Expand description
Stable client APIs for GCC predicate and named event-contract workflows.
The verifier implementation remains in the separately versioned executable. This library invokes it directly without a shell and validates its advertised versioned CLI contract before exposing typed certificate operations.
Modules§
- aiger_
obligation - Exact, resource-bounded AIGER transition evaluation and CNF obligations.
- btor2
- Strict, resource-bounded BTOR2 bit-vector semantic core.
- btor2_
bitblast - Proof-carrying bounded bit-blasting for the strict BTOR2 semantic core.
- btor2_
bounded - Static exact portfolio for bounded BTOR2 reachability.
- btor2_
braking - Exact compressed SAFE certificates for a resettable braking controller.
- btor2_
component - Exact source-separated controller and plant verification certificates.
- btor2_
family - Canonical structural composition for repeated BTOR2 component families.
- btor2_
family_ orbit - Representative proof reuse for structurally identical BTOR2 channel orbits.
- btor2_
family_ proof - Exact both-answer evidence over source-bound BTOR2 channel families.
- btor2_
invariant_ chain - Exact invariant-chained recurrence analysis for bounded BTOR2 property sets.
- btor2_
motion - Exact compressed SAFE certificates for a coupled velocity-position recurrence.
- btor2_
phase - Source-bound closed-form certificates for a strict BTOR2 counter subset.
- btor2_
predicate_ set - Proof-carrying batches of bounded BTOR2 predicates over one recurrence.
- btor2_
region - Exact compressed SAFE certificates for recognised one-word BTOR2 recurrences.
- btor2_
region_ equivalence - Exact structural equivalence for extracted repeated BTOR2 channel regions.
- btor2_
region_ extract - Static repeated-state region extraction for source-attested Yosys BTOR2.
- btor2_
region_ property - Exact channel-local property models over source-bound repeated BTOR2 regions.
- btor2_
search - Exact bounded reachability certificates for the strict BTOR2 semantic core.
- compiled_
mmio_ branching_ dag - Exact finite-domain control-flow DAG for compiled-MMIO execution.
- compiled_
mmio_ certificate - Canonical certificate binding a bounded compiled-MMIO extraction to its complete source, toolchain, image and symbol inputs.
- compiled_
mmio_ decode_ graph - Source-bound multi-successor decode graph for compiled-MMIO execution.
- compiled_
mmio_ explicit_ transcript - Canonical explicit execution transcripts for the compiled-MMIO closest system baseline.
- compiled_
mmio_ file - Strict file boundary for compiled-MMIO certificates.
- compiled_
mmio_ predicate_ certificate - Canonical bounded evidence for an exact finite-domain compiled-MMIO predicate workflow.
- compiled_
mmio_ predicate_ portfolio - Static routing between finite-domain predicate evidence and the complete exact compiled-MMIO reference.
- compiled_
mmio_ quotient - Exact all-input reference for guarded compiled-MMIO continuation research.
- compiled_
mmio_ rtl_ certificate - Canonical proof-carrying evidence for the retained compiled-firmware to OpenTitan PWM RTL composition.
- compiled_
mmio_ rtl_ mapping - Exact translation from the retained OpenTitan PWM MMIO schedule to the source-attested per-channel RTL input boundary.
- composed_
witness - Deterministic safety-witness composition for the FM 2026 baseline.
- controller_
mtbdd - Source-bound exact controller functions represented as reduced MTBDDs.
- controller_
mtbdd_ proof - Proof-carrying equivalence between an AIGER controller and an exact MTBDD.
- controller_
plant - Exact sampled-control composition of a verified controller transducer and plant.
- controller_
plant_ aiger - Bounded-equivalent AIGER export for sampled controller and plant composition.
- controller_
plant_ artifact - Canonical, source-bound artifacts for proof-carrying controller/plant batches.
- controller_
transducer - Source-bound, proof-carrying symbolic controller transducers.
- dense_
relation - Resource-bounded finite relations for proof-carrying interface composition.
- firmware_
transaction_ contract - Proof-carrying composition of one fixed firmware transaction contract with an exact two-component RTL revision-impact bundle.
- revision_
batch - Canonical content-addressed batches for revision-local certificates.
- revision_
impact - Canonical bounded certificates for revision-impact counterfactuals.
- revision_
local - Canonical envelope primitives for revision-local component evidence.
- riscv32imc
- Bounded RV32IMC execution for source-bound firmware contract extraction.
- riscv32imc_
predicate - Exact finite-domain RV32IMC execution for one canonical input predicate.
- riscv32imc_
predicate_ checker - Independent scalar checker for finite-domain predicate transducer evidence.
- source_
model_ attestation - Canonical source-to-model attestation verification.
- unsat_
proof - Resource-bounded generation and independent checking of Varisat UNSAT proofs.
Structs§
- Btor2
Channel Property Capabilities - Btor2
Channel Property Files - Btor2
Channel Property Observability Capabilities - Btor2
Channel Property Observability Tool - Additive phase-observed client for BTOR2 channel-property CLI v1.
- Btor2
Channel Property Phase Metrics - Btor2
Channel Property Phase Observed Summary - Btor2
Channel Property Process Result - Btor2
Channel Property Process Summary - Btor2
Channel Property Tool - Typed, shell-free client for BTOR2 channel-property CLI v1.
