{
  "artifact": "estate_axiom_coverage",
  "sprint": "E1 / D-4",
  "claim": "What fraction of the Lean declarations in the directories gen_marquee_axioms.py names is actually enumerated by its hand-written CORPORA literal, against a report banner asserting ALL marquee theorems are axiom-clean.",
  "method": "Deduplicated by lean_dir: several CORPORA entries name the same directory (theory/lean appears 3x), so summing per-entry counts would triple-count its declarations. Parse CORPORA out of the generator with ast.literal_eval -- never import it, which would run the estate's own generator. Count theorem/lemma declarations textually in each named lean_dir and compare against the explicitly enumerated names.",
  "generator": "scripts/gen_marquee_axioms.py",
  "deduplicated_by_lean_dir": true,
  "declarations_found_total": 1642,
  "declarations_named_total": 606,
  "declaration_coverage_pct": 36.9,
  "modules_in_tree_total": 203,
  "modules_listed_total": 116,
  "corpora": [
    {
      "label": "transport (theory/lean)",
      "lean_dir": "theory/lean",
      "dir_exists": true,
      "modules_in_tree": 56,
      "modules_listed": 4,
      "modules_unlisted": [
        "Backpressure",
        "BlockChainHash",
        "Checkpoint",
        "Cmu",
        "ConfCollective",
        "CreditOverhead",
        "CreditSrpt",
        "CritPath",
        "Cxl",
        "CxlTier",
        "Deadline",
        "Deadlock",
        "DpuHandoff",
        "FecCredit",
        "HbmChannel",
        "InlineAead",
        "InnetworkCollective",
        "KeyDomainSeparation",
        "Knee",
        "KvSelect",
        "Kvcache",
        "LearnedGate",
        "MsjCollective",
        "MultiServer",
        "OcsReconfig",
        "OpticalRecovery",
        "Optimality",
        "Pcie",
        "PfcDeadlock",
        "PhaseBoundary",
        "PriorArtCost",
        "PublicPrefixShare",
        "ReorderAccount",
        "ReorderConst",
        "ResidencyBound",
        "SaltEntropy",
        "SaltSecrecy",
        "Scale",
        "SchedCert",
        "SchedEnvelope"
      ],
      "n_modules_unlisted": 52,
      "declarations_found": 454,
      "declarations_named": 16,
      "declaration_coverage_pct": 3.5
    },
    {
      "label": "serving-limits (serving_limits/formal/lean)",
      "lean_dir": "serving_limits/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 42,
      "modules_listed": 26,
      "modules_unlisted": [
        "CapabilityEngine",
        "CompressionRate",
        "ConformanceBound",
        "DisaggCoherence3",
        "DppRegret",
        "InjectivityFloor",
        "InjectivityFloorCheck",
        "LeakyRateBound",
        "LearnedCaching",
        "LearnedCachingBound",
        "RandomizedIsolator",
        "RecordFloor",
        "ReuseOptimal",
        "StatCheck",
        "TTEInjectivityFloor",
        "TTEPreludeCheck"
      ],
      "n_modules_unlisted": 16,
      "declarations_found": 429,
      "declarations_named": 139,
      "declaration_coverage_pct": 32.4
    },
    {
      "label": "State-Fabric (statefabric/formal/lean)",
      "lean_dir": "statefabric/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 34,
      "modules_listed": 11,
      "modules_unlisted": [
        "AsyncFabric",
        "AuthenticatedOrigin",
        "AuthoritativeReuse",
        "BranchTxnState",
        "CMuStaging",
        "CapsuleDag",
        "CrossInstance",
        "ExactFallback",
        "ExactTransform",
        "ExactTransformCert",
        "Extract",
        "FullAdmit",
        "InjectionGate",
        "LayoutBijectionGeneral",
        "LearningAugmented",
        "MemGate",
        "QuorumCommit",
        "SemanticEnvelope",
        "SpecGate",
        "StateLogistics",
        "StateTransaction",
        "StateTransactionV2",
        "StrategicControlAxioms"
      ],
      "n_modules_unlisted": 23,
      "declarations_found": 261,
      "declarations_named": 37,
      "declaration_coverage_pct": 14.2
    },
    {
