from the ratified ledger (no committed
|
|
evidence → never licensed; the caller serves a disclosed/hedged surface, the
|
|
safe default). Otherwise the deterministic ``license_for`` verdict under the
|
|
safe default ceilings.
|
|
"""
|
|
ledger = ledger if ledger is not None else load_ratified_ledger()
|
|
return serve_license(shape_band, ledger, ceilings=ceilings)
|
|
|
|
|
|
__all__ = ["RatifiedLedgerError", "deduction_serve_license", "load_ratified_ledger"]
|