Skip to content

Lume v1.1.0 — Formally Verified Systems, AI & Quantum Programming Language (Edition 2026)

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Nov 13:45
· 3 commits to main since this release
v1.1.0
abf3284
Lumi — Official Lume Chameleon Mascot

Lume v1.1.0 — Edition 2026

Formally Verified Systems, Artificial Intelligence, Cyber-Physical & Quantum Programming Language

CI
Zero-C Self-Hosted
OmniProof-v4
Qualification Dossier
Constant-Time Crypto
Chameleon Polyglot
Targets
GHCR OCI
License: Apache-2.0

README.md · QUALIFICATION_DOSSIER.md (PASS) · Audit Report (PT-BR) · Official Wiki · Project Board (PROJECTS.md) · LumeLabs (LUMELABS.md) · Community (COMMUNITY.md) · Manual (EN) · Manual (PT-BR) · CHANGELOG.md


Lume v1.1.0 — Live Verification, Self-Hosted Zero-C Compilation & 27 Target Architectures

Executive Summary & Resumo Executivo (EN / PT-BR)

English — Institutional Overview

Lume (v1.1.0, Edition 2026) is a statically typed, formally verified systems, artificial intelligence, cyber-physical, and quantum programming language created by Ricardo Bueno (@OmegaSoftDLL). Engineered from first principles for both human systems engineers and autonomous AI agents, Lume enforces machine-checked mathematical correctness from source-level refinement contracts (requires, ensures, invariant, law, @bound, @no_alloc, @secret) all the way down to emitted native machine instructions.

Unlike conventional language toolchains that depend on external C/C++ compiler back ends, system assemblers, or unverified runtime helpers, Lume's production compiler, assembler, theorem prover, translation validator, MC/DC coverage analyzer, cryptographic stack, and developer tools are written 100% in Lume itself:

  • Auditable Seed & Diverse Double-Compilation (DDC): Bootstrap originates from a minimal, frozen ~4.8k-LoC C11 interpreter and ELF64 emitter locked by bootstrap/lume0/SEED_FREEZE.sha256. Following David A. Wheeler's Diverse Double-Compilation, building the self-hosted toolchain through independent C compilers (cc and clang) converges to the exact same bit-identical native compiler binary (0 byte difference).
  • Zero-C Self-Hosted Steady State (lumec == lumec2 == lumec3): Lume compiles, assembles, links, formats, tests, proves, and packages itself in ~3.8 s (lumec-linux-x86_64 SHA-256 2a32911ee74c39b1…) with all external C compilers and system assemblers/linkers blocked (lume zero-c).
  • Clean-Room Mutual Assurance: No single component acts as an unexamined root of trust. Compiler proofs (lcaas.src) are independently re-checked by a zero-compiler-import proof kernel (lcert.src); emitted x86-64, AArch64, and RISC-V binaries are symbolically validated against AST semantics (ltv.src, ltv_multiarch.src, ltv_rt.src); .smt2 obligations are verified unsat by both a clean-room native solver (lsmt.src) and z3; structural Masking MC/DC is confirmed on real native binaries (lmcdc.src, 0/9,618 uncovered conditions); and critical control kernels run in 2oo2D dual-channel lockstep (lsafety_envelope.src) against a clean-room RV32IM compiler (lrv32_lowered.src) sharing 0/3,169 functions with lumec.

Português (PT-BR) — Resumo Executivo

A Lume (v1.1.0, Edição 2026) é uma linguagem de programação estaticamente tipada e formalmente verificada para sistemas críticos, inteligência artificial, controle ciberfísico e computação quântica, criada por Ricardo Bueno (@OmegaSoftDLL). Projetada desde os primeiros princípios para engenheiros de sistemas e agentes autônomos de IA, a Lume impõe correção matemática verificada por máquina desde contratos de refinamento no código-fonte até as instruções nativas emitidas em binário.

