{ "shard_id": "FV-PROPFLOOR-SHARD-B25-1", "spec_anchor": "FV-PBT-FLOOR-BUILD-SPEC.md §2/§3/§4", "population_definition": "all kernels in shard FV-PROPFLOOR-SHARD-B25-1, enumerated below by kernel id and spec digest", "human_sign_off": { "status": "PENDING", "name": null, "date": null }, "independence_sentence": "Each item listed was reviewed and attested independently; the single signature is a mechanical convenience over the enumerated digests, not a bulk review.", "per_item_basis_of_review": "Every row ran the same two mechanical checks unconditionally: (1) the fixture-oracle gate — compute() output diffed against the kernel's own existing golden fixtures before any property was trusted, and (2) run-proptests.mjs green (process exit 0). ULP-boundary forcing was mandatory and present for the 4 float-sensitive rows named in the WU (art-458, art-478, art-496, art-511). ⚠ MISCLASSIFICATION CORRECTED PER SPEC §3 FIX-2 CARRY: art-511-recompute-fund-fees is listed float:yes in the WU row, but direct measurement against the kernel found it is explicit fixed-point BigInt money math (SCALE_EXP=8, values parsed from decimal strings, arithmetic entirely in the BigInt domain — the kernel's own header states 'never via floating multiplication'). BigInt arithmetic carries no IEEE-754 representation error, so there is no ULP boundary to force. art-511 is therefore treated as the float:no exception in this shard and carries forced categorical/exact-decimal-string boundary cases (missing hurdle_type, exact hurdle-rate equality at the strict-greater-than boundary, smallest-representable fixed-point NAV) instead of ULP forcing. The remaining 3 float-sensitive rows (art-458, art-478, art-496) carry standard ULP forcing (threshold ±epsilon, 0, negative zero, MIN_VALUE/MAX_SAFE_INTEGER, x/y*y!==x rounding-artifact cases) exactly as their arithmetic is genuine unrounded IEEE-754 double math. The other 6 rows (art-460, art-467, art-474, art-492, art-495, art-531) are float:no per the WU and carry forced CATEGORICAL boundary cases (exact threshold/tolerance equality, missing/non-boolean config fields, unrecognised enum strings, chronologically-inverted timestamp pairs) in place of ULP forcing. No row beyond these mechanical checks received a separate in-depth human review in this pass — that is exactly the gap human_sign_off.status=PENDING names.", "items": [ { "kernel_id": "art-458-attribute-sampling-plan", "class": "B", "float_sensitive": true, "ulp_forcing_present": true, "kernel_digest": "sha256:5bcd64e2925ab483c805160229d7a37241e311140192cd080b09be6d358fec1b", "proptest_file_digest": "sha256:8804b93fb3e30e5715eb49f1d437112e7fa13afe3049a2dd3afe7f87fdb4fe9d", "proptest_file": "chaingraph/kernels/__proptests__/art-458-attribute-sampling-plan.proptest.mjs", "properties_tested": ["sample_size_bounded_1_to_population", "indefensible_tdr_lte_edr_forces_full_census", "monotonic_sample_size_non_increasing_in_tdr", "selected_indices_unique_sorted_in_range", "ULP_boundary_forcing"], "fixture_oracle_result": "PASS (3/3 vectors)", "run_proptests_result": "PASS" }, { "kernel_id": "art-460-ipe-integrity-verifier", "class": "B", "float_sensitive": false, "ulp_forcing_present": false, "ulp_forcing_note": "stated float:no per the WU row — the only float-shaped operation is a single |delta|<=tolerance threshold comparison; forced CATEGORICAL boundary cases (delta exactly at tolerance, one step outside, tolerance exactly zero, negative tolerance clamping, empty-string hash guard) used instead of ULP forcing", "kernel_digest": "sha256:3739111ed80b1fdde1f68667060608703b547770fc185678540d7e16fa4023c6", "proptest_file_digest": "sha256:5d6d220b863ca63fff5af3f8a94263d167db39ff1935039eab7da84b2d0a7e0e", "proptest_file": "chaingraph/kernels/__proptests__/art-460-ipe-integrity-verifier.proptest.mjs", "properties_tested": ["integrity_status_exact_negation_of_discrepancies", "hash_match_exact_string_equality", "total_within_tolerance_exact_abs_delta_lte_tolerance", "discrepancies_and_status_bounded_to_declared_enums"], "fixture_oracle_result": "PASS (3/3 vectors)", "run_proptests_result": "PASS" }, { "kernel_id": "art-467-dora-incident-classifier", "class": "B", "float_sensitive": false, "ulp_forcing_present": false, "ulp_forcing_note": "stated float:no per the WU row — every input is compared against a fixed integer/percentage threshold via >=, never float rounding math; forced CATEGORICAL boundary cases (each of the 4 numeric thresholds exactly at its cutoff, data_losses independent-trigger, gateway-without-other-criterion, unparseable classification_at) used instead of ULP forcing", "kernel_digest": "sha256:2f4fe65161e59aee68e9609258e251c1a571a671f2167a00a2d0dc1c514ac4a7", "proptest_file_digest": "sha256:fb2d7d3b7be2b4f356306a590d27b3f2606e3f572d8cfab0c4895dc1fc7021f9", "proptest_file": "chaingraph/kernels/__proptests__/art-467-dora-incident-classifier.proptest.mjs", "properties_tested": ["major_incident_exact_gateway_formula", "reporting_clock_present_iff_major_and_timestamp_parseable", "verdict_and_criteria_bounded_to_declared_sets", "reporting_clock_deadlines_strictly_ordered"], "fixture_oracle_result": "PASS (3/3 vectors)", "run_proptests_result": "PASS" }, { "kernel_id": "art-474-validate-mt700-lc-fields", "class": "B", "float_sensitive": false, "ulp_forcing_present": false, "ulp_forcing_note": "stated float:no per the WU row — score is Math.round(earned/total*100), an integer percentage; no unrounded float value crosses the artifact boundary; forced CATEGORICAL boundary cases (score at the 80/60 verdict cutoffs, UCP 21-day presentation-period limit, expiry-equals-issue-date, currency/amount validity) used instead of ULP forcing", "kernel_digest": "sha256:bbd232c7a97741b408b0957f63f84669da0307d0b6c6f36e92c821d2ff568bf4", "proptest_file_digest": "sha256:e6f22f2cf2d3e9ed40164ab97752178202930f27ff2c8aeb34ce2947cd863d6f", "proptest_file": "chaingraph/kernels/__proptests__/art-474-validate-mt700-lc-fields.proptest.mjs", "properties_tested": ["score_bounded_integer_0_to_100", "verdict_matches_score_threshold_tiers", "error_warning_counts_match_array_lengths", "empty_fields_score_never_exceeds_populated_score"], "fixture_oracle_result": "PASS (2/2 vectors)", "run_proptests_result": "PASS" }, { "kernel_id": "art-478-analyze-dc-vs-lc-cost-benefit", "class": "B", "float_sensitive": true, "ulp_forcing_present": true, "kernel_digest": "sha256:399294433cf13af7c9c72820fff550fb25f97a09c279902523b938e2a657ff0e", "proptest_file_digest": "sha256:506f2346e583878e48316ddca9d1cb71542e75c8640bc16435e8ebb43da3e67a", "proptest_file": "chaingraph/kernels/__proptests__/art-478-analyze-dc-vs-lc-cost-benefit.proptest.mjs", "properties_tested": ["lc_protection_score_bounded_0_to_100", "lc_risk_adj_cost_exact_identity_with_lc_total_fees", "recommendation_matches_disjunctive_formula", "risk_exposure_and_break_even_never_negative", "ULP_boundary_forcing"], "fixture_oracle_result": "PASS (4/4 vectors)", "run_proptests_result": "PASS" }, { "kernel_id": "art-492-classify-settlement-finality", "class": "B", "float_sensitive": false, "ulp_forcing_present": false, "ulp_forcing_note": "stated float:no per the WU row — all numeric fields (as_of_ts, window seconds) are integer-domain timestamps compared only via >= or ladder-index lookup, never fractional arithmetic; forced CATEGORICAL boundary cases (as_of_ts exactly at earliest_final_at, the validity-proof two-gate AND vs OR distinction, unrecognised settlement_model/required_tier defaulting) used instead of ULP forcing", "kernel_digest": "sha256:46e7fe0b9f14a69f3dc986d9646148d94f230f1f25765dbffe60f3082b8e7185", "proptest_file_digest": "sha256:19d692b0d08780da513c03c1908a31211e16a63601f30422eee28177fd0fb17c", "proptest_file": "chaingraph/kernels/__proptests__/art-492-classify-settlement-finality.proptest.mjs", "properties_tested": ["finality_tier_always_in_own_model_ladder", "unrecognised_model_defaults_to_optimistic_challenge", "meets_required_tier_exact_rank_comparison", "claim_verdict_exact_rank_overstatement_check"], "fixture_oracle_result": "PASS (5/5 