Jens/chimera-gfx-Public
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Publish Chimera GFX source
phase0-ci / build-and-audit (push) Successful in 2m14s
Details

Browse Source
This commit is contained in:
Chimera GFX release export
2026-09-03 03:27:14 +02:00
commit a6037502d7
828 changed files with 100454 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
manifests/runtime/phase-0.9c-feasibility.json
+416
View File
@@ -0,0 +1,416 @@
{
"schema_version": 1,
"phase": "0.9C",
"date": "2026-07-18",
"scope": "offline_observer_execution_feasibility_closure_only",
"status": "BLOCKED",
"classification": "BLOCKED_MULTIPLE_FOUNDATIONAL_CONTRACTS",
"baseline_commit": "3ddc213ea67bb286256ae42e52c65e00488608ca",
"branch": "codex/chimera-gfx-phase09c-execution-feasibility",
"authorization": {
"authorized": false,
"transfer_authorized": false,
"execution_authorized": false,
"installation_authorized": false,
"lifecycle_authorized": false,
"autoload_authorized": false,
"backup_creation_authorized": false,
"observer_build_authorized": false,
"automatic_retry": false
},
"canonical_state_preserved": {
"historical_phase08_status": "READ_ONLY_PREFLIGHT_BLOCKED",
"phase09a_status": "DESIGN_ONLY",
"phase09b_status": "BLOCKED",
"firmware_runtime_behavior": "UNPROVEN",
"stock_hashes": "reference_only",
"payload_manager_backup": "HARD_BLOCKER",
"device_contact_performed": false,
"device_transfer_performed": false,
"device_execution_performed": false,
"target_build_performed": false
},
"permanent_denylist_binding": {
"sha256": "4be1c17b4964f2b68c39b5145bc4af4619c32512d60269ecf5c39728b390fa63",
"status": "BLOCKED",
"permanent": true,
"execution_eligible": false
},
"source_commits": {
"hardened_elfldr": "197623058f509eddde18868dafcb92fdcac66464",
"controlled_payload_manager": "e23d94ff91233aa770e2342800c1467875bdef44",
"elfldr_public_base": "699e8bcff03e91e8d6ca6eba281af25c5a58d8c2",
"payload_manager_public_base": "cfbc70f30f419b09bf2b52283f7409e2d3117ee1",
"ps5_payload_sdk_v0_41": "d2e2e585740362976a39fdd5ccf390f199a7bc37",
"lifecycle_probe_source": "fe08300339a13f899fb78ea404ada381a5cba87c"
},
"source_tree_status": {
"hardened_elfldr": "clean",
"controlled_payload_manager": "clean",
"elfldr_public_base": "clean",
"payload_manager_public_base": "clean",
"ps5_payload_sdk_v0_41": "clean"
},
"source_evidence": [
{
"component": "hardened_elfldr_entry_mapper",
"path": "../chimera-elfldr/elfldr.c",
"sha256": "9949f8e4037984d10f1f5aa498e4665593d1fac8a33614d7f2141349839bb803",
"lines": ["80-265", "273-415", "480-545", "643-769"],
"finding": "Maps the payload and child-owned argument resources, installs a synthetic return address, sets RIP/RDI, restores credentials, and detaches without a proven observer return contract."
},
{
"component": "hardened_elfldr_controlled_route",
"path": "../chimera-elfldr/socksrv.c",
"sha256": "d642ced3e9b4a296dd15e355050ebe956f53a6dfdaa6ac10109cd067a3bba3d7",
"lines": ["129-215", "289-375"],
"finding": "Passes stdio=-1, invokes the watchdog, discards payload data, and writes only fixed loader text."
},
{
"component": "hardened_cleanup_model",
"path": "../chimera-elfldr/controlled_runtime.c",
"sha256": "10145f3bbb3b54e3d715b1667e45c6f12d3c7f52a04342ab104ec8dd49e384c9",
"lines": ["60-92", "95-143", "146-250"],
"finding": "Bounds ptrace preparation and models pre-detach cleanup plus a SIGTERM/SIGKILL watchdog; signal termination is not a safe observer exit."
},
{
"component": "hardened_ps5_cleanup_adapter",
"path": "../chimera-elfldr/ps5_controlled.c",
"sha256": "68717ef1cc31c483743c5af325c59e73a90f66e93b880b989e349a4ddc748772",
"lines": ["26-59", "132-220"],
"finding": "Uses waitpid but discards child status and exposes no payload result copy-out."
