verified: ed25519.t27 states it makes no constant-time claim (Refs #8041) by gHashTag · Pull Request #8065 · gHashTag/t27

gHashTag · 2026-10-09T07:30:36Z

Comment-only change to specs/tri/crypto/ed25519.t27: the header now says plainly that the spec makes no constant-time claim and nothing checks one (sign and public_key touch the secret seed), and it records the #8041 validation results. Generated Rust is byte-identical (t27c gen-rust output == bootstrap/gen/rust/tri/crypto/ed25519.rs); the seal's spec_hash is refreshed and 16/16 tests pass. Not done here: the receipt threat-model note that the issue also asks for.

🤖 Generated with Claude Code

) Replaces the one-line constant-time remark with an honest paragraph: no timing claim is made or checked, sign/public_key touch the secret seed, and the masked selects are shape, not a guarantee. Records the #8041 Wycheproof and differential-fuzz results. Comment-only change: generated Rust is byte-identical; seal spec_hash refreshed, 16/16 tests pass. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

github-actions · 2026-10-09T08:12:53Z

PR Dashboard

Generated at: 2026-10-09 08:12:45 UTC

t27b: eval::arith, the reference interpreter's exact arithmetic, moves to specs/tri/t27b/eval_arith.t27 (Closes #8057) #8086 t27b: eval::arith, the reference interpreter's exact arithmetic, moves to specs/tri/t27b/eval_arith.t27 (Closes #8057) | Created: 2026-10-09 | Updated: 2026-10-09 | 33 failing / 34 total
t27core: the coercions typecheck lets through and Zig refuses (Closes #8080) #8085 t27core: the coercions typecheck lets through and Zig refuses (Closes #8080) | Created: 2026-10-09 | Updated: 2026-10-09 | 29 failing / 32 total
spec(automation): blog-share v5 - releases asked about at once, posted on X after a yes (Closes #8083) #8084 spec(automation): blog-share v5 - releases asked about at once, posted on X after a yes (Closes #8083) | Created: 2026-10-09 | Updated: 2026-10-09 | 27 failing / 28 total
spec(automation): agent-claims-honest v1 -- a claim is backed only by what really happened #8082 spec(automation): agent-claims-honest v1 -- a claim is backed only by what really happened | Created: 2026-10-09 | Updated: 2026-10-09 | 25 failing / 28 total
t27b: a minus the parser folds into a float literal is Zig's negation, from literal_plan.t27 (Closes #7809) #8078 t27b: a minus the parser folds into a float literal is Zig's negation, from literal_plan.t27 (Closes #7809) | Created: 2026-10-09 | Updated: 2026-10-09 | 31 failing / 34 total
port: scripts/gen_w310.py as specs/port/scripts/gen_w310.t27 (Closes #7513) #8073 port: scripts/gen_w310.py as specs/port/scripts/gen_w310.t27 (Closes #7513) | Created: 2026-10-09 | Updated: 2026-10-09 | 25 failing / 28 total
port: scripts/gen_w314.py as specs/port/scripts/gen_w314.t27 (Closes #7514) #8072 port: scripts/gen_w314.py as specs/port/scripts/gen_w314.t27 (Closes #7514) | Created: 2026-10-09 | Updated: 2026-10-09 | 25 failing / 28 total
port: scripts/gen_w315.py as specs/port/scripts/gen_w315.t27 (Closes #7515) #8071 port: scripts/gen_w315.py as specs/port/scripts/gen_w315.t27 (Closes #7515) | Created: 2026-10-09 | Updated: 2026-10-09 | 25 failing / 28 total
port: scripts/gen_w316.py as specs/port/scripts/gen_w316.t27 (Closes #7520) #8070 port: scripts/gen_w316.py as specs/port/scripts/gen_w316.t27 (Closes #7520) | Created: 2026-10-09 | Updated: 2026-10-09 | 25 failing / 28 total
spec(automation): agent-media-kie v1 -- the agent's reels and pictures on Kie, realistic by default #8069 spec(automation): agent-media-kie v1 -- the agent's reels and pictures on Kie, realistic by default | Created: 2026-10-09 | Updated: 2026-10-09 | 25 failing / 28 total
verified: ed25519.t27 states it makes no constant-time claim (Refs #8041) #8065 verified: ed25519.t27 states it makes no constant-time claim (Refs #8041) | Created: 2026-10-09 | Updated: 2026-10-09 | 21 failing / 28 total
t27b ledger: bless lab run 6b6386e15 (81 unlisted, 2 up) #8059 t27b ledger: bless lab run 6b6386e15 (81 unlisted, 2 up) | Created: 2026-10-09 | Updated: 2026-10-09 | 26 failing / 29 total
t27b conformance: where the frame-address refusal stops -- caller-owned slices and cells (Closes #8053) #8056 t27b conformance: where the frame-address refusal stops -- caller-owned slices and cells (Closes #8053) | Created: 2026-10-09 | Updated: 2026-10-09 | 9 failing / 33 total
t27b: an untyped list local that the code indexes lowers as a tuple, from a t27 plan (Closes #8050) #8055 t27b: an untyped list local that the code indexes lowers as a tuple, from a t27 plan (Closes #8050) | Created: 2026-10-09 | Updated: 2026-10-09 | 28 failing / 31 total
t27b vacuous: delete 22 empty generated spec stubs (Closes #8052) #8054 t27b vacuous: delete 22 empty generated spec stubs (Closes #8052) | Created: 2026-10-09 | Updated: 2026-10-09 | 4 failing / 31 total
