Research-Stack/4-Infrastructure/infra
Brandon Schneider ef7b0849d5 fix(adversarial-review): resolve 35 critical coding bugs across 8 subsystems
Security & correctness fixes from full adversarial review:

Lean (7 fixes):
- FixedPoint.lean: guard false theorem with n > 0 precondition
- QFactor.lean: remove double-scaling error in energy decrease
- AVMIsa/Step.lean: implement addSatQ16/subSatQ16 primitives
- BraidEigensolid.lean: fix crossStep second output argument swap
- SSMS.lean: complete ACI preservation proof (with rounding caveat)
- HouseholderQR.lean: add n > 0 precondition to spectral theorem

Verilog (7 fixes):
- q16_lut_core.v: fix multiply shift (16 → 32 bits)
- q16_lut_top.v: fix valid bit (0 → 1)
- cff_accelerator.v: fix SHA-256 padding (len < 448 check)
- research_stack_top.v: fix trigger aliasing (unique counters)
- Blitter6502OISC_small.v: fix address width (15 → 16 bits)
- spatial_hash_bram.v: add OOB write guard
- tmr_oepi_safety_fsm.v: fix double-increment race

WGSL (6 fixes):
- shaders.wgsl: atomicAdd for concurrent writes
- frustration_qubo.wgsl: double-buffer + CAS loop
- braid_fft.wgsl: workgroupBarrier synchronization
- burgers_scar_filter.wgsl: atomic E_bins array

Rust (9 fixes):
- thermodynamic.rs: Arc::from_raw → Arc::clone (double-free)
- thermodynamic.rs: Box::into_raw → Box (leak)
- tools/src/lib.rs: shell injection → shlex.quote
- ene-node/src/lib.rs: LRU caps, constant-time HMAC, peer caps

Python (6 fixes):
- similarity/__init__.py: pickle.load → RestrictedUnpickler
- AI-Feynman: torch.load → weights_only=True (14 calls)
- fetch_arxiv.py, fetch_s2.py: eval → ast.literal_eval
- topology.py: os.system → shutil.copy2
- SSH pipe: os.system → base64 pipe

Build: lake build 3572 jobs, 0 errors
2026-05-31 23:38:03 -05:00
..
access_control initial: sovereign research stack (consolidated, weightless, and lfs-optimized) 2026-05-04 18:11:36 -05:00
embedded_surface fix(infra): resolve k3s services startup issues and update ingress configuration 2026-05-27 17:39:00 -05:00
ene-rds fix(adversarial-review): resolve 35 critical coding bugs across 8 subsystems 2026-05-31 23:38:03 -05:00
ene-session-sync chore: commit accumulated working tree changes 2026-05-30 00:10:02 -05:00
ene_plugins/tiddlywiki_bridge wip: refined investigation script for Erdős–Gyárfás conjecture 2026-05-08 14:50:03 -05:00
nodes chore: preserve working tree before secure wipe 2026-05-13 17:36:02 -05:00
service-orchestrator WIP: accumulated changes 2026-05-25 16:24:21 -05:00
shims initial: sovereign research stack (consolidated, weightless, and lfs-optimized) 2026-05-04 18:11:36 -05:00
aws_language_proof_server_user_data.sh WIP: accumulated changes 2026-05-25 16:24:21 -05:00
backup-appflowy-db.sh Fix Porkbun DNS, automate postgres backups, fix rds_probe vulns 2026-05-18 11:52:01 -05:00
credential_store_schema.sql WIP: accumulated changes 2026-05-25 16:24:21 -05:00
deploy_aws_language_proof_server.sh WIP: accumulated changes 2026-05-25 16:24:21 -05:00
deploy_language_proof_server.sh Add proof worker pool routing 2026-05-25 22:27:18 -05:00
ec2-configuration.nix WIP: accumulated changes 2026-05-25 16:24:21 -05:00
ec2-idle-watchdog.service archive: remove experimental tools-scripts, scripts, and shim probes 2026-05-25 18:14:31 -05:00
ec2-idle-watchdog.timer archive: remove experimental tools-scripts, scripts, and shim probes 2026-05-25 18:14:31 -05:00
ec2_idle_watchdog.py archive: remove experimental tools-scripts, scripts, and shim probes 2026-05-25 18:14:31 -05:00
ene_cognitive_refactor_plan.md collapse: prover orchestration layers, FAMM verilator harness, swarm topological prober, spec sheets, virtual FPGA system tests, merge conflict resolution 2026-05-06 23:42:01 -05:00
ene_contextstream_mcp.py chore: commit accumulated working tree changes 2026-05-30 00:10:02 -05:00
language_proof_server.py Add proof worker pool routing 2026-05-25 22:27:18 -05:00
nixos-setup-cred-server.sh WIP: accumulated changes 2026-05-25 16:24:21 -05:00
NV2 initial: sovereign research stack (consolidated, weightless, and lfs-optimized) 2026-05-04 18:11:36 -05:00
recover_credential_server.sh ene-session-sync: complete Python→Rust port; fix all 6 pre-existing test failures 2026-05-19 14:44:19 +00:00
RECOVERY.md Add EC2 recovery backup: NixOS config, AppFlowy compose/env template, credential server bootstrap, recovery guide 2026-05-18 10:44:23 -05:00
remote_lean_proof_mcp.py Add proof worker pool routing 2026-05-25 22:27:18 -05:00
requirements_knowledge.txt initial: sovereign research stack (consolidated, weightless, and lfs-optimized) 2026-05-04 18:11:36 -05:00