},
{
"component": "controlled_manager_send_only_transport",
"path": "../chimera-ps5-payload-manager/src/verified_launcher.c",
"sha256": "066100ca4917c7acc560e2e85666ca136cd7ccfd9094417377048f41106dd56e",
"lines": ["31-184"],
"finding": "Hashes and sends one descriptor, then closes; there is no receive operation."
},
{
"component": "controlled_manager_loopback_adapter",
"path": "../chimera-ps5-payload-manager/src/ps5_launcher.c",
"sha256": "29c1a5fd01784a59e88b3698940f120cb03020071bc2b7d74a1da1a51524ef59",
"lines": ["18-69"],
"finding": "Defines connect_loopback, send_all, and close_socket only."
},
{
"component": "sdk_normal_crt",
"path": "work/upstream/sdk/crt/crt.c",
"sha256": "3875f4739ec40b33f1f4967a1acbb585a527d2c281a360153e1f69c8b945932a",
"lines": ["30-80", "88-180", "193-220"],
"finding": "Clears BSS, initializes syscall/kernel/klog/rtld, calls __patch_init before main, and chooses return/exit/trap at termination."
},
{
"component": "sdk_patch",
"path": "work/upstream/sdk/crt/patch.c",
"sha256": "4f76a677bba54f4641e1cf2755768c29afb7464a35b2f21e85db2aa2785eceac",
"lines": ["27-100"],
"finding": "Writes credential capabilities/attributes and syscall address bounds."
},
{
"component": "sdk_crt_object_set",
"path": "work/upstream/sdk/crt/Makefile",
"sha256": "6a62f777f32ab05cbe7bff81c00cfd6639ba8bf440aba611a40ff0b62732568b",
"lines": ["19-26", "50-54"],
"finding": "The normal crt1.o transitively includes patch, kernel, rtld, and related startup objects."
},
{
"component": "sdk_compiler_wrapper",
"path": "work/upstream/sdk/host/bin/prospero-clang",
"sha256": "0cf49ae43d6110a7606c0ee4d702fc4b5d5e1c3ae9a722945a48b80294e295ba",
"lines": ["25-46", "69-84"],
"finding": "-nostartfiles and -nodefaultlibs can suppress CRT and default libraries but do not prove a usable startup ABI."
},
{
"component": "sdk_linker_script",
"path": "work/upstream/sdk/host/elf_x86_64.x",
"sha256": "169b80d01da601ef96bbc584986608dec1d9c01397eae81eccd4e1a66b0a6c6a",
"lines": ["17-92"],
"finding": "Defines image, arrays, dynamic, data, and BSS boundaries; it does not prove loader initialization or cleanup."
},
{
"component": "sdk_kernel_firmware_source_one",
"path": "work/upstream/sdk/crt/kernel.c",
"sha256": "ac1c375aae8d3cb1be5fb8bad2f4e6492b6ec1f1450977b534202f46b5b70321",
"lines": ["148-170"],
"finding": "Reads sdk_ps5_ver from the libSceLibcInternal process parameter; not an independent second current system source."
},
{
"component": "sdk_firmware_export_name_only",
"path": "work/upstream/sdk/sce_stubs/libkernel_web.c",
"sha256": "dca70757a0680ede52502fe7db10060fe30506f7ed0adfc43ce00700145ab4ff",
"lines": ["2358-2360"],
"finding": "sceKernelGetProsperoSystemSwVersion is a name-only export stub without an accepted prototype or semantics and is not source two."
},
{
"component": "lifecycle_probe_source",
"path": "samples/lifecycle_probe/main.c",
"sha256": "1ae7df1fe921ccab2a252f77975d3d441ef7725e34535b024580c0d4a242d766",
"finding": "Historical normal-CRT lifecycle source is unchanged and is not an observer startup or output proof."
