Skip to content

Add provable coverage demo with cryptographic attestation#1

Merged
acenji merged 6 commits intomainfrom
ivan
Jan 20, 2026
Merged

Add provable coverage demo with cryptographic attestation#1
acenji merged 6 commits intomainfrom
ivan

Conversation

@acenji
Copy link
Copy Markdown
Owner

@acenji acenji commented Jan 20, 2026

Features:

  • C# PrimeLib with xUnit tests (100% C1/C2 coverage)
  • JavaScript prime.js with Mocha tests (100% coverage)
  • GitHub Actions workflow with 4 jobs:
    • C# coverage with Coverlet
    • JavaScript coverage with NYC
    • Independent verifier job (recomputes from raw traces)
    • Signed attestation generation (Sigstore)

Security properties:

  • Measured file list hash (prevents silent file dropping)
  • Dependency lock hashes (binds to exact deps)
  • Commands captured (exact build/test commands)
  • Raw traces preserved and hashed
  • Independent verification job
  • Sigstore-signed attestation

acenji and others added 6 commits January 19, 2026 21:45
Features:
- C# PrimeLib with xUnit tests (100% C1/C2 coverage)
- JavaScript prime.js with Mocha tests (100% coverage)
- GitHub Actions workflow with 4 jobs:
  - C# coverage with Coverlet
  - JavaScript coverage with NYC
  - Independent verifier job (recomputes from raw traces)
  - Signed attestation generation (Sigstore)

Security properties:
- Measured file list hash (prevents silent file dropping)
- Dependency lock hashes (binds to exact deps)
- Commands captured (exact build/test commands)
- Raw traces preserved and hashed
- Independent verification job
- Sigstore-signed attestation

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Sed was failing due to special characters in URLs and hashes.
Using jq handles all escaping properly.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@acenji acenji merged commit 9ccf1cb into main Jan 20, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant