# Binary Proof Verification Pipeline ## Module BinaryIndex ## Status IMPLEMENTED ## Description Full binary proof verification with ground truth sources (buildinfo, debuginfod, reproducible builds), validation, and golden set testing. ## Implementation Details - **Modules**: `src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.GroundTruth.Reproducible/`, `src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Validation/`, `src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Validation.Abstractions/` - **Key Classes**: - `ValidationHarnessService` (`src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.GroundTruth.Reproducible/ValidationHarnessService.cs`) - orchestrates reproducible-build-based validation runs - `ValidationHarness` (`src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Validation/ValidationHarness.cs`) - main validation harness with matcher adapter factory integration - `KpiRegressionService` (`src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.GroundTruth.Reproducible/Services/KpiRegressionService.cs`) - KPI regression detection across validation runs - `GroundTruthProvenanceResolver` (`src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/Provenance/GroundTruthProvenanceResolver.cs`) - resolves symbol provenance from ground truth sources - **Interfaces**: `IValidationHarness` (`src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Validation.Abstractions/IValidationHarness.cs`), `IKpiRegressionService`, `ISymbolProvenanceResolver` - **Registration**: `ServiceCollectionExtensions.AddCorpusBundleExport/Import` for bundle exchange ## E2E Test Plan - [ ] Run a validation harness against a known binary pair and verify proof correctness - [ ] Verify ground truth resolution from buildinfo sources produces correct provenance data - [ ] Verify KPI regression service detects accuracy drops between validation runs - [ ] Verify golden set validation produces deterministic, reproducible results - [ ] Verify corpus bundle export/import round-trips correctly - [ ] Verify validation run attestor generates valid attestation predicates with corpus snapshot IDs