diff --git a/.machine_readable/bot_directives/placement.a2ml b/.machine_readable/bot_directives/placement.a2ml index 685b979..f3232cf 100644 --- a/.machine_readable/bot_directives/placement.a2ml +++ b/.machine_readable/bot_directives/placement.a2ml @@ -10,7 +10,7 @@ [metadata] version = "1.0.0" -last-updated = "2026-09-09" +last-updated = "2026-10-05" applies-to = "nextgen-typing" precedence = "maintainer > this directive > bot defaults" @@ -52,6 +52,7 @@ rules = [ { subject = "WasmGC memory-safety proofs, verified convergence ABI, aggregate-library conventions", owns = "typed-wasm" }, { subject = "echo-types library: fiber-based structured loss (Echo/EchoLinear/EchoResidue/EchoCharacteristic)", owns = "echo-types", companion = "EchoTypes.jl" }, { subject = "standpoint-indexed access, warrants and sound proof transport", owns = "epistemic-types" }, + { subject = "confidentiality labels / information-flow control (secret types)", owns = "secret-types" }, { subject = "evidence-indexed residual models, explorer, candidate-world proofs and tests", owns = "residual-evidence-types" }, { subject = "cross-project type-family map, shared glossary and connection obligations", owns = "nextgen-typing" }, { subject = "choreographic / multiparty session types", owns = "choreographic-types" }, diff --git a/docs/TYPE-CONNECTIONS.adoc b/docs/TYPE-CONNECTIONS.adoc index 89c58e3..6cbd55f 100644 --- a/docs/TYPE-CONNECTIONS.adoc +++ b/docs/TYPE-CONNECTIONS.adoc @@ -4,11 +4,11 @@ :toc: :icons: font -This is the shared reading guide for the five research families in the map. +This is the shared reading guide for the six research families in the map. It coordinates vocabulary and ownership; the owning repositories define their formal interfaces and carry their proof evidence. -image::images/type-connections.svg[Five type research families connected by explicitly conceptual arrows, width=1100] +image::images/type-connections.svg[Six type research families with explicitly conceptual arrows, width=1100] *Read every dashed arrow as a conceptual use or a proposed research task.* An arrow does not assert a package dependency, a checked bridge, an @@ -58,6 +58,19 @@ a global interaction protocol is projected to local participants? |The general K-CUT result is open in the reviewed project description. A causal-order frontier called a cut is not Gentzen cut-elimination; it is also not a statistical causal-identification result. + +|https://github.com/hyperpolymath/secret-types[Secret Types] +|Which value flows does a confidentiality label permit, and what may a +lower-cleared observer learn from an output? A `Secret ℓ A` classifies a +value at a label `ℓ`; the first model is a two-level `Public ⊑ Secret` +order over a pure, total calculus, targeting termination-insensitive +noninterference for public observations. +|A label is not cryptography and not an epistemic standpoint: `Secret ℓ A` +does not make a value unreadable, authenticate a principal, enforce +runtime access control, or hide timing, storage or network side channels. +The baseline declassifies nothing, and no consumer or frontier item is +selected for it (2026-10-04); the RMO key-provisioning/disclosure fit is +a name-level inference, not a claim. |=== These are complementary research questions, not successive ranks in a @@ -151,6 +164,12 @@ task, not an equivalence asserted here. Agda core, and tests or proofs specific to that model. * `echo-types`, `epistemic-types`, `tropical-types`, `choreographic-types`: each family's definitions, implementations and own proof evidence. +* `secret-types`: the confidentiality-label and information-flow + specification: its question, boundary, first two-level model and review + checklist. It is specification-stage — no `Secret` type, information-flow + calculus, declassification rule or noninterference theorem exists there + yet — so this guide asserts no connection obligation for it, and a + documentation link is not a mechanised dependency. * `kategoria`: language-development experiments. It is a separate project from the old `katagoria` repository name, which GitHub now resolves to `ideas-to-alphas`. @@ -226,6 +245,16 @@ and in the linked hosted job with Agda 2.6.4.3 under `--safe --without-K`. This is a bounded result: the complete constituent proof suites were not rerun, and unrelated local Epistemic work is outside the receipt. +The Secret Types row was added on 2026-10-05 from that repository's reviewed +and merged scope statement (`secret-types` PR #4, merged 2026-10-04, with the +2026-10-04 owner confirmation and rulings D153 and D154 recorded there). The +row registers the family on its stated boundary; it is not an implementation +claim. The scope statement itself records that no `Secret` type, +information-flow calculus, declassification rule or noninterference theorem +exists yet, that its review checklist has not been completed item by item, and +that no consumer or frontier item is selected, so no connection obligation is +asserted for it in this guide. + Primary project entry points: * https://github.com/hyperpolymath/echo-types[Echo Types README and foundation contract] @@ -233,6 +262,7 @@ Primary project entry points: * https://github.com/hyperpolymath/tropical-types[Tropical Types README] * https://github.com/hyperpolymath/choreographic-types[Choreographic Types README] * https://github.com/hyperpolymath/residual-evidence-types/blob/main/residual-evidence-assessment.md[Imported residual assessment] +* https://github.com/hyperpolymath/secret-types[Secret Types README and scope statement] GitHub repository API lookups on that date resolved `tropical-resource-typing` to `tropical-types` and `katagoria` to `ideas-to-alphas`, while `kategoria` diff --git a/docs/images/type-connections.dot b/docs/images/type-connections.dot index f8f1d3e..fea8fe8 100644 --- a/docs/images/type-connections.dot +++ b/docs/images/type-connections.dot @@ -3,7 +3,7 @@ digraph TypeConnections { graph [rankdir=TB, bgcolor="#f5f7fb", pad="0.35", nodesep="0.45", ranksep="0.8", splines=polyline, fontname="DejaVu Sans", fontsize=22, fontcolor="#17243b", labelloc=t, - label="Type research: questions and connections\n\nnextgen-typing · coordination map · September 2026", + label="Type research: questions and connections\n\nnextgen-typing · coordination map · October 2026", comment="SPDX-License-Identifier: MPL-2.0; SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell"]; node [shape=box, style="rounded,filled", fillcolor="#ffffff", color="#a6b4c9", fontname="DejaVu Sans", fontsize=13, fontcolor="#17243b", margin="0.22,0.2", penwidth=1.4]; @@ -27,6 +27,8 @@ digraph TypeConnections { choreographic [fillcolor="#ebf3fd", color="#7f9bbb", label=<Choreographic Types