vectors)", "run_proptests_result": "PASS" }, { "kernel_id": "art-496-l1-continuous-fee-runway", "class": "B", "float_sensitive": true, "ulp_forcing_present": true, "kernel_digest": "sha256:645615515f1d1e2eff3358be3eb19499b93dc0e184ac08ae8b124ee65d4637c5", "proptest_file_digest": "sha256:f364ee9bc952674fa8d994d16c2cbb57678089e2245de1b56b618344c90762a3", "proptest_file": "chaingraph/kernels/__proptests__/art-496-l1-continuous-fee-runway.proptest.mjs", "properties_tested": ["months_to_depletion_null_or_within_horizon", "runway_flag_matches_depletion_vs_target", "annual_tco_exact_sum_of_breakdown_components", "annual_tco_non_decreasing_in_validator_count", "ULP_boundary_forcing"], "fixture_oracle_result": "PASS (5/5 vectors)", "run_proptests_result": "PASS" }, { "kernel_id": "art-495-avax-permissioning-control-classifier", "class": "B", "float_sensitive": false, "ulp_forcing_present": false, "ulp_forcing_note": "stated float:no per the WU row — kernel has no numeric fields at all (boolean precompile activation states, string enum modes); forced CATEGORICAL boundary cases (entirely absent precompile config, non-boolean activation value, all-active/all-inactive genesis, unrecognised validator_manager_mode) used instead of ULP forcing", "kernel_digest": "sha256:e2226e2a5e87529aafc4e91fc031b0238f9158ef93e1f8bfe0ffae3e57e692a0", "proptest_file_digest": "sha256:5b3b80de016ae7283a777a628e7c968c4e33c4e205b305044766cbe51f5711ca", "proptest_file": "chaingraph/kernels/__proptests__/art-495-avax-permissioning-control-classifier.proptest.mjs", "properties_tested": ["every_control_status_in_declared_enum", "gap_register_and_judgment_required_exact_status_partition", "status_counts_exactly_sum_to_controls_evaluated", "precompile_activated_true_always_protocol_enforced"], "fixture_oracle_result": "PASS (4/4 vectors)", "run_proptests_result": "PASS" }, { "kernel_id": "art-511-recompute-fund-fees", "class": "B", "float_sensitive": false, "ulp_forcing_present": false, "ulp_forcing_note": "⚠ MISCLASSIFIED float:yes in the WU row — CORRECTED here per spec §3 FIX-2 carry. Direct measurement of the kernel found it is explicit fixed-point BigInt money math (SCALE_EXP=8, values parsed from decimal strings, arithmetic entirely in the BigInt domain, kernel header states 'never via floating multiplication'). BigInt has no representation error, so ULP-boundary forcing is not meaningful for it. Forced CATEGORICAL/exact-decimal-string boundary cases (hurdle_type absent/unrecognised triggering judgment_required, period_return_pct exactly equal to hurdle_rate at the strict-greater-than clearance boundary, smallest-representable fixed-point NAV values) used instead", "kernel_digest": "sha256:02852a75e044e31ef50b68a146d4ffef30f3ed54d1299618963963301c82cf40", "proptest_file_digest": "sha256:14f8fba5924e254347786bb7b0f5e24f25e90b09dd9b4eccb96054be24292065", "proptest_file": "chaingraph/kernels/__proptests__/art-511-recompute-fund-fees.proptest.mjs", "properties_tested": ["hard_hurdle_eligible_gain_never_exceeds_soft_hurdle", "fee_components_never_negative", "zero_period_days_forces_zero_management_fee", "crystallised_and_accrued_never_both_nonzero"], "fixture_oracle_result": "PASS (9/9 vectors)", "run_proptests_result": "PASS" }, { "kernel_id": "art-531-member-margin-call-lifecycle", "class": "B", "float_sensitive": false, "ulp_forcing_present": false, "ulp_forcing_note": "stated float:no per the WU row — amount crosses as a safe-integer count of minor units and every timing figure is a whole-minute delta between ISO timestamps, no fractional arithmetic anywhere; forced CATEGORICAL boundary cases (elapsed minutes exactly at the SLA cutoff, non-integer amount coerced to 0 with rejection recorded, negative sla_minutes rejected, chronologically-inverted timestamp pairs) used instead of ULP forcing", "kernel_digest": "sha256:89fcc33e4e1a9e74da13cd69954a8b4d1717cf652e2159dd4c358b0ee59b436b", "proptest_file_digest": "sha256:dfe0acb9bbd4020f11367ea2427cfae141b670e29b4d90a60a1d7200633dcfea", "proptest_file": "chaingraph/kernels/__proptests__/art-531-member-margin-call-lifecycle.proptest.mjs", "properties_tested": ["current_state_bounded_to_declared_five", "met_within_sla_null_unless_funded", "met_within_sla_exact_elapsed_lte_sla", "attested_implies_funded_and_within_sla_and_sequence_valid"], "fixture_oracle_result": "PASS (5/5 vectors)", "run_proptests_result": "PASS" } ] }