diff --git a/docs/design/class-v5-stored-state.md b/docs/design/class-v5-stored-state.md index 8f3448dc2..9562d2278 100644 --- a/docs/design/class-v5-stored-state.md +++ b/docs/design/class-v5-stored-state.md @@ -317,4 +317,4 @@ The census reading (box 2, 48 pool cores under lease class v5, 20:42 to 21:03 UK The five programs main named, read by adv-accept at the acceptance's own 2^20 sample (21:35 UK, logs gap-five-d20733.log and gap-five-d20730.log on branch adv-accept): seed 4346 (bbb38e847011c354, 2.24x live) minimum site 2 at 0.9840 and seed 5245 (beaad44840bb9e4e, 1.86x live) site 8 at 0.9831, both refused by the floor; Devnet 3's epoch-0 class v4 program fce15bf61030be57 at site 0 (instruction 3, source r6) 0.9992 (live 0.9993), adv-cache-2's era-fixed-20 (11f9f955b21d56c9) site 11 at 0.9997 and era-drawn-2 (7ceb797d31eedb3e) site 13 at 0.9992: at or above the floor, the residual. Three further hot sets of adv-accept's refused: 106924 at 0.9821, 107022 at 0.9877, and 1738 (33ece54e2df5ea44, attempt 4, X at 0.1 percent +0.102 percent, 1.68x over the window model) at site 13 0.9868 (live 0.9870; log gap-hot3.log), and 170 (53a02a7c9c9b86f3, attempt 4, X at 0.1 percent +0.143 percent, 2.02x) at site 2 0.9880 (live 0.9877; log gap-hot4.log), and 122960 (4be7393ab6c84802, attempt 0, X at 0.1 percent +0.111 percent, 1.54x, the hottest item 0x81ad88 from an all-ones source at site 12, saturated-source share 0.353 percent under the (c') 1 percent) at site 12 0.9824 (live 0.9822, 1.31 percent of the site's reads on indices read 8 or more times; log gap-122960.log), and adv-accept's last three (gap-tail3.log): 228763 (2c4be0f6dc44c423, 1.82x, one item at 0.057 percent of all reads, source r0 at site 9 with no saturation) site 9 at 0.9809 refused, 638990 (682d8a67caf20d92, 1.51x) site 2 at 0.9872 refused, 623492 (283fa56f84e945f7, clean live) site 0 at 0.9922 refused; so every live hot set by X_f at or above f adv-accept found (nine, minimum sites 0.9809 to 0.9919) and both single-item programs are refused, and of its twelve deepest stand-in seeds read live at 2^24 (gap-newlow5.log, gap-deep4.log) seven clean programs are refused too (130488 at 0.9898, 19921 at 0.9912, 600738 at 0.9934, 148927 at 0.9814, 150347 at 0.9896, 34501 at 0.9929, 623492 at 0.9922; top 0.1 percent share 0.9998x to 1.0028x live), one clean passes (602822 at 0.9951) and 29307 at 0.9912 is refused beyond the gate (1.29x): the floor's statistic at 2^20 is usually a thin spread on the live set, not a hot set, which is the 2.4 percent clean rejection's population, and a floor cannot move up to the mild residuals without refusing most clean programs; the three mild concentrations it misses are worth about 1.0004x to a chip. The record's sentence (the defender's ruling, 21:4x UK): the freeze commit CLOSES THE HOT-SET HALF of the class and NOT the class: the floor refuses every program whose live hot set passes X_f at or above f that any lane measured (seven of adv-accept's, 0.9821 to 0.9919 at the minimum site, and 4346, 5245), and misses the three milder concentrations (top 0.1 percent share 1.26x to 1.45x of control, 0.03 to 0.1 percent of a hash's reads each, the shadow block's last write to the load's source register as the mechanism: a mul, a mulhi, a sub), Devnet 3's own first program among them, whose site-0 product low-bit law moves the distinct count by 0.08 percent: inside the clean population's spread at 2^20 (adv-accept's clean 1st percentile about 0.9993 on 29,032 programs), so no floor that keeps the clean rejection rate near 2.4 percent reaches it; the residual's prevalence is 3 of 432 load sites in adv-cache-2's census and its chip gain under 1.001x; its lever is a value-level source test at live scale or a per-site hot-item test, not a ratio, routed to the next class as a named item. Devnet 3's first class v5 program therefore draws the same (e5a4ac5978462156, attempt 0; the (c''') CLI on build-1 at 21:08 UK confirms). The residual's chip value: a hot table serving 0.1 percent of one site's reads is 1/16 of that over the program's loads, under the 1.067x bound of AP-F8-1 by two orders; its