Toda a cadeia produtiva da Lume opera em regime 100% auto-hospedado Zero-C (lumec == lumec2 == lumec3 em ~3,8 s), ancorada por Diverse Double-Compilation (cc vs clang convergindo para o mesmo binário SHA-256 com 0 bytes de diferença) e verificação mútua clean-room: provador estático embarcado OmniProof-v4 (1.682 obrigações formais provadas em 16 baterias, 0 refutadas ou pendentes em runtime, 372 testes unitários e 122 domínios soberanos), validação simbólica de tradução binária (ltv em 694 funções + ltv_rt nos 18/18 helpers de runtime + checagem .smt2 unsat em lsmt e z3), cobertura estrutural Masking MC/DC com 0/9.618 condições descobertas, 118 kernels criptográficos constant-time [C0011] (TLS 1.3, X.509v3 Ed25519 e entropia NIST SP 800-90B), envelope de segurança 2oo2D clean-room RV32IM (87.224 falhas injetadas → 0 não detectadas), runtime de memória atômica em 4 níveis (31,8× mais rápido e 2.733× menos RAM), interoperabilidade poliglota Camaleão para 9 ecossistemas ([I0003]), dossiê de qualificação assinado (lume qualify PASS: 106/106 sondas e 21/21 gates) e compilação nativa direta para 27 arquiteturas.

What Ships in Lume v1.1.0 — Six Institutional Engineering Pillars

1. 100% Self-Hosted Zero-C Compiler, Assembler & Tooling (lumec == lumec2 == lumec3)

  • Bit-Identical Triple-Bootstrap Fixpoint (~3.8 s): Modular self-hosted compiler passes (compiler/stage1/lume/) compile to lumec1 == lumec2 == lumec3 (0 byte diff, SHA-256 2a32911ee74c39b146cba4976ae12644725e8414d262a89847a5328ebfd386e6) with external C toolchains and linkers disabled (lume zero-c).
  • Byte-Verified Multi-Container Native Assembler (lasm.src): Direct binary emission for ELF64, PE32+, Mach-O 64, AVX2 VEX, AVX-512 EVEX, and DWARF v4 debug tables (.debug_info, .debug_line, .symtab), differentially verified byte-for-byte against GNU as across 39,968 generated instructions (1,467 alternate-encoding disassembly-identical lines and 176 malformed lines rejected with [L0001]).
  • Manifest Integrity & Zero-Drift CLI Control Plane (lume_driver.src, lcli.src): 134 SHA-256-locked manifest files (MANIFEST.sha256 audited via lume self verify) and 114 table-driven CLI commands (226 command and alias surfaces with 0 parity drift enforced by lume cli-parity).
  • Integrated Developer Protocol Suite & Bilingual Manuals (linteractive.src, lmanual.src): Native JSON-RPC LSP (lume lsp --stdio), DAP (lume dap --stdio with DWARF v4 line mapping and deterministic stepBack replay), MCP (lume mcp), interactive REPL (lume repl), canonical formatter (lume fmt), and built-in 10-chapter EN / PT-BR programmer's manuals (lume manual / lume manual --pt).

2. Multi-Theory Static Theorem Prover & Proof Kernel (OmniProof-v4)

  • Embedded OmniProof-v4 Verification Suite (lume self-prove): Discharges 1,682 proven formal obligations across 16 proof batteries with 0 runtime-checked or refuted obligations, 372 unit tests, and 122 sovereign domains.
  • Multi-Theory Decision Procedures (lcaas.src):
    • QF_LIA: Exact rational/integer Fourier-Motzkin variable elimination, integer cutting planes, and independently checkable Farkas dual witnesses.
    • QF_NIA: Non-linear polynomial Horner/Bernstein bounding envelopes and native quadratic square-completion.
    • QF_BV, Octagons, Separation Logic & WCET: Bit-vector shift/mask reasoning, relational octagon domains, disjoint heap frame invariants, lexicographic termination ranking, and @bound(N) worst-case execution budgets ([V0002]).
  • Sub-10 ms Incremental SHA-256 Proof Cache (lproof_cache.src): Content-addressed obligation caching delivering < 10 ms warm hits (~6.9–7.4 ms), automatic transitive callee-ensures invalidation, false-theorem refusal ([PC0003]), and fail-closed tamper rejection ([PC0002]).
  • Zero-Compiler-Import Proof Certificate Kernel (lcert.src): Standalone proof checker enforcing lume verify-cert --check-source cryptographic SHA-256 and AST binding ([K0005], [K0006]), continuously hardened by adversarial false-theorem fuzzing (lume prover-fuzz: 0 false contracts accepted across lumec, lcaas, and lcert).