      "label": "runtime-gates (runtime_gates/formal/lean)",
      "lean_dir": "runtime_gates/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 1,
      "modules_listed": 1,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 21,
      "declarations_named": 4,
      "declaration_coverage_pct": 19.0
    },
    {
      "label": "inference-gates:MoeVram (inference_gates/formal/lean)",
      "lean_dir": "inference_gates/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 6,
      "modules_listed": 1,
      "modules_unlisted": [
        "DisaggSchedule",
        "EmbedReuse",
        "GateCompleteness",
        "MoEBalance",
        "SpecDecode"
      ],
      "n_modules_unlisted": 5,
      "declarations_found": 35,
      "declarations_named": 3,
      "declaration_coverage_pct": 8.6
    },
    {
      "label": "applied-domains (applied_domains/formal/lean)",
      "lean_dir": "applied_domains/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 8,
      "modules_listed": 8,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 39,
      "declarations_named": 19,
      "declaration_coverage_pct": 48.7
    },
    {
      "label": "exchange-gates (exchange_gates/formal/lean)",
      "lean_dir": "exchange_gates/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 8,
      "modules_listed": 7,
      "modules_unlisted": [
        "ReuseReceipt"
      ],
      "n_modules_unlisted": 1,
      "declarations_found": 54,
      "declarations_named": 30,
      "declaration_coverage_pct": 55.6
    },
    {
      "label": "training-gates (training_gates/formal/lean)",
      "lean_dir": "training_gates/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 5,
      "modules_listed": 5,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 31,
      "declarations_named": 20,
      "declaration_coverage_pct": 64.5
    },
    {
      "label": "compression-gates (compression_gates/formal/lean)",
      "lean_dir": "compression_gates/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 3,
      "modules_listed": 2,
      "modules_unlisted": [
        "KVQualityGate"
      ],
      "n_modules_unlisted": 1,
      "declarations_found": 22,
      "declarations_named": 9,
      "declaration_coverage_pct": 40.9
    },
    {
      "label": "moe-routing (moe_routing_gates/formal/lean)",
      "lean_dir": "moe_routing_gates/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 3,
      "modules_listed": 3,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 17,
      "declarations_named": 10,
      "declaration_coverage_pct": 58.8
    },
    {
      "label": "moe-hardness (moe_hardness/formal/lean)",
      "lean_dir": "moe_hardness/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 4,
      "modules_listed": 4,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 28,
      "declarations_named": 14,
      "declaration_coverage_pct": 50.0
    },
    {
      "label": "io-complexity (io_complexity/formal/lean)",
      "lean_dir": "io_complexity/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 4,
      "modules_listed": 4,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 26,
      "declarations_named": 7,
      "declaration_coverage_pct": 26.9
    },
    {
      "label": "comm-floor (comm_floor/formal/lean)",
      "lean_dir": "comm_floor/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 9,
      "modules_listed": 9,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 70,
      "declarations_named": 28,
      "declaration_coverage_pct": 40.0
    },
    {
      "label": "audit-chain (audit_chain/formal/lean)",
      "lean_dir": "audit_chain/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 1,
      "modules_listed": 1,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 9,
      "declarations_named": 9,
      "declaration_coverage_pct": 100.0
    },
    {
      "label": "record-floor (serving_limits/formal/lean)",
      "lean_dir": "serving_limits/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 42,
      "modules_listed": 1,
