From 0b147cfde8abe61ddd728460e1c0f5a39dc41b81 Mon Sep 17 00:00:00 2001
From: chasebryan <chasebryan@users.noreply.github.com>
Date: Tue, 7 Jul 2026 17:32:24 -0500
Subject: [PATCH] Add SEAL-Core v0 review packet

---
 README.md                          |  4 ++
 docs/SEAL_CORE_V0_REVIEW_PACKET.md | 65 ++++++++++++++++++++++++++++++
 2 files changed, 69 insertions(+)
 create mode 100644 docs/SEAL_CORE_V0_REVIEW_PACKET.md

diff --git a/README.md b/README.md
index 190aa80..a8502f4 100644
--- a/README.md
+++ b/README.md
@@ -42,6 +42,10 @@ The v0 model has no parser. Files in `examples/` are documentation fixtures only
 
 `src/Seal.Matrix.fst` encodes explicit v0 decision cases for measure, open, seal, and transition operations. It proves capability checks dominate evidence and receipt checks, evidence checks dominate receipt checks where evidence is required, and disallowed state combinations cannot return `Allow`.
 
+## SEAL-Core v0 Review Packet
+
+The current review packet is in [docs/SEAL_CORE_V0_REVIEW_PACKET.md](docs/SEAL_CORE_V0_REVIEW_PACKET.md).
+
 ## Non-Claims
 
 SEAL-Core v0 is:
diff --git a/docs/SEAL_CORE_V0_REVIEW_PACKET.md b/docs/SEAL_CORE_V0_REVIEW_PACKET.md
new file mode 100644
index 0000000..088e810
--- /dev/null
+++ b/docs/SEAL_CORE_V0_REVIEW_PACKET.md
@@ -0,0 +1,65 @@
+# SEAL-Core v0 Review Packet
+
+## Project Identity
+
+SEAL is Substrate Evidence Authority Layer Zero.
+
+SEAL-Core v0 is a terminal-native normative authority core. It models a small authority gate for sealed evidence, capability-bound authority, and fail-closed decision order.
+
+## Current Verified Scope
+
+The current F* verification scope covers:
+
+- operation-to-capability mapping
+- fail-closed gate order
+- evidence requirements
+- receipt requirements
+- explicit proof matrix
+- GitHub Actions verification of the F* modules
+
+The verified modules are the source-level F* authority model only. The CI checkpoint runs the verifier over the SEAL-Core v0 modules and fails if F* verification fails.
+
+## Current Non-Scope
+
+SEAL-Core v0 currently has:
+
+- no parser
+- no runtime command execution
+- no encryption
+- no networking
+- no kernel isolation
+- no seL4 integration
+- no production authorization
+- no whole-system formal verification
+
+It is not an operating system, not a kernel boundary, not seL4, not seL4-equivalent, not externally certified, and not government approved.
+
+## Verified Rule Summary
+
+The verified authority model establishes the following decision order:
+
+- missing capability denies first
+- missing evidence denies before receipt checks
+- missing receipt denies before allow
+- allow only occurs after required conditions are present
+
+The proof matrix states explicit cases for `OpMeasure`, `OpOpen`, `OpSeal`, and `OpTransition` without adding operations or capabilities.
+
+## Reviewer Commands
+
+```sh
+make toolchain
+make verify
+make test
+git diff --check
+```
+
+`make verify` is the primary local verification command. `make test` runs the toolchain check and F* verification.
+
+## Public Claim Boundary
+
+SEAL-Core v0 verifies a small F* authority-gate model only.
+
+It does not verify an OS, runtime, kernel boundary, cryptographic system, or seL4 substrate.
+
+C extraction remains deferred until a compatible KaRaMeL toolchain is pinned. KaRaMeL is not mandatory for SEAL-Core v0 verification.