3. Post-Codegen Binary Assurance, 2oo2D Clean-Room Envelope & Signed Qualification (PASS)

  • Symbolic Machine-Code Translation Validation (lume tv — ltv.src, ltv_multiarch.src): Validates 694 compiled functions directly from emitted x86-64, AArch64, and RISC-V instructions against source AST semantics (0 rejected, 7,846 native boundary vectors confirmed, 687/687 1-to-1 AST-to-object branch correlation, 600/600 behavior-altering codegen mutants killed, and transitive [C0010] constant-time enforcement).
  • Symbolic Runtime-Helper Verification (lume tv-rt — ltv_rt.src): Proves all 18/18 emitted integer runtime helpers across 268 execution paths and 462 formal obligations, elevating arithmetic helpers from trusted runtime routines to machine-verified theorems.
  • Dual-Solver .smt2 Certificate Cross-Check (lume smt-check — lsmt.src & z3): Verifies 100% .smt2 QF_UFNIA unsat agreement across both Lume's clean-room native solver (3,820 mutants rejected) and external z3.
  • Zero Uncovered Native Masking MC/DC (lume mcdc --exec — lmcdc.src): Confirms 0/9,618 uncovered Decision + Masking MC/DC obligations executed on real native binaries across all 4 certified modules (lstd.src 0/980, critical_kernels.src 0/112, lchameleon.src 0/2,392, and lsentience.src 0/6,134, with 52 infeasible branches formally discharged by lcert).
  • Worst-Case @no_alloc Stack Bounds (lume stack — lstack.src): Computes exact static stack byte bounds directly over emitted assembly for @no_alloc ([E0210]) hard real-time call DAGs, failing closed (exit 3) on unbounded frames or cycles.
  • 2oo2D Clean-Room Lockstep Envelope (lsafety_envelope.src, lrv32_lowered.src): Executes safety-critical kernels in dual-channel lockstep against an independent clean-room RV32IM compiler sharing 0/3,169 functions with lumec (87,224 injected faults → 0 undetected), and exports standalone multi-board voting bundles (--split / --split-verify / --split-run, specified in docs/41-safety-envelope-split-bundle.md).
  • Ed25519 + X.509v3-Signed Qualification Dossier (lume qualify — PASS): Passes 106/106 positive/negative requirement probes and 21/21 end-to-end assurance gates, tracing 10 High-Level Requirements (HLR) and 44/44 Low-Level Requirements (LLR) (VERIFIED), signed with Ed25519 + X.509v3 (QUALIFICATION_SIGNING_CERT.der, re-verified via lume qualify --verify) alongside 17/17 real-artifact pipeline stages and 36/36 cross-tamper checks in lume synergy-gate.

4. Constant-Time Cryptography, X.509v3 PKI & TLS 1.3

  • 118 @secret @no_alloc [C0011] Branch-Free Kernels (lcrypto_tls.src): Lowered via branch-free conditional moves (cmov) across 15,378 instructions with zero secret-dependent jumps, divisions, or non-kernel calls; transitively verified at the machine-code level (ltv [C0010], 1,068/1,068 CT mutants killed), statically stack-bounded (lstack <= 536 B), and empirically confirmed across 24/24 dudect Welch $t$-test targets (|t| <= 2.690 < 4.5).
  • Authenticated Transport & Primitives (7,232 crypto gate checks): FIPS 180-4 SHA-256 & SHA-512, RFC 4231 HMAC, RFC 5869 HKDF, RFC 8439 ChaCha20-Poly1305 AEAD, RFC 7748 X25519 ECDH, RFC 8032 Ed25519 signatures, and RFC 8446 TLS 1.3 key schedule, transcript binding, and AEAD record protection.
  • Strict X.509v3 Chain Validator & NIST Entropy Health (lx509.src): Deterministic DER/PEM Ed25519 X.509v3 path validator (lume x509, 6,000/6,000 tampered certificate chains refused) and NIST SP 800-90B repetition-count / adaptive-proportion CSPRNG health verification (lume entropy).

