dandri/simplex-chat
1
0
Fork 0
mirror of https://github.com/simplex-chat/simplex-chat.git synced 2026-09-28 15:38:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

plans: verify domain-claim round-trip fidelity (elimination now airtight)

Browse Source 
The one field that changes when a name is added is the domain claim, so the
elimination's last assumption was its store/read fidelity. Verified: ToField
SimplexDomain = decodeLatin1 . strEncode, FromField = strDecode . encodeUtf8
(simplexmq SimplexName.hs:127-129); domains are ASCII and canonical (lowercased
via strDecode, and the link arrives canonical via StrJSON), so the round-trip is
identity, and the name case yields a non-empty access reconstructing to Just. So
every Eq-field except publicGroupId provably converges. Noted the separate
empty-access -> Nothing degeneracy (Shared.hs:726) as latent/out-of-scope.
This commit is contained in:
Narasimha-sc
2026-07-06 18:13:07 +00:00
parent b07ca4ee64
commit d9f35b5506
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plans/2026-07-06-fix-directory-name-reapproval.md
+13
View File
@@ -74,6 +74,19 @@ is permanent → `groupUpdated` true every cycle → re-approval on repeat.
is merely the *occasion* (the owner republishing the link) that surfaces the
pre-existing `publicGroupId` staleness.
The claim's round-trip fidelity — the one field that *changes* when a name is
added, hence the last assumption behind the elimination — was verified: `ToField
SimplexDomain = decodeLatin1 . strEncode` and `FromField = strDecode . encodeUtf8`
(`simplexmq SimplexName.hs:127-129`); domains are ASCII, so the stored value is
`strDecode (strEncode d)`, which equals `d` for a canonical (lower-cased) domain,
and the link's domain is already canonical (it arrives via `StrJSON`/`strDecode`).
Because the name sets `group_domain`, `toPublicGroupAccess` returns `Just` (not the
degenerate empty-access→`Nothing` at `Shared.hs:726`), so the claim reconstructs
equal. So every field except `publicGroupId` provably converges — the elimination
is airtight, not "assuming fidelity". (The empty-access→`Nothing` degeneracy at
`Shared.hs:726` is a separate latent asymmetry, unreachable here since a claim makes
the access non-empty; out of scope.)
## 4. The fix (core, minimal): compare *content*, ignoring immutable identity
`publicGroupId` is immutable cryptographic identity (`sha256(genesis root key)`,