History / Oracle Service Testing and Adversarial Scenarios

Sets T and Y: Node 24 on main, oracle count 1084, Home line at aa34e6f Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 4, 2026

Update source link labels to the new line numbers Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 4, 2026

Re-pin source anchors to main 5262a3e Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 4, 2026

Payment chains, the event index's paging, the tunnel, the finished cycle, counts Sets R and S. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 4, 2026

Update source link labels to the new line numbers Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 4, 2026

Re-pin source anchors to main 4c62904 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 4, 2026

Describe the publisher posting for every linked agent, the renounce gate's one-block read; counts on 4599abc Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 4, 2026

Describe links made on chain, the ERC-8004 publisher and its signer; counts on bef1068 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 3, 2026

Correct what a review of the 3 November prose found

RunTimeAdmin committed Nov 3, 2026

Describe the checker's grace, the ERC-8004 reviewer filter and signer binding; counts on e8816a3

RunTimeAdmin committed Nov 3, 2026

Make link labels match their re-pinned anchors

RunTimeAdmin committed Nov 3, 2026

Re-pin source line anchors to main e8816a3 (#164 to #169)

RunTimeAdmin committed Nov 3, 2026

Correct what a review of the status prose found

RunTimeAdmin committed Nov 3, 2026

Describe the event index, the adversarial slash drill and what the checker proposes

RunTimeAdmin committed Nov 3, 2026

Describe SDK 1.0.0-alpha.15: the MCP trust server, evidence roots and the new reads 28 replacements on 20 pages, each asserted to match once: - The SDK pages describe 1.0.0-alpha.15, published to npm on 3 November 2026, with what is new since alpha.14: sigvara-mcp, the evidence-root functions and the verifier reads for a trust check. - MCP Gated Tools gains a section on the other direction, sigvara-mcp: its tools, the gate's rule without the proof, why the proof tools need an audience the agent can check, and which addresses to pay. - Verifier Functions no longer says the SDK leaves Merkle proofs to the oracle; the evidence pages name the SDK functions and the MCP tool. - SDK tests: 300 in 16 files, with mcp.test.ts and evidence.test.ts described. - Home names main b6baabd. Checks: 5,785 source links and 4,611 anchors resolve in main b6baabd, 86 internal links resolve; 0 CR bytes; no long dash in new text; all 532 Mermaid blocks parse and the changed one renders. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 3, 2026

Describe the 40 merges since 29 October, and bring the counts to 2 November Prose and counts for #112 to #152, 416 replacements on 64 pages, each asserted to match once: - Slashing: 75% burned and 25% to the victim, nothing to the committee (ADR 0007), VictimIsCommittee, the two-field SlashExecuted, and a reporter credit from before 2 November still claimable. The 3 October drill stays as the record of the earlier split. - Oracle bond: an operator's exit time is fixed when it starts to leave (unbondingClaimableAt), with the old rule for an exit started before the field existed. - Testnet: identity and reputation on fdce1a7, staking on 25c2d59, the oracle bond on 76bbc97, all verified on the explorer and reproduced by the build tagged arc-testnet-2026-11-02b. Ten claims that the testnet lagged main, false since 26 October, are corrected. - Handover: the known-Safe checks, SAFE_FACTORY and SAFE_CREATION_CALL, and the reconciliation report the renounce requires. - Builds and checks: check-bytecode, check-authz and the authorisation matrix, and the CI lists. - Oracle: payer-signed outcomes (ADR 0006), GET /outcomes and the import between operators, the 409 body, the checker judging a proposal by the evidence it was made on, state backups and restore drills, and the CounterAudit relay off in production. Both operators run cf76691. - SDK 1.0.0-alpha.14: atomicNonceStore, the gate's instances and profile settings, and signPaymentOutcome and verifyPaymentOutcome. - Site: the explorer, the epochs page and the labelled simulation. - Counts: 724 contract tests in 32 files (712 run without a fork URL, 12 skip), 852 oracle, 233 SDK in 14 files. Checks: 5,779 source links and 4,607 anchors resolve in main 700a3ee, and the 81 internal links resolve; 0 CR bytes; no long dash in new text; all 532 Mermaid blocks parse and the 19 changed ones render with no error. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 2, 2026

