{ "protocol": { "name": "CVP", "version": "1.0.0-proposed", "revision": "2026-09-13", "spec_sha256": "f62725968356c92930531cd6085db76e216da06e95be53d636b0d2cf3218b148", "spec": "https://www.calculatorx.com/developers/cvp/spec/1.0" }, "document_status": "proposed", "calculator": { "id": "multiplication", "version": "1.0.4", "title": "Multiplication Calculator", "formula_family": "multiplication", "capability_id": "math.multiplication", "verification_revision": "2026-10-22.multiplication-complete-contract-v6" }, "profile": "core", "status": "STALE", "verification_status": "VERIFIED", "production_freshness": "STALE", "overall_trust": "VERIFIED_STALE", "runner": { "name": "cvp-runner", "version": "1.0.0" }, "environment": { "runtime": "node", "runtime_version": "22.20.0", "numeric_model": "exact_decimal", "os": "darwin" }, "suite": { "id": "multiplication", "version": "1.0.4", "uri": "https://www.calculatorx.com/evidence/math.multiplication/1.0.4.json", "verification_revision": "2026-10-22.multiplication-complete-contract-v6" }, "obligation_set": [ "CVP-PROV-01", "CVP-MODEL-01", "CVP-SCOPE-01", "CVP-UNIT-01", "CVP-REF-01", "CVP-GOLD-01", "CVP-BND-01", "CVP-INV-01", "CVP-NUM-01", "CVP-COV-01", "CVP-CONTRACT-01", "CVP-DEP-01", "CVP-ART-01", "CVP-PROD-01", "CVP-PROP-01", "CVP-META-01", "CVP-ROUND-01", "CVP-IFACE-01" ], "provenance": { "mode": "direct", "sources": [ { "label": "CalculatorX mathematical conventions", "kind": "other", "reference": "Exact decimal place-count multiplication" }, { "label": "Margaret Stevens — The Maths Workbook (University of Oxford)", "kind": "other", "reference": "Chapter 1, §1: Algebraic Expressions and Fractions; §3: Equations", "url": "https://www.some.ox.ac.uk/wp-content/uploads/2024/08/Maths-Workbook.pdf" } ] }, "controls": { "CVP-PROV-01": { "result": "PASS", "applicability": "required", "notes": "Sources present on evidence" }, "CVP-MODEL-01": { "result": "PASS", "applicability": "required", "notes": "exact decimal mantissa × BigInt; acceptance is productStr identity" }, "CVP-SCOPE-01": { "result": "PASS", "applicability": "required", "notes": "product or long mode; shared exact path; long steps independently reconstructed" }, "CVP-UNIT-01": { "result": "PASS", "applicability": "required", "notes": "dimensionless" }, "CVP-REF-01": { "result": "PASS", "applicability": "required", "notes": "O1 model + O2 expected_values/numerical_behavior (mantissa×BigInt dual-checked against per-digit partials; exact_equality; same_runtime_as_iut)" }, "CVP-GOLD-01": { "result": "PASS", "applicability": "required", "notes": "10/10 legacy golden; 178/178 oracle-backed numeric" }, "CVP-BND-01": { "result": "PASS", "applicability": "required", "notes": "5/5 CVP boundary · 5/5 legacy Evidence boundary" }, "CVP-INV-01": { "result": "PASS", "applicability": "required", "notes": "4 Evidence illegal-input + 12/12 oracle-backed error-code (exact_error_match, not ULP)" }, "CVP-NUM-01": { "result": "PASS", "applicability": "required", "notes": "exact_decimal · mantissa × BigInt · exact_equality (actual exact decimal string === independent oracle exact decimal string); mismatches=0; ULP not applicable" }, "CVP-COV-01": { "result": "PASS", "applicability": "required", "notes": "Declared partitions: product, long, long-grid, digit-bound, invalid-domain. Counts alone are not the claim." }, "CVP-CONTRACT-01": { "result": "PASS", "applicability": "required", "notes": "5/5 CVP contract · release-artifacts-aligned=PASS · schema-output-required-declared=PASS · schema-valid-input-executes=PASS · engine-success-output-validates-schema=PASS · rest-success-payload-validates-schema=PASS" }, "CVP-DEP-01": { "result": "PASS", "applicability": "required", "notes": "engine