Skip to content

Superseded by #18 - #17

Closed
wbnns wants to merge 7 commits into
mainfrom
credibility-pass
Closed

wbnns wants to merge 7 commits into
mainfrom
credibility-pass

Conversation

@wbnns

@wbnns wbnns commented Oct 11, 2026 •

Copy link
Copy Markdown
Member

Superseded by #18.

wbnns added 7 commits October 11, 2026 13:16
…ints to its section

Prior art lists only verified references (von Neumann, Lyons and
Vanderkulk, STAR, Sklaroff, Meyer, Lamport et al., Spector and Gifford,
Rasmussen) with how Mru relates to each. Qualification path maps what
exists to NPR 7150.2, NASA-STD-8739.8, ECSS-E-ST-40C and ECSS-Q-ST-80C by
topic and makes no compliance claim. Metadata for both, and descriptions
updated for the shrinking quorum, quorum crate and Dusk pages.
…mmand path, open questions

New lede without 'decides exactly as fixed TMR'. Each Kani harness is
linked with its scope. Fixed TMR is framed as the baseline, not as what
spacecraft fly; the Shuttle and degradable systems are cited as prior art.
Adds the Degradation-First Principle and corollary (whitepaper section 5),
the KAT outcomes at two replicas with their gaps, the command path, and
open questions. The 1.34x states its no-ground-support assumption. A
RISK-METRIC marker holds the place for Dusk's per-mission risk.
…covered, and a command gate example

The gate example compiles and runs against v0.2.0; its output is pasted.
F´ page: name the four functions the C interface proofs cover; null
pointers are unit-tested, not proved.
…ground support section

cargo run needs --bin because the package has two programs. Times are
from a run on an Apple M4. Useful, service and wrong days are defined as
src/model.rs computes them. The ground table is pasted from a real run and
the 1.34x states that it falls to 1.00x when support never ends. A
DUSK-BASELINES marker holds the place for the new baselines.
…ed; llms.txt summary

Quickstart uses --bin quorum and --bin dusk (cargo run alone is
ambiguous in both repos) and shows the real output lines. Bench run times
measured on an Apple M4. Bench page no longer says both policies 'make the
same decision'. Architecture labels Layers 0 and 2 to 5 'Not built' and
the 1.34x states its ground assumption. llms.txt: no TRL, nine proofs (four
core, five C interface).
…d risk, known-answer test coverage on the bench page, stuckbit in the CLI page; shared styles synced
@wbnns wbnns closed this Oct 11, 2026
@wbnns
wbnns deleted the credibility-pass branch October 11, 2026 14:08
@wbnns wbnns changed the title Credibility pass: proof scope, baselines, coverage, prior art and qualification path Superseded by #18 Oct 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant