These notes summarize behavior verified by the local safe gate. They are not based on commit count and they do not imply unrun hardware certification.
- Production binary builds through the supported
../zag/zag-poc/zncpath. Evidence:build-production. - Engine, persistence, routing, simulation, parser corpus, and protocol parser
regression tests pass. Evidence:
engine,simulation-properties,parser-corpus,protocol-parser. - Native X11 self-test and deterministic captures pass when
DISPLAYis available. Evidence:x11-live,x11-captures. - The reference balanced-ternary Flash workload rebuilds, imports through the
public agent mutation envelope, verifies with zero detector mismatches, and
byte-compares against maintained canonical artifacts. Evidence:
flash-photonic. - The maintained reference trace is deterministic across fresh exports.
Evidence:
deterministic-trace. - Agent mutations require idempotency keys and revision preconditions; replay is
byte-inert. Evidence:
agent-idempotency,agent-mutation-envelope,agent-revision-conflict. - MCP exposes schema-described mutation envelopes and specialized wrappers for
placement, deletion, inspection, export, trace, and Flash import/verification.
Evidence:
mcp-mutation-envelope,mcp-specialized-mutations,mcp-tool-coverage. - The live UI exposes schema-described controls, stable IDs, exact bounds, state,
screenshot capture, and guarded activation through native agent and MCP paths.
Evidence:
ui-agent-access. - Physical-model schema v2 covers eight device families and 25 provenance-bearing
inputs; legacy v1 projects remain pinned until explicitly migrated without
invented evidence. Evidence:
model-schema-migration,provenance-units. - Unauthorized mutation attempts and outside-root writes are rejected without
changing project bytes or creating forbidden outputs. Evidence:
agent-capability-denial,agent-path-confinement. - Unsupported physical/performance claims and stale positive marketing phrases
are rejected by release gates. Evidence:
unsupported-claim-audit,stale-language-audit. - Compiler-owned GFX10.1 fill/depth/blend execution now includes a million
varied decoded raster dispatches (59 million instruction executions), exact
ownership/fences, and a reusable evidence-first auto-promotion policy with
resumable campaign state. Evidence:
gpu-isa-raster,gpu-promotion-policy. This is software VM evidence, not silicon evidence. tools/gpu_certify.zagprovides default-read-only physical preflight and an explicit, resumable one-dispatch certification step. It records the exact tuple, policy decision, output, kernel-log hashes, timing, fences, and anomaly counters; shared-display override results remain labeled uncontained.- Raster mismatch quarantine now archives the serialized clear/command input,
seed, tuple hash, CPU/GPU/diff images, and a dedicated log artifact before CPU
fallback. Software-VM evidence labels kernel/driver logs not applicable rather
than pretending a hardware log was captured. Evidence:
gpu-raster-shadow,gpu-isa-raster. - Zag virtual certification now consolidates the remaining GPU logic campaigns
without opening DRM: more than one million actual VM submissions and ownership
transfers, 96,400 fills, 86,400 logical soak ticks, and 65 complete raster
differential scenes. Its distinct evidence type and report explicitly forbid
physical promotion. Evidence:
gpu-virtual-certification. - GPU execution policy now exposes
auto,cpu,virtual, and guardedphysicalchoices. Explicit CPU/virtual selection performs no DRM probe; virtualization is available but is not forced. Evidence:gpu-backend-choice.
- No GPU dispatch reliability certification is claimed. GPU memory/submit/compute gates are opt-in and are not part of the safe gate.
- No destructive GPU reset/fault certification is claimed on the available RX 5700 XT because it is also the display GPU.
- No fabricated photonic hardware, silicon, lab measurement, or production manufacturing result is claimed.
- Flash source/FIR import and trace inspection are software-simulation tooling; their UI does not validate fabricated hardware.
- Move, rotate, disconnect, reroute, close-project, cancellation, and full per-tool invalid/unauthorized/conflict matrices are not yet complete.
Run:
./verify.sh safeFor the reference PCU specifically, see
docs/REPRODUCE_REFERENCE_PCU.md.