}
],
"immutable_evidence": {
"phase08": {
"commit": "2c944d6d65a08f7e1c02f518721cde061b999329",
"files": {
"docs/runtime/phase-0.8-read-only-preflight.md": "3fbe086175a6048176075f447ec1482074928e3b5282db97ea2169395fe1d508",
"manifests/runtime/phase-0.8-read-only-preflight.json": "47d7f452f8799979fe99b3e6d56859f03544112725bf7e5b349eba5ed81b3322",
"tests/test_phase08_preflight.py": "8a4ad7c70de28ffe3148fd3fd1f68c36a872c53c691c9068e1ff163970863c48"
}
},
"phase09a_manifest_sha256": "39fd7c70cae998d9d74e7caf1ff3c19f9f76f7de2e5a50bc09baede4ba53e9e9",
"phase09b_manifest_sha256": "104c4a667ad17f9827fc7276852c6faeef96effb8e3561a5ebc19a62c7d51634",
"phase09b_schema_sha256": "efcea3b0001ef5b2da65c372ceb93ee2fec09c9331b2e4cbb6008212504c0918"
},
"startup_exit": {
"normal_sdk_kernelwrite_free": false,
"normal_sdk_status": "PROVEN_SIDE_EFFECTING",
"freestanding_mechanically_linkable": true,
"freestanding_dependency_closure_proven": false,
"stack_alignment_proven": false,
"complete_relocation_and_bss_tls_contract_proven": false,
"callable_read_and_time_abi_proven": false,
"safe_return_proven": false,
"safe_process_exit_proven": false,
"error_exit_proven": false,
"timeout_safe_exit_proven": false,
"complete_cleanup_proven": false,
"blockers": [
"normal_sdk_reaches_prohibited_patch_writes",
"freestanding_stack_alignment_unproven",
"freestanding_bss_relocation_tls_closure_unproven",
"freestanding_read_and_monotonic_time_abi_absent",
"return_resumes_unproven_process_continuation",
"process_exit_and_status_delivery_unproven",
"timeout_relies_on_inadmissible_signal_termination",
"post_detach_mapping_descriptor_and_manager_cleanup_unproven"
]
},
"output_architectures": [
{
"id": "D1_CALLER_OWNED_BOUNDED_BUFFER",
"status": "CONCEPT_FEASIBLE_REQUIRES_LOADER_CHANGE_AND_EXIT_PROOF",
"current_implementation": false,
"reason": "Current payloadout is child-owned mapped memory and is never copied out; a future caller-owned buffer remains a host-only contract."
},
{
"id": "D2_EXISTING_REQUEST_RESPONSE",
"status": "REJECTED_SEND_ONLY_NO_RESULT_RECEIVE",
"current_implementation": false,
"reason": "The manager connects, sends, and closes without a receive callback."
},
{
"id": "D3_LOADER_OWNED_STATUS_RECORD",
"status": "UNPROVEN_REQUIRES_LOADER_STATE_AND_PROPAGATION_CHANGE",
"current_implementation": false,
"reason": "The current waiter discards status and no per-request record is propagated."
},
{
"id": "D4_PROCESS_EXIT_STATUS",
"status": "REJECTED_WAIT_STATUS_DISCARDED_AND_AMBIGUOUS",
"current_implementation": false,
"reason": "Exit/crash/signal status is discarded and cannot carry the observation dataset."
}
],
"host_protocol": {
"model": "tests/phase09c_feasibility_model.py",
"host_only": true,
"target_implemented": false,
"magic": "CHG09C01",
"version": 1,
"header_size": 256,
"maximum_output_size": 4096,
"maximum_body_size": 3840,
"integer_encoding": "unsigned_big_endian",
"execution_nonce_bytes": 16,
"request_id_bytes": 16,
"firmware_field_bytes": 8,
"artifact_hash_algorithm": "sha256",
"body_checksum_algorithm": "sha256",
"result_checksum_algorithm": "sha256",
"completion_marker": "COMPLETE",
"result_checksum_zeroed_fields": [
"result_checksum",
"completion_marker"
],
"required_fields": [
"magic",
"protocol_version",
"execution_nonce",
"request_id",
"firmware_source_1",
"firmware_source_2",
"observer_version",
"maximum_output_size",
"actual_output_size",
"status",
"requested_capability_bitmap",
"observed_capability_bitmap",
"unsupported_capability_bitmap",
"truncation_flag",
"artifact_sha256",
"body_checksum",
"result_checksum",
"deadline_monotonic_ns",
"completion_marker",
"cleanup_status"
],
"pointers_present": false,
"dynamic_growth": false,
"fail_closed_conditions": [
"unknown_version",
"bad_size_or_checked_arithmetic_failure",
"stale_nonce_or_request_id",
"duplicate_result",
"missing_or_conflicting_firmware_source",
"artifact_hash_mismatch",
"checksum_failure",
"timeout",
