Installation

Get started with CCF

CCF is available as a Rust crate on crates.io. It compiles to no_std targets including embedded ARM and WASM appliance tiles.

Cargo install

Cargo.toml
[dependencies]
ccf-core = "1.0.1"

Or via the CLI: cargo add ccf-core

Published packages

ccf-coreno_std library for QAC trust updates and runtime-certificate primitives.
ccf-agentstd runtime service exposing /state, /kappa-stream, /partition, and /certificate for Gate C evidence.
Install runtime service
cargo install ccf-agent --version 1.0.1

Quick start

src/main.rs
use ccf_core::kappa::{certify_update, CertificateInputs, KappaCertificateStatus};
use ccf_core::qac::{qac_update_3x3, Matrix3, PositiveDiagonal3, QacInputs3};

fn main() {
    let prior_a_t = Matrix3::new([
        [0.90, 1.10, 0.80],
        [1.05, 0.95, 1.20],
        [0.85, 1.15, 1.00],
    ]);
    let reference_r_t = Matrix3::new([
        [1.02, 1.04, 0.98],
        [1.01, 1.03, 1.00],
        [0.99, 1.05, 1.02],
    ]);
    let alpha_t = 0.32;

    let realized_a_next = qac_update_3x3(&QacInputs3 {
        prior_a_t,
        reference_r_t,
        left_l_t: PositiveDiagonal3::try_new([1.0, 1.0, 1.0]).expect("positive left gauge"),
        right_c_t: PositiveDiagonal3::try_new([1.0, 1.0, 1.0]).expect("positive right gauge"),
        alpha_t,
        epsilon_floor: 1.0e-12,
    })
    .expect("canonical QAC update");

    let certificate = certify_update(&CertificateInputs {
        tick_id: 1,
        prior_a_t,
        reference_r_t,
        realized_a_next,
        alpha_t,
        delta_alpha_t: 0.01,
        epsilon_q: 1.0e-4,
        policy_margin: 5.0e-4,
    })
    .expect("runtime certificate");

    assert_eq!(
        certificate.certificate_status,
        KappaCertificateStatus::WithinDynamicFloor
    );
    assert!(!certificate.fail_closed);
}
Integration target

mBot2 — reference robot path

The mBot2 remains the reference robot integration path. The published v1 claim is narrower: `ccf-core` computes the trust-update and certificate primitives, and `ccf-agent` ran the computed runtime on real Seed-class ARM hardware with driver-fed input. A public v1 mBot2 earned-trust demo is not claimed here.

Cargo.toml — current v1 crate
[dependencies]
ccf-core = "1.0.1"

Source: github.com/Hulupeep/CCF — see crates/mbot-companion

Evidence and limits

What v1 proves

The computed runtime was exercised on real Seed-class ARM hardware by Gate C. That evidence supports driver-fed runtime certificate execution, not live sensor ingestion, direct device-store validation, universal safety, or production appliance readiness.

Gate C marker
on_device_computed_certificate=PASS kappa_hat<1e-6 C_eff+E_t_evolve cross_consistent=PASS