Repository navigation
index
Compile-Time Mathematical Verification (OmniProof-v4) · 100% Self-Hosted Zero-C Compiler (stage2 == stage3) · 118 [C0011] Constant-Time Crypto Kernels · 2oo2D Clean-Room Safety Envelope · 9-Ecosystem Chameleon FFI · 27 Target Architectures
Lume (v1.1.0, Edition 2026) is a statically typed, formally verified systems, artificial intelligence, cyber-physical, and quantum programming language created by Ricardo Bueno (@OmegaSoftDLL). Lume is engineered from first principles so both human systems engineers and autonomous AI agents can write expressive high-level code whose mathematical contracts, memory discipline, constant-time cryptography, and emitted native machine code are verified end to end.
Lume's entire production toolchain is written 100% in Lume itself (compiler/stage1/):
-
Auditable Seed & Diverse Double-Compilation (
bootstrap/lume0/): Bootstrap starts from a frozen ~4.8k-LoC C11 interpreter and ELF64 emitter locked bybootstrap/lume0/SEED_FREEZE.sha256. Under David A. Wheeler's Diverse Double-Compilation (DDC), building the self-hosted compiler via independent C compilers (ccandclang) converges to the exact same SHA-256 native compiler binary (0byte difference). -
Zero-C Self-Hosted Steady State (
lumec1 == lumec2 == lumec3): Lume compiles, assembles, links, formats, tests, proves, and packages itself in~3.8 swithcc,clang,as, andldcompletely blocked (lume zero-c), verified across134SHA-256-locked manifest files (MANIFEST.sha256) and114table-driven CLI commands (226command & alias names,0parity drift). -
Clean-Room Mutual Assurance: Compiler obligations (
lcaas.src) are independently checked by a zero-compiler-import proof kernel (lcert.src --check-source); emitted x86-64, AArch64, and RISC-V assembly is symbolically validated against AST semantics (ltv.src,ltv_rt.src,ltv_multiarch.src) and exported to.smt2certificates checkedunsatby both Lume's clean-room solver (lsmt.src) and externalz3; structural binary coverage reaches0/9,618uncovered Masking MC/DC conditions (lmcdc.src); critical functions execute in2oo2Ddual-channel lockstep (lsafety_envelope.src) against a clean-room RV32IM compiler (lrv32_lowered.src) sharing0/3,169functions withlumec; and the entire chain is attested by an Ed25519 + X.509v3-signed Tool Qualification Dossier (lume qualify—PASS).
| Lumi — Bioluminescent Chameleon Mascot | 9-Ecosystem Chameleon Lambda Emblem | Official 3D App & Desktop GUI Icon | Harmonized Vector Crest |
|---|---|---|---|
![]() |
![]() |
||
docs/assets/lume-mascot.jpg |
docs/assets/lume-chameleon-emblem.jpg |
docs/assets/lume-icon.jpg (lume.ico) |
docs/assets/lume-mascot-badge.svg |
| Wiki Page | Focus Area | Key Verified Capabilities |
|---|---|---|
| Installation & Setup | Cross-platform setup, containers, AI skills & source bootstrap |
install.sh, install.ps1, Homebrew, GHCR OCI, skills/lume, 134 manifest files, lume qualify --verify
|
| Language Tour & Ergonomics | Contracts, affine ownership, effects, real-time & CT types |
requires/ensures/invariant/law, own/&T/&mut T, / pure [E0200], @no_alloc [E0210], @secret [C0011], .intent
|
