SilverSight/formal
allaun 37ea14842a fix(avm): AVMIsa vulnerability mitigations V3/V7/V8 + overflow/rounding witnesses
V3 (Critical — Division-by-zero sentinel):
  - Add StepError.divisionByZero variant
  - Guard q16_div with explicit zero check (Outcome.err on zero divisor)

V7 (Medium — Unbounded stack):
  - Add maxStackDepth := 1024 constant
  - Refactor push1 to return Outcome (stack bounds check)
  - Add push1_unchecked for proof compatibility
  - Add push1_ok_of_lt theorem
  - Guard Instr.push and Instr.dup with stack depth checks

V8 (Medium — Silent store):
  - Add setLocal? to State.lean returning Option State
  - Wire store instruction to propagate missingLocal on OOB
  - Preserve backward-compatible setLocal for TypeSafety proofs

V1/V2 (Critical — Intermediate overflow):
  - Add #eval witnesses proving worst-case intermediates fit Int64
  - Backend spec mandate: all AVM backends MUST use >= 64-bit storage

V4 (Critical — Rounding direction):
  - Add #eval witnesses documenting Euclidean division semantics
  - Note: Lean ediv matches Python // for positive divisors only
2026-06-28 00:11:18 -05:00
..
BindingSite chore(quality): native_decide migration, docs, and phi pipeline cleanup 2026-06-27 01:56:54 -05:00
CoreFormalism chore(quality): native_decide migration, docs, and phi pipeline cleanup 2026-06-27 01:56:54 -05:00
PVGS_DQ_Bridge chore(quality): native_decide migration, docs, and phi pipeline cleanup 2026-06-27 01:56:54 -05:00
RRCLib feat(rrc): bare-minimum RRC refactor into SilverSight 2026-06-21 09:08:48 -05:00
SilverSight fix(avm): AVMIsa vulnerability mitigations V3/V7/V8 + overflow/rounding witnesses 2026-06-28 00:11:18 -05:00
UniversalEncoding chore(quality): native_decide migration, docs, and phi pipeline cleanup 2026-06-27 01:56:54 -05:00