port: scripts/gen_w318.py as specs/port/scripts/gen_w318.t27 (Closes #7766) #8049 port: scripts/gen_w318.py as specs/port/scripts/gen_w318.t27 (Closes #7766) | Created: 2026-10-09 | Updated: 2026-10-09 | 25 failing / 28 total
spec(automation): bot-office-crm v2 -- the owner assigns a task into the client's office #8048 spec(automation): bot-office-crm v2 -- the owner assigns a task into the client's office | Created: 2026-10-09 | Updated: 2026-10-09 | 3 failing / 29 total
port(gen_lockfree_stack, tool-registry): the caller owns the storage, so neither reads a dead frame (Closes #7736) #8047 port(gen_lockfree_stack, tool-registry): the caller owns the storage, so neither reads a dead frame (Closes #7736) | Created: 2026-10-09 | Updated: 2026-10-09 | 28 failing / 31 total
specs(tools/tri): real tests for 10 tool cards, reseal to worktrees (Closes #7952) #8045 specs(tools/tri): real tests for 10 tool cards, reseal to worktrees (Closes #7952) | Created: 2026-10-09 | Updated: 2026-10-09 | 3 failing / 31 total
spec(queen): every dispatch end names its exit reason (Refs #7494) #8043 spec(queen): every dispatch end names its exit reason (Refs #7494) | Created: 2026-10-09 | Updated: 2026-10-09 | 2 failing / 29 total
port: scripts/gen_w322.py as specs/port/scripts/gen_w322.t27 (Closes #7767) #8040 port: scripts/gen_w322.py as specs/port/scripts/gen_w322.t27 (Closes #7767) | Created: 2026-10-09 | Updated: 2026-10-09 | 26 failing / 28 total
feat(spec): jtag tdo_verdict asserts the IR capture ends in 01 (Closes #8030) #8032 feat(spec): jtag tdo_verdict asserts the IR capture ends in 01 (Closes #8030) | Created: 2026-10-09 | Updated: 2026-10-09 | 1 failing / 29 total
port: scripts/gen_w311.py as specs/port/scripts/gen_w311.t27 (Closes #7768) #8031 port: scripts/gen_w311.py as specs/port/scripts/gen_w311.t27 (Closes #7768) | Created: 2026-10-09 | Updated: 2026-10-09 | 27 failing / 28 total
t27b: an anytype parameter the body never reads is void, and a compile-time argument passes for it, from a t27 plan (Closes #7876) #8028 t27b: an anytype parameter the body never reads is void, and a compile-time argument passes for it, from a t27 plan (Closes #7876) | Created: 2026-10-09 | Updated: 2026-10-09 | 30 failing / 33 total
t27b: / and % of two integer constants fold at compile time, as Zig folds them (Closes #7812) #8027 t27b: / and % of two integer constants fold at compile time, as Zig folds them (Closes #7812) | Created: 2026-10-09 | Updated: 2026-10-09 | 30 failing / 33 total
specs/functions: reels-loop-generate, content-scripts-generate -- secrets leave the event payload #8023 specs/functions: reels-loop-generate, content-scripts-generate -- secrets leave the event payload | Created: 2026-10-09 | Updated: 2026-10-09 | 1 failing / 29 total
specs/functions: broadcast-message-send -- one step per batch of 25 #8021 specs/functions: broadcast-message-send -- one step per batch of 25 | Created: 2026-10-09 | Updated: 2026-10-09 | 1 failing / 29 total
Port scripts/tri_loop/gate_sweep.py (Python, 1 function) to specs/port/scripts/tri_loop/gate_sweep.t27 #7993 Port scripts/tri_loop/gate_sweep.py (Python, 1 function) to specs/port/scripts/tri_loop/gate_sweep.t27 | Created: 2026-10-09 | Updated: 2026-10-09 | 2 failing / 29 total
Port gHashTag/trios:crates/trios-cli/src/cmd/gates.rs (Rust, 5 functions) to specs/port/trios/crates/trios-cli/src/cmd/g #7991 Port gHashTag/trios:crates/trios-cli/src/cmd/gates.rs (Rust, 5 functions) to specs/port/trios/crates/trios-cli/src/cmd/g | Created: 2026-10-09 | Updated: 2026-10-09 | 1 failing / 29 total
Port gHashTag/trios:crates/trios-igla-race/src/status.rs (Rust, 2 functions) to specs/port/trios/crates/trios-igla-race/ #7986 Port gHashTag/trios:crates/trios-igla-race/src/status.rs (Rust, 2 functions) to specs/port/trios/crates/trios-igla-race/ | Created: 2026-10-09 | Updated: 2026-10-09 | 2 failing / 29 total
Port gHashTag/trinity:fpga/openxc7-synth/DSP48E1_mock.v (Verilog, 1 module) to specs/port/trinity/fpga/openxc7-synth/DSP #7970 Port gHashTag/trinity:fpga/openxc7-synth/DSP48E1_mock.v (Verilog, 1 module) to specs/port/trinity/fpga/openxc7-synth/DSP | Created: 2026-10-08 | Updated: 2026-10-09 | 1 failing / 31 total
Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-07/src/cover_decoy_ratio_governor.rs (Rust, 1 function) to specs/por #7969 Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-07/src/cover_decoy_ratio_governor.rs (Rust, 1 function) to specs/por | Created: 2026-10-08 | Updated: 2026-10-08 | 1 failing / 29 total
Port gHashTag/trinity:fpga/rtl/fpga_test_reporter.v (Verilog, 1 module) to specs/port/trinity/fpga/rtl/fpga_test_reporte #7926 Port gHashTag/trinity:fpga/rtl/fpga_test_reporter.v (Verilog, 1 module) to specs/port/trinity/fpga/rtl/fpga_test_reporte | Created: 2026-10-08 | Updated: 2026-10-08 | 1 failing / 29 total