| Formal Verification & Prover | Embedded OmniProof-v4 multi-theory solver & lcert kernel |
1,682 proofs, 372 tests, 122 domains; QF_LIA Farkas duals, QF_NIA Horner/Bernstein, < 10 ms cache, --check-source
|
| Binary Assurance, Crypto & Qualification | Machine-code TV, clean-room SMT, MC/DC, CT crypto & 2oo2D
|
694 ltv fns, 18/18 ltv_rt, 100% .smt2 unsat, 0/9,618 MC/DC, 118 [C0011] CT kernels, 87,224-fault 2oo2D, lume qualify PASS
|
| Memory Saga & Atomic Compactor | 4-Tier runtime, Perceus cell reuse & demand-paged LZ1
|
31.8× faster b_loop, 2,733× less RAM b_str, 63b unboxed int + 7B inline UTF-8, 24 B Cons, 43-class GC |
| Universal Chameleon Engine | 9-ecosystem [I0003] FFI, LumePuter VM & Singularity |
256/256 proofs, 160/160 ltv, 0/2,392 MC/DC, C --preprocess, DLPack zero-copy, epoch guards, Bayesian SPC/CUSUM/PAVA |
| 27 Compilation Targets | Native OS binaries, Win64 GUI, GPU, RTL, neural & quantum | ELF64, PE32+, 33,792 B Win64 GUI, Mach-O, ARM64, RV64/RV32, WASM, .safetensors, PTX, SPIR-V, Verilog/VHDL, QASM3, APK/IPA/ISO/UEFI |
| LumeLabs & Community Hub | 7 research divisions, v1.2.0 hardware horizon & governance |
Silicon 2oo2D lockstep, HSM signing, Lean 4 metatheory, multi-node Omega-Mesh, EN/PT-BR community RFCs |
| Guia Completo (PT-BR) | Manual institucional completo em Português do Brasil | Instalação, sintaxe, OmniProof-v4, garantia binária ltv/lmcdc, 118 kernels CT, 2oo2D, memória 4-Tier, Camaleão e 27 alvos |
flowchart TD
SRC["Source (.src) + Contracts (requires / ensures / invariant / law / @bound / @no_alloc / @secret)"] --> FE["1. Frontend & Comptime (01_lexer .. 04_parser_decls)"]
FE --> TY["2. Type, Ownership, Effect & Secret Analysis (06_typecheck · own_flow · 06b_phase3)"]
TY --> PRV["3. OmniProof-v4 Theorem Prover & Proof Cache (lcaas · lproof_cache < 10 ms)"]
PRV --> KRN["Independent Zero-Import Proof Kernel (lcert --check-source [K0005, K0006])"]
PRV --> CG["4. Native Codegen & Direct Assemblers (05_codegen · lasm · larm64 · lriscv · ltarget)"]
CG --> TV["Symbolic Binary Assurance (ltv 694 fns · ltv_rt 18/18 · lsmt + z3 100% unsat)"]
CG --> MCDC["Structural Coverage & Stack Bounds (lmcdc 0/9,618 uncovered · lstack)"]
CG --> ENV["2oo2D Lockstep Envelope (lsafety_envelope vs clean-room lrv32_lowered)"]
KRN --> QUAL["Signed Tool Qualification Dossier (lume qualify PASS · 106/106 Probes · 21/21 Gates)"]
TV --> QUAL
MCDC --> QUAL
ENV --> QUAL
| Pillar | Core Modules (compiler/stage1/) |
Machine-Verified Guarantee |
|---|---|---|
| 1. Zero-C Self-Hosted Compiler |
lume/01_lexer.src .. 07_driver.src, lasm.src, lmod.src, lcli.src
|
lumec == lumec2 == lumec3 (0 diff) + Wheeler DDC (cc vs clang); lasm byte-identical against GNU as across 39,968 instructions; 114-row CLI parity (0 mismatches)
|
2. OmniProof-v4 & lcert Kernel |
06_typecheck.src, 06b_phase3.src, lcaas.src, lcert.src, lproof_cache.src
|
1,682 obligations across 16 batteries (0 runtime/refuted), 372 tests, 122 domains; QF_LIA Farkas duals, QF_NIA Horner/square-completion, < 10 ms proof cache, lcert --check-source
|
3. Binary Assurance, MC/DC & 2oo2D |
ltv.src, ltv_rt.src, lsmt.src, lmcdc.src, lstack.src, lsafety_envelope.src, lrv32_lowered.src, lqualify.src
|