5. 4-Tier Atomic Memory Runtime (31.8× Faster, 2,733× Lower RAM) & 9-Ecosystem Chameleon FFI ([I0003])

  • 4-Tier Value Representation & Perceus Reuse (runtime_core.lume, own_flow.src, arena.src):
    • Tier 0 & Tier 1 (0 B heap): Content-addressed .rodata literals, 63-bit unboxed signed integers (with hardware jo __rt_ovf overflow traps), and 7-byte inline UTF-8 register strings eliminating 74.9%–94.9% of short-string heap allocations.
    • Tier 2 & Tier 3: 24 B Cons cells, 32 B shared-shape records, compile-time Perceus cell reuse + SRA, 43-class segregated Mark & Lazy-Sweep GC, and demand-paged LZ1 cold-arena compaction (~355 MB/s pack / ~975 MB/s unpack; 31.8× loop speedup, 2,733× string RAM reduction, 9.0× faster seed bootstrap — detailed in docs/39-memory-saga-and-atomic-compactor-dossier.md).
  • 9-Ecosystem Chameleon Polyglot Interoperability (lchameleon.src — 256/256 obligations): Fail-closed [I0003] unverified[T] $\rightarrow$ verified[T] FFI bridges across C/C++ (built-in --preprocess header macro/typedef preprocessor + Linux io_uring), Rust (cdylib), Python 3.12+ (PyObject* & zero-copy DLPack tensors), Node.js / WASM32 ([I0275] linear-memory bounds), Go (runtime.Pinner), Java 22+ (JNI / Panama FFM), C# / .NET 8+ (P/Invoke / NativeAOT), SQL (PostgreSQL / SQLite / DuckDB exact decimal & ACID WAL), and OpenAPI 3.1 / gRPC.
  • AI, Cyber-Physical, Subsea, Industrial OT & Quantum Engines: Differentiable tensors, .safetensors neural cartridges, LumePuter weight-compiled RV32IM_Zba + Gated-DeltaNet VMs (--target lumeputer-rv32im-weights), openTPU (23/23), MS-RVQ NCM (19/19), 1-bit Bonsai / 1.58-bit ternary / Liquid LFM3 24 kHz LLM routing (41/41), UFE 7-DOF robotics & DNV/API Subsea engineering (77/77 proofs), Dynamical Singularity $\Omega$ ($\tau_{\max} = T_m/4$) & Bayesian SPC, IEC 62443 / IEC 61850 GOOSE / Omega-Mesh P2P (68/68 proofs), and linear-qubit Quantum Nexus ([[9, 1, 3]] surface-code QEC).

6. 27 Universal Compilation Targets & System Packagers

  • Native Desktop, Server & Bare-Metal ISAs: Linux (x86_64-linux-elf, aarch64-linux-elf, riscv64-linux-elf), bare-metal riscv32-none-elf (RV32IM), Windows (x86_64-windows-pe console & Clean Generic Win64 Native GUI x86_64-windows-gui PE32+ Subsystem 2), macOS (aarch64-macos-macho Apple Silicon 16 KiB-aligned & x86_64-macos-macho Intel), and wasm32-wasi.
  • AI Accelerators, Silicon RTL, Quantum & Archival Targets: Verified .safetensors cartridges, lumeputer-rv32im-weights, NVIDIA CUDA PTX 8.0 (nvptx64-nvidia-cuda), Vulkan SPIR-V 1.6 (spirv64-vulkan-compute), synthesizable IEEE Verilog (verilog-rtl) & VHDL (vhdl-rtl), OpenQASM 3.0 (qasm3-quantum), and homopolymer-free quaternary DNA4 (dna-quaternary).
  • One-Command System Packagers: Direct mobile and bootable image builders via lume package apk, lume package ipa, lume package iso (El-Torito BIOS bootable OS), and lume package uefi (BOOTX64.EFI PE32+).