t27b: std.math.inf, std.math.log with base e, std.math.log1p and an f64 @round, from libm_plan.t27 (Closes #7923) #7925 t27b: std.math.inf, std.math.log with base e, std.math.log1p and an f64 @round, from libm_plan.t27 (Closes #7923) | Created: 2026-10-08 | Updated: 2026-10-09 | 30 failing / 33 total
Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-05/src/store_compaction_integrity_guard.rs (Rust, 1 function) to spe #7920 Port gHashTag/trios:crates/trios-chat/rings/CR-CHAT-05/src/store_compaction_integrity_guard.rs (Rust, 1 function) to spe | Created: 2026-10-08 | Updated: 2026-10-09 | 2 failing / 29 total
t27b: @log, @log2 and @log10 of an f32 call t27 ports of compiler_rt (Closes #7822) #7918 t27b: @log, @log2 and @log10 of an f32 call t27 ports of compiler_rt (Closes #7822) | Created: 2026-10-08 | Updated: 2026-10-09 | 28 failing / 31 total
t27b: a module var of an optional type that starts as null (Closes #7910) #7913 t27b: a module var of an optional type that starts as null (Closes #7910) | Created: 2026-10-08 | Updated: 2026-10-09 | 30 failing / 33 total
t27b: a local bound to an array repeat [v; n] and passed as [N]T is that array, as gen-zig prints .{ v } ** n (Closes #7909) #7912 t27b: a local bound to an array repeat [v; n] and passed as [N]T is that array, as gen-zig prints .{ v } ** n (Closes #7909) | Created: 2026-10-08 | Updated: 2026-10-09 | 30 failing / 33 total
t27b: @intCast as an array index or a slice bound takes Zig's usize, from int_cast_plan.t27 (Closes #7902) #7905 t27b: @intCast as an array index or a slice bound takes Zig's usize, from int_cast_plan.t27 (Closes #7902) | Created: 2026-10-08 | Updated: 2026-10-09 | 30 failing / 33 total
gen-ts: lower the bodies of pure functions #7872 gen-ts: lower the bodies of pure functions | Created: 2026-10-08 | Updated: 2026-10-08 | 4 failing / 42 total
Port bootstrap/src/compiler.rs lines 23970-24090 (Rust, 8 functions) to specs/port/bootstrap/src/compiler/return_unsized #7797 Port bootstrap/src/compiler.rs lines 23970-24090 (Rust, 8 functions) to specs/port/bootstrap/src/compiler/return_unsized | Created: 2026-10-08 | Updated: 2026-10-08 | 1 failing / 29 total
Port gHashTag/trios:crates/trios-cli/src/cmd/issue.rs (Rust, 2 functions) to specs/port/trios/crates/trios-cli/src/cmd/i #7795 Port gHashTag/trios:crates/trios-cli/src/cmd/issue.rs (Rust, 2 functions) to specs/port/trios/crates/trios-cli/src/cmd/i | Created: 2026-10-08 | Updated: 2026-10-08 | 2 failing / 29 total
Port gHashTag/trinity:fpga/gf16-pipelined/gf16_dot4_p.v (Verilog, 1 module) to specs/port/trinity/fpga/gf16-pipelined/gf #7734 Port gHashTag/trinity:fpga/gf16-pipelined/gf16_dot4_p.v (Verilog, 1 module) to specs/port/trinity/fpga/gf16-pipelined/gf | Created: 2026-10-08 | Updated: 2026-10-08 | 1 failing / 29 total
fpga: systolic wavefront array spec -- matrix multiply as a schedule (for the ai-accelerator course) #7719 fpga: systolic wavefront array spec -- matrix multiply as a schedule (for the ai-accelerator course) | Created: 2026-10-08 | Updated: 2026-10-08 | 5 failing / 37 total
Port scripts/gen_w328.py (Python, 1 function) to specs/port/scripts/gen_w328.t27 #7709 Port scripts/gen_w328.py (Python, 1 function) to specs/port/scripts/gen_w328.t27 | Created: 2026-10-08 | Updated: 2026-10-08 | 3 failing / 29 total
Port fpga/verilog/gft_sadd_jtag.v (Verilog, 1 module) to specs/port/fpga/verilog/gft_sadd_jtag.t27 #7708 Port fpga/verilog/gft_sadd_jtag.v (Verilog, 1 module) to specs/port/fpga/verilog/gft_sadd_jtag.t27 | Created: 2026-10-08 | Updated: 2026-10-08 | 2 failing / 29 total
Port gHashTag/trinity:fpga/openxc7-synth/quantum_bridge_zero.v (Verilog, 1 module) to specs/port/trinity/fpga/openxc7-sy #7707 Port gHashTag/trinity:fpga/openxc7-synth/quantum_bridge_zero.v (Verilog, 1 module) to specs/port/trinity/fpga/openxc7-sy | Created: 2026-10-08 | Updated: 2026-10-08 | 3 failing / 29 total
Port gHashTag/trinity:src/tri/author_attribution_guard.zig (Zig, 2 functions) to specs/port/trinity/src/tri/author_attri #7689 Port gHashTag/trinity:src/tri/author_attribution_guard.zig (Zig, 2 functions) to specs/port/trinity/src/tri/author_attri | Created: 2026-10-08 | Updated: 2026-10-08 | 2 failing / 29 total
Port gHashTag/trinity:src/vibeec/bogatyrs_spec_structure.zig (Zig, 1 function) to specs/port/trinity/src/vibeec/bogatyrs #7644 Port gHashTag/trinity:src/vibeec/bogatyrs_spec_structure.zig (Zig, 1 function) to specs/port/trinity/src/vibeec/bogatyrs | Created: 2026-10-08 | Updated: 2026-10-08 | 3 failing / 29 total
Port gHashTag/trios:crates/trios-mcp/rings/SR-01/src/audits_new.rs (Rust, 4 functions) to specs/port/trios/crates/trios- #7643 Port gHashTag/trios:crates/trios-mcp/rings/SR-01/src/audits_new.rs (Rust, 4 functions) to specs/port/trios/crates/trios- | Created: 2026-10-08 | Updated: 2026-10-08 | 3 failing / 29 total

