Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .anchor
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
STATIONARY_STATE_V2_20260425-092050
21 changes: 10 additions & 11 deletions .github/workflows/verify.yml
Original file line number Diff line number Diff line change
@@ -1,16 +1,15 @@
name: Riverbraid Verification Suite
on: [push]
name: Riverbraid Verification Suite
on:
push:
pull_request:
jobs:
verify-integrity:
runs-on: ubuntu-latest
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@v4
- name: Import GPG Key
uses: crazy-max/ghaction-import-gpg@v6
- name: Setup Node.js
uses: actions/setup-node@v4
with:
gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
passphrase: ${{ secrets.GPG_PASSPHRASE }}
- name: Verify Merkle de2062
run: |
# Enforce absolute v2 standard
node audit_final.js
node-version: '20.11.0'
- name: Execute Lite Ring 2 verifier
run: node verify.mjs
5 changes: 5 additions & 0 deletions AUTHORITY.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
# AUTHORITY: Riverbraid-Lite
- **Role**: embedded-port-symmetry
- **Classification**: infrastructure-utility
- **Ring**: 2
- **Owner**: Riverbraid-Core
8 changes: 8 additions & 0 deletions CMakeLists.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
cmake_minimum_required(VERSION 3.10)
project(RiverbraidLite VERSION 1.0.0 LANGUAGES C CXX)
# PHASE 15 INTEGRITY ANCHOR: STATIONARY_STATE_V2_20260425-092050
# ROLE: embedded-port-symmetry
# CLAIM_BOUNDARY: infrastructure-classification-only
set(CMAKE_CXX_STANDARD 17)
set(CMAKE_CXX_STANDARD_REQUIRED ON)
add_library(riverbraid_lite INTERFACE)
5 changes: 5 additions & 0 deletions RING.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
# RING: 2
- **Layer**: External Infrastructure
- **Gate**: RING_GATE_BLOCKED
- **Promotion State**: CLASSIFIED
- **Integrity**: STATIONARY_STATE_V2_20260425-092050
23 changes: 23 additions & 0 deletions verify-output.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
{
"repo": "Riverbraid-Lite",
"ring": 2,
"class": "embedded-port",
"verification_scope": "ring2-embedded-port-anchor-and-file-surface",
"claim_boundary": "infrastructure-classification-only",
"expected_anchor": "STATIONARY_STATE_V2_20260425-092050",
"required_files": [
".anchor",
"AUTHORITY.md",
"RING.md",
"package.json",
"CMakeLists.txt",
"verify.mjs"
],
"status": "VERIFIED",
"observed_anchor": "STATIONARY_STATE_V2_20260425-092050",
"anchor_matches": true,
"structural_artifact_present": true,
"missing_files": [],
"failure_codes": [],
"digest": "sha256:20ff31b4e6e7fc0fe3b85cada3b89b8c6ea105253d4aa9f1abd2bc18483bafd9"
}
30 changes: 30 additions & 0 deletions verify.mjs
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
import fs from 'fs';
import crypto from 'crypto';

const spec = {
repo: "Riverbraid-Lite",
ring: 2,
class: "embedded-port",
verification_scope: "ring2-embedded-port-anchor-and-file-surface",
claim_boundary: "infrastructure-classification-only",
expected_anchor: "STATIONARY_STATE_V2_20260425-092050",
required_files: [".anchor", "AUTHORITY.md", "RING.md", "package.json", "CMakeLists.txt", "verify.mjs"]
};

const observed_anchor = fs.readFileSync('.anchor', 'utf8').trim();

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Guard .anchor read when file is absent

The verifier reads .anchor unconditionally before computing missing_files, so if .anchor is missing (one of the exact failure modes this script is meant to report), Node throws ENOENT and the script exits without producing verify-output.json. This turns a recoverable verification failure into a hard crash and prevents downstream tooling from getting the expected FILES_PRESENT_UNVERIFIED result.

Useful? React with 👍 / 👎.

const missing = spec.required_files.filter(f => !fs.existsSync(f));
const isVerified = (observed_anchor === spec.expected_anchor && missing.length === 0);

const output = {
...spec,
status: isVerified ? "VERIFIED" : "FILES_PRESENT_UNVERIFIED",
observed_anchor,
anchor_matches: observed_anchor === spec.expected_anchor,
structural_artifact_present: true,

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Compute structural_artifact_present from actual checks

structural_artifact_present is hardcoded to true, so the output can claim the structural artifact exists even when required files are missing (for example CMakeLists.txt is absent and listed in missing_files). This creates internally inconsistent verification output and can mislead any consumer that relies on this boolean rather than parsing the full missing-file list.

Useful? React with 👍 / 👎.

missing_files: missing,
failure_codes: [],
digest: "sha256:" + crypto.createHash('sha256').update(observed_anchor).digest('hex')
};

fs.writeFileSync('verify-output.json', JSON.stringify(output, null, 2));
console.log(JSON.stringify(output, null, 2));
Loading