game: signed-claim export, quorum hook, steel-thread evidence kind (Slice 5 stage 5) - #47
Merged
Merged
Conversation
…lice 5 stage 5) VerifiedSettlement::export_claim signs a Receipt-domain SignedClaim over the settlement hash with the verifier's own seed. The quorum feature adds quorum::attest: a rooms-consensus CommitCertificate checked through the Adapter::absorb hook signature, required to decide the presented Batch, with a caller-supplied locator for the settlement hash the batch carries; the certificate never replaces reproduction. vhalla-steel-thread gains KIND_GAME_SETTLEMENT and GameSession, host-key-pinned frames routed to the game receiver, with compile-fail doctests keeping settlement and checkpoint evidence out of RemoteRequest, and tests/game.rs playing the frozen live vector to a reproduced settlement. Authority::Quorum at open stays reserved and the deviation is recorded in the plan. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
0thernet
changed the base branch from
claude/witness-slice5-stage4-20260917
to
main
September 18, 2026 03:20
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Stage 5 of the Platonik session adapter plan, stacked on #40 (stage 4).
What lands
VerifiedSettlement::export_claimsigns avhalla_crypto::SignedClaiminClaimDomain::Receiptwhose subject is the settlement hash and whose issuer is the verifier's own seed. It verifies under the exactClaimContextand is refused under another key or domain; the test round-trips it through the claim codec.quorumfeature.quorum::attest(settlement, certificate, batch_bytes, verify, locate)decodes the decided rooms-consensusBatch, requires theCommitCertificateto decide its value id, calls the caller'sAdapter::absorb-shaped verify hook, locates the settlement hash inside the batch through the caller's locator, and yields aQuorumSettlement(noClone) only when that hash is the reproduced one. The certificate never replaces reproduction. Off by default; pullsvhalla-rooms-consensusforBatchandCommitCertificateonly.KIND_GAME_SETTLEMENTandGameSessioninvhalla-steel-thread: frames are admitted only under the session's host key and the transport replay window, events route toReceiver::admit, settlements toReceiver::settle, and neitherVerifiedSettlementnorVerifiedCheckpointcan enterRemoteRequest(compile-fail doctests).tests/game.rsplays the frozen live vector through the steel thread to a reproduced settlement and exercises every refusal layer.Recorded deviation
Authority::Quorumat session open stays reserved. A quorum-ordered session needs the certificate to stand in for the host's seals, which needs a rooms or social record kind carrying a game commitment; none exists (vhalla-roomsbodies areControl/Create/Update). Inventing one inside the game crate would put a rooms wire change behind a game feature, so the locator is the caller's until that record kind lands. This is the one open item on the crate's promotion-gates row.Gates
fmt, clippy
--workspace --all-targets --all-features -D warnings, workspace unit and doc tests with--all-features, the CLIexperimental-gametest, and the kb vault check all pass locally; wasm32 for the default feature set runs in CI.🤖 Generated with Claude Code