Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 20 additions & 2 deletions site/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -648,6 +648,12 @@ <h3>freeze-v1 named. M0–M6 landed. Next year is sell, then wait for a table.</
[redteam] attack=greenctx-overcommit result=refused
[redteam] attack=greenctx-unbound result=refused
[redteam] attack=greenctx-exhausted result=refused
[redteam] attack=greenctx-busy result=refused
[redteam] attack=smmu-overlap result=refused
[redteam] attack=smmu-not-mapped result=refused
[redteam] attack=smmu-wrong-stream result=refused
[redteam] attack=softcct-incorrect-elision result=refused
[redteam] attack=softcct-credit-exhausted result=refused
[redteam] fabric-class admit/refuse
[redteam] ATOMIC_ADD accept/reject
[softsfi] heap=refused
Expand Down Expand Up @@ -703,7 +709,7 @@ <h3>Collect an opcode table</h3>
<article class="glass sell-goal" data-reveal data-d="2">
<small>03</small>
<h3>Walk the five beats</h3>
<p>Isolation → packet → wait → admit class → <code>ATOMIC_ADD</code> + named refuses. Round 5 sealed fence-not-ready, unbound SET_SID, Hodge Tree+Curl, SoftSFI unknown-base, and Soft≠Strict scope honesty. Round 6 sealed Soft-SMMU SubmitSid / SidBudget / Stage2Fault and SoftNoI Exhausted refuse lines. Round 7 sealed HodgeQuota empty admit → QuotaExceeded and SoftGreenPool create → Overcommit. Round 8 adds SoftGreenPool migrate_to_yield → Unbound and create past MAX_GREEN_CTX → Exhausted; the Host Path B close keeps GreenCtx migrate, CDT revoke, and bad-executable refuse visible. Same tree. Commands below exist in <code>make help</code>. Thin third consumer: <code>make mp-shim</code> (inspiration name only).</p>
<p>Isolation → packet → wait → admit class → <code>ATOMIC_ADD</code> + named refuses. Round 5 sealed fence-not-ready, unbound SET_SID, Hodge Tree+Curl, SoftSFI unknown-base, and Soft≠Strict scope honesty. Round 6 sealed Soft-SMMU SubmitSid / SidBudget / Stage2Fault and SoftNoI Exhausted refuse lines. Round 7 sealed HodgeQuota empty admit → QuotaExceeded and SoftGreenPool create → Overcommit. Round 8 added SoftGreenPool migrate_to_yield → Unbound and create past MAX_GREEN_CTX → Exhausted. Round 9 adds migrate_to_yield with a destination bound elsewhere → Busy; same-SID overlapping guest PA → Overlap; a Bound walk hole → NotMapped; armed≠packet → WrongStream; SoftCCT dual-proof incorrect-elision refusal; and CCT record past <code>MAX_CCT_ENTRIES</code> → CreditExhausted. Same tree, frozen packet, software proofs. Commands below exist in <code>make help</code>. Thin third consumer: <code>make mp-shim</code> (inspiration name only).</p>
</article>
<article class="glass sell-goal" data-reveal data-d="3">
<small>04</small>
Expand Down Expand Up @@ -741,7 +747,7 @@ <h3>Host Path B</h3>
<span class="badge done">refuse</span>
</div>
<h3>Named attacks</h3>
<p><code>[redteam] attack=… result=refused</code> including the R5–R8 foundation needles: <code>attack=fence-not-ready</code> (<code>PartitionError::FenceNotReady</code>), <code>attack=set-sid-unbound</code> (<code>HalError::Fault</code>), <code>attack=submit-sid</code> (<code>MapError::SubmitSid</code>), <code>attack=sid-budget</code> (<code>MapError::SidBudget</code>), <code>attack=stage2-fault</code> (<code>MapError::Stage2Fault</code>), <code>attack=softnoi-exhausted</code> (<code>NoiError::Exhausted</code>), <code>attack=hodge-curl-tree</code> (<code>HodgeError::CurlOnTree</code>), <code>attack=hodge-quota</code> (<code>HodgeError::QuotaExceeded</code>), <code>attack=greenctx-overcommit</code> (<code>GreenCtxError::Overcommit</code>), <code>attack=greenctx-unbound</code> (<code>GreenCtxError::Unbound</code>), and <code>attack=greenctx-exhausted</code> (<code>GreenCtxError::Exhausted</code>). Also <code>attack=blast-hops</code> (<code>admit_hops</code> → <code>BlastRadius</code>; not a CrossCut rehash), <code>attack=blast-nodes</code>, <code>attack=silent-remote</code>, <code>attack=uncolored-compute</code>, <code>attack=typed-window-sid</code>, <code>attack=hbm-bw</code> (soft meter → <code>QosExceeded</code>; not CXL product / tape-out), <code>attack=foreign-tenant-color</code>, <code>attack=xqueue-sid-override</code>, <code>attack=firewall-ident-pa</code>, <code>attack=hodge-harmonic-tree</code>. Fabric-class admit/refuse. <code>ATOMIC_ADD</code> accept/reject. <code>[softsfi] heap=refused</code>, <code>[softsfi] unknown=refused</code>, and <code>[softsfi] unknown-base=refused</code>. Closer: not confidential GPU, not HW MIG, Soft SMMU is software.</p>
