Archipelago v1.7.129-alpha

reticulum-daemon/spike_identity.py

@@ -0,0 +1,64 @@
+#!/usr/bin/env python3
+"""Phase 0 gate #1 — deterministic RNS identity from the Archy seed (NO radio needed).
+
+Proves the load-bearing assumption behind the whole "derive RNS identity from Archy
+keys" decision: a node's Reticulum/LXMF destination hash is a stable, reproducible
+function of its 32-byte Archy Ed25519 seed.
+
+Run:
+    reticulum-daemon/.venv/bin/python reticulum-daemon/spike_identity.py
+
+Exits non-zero (and prints FAIL) if any invariant breaks.
+"""
+
+from __future__ import annotations
+
+import sys
+
+from archy_rns_identity import lxmf_destination_hash, rns_private_blob
+
+# Two fixed, non-secret test seeds (32 bytes each). Real seeds come from node_key.
+SEED_A = bytes(range(32))
+SEED_B = bytes((i * 7 + 3) & 0xFF for i in range(32))
+
+
+def _hex(b: bytes) -> str:
+    return b.hex()
+
+
+def main() -> int:
+    ok = True
+
+    # 1. The 64-byte private blob is deterministic and well-formed.
+    blob1 = rns_private_blob(SEED_A)
+    blob2 = rns_private_blob(SEED_A)
+    if blob1 != blob2 or len(blob1) != 64:
+        print(f"FAIL: private blob not deterministic/64B (len={len(blob1)})")
+        ok = False
+    else:
+        print(f"ok  : private blob deterministic, 64B  ({_hex(blob1)[:16]}…)")
+
+    # 2. Same seed -> same LXMF destination hash, across two independent builds.
+    h1 = lxmf_destination_hash(SEED_A)
+    h2 = lxmf_destination_hash(SEED_A)
+    if h1 != h2 or len(h1) != 16:
+        print(f"FAIL: destination hash not stable/16B: {_hex(h1)} vs {_hex(h2)}")
+        ok = False
+    else:
+        print(f"ok  : destination hash stable, 16B   <{_hex(h1)}>")
+
+    # 3. Different seed -> different destination (no accidental collision/constant).
+    h3 = lxmf_destination_hash(SEED_B)
+    if h3 == h1:
+        print(f"FAIL: distinct seeds produced the same destination <{_hex(h3)}>")
+        ok = False
+    else:
+        print(f"ok  : distinct seed -> distinct dest  <{_hex(h3)}>")
+
+    print("\nPASS — RNS identity is deterministic from the Archy seed."
+          if ok else "\nFAILED — see above.")
+    return 0 if ok else 1
+
+
+if __name__ == "__main__":
+    sys.exit(main())