Make the line numbers in the link labels match the anchors again 1,670 labels on 71 pages named the line numbers of main 17cccb8; each now names its link's anchor. URLs are untouched (5,656 links compared, 0 problems), and the link checker finds every one of 5,770 source links and 4,599 anchors inside main 700a3ee. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 2, 2026

Move the source-link anchors from main 17cccb8 to 700a3ee Main moved by 40 merges (#112 to #152): payer-signed outcomes (ADR 0006), SDK 1.0.0-alpha.13 and alpha.14, the gate's production profile, the operations runbook and state backups, the handover Safe checks, the slash split without a committee share, the explorer, the testnet simulation, verifiable builds, the authorisation matrix and the oracle bond's fixed exit time. Only the digits of line anchors change in this commit: 1,670 anchors on 71 pages. Each was mapped through the git diff between the two commits and checked for the same first and last line of text (2,071 compared, 0 mismatching). Twelve ranges moved approximately because a line at their edge was edited: the slash event and its test, two README ranges ending on the reworded counts line, measuredFactorsFor in oracle/index.js, the gate's opening comment, and ranges in docs/arc.md, docs/counteraudit-integration.md, docs/payment-backed-attestations.md and oracle/README.md. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Nov 2, 2026

Describe the handover checks of #110, the nonce-store tests of #111, and the new counts The renounce phase now takes neither the Safe nor the timelock on trust: phases 3 and 5 refuse a timelock whose code is not the TimelockController phase 2 deploys (the metadata solc appends is ignored) or that the deployer did not create, and a Safe that is an EIP-7702 delegated account. Phase 5 refuses a Safe that cannot be asked for its threshold unless CONFIRM_UNINSPECTABLE_SAFE vouches for it. Governance and Upgrades gets the four new errors with what to do about each, and Deployment Strategies the variable and the extended list. The Gate pages say that the SDK README now shows a Redis NonceStore, and the SDK testing page says what the two-gate tests show. Counts: 699 contract tests (692 run, 7 skip) and 206 SDK tests. Home names main 17cccb8. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 30, 2026

Make the labels of the moved links match their anchors The visible line numbers in 102 source-link labels showed the old range after the previous commit moved the anchors. Each label now takes its anchor's range. URLs are untouched. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 30, 2026

Move the source-link anchors from main 3e8faed to 17cccb8 Main moved by three merges: the count fix (#109), the handover trust checks (#110) and the nonce-store tests (#111). Anchors into script/SplitAuthority.s.sol, the root README, the SDK README and the Gate test moved with their files. Only the digits of line anchors change in this commit. Each was mapped through the git diff between the two commits and checked for the same first and last line of text; five approximate moves are the root README's setup and testing sections, whose last line is a count that was reworded. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 30, 2026

Describe 1.0.0-alpha.12 and bring the SDK test count to 201 The agent's blind signChallenge is gone in 1.0.0-alpha.12 (pull request 107, released by 108). A call does not compile in TypeScript, and in JavaScript it throws an error that names signChallengeFor. The pages that describe the SDK now say 1.0.0-alpha.12 and list the removal as new since alpha.11. Where a page said that signChallenge signs whatever it is handed, it now says that the method is removed and that alpha.9 has only it. The exported function signChallenge(payload, secretKey) is unchanged and stays where a page shows it. The class diagrams drop the method, and the sequence diagrams and the flowchart that showed an agent calling it show signChallengeFor(payload, audience) instead. The Home page names main 3e8faed. The SDK suite is 201 tests, not 197: 193 run and 8 skip without a live deployment, in 13 files, measured with CI=1 on a clean export of main 3e8faed. Six pages carried the old number. 62 replacements on 24 pages. 20 diagrams changed; all 532 still parse and the 20 render without an error or a clipped label. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 29, 2026

