Skip to content

docs+cli: honesty corrections from the pre-release audit - #10

Merged
anivar merged 1 commit into
mainfrom
audit/honesty-corrections
Aug 2, 2026
Merged

docs+cli: honesty corrections from the pre-release audit#10
anivar merged 1 commit into
mainfrom
audit/honesty-corrections

Conversation

@anivar

@anivar anivar commented Aug 2, 2026

Copy link
Copy Markdown
Owner

Closes #9. Three claim-tightening corrections from the pre-release audit (no correctness bugs): relabel example unit tests (not 'property tests') in decern-proof; correct the 'default binary is pure Rust' claim in the README (cedar→stacker→psm compiles assembly via cc); and a prominent verify NOTE when --pubkey is absent so a chain-only pass is never mistaken for a full verify. clippy -D warnings + fmt clean.

- decern-proof: relabel the transitive-closure coverage as re-derivation UNIT
  tests, not 'property tests' (no proptest exists; the closure is the trusted base
  cvc5 does not certify)
- README: the default build is not zero-compiled-native — cedar->stacker->psm
  links an assembly routine via cc; claim is 'no TLS/OpenSSL/cmake by default'
- decern-cli: 'verify' prints a prominent NOTE when no --pubkey (a chain-only pass
  is not a full verify)

Closes #9

Signed-off-by: Anivar Aravind <anivar.aravind@gmail.com>
@anivar
anivar merged commit 83be701 into main Aug 2, 2026
2 checks passed
anivar added a commit that referenced this pull request Aug 2, 2026
…#10)

Bumps all 9 crates and both SDKs to 0.1.1. 0.1.1 is the recommended version:
it includes the Mission terminated-grant revival fix and the pre-release honesty
corrections; 0.1.0 has the revival bug.

Signed-off-by: Anivar Aravind <anivar.aravind@gmail.com>
@anivar
anivar deleted the audit/honesty-corrections branch August 4, 2026 11:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Pre-release audit: honesty corrections (property-tests label, compiled-native claim, verify-without-pubkey)

1 participant