"incomplete_completion_marker",
"truncation",
"observer_failure",
"cleanup_not_proven",
"capability_bitmap_incomplete_or_conflicting"
]
},
"firmware": {
"expected": "9.60",
"source_one": {
"identity": "sdk_kernel_get_fw_version_libSceLibcInternal_sdk_ps5_ver",
"status": "SOURCE_PRESENT_RUNTIME_UNPROVEN_NOT_INDEPENDENT",
"nonce_bound_runtime_result_present": false
},
"source_two": {
"identity": null,
"status": "ABSENT",
"export_name_candidate_accepted": false,
"nonce_bound_runtime_result_present": false
},
"agreement_proven": false,
"gate": "BLOCKED_FIRMWARE_SOURCE_INCOMPLETE",
"conflict_policy": "BLOCKED_NO_SOURCE_PREFERENCE"
},
"side_effect_model": {
"no_persistent_content_write_is_side_effect_free": false,
"read_only_flag_is_side_effect_free": false,
"all_planned_observations_proven_side_effect_free": false,
"dimensions": [
"content",
"metadata",
"atime",
"audit",
"cache",
"counters",
"service_state",
"security_monitoring",
"open_bookkeeping",
"process_accounting",
"object_lifetime",
"races"
],
"classifications": [
"SEMANTICALLY_READONLY",
"METADATA_EFFECT_POSSIBLE",
"ATIME_EFFECT_POSSIBLE",
"AUDIT_EFFECT_POSSIBLE",
"CACHE_EFFECT_POSSIBLE",
"COUNTER_EFFECT_POSSIBLE",
"SERVICE_STATE_EFFECT_POSSIBLE",
"SECURITY_MONITORING_EFFECT_POSSIBLE",
"OPEN_BOOKKEEPING_EFFECT_POSSIBLE",
"PROCESS_ACCOUNTING_EFFECT_POSSIBLE",
"OBJECT_LIFETIME_EFFECT_POSSIBLE",
"OBJECT_RACE_POSSIBLE",
"NOT_PROVABLY_SIDE_EFFECT_FREE"
],
"gate": "BLOCKED_OBSERVATION_SIDE_EFFECTS_UNBOUNDED"
},
"capability_closure": [
{"id": "runtime_self_identity", "source_evidence": "future_protocol_fields_only", "host_evidence": "binding_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "no_target_artifact_or_runtime_binding"},
{"id": "firmware_source_1", "source_evidence": "sdk_crt_kernel_c_148_170", "host_evidence": "result_binding_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "runtime_unproven_and_not_independent"},
{"id": "firmware_source_2", "source_evidence": "name_only_stub_rejected", "host_evidence": "missing_and_conflict_fail_closed", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "accepted_independent_source_absent"},
{"id": "mount_query", "source_evidence": "sdk_sample_only", "host_evidence": "unsupported_representable", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "abi_completeness_runtime_and_effects_unproven"},
{"id": "metadata", "source_evidence": "manager_no_follow_pattern", "host_evidence": "error_framing_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "target_semantics_and_effects_unproven"},
{"id": "object_id", "source_evidence": "manager_stat_comparison", "host_evidence": "completeness_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "stable_identity_and_race_contract_unproven"},
{"id": "size", "source_evidence": "manager_exact_size_comparison", "host_evidence": "checked_lengths_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "current_stable_object_absent"},
{"id": "sha256", "source_evidence": "manager_bounded_same_fd_hash", "host_evidence": "checksum_failures_rejected", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "read_effects_paths_and_stable_object_absent"},
{"id": "processes", "source_evidence": "partial_sdk_sample", "host_evidence": "unsupported_representable", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "complete_bounded_abi_absent"},
{"id": "services", "source_evidence": "none_complete", "host_evidence": "unsupported_representable", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "service_inventory_mapping_absent"},
{"id": "listeners", "source_evidence": "none_accepted", "host_evidence": "unsupported_representable", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "listener_owner_api_absent"},
{"id": "autoload", "source_evidence": "stock_routes_incomplete_or_side_effecting", "host_evidence": "missing_source_blocked", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "complete_authoritative_safe_sources_absent"},
