Lean-sudo: drop-in replacement with formally verified policy, env, and auth
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Lean-sudo is a drop-in replacement for the Linux sudo command, written in Lean 4, in which the security-critical decision logic (who may run what as whom) is proved correct by machine rather than only reviewed.