credkellar/monaddb-re
A synthetic MonadDB + paywall RE lab: proves plain DB tickets fail (95/100), signed proofs hold (5).
79
credkellar/monaddb-re repository overview
🗄️ MonadDB-RE
🧪 A synthetic, defensive reverse-engineering lab: a pretend MonadDB (Merkle-Patricia trie, MDB1 dumps, root recompute) fused with six paywall mechanisms — built to answer one question with proof: what happens when the paywall's entitlement ticket lives inside the database itself?
⚖️ The verdict, proven with numbers
| Entitlement design | Bypass score | Verdict |
|---|---|---|
| 📄 Plain leaf in the DB (client-trusted) | 95 / 100 | ❌ Forgeable — anyone holding the DB rewrites it |
| 🔢 Rollbackable counter leaf | 90 / 100 | ❌ Client-trusted — roll it back, replay it |
| 🔐 Signed proof checked against the server root | 5 / 100 | ✅ Sound — the stamp can't be forged |
🧩 What is inside
- 🗄️ Synthetic MonadDB — MPT storage, MDB1 dump files, independent root recomputation
- 🚪 Six paywall mechanisms — the classic doors, rebuilt as synthetic samples
- 🧠 Two brains — Gemini Carbon 4 Extended Thinking (DECIDER) + Muse (advisor only, never overrides a HOLD)
- 🤖 From-scratch AI — a tiny LLM/SLM + ML (kNN 0.95, MLP 1.0) + neural layer, zero libraries
- 📦 App-Data-Compressor port — CDC chunking + dedup for DB dumps
- 🔒 sandbox-api chamber — record-only; it classifies samples and never executes them
⛔ HOLD gates
12 named gates permanently refuse live actions — attacking a real database, bypassing a real paywall, touching paid content or DRM, signing anything live. Neither brain can override them.
🚀 Run it
docker pull credkellar/monaddb-re
docker run --rm credkellar/monaddb-re
The container runs the lab's self-check: CHECKS 28/28, VERDICT: PROCEED (the --hold-demo proves the gates hold). ONE interface (main.py), zero dependencies.
🔗 Links
Tag summary
Content type
Image
Digest
sha256:51b90d097…
Size
49.9 MB
Last updated
4 days ago
docker pull credkellar/monaddb-re