      "modules_unlisted": [
        "BoundedCodec",
        "CacheCeiling",
        "CapabilityEngine",
        "CertifiedElision",
        "CommBound",
        "CompressionRate",
        "ConformanceBound",
        "CostFloor",
        "CreditEssential",
        "DisaggCoherence",
        "DisaggCoherence3",
        "DistillContract",
        "DppRegret",
        "EnergyFloor",
        "EssentialBits",
        "EvictionSafety",
        "HierarchicalIsolation",
        "InjectivityFloor",
        "InjectivityFloorCheck",
        "IsolationBound",
        "KDraftOT",
        "KvCodec",
        "KvFloor",
        "LeakyIsolationBound",
        "LeakyRateBound",
        "LearnedCaching",
        "LearnedCachingBound",
        "MdsOptimal",
        "PagingLowerBound",
        "RandomizedIsolator",
        "ReuseOptimal",
        "SecureFloor",
        "SpecOptimal",
        "StatCheck",
        "StateClassBound",
        "StructuredCapabilityEngine",
        "StructuredIsolation",
        "SubmodularCover",
        "TTEInjectivityFloor",
        "TTEPreludeCheck"
      ],
      "n_modules_unlisted": 41,
      "declarations_found": 429,
      "declarations_named": 9,
      "declaration_coverage_pct": 2.1
    },
    {
      "label": "key-domain separation (theory/lean KeyDomainSeparation)",
      "lean_dir": "theory/lean",
      "dir_exists": true,
      "modules_in_tree": 56,
      "modules_listed": 1,
      "modules_unlisted": [
        "Backpressure",
        "BlockChainHash",
        "Bounds",
        "Checkpoint",
        "Cmu",
        "Compose",
        "ConfCollective",
        "CreditOverhead",
        "CreditSrpt",
        "CritPath",
        "Cxl",
        "CxlTier",
        "Deadline",
        "Deadlock",
        "DpuHandoff",
        "FecCredit",
        "HbmChannel",
        "InlineAead",
        "InnetworkCollective",
        "Knee",
        "KvSelect",
        "Kvcache",
        "LatencyFloor",
        "LearnedGate",
        "MsjCollective",
        "MultiServer",
        "OcsReconfig",
        "OpticalRecovery",
        "Optimality",
        "Pcie",
        "PfcDeadlock",
        "PhaseBoundary",
        "PriorArtCost",
        "PublicPrefixShare",
        "ReorderAccount",
        "ReorderConst",
        "ReorderSurface",
        "ResidencyBound",
        "SaltEntropy",
        "SaltSecrecy"
      ],
      "n_modules_unlisted": 55,
      "declarations_found": 454,
      "declarations_named": 25,
      "declaration_coverage_pct": 5.5
    },
    {
      "label": "block-chain hash (theory/lean BlockChainHash)",
      "lean_dir": "theory/lean",
      "dir_exists": true,
      "modules_in_tree": 56,
      "modules_listed": 1,
      "modules_unlisted": [
        "Backpressure",
        "Bounds",
        "Checkpoint",
        "Cmu",
        "Compose",
        "ConfCollective",
        "CreditOverhead",
        "CreditSrpt",
        "CritPath",
        "Cxl",
        "CxlTier",
        "Deadline",
        "Deadlock",
        "DpuHandoff",
        "FecCredit",
        "HbmChannel",
        "InlineAead",
        "InnetworkCollective",
        "KeyDomainSeparation",
        "Knee",
        "KvSelect",
        "Kvcache",
        "LatencyFloor",
        "LearnedGate",
        "MsjCollective",
        "MultiServer",
        "OcsReconfig",
        "OpticalRecovery",
        "Optimality",
        "Pcie",
        "PfcDeadlock",
        "PhaseBoundary",
        "PriorArtCost",
        "PublicPrefixShare",
        "ReorderAccount",
        "ReorderConst",
        "ReorderSurface",
        "ResidencyBound",
        "SaltEntropy",
        "SaltSecrecy"
      ],
      "n_modules_unlisted": 55,
      "declarations_found": 454,
      "declarations_named": 11,
      "declaration_coverage_pct": 2.4
    },
    {
      "label": "salt secrecy (theory/lean SaltSecrecy)",
      "lean_dir": "theory/lean",
      "dir_exists": true,
      "modules_in_tree": 56,
      "modules_listed": 1,
      "modules_unlisted": [
        "Backpressure",
        "BlockChainHash",