{"id": "rollback_objects", "source_evidence": "phase08r_phase09a_contract_only", "host_evidence": "false_promotion_rejected", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "current_backups_absent_manager_backup_hard_blocker"},
{"id": "monotonic_time", "source_evidence": "loader_owned_clock_only", "host_evidence": "deadline_modelled", "target_evidence": "ABSENT_IN_OBSERVER_ABI", "implementation_allowed": false, "execution_allowed": false, "blocker": "freestanding_callable_clock_absent"},
{"id": "startup", "source_evidence": "full_sdk_and_loader_graph", "host_evidence": "classifications_validated", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "normal_writes_and_freestanding_closure_incomplete"},
{"id": "output", "source_evidence": "current_send_only_route", "host_evidence": "fixed_d1_contract_modelled", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "no_caller_owned_target_buffer_or_delivery"},
{"id": "normal_exit", "source_evidence": "wait_reap_status_discarded", "host_evidence": "no_safe_terminal", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "return_exit_teardown_and_status_unproven"},
{"id": "error_exit", "source_evidence": "crt_error_longjmp_trap_paths", "host_evidence": "error_not_empty_success", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "partial_unwind_status_cleanup_unproven"},
{"id": "timeout", "source_evidence": "loader_signal_watchdog", "host_evidence": "timeout_rejected", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "kill_is_not_safe_exit"},
{"id": "cleanup", "source_evidence": "pre_detach_cleanup_post_detach_process_dependency", "host_evidence": "failed_cleanup_rejected", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "joint_resource_loader_manager_cleanup_unproven"},
{"id": "recovery_independence", "source_evidence": "phase09a_contract_only", "host_evidence": "blocker_preserved", "target_evidence": "ABSENT", "implementation_allowed": false, "execution_allowed": false, "blocker": "executor_and_exact_rollback_objects_unproven"}
],
"implementation": {
"target_observer_source_present": false,
"observer_target_declared": false,
"target_assembly_present": false,
"target_elf_present": false,
"linker_map_present": false,
"lifecycle_package_present": false,
"installation_package_present": false,
"autoload_package_present": false,
"loader_production_modified": false,
"payload_manager_production_modified": false,
"lifecycle_production_modified": false
},
"artifact": {
"present": false,
"path": null,
"sha256": null,
"size": null,
"execution_eligible": false,
"execution_authorized": false
},
"static_audit": {
"status": "NOT_APPLICABLE_NO_TARGET_SOURCE_OR_ARTIFACT",
"target_build": "NOT_PERFORMED",
"elf_headers": "NOT_APPLICABLE",
"imports": "NOT_APPLICABLE",
"dynamic_dependencies": "NOT_APPLICABLE",
"relocations": "NOT_APPLICABLE",
"linker_map": "NOT_CREATED",
"target_callgraph": "NOT_CREATED",
"target_disassembly": "NOT_CREATED",
"package": "NOT_CREATED",
"host_model_only": true
},
"final_decision": {
"positive_classification_allowed": false,
"classification": "BLOCKED_MULTIPLE_FOUNDATIONAL_CONTRACTS",
"foundational_blockers": [
"BLOCKED_STARTUP_ABI_UNPROVEN",
"BLOCKED_EXIT_CLEANUP_UNPROVEN",
"BLOCKED_NO_BOUNDED_OUTPUT_CHANNEL",
"BLOCKED_FIRMWARE_SOURCE_INCOMPLETE",
"BLOCKED_OBSERVATION_SIDE_EFFECTS_UNBOUNDED"
],
"next_phase_automatic": false
},
"prohibited_actions": [
"connect_to_ps5_or_other_device",
"network_scan",
"usb_transfer",
"build_or_assemble_target_observer",
"build_target_elf",
"transfer_or_execute_payload",
"install_or_enable_autoload",
"modify_hardened_elfldr_production_code",
"modify_controlled_payload_manager_production_code",
"modify_lifecycle_installer_or_rollback_production_code",
"credential_capability_or_kernel_patch",
"ptrace_experiment",
"module_loading_experiment",
"new_target_listener_or_filesystem_output",
"graphics_sdl_retroarch_gnm_or_videoout_work",
"external_publication_pull_request_or_upstream_contact"
]
}