stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
1bf6bbf3955ecbd8d20f5eeb767da5c7f8324b57
git.stella-ops.org/docs/features/unchecked/binaryindex/binary-proof-verification-pipeline.md

2.0 KiB
Raw Blame History

Binary Proof Verification Pipeline

Module

BinaryIndex

Status

IMPLEMENTED

Description

Full binary proof verification with ground truth sources (buildinfo, debuginfod, reproducible builds), validation, and golden set testing.

Implementation Details

  • Modules: src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.GroundTruth.Reproducible/, src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Validation/, src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Validation.Abstractions/
  • Key Classes:
    • ValidationHarnessService (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.GroundTruth.Reproducible/ValidationHarnessService.cs) - orchestrates reproducible-build-based validation runs
    • ValidationHarness (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Validation/ValidationHarness.cs) - main validation harness with matcher adapter factory integration
    • KpiRegressionService (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.GroundTruth.Reproducible/Services/KpiRegressionService.cs) - KPI regression detection across validation runs
    • GroundTruthProvenanceResolver (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/Provenance/GroundTruthProvenanceResolver.cs) - resolves symbol provenance from ground truth sources
  • Interfaces: IValidationHarness (src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.Validation.Abstractions/IValidationHarness.cs), IKpiRegressionService, ISymbolProvenanceResolver
  • Registration: ServiceCollectionExtensions.AddCorpusBundleExport/Import for bundle exchange

E2E Test Plan

  • Run a validation harness against a known binary pair and verify proof correctness
  • Verify ground truth resolution from buildinfo sources produces correct provenance data
  • Verify KPI regression service detects accuracy drops between validation runs
  • Verify golden set validation produces deterministic, reproducible results
  • Verify corpus bundle export/import round-trips correctly
  • Verify validation run attestor generates valid attestation predicates with corpus snapshot IDs