- Controller
Mtbdd Batch Summary - Controller
Mtbdd Capabilities - Machine-discovered limits for controller MTBDD plant CLI v1.
- Controller
Mtbdd Member Result - Controller
Mtbdd Tool - Typed, shell-free client for controller MTBDD plant CLI v1.
- Controller
Plant Portfolio Batch Summary - Controller
Plant Portfolio Capabilities - Controller
Plant Portfolio Tool - Typed, shell-free client for statically routed controller/plant portfolio v1.
- Controller
Plant Resource Capabilities - Controller
Plant Resource Summary - Controller
Plant Resource Tool - Typed, shell-free client for governed controller/plant verification v1.
- Controller
Proof Mtbdd Capabilities - Machine-discovered limits for proof-carrying controller MTBDD CLI v1.
- Controller
Proof Mtbdd Portfolio Capabilities - Controller
Proof Mtbdd Portfolio Resource Summary - Controller
Proof Mtbdd Portfolio Tool - Typed, shell-free client for the governed proof/direct controller portfolio.
- Controller
Proof Mtbdd Resource Capabilities - Controller
Proof Mtbdd Resource Summary - Controller
Proof Mtbdd Resource Tool - Typed, shell-free client for governed proof-carrying MTBDD verification v1.
- Controller
Proof Mtbdd Tool - Typed, shell-free client for proof-carrying controller MTBDD plant CLI v1.
- Controller
Split Allocation Metrics - Controller
Split Allocation Observability Capabilities - Controller
Split Allocation Observability Tool - Typed client for governed split verification with allocator accounting.
- Controller
Split Allocation Observed Summary - Controller
Split Artifact Summary - Controller
Split Batch Summary - Controller
Split Cache Metrics - Controller
Split Cache Observability Capabilities - Controller
Split Cache Observability Tool - Typed client for governed split verification with integrity-preserving semantic replay caching and allocator accounting.
- Controller
Split Cache Observed Summary - Controller
Split Evidence Capabilities - Controller
Split Evidence Tool - Typed, shell-free client for split controller evidence and plant batches.
- Controller
Split Observability Capabilities - Controller
Split Observability Tool - Typed, shell-free client for governed split verification with phase metrics.
- Controller
Split Observed Summary - Controller
Split Phase Metrics - Controller
Split Resource Batch Summary - Controller
Split Resource Capabilities - Controller
Split Resource SetSummary - Controller
Split Resource Tool - Typed, shell-free client for governed split-evidence verification v1.
- Controller
Split SetSummary - Event
Contract Capabilities - Machine-discovered limits and formats for event-contract CLI v1.
- Event
Contract Tool - Typed, shell-free client for event-contract certificate v3 and portfolio v1.
- Execution
Policy - Runtime bounds applied independently to every executable invocation.
- Invocation
Metrics - Invocation
Metrics Aggregate - Bounded, canonical aggregation of process-client observations.
- Observed
- Predicate
Capabilities - Machine-discovered limits and formats for a compatible executable.
- Predicate
Operation Error - Predicate
Tool - Typed, shell-free client for one CQ-SAT/GCC executable.
- Revision
Impact Capabilities - Machine-discovered limits and semantics for revision-impact CLI v2.
- Revision
Impact Files - Paths and projected output nodes bound into one revision-impact job.
- Revision
Impact Process Summary - Canonical summary returned by revision-impact production or verification.
- Revision
Impact Query Transition - Revision
Impact Semantic Change Set - Revision
Impact Tool - Typed, shell-free client for revision-impact CLI v2.
Enums§
- Btor2
Channel Property Answer - Btor2
Channel Property Kind - Btor2
Channel Property Observed Operation - Btor2
Channel Property Process Backend - Btor2
Channel Property Process Solver - Btor2
Channel Property Resource Refusal Reason - Certificate
Version - A supported predicate certificate encoding.
- Controller
Mtbdd Answer - Controller
Plant Portfolio Backend - Controller
Plant Portfolio Reason - Controller
Plant Resource Refusal Reason - Failure
Class - Invocation
Status - Metrics
Aggregation Error - Operation
Kind - Predicate
ApiError - A stable API error. Logical certificate results are not errors.
- Predicate
Result - The logical result carried by a successfully checked certificate.
Constants§
- DEFAULT_
EXECUTION_ TIMEOUT - DEFAULT_
FILE_ LIMIT_ BYTES - DEFAULT_
MEMORY_ LIMIT_ BYTES - DEFAULT_
OUTPUT_ LIMIT_ BYTES - EVENT_
CONTRACT_ API_ VERSION - INVOCATION_
METRICS_ AGGREGATE_ SCHEMA_ VERSION - INVOCATION_
METRICS_ SCHEMA_ VERSION - MAX_
AGGREGATED_ INVOCATIONS - PREDICATE_
API_ VERSION - Predicate CLI contract understood by this crate release.
Functions§
- aggregate_
invocation_ metrics - Aggregate process observations without dropping failed jobs.
Type Aliases§
- Controller
Mtbdd ApiError - Controller
Mtbdd Operation Error - Controller
Plant Portfolio ApiError - Controller
Plant Portfolio Operation Error - Controller
Plant Resource ApiError - Controller
Plant Resource Operation Error - Event
Contract ApiError - Event
Contract Operation Error - Event
Contract Result - Event-contract v1 uses the same two logical outcomes as predicate checks.