github.com/aakash4dev/cometbft@v0.38.2/spec/ivy-proofs/README.md (about)

     1  # Ivy Proofs
     2  
     3  ```copyright
     4  Copyright (c) 2020 Galois, Inc.
     5  SPDX-License-Identifier: Apache-2.0
     6  ```
     7  
     8  ## Contents
     9  
    10  This folder contains:
    11  
    12  * `tendermint.ivy`, a specification of Tendermint algorithm as described in *The latest gossip on BFT consensus* by E. Buchman, J. Kwon, Z. Milosevic.
    13  * `abstract_tendermint.ivy`, a more abstract specification of Tendermint that is more verification-friendly.
    14  * `classic_safety.ivy`, a proof that Tendermint satisfies the classic safety property of BFT consensus: if every two quorums have a well-behaved node in common, then no two well-behaved nodes ever disagree.
    15  * `accountable_safety_1.ivy`, a proof that, assuming every quorum contains at least one well-behaved node, if two well-behaved nodes disagree, then there is evidence demonstrating at least f+1 nodes misbehaved.
    16  * `accountable_safety_2.ivy`, a proof that, regardless of any assumption about quorums, well-behaved nodes cannot be framed by malicious nodes. In other words, malicious nodes can never construct evidence that incriminates a well-behaved node.
    17  * `network_shim.ivy`, the network model and a convenience `shim` object to interface with the Tendermint specification.
    18  * `domain_model.ivy`, a specification of the domain model underlying the Tendermint specification, i.e. rounds, value, quorums, etc.
    19  
    20  All specifications and proofs are written in [Ivy](https://github.com/kenmcmil/ivy).
    21  
    22  The license above applies to all files in this folder.
    23  
    24  
    25  ## Building and running
    26  
    27  The easiest way to check the proofs is to use [Docker](https://www.docker.com/).
    28  
    29  1. Install [Docker](https://docs.docker.com/get-docker/) and [Docker Compose](https://docs.docker.com/compose/install/).
    30  2. Build a Docker image: `docker-compose build`
    31  3. Run the proofs inside the Docker container: `docker-compose run
    32  tendermint-proof`. This will check all the proofs with the `ivy_check`
    33  command and write the output of `ivy_check` to a subdirectory of `./output/'