v0.4.0 — Midnight AI Safety Gateway, Proof Server, 165 Mechanized Theorems

ZirOS v0.4.0

What's New

Midnight AI Safety Gateway (zkf midnight gateway serve)

• 2,978-line verify-only contract checker with ML-DSA-87 signed attestations
• Accepts raw .compact source, compiles with pinned compactc 0.30.0
• Runs fail-closed ZirOS audit pipeline (nonlinear anchoring, underconstraint detection)
• Returns signed pass/fail attestation with BN254 Poseidon commitment
• /ready endpoint exposes compactc version + attestor public key for client preflight
• 8 integration tests including underconstrained contract detection

Midnight Proof Server (zkf midnight proof-server serve)

• 1,076-line production proof server built from 9 official Midnight crates (ledger-8.0.3)
• 10 HTTP endpoints: /prove, /prove-tx, /check, /k, /fetch-params, /version, /proof-versions, /ready, /health
• Dual execution engine: --engine umpg (ZirOS runtime) or --engine upstream (Midnight native)
• Per-job-type telemetry, backpressure, timeout handling
• 5 SED contracts deployed to Midnight preprod through this server

22 Gateway Verification Theorems

• End-to-end composition theorem chaining 18 lemmas across 3 proof files
• 37 Verus verifications, 0 errors
• 3 Rocq attestation cryptography proofs
• Verdict logic, fail-closed, source faithfulness, commitment determinism, compiler pinning, sample completeness, circuit completeness, witness determinism

Verification Ledger: 165 total, 165 mechanized, 0 pending

Compact 0.30.0 — reconciled across frontend, fixtures, tests, and support matrix

TUI Dashboard — self-contained ratatui operator console, no missing crate dependency

Groth16 Deterministic Setup Gate — strict lanes reject dev-seeded artifacts (Verus proven)

F-verified Constant-Time Bridge* — production-called evaluator with honest caveat boundary

Full System in One Binary

This binary includes everything:

• 9 proving backends across 7 finite fields
• 7 circuit frontends (Noir, Circom, Cairo, Compact, Halo2, Plonky3 AIR, zkVM)
• 63 Metal GPU shaders with 50 kernel entrypoints
• iCloud-native storage with witness exclusion
• iCloud Keychain key management with Secure Enclave
• ML-DSA-87 + Ed25519 post-quantum signatures
• Swarm defense (Queen, Sentinel, Warrior, Builder, Diplomat, Identity, Reputation)
• Neural Engine control plane (6 CoreML lanes)
• Distributed proving cluster support
• 23 circuit templates
• 38 CLI commands, 60+ subcommands

Install

curl -fsSL https://github.com/AnubisQuantumCipher/ziros/releases/download/v0.4.0/zkf-aarch64-apple-darwin.tar.gz | tar xz
sudo mv zkf-aarch64-apple-darwin /usr/local/bin/zkf
zkf doctor --json

Requires Apple Silicon (arm64) + macOS 14+.