From 6c6b031178df6b567c2aaa01e8b27aff74dc7039 Mon Sep 17 00:00:00 2001 From: igneum-labs <337424239+igneum-labs@users.noreply.github.com> Date: Wed, 7 Oct 2026 15:15:44 +0000 Subject: [PATCH] attack-pass F8: sub-version 3's two commits, the (c'') threshold evidence and the c3d32437 census line in the record Co-Authored-By: Claude Fable 5.1 --- docs/analysis/attack-pass-2026-10.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/docs/analysis/attack-pass-2026-10.md b/docs/analysis/attack-pass-2026-10.md index 6613e65f..62eb69ef 100644 --- a/docs/analysis/attack-pass-2026-10.md +++ b/docs/analysis/attack-pass-2026-10.md @@ -464,6 +464,18 @@ sub-version 1's 53 clean seeds): min 0.9865, p1 0.9961, p5 0.9999, so bucket ent the hash lane's distinct-index ratio at 2^20 (p23 at 0.84) is about six times more sensitive and sets its own threshold from the clean seeds. Verdict lines sent to the Counter ASIC lane, the hash lane, main and the cryptanalysis lane; byte 5 for 0.3.21 stands on this evidence. +Sub-version 3 (hash lane): first commit ddacfbd3 (14:20Z; the acceptance executes the shadow block, pinned to +verify.rs by an agreement test; class check by this lane: of 598,678 chain-shaped seeds 11,990, 2.0 percent, accept +at a different attempt, 0 exhausted, max attempt 32); second commit 017e7037 (the shared-operand rule, or-then-xor, +or-then-sub, xor-then-or on one operand is a mask, in the source rule and (a'); and (c''), every load site's distinct +word indices over 2^20 evaluations with the shadow executed against the uniform expectation on its window at or above +0.98, the last test of the chosen candidate). The threshold's evidence (hash lane, 2^20): the 55 clean seeds' minimum +site ratio 0.9960, p1 0.9990, median 1.0000; the strong five p23 0.8361, p18 0.9274, p19 0.9335, p15 0.9432, p56 +0.9654; floor 0.98 sits 0.015 from each side. At 2^24 the weak four (p34 0.9181, p4 0.9614, p8 0.9630, p10 0.9612) +share their value with two clean seeds (p44 0.9612, p52 0.9613), so the 2^24 stage is not taken and p4, p8, p10 and +p34 stay the open tail, unattributed. The ratio refuses about 4 percent of candidates that pass every other test +(4,099-program census at 017e7037: mean attempts 2.086 against 1.998, max 17, 0 lossy-sourced load sites of 65,584, +0 exhaustions; suite 103 of 103; devnet epoch-0 at attempt 1, id a785001687d8688a, pairing verified by this lane). Status: FINDING-OPEN; sub-version 1 FAILS the re-gate (11 of 64); sub-version 2 FAILS it (9 of 64, worst 4.82x); FIXED-AND-PASSED on the 64-seed verdict against sub-version 3 (the acceptance executing the shadow block, the per-site distinct-index ratio rule, the cap and the last resort).