        "Bounds",
        "Checkpoint",
        "Cmu",
        "Compose",
        "ConfCollective",
        "CreditOverhead",
        "CreditSrpt",
        "CritPath",
        "Cxl",
        "CxlTier",
        "Deadline",
        "Deadlock",
        "DpuHandoff",
        "FecCredit",
        "HbmChannel",
        "InlineAead",
        "InnetworkCollective",
        "KeyDomainSeparation",
        "Knee",
        "KvSelect",
        "Kvcache",
        "LatencyFloor",
        "LearnedGate",
        "MsjCollective",
        "MultiServer",
        "OcsReconfig",
        "OpticalRecovery",
        "Optimality",
        "Pcie",
        "PfcDeadlock",
        "PhaseBoundary",
        "PriorArtCost",
        "PublicPrefixShare",
        "ReorderAccount",
        "ReorderConst",
        "ReorderSurface",
        "ResidencyBound",
        "SaltEntropy"
      ],
      "n_modules_unlisted": 55,
      "declarations_found": 454,
      "declarations_named": 8,
      "declaration_coverage_pct": 1.8
    },
    {
      "label": "salt-entropy (theory/lean SaltEntropy)",
      "lean_dir": "theory/lean",
      "dir_exists": true,
      "modules_in_tree": 56,
      "modules_listed": 1,
      "modules_unlisted": [
        "Backpressure",
        "BlockChainHash",
        "Bounds",
        "Checkpoint",
        "Cmu",
        "Compose",
        "ConfCollective",
        "CreditOverhead",
        "CreditSrpt",
        "CritPath",
        "Cxl",
        "CxlTier",
        "Deadline",
        "Deadlock",
        "DpuHandoff",
        "FecCredit",
        "HbmChannel",
        "InlineAead",
        "InnetworkCollective",
        "KeyDomainSeparation",
        "Knee",
        "KvSelect",
        "Kvcache",
        "LatencyFloor",
        "LearnedGate",
        "MsjCollective",
        "MultiServer",
        "OcsReconfig",
        "OpticalRecovery",
        "Optimality",
        "Pcie",
        "PfcDeadlock",
        "PhaseBoundary",
        "PriorArtCost",
        "PublicPrefixShare",
        "ReorderAccount",
        "ReorderConst",
        "ReorderSurface",
        "ResidencyBound",
        "SaltSecrecy"
      ],
      "n_modules_unlisted": 55,
      "declarations_found": 454,
      "declarations_named": 16,
      "declaration_coverage_pct": 3.5
    },
    {
      "label": "disagg-coherence-3 (serving_limits/formal/lean)",
      "lean_dir": "serving_limits/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 42,
      "modules_listed": 1,
      "modules_unlisted": [
        "BoundedCodec",
        "CacheCeiling",
        "CapabilityEngine",
        "CertifiedElision",
        "CommBound",
        "CompressionRate",
        "ConformanceBound",
        "CostFloor",
        "CreditEssential",
        "DisaggCoherence",
        "DistillContract",
        "DppRegret",
        "EnergyFloor",
        "EssentialBits",
        "EvictionSafety",
        "HierarchicalIsolation",
        "InjectivityFloor",
        "InjectivityFloorCheck",
        "IsolationBound",
        "KDraftOT",
        "KvCodec",
        "KvFloor",
        "LeakyIsolationBound",
        "LeakyRateBound",
        "LearnedCaching",
        "LearnedCachingBound",
        "MdsOptimal",
        "PagingLowerBound",
        "RandomizedIsolator",
        "RecordFloor",
        "ReuseOptimal",
        "SecureFloor",
        "SpecOptimal",
        "StatCheck",
        "StateClassBound",
        "StructuredCapabilityEngine",
        "StructuredIsolation",
        "SubmodularCover",
        "TTEInjectivityFloor",
        "TTEPreludeCheck"
      ],
      "n_modules_unlisted": 41,
      "declarations_found": 429,
      "declarations_named": 14,
      "declaration_coverage_pct": 3.3
    },
    {
      "label": "randomized-isolator (serving_limits/formal/lean)",
      "lean_dir": "serving_limits/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 42,
      "modules_listed": 1,
      "modules_unlisted": [
        "BoundedCodec",
        "CacheCeiling",
        "CapabilityEngine",
        "CertifiedElision",
