jerry/buzz
1
0
Fork 0
mirror of https://github.com/block/buzz.git synced 2026-10-27 20:41:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs(nip-fi): carve release conjunct 1 and detect fixture-placeholder misuse

Browse Source 
Two residuals from the gate-satisfiability lap, both single-clause,
both found by a two-encoding model of the landed bytes:

Release-gate conjunct 1 still required the claim tuple to pass every
applicable oracle. FI-CONF-INTEROP-EXIT is applicable by construction
-- the deferred exception presupposes it, and not-applicable requires
behavioral proof of an absent surface, which a missing second
implementation is not. Deferred is neither pass nor not-applicable, so
under the literal reading the gate still failed on its first conjunct
for exactly the shape the deferral exists to permit; only a reader
supplying the unwritten carve made it pass. The conjunct gains the same
validly-deferred pointer as the other two. This residual was created by
this lap: the sentence is byte-identical across heads, but "deferred"
entered the vocabulary it quantifies over.

The pending-canonical-fixture reserved value was valid only alongside a
deferred exit result, but no listed oracle detected a violation --
FI-CONF-CLAIM-COMPLETE enumerated its rejection grounds and tuple-value
validity was not among them, admitting the one reachable lying-tuple
state: exit run and passed against the published fixture while the
tuple still records the placeholder, defeating the tuple's purpose of
naming the inputs actually run. The row gains that rejection ground.

Verified: two-encoding gate model at the amended text reads literal
one-implementation admission 0 -> 3 with the strict/literal delta
closing to 0, attribution control varying only the conjunct-1 carve
(arms disagree), exemption inert with a second implementation, no leak
to ordinary oracles; fixture-misuse enumeration has the old row
admitting both reachable misuse states and the amended row zero, with
every legal shape kept and an over-broad clause that kills the
legitimate deferred-plus-placeholder shape as the positive control.
Oracle census unchanged at 58.

Co-authored-by: Eva <011987e296fd5006292d2f930b574be47c7801048d1983c46c425d3c95f0cffd@buzz.block.builderlab.xyz>
Signed-off-by: Eva <011987e296fd5006292d2f930b574be47c7801048d1983c46c425d3c95f0cffd@buzz.block.builderlab.xyz>
This commit is contained in:
Eva
2026-08-20 10:57:12 -04:00
parent f76231be52
commit a3fb049a09
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
docs/nips/NIP-FI-CONF.md
View File

@@ -441,7 +441,8 @@ one deployed domain does not activate it.
## Release gate
Before NIP-FI enforcement or discovery is enabled, reviewers verify that one
immutable claim tuple passes every applicable oracle at one reviewed revision;
immutable claim tuple passes every applicable oracle, other than a validly
deferred `FI-CONF-INTEROP-EXIT`, at one reviewed revision;
that the protected-ingress inventory has no uncovered or competing authority;
that every listed oracle, other than a validly deferred `FI-CONF-INTEROP-EXIT`
under **Mutation adequacy**, has a killed, attributed, reachable mutant and every
@@ -460,7 +461,7 @@ They close no item in this gate.
| ID | Required outcome |
|---|---|
| `FI-CONF-CLAIM-COMPLETE` | A report missing an applicable oracle, duplicating one, carrying a result from another claim tuple, claiming a status other than `pass`/`not-applicable` — or `deferred` on any oracle other than `FI-CONF-INTEROP-EXIT` — or omitting mutant evidence for any oracle other than a deferred `FI-CONF-INTEROP-EXIT`, is rejected. |
| `FI-CONF-CLAIM-COMPLETE` | A report missing an applicable oracle, duplicating one, carrying a result from another claim tuple, claiming a status other than `pass`/`not-applicable` — or `deferred` on any oracle other than `FI-CONF-INTEROP-EXIT` — omitting mutant evidence for any oracle other than a deferred `FI-CONF-INTEROP-EXIT`, or recording the exit fixture digest `pending-canonical-fixture` with any `FI-CONF-INTEROP-EXIT` result other than `deferred`, is rejected. |
| `FI-CONF-DENIAL-FIXTURES` | Every enumerated private condition has a fixture; core and each claimed profile pass exact identifier/class/owner enumeration agreement; anonymity-set responses compare byte-identical; the distinguishing negative control fails. |
| `FI-CONF-MUTATION` | Every listed oracle — except `FI-CONF-INTEROP-EXIT` while validly deferred, per **Mutation adequacy** — has a singly-applied, attributed, reachability-witnessed mutant killed by that entry's own oracle; the deny-everything and allow-everything global controls fail every oracle **Mutation adequacy** requires of them, with retained evidence; survivors are recorded, not waived. |
| `FI-CONF-INTEROP-EXIT` | Two independent implementations produce, from the documents alone, valid requests equal over the request compared object and per-class denials equal over the denial compared object, and accept each other's output. |