Skip to content

v0.2.0 — Tier 3 attestation cross-binding (public Python surface)

Choose a tag to compare

View all tags
@star-ga star-ga released this 18 May 02:40
· 175 commits to main since this release
v0.2.0
6fcec67

v0.2.0 — Tier 3 attestation cross-binding (public Python surface)

Closes Phase 2 Tier 3 of the locked ship plan
(docs/plans/FINAL_SHIP_PLAN_2026_05_17.md). The MindLLM
cross-binding handshake is now a first-class Python surface —
external integrators (mind-mem, MindLLM, third-party verifiers)
can produce and verify BindingRecords without re-implementing
the Ed25519 + SHA-256 plumbing.

New module: mind_nerve.attestation

from mind_nerve.attestation import (
    binding_message, sign_binding, verify_binding,
    application_verify_binding,           # adds ZeroField guard
    serialize_binding_record, deserialize_binding_record,
    BindingRecord, manifest_export_bytes, neuron_hash_hex,
    MAGIC, VERSION, RECORD_SIZE,          # wire-format constants
)

Mirrors integrations/mindllm_attestation.mind exactly:

  • Wire format: 200 bytes — magic MNBA, version 1, embedded
    mind_nerve_hash (32B) + mindllm_hash (32B) + nonce (32B) +
    signature (64B) + signer_pubkey (32B).
  • Cryptography: Ed25519 per RFC 8032 over
    SHA-256(mind_nerve_hash ‖ mindllm_hash ‖ nonce).
  • application_verify_binding(...) returns one of:
    "ok" | "ZeroField" | "SignatureInvalid".

New CLI: mind-nerve attest

# Produce a BindingRecord
mind-nerve attest sign \
  --mind-nerve-hash $(sha256sum-of-manifest-aggregate) \
  --mindllm-hash    $(sha256sum-of-mindllm-aggregate) \
  --nonce           $(openssl rand -hex 32) \
  --private-key-hex $ED25519_SK_HEX

# Verify it (optionally pin a trust anchor)
mind-nerve attest verify \
  --record-hex $RECORD_HEX \
  --pubkey-hex $EXPECTED_PUBKEY_HEX

Exit 0 on result == "ok", non-zero otherwise.

Tests

tests/integration/test_mindllm_handshake.py now imports the
public module — the Python surface IS the contract. 3 new
invariants on top of the existing 13: serialize→deserialize
round-trip, magic mismatch raises, short buffer raises. Full
suite: 186 passed.

Deferred to next ship

  • Russian intent ≥ 90% top-5 verification — compute-bound
    training run (1–2 day GPU pod). Trainer code + corpus are
    staged; the gate flips once the eval pass lands.
  • Native MIND inference / cross-arch bit-identity / p95 ≤ 30 ms
    on CPU + ARM     — gated on mindc 0.3.0 cdylib emit. Foundation
    shipped in mindc 0.2.11 (--emit-shared), full path in 0.3.0.

Forward roadmap

  • v0.3.0-beta.1 — Native-MIND training pipeline (mind-train),
    first locally-reproducible reference checkpoint.
  • v0.9.0-rc.1 — Switch flip wave: per-head drop masks, L2-cosine,
    RMSNorm, ALiBi behind individual model_hash bumps.
  • v1.0.0 — Native cdylib inference path, cross-arch bit-identity
    gate passes, Phase 3 stubs (federation, skill marketplace,
    mind-mem v4 cognitive kernel) flip to functional.
Assets 4
Loading