Installation & Cryptographic Verification

1. Linux, macOS & WSL (Fail-Closed One-Line Installer)

curl -fsSL https://github.com/OmegaSoftDLL/Lume/releases/download/v1.1.0/install.sh | sh
export PATH="$HOME/.lume/bin:$PATH"
lume --version
lume self verify
lume self-prove

2. Homebrew (macOS Apple Silicon, macOS Intel & Linux)

brew install OmegaSoftDLL/lume/lume
lume --version

3. Windows x64 (PowerShell)

irm https://github.com/OmegaSoftDLL/Lume/releases/download/v1.1.0/install.ps1 | iex
$env:PATH = "$HOME\.lume\bin;$env:PATH"
lume --version
lume self verify

4. GHCR OCI Container Image (Docker / Podman)

docker pull ghcr.io/omegasoftdll/lume:v1.1.0
docker run --rm ghcr.io/omegasoftdll/lume:v1.1.0 --version
docker run --rm ghcr.io/omegasoftdll/lume:1.1.0 self-prove

5. AI Coding Agent Skill (Antigravity, Claude Code, Cursor, Codex, Windsurf)

npx skills add OmegaSoftDLL/lume@lume -g -y

6. Independent Checksum & Qualification Verification

# 1. Verify downloaded archive integrity against the official SHA256SUMS manifest
curl -fsSLO https://github.com/OmegaSoftDLL/Lume/releases/download/v1.1.0/SHA256SUMS
curl -fsSLO https://github.com/OmegaSoftDLL/Lume/releases/download/v1.1.0/lume-v1.1.0-linux-x86_64.tar.gz
grep "  lume-v1.1.0-linux-x86_64.tar.gz$" SHA256SUMS | sha256sum -c -   # or: shasum -a 256 -c -

# 2. Verify installed 134-file manifest & signed Qualification Dossier (Ed25519 + X.509v3)
lume self verify
lume qualify --verify

Prebuilt Release Assets & Verified SHA-256 Checksums (14 Assets)

Every archive and binary below is built in clean GitHub Actions runners, run-verified natively (and under qemu-aarch64 / qemu-riscv64 for cross-ISA Linux bundles), negative-tamper tested against corrupted checksums, and cryptographically cross-verified between SHA256SUMS and GitHub's uploaded asset digest:

