{ "_doc": "One result, read from the codebase’s own files at the commit named here. Every value is that file’s own, copied verbatim; nothing here is written by hand. A value replaced by {withheld: true, sha256_of_value, bytes} is committed by its sha256 instead of published, for the reason it states, and is never edited. Each whole source file is committed by sha256 below, and its bytes are published only where its visibility says so. The codebase is named by the public subject its files are published under.", "lane": "inference-limits", "repository": "inference-limits", "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db", "portfolio_id": "inference-limits:proof-of-deletion", "id": "proof-of-deletion", "attestation_row": { "attested_at": "2026-09-12", "attestor": "04-aiscaleout", "repository": { "withheld": true, "why": "a working-directory name (R8)", "sha256_of_value": "dc9a8056162a9f8af22c3358adefec1007380f73db3ac6575018b9f67cec86a6", "bytes": 7 }, "source_doc": "TOP_N_CROWN_JEWELS.md", "source_doc_sha256": "15a64fb189e85a28a6fee2c09ec72d602dd019272769f54e167d6cc5bf3c425a", "state": "attested", "top_n": 11, "note_sha256": "cda096249bc344dc78f7c156eaaaaa4915f346127e628cf67243910f731d04df", "ids_in_row": 11, "file": "dataroom/TOP_N_ATTESTATION.jsonl", "line": 1 }, "claim_source": { "receipt": "inference-limits/top40.json", "sha256": "5d74491a747c903d407b42abbeececaf6268df57216a1fac67aa795bc4092b6e", "field": "entries[4].claim", "file": "top40.json" }, "top40_entry": { "id": "proof-of-deletion", "rank": 5, "native_rank": 29, "title": "Proof of deletion as a falsification asset, not a deletion guarantee", "claim": { "withheld": true, "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)", "sha256_of_value": "6125b8ca44e3a31022ddfdf81a2908b59e6bff3667cb08f6e66d8f3c24e5a31a", "bytes": 768 }, "scope": "SIM-ONLY over an mmap file — the artifact states 'NOT a GPU: no VRAM, no cudaMemset, no driver, no accelerator.' 10 store records, 0 differential divergences, erase_complete_no_orphan, cotenant_untouched, keyless_noninterference and soft_delete_leaks_foil all true.", "limits": "THE REGISTRY TITLE IS WRONG AND THIS ENTRY CORRECTS IT. The registry says 'proof-of-deletion certificate PASSED'; there is NO passed key in this certificate, and of its four lean_witnesses the single most load-bearing case for a deletion proof — erase_forbids_serve — is proved NEITHER in Lean NOR in Python while the cert still reads certified:true. A vault backup restores the erased object and the loader opens it at exit 0 WHILE THE RECEIPT STILL VERIFIES. 26,359 ciphertext bytes remain unchanged on disk. Deduplicated records cannot be erased at all. A3 2026-09-09: this entry cited results/data/statefabric/crypto_erasure_cert.json and a command that printed four stored fields of it. That certificate is a different object -- a ten-record key-presence model whose serialised text contains none of the words this claim depends on (probed before the change: 'auditor' False, 'receipt' False, 'backup' False), while erasure_cert.json contains all three. The entry now cites erasure_cert.json and the target that regenerates it, `make erasure`, which was run in this pass: the certificate came back byte-identical and the target's own committed-and-undrifted gate passed.", "artifact_path": "results/data/statefabric/erasure_cert.json", "witness_command": "make erasure PY=python3", "witness_result": "exit=0 | >> ERASURE: suite (vault destruction, CRL freshness, witness independence, device scrub)", "witness_class": "ASSERTING", "third_party_axis": "—", "facts": { "ran_with_receipt": true, "third_party_graded": false, "negative_control_stated": true, "ip_class_known": false, "reproduce_command": true, "regenerates_not_verifies": true }, "fact_count": 4, "repro_command": "make erasure PY=python3", "repro_packet": { "path": "repro/proof-of-deletion/", "index_sha256": "80ed62f5df6a95c42aa44f13ab11a287c303acf258caf8ff2bd72439f5fc0bf0", "grade": "ASSERTING", "kit_pin": "1c5c2cab93f787d750b8064d042ca1d6764226557ccff3ee3bd88e92b2f1e680", "graded_rev": "7f55206b3c140e388a02ef33979c361643173b21" }, "ip_class": null, "ip_class_basis": { "withheld": true, "why": "a note on the entry's intellectual-property class, which this site does not publish; a hash of the note is kept", "sha256_of_value": "1fa3b0de2499ff0cae5431ddd894e54301c85cc39df867e9e43b4552d055cba7", "bytes": 265 }, "negative_control": "36 falsifications RED — 32 against a declared code, 21 of those also at an OBSERVED stage; the remaining 4 are MALFORMED rows that declare no code and are graded null, never as a pass. Plus the paired control: erased → exit 3 E7_KEY_DESTROYED with every policy check off, while the policy-only control → exit 0 LOADED through the same loader." }, "witness_quality_entry": { "id": "proof-of-deletion", "claim": { "withheld": true, "why": "uses