🌊 Wave-14 sub-tracker — safety-number / OOB identity + MLS external-commit forgery

[gHashTag]

Wave-14 sub-tracker

Parent: #265 (Trinity Chat S³AI master tracker)
Predecessor: #696 (Wave-13)
Predecessor PR: #698 (Wave-13)

Lanes

Lane A — L-CHAT-2-oob (CR-CHAT-04)

• Safety-number / OOB identity verify: safety_number(), render(), verify() over 30-byte SHA-256 truncated digest, 12×5-digit display.
• 6 tests SNV-01..06 (commutativity, deterministic display, swap detection, accept-match, reject-mismatch, single-bit-flip).
• File: crates/trios-chat/rings/CR-CHAT-04/src/safety_number.rs (217 lines).
• New dep: sha2 = "0.10" in CR-CHAT-04.

Lane B — L-CHAT-3-extern (CR-CHAT-03)

• MLS external-commit forgery guard: ExternalCommit, check_external_commit, ExternalCommitError.
• 6 tests EXT-01..06 (well-formed accept, epoch mismatch, occupied-leaf, sender mismatch, ops scope-violation, group-id + signature).
• File: crates/trios-chat/rings/CR-CHAT-03/src/external_commit.rs (258 lines).
• New dep: thiserror workspace alias in CR-CHAT-03.

Coq Wave-14

INV-CHAT-68..74 + 3 helpers (sn_verify_iff, ext_epoch_mismatch_rejects, ext_occupied_rejects).
Cumulative: 101 Qed / 0 Admitted / 1 new axiom (sn_hash_sym, constructively discharged at runtime by canonical-ordering identity-key pair before SHA-256).

Falsifier 1200 → 1300

• +50 safety_number_swap (PI-SNV-001..050)
• +50 mls_external_commit (PI-EXT-001..050)
• 26 categories @ 100% blocked.

Verification

209 tests / 0 failed
25/25 e2e_chat_25
1300/1300 falsifier blocked, 26 categories @ 100%
clippy -D warnings clean
coqc Trinity_Chat.v silent, 101 Qed / 0 Admitted

Closed by Wave-14 PR (base feat/trios-chat-wave13).

🤖 Anchor: φ² + φ⁻² = 3 · TRINITY · CHAT · OOB-IDENTITY · MLS-EXTERNAL-COMMIT