c3b4d045f1
Implements ADR-0243 §2 honestly per the plan's deviations ledger, correcting the §3 sketch's three pinned defects (SD-A/B/C): - Ingress delegates superposition to sensorium_wave_feed, normalizes once at the owned construction boundary (D-3). - Relaxation is the imaginary-time semigroup psi <- normalize(exp(-(H-lam0)*dt)*psi) (D-1) with a certified, never-assumed convergence certificate (D-2): exact ground energy, achieved Rayleigh energy, eigen-residual, spectral gap, and a psi_digest binding the certificate to the exact state it certifies. - Two checkable problem domains: quadratic_well (convex target-decoding) and propositional (Cl(4,1) blade lattice = assignment lattice of <=5 atoms; diagonal penalty Hamiltonian; entailment via UNSAT(premises & !conclusion) scored against independent truth-table gold). - Egress composes unit-amplitude-density + certificate-binding + versor closure (routes, does not admit, per the dual of SD-A) + ADR-0006 energy classes + E0/E1 crystallization policy. Cold states emit a CrystallizationProposal (epistemic_status pinned SPECULATIVE by the type; D-5/I-03) — never a vault write. - Quarantined off-serving (A-04): lazy barrel export, banned in the transitive subprocess probe and the cohesion AST suite. Adversarial verification (finder/verifier workflow; most verify agents lost to a session limit, every surviving finding reproduced in-tree before acting) surfaced and this closes two real defects beyond the plan text: - egress_gate admitted any unit state paired with any converged certificate from an unrelated run, so CrystallizationProposal could package a foreign psi_digest next to an unrelated certificate_id as false provenance. Fixed by binding the certificate to its state (psi_digest) and refusing mismatches (certificate_state_mismatch). - A state with a spectral gap below the requested tolerance could certify with ZERO ground-space overlap (energy window alone can't resolve it). Certification now also requires the excited weight (E-lam0)/gap <= tol (refusal spectral_gap_below_tolerance), and the degeneracy cluster is capped at the acceptance window so certificates report the honest rate-limiting gap instead of absorbing a hairline split. 38 tests (31 original + 7 hardening: certificate-binding must-reject, gap-refusal + true-ground pair, dense-branch (eigh) refusals, iterate-collapse, Hamiltonian/egress shape must-rejects, E2 hold route, hardcoded canonical entailment verdicts independent of the gold function's code shape). [Verification]: lifecycle+pins+cohesion+transitive 58 passed; in-worktree smoke 176 passed (131s); fast lane 11750 passed, 108 skipped (574s, exit 0).
61 lines
2.3 KiB
Python
61 lines
2.3 KiB
Python
"""A-04 (transitive) — the serve process must not LOAD the wave/fibonacci substrate.
|
|
|
|
The existing `test_phase0_a04_serve_path_quarantines_wave_and_fibonacci` walks only
|
|
`chat/runtime.py`'s own AST import nodes, so it catches DIRECT imports only. The
|
|
stated invariant is process-level ("serve path stays quarantined"; modules labelled
|
|
"never serve"). This pin enforces the stated invariant: importing `chat.runtime` in
|
|
a clean interpreter must not pull any banned module into `sys.modules`.
|
|
|
|
RED until the `core/physics/__init__.py` barrel stops eagerly importing the
|
|
off-serving substrate (Finding #2, docs/research/adr-0241-0242-adversarial-and-fidelity-findings.md).
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import subprocess
|
|
import sys
|
|
from pathlib import Path
|
|
|
|
_ROOT = Path(__file__).resolve().parents[1]
|
|
|
|
# Genuinely off-serving; must never load into the serve process.
|
|
_BANNED = (
|
|
"core.physics.holographic_vault",
|
|
"core.physics.fibonacci_search",
|
|
"core.physics.fibonacci_word_schedule",
|
|
"core.physics.atlas_packing",
|
|
"core.physics.wave_seam",
|
|
"core.physics.wave_energy_boundary",
|
|
"core.physics.multi_scale_energy",
|
|
"core.physics.sensorium_wave_feed",
|
|
"core.physics.cognitive_lifecycle", # ADR-0243 lifecycle — never serve
|
|
# NOTE: core.physics.wave_manifold is intentionally excluded pending the
|
|
# Joshua design ruling (goldtether delegates to it). Add it here if the
|
|
# ruling is "quarantine wave_manifold for real".
|
|
)
|
|
|
|
|
|
def test_import_chat_runtime_does_not_load_offserving_substrate():
|
|
probe = (
|
|
"import importlib, sys, json;"
|
|
"importlib.import_module('chat.runtime');"
|
|
f"banned={list(_BANNED)!r};"
|
|
"leaked=sorted(m for m in sys.modules for b in banned if m==b or m.startswith(b+'.'));"
|
|
"print(json.dumps(leaked))"
|
|
)
|
|
result = subprocess.run(
|
|
[sys.executable, "-c", probe],
|
|
cwd=str(_ROOT),
|
|
capture_output=True,
|
|
text=True,
|
|
env={"PYTHONPATH": str(_ROOT), "PATH": ""},
|
|
)
|
|
assert result.returncode == 0, f"probe failed: {result.stderr[-2000:]}"
|
|
leaked = result.stdout.strip().splitlines()[-1]
|
|
import json as _json
|
|
|
|
leaked_list = _json.loads(leaked)
|
|
assert not leaked_list, (
|
|
"serve process transitively loaded off-serving modules "
|
|
f"(A-04 breach via core/physics barrel): {leaked_list}"
|
|
)
|