instrument, if main wants it closed, is a shadow-block draw rule (the last write before a load's source may not be a mul, mulhi or sub of the same register: a rule in the draw, not the acceptance), owed as a named row below, not tonight's object. -Main's sentence on the record (23:4x UK), verbatim: "eight of eight hot sets refused; the diffuse era-stride excess, bounded under 0.1 percent of a hash's reads per site, is not caught by the floor and is the next class's test." The reading under it. What the floor does not reach, named (corrected 23:3x UK by the era reading below; the first form of this sentence put the bound at "a top-0.1-percent share under about 1.3x", which was the wrong instrument's number): the distinct-index count at 2^20 reads concentration on FEW word indices (adv-accept's hot sets put about 3 percent of a site's reads on 512 indices, the multiples of 2^19, so the collision count moves by thousands and the ratio falls to 0.98 to 0.992), not a diffuse excess over the top 0.1 percent of items (16,384 items, 262,144 word indices: a 1.5x share there is about +0.08 percent of a site's reads spread over them, moving the distinct count by a few hundred, inside the clean spread). The era reading (box 2, 23:2x UK, `class-v5-harness/v5-listed-adv-cache-2-full.log`; adv-cache-2's census programs at their table attempts, igneum-pow 73daadc2): 0 of 29 refused, every class v5 draw on the class v4 attempt; the six over 1.2x read era-drawn-2 (1.2657x) site 13 0.9992, era-drawn-10 (1.2257x, R 22) site 7 0.9995, era-drawn-15 (1.5115x) site 14 0.9965, era-drawn-17 (1.2139x, R 11) site 0 0.9996, era-drawn-20 (1.2234x, R 29) site 11 0.9996, era-fixed-20 (1.2624x, devnet era) site 11 0.9997; the seven in the 1.04x to 1.2x band 0.9986 to 0.9998; the clean ones 0.9999 to 1.0000; the devnet-era controls of the biased pairs 0.9996 to 0.9999. So the floor closes the few-item hot-set class (eight of eight) and none of the era-stride diffuse class (a product's biased low bits placed into the index by the era's stride rotation R; hidden on the devnet by R = 29); that class is the next class's row: the per-site item-share test at live scale, or a draw rule on R and the shadow block's last write to a load's source. Its chip value is bounded by its own diffuseness: a hot table of the top 0.1 percent of items (1 MiB) serves 1.5 x 0.16 percent of one site's reads, 1/16 of that over the program's loads, about 1.0024x at the worst site read, under the AP-F8-1 bound by an order; the full 61-row reading (23:5x UK, `class-v5-harness/v5-listed-adv-cache-2-full.log`: the two real programs, 27 drawn-era, 32 devnet-era) reads 0 of 61 refused, every class v5 draw on the class v4 attempt; era-drawn-28 (1.7451x, R 15, the worst of adv-cache-2's census) reads site 15 at 0.9969 and era-drawn-25 (1.3571x, R 21) site 11 at 0.9994, both over the floor, so the diffuse class's worst member sits 0.0019 over the line while the few-item hot sets sit 0.003 to 0.013 under it; adv-accept's eight live hot sets sat at stride rotations 28, 19, 29, 29, 29, 11, 30, 10, so the two classes overlap in R and differ in shape, not in era. +Main's sentence on the record (23:4x UK), verbatim: "nine of nine hot sets refused; the diffuse era-stride excess, bounded under 0.1 percent of a hash's reads per site, is not caught by the floor and is the next class's test." The reading under it. What the floor does not reach, named (corrected 23:3x UK by the era reading below; the first form of this sentence put the bound at "a top-0.1-percent share under about 1.3x", which was the wrong instrument's number): the distinct-index count at 2^20 reads concentration on FEW word indices (adv-accept's hot sets put about 3 percent of a site's reads on 512 indices, the multiples of 2^19, so the collision count moves by thousands and the ratio falls to 0.98 to 0.992), not a diffuse excess over the top 0.1 percent of items (16,384 items, 262,144 word indices: a 1.5x share there is about +0.08 percent of a site's reads spread over them, moving the distinct count by a few hundred, inside the clean spread). The era reading (box 2, 23:2x