Describe the three merged changes and bring the test counts to 29 October Pull requests 103, 104 and 105 change what the pages say. The oracle answers 202 with durable false for a flag, a resolve and a link when the state file cannot be written, as it already did for an attestation, and counts them in sigvara_oracle_writes_not_durable_total. The monitoring, API, flag and deployment pages say so. The renounce phase refuses a timelock with a delay under 48 hours, one the Safe cannot propose to or cancel on, one that not everyone can execute on or that the Safe or the deployer administers, a timelock address with no code, and a Safe with a threshold under 2. Governance and Deployment Strategies list the errors and what to do about each. The deploy script now records the block it starts at as deployBlock, and the role replay starts there. The attestation page says why one confirmation is enough on Arc, as Arc's documentation states it, and why the scan keeps six. The pages that describe the alpha.9 key leak say that a key that was ever logged or serialized should be treated as exposed and rotated. Test counts follow main 58d6b27: 698 contract tests (691 run without a fork URL), 784 oracle and 197 SDK. The Home page names 58d6b27. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 29, 2026

Make the line numbers in the link labels match the anchors again The label of a source link names the lines its anchor points at, and the previous commit moved 359 anchors, so their labels said the old numbers. Each label now takes the range of its anchor. The URLs are untouched, and nothing outside the square brackets of a link changes. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 29, 2026

Move the source-link anchors from main ff0fa68 to 58d6b27 Three pull requests landed after the pages were last checked: the durable answer for flag, resolve and link in the oracle, the timelock and Safe policy in the handover script with the recorded deploy block, and the key-rotation and finality notes in the docs. Only the digits of the line anchors change, so that each link points at the lines it named before. 359 anchors on 36 pages moved; 5 end on a paragraph whose wording changed and are approximate. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 29, 2026

Say that the SDK pages describe 1.0.0-alpha.11 and that the audience is required alpha.11 reached npm on 29 October 2026 from main ff0fa68, and its tarball hash matches a local pack of that commit. verifySignature now requires the expected audience: a call without it throws, and a v1 payload is always refused. The opening paragraph of each SDK page names the version it describes and says what is new since alpha.10. The pages that treated the audience as optional ("if an expected audience is provided", "audience?") no longer do, in the text and in seven diagrams (all 532 diagrams parse and the eight changed ones render). The SDK test count follows the new tests: 197 in 13 files, 8 of which skip, measured with CI=1 on a clean copy of ff0fa68. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 29, 2026

Make the line numbers in the link labels match the anchors again A label such as verifier.ts:124-183 names the lines its link points at. The anchors moved with the previous commit, so 201 labels on 35 pages showed the old numbers; they now take the anchor's range. 4,398 labels were already right. Only link text changed, and every URL is byte-identical. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 29, 2026

Move the line anchors from main 652beca to main ff0fa68 Pull requests 99, 100 and 101 and the two dependency bumps (83 and 84) changed lines in README.md, the docs, deployments/5042002.json, the package files and packages/sdk/src/verifier.ts, so the anchors below those edits drifted. Each anchor was mapped through the git diff between the two commits: 201 anchors on 35 pages moved, none was dropped, and the one that spanned the audience check in verifier.ts, which the release rewrote, now covers the new block. Nothing but the digits of an anchor changed. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 29, 2026

Update the test counts to main 457fa9e Measured on a clean copy of main: 697 contract tests (690 run without a fork URL and 7 skip) in 30 files with 19 invariants, 781 oracle tests, and 189 SDK tests in 13 files, 8 of which skip without a live deployment. The pages said 693, 760 and 168. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 28, 2026

Make each source link's label show the lines its anchor points at The previous commit moved 911 anchors, so the line numbers printed in their labels were out of date. Each label now takes the numbers of its anchor. The 3,688 that were already right and every URL are untouched; the links, their order and all text outside the labels are byte-identical. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

RunTimeAdmin committed Oct 28, 2026