Repository navigation

The approval app's crypto in .dag: bitwise, bignat, SHA-256, P-256 (blocked on MachineWidth reflection) - #11645

Merged

gunbai-bot[bot] merged 39 commits into

mainfrom

session/swift-ibex-621-dag-crypto

Sep 20, 2026

Commits on Sep 18, 2026
- Model signed device redemption for approvals: APNs, Secure Enclave, App Attest, ECDSA P-256
  
  Brian Searls
  and
  claude
  committed
  3ea088b
- Merge wise-owl-628
  gunbc-ci-auto-heal
  committed
  a5d322f
- Device redemption admission fold, stateless challenge, assertion verdicts, route paths
  
  Brian Searls
  and
  claude
  committed
  df5a582
- Signed device redemption, lane A: P-256 ECDSA verify and the ES256 APNs provider token
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  d51fd6a
- Address #11585 reviews: sole-constructed admission and enrolment, injective framing, App Attest current checks
  
  Brian Searls
  and
  claude
  committed
  3dc42b2
- Merge revised #11585 seams: ByteSize sizes, provider token and ECDSA named in their frontiers
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  da8e3a6
- Optional value is none, not Absent (resolve failure found by lane A); split wire contract into approval_device_wire
  
  Brian Searls
  and
  claude
  committed
  bdd8e15
- Merge #11585 fix-ups
  gunbc-ci-auto-heal
  committed
  33575e6
- Emit the cross-language wire vectors (gunbc.auth.approval_device_redemption_fixtures regen)
  
  Brian Searls
  and
  claude
  committed
  c492190
- Rename the frontier to its remaining subject: app_attest_verification_realization_frontier (review 67617)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9aa8fb7
- apns_provider_token takes EpochSecs; the negative-iat refusal is unwritable, not validated (review 67625)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  bdf846f
- Address reviews 67602/67620/67625 and side-chat round 2
  
  Brian Searls
  and
  claude
  committed
  f998bfd
- Merge #11585 f998bfd
  gunbc-ci-auto-heal
  committed
  307a21d
- List join via concat, not the ambiguous bare concat_lists (found by lane A)
  
  Brian Searls
  and
  claude
  committed
  df7fa53
- §4c: drop the prose-only *_note data rows (review 67593); the // blocks already carry them
  
  Brian Searls
  and
  claude
  committed
  7123b08
- review 67668: register the wire vectors as a generated artifact; CAS expectation typed
  
  Brian Searls
  and
  claude
  committed
  cbf5a06
- Import platform_wire and EnrolmentSlotUnreadable explicitly (review 67674)
  
  Brian Searls
  and
  claude
  committed
  48685eb
- Enrolment codes are issued only by the operator over SSH as the store owner (side-chat condition)
  
  Brian Searls
  and
  claude
  committed
  38705b4
- Merge #11585 df7fa53 (concat_lists fix)
  gunbc-ci-auto-heal
  committed
  1cf415f
- Regenerate witnesses.yml: heal stages the new registered vectors artifact (from CI heal bundle)
  
  Brian Searls
  and
  claude
  committed
  77cef72
- wip-regrain
  gunbc-ci-auto-heal
  committed
  cc51797
- Merge #11585 latest
  gunbc-ci-auto-heal
  committed
  2ab413e
- Sign at the raw-signature grain: p256_ecdsa_sign_b64url replaces es256_jwt_sign; the JWS is assembled in .dag (review 67702)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  7da0a5e
- Merge main
  gunbc-ci-auto-heal
  committed
  8c6e454
- Milestone 1 (measurement gate): bitwise, 24-bit-limb bignat, SHA-256 and P-256 ECDSA verify in .dag
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  176d9f7
Commits on Sep 19, 2026
- nist_p256: move three in-body // annotations to module-item grain (the emitter refuses body annotations, DESIGN 4c)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  370b105
- Recurring failure mode: a realization refusal surfaces one phase late, at rustc (18-site receipt from the A1 gate)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  cabb3a9
- Recurring failure mode: the v1 interpreter evaluates bounded-natural arithmetic as unbounded Int (std.bitwise xor reaching 2^33 typed UInt32)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  adf65e0
Commits on Sep 20, 2026
- Merge main; reduce #11645 to the .dag crypto alone
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4e642ea
- std.bounded_nat: the declared operation family for bounded naturals, over a supplied width
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  8b7792a
- std.bounded_nat: the wrapping product stops inheriting the checked product's ceiling
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  95004fb
- std.bounded_nat: decide checked overflow by comparison, not by the type's width
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ff30cbb
- std.bounded_nat: the wrapping ceiling is 42, and the arm no longer claims a falsehood
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  151427e
- std.bignat: sole-construct the carriers, and execute the arithmetic that assumed their invariant
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  7b0ae1d
- Remove two fabricated defaults, and refuse the unchecked mint (review 69034)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  be4f623
- std.bitwise: no intermediate leaves the declared width, and the dead trigger row goes
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  77fcb2b
- Name the consumer frontier's real blocker, and file the unauthorable-RED receipt
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  cb724f3
- word64_add: the repair the 32-bit family got, applied to the 64-bit one
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  d3de668
- nist_p256: the header named a consumer that does not exist, in the present tense
  gunbc-ci-auto-heal
  committed
  bb50768

Commits

Commits on Sep 18, 2026

Commits on Sep 19, 2026

Commits on Sep 20, 2026