Repository navigation
Phase 6b: deterministic MathCorpus and MCIP export #54
Description
Goal
Project one trusted frozen MathOS release into a deterministic MathCorpus-compatible packet and a versioned MCIP v1 evidence bundle without making MathCorpus a runtime dependency or promoting proof/training/publication state.
Change class: Class 2 (corpus schemas, trust labels, and export policy).
Pinned format authority
- Repository: Mnehmos/mathcorpus
- Commit: a0d08c9ace0dcc70a8bc281dcf29c560242075d3
- Tree: 62bc32fac877a82958ffcbe86402f8e793295f99
- MathCorpus packet schema SHA-256: 6b6dfb3d558acbe53c9ca9e4d559f4e2677486e1a9d3b5c852a7cab6f7af532e
- MCIP v1 shared definitions SHA-256: d0201d4abdb106974de7b27f2a10909069e0aac1df490811bed3c15fec123137
- MCIP v1 bundle schema SHA-256: 00eab00b02761d4e82574052d7c5547d7a1b70a49e434f87a5ff77f8c3e6fb49
- PacketIdentity schema SHA-256: e40aab76c1682f8ee5be840c5eeae82f3e0da1572b2b322ed20f84ad74e69595
- ProofVariant schema SHA-256: 497f1dce5e49e311a2af586c2bd035439724c13b85e37cb734909eccebbb5fdb
- DependencyManifest schema SHA-256: 4014bbb84b2e09bd838ca60365a8d44156342d3e44918236a37cc87c15eb8bbf
Acceptance criteria
- Vendor the exact Apache-2.0 upstream schema snapshots with commit/hash provenance and no network resolution.
- Define one closed MathOS corpus-export manifest binding the trusted source release manifest hash, explicit packet identity/domain/level/difficulty inputs, upstream contract identities, every output path/hash/size/restriction, packet hash, MCIP bundle hash, and proof module hash.
- Add a no-write dry run and a non-overwriting deterministic directory build from a structurally verified release plus its trusted expected manifest hash.
- Emit one upstream-compatible MathCorpus packet and one MCIP 1.0.0 bundle containing exact PacketIdentity, canonical ProofVariant, and DependencyManifest child records with recomputed record hashes.
- Preserve authority separation: MCIP remains child evidence; a private release maps only to private_audit_only/private_only, while a future public release remains quarantined until leakage-aware split assignment.
- Require explicit valid packet_id, domain, level, and difficulty_bin; do not guess curation metadata.
- Add offline export verification that opens no SQLite database and rejects substituted source release identities, schema drift, noncanonical JSON, unknown fields, record/packet hash changes, inventory changes, unsafe paths/symlinks, and projection/reference mismatches.
- Expose CLI release export and verify-export through the same application/export module.
- Cover deterministic preview/build, restart independence, no overwrite, private fail-closed policy, upstream schema conformance, tampering, extra/missing files, and expected-hash substitution.
- Extend the protected Pilot A workflow to export and verify the packet/MCIP bundle after hiding SQLite; retain exact evidence and independently audit the downloaded artifact.
- Record ADR, trust docs, implementation ledger, schema provenance, exact commands, hashes, CI, and protected-run evidence.
Out of scope
RL/evaluation records, leakage-aware split assignment, Comparator packages, public release publication, and Pilot C remain later Phase 6 slices.
Activity
Mnehmos commentedon Jul 22, 2026
Completed and independently audited.\n\n- Implementation PR: #55\n- Reviewed head: 5571178\n- Merge: e977d7e\n- Exact-head CI: https://github.com/Mnehmos/MathOS/actions/runs/29884823358\n- Merged-tree CI: https://github.com/Mnehmos/MathOS/actions/runs/29885040172\n- Protected publication: https://github.com/Mnehmos/MathOS/actions/runs/29885040178\n- Artifact: 8516235885, GitHub SHA-256 55b4342eb03d19941d73086b6c44aae5083c834f824205a6138c7ddcdfe7d1d4\n- Source release: 7b002ffe0fcaeecd0fe745dcedd135442b7372985a0fac5b9ffbe03af4c691b1\n- Corpus manifest: 4cb348d8a446f800d74865909c8fff66b310c5cd0fbe6fb00f6830d0961ed705\n- Packet: 690d7f8a18fad1fee415b5d6ad4efeaf154a2a7dc366b892967230d49db6c69d\n\nThe downloaded artifact matched all 12 export files and all 11 member hashes/sizes, contained no symlinks, and retained byte-identical source-manifest and Lean-module copies. Offline MathOS reprojection passed from a nonexistent instance root. The pinned upstream MathCorpus and MCIP validators reported zero errors and zero warnings with hash checking enabled.\n\nPR #56 records the protected evidence in the implementation ledger; its merged-tree CI and protected run also passed.