multiplication; exact_decimal mantissa × BigInt (IUT/O2). Node is a runtime dependency, not the numeric model" }, "CVP-ART-01": { "result": "PASS", "applicability": "required", "notes": "release_integrity.status=verified · digests: artifact_evidence_sha256=Evidence core (Trust freshness) · cvp_evidence_digest=artifacts.evidence_digest (fingerprint v2) · evidence_bundle_sha256=legacy Evidence JSON bytes · evidence_catalog_digest=attested_catalog_sha256 · production_sha256=bound production report · see artifacts.digest_registry" }, "CVP-PROD-01": { "result": "PASS", "applicability": "required", "notes": "Capability production binding: STALE · Site report: stale · STALE (freshness / digest drift after last PASS snapshot) · site report stale · local checks pass · local production checks PASS; capability production binding is not CURRENT — final status must stay STALE, not VERIFIED · attestation_id=cb614f6316a4a99e61eb83d940f937a7c264e05cb52f3e289bd091d67fdff824 · Capability production binding: STALE · Site report: STALE · Public schema 1.0.4 observed · production binding STALE · Semantic contract ✓ · Last attestation PASS · Evidence changed after the last successful production attestation. Re-attestation required. · Public/cache ✓ · Origin ✓ · schema_const=1.0.4 · report output-const=pass · evidence-sha256=pass · semantic-contract=pass · capability-html-public-origin-agree=pass · cvp-manifest-public-origin-agree=pass · cvp-latest-alias-agrees=pass · cvp-immutable-manifest-fetch=pass · cvp-immutable-manifest-sha256=pass · cvp-latest-alias-matches-immutable=pass · calculator-html-cvp-projection=pass · evidence-html-cvp-projection=pass · attested_evidence_sha256=7c83e318abf41b280fd1a6c860fa53b512cf36456702de13f93c9f6aaf70ab30 · verified_at=2026-10-22T04:49:21.997Z · evidence_attested_at=2026-10-22T04:49:21.997Z · last_confirmed_current_at=2026-10-22T04:49:21.997Z · rendered_at=2026-10-22T04:50:18.422Z · binds=cvp_core_sha256 · Capability production binding: STALE · Site report: STALE · Evidence changed after the last successful production attestation. Re-attestation required.", "check_result": "PASS", "production_state": "STALE", "binding_current": false }, "CVP-DIM-01": { "result": "SKIP", "applicability": "not_applicable", "notes": "Unitless core calculator — no physical dimension algebra" }, "CVP-PROP-01": { "result": "PASS", "applicability": "applicable", "notes": "6/6 property" }, "CVP-META-01": { "result": "PASS", "applicability": "applicable", "notes": "2/2 metamorphic" }, "CVP-ROUND-01": { "result": "PASS", "applicability": "applicable", "notes": "2/2 round-trips" }, "CVP-XCAL-01": { "result": "SKIP", "applicability": "not_applicable", "notes": "No related calculator in the same formula family / no related-identity peers declared — control not in obligation set" }, "CVP-IFACE-01": { "result": "PASS", "applicability": "applicable", "notes": "UI (SSR) · REST · MCP equivalent (MCP uses calc API handler). ui-ssr is query-result HTML, not a live browser session." }, "CVP-ORACLE-01": { "result": "SKIP", "applicability": "higher_assurance", "notes": "O2 present; O3 not required this wave" }, "CVP-EXP-01": { "result": "SKIP", "applicability": "optional", "notes": "named expert review not performed" } }, "interfaces": { "compared": [ "ui-ssr", "rest", "mcp" ], "result": "PASS", "notes": "UI (SSR) · REST · MCP equivalent (MCP uses calc API handler). ui-ssr is query-result HTML, not a live browser session." }, "artifacts": { "evidence_bundle_sha256": "89ffd656942b92d20d070336e0f757b616b4230e09f0b61b15a954b2b5aafac4", "evidence_digest": "910f65596060d87714b60fd12920f7aec2a380186192dbcff56a401077ad33cb", "production_sha256": "7c83e318abf41b280fd1a6c860fa53b512cf36456702de13f93c9f6aaf70ab30", "attested_catalog_sha256": "9b96a2c8fbf62a8306adee80ae161d6b6eeb7d64addac11a3cc4670eb22d2635", "production_checks": [ { "id": "math.multiplication:output-const", "status": "pass", "detail": "output const 1.0.3 vs capability 1.0.3", "scope": "last_attestation_snapshot", "current": false, "attestation_binding_current": false, "attested_at": "2026-10-22T04:49:21.997Z" }, { "id": "math.multiplication:evidence-sha256", "status": "pass", "detail": "78ad611408f2", "scope": "last_attestation_snapshot", "current": false, "attestation_binding_current": false, "attested_at": "2026-10-22T04:49:21.997Z" }, { "id": "math.multiplication:semantic-contract", "status": "pass", "detail": "15/15", "scope": "last_attestation_snapshot", "current": false, "attestation_binding_current": false, "attested_at": "2026-10-22T04:49:21.997Z" }, { "id": "math.multiplication:capability-html-public-origin-agree", "status": "pass", "detail": "public 1.0.3 vs origin 1.0.3", "scope": "last_attestation_snapshot", "current": false, "attestation_binding_current": false, "attested_at": "2026-10-22T04:49:21.997Z" }, { "id": "math.multiplication:cvp-manifest-public-origin-agree", "status": "pass", "detail": "math.multiplication/1.0.4/2026-10-22.multiplication-complete-contract-v6/core/910f65596060", "scope": "last_attestation_snapshot", "current": false, "attestation_binding_current": false, "attested_at": "2026-10-22T04:49:21.997Z", "projection_compared": false }, { "id": "math.multiplication:cvp-latest-alias-agrees", "status": "pass", "detail": "math.multiplication/1.0.4/2026-10-22.multiplication-complete-contract-v6/core/910f65596060", "scope": "last_attestation_snapshot", "current": false, "attestation_binding_current": false, "attested_at": "2026-10-22T04:49:21.997Z", "projection_compared": false }, { "id": "math.multiplication:cvp-immutable-manifest-fetch", "status": "pass", "detail": "public=200 origin=200", "scope": "last_attestation_snapshot", "current": false, "attestation_binding_current": false, "attested_at": "2026-10-22T04:49:21.997Z" }, { "id": "math.multiplication:cvp-immutable-manifest-sha256", "status": "pass", "detail": "7a9319794cf7", "scope": "last_attestation_snapshot", "current": false, "attestation_binding_current": false, "attested_at": "2026-10-22T04:49:21.997Z" }, { "id": "math.multiplication:cvp-latest-alias-matches-immutable", "status": "pass", "detail": "math.multiplication/1.0.4/2026-10-22.multiplication-complete-contract-v6/core/910f65596060", "scope": "last_attestation_snapshot", "current": false, "attestation_binding_current": false, "attested_at": "2026-10-22T04:49:21.997Z", "projection_compared": false }, { "id": "math.multiplication:calculator-html-cvp-projection", "status": "pass", "detail": "matches Trust display", "scope": "last_attestation_snapshot", "current": false, "attestation_binding_current": false, "attested_at": "2026-10-22T04:49:21.997Z" }, { "id": "math.multiplication:evidence-html-cvp-projection", "status": "pass", "detail": "matches Trust display", "scope": "last_attestation_snapshot", "current": false, "attestation_binding_current": false, "attested_at": "2026-10-22T04:49:21.997Z" } ], "digest_registry": { "digest_algorithm": "sha256", "canonicalization": "json-sorted-keys-utf8", "entries": [ { "name": "cvp_core_sha256", "field": "artifacts.cvp_core_sha256", "digest_scope": "cvp_verification_fingerprint_v2", "value": "910f65596060d87714b60fd12920f7aec2a380186192dbcff56a401077ad33cb", "note": "Immutable verification core; excludes attestation/live-status and Evidence contract