# aere-research

Formal verification models, post-quantum cryptography reference implementations, known-answer
tests (KATs), and research specifications for Aere Network.

This repository is the "prove it yourself" half of the Aere Network verify-yourself core. It lets
a third party re-run the machine-checked proofs, re-derive the cryptographic reference vectors, and
read the research that underpins the protocol, without trusting any claim on faith.

## Layout

- `formal-consensus/` Z3 / SMT models of consensus and contract safety properties (30 Python
  models plus a Quint spec `FalconQuorum.qnt`), driven by `run_consensus_verification.py`. These
  cover QBFT safety and liveness, hybrid dual-quorum post-quantum activation, and the money-contract
  invariants. `CONSENSUS-VERIFICATION-2026-07-12.md` documents the results.
- `pq-stark/` reference implementations and self-tests for the STARK verifier port: BabyBear field,
  Poseidon2, MMCS, FRI, the Fiat-Shamir challenger, and AIR quotient logic. Each component ships a
  Python reference, a JavaScript (`.mjs`) reference, a Java self-test, ground-truth JSON vectors, and
  a spec. The `*-extractor/` directories are small Rust reference extractors (source only). This is
  reference and test material, not key material.
- `precompiles/` Java sources for the post-quantum EVM precompiles (ML-KEM-768, Falcon
  HashToPoint, SP1 STARK verifier).
- `kat/` and `vectors/` NIST ACVP and Falcon known-answer test vectors and their generators.
- `pq-finality-circuit/` XMSS verify-core reference (Rust source) for the post-quantum finality
  circuit.
- `bench/` and `results/` benchmark harness and recorded KAT / benchmark result JSON.
- `aips/` the Aere Improvement Proposal process and the accepted AIPs.
- `research/` research notes and long-form specifications (`research/specs/`).

## Verify

The formal models run with Python 3 and z3:

```bash
cd formal-consensus
python run_consensus_verification.py
```

The STARK references are cross-checked against their ground-truth vectors; see each
`spec-*.md` and the `test_*.py` files. Full commands and expected outputs are in the `aere-docs`
repository (`REPRODUCE.md`).

## What is deliberately not here

No private keys, no validator or Foundation key material, no infrastructure hostnames or
credentials. Heavy prover runs must be executed on a throwaway non-infrastructure machine, never on
production infrastructure.

## License

MIT. See `LICENSE`.