RuView Verification & Witness Bundle

The trust pipeline for RuView. Run this after meaningful changes and before merging.

1. Rust workspace tests

cd v2
cargo test --workspace --no-default-features        # must be 1,400+ passed, 0 failed (~2 min)

Single-crate checks (no GPU): cargo check -p wifi-densepose-train --no-default-features, cargo test -p wifi-densepose-signal --no-default-features, etc.

2. Deterministic Python proof (Trust Kill Switch)

Feeds a reference CSI signal through the production pipeline and hashes the output. Any behavioural drift changes the hash.

cd ..
python archive/v1/data/proof/verify.py              # must print VERDICT: PASS

If it fails on a hash mismatch after a legitimate numpy/scipy bump:

python archive/v1/data/proof/verify.py --generate-hash
python archive/v1/data/proof/verify.py

Artifacts: archive/v1/data/proof/verify.py, expected_features.sha256, sample_csi_data.json (1,000 synthetic frames, seed=42).

3. Python test suite (v1)

cd archive/v1 && python -m pytest tests/ -x -q

4. Generate the witness bundle (ADR-028)

bash scripts/generate-witness-bundle.sh

Produces dist/witness-bundle-ADR028-<sha>.tar.gz containing:

• WITNESS-LOG-028.md, 33-row attestation matrix, evidence per capability
• ADR-028-esp32-capability-audit.md, full audit findings
• proof/verify.py + expected_features.sha256, the deterministic proof
• test-results/rust-workspace-tests.log, full cargo test output
• firmware-manifest/source-hashes.txt, SHA-256 of all 7 ESP32 firmware files
• crate-manifest/versions.txt, all 15 crates + versions
• VERIFY.sh, one-command self-verification for recipients

5. Self-verify the bundle

cd dist/witness-bundle-ADR028-*/
bash VERIFY.sh                                       # must be 7/7 PASS

Pre-merge checklist (from CLAUDE.md)