Skip to content

Commit db488d3

Browse files
Repin the deep audit after the Stage 4 squash (#100)
Point the correspondence drift pins at the content-identical PR #98 squash commit and record the topology-only transition.
1 parent 1478fbe commit db488d3

1 file changed

Lines changed: 7 additions & 5 deletions

File tree

.design/verified/rust-lean-correspondence.md

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -69,8 +69,8 @@ composes that with the Lean (T1) theorems. CORR is the bridge that lets the theo
6969
| Rust exec-expr encoder | `thermite-tv/src/exec_encode.rs` | `6f5b8b53` (comment-only since `60fd029e`; see Amendment 2026-07-29) |
7070
| Rust exec-body encoder | `thermite-tv/src/exec_stmt_encode.rs` | `6f5b8b53` (production code unchanged since `543b506e`; see Amendment 2026-07-29) |
7171
| Frozen combinator registry | `thermite-spec/src/combinators.rs` | `543b506e` (#283 re-pin — CODE-IDENTICAL, see Amendment 2026-06-18; was `c0b1d8a3` #4) |
72-
| Rust→Lean obligation exporter | `forge/src/lean_export.rs` | `06e14a2e` (additive EPR leaf bridge since `6f5b8b53`; see Stage 4 Amendment 2026-07-29) |
73-
| Lean spine | `lean/Thermite/**` | `ba960a9a` (audited v1 files are code-identical; Stage 2/3/4 proof modules are separate, see Stage 4 Amendment 2026-07-29) |
72+
| Rust→Lean obligation exporter | `forge/src/lean_export.rs` | `10365b60` (content-identical PR #98 squash of audited `06e14a2e`; see Stage 4 Amendment 2026-07-29) |
73+
| Lean spine | `lean/Thermite/**` | `10365b60` (content-identical PR #98 squash of audited `ba960a9a`; see Stage 4 Amendment 2026-07-29) |
7474

7575
Lean toolchain: `leanprover/lean4:v4.29.0` (downgraded from v4.30.0 by the #184 Z3-demotion probe — `lean/lakefile.toml` now `[[require]]`s Lean-SMT + Mathlib; this is OUTSIDE the `lean/Thermite/**` audited-spine scope and the entire audited spine still builds green and `sorry`-free on v4.29.0 — see `.design/verified/z3-demotion.md` and Amendment 2026-06-10).
7676
Verified `sorry`-free by inspection: every `sorry` token in the tree is inside a comment, never in
@@ -268,9 +268,11 @@ corresponding table section and requires re-audit (see "Drift" below).**
268268
>
269269
> Verification verdict: **the v1 Rust↔Lean correspondence remains unchanged.** The only
270270
> exporter addition reuses the audited encoder, and the Lean changes belong to the separate
271-
> Stage 4 proof boundary. Re-pinned the exporter `→ 06e14a2e` and the Lean spine
272-
> `→ ba960a9a`; `make audit` and `scripts/g4-gate.sh` must both be green before this
273-
> amendment is accepted.
271+
> Stage 4 proof boundary. The audit inspected the exporter at `06e14a2e` and the Lean spine
272+
> at `ba960a9a`; PR #98 squashed both into `10365b60` with the exporter blob and complete
273+
> `lean/Thermite` tree byte-identical to those audited branch revisions. The drift pins now
274+
> name that content-identical commit on `main`; `make audit` and `scripts/g4-gate.sh` must
275+
> both be green before this amendment is accepted.
274276
275277

276278
## Requirements

0 commit comments

Comments
 (0)