[SCITT] Re: A page for independent runs of the Vaara conformance vectors
e.dogru@conarium.dev Fri, 21 August 2026 16:13 UTC
Return-Path: <e.dogru@conarium.dev>
X-Original-To: scitt@mail2.ietf.org
Delivered-To: scitt@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id DCE2C12D6E1B4 for <scitt@mail2.ietf.org>; Fri, 21 Aug 2026 09:13:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1787328816; bh=LER8TbOd9olfamAuclMLjqgkVyclG0Tgl2o1x3FTLmk=; h=Cc:From:In-Reply-To:References:Subject:To:Date; b=ZxO7zmJsFTbt1ptoB80B0av9F4mFkLdBArHw8KOQgXryl6kcmEj9jB9rxV8gYlghF tq359GSL9ZdG4C9Q3BNLYmvUzNTC0lKCr+bEbGvz98owDM2iYDIbd8ZpebPuZ2yNpj wx7uFOX5tISkv34X1vrEWItV7HtEmPMYt/iK5zMY=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.618
X-Spam-Level:
X-Spam-Status: No, score=-1.618 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.377, MIME_HTML_ONLY=0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=conarium.dev
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2J69y1F-9uqS for <scitt@mail2.ietf.org>; Fri, 21 Aug 2026 09:13:36 -0700 (PDT)
Received: from bonobo.yew.relay.mailchannels.net (bonobo.yew.relay.mailchannels.net [23.83.220.22]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 142F912D6E1B1 for <scitt@ietf.org>; Fri, 21 Aug 2026 09:13:35 -0700 (PDT)
X-Sender-Id: hostingeremail|x-authuser|e.dogru@conarium.dev
Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id D6A39942DDF for <scitt@ietf.org>; Fri, 21 Aug 2026 16:13:28 +0000 (UTC)
Received: from fr-int-smtpout30.hostinger.io (100-117-166-221.trex-nlb.outbound.svc.cluster.local [100.117.166.221]) (Authenticated sender: hostingeremail) by relay.mailchannels.net (Postfix) with ESMTPA id 706659422E4 for <scitt@ietf.org>; Fri, 21 Aug 2026 16:13:28 +0000 (UTC)
X-Sender-Id: hostingeremail|x-authuser|e.dogru@conarium.dev
X-MC-Relay: Good
X-MailChannels-SenderId: hostingeremail|x-authuser|e.dogru@conarium.dev
X-MailChannels-Auth-Id: hostingeremail
X-Spot-Plucky: 1107d44b51c713c0_1787328808813_1904334150
X-MC-Loop-Signature: 1787328808813:3267054078
X-MC-Ingress-Time: 1787328808813
Received: from fr-int-smtpout30.hostinger.io (fr-int-smtpout30.hostinger.io [148.222.54.7]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.117.166.221 (trex/8.0.2); Fri, 21 Aug 2026 16:13:28 +0000
Received: from localhost (34.86.89.34.bc.googleusercontent.com [IPv6:2a00:1d35:17a4:d900:f9a7:4dfc:5b46:5980]) (Authenticated sender: e.dogru@conarium.dev) by smtp.hostinger.com (smtp.hostinger.com) with ESMTPSA id 4hRQMp3Rl3z30xr for <scitt@ietf.org>; Fri, 21 Aug 2026 16:13:26 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=conarium.dev; s=hostingermail-a; t=1787328806; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=rL2Lq9tBaCEV+aIxprN+o0tf0Lh5Sxwd5HXFfzgagZY=; b=G/BymgsC0NwT15na6S2/oIGRJWMNm7dC+V9ttDKBKzjSk3P25DVEdYCVnUtfzUDP4JRwLw 9k9WJiOUTuo6aAo9f766nVzzntClgjkXKhGq/j7nILW9IDsggoCnqnWuOonZkNu0iSzsTe zUZmUwZT/x79cW+WSmhvUEjBTOvSR93TACgwdwN6O5pMeUiEGrZtZ8LNXX3k6+2nxytrba VLhPxyiwKUod/A0QgvJMXV6UTqr6S/bSI0ZhV8psQLtToAdGPTWYwOZ4JGu4NntSfir/bx ixmYDnQ3AqTg6AVzZfZLdOW+Qwr2GhT44j87IXJ98w8XfsnIegvZwMBs6DBTdw==