counts" }, { "name": "cvp_evidence_digest", "field": "artifacts.evidence_digest", "digest_scope": "cvp_verification_fingerprint_v2", "value": "910f65596060d87714b60fd12920f7aec2a380186192dbcff56a401077ad33cb", "note": "Alias of cvp_core_sha256 (historical field name)" }, { "name": "artifact_evidence_sha256", "field": "release_integrity.digests.evidence_core_sha256", "digest_scope": "evidence_artifact_core", "value": "dec6308790c26b8d47dcaa993b7c6d6e056f98ddfa7c9eebcd721ef6a19f9aab", "note": "Published Evidence JSON core — Trust freshness / production bind subject" }, { "name": "evidence_catalog_digest", "field": "artifacts.attested_catalog_sha256", "digest_scope": "capability_catalog", "value": "9b96a2c8fbf62a8306adee80ae161d6b6eeb7d64addac11a3cc4670eb22d2635", "note": "Capability catalog integrity; site-wide, not per-suite fingerprint" } ] }, "cvp_core_sha256": "910f65596060d87714b60fd12920f7aec2a380186192dbcff56a401077ad33cb" }, "dependencies": [ { "name": "multiplication-engine", "version": "1.0.4" }, { "name": "multiplication-reference-oracle", "version": "1.0.0" }, { "name": "node", "version": "22.20.0" } ], "attestation": { "status": "STALE", "href": "/.well-known/calculatorx-production-attestation.json", "id": "cb614f6316a4a99e61eb83d940f937a7c264e05cb52f3e289bd091d67fdff824", "attested_at": "2026-10-22T04:49:21.997Z", "last_confirmed_current_at": "2026-10-22T04:49:21.997Z", "site_attestation_current": false, "capability_attestation_current": false, "bound_snapshot_status": "pass", "live_report_status": "stale", "bound_attested_at": "2026-10-21T08:56:09.611Z", "live_updated_at": "2026-10-22T04:49:22.337Z", "bound_snapshot": { "status": "pass", "attested_at": "2026-10-21T08:56:09.611Z", "site_stale_count": 4 }, "live_site_status": { "href": "/.well-known/calculatorx-production-attestation.json" }, "bound_snapshot_site_stale_count": 4, "site_stale_capability_count": 4, "stale_reason": "Capability production binding: STALE · Site report: STALE · Evidence changed after the last successful production attestation. Re-attestation required.", "evidence_attested_at": "2026-10-22T04:49:21.997Z" }, "domain_review": { "status": "ABSENT", "spec_version": "1.0.4", "external_third_party": false, "note": "Named expert review not performed" }, "timestamps": { "verified_at": "2026-10-22T04:49:21.997Z", "generated_at": "2026-10-22T04:49:21.997Z", "rendered_at": "2026-10-22T04:50:18.422Z", "notes": "verified_at/generated_at mark the first publication of this cvp_core_sha256 (artifacts.evidence_digest alias) for suite verification. evidence_attested_at/attested_at is the first production bind of that core digest. last_confirmed_current_at is the latest site-wide report that still confirms CURRENT. rendered_at is this JSON serialization and is not part of cvp_core_sha256 / evidence_digest. Production attestation binds cvp_core_sha256 (binds evidence_digest). Causal order: verified_at ≤ evidence_attested_at ≤ last_confirmed_current_at. attestation.bound_snapshot.site_stale_count is the site-wide stale capability count at Manifest bind time — not a live value. Fetch attestation.live_site_status.href for the current site report." }, "tests": { "golden": { "passed": 178, "total": 178, "failed": 0 }, "boundary": { "passed": 5, "total": 5, "failed": 0 }, "invalid": { "passed": 16, "total": 16, "failed": 0, "comparison": "exact_error_match" }, "property": { "passed": 6, "total": 6, "failed": 0 }, "round_trip": { "passed": 2, "total": 2, "failed": 0 }, "metamorphic": { "passed": 2, "total": 2, "failed": 0 }, "contract": { "passed": 5, "total": 5, "failed": 0 }, "cross_interface": { "passed": 3, "total": 3, "failed": 0 } }, "numerical": { "representation": "exact_decimal", "tolerance": { "type": "exact", "value": 