        "CommBound",
        "CompressionRate",
        "ConformanceBound",
        "CostFloor",
        "CreditEssential",
        "DisaggCoherence",
        "DisaggCoherence3",
        "DistillContract",
        "DppRegret",
        "EnergyFloor",
        "EssentialBits",
        "EvictionSafety",
        "HierarchicalIsolation",
        "InjectivityFloor",
        "InjectivityFloorCheck",
        "IsolationBound",
        "KDraftOT",
        "KvCodec",
        "KvFloor",
        "LeakyIsolationBound",
        "LeakyRateBound",
        "LearnedCaching",
        "LearnedCachingBound",
        "MdsOptimal",
        "PagingLowerBound",
        "RecordFloor",
        "ReuseOptimal",
        "SecureFloor",
        "SpecOptimal",
        "StatCheck",
        "StateClassBound",
        "StructuredCapabilityEngine",
        "StructuredIsolation",
        "SubmodularCover",
        "TTEInjectivityFloor",
        "TTEPreludeCheck"
      ],
      "n_modules_unlisted": 41,
      "declarations_found": 429,
      "declarations_named": 7,
      "declaration_coverage_pct": 1.6
    },
    {
      "label": "residency-bound (theory/lean ResidencyBound)",
      "lean_dir": "theory/lean",
      "dir_exists": true,
      "modules_in_tree": 56,
      "modules_listed": 1,
      "modules_unlisted": [
        "Backpressure",
        "BlockChainHash",
        "Bounds",
        "Checkpoint",
        "Cmu",
        "Compose",
        "ConfCollective",
        "CreditOverhead",
        "CreditSrpt",
        "CritPath",
        "Cxl",
        "CxlTier",
        "Deadline",
        "Deadlock",
        "DpuHandoff",
        "FecCredit",
        "HbmChannel",
        "InlineAead",
        "InnetworkCollective",
        "KeyDomainSeparation",
        "Knee",
        "KvSelect",
        "Kvcache",
        "LatencyFloor",
        "LearnedGate",
        "MsjCollective",
        "MultiServer",
        "OcsReconfig",
        "OpticalRecovery",
        "Optimality",
        "Pcie",
        "PfcDeadlock",
        "PhaseBoundary",
        "PriorArtCost",
        "PublicPrefixShare",
        "ReorderAccount",
        "ReorderConst",
        "ReorderSurface",
        "SaltEntropy",
        "SaltSecrecy"
      ],
      "n_modules_unlisted": 55,
      "declarations_found": 454,
      "declarations_named": 10,
      "declaration_coverage_pct": 2.2
    },
    {
      "label": "leaky-rate-bound (serving_limits/formal/lean)",
      "lean_dir": "serving_limits/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 42,
      "modules_listed": 1,
      "modules_unlisted": [
        "BoundedCodec",
        "CacheCeiling",
        "CapabilityEngine",
        "CertifiedElision",
        "CommBound",
        "CompressionRate",
        "ConformanceBound",
        "CostFloor",
        "CreditEssential",
        "DisaggCoherence",
        "DisaggCoherence3",
        "DistillContract",
        "DppRegret",
        "EnergyFloor",
        "EssentialBits",
        "EvictionSafety",
        "HierarchicalIsolation",
        "InjectivityFloor",
        "InjectivityFloorCheck",
        "IsolationBound",
        "KDraftOT",
        "KvCodec",
        "KvFloor",
        "LeakyIsolationBound",
        "LearnedCaching",
        "LearnedCachingBound",
        "MdsOptimal",
        "PagingLowerBound",
        "RandomizedIsolator",
        "RecordFloor",
        "ReuseOptimal",
        "SecureFloor",
        "SpecOptimal",
        "StatCheck",
        "StateClassBound",
        "StructuredCapabilityEngine",
        "StructuredIsolation",
        "SubmodularCover",
        "TTEInjectivityFloor",
        "TTEPreludeCheck"
      ],
      "n_modules_unlisted": 41,
      "declarations_found": 429,
      "declarations_named": 11,
      "declaration_coverage_pct": 2.6
    },
    {
      "label": "verified-kernels:BatchInvariance (verified_kernels/formal/lean)",
      "lean_dir": "verified_kernels/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 3,
      "modules_listed": 1,
      "modules_unlisted": [
