Contest for Discovery, Proof for Protection
Verify the actual fix diff with equal-work panel review and an independent verdict.
Post-audit proves the fix after contest/core discovery: bind baseline and fixed commits, replay findings, re-run invariants, and issue an independent verdict before deploy match and the Trust Passport.
- Who performs it
- A dedicated panel whose members perform the same complete work and receive equal pay, plus an independent decision reviewer. Auditor tier is an eligibility floor, not a partial-work split.
- When it starts
- After core audit completion, after the protocol submits fixes, and after exact baseline/fix commits and evidence paths are available.
- Pricing basis
- Deterministic diff quoteWorkload equals changed lines + 25 per affected function + 40 per affected finding + 100 per high-risk factor. That selects a 2-5 person panel, T4-T1 eligibility floor, 24-96 hours, equal panel pay, independent reviewer pay, and a 3% platform fee.
How the work moves
Each step creates or validates evidence needed by the next step. Missing proof stops the handoff.
- 01Fingerprint the diff
Bind baseline and fixed commits, affected findings and functions, fix classes, risk factors, tags, and evidence paths.
- 02Recruit one flat panel
Every selected panel member independently performs the same complete verification work for the same pay.
- 03Replay and regress
Re-run original failure evidence, previously passing invariants, compilation, and formal or prover checks against the fix.
- 04Issue the verdict
Differential review and an independent decision produce clear, incomplete, regressed, or residual-risk outcomes.
What the protocol receives
Compact output records first. Methodology detail remains one click away.
Diff fingerprint, quote factors, panel, eligibility floor, timing, pay, fee, and evidence paths.
Specific accepted findings and original invariant or POC evidence are tested against the fixed commit.
Previously passing stateless, stateful, symbolic, and prover checks are re-evaluated.
Unexpected state changes, new entry points, and out-of-scope changes are identified.
The final state is not self-declared by the protocol or the fix author.
A clear outcome can support a commit-bound credential and later deployment evidence.
What blocks completion
- Baseline or fixed commit is missing
- Affected finding IDs or evidence paths are incomplete
- The fix introduces regression or unexpected scope
- Canonical rerun gates do not pass
- Independent reviewer does not issue a clear verdict
Inspect the rules behind this page.
Public copy summarizes current implementation and skill contracts. It does not replace repository evidence or approval.
Put post-audit into the funding plan.
Build the lifecycle cart, then submit repository identity so the approved quote can replace every public estimate.
Estimate a fix round