0, "declared_before_evaluation": true, "rationale": "Multiplication is exact decimal (integer mantissa × scale). Acceptance is productStr identity vs an O2 module that dual-checks mantissa×BigInt against the sum of per-digit BigInt partials. Comparison is exact_equality; ULP is not applicable. Node/V8 is a runtime dependency, not the numeric model. Declared a priori." }, "claim_scope": "166 independent CPython Decimal/integer vectors compare complete six-field packs including full text work. Additional legacy vectors use O2 mantissa×BigInt dual-checked against per-digit BigInt partials. Long vectors also require IUT work to contain those partials, or LONG_GRID_TRUNCATED at 25 digits. 48 significant digits per factor; 49-digit factors are rejected. This is not a whole-domain proof beyond the published vectors.", "profile": "exact_decimal", "arithmetic": "mantissa × BigInt", "comparison": "exact_equality", "criterion": "actual exact decimal string === independent oracle exact decimal string", "exact_policy": true, "ulp_applicable": false, "exact_mismatches": 0 }, "coverage": { "partitions": [ { "id": "product", "description": "Product mode exact decimal, including 0.1 × 0.2", "exercised": true, "case_count": 94 }, { "id": "long", "description": "Long multiplication steps: carry, zero digit, decimals, signs", "exercised": true, "case_count": 31 }, { "id": "long-grid", "description": "Long visual grid 24-digit shown / 25-digit LONG_GRID_TRUNCATED", "exercised": true, "case_count": 61 }, { "id": "digit-bound", "description": "48-digit factors accepted; 49-digit TOO_MANY_DIGITS", "exercised": true, "case_count": 17 }, { "id": "invalid-domain", "description": "Invalid inputs", "exercised": true, "case_count": 16 } ] }, "reference": { "items": [ { "class": "O1", "reference_scope": "model", "scope": "model", "label": "Product of two decimals" }, { "class": "O2", "reference_scope": "expected_values", "scope": "expected_values", "label": "Separate-module multiplication oracle — independent mantissa×BigInt product dual-checked against per-digit BigInt partials (same runtime as IUT; not IUT transcription)", "engine": { "name": "multiplication-reference", "numeric_model": "exact_decimal", "criterion": "actual exact decimal string === independent oracle exact decimal string", "independent_of_iut": true, "same_runtime_as_iut": true } }, { "class": "O2", "reference_scope": "numerical_behavior", "scope": "numerical_behavior", "label": "Same O2 module backs exact productStr identity and Long partial-product strings vs IUT — exact_equality, ULP not applicable", "engine": { "name": "multiplication-reference", "numeric_model": "exact_decimal", "criterion": "actual exact decimal string === independent oracle exact decimal string", "independent_of_iut": true, "same_runtime_as_iut": true } } ] }, "links": { "legacy_evidence": "https://www.calculatorx.com/evidence/math.multiplication/1.0.4.json", "evidence_page": "https://www.calculatorx.com/evidence/math.multiplication/1.0.4", "calculator": "https://www.calculatorx.com/calc/math/multiplication", "schema": "https://www.calculatorx.com/developers/cvp/schema/cvp-evidence-1.0.json", "protocol": "https://www.calculatorx.com/developers/cvp/spec/1.0", "manifest": "https://www.calculatorx.com/evidence/math.multiplication/1.0.4.cvp.json", "manifest_immutable": "https://www.calculatorx.com/evidence/math.multiplication/1.0.4/2026-10-22.multiplication-complete-contract-v6.cvp.json", "manifest_core": "https://www.calculatorx.com/evidence/math.multiplication/1.0.4/2026-10-22.multiplication-complete-contract-v6.910f65596060.cvp.json" }, "disclosure": { "policy": "calculatorx-public-evidence-v1", "full_validation": "private", "representation": "summary" } }