06 — FRAUD: TOPLOC integration (teacher-forced audit primitive)

What to build

Adopt TOPLOC (MIT, pip install toploc) for activation fingerprint commit and verify. Replace string-equality validator checks with teacher-forced prefill + TOPLOC tolerance matching.

Estimated effort: 2+ sessions. First landing should be the validator-only TOPLOC primitive and docs; node runtime commitments/on-demand capture can follow in issue 07 if this grows.

Subtask	Owner package	Deliverable
Validator audit primitive	`packages/validator/`	Teacher-forced prefill, TOPLOC verify, unit tests with stub tensors
Node runtime commitments	`packages/node/` (if prover-side)	On-demand activation fingerprint generation on audit-selected requests; move to issue 07 if it blocks the validator primitive

Code refs:

packages/validator/meshnet_validator/__init__.py — _run_reference, _outputs_match (~92–148)
packages/validator/README.md — deterrence math (update for 19× at p=0.05)
Research: .scratch/alpha-hardening/research-verifiable-inference.md §8 layers 1–2, build-vs-adopt table

Pin one canonical precision/quantization per model preset. Add toploc to validator (and node if prover-side) dependencies.

Test-first

Red: validator compares final text strings — fails on cross-GPU honest divergence (document expected).
Green: stub activation tensors + TOPLOC proofs round-trip in unit test.
Integration: reference node teacher-forces tokens; verify accepts honest proof, rejects swapped precision.

Acceptance criteria

toploc dependency declared; build_proofs_* / verify_proofs_* wired
Validator re-runs claimed token sequence as prefill, not free generation
Model preset documents canonical dtype/quantization
README updated: 19× deterrence at 5% audit (research §1.1)
Tests with deterministic stub tensors (no GPU required in CI)

ADR links

ADR-0018 §2
Research: research-verifiable-inference.md §8, §9 build-vs-adopt

Blocked by

05-a1-a5-persist-strike-ban-reputation.md

Prod gate: do not enable production audit thresholds until 21-honest-noise-calibration-corpus.md completes (see README Phase 2 note).

2.4 KiB Raw Blame History Unescape Escape