694 ltv functions (687/687 branch correlation), 18/18 runtime helpers, 100% .smt2 unsat, 0/9,618 uncovered MC/DC, 87,224-fault 2oo2D RV32IM lockstep, signed lume qualify PASS
|
| 4. 4-Tier Atomic Memory Runtime |
own_flow.src, runtime_core.lume, arena.src, capsule.src
|
.rodata singletons, 63-bit unboxed ints + 7-byte inline UTF-8 (0 B heap), 24 B Cons, 32 B records, Perceus reuse, 43-class GC, demand-paged LZ1 (31.8× faster, 2,733× less RAM) |
| 5. Constant-Time Crypto & TLS 1.3 |
lcrypto_tls.src, lx509.src, lprotect.src, protect.src
|
118 @secret @no_alloc [C0011] branch-free kernels (ltv [C0010], lstack <= 536 B, 24/24 dudect |t| <= 2.690 < 4.5), TLS 1.3, Ed25519 X.509v3 (6,000/6,000 tamper rejections), SP 800-90B entropy |
| 6. Chameleon FFI, AI, OT & 27 Targets |
lchameleon.src, lneural_cartridge.src, lume_llm_core.src, gfx.src, net.src, lume_quantum_nexus_engine.src, ltarget.src
|
9-ecosystem [I0003] FFI (256/256 obligations), .safetensors & LumePuter weight VMs, 7-DOF/Subsea (77/77), Singularity 68/68), Quantum Nexus, and 27 targets
|
Linux, macOS & WSL2:
curl -fsSL https://github.com/OmegaSoftDLL/lume/releases/latest/download/install.sh | sh
export PATH="$HOME/.lume/bin:$PATH"Homebrew (macOS & Linux):
brew install OmegaSoftDLL/lume/lumeWindows x64 (PowerShell):
irm https://github.com/OmegaSoftDLL/lume/releases/latest/download/install.ps1 | iexlume --version
lume self verify # Verify SHA-256 digests of all 134 manifest files
lume self-prove # Run OmniProof-v4 (16 batteries, 1,682 proofs, 372 tests, 122 domains)
lume qualify --verify # Verify Ed25519 signature + X.509v3 chain of Qualification Dossier@no_alloc
@bound(32)
fn clamp_dose(dose: int, lo: int, hi: int) -> int
requires dose >= 0 and dose <= 10000 and lo >= 0 and lo <= hi and hi <= 5000
ensures result >= lo and result <= hi
= if dose < lo then lo else if dose > hi then hi else dose
@secret
@no_alloc
fn ct_mux_u32(mask: int, a: int, b: int) -> int =
let ma = bit_and(a, 4294967295) in
let mb = bit_and(b, 4294967295) in
ct_select(ct_eq(bit_and(mask, 1), 1), ma, mb)
print clamp_dose(700, 100, 500)
lume prove kernel.src # QF_LIA, @bound [V0002], @no_alloc [E0210] & [C0011]
lume certify kernel.src > kernel.cert.json # Emit SHA-256-bound proof certificate
lume verify-cert --check-source kernel.src kernel.cert.json # Independent lcert kernel + AST check
lume stack kernel.src --json # Exact worst-case stack byte bound
lume tv kernel.src --exec # Symbolic x86-64 equivalence + [C0010] CT check
lume mcdc kernel.src --exec # Native-binary Masking MC/DC witness execution
lume safety-envelope kernel.src --fn clamp_dose --args 700,100,500 # 2oo2D lockstep vs clean-room RV32IM
lume build --critical -g kernel.src -o kernel # Standalone native binary + DWARF v4 debug infostage2 == stage3) · OmniProof-v4 (1,682 Proofs · 372 Tests · 122 Domains) · Signed Qualification Dossier PASS (106/106 Probes · 21/21 Gates · 0/9,618 Uncovered MC/DC) · 118 [C0011] Constant-Time Crypto Kernels · 9-Ecosystem Chameleon FFI ([I0003]) · 27 Targets · Licensed under Apache-2.0
- Home
- Getting Started
- Core Architecture & Assurance
- LumeLabs & Community
- Dossiers & Reference Manuals