UK, `class-v5-harness/v5-listed-adv-cache-2-full.log`; adv-cache-2's census programs at their table attempts, igneum-pow 73daadc2): 0 of 29 refused, every class v5 draw on the class v4 attempt; the six over 1.2x read era-drawn-2 (1.2657x) site 13 0.9992, era-drawn-10 (1.2257x, R 22) site 7 0.9995, era-drawn-15 (1.5115x) site 14 0.9965, era-drawn-17 (1.2139x, R 11) site 0 0.9996, era-drawn-20 (1.2234x, R 29) site 11 0.9996, era-fixed-20 (1.2624x, devnet era) site 11 0.9997; the seven in the 1.04x to 1.2x band 0.9986 to 0.9998; the clean ones 0.9999 to 1.0000; the devnet-era controls of the biased pairs 0.9996 to 0.9999. So the floor closes the few-item hot-set class (nine of nine) and none of the era-stride diffuse class (a product's biased low bits placed into the index by the era's stride rotation R; hidden on the devnet by R = 29); that class is the next class's row: the per-site item-share test at live scale, or a draw rule on R and the shadow block's last write to a load's source. Its chip value is bounded by its own diffuseness: a hot table of the top 0.1 percent of items (1 MiB) serves 1.5 x 0.16 percent of one site's reads, 1/16 of that over the program's loads, about 1.0024x at the worst site read, under the AP-F8-1 bound by an order; the full 61-row reading (23:5x UK, `class-v5-harness/v5-listed-adv-cache-2-full.log`: the two real programs, 27 drawn-era, 32 devnet-era) reads 0 of 61 refused, every class v5 draw on the class v4 attempt; era-drawn-28 (1.7451x, R 15, the worst of adv-cache-2's census) reads site 15 at 0.9969 and era-drawn-25 (1.3571x, R 21) site 11 at 0.9994, both over the floor, so the diffuse class's worst member sits 0.0019 over the line while the few-item hot sets sit 0.003 to 0.013 under it; adv-accept's eight live hot sets sat at stride rotations 28, 19, 29, 29, 29, 11, 30, 10, so the two classes overlap in R and differ in shape, not in era. diff --git a/docs/fud-ledger.md b/docs/fud-ledger.md index a268e08a0..76e42498a 100644 --- a/docs/fud-ledger.md +++ b/docs/fud-ledger.md @@ -2526,9 +2526,9 @@ Status: Fixed in class v5 (8ca66afa, 0.3.25's igneum-pow line); sub-version 3's Finding (7 October 2026, the in-house pass adv-cache-2, report-chained-cache-2.md section 2.3 on branch adv-cache-2, 2^23 nonces per program on day 20730): under drawn eras, 13 of 27 class v4 sub-version 3 programs carry a load site whose top 0.1 percent of items take over 1.04x the window model's share (8 over 1.2x: era-drawn-2 1.2657x, -10 1.2257x, -15 1.5115x, -17 1.2139x, -20 1.2234x, -25 1.3571x, -28 1.7451x, era-fixed-20 1.2624x), against 2 of 32 under the devnet era, and Devnet 3's own epoch-0 program at site 0 reads 1.4492x at 2^26 nonces. The mechanism: a product's biased low bits (the shadow block's last write to the load's source, a mul, mulhi or sub) land at address bits R and up through the era's stride rotation `rotl(x * stride, R)`, inside the 28-bit index unless R is 28 or more; R = 29 on the devnet hid it. Class v5's floor (c''', `MIN_DISTINCT_RATIO_V5 = 0.995` at the 2^20 acceptance sample) was read on the class at 23:2x UK (box 2, class-v5 73daadc2, `docs/design/class-v5-harness/v5-listed-adv-cache-2-full.log`): 0 of 61 programs refused at their table attempts (the two real programs, 27 drawn-era, 32 devnet-era controls), the eight over 1.2x at 0.9965 (era-drawn-15, 1.51x) and 0.9969 (era-drawn-28, 1.75x) to 0.9997, the 1.04x to 1.2x band at 0.9986 to 0.9998, every class v5 draw on the class v4 attempt. -Answer (main's sentence, 7 October 2026, 23:4x UK): "eight of eight hot sets refused; the diffuse era-stride excess, bounded under 0.1 percent of a hash's reads per site, is not caught by the floor and is the next class's test." The reading under it: correct, and a different instrument's class. The distinct-index count at 2^20 reads concentration on FEW word indices (adv-accept's eight live hot sets put about 3 percent of a site's reads on 512 indices, the multiples of 2^19, and read 0.9821 to 0.9919: all eight refused by the floor), not a diffuse excess over the top 0.1 percent of items (16,384 items, 262,144 word indices: era-drawn-15's 1.51x is about +0.08 percent of the