Crate u280_evidence_oracle 

Independent cryptographic promotion gate for sealed U280 Phase-B evidence.

This crate consumes, but never modifies, the archive emitted by the C++ XRT transport runner. It recomputes every SHA-256-profile WOTS signature with the software reference implementation pinned by this workspace, verifies the complete transport envelope, and writes a separately sealed result. It also verifies and binds the producer’s canonical coordination chain and native-XRT card identity chain. Coordination is a structurally authenticated procedural ledger assertion, not cryptographic ledger proof or global nonrollback evidence. A successful result is still not a hardware-completion claim: route, measured performance, ownership, replay uniqueness, and final promotion belong to a later combiner. A distinct entry point in this package consumes only the deliberately non-hardware mock-HBM source-simulation format and cannot accept this transport archive in its place.

Structs

OracleConfig

Configuration for one immutable archive validation.

OracleFailure

A structural validation failure whose separate evidence directory was successfully sealed and can therefore be anchored by the CLI.

OracleOutcome

Completed result returned after the separate directory has been sealed.

SourceOracleConfig

Configuration for one immutable source-simulation comparison.

SourceOracleFailure

Structural source validation failure whose audit directory was sealed.

SourceOracleOutcome

Completed source-tier comparison and its externally anchorable manifest.

VerifiedClockObservation

Exact clock fields shared by metadata, results, and every request.

VerifiedHardwareCardIdentity

Strict, continuous physical-card identity recovered from the transport.

VerifiedHardwareXclbinIdentity

Exact programmed xclbin identity from the continuous pre/post card capture.

VerifiedOracleReceiptCapture

Descriptor-retained capture of the exact oracle creation receipt.

VerifiedPerformanceObservations

Exact integer performance observations derived from retained raw samples.

VerifiedPerformanceSample

One independently re-parsed raw timing/summary/diagnostic observation.

VerifiedRequestArtifactBinding

One input or output artifact retained for a verified request.

VerifiedResultArtifactBinding

One immutable file or manifest binding recovered from the sealed result.

VerifiedResultRequest

Semantically revalidated fields for one complete oracle request.

VerifiedRoutedClockEvidenceBinding

Routed-clock evidence binding declared consistently by the transport.

VerifiedSealedResult

Opaque, descriptor-retaining view of a receipt-bound Phase-B oracle result.

VerifiedXclbinBinding

The routed hardware image binding recovered from one oracle request.

VerifiedXrtBuildIdentity

Exact XRT build identity recovered from the retained native-XRT reports.

Constants

PHASE_B_ORACLE_RECEIPT_SCHEMA

CLI receipt schema that explicitly binds the typed result contract.

PHASE_B_TYPED_RESULT_CONTRACT

Closed result contract consumed by verify_typed_sealed_result.

PHASE_B_TYPED_RESULT_SCHEMA

Schema emitted by a completed Phase-B hardware-oracle comparison.

Functions

completed_result_receipt_line

Serializes the exact canonical schema-2 creation-receipt line.

execute

Validates a sealed Phase-B archive and creates a distinct sealed result.

execute_source

Validate one sealed source-simulation case and create a separate sealed result.

open_verified_oracle_receipt_capture

Securely opens and validates one exact schema-2 creation-receipt capture.

verify_sealed_result

Revalidates every entry in a sealed result and requires the external manifest byte-count/digest receipt captured when that result was created.

verify_typed_sealed_result

Revalidates a completed Phase-B result from its descriptor-retained receipt.