Src/Abi/Types.idr— Gating types and violation logicSrc/Abi/Gating.idr— Core oracle gating logic (formal model)Src/Abi/Proofs.idr— Formal proofs of security invariantsSrc/Abi/Foreign.idr— FFI declarations for Zig/Rust integration- Gating acts as "inhibitory antagonist" for LLM policy enforcement (GO/NO-GO gating)
- Policy completeness: Proved that any
Violationresults in aBlockverdict (Modulo complexanyreduction holes) - Gate monotonicity: Proved that once a NO-GO decision is made, it cannot be overridden by subsequent processing stages (
slmStagepreserves verdict ordering) - False positive boundedness: Proved that for a
CleanProposal, the gate isAllow(does not block everything) - Policy composition soundness: Proved that adding rules to a policy preserves existing blocks (
any_appendlemma) - Deterministic rule evaluation: Proved the gating oracle is deterministic (pure function property in Idris2)
- Idris2 — Dependent types express the policy lattice and monotonicity properties. Verified with Idris 0.8.0.
- COMPLETED — Conative gating core safety claims are formally modeled and verified.
- 2026-04-04: Initial formal model and proofs implemented by formal verification agent. Verified monotonicity, completeness, and composition soundness.
- 2026-03-29: Template ABI cleanup.