        "Fp8AttnBound",
        "Fp8AttnEquiv"
      ],
      "n_modules_unlisted": 2,
      "declarations_found": 26,
      "declarations_named": 4,
      "declaration_coverage_pct": 15.4
    },
    {
      "label": "reuse-receipt (exchange_gates/formal/lean)",
      "lean_dir": "exchange_gates/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 8,
      "modules_listed": 1,
      "modules_unlisted": [
        "BillingLedger",
        "BpeTokenCount",
        "CachedTokenMeter",
        "ExchangeGate",
        "KvMarketplace",
        "PricedBilling",
        "SpotSettle"
      ],
      "n_modules_unlisted": 7,
      "declarations_found": 54,
      "declarations_named": 7,
      "declaration_coverage_pct": 13.0
    },
    {
      "label": "cap-engine (serving_limits/formal/lean)",
      "lean_dir": "serving_limits/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 42,
      "modules_listed": 1,
      "modules_unlisted": [
        "BoundedCodec",
        "CacheCeiling",
        "CertifiedElision",
        "CommBound",
        "CompressionRate",
        "ConformanceBound",
        "CostFloor",
        "CreditEssential",
        "DisaggCoherence",
        "DisaggCoherence3",
        "DistillContract",
        "DppRegret",
        "EnergyFloor",
        "EssentialBits",
        "EvictionSafety",
        "HierarchicalIsolation",
        "InjectivityFloor",
        "InjectivityFloorCheck",
        "IsolationBound",
        "KDraftOT",
        "KvCodec",
        "KvFloor",
        "LeakyIsolationBound",
        "LeakyRateBound",
        "LearnedCaching",
        "LearnedCachingBound",
        "MdsOptimal",
        "PagingLowerBound",
        "RandomizedIsolator",
        "RecordFloor",
        "ReuseOptimal",
        "SecureFloor",
        "SpecOptimal",
        "StatCheck",
        "StateClassBound",
        "StructuredCapabilityEngine",
        "StructuredIsolation",
        "SubmodularCover",
        "TTEInjectivityFloor",
        "TTEPreludeCheck"
      ],
      "n_modules_unlisted": 41,
      "declarations_found": 429,
      "declarations_named": 11,
      "declaration_coverage_pct": 2.6
    },
    {
      "label": "state-transaction (statefabric/formal/lean)",
      "lean_dir": "statefabric/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 34,
      "modules_listed": 1,
      "modules_unlisted": [
        "AsyncFabric",
        "AuthenticatedOrigin",
        "AuthoritativeReuse",
        "BranchShare",
        "BranchTxnState",
        "CMuStaging",
        "CapsuleDag",
        "ControlPlane",
        "CrossInstance",
        "DriftLedger",
        "ExactFallback",
        "ExactTransform",
        "ExactTransformCert",
        "Extract",
        "FullAdmit",
        "InjectionGate",
        "LayoutBijection",
        "LayoutBijectionGeneral",
        "LearningAugmented",
        "MemGate",
        "MlaBound",
        "OrderPreservation",
        "QuantBound",
        "QuorumCommit",
        "RemoteReadGate",
        "RolloutGate",
        "SemanticEnvelope",
        "SpecGate",
        "StateLogistics",
        "StateTransactionV2",
        "StrategicControlAxioms",
        "TenantGate",
        "TransportStateCompose"
      ],
      "n_modules_unlisted": 33,
      "declarations_found": 261,
      "declarations_named": 8,
      "declaration_coverage_pct": 3.1
    },
    {
      "label": "branch-txn (statefabric/formal/lean)",
      "lean_dir": "statefabric/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 34,
      "modules_listed": 1,
      "modules_unlisted": [
        "AsyncFabric",
        "AuthenticatedOrigin",
        "AuthoritativeReuse",
        "BranchShare",
        "CMuStaging",
        "CapsuleDag",
        "ControlPlane",
        "CrossInstance",
        "DriftLedger",
        "ExactFallback",
        "ExactTransform",
        "ExactTransformCert",
        "Extract",
        "FullAdmit",
        "InjectionGate",
        "LayoutBijection",
        "LayoutBijectionGeneral",