<p><code>[redteam] attack=… result=refused</code> including the R5–R9 foundation needles: <code>attack=fence-not-ready</code> (<code>PartitionError::FenceNotReady</code>), <code>attack=set-sid-unbound</code> (<code>HalError::Fault</code>), <code>attack=submit-sid</code> (<code>MapError::SubmitSid</code>), <code>attack=sid-budget</code> (<code>MapError::SidBudget</code>), <code>attack=stage2-fault</code> (<code>MapError::Stage2Fault</code>), <code>attack=softnoi-exhausted</code> (<code>NoiError::Exhausted</code>), <code>attack=hodge-curl-tree</code> (<code>HodgeError::CurlOnTree</code>), <code>attack=hodge-quota</code> (<code>HodgeError::QuotaExceeded</code>), <code>attack=greenctx-overcommit</code> (<code>GreenCtxError::Overcommit</code>), <code>attack=greenctx-unbound</code> (<code>GreenCtxError::Unbound</code>), <code>attack=greenctx-exhausted</code> (<code>GreenCtxError::Exhausted</code>), <code>attack=greenctx-busy</code> (<code>GreenCtxError::Busy</code>), <code>attack=smmu-overlap</code> (<code>MapError::Overlap</code>), <code>attack=smmu-not-mapped</code> (<code>MapError::NotMapped</code>), <code>attack=smmu-wrong-stream</code> (<code>MapError::WrongStream</code>), <code>attack=softcct-incorrect-elision</code> (dual-proof refuse), and <code>attack=softcct-credit-exhausted</code> (<code>PartitionError::CreditExhausted</code>). Also <code>attack=blast-hops</code> (<code>admit_hops</code> → <code>BlastRadius</code>; not a CrossCut rehash), <code>attack=blast-nodes</code>, <code>attack=silent-remote</code>, <code>attack=uncolored-compute</code>, <code>attack=typed-window-sid</code>, <code>attack=hbm-bw</code> (soft meter → <code>QosExceeded</code>; not CXL product / tape-out), <code>attack=foreign-tenant-color</code>, <code>attack=xqueue-sid-override</code>, <code>attack=firewall-ident-pa</code>, <code>attack=hodge-harmonic-tree</code>. Fabric-class admit/refuse. <code>ATOMIC_ADD</code> accept/reject. <code>[softsfi] heap=refused</code>, <code>[softsfi] unknown=refused</code>, and <code>[softsfi] unknown-base=refused</code>. Closer: not confidential GPU, not HW MIG, Soft SMMU is software.</p>
</article>
<article class="proof-card" data-reveal data-d="2">
<div class="proof-head">
Expand Down Expand Up @@ -829,6 +835,12 @@ <h3>Bring your opcode table.</h3>
[redteam] attack=greenctx-overcommit result=refused
[redteam] attack=greenctx-unbound result=refused
[redteam] attack=greenctx-exhausted result=refused
[redteam] attack=greenctx-busy result=refused
[redteam] attack=smmu-overlap result=refused
[redteam] attack=smmu-not-mapped result=refused
[redteam] attack=smmu-wrong-stream result=refused
[redteam] attack=softcct-incorrect-elision result=refused
[redteam] attack=softcct-credit-exhausted result=refused
[redteam] fabric-class admit/refuse
[redteam] ATOMIC_ADD accept/reject
[softsfi] heap=refused
Expand Down Expand Up @@ -1298,6 +1310,12 @@ <h3>2028 close</h3>
<span class="ok">[redteam] attack=greenctx-overcommit result=refused</span>
<span class="ok">[redteam] attack=greenctx-unbound result=refused</span>
<span class="ok">[redteam] attack=greenctx-exhausted result=refused</span>
<span class="ok">[redteam] attack=greenctx-busy result=refused</span>
<span class="ok">[redteam] attack=smmu-overlap result=refused</span>
<span class="ok">[redteam] attack=smmu-not-mapped result=refused</span>
<span class="ok">[redteam] attack=smmu-wrong-stream result=refused</span>
<span class="ok">[redteam] attack=softcct-incorrect-elision result=refused</span>
<span class="ok">[redteam] attack=softcct-credit-exhausted result=refused</span>
<span class="ok">[diligence] host Path B sealed</span>
<span class="ok">[redteam] sealed</span></pre>
</div>
Expand Down
Loading