feat(replay): falsifiable-by-replay evidence + akf replay - #132
Merged
Conversation
A signature proves who said it; a replay proves it could have been true. Evidence can now carry a probe recipe recorded at stamp time: command, expected exit, optional output digest, and an input fingerprint pinned at issuance (over recorded deps + pinned sources). New 'akf replay <file>': default is safe inspection (recipe + input drift); --run executes. CONFIRMED (0) / CONFIRMED_DRIFTED (1) / REFUTED (2) / UNREPLAYABLE (3). CLI named 'replay' because 'akf verify' is taken by signature verification. MCP gains replay_file (11 tools). Design credit: Mike Czerwinski.
AKF Trust Certification — ✅ Certified❌ 0/11 files certified · average trust 0.45 · 3 failed
Total: 11 | Certified: 0 | Failed: 3 | Skipped: 8
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Second of the v1.6 "from claimed to checkable" series. Closes #128.
A signature proves who said it; a replay proves it could have been true.
akf stamp file --replay "pytest -q"records a probe recipe in evidence: command, expected exit, optional output digest, and an input fingerprint pinned at issuance (over recorded dependencies + pinned sources)akf replay <file>: default = safe inspection (recipe + input drift);--runexecutes:CONFIRMED(0) — probe succeeded, inputs match issuanceCONFIRMED_DRIFTED(1) — probe succeeded against diverged inputs: provably reproducible, possibly reproducibly wrongREFUTED(2) /UNREPLAYABLE(3)replay_file(11th tool) — execution opt-in, labeled arbitrary-codeakf.verify_file(); CLI namedreplaybecauseakf verifyis taken by Ed25519 signature verification (found by collision in testing)python/akf/verify.py's own stamp carries a replay recipe pointing at its test suiteTests: 10 new (record → inspect → confirm → drift-split → refute → unreplayable + CLI); 33 pass across verify/deps/check.
Design credit: Mike Czerwinski — the input fingerprint and the CONFIRMED/CONFIRMED_DRIFTED split are his.