Σ-GLYPH

A claim with an executable check is worth exactly as much as your ability to run the check yourself. Usually you cannot safely run a stranger's program.

Σ-GLYPH makes a check a content-addressed object rather than mutable code you must trust. Evaluation is deterministic, integer-only and total over its canonical outcomes; one ATP budget prices both semantic work and peak semantic materialization.

Receipt = eval(term_hash, atp: uint32, content_environment)

Two machines given the same term hash, budget and valid demanded content return the same exit, result hash and ATP spent. Missing demanded content is an explicit input and yields Unresolved Reference; local process/resource faults stay outside canonical outcomes. Implementations must apply local admission limits before reading untrusted terms or stores.

The three-input form above is normative in Book I 0.6.0. Earlier README text incorrectly omitted the content environment even though the Lean model, Python implementation and unresolved-reference semantics already depended on it. The defect was found in external review and resolved in v0.7.0 through ADR-010; the dated finding remains at reviews/2026-08-codex-store-parameter.md.

What it establishes

Σ-GLYPH owns deterministic reduction, content addressing and bounded replay. Warrant owns decision records, provenance, authority and settlement. A Warrant ski@v1 reason uses the frozen Book I v0.5 evaluator bytes; Sigma-Glyph HEAD is a differential target, not a silent replacement for that runtime.

Three implementations from one author/model lineage agree on all 49 Book I conformance vectors: the Python reference, Warrant's native Go evaluator and a from-scratch Rust implementation. Lean 4 checks determinism, totality, the semantic-size bound and valid-store monotonicity. This is strong internal conformance evidence, not independent custody, outside adoption, semantic truth or immunity of a binary to local faults.

The cheapest attacks have repeatedly targeted the apparatus around the kernel: hidden theorem scope, weakened statements, omitted files and guards that stopped observing their subjects. proofs/README.md separates what the Lean kernel checks from what bridges, registries and generated inputs must still be trusted to supply.

Run it

From a checkout:

python3 impl/sigma_glyph.py                     # Book I
python3 tests/spec_conformance/run_reference.py # 49/49 vectors
python3 impl/sigma_wave.py                      # Book II
python3 impl/sigma_federation.py                # Book III
export WARRANT="python3 /absolute/path/to/warrant/impl/warrant.py"
tools/test-all.sh                               # full repository suite

The full suite includes a live Book III specimen that invokes the real Warrant verifier. WARRANT is an explicit cross-repository operand; the suite refuses to guess it from the checkout layout and fails before running if it is absent.

From PyPI, whose latest release is the distribution named under "Status by surface" below:

pip install sigma-glyph
python -m sigma_glyph
python -m sigma_wave
python -m sigma_federation

The wheel contains the three Python modules, not the replay corpora. Installed Book II/III self-tests therefore report recorded-vector replay as SKIP while still running their property checks. Full re-derivation needs a checkout. The artifact boundary and release procedure are in PUBLISHING.md.

Status by surface

Five things move separately here, and their labels are not interchangeable. Each paragraph names its authoritative source; when this section and that source disagree, the source is right. tools/version_check.py checks the two version headings below against spec/ANCHORS.txt and pyproject.toml.

Adopted bundle: v0.7.0

v0.7.0 (2026-08-30) is the newest adopted anchor set in spec/ANCHORS.txt: Book I 0.6.0, Books II and III 0.7.0, GOV-anchors 1.0.2. It was adopted by threshold warrant 0e634c17…46e1 (2-of-3, two distinct roster keys) over anchor set abf10f2a…adf59, recorded in .warrants/. The bundle makes the content environment and receipt explicit, removes reference-oracle precedence, anchors all three suite schemas and admits at most one Pin per NodeHash in the annotation profile. Adoption records this project's own governance act; it does not claim outside review, custody or use. SECURITY-ASSUMPTIONS.md SA-5 records what custody each threshold act has actually had.

A bundle heading is a governance label, not a git tag and not a release. As of 2026-09-17 there is no v0.7.0 git tag, GitHub release or PyPI upload; the newest release tag is v0.6.7. Release history and exact changed anchors belong to CHANGELOG.md, spec/ANCHORS.txt and spec/VERSIONS.md.

