Objective
Independently test the KineGrant software permission boundary and publish either a reproducible PASS or a useful FAIL.
This is a request for criticism and clean-room reproduction, not endorsement. A PASS does not prove physical actuation, functional safety, production readiness, or adoption.
What to test
Run the default main branch, which includes the source-bound reproduction packet for Machine Permission Test v0.5 (22 assertions, MPT-001..MPT-022): no capability, valid-once, replay, binding mutation, untrusted issuer, exact expiry, concurrent consumption, restart persistence, receipt trust, physical constraints, attenuation, delegation, approval tiers, forbidden combinations, obligations, fleet revocation, signed policy bundles, bundle tampering/authority, version rollback, fleet distribution, and bundle analysis.
Zero-install option
Open main in GitHub Codespaces. The checked-in Dev Container installs dependencies, generates the packet, and invokes the independent verifier.
Publish the exact commit, environment, report, and checksum described below. A maintainer-owned Codespaces or Actions run is reference evidence, not an external reproduction.
Five-minute reproduction
Use Python 3.11 or newer in a fresh checkout:
pip install -e '.[test]'
kinegrant-mpt --source-commit "<commit-sha>" --output machine-permission-test.evidence.json
python challenge/verify_evidence.py machine-permission-test.evidence.json
Recognition
If you are an independent implementation author, see KGP-RFC-0004 and implementations/RECOGNITION.md for the recognition path. Reproductions and independent implementations are credited publicly; there is no financial reward, token, or compensation.
Objective
Independently test the KineGrant software permission boundary and publish either a reproducible PASS or a useful FAIL.
This is a request for criticism and clean-room reproduction, not endorsement. A PASS does not prove physical actuation, functional safety, production readiness, or adoption.
What to test
Run the default
mainbranch, which includes the source-bound reproduction packet for Machine Permission Test v0.5 (22 assertions, MPT-001..MPT-022): no capability, valid-once, replay, binding mutation, untrusted issuer, exact expiry, concurrent consumption, restart persistence, receipt trust, physical constraints, attenuation, delegation, approval tiers, forbidden combinations, obligations, fleet revocation, signed policy bundles, bundle tampering/authority, version rollback, fleet distribution, and bundle analysis.Zero-install option
Open
mainin GitHub Codespaces. The checked-in Dev Container installs dependencies, generates the packet, and invokes the independent verifier.Publish the exact commit, environment, report, and checksum described below. A maintainer-owned Codespaces or Actions run is reference evidence, not an external reproduction.
Five-minute reproduction
Use Python 3.11 or newer in a fresh checkout:
Recognition
If you are an independent implementation author, see KGP-RFC-0004 and implementations/RECOGNITION.md for the recognition path. Reproductions and independent implementations are credited publicly; there is no financial reward, token, or compensation.