Skip to content

Conversation

@BuilderFred
Copy link
Contributor

Standardized test suite to validate hardware fingerprint checks before deployment. Provides verbose diagnostic output and validates against microarchitecture profile requirements.

Copy link
Owner

@Scottcjn Scottcjn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔧 Changes Requested - Hardware Fingerprint Preflight Validator

@BuilderFred Good test suite! But server validation is incomplete.

Critical Issues:

  1. Missing Anti-Emulation Server Validation

    • test_fingerprints.py runs anti-emulation checks ✓
    • BUT arch_validation.py ignores anti-emulation results ❌
    • Fix: Add validate_anti_emulation() to server-side validation
  2. Missing Instruction Jitter Validation

    • Test suite checks jitter ✓
    • Server does not validate jitter ❌
    • Fix: Add jitter threshold check to server
  3. Cache Ratio Threshold Too Weak

    • Current: < 1.05 (VMs show 0.98-1.02 = PASS)
    • Should be: < 1.1 or per-architecture thresholds
  4. Duplicate Files

    • arch_validation.py in root AND node/
    • Keep only in node/

Homework:

  • Add anti-emulation validation to server
  • Add instruction jitter validation to server
  • Raise cache ratio threshold to 1.1
  • Remove duplicate arch_validation.py
  • Add /api/miner/{id}/arch-score endpoint

The test suite is excellent. Server validation needs the missing 2 checks.

@Scottcjn
Copy link
Owner

Scottcjn commented Feb 3, 2026

@BuilderFred - Test suite excellent ✅ but server-side validation missing critical checks:

Anti-Emulation - NOT validated server-side (most important!)
Instruction Jitter - NOT validated server-side
⚠️ Cache threshold too low (1.05 → 1.1)

The two most important anti-VM checks are missing from arch_validation.py! Push fixes and ping when ready.

@Scottcjn
Copy link
Owner

Scottcjn commented Feb 3, 2026

👋 @BuilderFred — Preflight validator test suite is great! But server-side validation is missing critical checks:

  1. Anti-Emulation validation (most important — detects VMs)
  2. Instruction Jitter validation
  3. Thermal Drift validation

The client-side tests pass, but server needs to actually validate these fields. Check fingerprint_checks.py for reference implementation.

This is the key PR for RIP-PoA security — happy to pair on it if needed!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants