mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
2a2b698fb4
Ada is the D1 border, not the body. Removed everything that pretended otherwise
and completed the real gate so it builds, links, and passes its tests.
Deleted (wrong/defunct/superseded):
- ada_medium.adb (defunct medium, header commented 'WRONG'; replaced by Ichor)
- sockets.{ads,adb} (empty package with an illegal body)
- bbb-bludbrenburier.ads ('this is filler'); invariants-architecture.cobol ('idk cobol')
- tests/soul_tests.adb, tests/cycle_tests.adb (exercise a Soul.Tarot/State/Ada_Medium
subsystem that does not exist -- the old 56-card/Big-3 design, superseded)
mafiabot_types -> border-only: organs aren't Ada (organs are R/Octave/Pony/Guile),
so drop Organ_Id; drop Cycle_Step (cognition) and the fixed-point Drive/Ratio/
Cost/Axis numerics (drive/affect math lives in the organs, in floats). Keep the
source/trust tag (Provenance_Tag), Operation_Status, and a bounded payload --
content is pre-digested into RAG context upstream, so the gate scans a bounded
buffer for prompt-injection rather than streaming raw input.
trust_boundary: Organ_Message -> Border_Message {Provenance, Payload} (Ada does
not route by organ -- that's Ichor); add the D1 body (blocklist scan, provenance,
rate limit, Trust_Guard) -- the unit Ichor's barrier FFI targets.
Add mafiabot_types.adb. Fix mafiabot_core.gpr (drop phantom dirs + nonexistent
mafiabot.adb main). alire.toml: drop unused gnat_sockets/spark_lemmas.
Builds clean on GNAT 13.3/Alire; trust + config tests pass.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015hmgREHNsxYCuim33yUF2c
113 lines
4.0 KiB
Ada
113 lines
4.0 KiB
Ada
-- SPARK trust boundary — defense model §8.2 from the Gen.03 spec.
|
|
-- Full SPARK proofs throughout; No_Exceptions enforced.
|
|
with Mafiabot_Types; use Mafiabot_Types;
|
|
with System;
|
|
|
|
package Trust_Boundary
|
|
with SPARK_Mode => On
|
|
is
|
|
|
|
-- A message crossing the border (D1). Ada does not route by organ -- that
|
|
-- is Ichor's job -- so this carries only the source/trust tag the gate
|
|
-- screens by, plus the (pre-digested) payload to scan.
|
|
type Border_Message is record
|
|
Provenance : Provenance_Tag := System_Internal;
|
|
Payload : Bounded_Text;
|
|
end record;
|
|
|
|
-- -----------------------------------------------------------------------
|
|
-- Blocklist
|
|
|
|
Max_Blocklist : constant := 32;
|
|
Max_Pattern_Len : constant := 256;
|
|
|
|
subtype Pattern_Length is Natural range 0 .. Max_Pattern_Len;
|
|
|
|
type Pattern_Entry is record
|
|
Pattern : String (1 .. Max_Pattern_Len) := (others => ' ');
|
|
Pattern_Len : Pattern_Length := 0;
|
|
Active : Boolean := True;
|
|
end record;
|
|
|
|
type Blocklist_Index is range 1 .. Max_Blocklist;
|
|
type Blocklist is array (Blocklist_Index) of Pattern_Entry;
|
|
|
|
-- Built-in blocklist: base64-decode chains, fetch-execute, memory-inject
|
|
Default_Blocklist : constant Blocklist;
|
|
|
|
-- Naive substring search — O(n*m), SPARK-provable (no heap, no regex)
|
|
function Matches_Blocklist
|
|
(Text : Bounded_Text;
|
|
List : Blocklist) return Boolean;
|
|
|
|
-- -----------------------------------------------------------------------
|
|
-- Provenance enforcement
|
|
|
|
procedure Validate_Provenance
|
|
(Source : in Provenance_Tag;
|
|
Claimed : in Provenance_Tag;
|
|
Result : out Operation_Status)
|
|
with Post => (if Source /= Claimed then Result = Error_Trust_Violation);
|
|
|
|
-- -----------------------------------------------------------------------
|
|
-- Rate limiting (tick-based, not wall-clock — SPARK-provable)
|
|
|
|
type Rate_Limit is record
|
|
Max_Per_Window : Positive := 60;
|
|
Current_Count : Natural := 0;
|
|
Window_Start : Natural := 0;
|
|
Window_Size : Positive := 100; -- ticks
|
|
end record;
|
|
|
|
procedure Check_Rate
|
|
(Limit : in out Rate_Limit;
|
|
Tick : in Natural;
|
|
Result : out Operation_Status);
|
|
|
|
-- -----------------------------------------------------------------------
|
|
-- Message check (combines provenance + blocklist)
|
|
|
|
procedure Check_Message
|
|
(Msg : in Border_Message;
|
|
Result : out Operation_Status)
|
|
with Post => (if Msg.Provenance = System_Internal then Result = OK);
|
|
|
|
-- -----------------------------------------------------------------------
|
|
-- Trust_Guard protected object
|
|
|
|
protected Trust_Guard is
|
|
pragma Priority (System.Priority'Last);
|
|
|
|
procedure Screen_Inbound
|
|
(Msg : in Border_Message;
|
|
Status : out Operation_Status);
|
|
|
|
procedure Screen_Outbound
|
|
(Msg : in Border_Message;
|
|
Status : out Operation_Status);
|
|
|
|
private
|
|
Inbound_Rate : Rate_Limit := (Max_Per_Window => 60, Current_Count => 0,
|
|
Window_Start => 0, Window_Size => 100);
|
|
Outbound_Rate : Rate_Limit := (Max_Per_Window => 30, Current_Count => 0,
|
|
Window_Start => 0, Window_Size => 100);
|
|
Tick : Natural := 0;
|
|
end Trust_Guard;
|
|
|
|
private
|
|
|
|
Default_Blocklist : constant Blocklist :=
|
|
(1 => (Pattern => "base64" & (7 .. Max_Pattern_Len => ' '),
|
|
Pattern_Len => 6, Active => True),
|
|
2 => (Pattern => "execute" & (8 .. Max_Pattern_Len => ' '),
|
|
Pattern_Len => 7, Active => True),
|
|
3 => (Pattern => "store_core_memory" & (18 .. Max_Pattern_Len => ' '),
|
|
Pattern_Len => 17, Active => True),
|
|
4 => (Pattern => "authority" & (10 .. Max_Pattern_Len => ' '),
|
|
Pattern_Len => 9, Active => True),
|
|
5 => (Pattern => "xmrig" & (6 .. Max_Pattern_Len => ' '),
|
|
Pattern_Len => 5, Active => True),
|
|
others => (Pattern => (others => ' '), Pattern_Len => 0, Active => False));
|
|
|
|
end Trust_Boundary;
|