4c64328884
Two-pass hardening of the #690 demo so no epistemic state is proposer-mintable: Pass 1 (sealed corpus, from the reconciliation pass): - evidence items are references only (evidence_id + content_sha256) resolved against a committed content-addressed corpus (evidence_corpus.json) - support derived from committed subject/predicate match; independence from distinct provenance_root values; proposer support/independence labels are rejected by the closed schema - evidence-strength taxonomy (substrate-capability vs interface-contract) in PUBLIC-DEMO-ROADMAP / DEMO-PACKAGING-CHECKLIST; position-paper refinements Pass 2 (entailment-decided inference, closes a live false-status hazard): - the merged inferred leg required only that premise IDs resolve — a claim with no support citing one unrelated record as a premise was assigned 'inferred' (empirically confirmed). inferred is now decided by generate.proof_chain.entail (sound+complete ROBDD) over resolved corpus premises, cross-checked against the independent truth-table oracle (evals.deductive_logic.oracle, no shared code); proof keys + oracle verdict in the trace; disagreement => defensive refusal; refutation => contradicted - committed adversarial scenario unrelated-premise-still-undetermined proves the attack now lands on undetermined - corpus seal (corpus_sha256) pinned into every evaluated trace; scope refusals no longer consult the corpus; corpus cache hands out copies; claim subject/predicate constrained to atom-compatible snake_case - .gitignore: private packet dir, agent worktrees, tooling artifacts Validation: 30 demo tests; 96 across all three demo suites; 7/7 scenarios double-run byte-identical; 61 architectural invariants green.
62 lines
1.6 KiB
Text
62 lines
1.6 KiB
Text
__pycache__/
|
|
.pytest_cache/
|
|
.hypothesis/
|
|
*.pyc
|
|
.DS_Store
|
|
|
|
*.egg-info/
|
|
traces/
|
|
.formation_cache/
|
|
|
|
core-rs/target/
|
|
core-rs/Cargo.lock
|
|
|
|
uv.lock
|
|
|
|
# Environment secrets — never commit real keys
|
|
.env
|
|
.env.local
|
|
.env.*.local
|
|
|
|
# Benchmark report output
|
|
reports/
|
|
frontier_wave1.json
|
|
|
|
# Claude Code local session artifacts (per-developer, never tracked)
|
|
.claude/
|
|
|
|
# Local macro->micro system map — a per-developer NAVIGATION INDEX (like an IDE
|
|
# symbol index), NOT a project artifact. Regenerated on demand; never tracked.
|
|
.system-map/
|
|
|
|
# Runnable audit-passed showcases (ADR-0112 + ADR-0113) are generated on
|
|
# demand from the signed claim + on-disk lane result files. The inputs
|
|
# are committed; the renders are not.
|
|
evals/audit_passed/
|
|
evals/expert_demos/
|
|
|
|
# ADR-0119.7 — GSM8K sealed-holdout discipline. Only the encrypted
|
|
# .age file may be tracked; plaintext companions must never land in git.
|
|
evals/gsm8k_math/holdouts/v1/cases.jsonl
|
|
evals/gsm8k_math/holdouts/v1/cases_plaintext.jsonl
|
|
evals/gsm8k_math/holdouts/v1/cases-train*
|
|
|
|
# ADR-0172 W3 — math-contemplation proposals are generated on demand; the
|
|
# directory skeleton (.gitkeep) is committed, the generated JSONL is not.
|
|
teaching/math_proposals/proposals.jsonl
|
|
|
|
# ADR-0146 — engine_state/ is per-session mutable checkpoint state; only the
|
|
# module itself (engine_state/__init__.py) is tracked. Runtime-generated files
|
|
# are not source artifacts.
|
|
engine_state/manifest.json
|
|
engine_state/recognizers.jsonl
|
|
engine_state/discovery_candidates.jsonl
|
|
|
|
# Private outreach / personal packet — never tracked
|
|
01_Anthropic/
|
|
|
|
# Agent working directories
|
|
.agents/
|
|
|
|
# Cowork/Claude tooling artifacts
|
|
skills-lock.json
|