Asset Platform & Technical Role Size Verified SHA-256 Digest
lume-v1.1.0-linux-x86_64.tar.gz Linux x86_64 (ELF64) complete self-hosted Zero-C toolchain, stdlib & assurance binaries 18.25 MiB (19,137,330 B) 60db6a61e36730d0935bd1bac5c2ffe1449bbc4845b115e0dcad9de0377a60d9 (✓ SHA256SUMS)
lume-v1.1.0-linux-aarch64.tar.gz Linux ARM64 (aarch64 ELF64) toolchain bundle (QEMU user-mode execution verified) 2.77 MiB (2,907,171 B) 0b05a5b7a1d93a381853560ca76129dbca0b8c872f08dc857215852f0a611003 (✓ SHA256SUMS)
lume-v1.1.0-linux-riscv64.tar.gz Linux RISC-V 64 (riscv64 ELF64) toolchain bundle (QEMU user-mode execution verified) 2.79 MiB (2,926,718 B) 8fdab90a68d7d5a81207ec6d190aaa1457fdc360b331369e205b6171498c6b6b (✓ SHA256SUMS)
lume-v1.1.0-macos-aarch64.tar.gz macOS Apple Silicon (arm64 Mach-O 64, 16 KiB page-aligned) native toolchain bundle 1.67 MiB (1,753,343 B) d5c37d5a884b703e79bc16dd49f530fd745773c3b5bceec2b1763912e231ca27 (✓ SHA256SUMS)
lume-v1.1.0-macos-x86_64.tar.gz macOS Intel (x86_64 Mach-O 64) native toolchain bundle 1.69 MiB (1,769,764 B) d1d1c00bf4f584bbff42fca20a8334db6031533c5a79b0d2bb0b19e6f1f710ab (✓ SHA256SUMS)
lume-v1.1.0-windows-x86_64.tar.gz Windows x64 (PE32+) native toolchain bundle (lume.cmd, lume0.exe, target verifiers) 1.77 MiB (1,854,258 B) 0c7b7735899079fa4560cff2a48ab6e08c633fe3edfaeb23dedd62f4f283bba8 (✓ SHA256SUMS)
lumec-linux-x86_64 Standalone self-hosted Lume native compiler (stage2 == stage3 fixpoint ELF64 binary) 1.35 MiB (1,419,784 B) 2a32911ee74c39b146cba4976ae12644725e8414d262a89847a5328ebfd386e6 (✓ SHA256SUMS)
lasm-linux-x86_64 Standalone Lume native multi-container assembler (ELF64 / PE32+ / Mach-O / VEX / EVEX / DWARF v4) 142.14 KiB (145,552 B) 08df1232ba08320d2a9ef1b23baec43d1174d8bbe16d80723ff104ae5df6e47e (✓ SHA256SUMS)
lume0-linux-x86_64 Auditable frozen C11 bootstrap seed binary for Linux x86_64 (SEED_FREEZE.sha256) 207.26 KiB (212,232 B) 67d8f7a292ef5a894b5022d25feab1df96be11dbd2a7c942acd664dfc8f5a11a (✓ SHA256SUMS)
lume0-windows-x86_64.exe Auditable frozen C11 bootstrap seed executable for Windows x64 (PE32+) 257.01 KiB (263,177 B) fe07e23fe9a4ccc9b6d8731d3c2eb08f49efffd5b76cb17a7de1e3be8a444a41 (✓ SHA256SUMS)
install.sh Fail-closed POSIX one-line installer (Linux, macOS, WSL) with mandatory SHA256SUMS verification 1,019 B 07e6cab978327ea8353cefbe7a1edec888e582131cfbf7cb24618401a459606d (✓ SHA256SUMS)
install.ps1 Fail-closed PowerShell one-line installer (Windows x64) with mandatory SHA256SUMS verification 1.13 KiB (1,161 B) d5a1c6f40785eba825bae31a797b32fa3ae6ba49f402680cd4afeb04a767eb6c (✓ SHA256SUMS)
lume.rb Official Homebrew formula (macOS Apple Silicon, macOS Intel, and Linux) 1.22 KiB (1,249 B) 1ead2d5733408d5d599a12b3d01936e60810a11fedab922e72bf06e7731231a3 (✓ GitHub API)
SHA256SUMS Canonical SHA-256 cryptographic checksum manifest for release archives, binaries & installers 1.07 KiB (1,093 B) efa5ee868ba934975d8259ea81bce5538a3fb5128446f9c9be0023361ae3eacf (✓ GitHub API)
Raw SHA256SUMS Manifest (Click to Expand / Copy) 
60db6a61e36730d0935bd1bac5c2ffe1449bbc4845b115e0dcad9de0377a60d9  lume-v1.1.0-linux-x86_64.tar.gz
0b05a5b7a1d93a381853560ca76129dbca0b8c872f08dc857215852f0a611003  lume-v1.1.0-linux-aarch64.tar.gz
8fdab90a68d7d5a81207ec6d190aaa1457fdc360b331369e205b6171498c6b6b  lume-v1.1.0-linux-riscv64.tar.gz
d5c37d5a884b703e79bc16dd49f530fd745773c3b5bceec2b1763912e231ca27  lume-v1.1.0-macos-aarch64.tar.gz
d1d1c00bf4f584bbff42fca20a8334db6031533c5a79b0d2bb0b19e6f1f710ab  lume-v1.1.0-macos-x86_64.tar.gz
0c7b7735899079fa4560cff2a48ab6e08c633fe3edfaeb23dedd62f4f283bba8  lume-v1.1.0-windows-x86_64.tar.gz
2a32911ee74c39b146cba4976ae12644725e8414d262a89847a5328ebfd386e6  lumec-linux-x86_64
08df1232ba08320d2a9ef1b23baec43d1174d8bbe16d80723ff104ae5df6e47e  lasm-linux-x86_64
67d8f7a292ef5a894b5022d25feab1df96be11dbd2a7c942acd664dfc8f5a11a  lume0-linux-x86_64
fe07e23fe9a4ccc9b6d8731d3c2eb08f49efffd5b76cb17a7de1e3be8a444a41  lume0-windows-x86_64.exe
07e6cab978327ea8353cefbe7a1edec888e582131cfbf7cb24618401a459606d  install.sh
d5a1c6f40785eba825bae31a797b32fa3ae6ba49f402680cd4afeb04a767eb6c  install.ps1

Full Commit History & Diff: https://github.com/OmegaSoftDLL/Lume/commits/v1.1.0 · License: Apache-2.0

Assets 16
Loading