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
From: e.dogru@conarium.dev
In-Reply-To: <BYAPR19MB280625CA19A9FD936AFDC56EADA32@BYAPR19MB2806.namprd19.prod.outlook.com>
Message-Id: <1787328798802386477.1787328798@conarium.dev>
Mime-Version: 1.0
References: <TpUyxx5ABMjWSmfHKAapGrveJcPcen7ixrikIXT4TPILEwwp7bSORsZTKSCIack7ylQyz7tf_V4p4JiD6Ns0bnUoQ_pliWSJ_CsFLvStQEk=@vaara.io> <BYAPR19MB28069B0FEA3E8F8BB3474D28ADA42@BYAPR19MB2806.namprd19.prod.outlook.com> <Oy1hoH0AG0EmM4SI5S3sqz_u01myZ_S9OTioBGsSUr7AUH6P5FKrt1381rlyQsen-lZ3BoeM_vyodZ-OSpOARE6PSQsBkb8m1oflcrjDOts=@vaara.io> <CAOfgHgp1SQK6hAD49q6HgQKFf-oFTfzb7+TqeRqpXwCrWS28=Q@mail.gmail.com> <jRa8V5Nbs2SJjMUUlI1GVK-lghWHrEUAUjgkDX5Y47lMwAOqbIqeccI4aTggNg_UZ5C2896E5P2m1TCklYar_Rq_npSF6vzYQSX1b98LoxU=@vaara.io> <CAOfgHgq7vOgeqJEY5Gc9Ko65Wwf7Tu+E_VGGd4POUfENT372Nw@mail.gmail.com> <BYAPR19MB280625CA19A9FD936AFDC56EADA32@BYAPR19MB2806.namprd19.prod.outlook.com>
To: jhillier=40certisyn.com@dmarc.ietf.org
Date: Fri, 21 Aug 2026 16:13:26 +0000
X-CM-Analysis: v=2.4 cv=GMJaEfNK c=1 sm=1 tr=0 ts=6a887926 a=/mYa/mVueCak43dcYQE4Uw==:617 a=1Q4z3441aVnbLEOd:21 a=xqWC_Br6kY4A:10 a=IkcTkHD0fZMA:10 a=48vgC7mUAAAA:8 a=PzIs_5y6PMRoO2IC7OAA:9 a=EtRwWFWS7_2YulmF:21 a=frz4AuCg-hUA:10 a=QEXdDO2ut3YA:10
X-CM-Envelope: MS4xfHpay07szOnfzY3hxeZGUdr/jG3CrBtQRz8/2GsJEKvTHCpxu9SXOJXEXAsqtUKZc0RL0wTsVZZP/QDLusnfNA+0Q6FmRZJOBJd3T3Btyt8LB4E9GK6/ qLERdM9ygA5TvN9ApoU04VTY8fRtGtTSggd6BCBbiBwH0aU0ioaxw/zpxNXlR7enyK6CG0T/kOI/Yztzaj15KoroJQVBBbBMd66wMssfm6TiSYzq8WZcUIjf HPmXhlBzoPF71zE6AsdT0g==
X-AuthUser: e.dogru@conarium.dev
Message-ID-Hash: GWAPI6NCMAZJBOKSECXA5LOGTJMJWIMJ
X-Message-ID-Hash: GWAPI6NCMAZJBOKSECXA5LOGTJMJWIMJ
X-MailFrom: e.dogru@conarium.dev
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: scitt@ietf.org, team@emiliaprotocol.ai, hello@vaara.io, wdhawkins46@gmail.com, tiago@donttrustverify.pt, anton.sokolov@tyche.institute
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [SCITT] Re: A page for independent runs of the Vaara conformance vectors
List-Id: "Supply Chain Integrity, Transparency, and Trust" <scitt.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/scitt/PX4XE_5xrvDFmvpfc3KYYE3NpwA>
List-Archive: <https://mailarchive.ietf.org/arch/browse/scitt>
List-Help: <mailto:scitt-request@ietf.org?subject=help>
List-Owner: <mailto:scitt-owner@ietf.org>
List-Post: <mailto:scitt@ietf.org>
List-Subscribe: <mailto:scitt-join@ietf.org>
List-Unsubscribe: <mailto:scitt-leave@ietf.org>
Hi Iman, Henri,
Iman, the last sentence of that is the most useful thing anyone has put on the runs page, and I don't think it should sit inside one message.
You wrote your own row down before anyone asked you to: a reproduction of the author-supplied checkers and vectors, not an independent implementation or validation of the specification text. Nobody made you add that. It's a passing result you had every incentiveto file as a plain 41 of 44, and you named the ground it stands on instead.
