{ "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.", "lane": "inference-limits", "repository": "inference-limits", "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db", "portfolio_id": "inference-limits:linear-state-logistics", "id": "linear-state-logistics", "attestation_row": { "attested_at": "2026-09-12", "attestor": "04-aiscaleout", "repository": { "withheld": true, "why": "a working-directory name (R8)", "sha256_of_value": "dc9a8056162a9f8af22c3358adefec1007380f73db3ac6575018b9f67cec86a6", "bytes": 7 }, "source_doc": "TOP_N_CROWN_JEWELS.md", "source_doc_sha256": "15a64fb189e85a28a6fee2c09ec72d602dd019272769f54e167d6cc5bf3c425a", "state": "attested", "top_n": 11, "note_sha256": "cda096249bc344dc78f7c156eaaaaa4915f346127e628cf67243910f731d04df", "ids_in_row": 11, "file": "dataroom/TOP_N_ATTESTATION.jsonl", "line": 1 }, "claim_source": { "receipt": "inference-limits/top40.json", "sha256": "5d74491a747c903d407b42abbeececaf6268df57216a1fac67aa795bc4092b6e", "field": "entries[11].claim", "file": "top40.json" }, "top40_entry": { "id": "linear-state-logistics", "rank": 12, "native_rank": 28, "title": "Linear state logistics with an exhaustive finite reference", "claim": "A state-movement kernel enforcing exactly one live ownership capability, an unreadable escrow phase, epoch and generation binding and stale-transfer refusal, with 9 Lean theorems and an executable finite reference.", "scope": "statefabric/formal/lean/StateLogistics.lean, 9 theorem/lemma declarations. The bench runs and reports 12 non-trivial StateObject workflows passing across abort/commit/evict_reallocate families. FINITE DOMAIN: three control principals, two tickets, bounded epochs and generations, depth eight.", "limits": "FINDING THIS PASS: the widely-quoted '288,000 complete-domain decisions with 0 reference divergences' figure has NO LOCATABLE COMMITTED CERTIFICATE in this repository — `grep -rn '288,000\\|288000' --include=*.json results/` returns only unrelated artifacts. The prior document sourced it to another ranking's Tier-1 run and marked it not reproduced. The claim above is narrowed to what the tree actually carries. It proves agreement with the encoded reference and the stated Lean kernel, NOT distributed-system liveness, partition behaviour or secure hardware custody.", "artifact_path": "statefabric/formal/lean/StateLogistics.lean", "witness_command": "cd statefabric/formal/lean && lake build StateLogistics && cd - >/dev/null && git ls-files '*StateLogistics.lean' | xargs grep -cE '^ *(theorem|lemma) ' && python3 statefabric/experiments/run_state_logistics_bench.py", "witness_result": "exit=0 | Build completed successfully (3 jobs).", "witness_class": "ASSERTING", "third_party_axis": "—", "facts": { "ran_with_receipt": true, "third_party_graded": false, "negative_control_stated": false, "ip_class_known": false, "reproduce_command": true, "regenerates_not_verifies": true }, "fact_count": 3, "repro_command": "cd statefabric/formal/lean && lake build StateLogistics && cd - >/dev/null && git ls-files '*StateLogistics.lean' | xargs grep -cE '^ *(theorem|lemma) ' && python3 statefabric/experiments/run_state_logistics_bench.py", "ip_class": null, "ip_class_basis": { "withheld": true, "why": "a note on the entry's intellectual-property class, which this site does not publish; a hash of the note is kept", "sha256_of_value": "1fa3b0de2499ff0cae5431ddd894e54301c85cc39df867e9e43b4552d055cba7", "bytes": 265 }, "negative_control": null }, "witness_quality_entry": { "id": "linear-state-logistics", "claim": "A state-movement kernel enforcing exactly one live ownership capability, an unreadable escrow phase, epoch and generation binding and stale-transfer refusal, with 9 Lean theorems and an executable finite reference.", "class": "ASSERTING", "why": "S01 counted the theorems with grep and never built them, and asserted only `final_snapshot_valid`. Both halves now run. Planted defect: disabling the kernel's 60 refusal sites drops the rejection count and the assertion disappears.", "witness_command": "cd statefabric/formal/lean && lake build StateLogistics && cd - >/dev/null && git ls-files '*StateLogistics.lean' | xargs grep -cE '^ *(theorem|lemma) ' && python3 statefabric/experiments/run_state_logistics_bench.py", "defect_demonstration": { "id": "linear-state-logistics", "target": "statefabric/state_logistics.py", "defect": "every refusal in the state-movement kernel is disabled (all 60 `raise LogisticsError` sites), so no illegal mutation can be rejected", "witness_command": "cd statefabric/formal/lean && lake build StateLogistics && cd - >/dev/null && git ls-files '*StateLogistics.lean' | xargs grep -cE '^ *(theorem|lemma) ' && python3 statefabric/experiments/run_state_logistics_bench.py", "recorded_exit": 0, "recorded_assertion": "\"illegal_mutations_rejected\": 1100", "mutation": "replaced 60 of 60 occurrences of 'raise LogisticsError' with 'pass # PLANTED DEFECT '", "mutated_exit": 0, "mutated_first_line": "Build completed successfully (3 jobs).", "assertion_present_under_defect": false, "witness_rejects_the_defect": true, "tree_clean_after_restore": true, "restored_exit": 0, "restored_assertion_present": true }, "asserts": "`lake build StateLogistics` elaborates the 9 theorems through the kernel (exit code), the grep prints 9, and the bench executes the kernel and prints \"illegal_mutations_rejected\": 1100 across the claim's ten named mutation families.", "stale_claims_ref": null, "attested": true }, "packet": null, "measured": { "measured": true, "basis": "defect_demonstration.mutated_exit = 0", "exit": 0, "defect_rejected": true }, "register": { "truth_state": "attested", "truth_line": 149, "measured_per_register": true, "witness_class_per_register": "ASSERTING", "ip_class_public": "unknown", "ip_class_sha256": "b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc", "ip_class_source": "reports/TOP_N_CROWN_JEWELS.md:27 @ 7eff877f38ed", "receipt": "register/CROWN_JEWELS_TRUTH.md", "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022", "ip_class_receipt": "register/ip_class.jsonl", "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca" }, "withheld_fields": [ { "field": "attestation_row.repository", "codes": [ "LANE_DIRECTORY_NAME" ] } ], "sources": { "attestation": { "receipt": "inference-limits/dataroom/TOP_N_ATTESTATION.jsonl", "source": "dataroom/TOP_N_ATTESTATION.jsonl", "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db", "sha256": "a674007bd1bcc71c72d9033d28bbf3c0fe0f19bff407993b2a71aacfa57fca6f", "bytes": 1701, "visibility": "sealed" }, "top40": { "receipt": "inference-limits/top40.json", "source": "top40.json", "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db", "sha256": "5d74491a747c903d407b42abbeececaf6268df57216a1fac67aa795bc4092b6e", "bytes": 246151, "visibility": "sealed" }, "witness_quality": { "receipt": "inference-limits/dataroom/witness_quality.json", "source": "dataroom/witness_quality.json", "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db", "sha256": "2d25181a8dde236a009eb4264e63f129382d7641862180d6001c0be2856f9049", "bytes": 82971, "visibility": "sealed" }, "repro_index": { "receipt": "inference-limits/repro/INDEX.json", "source": "repro/INDEX.json", "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db", "sha256": "80ed62f5df6a95c42aa44f13ab11a287c303acf258caf8ff2bd72439f5fc0bf0", "bytes": 46450, "visibility": "sealed" } } }