Skip to content

repro/numerics: schema-conforming certifying NMSE manifest + seal-hash honesty (Closes #1074) - #1075

Merged
gHashTag merged 2 commits into
masterfrom
repro/numerics-certifying-manifest
Jun 14, 2026
Merged

repro/numerics: schema-conforming certifying NMSE manifest + seal-hash honesty (Closes #1074)#1075
gHashTag merged 2 commits into
masterfrom
repro/numerics-certifying-manifest

Conversation

@gHashTag

Copy link
Copy Markdown
Owner

Summary (Closes #1074)

Delivers the certifying NMSE manifest named as the remaining step in docs/NUMERICS_VALIDATION.md section 11 after the host oracle (#1072).

  • Adds a certifying-manifest mode to repro/numerics/nmse_gf16.py: emits a SECOND manifest repro/numerics/nmse_manifest_protocol_v1.json that strictly conforms to schemas/nmse-protocol-v1.json (additionalProperties:false; results restricted to the five schema distributions D_NORM/D_LOG/D_RELU/D_PHI/D_DEEP; each entry is nmse_gf16/nmse_bf16/ratio).
  • Keeps the rich nmse_manifest.json (D_WIDE, ULP, overflow) as NOT schema-bound.
  • Adds repro/numerics/validate_manifest.py and a make -C repro repro-numerics-certify target that validate the manifest against the schema AND enforce a seal-hash honesty rule.
  • --seal re-hashes bootstrap/src/compiler.rs and sets seal_hash to the bootstrap/stage0/FROZEN_HASH digest only on an exact match; otherwise it stays the literal unsealed.

R5-HONEST

The live compiler source does not match FROZEN_HASH on this unpinned host, so the committed seal_hash is honestly unsealed -- informational, not a silicon certifying claim (protocol section 8). The script never fabricates a seal. D_WIDE is deliberately excluded from the certifying manifest (it is not a schema result key). The phi identity_witness is a sanity check, not a superiority claim.

Dependency

Builds on #1073 (the host L4/L5 oracle); this branch is stacked on it. Both merge cleanly into master.

Anchor: phi^2 + phi^-2 = 3

Closes #1074

gHashTag added 2 commits June 14, 2026 11:37
Add repro/numerics/{nmse_gf16.py,nmse_manifest.json,README.md} and fill the
L4/L5 TBD cells in docs/NUMERICS_VALIDATION.md with measured, reproducible
round-trip NMSE/ULP numbers for GF16 (E6M9) vs bfloat16 and float16, per
docs/GF16_BFLOAT16_NMSE_PROTOCOL.md. Host-measured, unsealed => informational,
not a silicon certifying claim. D_PHI is an identity sanity check.

Closes #1072
…h honesty

Adds a certifying-manifest mode to repro/numerics/nmse_gf16.py and a
standalone validator repro/numerics/validate_manifest.py. Emits a second
manifest nmse_manifest_protocol_v1.json strictly conforming to
schemas/nmse-protocol-v1.json (additionalProperties:false; results limited to
D_NORM/D_LOG/D_RELU/D_PHI/D_DEEP). --seal sets seal_hash to the FROZEN_HASH
digest ONLY on an exact live-source match; otherwise it stays unsealed (no
faked seal). New make -C repro repro-numerics-certify validates the manifest
and enforces the seal-hash honesty rule.

R5-HONEST: live compiler source does not match FROZEN_HASH on this unpinned
host, so the committed seal_hash is honestly unsealed (informational, not a
silicon certifying claim). Builds on #1072. Anchor: phi^2 + phi^-2 = 3.

Closes #1074
@github-actions

Copy link
Copy Markdown
Contributor

📓 NotebookLM Notebook linked to this PR

This notebook contains session context, decisions, and artifacts for this work.

@github-actions

Copy link
Copy Markdown
Contributor

PR Dashboard

Generated at: 2026-06-14 11:49:37 UTC

Summary

Status Count
Total Open PRs 11
PRs with Failing Checks 8
PRs with All Checks Green 3
READY 2
FAILING 8
PENDING 0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

repro/numerics: sealed-toolchain certifying NMSE manifest conforming to schemas/nmse-protocol-v1.json

1 participant