/** * Vigil True Submission System — Zero Hallucination Guarantee * * Anti-hallucination architecture: every submission must pass through * 5 mandatory verification gates before being considered valid. * * Gate 1: SOURCE — Primitive must reference a real CVE or verified crash dump * Gate 2: REPRODUCE — Primitive must be reproduced in sandbox (≥20 runs) * Gate 3: CHAIN — Chain edges must have compatScore ≥ 0.7 (not just keyword match) * Gate 4: GRADE — Chain must reach END_TO_END_REPRODUCED (not just conceptual) * Gate 5: VALIDATE — Submission must pass all 8 validation checks * * Any gate failure → submission rejected. No exceptions. No "model confidence" * bypasses evidence. No "the model says 99%" without sandbox reproduction. * * Verified submission engine for authorized targets. */ import { type ExploitPrimitive, type ExploitChain } from '../core/exploitChaining.js'; import { type BountyTarget, type BountySubmission } from '../core/bugBounty.js'; export type GateName = 'SOURCE' | 'REPRODUCE' | 'CHAIN' | 'GRADE' | 'VALIDATE'; export interface GateResult { gate: GateName; passed: boolean; detail: string; evidence?: string; timestamp: number; } export interface VerifiedSubmission { id: string; target: BountyTarget; primitives: ExploitPrimitive[]; chain: ExploitChain | null; gates: GateResult[]; submission: BountySubmission | null; ready: boolean; failureReason?: string; verifiedAt: number; estimatedPayout: number; } export declare class TrueSubmissionEngine { private verifySource; private verifyReproduce; private verifyChain; private verifyGrade; private verifyValidate; /** * Create a TRUE submission — only passes if ALL 5 gates pass. * Any gate failure → submission rejected with detailed reason. * Zero hallucination guarantee: every gate requires verifiable evidence. */ createTrueSubmission(target: BountyTarget, cveIds: string[]): VerifiedSubmission; /** Check if a CVE exists in the real database */ isValidCve(cveId: string): boolean; /** List all known CVEs */ listCves(): string[]; /** Get CVE data */ getCveData(cveId: string): { cve: string; class: ExploitPrimitive["class"]; pre: Record; post: Record; affected: string[]; cvss: number; }; } export declare function createTrueSubmissions(targets: BountyTarget[], cveChains: string[][]): VerifiedSubmission[]; export declare const PREVERIFIED_CHAINS: Record; export declare const trueSubmission: { engine: () => TrueSubmissionEngine; preverifiedChains: Record; createTrueSubmissions: typeof createTrueSubmissions; }; //# sourceMappingURL=trueSubmission.d.ts.map