a word the published record keeps for its own process (S3.1-DIALECT)", "sha256_of_value": "6125b8ca44e3a31022ddfdf81a2908b59e6bff3667cb08f6e66d8f3c24e5a31a", "bytes": 768 }, "class": "ASSERTING", "why": "A falsification campaign, exit-gated, re-run in full (118 s). Planted defect: the first fail-closed `return False` in statefabric/erasure/receipt.py becomes `return True`, so a receipt that should be refused verifies — the witness exits 2.", "witness_command": "make erasure PY=python3", "defect_demonstration": { "id": "proof-of-deletion", "target": "statefabric/erasure/receipt.py", "defect": "the first fail-closed `return False` in the deletion-receipt verifier becomes `return True`, so a receipt that should be refused verifies", "witness_command": "make erasure PY=python3", "recorded_exit": 0, "recorded_assertion": "PROOF OF DELETION OK", "mutation": "replaced 1 of 1 occurrences of 'return False' with 'return True'", "mutated_exit": 2, "mutated_first_line": ">> ERASURE: suite (vault destruction, CRL freshness, witness independence, device scrub)", "assertion_present_under_defect": false, "witness_rejects_the_defect": true, "tree_clean_after_restore": true, "restored_exit": 0, "restored_assertion_present": true }, "asserts": "the five erasure targets (selfcheck, demo, negative, verify, refused) all run and the campaign prints PROOF OF DELETION OK, with 36 falsifications RED and the paired control (erased -> exit 3 E7_KEY_DESTROYED; policy-only -> exit 0 LOADED).", "stale_claims_ref": null, "attested": true }, "packet": { "id": "proof-of-deletion", "portfolio_id": { "withheld": true, "why": "a working-directory name (R8)", "sha256_of_value": "71dc85b8cb1cb6b67c6be9907ae782fba499b3b232aa315af2bf68f13e81d75e", "bytes": 25 }, "witness_command": "make erasure PY=python3", "path": "repro/proof-of-deletion/", "inputs": 74, "grade": "ASSERTING", "kit2": { "grade": "ASSERTING", "graded_commit": "7f55206b3c140e388a02ef33979c361643173b21", "lane_head_at_grading": "7f55206b3c140e388a02ef33979c361643173b21", "graded_utc": "2026-09-18T18:00:40Z", "reasons": [], "semantic_mutations": { "claim_moving": 6, "repro_red": 6, "witness_runs": 27, "tiers": { "claim_values": { "candidates": 15, "claim_moving": 3, "witness_runs": 14 }, "listed": { "candidates": 2423, "claim_moving": 3, "witness_runs": 13 }, "traced": { "candidates": 0, "claim_moving": 0, "witness_runs": 0 } } }, "neutral_mutations": { "drawn": 81, "repro_red": 0, "coverage": { "listed_inputs_with_edits": 73, "runs": 81 } }, "inputs_graded": 74, "kit_pins_sha256": "1c5c2cab93f787d750b8064d042ca1d6764226557ccff3ee3bd88e92b2f1e680" } }, "measured": { "measured": true, "basis": "defect_demonstration.mutated_exit = 2", "exit": 2, "defect_rejected": true }, "register": { "truth_state": "attested", "truth_line": 150, "measured_per_register": true, "witness_class_per_register": "ASSERTING", "ip_class_public": "unknown", "ip_class_sha256": "b23a6a8439c0dde5515893e7c90c1e3233b8616e634470f20dc4928bcf3609bc", "ip_class_source": "reports/TOP_N_CROWN_JEWELS.md:27 @ 7eff877f38ed", "receipt": "register/CROWN_JEWELS_TRUTH.md", "receipt_sha256": "bde06cf0d3e99644522d18e79b6bd5d84ed4f5c86e315a48fef207e9e49c5022", "ip_class_receipt": "register/ip_class.jsonl", "ip_class_receipt_sha256": "b1e8f97aa6779e0fefed2f7a7726e1a03563b536b497392401b49bb8ef84d4ca" }, "withheld_fields": [ { "field": "packet.portfolio_id", "codes": [ "LANE_DIRECTORY_NAME" ] }, { "field": "top40.claim", "codes": [ "PROCESS_NARRATION" ] }, { "field": "witness_quality.claim", "codes": [ "PROCESS_NARRATION" ] }, { "field": "attestation_row.repository", "codes": [ "LANE_DIRECTORY_NAME" ] } ], "sources": { "attestation": { "receipt": "inference-limits/dataroom/TOP_N_ATTESTATION.jsonl", "source": "dataroom/TOP_N_ATTESTATION.jsonl", "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db", "sha256": "a674007bd1bcc71c72d9033d28bbf3c0fe0f19bff407993b2a71aacfa57fca6f", "bytes": 1701, "visibility": "sealed" }, "top40": { "receipt": "inference-limits/top40.json", "source": "top40.json", "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db", "sha256": "5d74491a747c903d407b42abbeececaf6268df57216a1fac67aa795bc4092b6e", "bytes": 246151, "visibility": "sealed" }, "witness_quality": { "receipt": "inference-limits/dataroom/witness_quality.json", "source": "dataroom/witness_quality.json", "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db", "sha256": "2d25181a8dde236a009eb4264e63f129382d7641862180d6001c0be2856f9049", "bytes": 82971, "visibility": "sealed" }, "repro_index": { "receipt": "inference-limits/repro/INDEX.json", "source": "repro/INDEX.json", "commit": "eb76dce3f6dc0889d822db1c7a5af76dc876d2db", "sha256": "80ed62f5df6a95c42aa44f13ab11a287c303acf258caf8ff2bd72439f5fc0bf0", "bytes": 46450, "visibility": "sealed" } } }