        "LearningAugmented",
        "MemGate",
        "MlaBound",
        "OrderPreservation",
        "QuantBound",
        "QuorumCommit",
        "RemoteReadGate",
        "RolloutGate",
        "SemanticEnvelope",
        "SpecGate",
        "StateLogistics",
        "StateTransaction",
        "StateTransactionV2",
        "StrategicControlAxioms",
        "TenantGate",
        "TransportStateCompose"
      ],
      "n_modules_unlisted": 33,
      "declarations_found": 261,
      "declarations_named": 11,
      "declaration_coverage_pct": 4.2
    },
    {
      "label": "selective-recovery (fabric_gates/formal/lean)",
      "lean_dir": "fabric_gates/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 6,
      "modules_listed": 1,
      "modules_unlisted": [
        "CheckpointLiveness",
        "CxlDirectory",
        "FabricCore",
        "MoECongestion",
        "MoEPredictive"
      ],
      "n_modules_unlisted": 5,
      "declarations_found": 49,
      "declarations_named": 10,
      "declaration_coverage_pct": 20.4
    },
    {
      "label": "confidential-offload (confidential_offload/formal/lean)",
      "lean_dir": "confidential_offload/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 2,
      "modules_listed": 2,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 13,
      "declarations_named": 8,
      "declaration_coverage_pct": 61.5
    },
    {
      "label": "reuse-control (reuse_control/formal/lean)",
      "lean_dir": "reuse_control/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 2,
      "modules_listed": 2,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 13,
      "declarations_named": 13,
      "declaration_coverage_pct": 100.0
    },
    {
      "label": "crypto-erasure (crypto_erasure/formal/lean)",
      "lean_dir": "crypto_erasure/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 1,
      "modules_listed": 1,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 10,
      "declarations_named": 8,
      "declaration_coverage_pct": 80.0
    },
    {
      "label": "data-residency (data_residency/formal/lean)",
      "lean_dir": "data_residency/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 1,
      "modules_listed": 1,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 7,
      "declarations_named": 6,
      "declaration_coverage_pct": 85.7
    },
    {
      "label": "agent-lineage (agent_lineage/formal/lean)",
      "lean_dir": "agent_lineage/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 1,
      "modules_listed": 1,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 6,
      "declarations_named": 5,
      "declaration_coverage_pct": 83.3
    },
    {
      "label": "write-isolation (write_isolation/formal/lean)",
      "lean_dir": "write_isolation/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 1,
      "modules_listed": 1,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 6,
      "declarations_named": 5,
      "declaration_coverage_pct": 83.3
    },
    {
      "label": "weight-extraction (weight_extraction/formal/lean)",
      "lean_dir": "weight_extraction/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 1,
      "modules_listed": 1,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 8,
      "declarations_named": 5,
      "declaration_coverage_pct": 62.5
    },
    {
      "label": "compliance-plane (compliance_plane/formal/lean)",
      "lean_dir": "compliance_plane/formal/lean",
      "dir_exists": true,
      "modules_in_tree": 1,
      "modules_listed": 1,
      "modules_unlisted": [],
      "n_modules_unlisted": 0,
      "declarations_found": 8,
      "declarations_named": 9,
      "declaration_coverage_pct": 112.5
    },
    {
      "label": "tenant-partition close (theory/lean TenantPartition)",
      "lean_dir": "theory/lean",
      "dir_exists": true,
      "modules_in_tree": 56,
      "modules_listed": 1,
      "modules_unlisted": [
        "Backpressure",
        "BlockChainHash",
        "Bounds",
        "Checkpoint",
        "Cmu",