site's reads spread over them, a few hundred distinct indices, inside the clean spread of 0.0001). So the floor closes the few-item hot-set class and does not reach this one, and no floor would without refusing most clean programs (section 14 of the class v5 design page). Chip value, bounded by the diffuseness itself: a hot table of the top 0.1 percent of items (1 MiB) serves 1.5 x 0.16 percent of one load site's reads, 1/16 of that over the program's 16 loads, about 1.0024x at the worst site read, under the AP-F8-1 bound of 1.067x by an order; nothing in the chip model's rows moves. The next class's test, named: the per-site item-share test at live scale (the window model's top-0.1-percent share per site over 2^23 or more nonces, which costs seconds per candidate and so cannot sit in the acceptance's millisecond budget), or a draw rule on the era's R range and on the shadow block's last write to a load's source register (a mul, mulhi or sub of the same register), known-failed first on Devnet 3's epoch-0 program (fce15bf61030be57, site 0) and era-drawn-28. +Answer (main's sentence, 7 October 2026, 23:4x UK): "nine of nine hot sets refused; the diffuse era-stride excess, bounded under 0.1 percent of a hash's reads per site, is not caught by the floor and is the next class's test." The reading under it: correct, and a different instrument's class. The distinct-index count at 2^20 reads concentration on FEW word indices (adv-accept's eight live hot sets put about 3 percent of a site's reads on 512 indices, the multiples of 2^19, and read 0.9809 to 0.9919: all nine refused by the floor), not a diffuse excess over the top 0.1 percent of items (16,384 items, 262,144 word indices: era-drawn-15's 1.51x is about +0.08 percent of the site's reads spread over them, a few hundred distinct indices, inside the clean spread of 0.0001). So the floor closes the few-item hot-set class and does not reach this one, and no floor would without refusing most clean programs (section 14 of the class v5 design page). Chip value, bounded by the diffuseness itself: a hot table of the top 0.1 percent of items (1 MiB) serves 1.5 x 0.16 percent of one load site's reads, 1/16 of that over the program's 16 loads, about 1.0024x at the worst site read, under the AP-F8-1 bound of 1.067x by an order; nothing in the chip model's rows moves. The next class's test, named: the per-site item-share test at live scale (the window model's top-0.1-percent share per site over 2^23 or more nonces, which costs seconds per candidate and so cannot sit in the acceptance's millisecond budget), or a draw rule on the era's R range and on the shadow block's last write to a load's source register (a mul, mulhi or sub of the same register), known-failed first on Devnet 3's epoch-0 program (fce15bf61030be57, site 0) and era-drawn-28. -Status: Answered with evidence (the miss recorded beside the eight of eight); the lever routed to the next class and CA4; nothing in class v5's frozen object 1c420786 moves. +Status: Answered with evidence (the miss recorded beside the nine of nine); the lever routed to the next class and CA4; nothing in class v5's frozen object 1c420786 moves. ## Genesis forward-compatibility entries (7 October 2026, mission item 8, branch `genesis-forward`) diff --git a/docs/spec/01-lottery-hash.md b/docs/spec/01-lottery-hash.md index f77ae132b..9dd20cbcd 100644 --- a/docs/spec/01-lottery-hash.md +++ b/docs/spec/01-lottery-hash.md @@ -325,7 +325,7 @@ The load class is `mx8+sh256x27+state` (`V5_CLASS = LoadClass { state: true, ..V A class v5 candidate must pass every part of section 1.4.6 and then (c'''): on the same run as part (c'') (4,096 units x 32 lanes x 8 iterations = 2^20 evaluations per load site on the seed's acceptance stream, the closed form at 2^28 words), every load site's distinct-word-index ratio against the window model (`distinct / (N - N^2 / 2W)`, `W` the site's window in words, the form of part (c'')) must be at least `MIN_DISTINCT_RATIO_V5 = 0.995`. A site under 0.98 is named by part (c'') first; a site at or above 0.98 and under 0.995 is refused by (c''') (`Reject::HotItemSite`, naming the site, its