What is preserved when a global protocol
is projected to its participants?

choreographic-types · research programme
K-CUT remains open
>, URL="https://github.com/hyperpolymath/choreographic-types"]; + secret [label=<Secret Types

Which value flows does a
confidentiality label permit, and what
may a lower observer learn?

secret-types · specification only
no calculus or theorem yet · no connections asserted
>, + URL="https://github.com/hyperpolymath/secret-types"]; } echo -> residual [label="refine the fibre\nwith evidence"]; diff --git a/docs/images/type-connections.svg b/docs/images/type-connections.svg index e87eeee..531336d 100644 --- a/docs/images/type-connections.svg +++ b/docs/images/type-connections.svg @@ -3,26 +3,26 @@ - - - + + TypeConnections - -Type research: questions and connections -nextgen-typing · coordination map · September 2026 + +Type research: questions and connections +nextgen-typing · coordination map · October 2026 echo - -Echo Types -Which origins remain compatible -after information loss? -echo-types · Agda research library + +Echo Types +Which origins remain compatible +after information loss? +echo-types · Agda research library @@ -30,104 +30,118 @@ residual - -Residual Evidence Types -Which explanations satisfy the observation -and evidence, and what holds for all of them? -WORK IN PROGRESS - · minimal Agda core checked -residual-evidence-types · finite explorer separate + +Residual Evidence Types +Which explanations satisfy the observation +and evidence, and what holds for all of them? +WORK IN PROGRESS + · minimal Agda core checked +residual-evidence-types · finite explorer separate echo->residual - - -refine the fibre -with evidence + + +refine the fibre +with evidence choreographic - -Choreographic Types -What is preserved when a global protocol -is projected to its participants? -choreographic-types · research programme -K-CUT remains open + +Choreographic Types +What is preserved when a global protocol +is projected to its participants? +choreographic-types · research programme +K-CUT remains open echo->choreographic - - -retain distinctions -through projection + + +retain distinctions +through projection epistemic - -Epistemic Types -Who has access to a claim, -with what evidence and soundness? -epistemic-types · Agda prototype + +Epistemic Types +Who has access to a claim, +with what evidence and soundness? +epistemic-types · Agda prototype epistemic->residual - - -state claim meanings -and soundness obligations + + +state claim meanings +and soundness obligations epistemic->choreographic - - -transport warrants -under conditions + + +transport warrants +under conditions tropical - -Tropical Types -How do declared resource -bounds compose? -tropical-types · Lean research library + +Tropical Types +How do declared resource +bounds compose? +tropical-types · Lean research library tropical->choreographic - - -compose bounds -for interactions + + +compose bounds +for interactions - + boundaries - -Keep the meanings separate -Resource grade ≠ Echo index ≠ residue measure -Evidence token ≠ sound proof  ·  Presence ≠ identified value ≠ causal role -Dashed arrows show conceptual use or proposed research. -They do not certify imports, integration, equivalence, or proved transport. + +Keep the meanings separate +Resource grade ≠ Echo index ≠ residue measure +Evidence token ≠ sound proof  ·  Presence ≠ identified value ≠ causal role +Dashed arrows show conceptual use or proposed research. +They do not certify imports, integration, equivalence, or proved transport. + + +secret + + +Secret Types +Which value flows does a +confidentiality label permit, and what +may a lower observer learn? +secret-types · specification only +no calculus or theorem yet · no connections asserted + + +