That's the weakest-rung rule arriving at a register entry. We have now watched it turn up in bounds, in populations, in verdicts, in exit codes, in a freshness floor, and yesterday inside a statistical estimator. Every one of those was a rule about anartefact. Yours is the first at the point where a result gets filed, which is the point where the loss actually happens, because a row outlives the message that explains it.
So the specific suggestion, and it's smaller than it sounds: the row carries what kind of run it was. Three kinds cover what this list has produced in a week, and they aren't degrees of the same thing:
A reproduction of the author's checkers over the author's vectors. Establishes that the artefact runs and is byte-stable somewhere other than the author's machine, which is worth having and is not nothing.
An independent implementation from the text, run against the author's vectors. Establishes something about the text, because a second reader had to decide what the sentences meant.
An independent implementation run against independently constructed vectors. Establishes something about both.
And the rule that makes it load-bearing rather than decorative: a row that doesn't name its kind reads as the first one. Henri, that's the same argument you already accepted for disagreement rows. A register that can only record agreement is a marketing surface.A register that can't distinguish a reproduction from an independent implementation will get cited for the second when it holds the first, and the person citing it won't be lying.
Applied to what I sent this list an hour ago, before anybody files anything. The five runners in that archive are my checkers over my vectors. If Henri runs them and gets my two pinned digests, that is a reproduction row and nothing stronger. It showsthe package works outside the tree it was built in, which is the thing the 11 August package failed, and it shows nothing whatever about whether ARP's text says what I think it says. I'd rather write that down now than have it inferred from a green row later.
And it's already load-bearing on the other draft. CAP-1 has picked up runs of three different kinds this week and the numbers don't distinguish them. Walter's is an independent implementation from the prose plus the published schema. Emek's two are independentimplementations from the prose alone, and one of them refused all fifteen documents on shape because the member names aren't in the draft at all. Yours is a reproduction. Those are three different pieces of evidence, and "three implementations agree" flattensall three into a sentence that was already the weakest claim in the document.
The class digest fixes which bytes were run. It records nothing about who wrote the verifier or what they read to write it, and that's the axis that decides what a run is worth.
Henri, if the row format takes one more field, I'd make it that one rather than anything I suggested earlier.
Best,
Joel
________________________________________
From: Iman Schrock <team@emiliaprotocol.ai>
Sent: Friday, 21 August 2026 15:00:19
To: hello@vaara.io
Cc: scitt@ietf.org; Joel Hillier
Subject: Re: [SCITT] Re: A page for independent runs of the Vaara conformance vectors
Henri,
Thank you for taking this seriously and fixing both the claim and the mechanism.
The corrected language is accurate. The retained-head checks and the
external witness close the issue I raised without overstating what the
hash chain alone provides.
You may file my run exactly as scoped:
41 passed, 0 failed, 3 skipped across 44 suites at commit
62a7080b7c854173c7d6b8ee51ce4dd724d59227. This is a reproduction of
the author-supplied checkers and vectors, not an independent
implementation or validation of the specification text.
Best,
Iman
- [SCITT] A page for independent runs of the Vaara … Henri Sirkkavaara
- [SCITT] Re: A page for independent runs of the Va… Joel Hillier
- [SCITT] Re: A page for independent runs of the Va… Henri Sirkkavaara
- [SCITT] Re: A page for independent runs of the Va… Iman Schrock
- [SCITT] Re: A page for independent runs of the Va… e.dogru
- [SCITT] Re: A page for independent runs of the Va… Henri Sirkkavaara
- [SCITT] Re: A page for independent runs of the Va… Joel Hillier
- [SCITT] Re: A page for independent runs of the Va… e.dogru
- [SCITT] Re: A page for independent runs of the Va… Henri Sirkkavaara
- [SCITT] Re: A page for independent runs of the Va… e.dogru
- [SCITT] Re: A page for independent runs of the Va… Iman Schrock
- [SCITT] Re: A page for independent runs of the Va… Joel Hillier
- [SCITT] Re: A page for independent runs of the Va… e.dogru
- [SCITT] Re: A page for independent runs of the Va… Joel Hillier
- [SCITT] Re: A page for independent runs of the Va… e.dogru
- [SCITT] Re: A page for independent runs of the Va… e.dogru
- [SCITT] Re: A page for independent runs of the Va… Henri Sirkkavaara
- [SCITT] Re: A page for independent runs of the Va… Joel Hillier