Distribution: 0.7.0

pyproject.toml carries 0.7.0, a release candidate that packages the adopted v0.7.0 bundle (Book I 0.6.0, Books II and III 0.7.0). It is not published: there is no v0.7.0 tag or GitHub release, and nothing has been uploaded to PyPI under that number. Until the release workflow publishes it, the latest PyPI release is sigma-glyph 0.6.7 (2026-07-31), built from git tag v0.6.7, which packages the previous bundle (Book I 0.5.2, Books II and III 0.6.1) — so an installed copy from PyPI is still one bundle behind. PUBLISHING.md owns the release procedure; if it and PyPI disagree, PyPI is right.

Evaluator bytes and Warrant runtime tags

Two Book I Python modules exist, and they are not interchangeable:

• git show v0.6.7:impl/sigma_glyph.py, byte-identical to the module inside PyPI 0.6.7 (SHA-256 80299d68…7bab5), implements Book I v0.5. Warrant pins exactly these bytes as its ski@v1 evaluator and checks the digest before import, so ski@v1 does not move when this repository does.
• impl/sigma_glyph.py on master implements Book I 0.6.0, the v0.7.0 bundle. No Warrant runtime tag reaches it. ski@v2 is reserved for Book I 0.6.0 in Warrant's SPEC.md §3.2 but registered and admitted in no body version; body version 0.3 is reserved and unspecified; Warrant ships no ski@v2 evaluator, and a conforming verifier rejects ski@v2 today. Admitting it is a future Warrant registration act, not something this repository can do by editing or releasing.

The five surfaces above are also readable as one machine-readable document, recomputed from bytes on the run that prints it:

python3 tools/evidence_view.py --warrant /absolute/path/to/warrant

That view is a projection of the sources named in this section, not a second truth table: it adopts, releases, registers and admits nothing, and without the explicit Warrant operand its Warrant-owned half is typed unavailable rather than guessed. tools/README.md describes what it does and does not assert.

The Three Books

The wave layer is an optional view over identity. Ignore Books II and III and Book I still holds. spec/GLOSSARY.md fixes the local meaning of work, size, memory and materialization; WHY-THESE-THREE.md explains why determinism, addressing and one semantic bound are combined; spec/LORE.md is explicitly non-normative.

Implement and verify

impl/sigma_glyph.py is the Book I Python reference. impl/sigma_wave.py is Book II. Book III has Python and Go implementations. impl-rs/ independently implements Book I within the same author/model lineage; impl-go/ in this repo implements Books II and III only.

(cd impl-rs && cargo build --release)
./impl-rs/target/release/book1 conformance tests/spec_conformance/vectors.json
python3 proofs/proof_guard.py
python3 tools/spec_audit.py
python3 tools/version_check.py

Implementation guidance is in spec/IMPLEMENTING.md. Every adopted specification byte set is detached in spec/ANCHORS.txt; a specification update is an explicit fork, not a mutable page edit.

For AI or human review, read reviews/README.md, run the reference suite first, and attack one exact claim/operand boundary. Green tests are baseline evidence, not an independent gate or governance adoption.

Published evidence

• One Integer for Semantic Work and Materialization — Zenodo 10.5281/zenodo.22646920 (v2, 2026-09-07, repository snapshot 47cf57d; concept DOI 10.5281/zenodo.22069650); v1 is 10.5281/zenodo.22069651 (snapshot 7ecba6a). Deposited, not peer reviewed.
• Does One Integer Still Price Work and Memory in Parallel? — Zenodo 10.5281/zenodo.22073568, a preregistered experiment: the aggregate bound survived the measured parallel reducer while per-redex refusal did not. See experiments/exp-004/.

Prior eras and their historical hashes are preserved in git history and in the deposited snapshot, not in the default tree: history/ holds the retirement ledgers that say what left the surface, why, what was lost and how to retrieve it with status. Current provenance does not erase superseded semantics; current admission does not reactivate them.

MIT for implementations; CC BY 4.0 for specification texts.