{
  "artifact": "salt_adversarial_controls",
  "gpu_requested": "L4",
  "model": "Qwen/Qwen2.5-1.5B-Instruct",
  "seed": 20260725,
  "n_prefixes": 24,
  "no_speedup_claimed": true,
  "purpose": "DD-4 adversarial controls the isolation cert does not run",
  "gpu_name_ground_truth": "NVIDIA L4",
  "vllm_version": "0.24.0",
  "kv_capacity": {
    "path": "llm_engine.vllm_config.cache_config",
    "num_gpu_blocks": 35376,
    "block_size": 16,
    "kv_capacity_tokens": 566016
  },
  "kv_capacity_read_succeeded": true,
  "derivation_mode": "keyed",
  "victim_public_salt_prefix8": "790ea353",
  "attacker_can_compute_victim_salt": false,
  "flag_is_a_real_comparison": "compares public_salt_for_tenant(VICTIM) \u2014 what an attacker derives from NAMESPACE and the org name \u2014 against the server's live keyed salt. Under the pre-2026-08-18 public default these are byte-identical and the flag is true; under the keyed default they are not and it is false. The public arm below proves the comparison is not vacuous.",
  "arms": {
    "first_touch": [
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0
    ],
    "victim_populate": [
      416,
      416,
      416,
      416,
      416,
      416,
      416,
      416,
      416,
      416,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464
    ],
    "same_tenant_salted": [
      416,
      416,
      416,
      416,
      416,
      416,
      416,
      416,
      416,
      416,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464,
      464
    ],
    "cross_tenant_foreign_salt": [
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0
    ],
    "SALT_KNOWING_ADVERSARY_keyed": [
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0
    ],
    "SALT_KNOWING_ADVERSARY_public_control": [
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544
    ],
    "public_victim_populate_control": [
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544,
      544
    ],
    "cross_tenant_different_prefix": [
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0,
      0
    ]
  },
  "block_boundary_sweep": [
    {
      "extra_tokens": 0,
      "first_touch": 0,
      "victim_populate": 544,
      "cross_tenant_salted": 0,
      "salt_knowing_keyed": 0,
      "public_victim_populate": 544,
      "salt_knowing_public_control": 544
    },
    {
      "extra_tokens": 4,
      "first_touch": 0,
      "victim_populate": 544,
      "cross_tenant_salted": 0,
      "salt_knowing_keyed": 0,
      "public_victim_populate": 544,
      "salt_knowing_public_control": 544
    },
    {
      "extra_tokens": 8,
      "first_touch": 0,
      "victim_populate": 544,
      "cross_tenant_salted": 0,
      "salt_knowing_keyed": 0,
      "public_victim_populate": 544,
      "salt_knowing_public_control": 544
    },
    {
      "extra_tokens": 12,
      "first_touch": 0,
      "victim_populate": 560,
      "cross_tenant_salted": 0,
      "salt_knowing_keyed": 0,
      "public_victim_populate": 560,
      "salt_knowing_public_control": 560
    },
    {
      "extra_tokens": 16,
      "first_touch": 0,
      "victim_populate": 560,
      "cross_tenant_salted": 0,
      "salt_knowing_keyed": 0,
      "public_victim_populate": 560,
      "salt_knowing_public_control": 560
    },
    {
      "extra_tokens": 20,
      "first_touch": 0,
      "victim_populate": 560,
      "cross_tenant_salted": 0,
      "salt_knowing_keyed": 0,
      "public_victim_populate": 560,
      "salt_knowing_public_control": 560
    },
    {
      "extra_tokens": 24,
      "first_touch": 0,
      "victim_populate": 560,
      "cross_tenant_salted": 0,
      "salt_knowing_keyed": 0,
      "public_victim_populate": 560,
      "salt_knowing_public_control": 560
    },
    {
      "extra_tokens": 28,
      "first_touch": 0,
      "victim_populate": 576,
      "cross_tenant_salted": 0,
      "salt_knowing_keyed": 0,
      "public_victim_populate": 576,
      "salt_knowing_public_control": 576
    },
    {
      "extra_tokens": 32,
      "first_touch": 0,
      "victim_populate": 576,
      "cross_tenant_salted": 0,
      "salt_knowing_keyed": 0,
      "public_victim_populate": 576,
      "salt_knowing_public_control": 576
    }
  ],
  "block_size_used": 16,
  "verdict_checks": {
    "first_touch_all_zero": true,
    "positive_control_victim_reuse_gt0": true,
    "close_holds_foreign_salt_all_zero": true,
    "reuse_preserved_same_tenant_gt0": true,
    "BORING_ZERO_CONTROL_different_prefix_all_zero": true,
    "SALT_KNOWING_ADVERSARY_DEFEATED_BY_KEYING": true,
    "NEGATIVE_CONTROL_public_derivation_still_leaks": true,
    "negative_control_matches_victim_exactly": true,
    "eviction_ruled_out_by_measurement": true,
    "boundary_sweep_first_touch_all_zero": true,
    "boundary_sweep_close_holds_at_every_offset": true,
    "boundary_sweep_salt_knowing_DEFEATED_at_every_offset": true,
    "boundary_sweep_negative_control_still_leaks_at_every_offset": true
  },
  "status": "MEASURED",
  "generated_utc": "2026-08-26T21:02:53.677985+00:00",
  "git_rev": "8f7de10",
  "git_dirty": true,
  "run_id": "58723416ec27468e",
  "host_kind": "Darwin-arm64",
  "provenance_schema": "gpu-cert-provenance/1"
}