        "Compose",
        "ConfCollective",
        "CreditOverhead",
        "CreditSrpt",
        "CritPath",
        "Cxl",
        "CxlTier",
        "Deadline",
        "Deadlock",
        "DpuHandoff",
        "FecCredit",
        "HbmChannel",
        "InlineAead",
        "InnetworkCollective",
        "KeyDomainSeparation",
        "Knee",
        "KvSelect",
        "Kvcache",
        "LatencyFloor",
        "LearnedGate",
        "MsjCollective",
        "MultiServer",
        "OcsReconfig",
        "OpticalRecovery",
        "Optimality",
        "Pcie",
        "PfcDeadlock",
        "PhaseBoundary",
        "PriorArtCost",
        "PublicPrefixShare",
        "ReorderAccount",
        "ReorderConst",
        "ReorderSurface",
        "ResidencyBound",
        "SaltEntropy"
      ],
      "n_modules_unlisted": 55,
      "declarations_found": 454,
      "declarations_named": 19,
      "declaration_coverage_pct": 4.2
    },
    {
      "label": "essentiality-atlas (theory/lean UalinkAtlas+UecAtlas+UalinkAtlas2)",
      "lean_dir": "theory/lean",
      "dir_exists": true,
      "modules_in_tree": 56,
      "modules_listed": 4,
      "modules_unlisted": [
        "Backpressure",
        "BlockChainHash",
        "Bounds",
        "Checkpoint",
        "Cmu",
        "Compose",
        "ConfCollective",
        "CreditOverhead",
        "CreditSrpt",
        "CritPath",
        "Cxl",
        "CxlTier",
        "Deadline",
        "Deadlock",
        "DpuHandoff",
        "FecCredit",
        "HbmChannel",
        "InlineAead",
        "InnetworkCollective",
        "KeyDomainSeparation",
        "Knee",
        "KvSelect",
        "Kvcache",
        "LatencyFloor",
        "LearnedGate",
        "MsjCollective",
        "MultiServer",
        "OcsReconfig",
        "OpticalRecovery",
        "Optimality",
        "Pcie",
        "PfcDeadlock",
        "PhaseBoundary",
        "PriorArtCost",
        "PublicPrefixShare",
        "ReorderAccount",
        "ReorderConst",
        "ReorderSurface",
        "ResidencyBound",
        "SaltEntropy"
      ],
      "n_modules_unlisted": 52,
      "declarations_found": 454,
      "declarations_named": 21,
      "declaration_coverage_pct": 4.6
    }
  ],
  "verdict": "The banner asserts ALL marquee theorems are axiom-clean. The set it ranges over is a hand-written Python literal naming **606 declarations**, against **1642 theorem/lemma declarations** textually present in the same Lean directories -- **36.9% coverage** -- and 116 of 203 modules. Every named theorem really is checked; the defect is the quantifier. A universal claim backed by a hand-maintained list is true only while the list is fresh, and nothing in the estate tests that. A theorem added to an already-checked module after the literal was last edited falls silently outside the banner.",
  "does_not_prove": [
    "Declaration counting is TEXTUAL. It over-counts relative to a lake-aware tool (comments, strings and doc examples can match) and under-counts declarations produced by macros or elaborators. Treat the coverage percentage as an ORDER OF MAGNITUDE, not a figure. The estate's own orphan-theorem tooling makes the same declaration about itself.",
    "It does NOT dispute that the named theorems are axiom-clean. Every name in CORPORA is checked by the generator and this tool did not re-check any of them. The finding is about the QUANTIFIER in the banner, not the proofs.",
    "Only the directories CORPORA names are examined. Lean corpora elsewhere in the estate -- statefabric/hunt3/lean, statefabric/optimizer/refine (which has no lakefile and is UNAUDITABLE) -- are outside this measurement entirely, so the true coverage across all Lean in the estate is LOWER than reported here."
  ],
  "cost_usd": 0.0,
  "generated_utc": "2026-08-28T00:53:12.407264+00:00",
  "git_rev": "24e1374",
  "git_dirty": true,
  "run_id": "f95f9fa64356434b",
  "host_kind": "Darwin-arm64",
  "provenance_schema": "gpu-cert-provenance/1"
}