Aere Network 6cb0140fae Republished from a clean root: the compiled artifact is gone from history, and the local line of work joins the sanitized public line

The public history carried kat/__pycache__/mlkem768_reference.cpython-314.pyc,
a compiled Python artifact embedding the operator's absolute local path. Text
secret scanners do not read compiled binaries, which is exactly how it slipped
through, and removing it from the tip would have left it reachable through the
old root commits. So this repository is republished from a single clean root.

This root also carries, from the previously unpublished line of work:
- corrected LICENSE year, LICENSING.md, VERIFY-POLICY.md, and
  CITATIONS-UNRESOLVED.md remeasured 2026-08-11 (101 paths, README aligned)
- O-018: run_consensus_verification.py ran 19 of 29 models and reported PASS;
  it now runs all 29, and computemarket_smt.py gains resolveByTimeout /
  reclaimUnsettled cases plus a negative control
- O-006: the word 'audited' removed from next to Bouncy Castle, twice, after a
  concurrent edit resurrected it
- O-014: prior art named and dated - Algorand's native falcon_verify shipped
  about ten months before AERE's precompiles; the primacy claim is withdrawn
  where it was implied
- bench/ scripts parametrized so they actually run for an outsider (the
  earlier textual sanitization left $STAGING unexpanded inside Python strings)
- AIP-2/AIP-3 errata with measured figures, spec remeasurements at 2026-08-01,
  and the spec-zk-stack retractions (owner is an operational key, not the
  Foundation; 'maximally sound' withdrawn; aggregator V1 deprecated)
The redacted bench-host environment files from the sanitized line are kept
exactly as published; the unredacted local variants are not carried.

2026-08-15 13:52:14 +03:00

2.0 KiB

Raw Blame History

Licensing

The papers, proofs, results and verification records in this repository are MIT. Two groups of files are not, and both are marked in their own headers. Where a file has its own SPDX-License-Identifier, that header governs, not the repository default.

This page was produced by reading the SPDX-License-Identifier line of every file in the tree.

Java sources — Apache-2.0

File	SPDX
`precompiles/HashToPointPrecompiledContract.java`	`Apache-2.0`
`precompiles/MLKEM768PrecompiledContract.java`	`Apache-2.0`
`precompiles/Sp1StarkVerifierPrecompiledContract.java`	`Apache-2.0`
`pq-stark/FriQueryIndexSelfTest.java`	`Apache-2.0`
`pq-stark/Sp1StarkVerifierKat.java`	`Apache-2.0`

These are AERE Network's copyright, but they are written to compile inside a Hyperledger Besu tree and they sit in Besu's own package namespace, org.hyperledger.besu.evm.precompile. Besu is Apache-2.0. Licensing them Apache-2.0 is what makes them usable where they are meant to be used, and it is what their headers have always said.

Improvement proposals — CC0

Every file under aips/, including aip-template.md, ends with:

Released to the public domain (CC0). No rights reserved.

That dedication stands. It follows the convention Ethereum uses for EIPs, and it is a wider grant than MIT, so it takes nothing away from a reader of LICENSE. It is recorded here because a reader who sees only LICENSE would otherwise not know these documents are freer than the rest.

What `bench/` is

bench/AereFalcon512VerifierHTP.sol is MIT, the repository default. It is listed only so the count below adds up.

Counts, as measured

SPDX identifier	Files carrying the header
`Apache-2.0`	5
`MIT`	1

Files without an SPDX header, which is most of this repository, are covered by LICENSE, except the aips/ documents described above.

2.0 KiB Raw Blame History