distinct count, the ratio and the most-read index with its count). The test is keyed on the state flag: no class v4 verdict moves. -Why 0.995 (the record is `docs/design/class-v5-stored-state.md` section 14 and ledger AP-F8-1): the in-house pass found class v4 sub-version 3 programs that pass every part of 1.4.6 and read a live hot set (the exemplar, seed 100767 of the f8 label space, program `9d68e6286fc817d4`: 3.35 percent of one site's reads on the top 0.1 percent of items, from a `mad` value that is near zero in a value class, mapped by the era stride onto the multiples of 2^19); at the acceptance's own sample that site reads 0.9919, where the window model's spread is 0.0001 and the clean median 0.9999. The census over 4,600 seeds reads 2.435 percent of class v4 accepted programs under 0.995 (their class v5 draw lands on a later attempt; the attempts mean goes 2.174 to 2.248), none under 0.98, and 0 class v5 accepted programs under the floor; every live hot set the pass measured (eight, 0.9821 to 0.9919) is under the floor, and the floor misses the shadow-block-written concentrations at 0.9992 to 0.9997 (worth about 1.0004x to a chip), which no floor reaches without refusing most clean programs. 0.99 would pass the exemplar. +Why 0.995 (the record is `docs/design/class-v5-stored-state.md` section 14 and ledger AP-F8-1): the in-house pass found class v4 sub-version 3 programs that pass every part of 1.4.6 and read a live hot set (the exemplar, seed 100767 of the f8 label space, program `9d68e6286fc817d4`: 3.35 percent of one site's reads on the top 0.1 percent of items, from a `mad` value that is near zero in a value class, mapped by the era stride onto the multiples of 2^19); at the acceptance's own sample that site reads 0.9919, where the window model's spread is 0.0001 and the clean median 0.9999. The census over 4,600 seeds reads 2.435 percent of class v4 accepted programs under 0.995 (their class v5 draw lands on a later attempt; the attempts mean goes 2.174 to 2.248), none under 0.98, and 0 class v5 accepted programs under the floor; every live hot set the pass measured (nine, 0.9809 to 0.9919) is under the floor, and the floor misses the shadow-block-written concentrations at 0.9992 to 0.9997 (worth about 1.0004x to a chip), which no floor reaches without refusing most clean programs. 0.99 would pass the exemplar. The census paragraph in the form of the crypto lane's attempts census of sub-version 3 (per-candidate rejection 0.68, (a') 83.3 percent of rejections, 0 exhaustions, P(256) 8e-44): class v5's own, over 1,000 seeds of the f8 label space through the chain draw (`v5_attempts_census`, box 2, 23:4x UK, `docs/design/class-v5-harness/v5-attempts-census-1000.log`): 3,219 candidates, 2,219 rejected, per-candidate rejection 0.6893, accepted attempt mean 2.219, 0 exhaustions, P(256 consecutive rejections) 4.4e-42. First failing part per rejected candidate: (a') unfresh source 1,850 (83.4 percent of rejections, 57.5 percent of candidates); (a) stale load 237 (10.7 percent); (b) no injecting write 66 (3.0 percent); (c'') low-entropy site 26 (1.2 percent); (c''') hot-item site 23 (1.0 percent of rejections, 0.7 percent of candidates: the floor's own share, one candidate in 140); (c) saturated 9, constant bit 7, distinct addresses 1 (0.7 percent together); (c') none at first failure. So the rule's cost is class v4's: (c''') adds 0.7 percent to the per-candidate rejection and 0.045 to the accepted attempt mean. diff --git a/site/ledger.html b/site/ledger.html index b84c17c2f..a49c666e8 100644 --- a/site/ledger.html +++ b/site/ledger.html @@ -1413,7 +1413,7 @@ blockquote{margin:10px 0;padding:10px 14px;border-left:3px solid var(--line-2);c
AP-F8-6

The class v5 acceptance floor does not reach the era-stride diffuse concentration

3 October 2026
-
Answered with evidence the miss recorded beside the eight of eight); the lever routed to the next class and CA4; nothing in class v5's frozen object 1c420786 moves.
+
Answered with evidence the miss recorded beside the nine of nine); the lever routed to the next class and CA4; nothing in class v5's frozen object 1c420786 moves.