Summary

Status	Count
Total Open PRs	50
PRs with Failing Checks	36
PRs with All Checks Green	14
READY	0
FAILING	36
PENDING	0
NO CHECKS YET	0

These columns do not partition: 0 + 36 + 0 + 0 = 36, and there are 50 open PRs. A PR is being counted twice or not at all.

Seal Status

⚠️ STALE -- sha256(compiler.rs)=3c0ade9e73e4 != manifest seal=87e5cbd3ad94.
The committed NMSE numbers were certified against an older compiler.rs.
Run scripts/reseal-check.sh locally for the two-step reseal command (advisory; not a merge gate).

gHashTag mentioned this pull request Oct 9, 2026

verified: validate the .t27 crypto against Wycheproof and a differential fuzz (sha256, sha512, ed25519) #8041

Open

Navigation Menu

Repository navigation

verified: ed25519.t27 states it makes no constant-time claim (Refs #8041) - #8065

verified: ed25519.t27 states it makes no constant-time claim (Refs #8041)#8065
gHashTag wants to merge 1 commit into
masterfrom
claude/ed25519-ct-note-8041

gHashTag commented Oct 9, 2026

Uh oh!

github-actions Bot commented Oct 9, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

gHashTag commented Oct 9, 2026

Uh oh!

github-actions Bot commented Oct 9, 2026

PR Dashboard

Summary

Seal Status

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant