@adastracomputing/ink 0.1.0-alpha.0

package/test-vectors/receipts-and-audit.json

@@ -0,0 +1,142 @@
+{
+  "description": "INK v0.1 receipt, audit query, and audit chain test vectors (INK Auditability §1–§3). All signatures and hashes use key material from keys.json.",
+  "vectors": [
+    {
+      "id": "receipt-1",
+      "description": "Bob sends a 'delivered' receipt to Alice for the intent from signing.json vector 1",
+      "input": {
+        "note": "messageHash is SHA-256 of the JCS-canonicalized intent body from signing.json vector 1",
+        "originalMessageBody": {
+          "protocol": "ink/0.1",
+          "type": "network.tulpa.intent",
+          "from": "did:plc:alice123test",
+          "to": "did:plc:bob456test",
+          "intentType": "scheduling",
+          "purpose": "Discuss partnership opportunity",
+          "urgency": "normal",
+          "expiresAt": "2026-03-25T00:00:00Z",
+          "nonce": "dGVzdG5vbmNlMTIzNDU2Nzg",
+          "timestamp": "2026-03-18T12:00:00Z"
+        },
+        "canonicalOriginalMessage": "{\"expiresAt\":\"2026-03-25T00:00:00Z\",\"from\":\"did:plc:alice123test\",\"intentType\":\"scheduling\",\"nonce\":\"dGVzdG5vbmNlMTIzNDU2Nzg\",\"protocol\":\"ink/0.1\",\"purpose\":\"Discuss partnership opportunity\",\"timestamp\":\"2026-03-18T12:00:00Z\",\"to\":\"did:plc:bob456test\",\"type\":\"network.tulpa.intent\",\"urgency\":\"normal\"}",
+        "messageHashHex": "39605712514a6b5e3a6691ef240a8e2b61376e372d4315329e96637e4a7c34ea",
+        "receipt": {
+          "protocol": "ink/0.1",
+          "type": "network.tulpa.receipt",
+          "from": "did:plc:bob456test",
+          "to": "did:plc:alice123test",
+          "messageId": "msg-test-vector-001",
+          "disposition": "delivered",
+          "dispositionAt": "2026-03-18T12:05:00Z",
+          "messageHash": "39605712514a6b5e3a6691ef240a8e2b61376e372d4315329e96637e4a7c34ea",
+          "nonce": "cmVjZWlwdG5vbmNlMTIzNA",
+          "timestamp": "2026-03-18T12:05:01Z"
+        },
+        "method": "POST",
+        "path": "/ink/v1/receipt",
+        "recipientDid": "did:plc:alice123test",
+        "signerPrivateKeyHex": "4ea0adf03599751231c1c3b7fc5a6c9d2e2f2f97bcd7c885c0add2f47b9af181"
+      },
+      "expected": {
+        "canonicalReceipt": "{\"disposition\":\"delivered\",\"dispositionAt\":\"2026-03-18T12:05:00Z\",\"from\":\"did:plc:bob456test\",\"messageHash\":\"39605712514a6b5e3a6691ef240a8e2b61376e372d4315329e96637e4a7c34ea\",\"messageId\":\"msg-test-vector-001\",\"nonce\":\"cmVjZWlwdG5vbmNlMTIzNA\",\"protocol\":\"ink/0.1\",\"timestamp\":\"2026-03-18T12:05:01Z\",\"to\":\"did:plc:alice123test\",\"type\":\"network.tulpa.receipt\"}",
+        "signatureBase": "ink/0.1\nPOST\n/ink/v1/receipt\ndid:plc:alice123test\n{\"disposition\":\"delivered\",\"dispositionAt\":\"2026-03-18T12:05:00Z\",\"from\":\"did:plc:bob456test\",\"messageHash\":\"39605712514a6b5e3a6691ef240a8e2b61376e372d4315329e96637e4a7c34ea\",\"messageId\":\"msg-test-vector-001\",\"nonce\":\"cmVjZWlwdG5vbmNlMTIzNA\",\"protocol\":\"ink/0.1\",\"timestamp\":\"2026-03-18T12:05:01Z\",\"to\":\"did:plc:alice123test\",\"type\":\"network.tulpa.receipt\"}\n2026-03-18T12:05:01Z",
+        "signatureBase64url": "1YX_UO-steo6lVd77YWI2TXwrE7wXAp4NfMEZsWY539iwsLRbZ5O3jOwDQ3Dhyq6odX-FQHQjoxsfoKG103LAw",
+        "signatureVerifies": true,
+        "signatureHex": "d585ff50efacb5ea3a95577bed8588d935f0ac4ef05c0a7835f30466c598e77f62c2c2d16d9e4ede33b00d0dc3872abaa1d5fe1501d08e8c6c7e8286d74dcb03"
+      }
+    },
+    {
+      "id": "audit-query-1",
+      "description": "Alice queries Bob for audit trail of msg-test-vector-001",
+      "input": {
+        "query": {
+          "protocol": "ink/0.1",
+          "type": "network.tulpa.audit_query",
+          "from": "did:plc:alice123test",
+          "to": "did:plc:bob456test",
+          "messageId": "msg-test-vector-001",
+          "nonce": "YXVkaXRub25jZTEyMzQ1Ng",
+          "timestamp": "2026-03-18T13:00:00Z"
+        },
+        "method": "POST",
+        "path": "/ink/v1/audit",
+        "recipientDid": "did:plc:bob456test",
+        "signerPrivateKeyHex": "02362f546f26d9c252c9209d1218e3174654b04b5f08f2ee2b3fa7874111d086"
+      },
+      "expected": {
+        "canonicalQuery": "{\"from\":\"did:plc:alice123test\",\"messageId\":\"msg-test-vector-001\",\"nonce\":\"YXVkaXRub25jZTEyMzQ1Ng\",\"protocol\":\"ink/0.1\",\"timestamp\":\"2026-03-18T13:00:00Z\",\"to\":\"did:plc:bob456test\",\"type\":\"network.tulpa.audit_query\"}",
+        "signatureBase": "ink/0.1\nPOST\n/ink/v1/audit\ndid:plc:bob456test\n{\"from\":\"did:plc:alice123test\",\"messageId\":\"msg-test-vector-001\",\"nonce\":\"YXVkaXRub25jZTEyMzQ1Ng\",\"protocol\":\"ink/0.1\",\"timestamp\":\"2026-03-18T13:00:00Z\",\"to\":\"did:plc:bob456test\",\"type\":\"network.tulpa.audit_query\"}\n2026-03-18T13:00:00Z",
+        "signatureBase64url": "sC7lbTRpyeEVRBJf3wo0KHEIaKQbHAIbFGTooVqBy2fYJm1raU1hCwq-PQQs4BKykMdFPxWeZRTsxRijjaQdCQ",
+        "signatureVerifies": true
+      }
+    },
+    {
+      "id": "audit-chain-1",
+      "description": "Bob's audit chain — two events for msg-test-vector-001 (message.received → message.delivered)",
+      "input": {
+        "note": "Events are signed by Bob. agentSignature is computed over JCS-canonicalized event excluding the agentSignature field. previousEventHash is SHA-256 of the JCS-canonicalized previous event excluding agentSignature.",
+        "events": [
+          {
+            "id": "01JBTEST0001",
+            "version": "ink-audit/1",
+            "agentId": "agent-bob-01",
+            "sequence": 1,
+            "previousEventHash": null,
+            "eventType": "message.received",
+            "timestamp": "2026-03-18T12:04:58Z",
+            "messageId": "msg-test-vector-001",
+            "counterpartyId": "did:plc:alice123test"
+          },
+          {
+            "id": "01JBTEST0002",
+            "version": "ink-audit/1",
+            "agentId": "agent-bob-01",
+            "sequence": 2,
+            "eventType": "message.delivered",
+            "timestamp": "2026-03-18T12:05:00Z",
+            "messageId": "msg-test-vector-001",
+            "counterpartyId": "did:plc:alice123test"
+          }
+        ],
+        "signerPrivateKeyHex": "4ea0adf03599751231c1c3b7fc5a6c9d2e2f2f97bcd7c885c0add2f47b9af181"
+      },
+      "expected": {
+        "event1": {
+          "canonicalWithoutSignature": "{\"agentId\":\"agent-bob-01\",\"counterpartyId\":\"did:plc:alice123test\",\"eventType\":\"message.received\",\"id\":\"01JBTEST0001\",\"messageId\":\"msg-test-vector-001\",\"previousEventHash\":null,\"sequence\":1,\"timestamp\":\"2026-03-18T12:04:58Z\",\"version\":\"ink-audit/1\"}",
+          "hashHex": "6b45d9d76d61b87b1cf804d0b403b7be8cf3af78a9c4eea9e543b211bf70827c",
+          "agentSignatureBase64url": "hHRnbjpet_BXu1bQwRtBzfmbBq_tC8jJFACisYaSP0HF0sgaSszsm733pEEhfJ4uGxhcQYGeemuzO_2sz-DZAw",
+          "signatureVerifies": true
+        },
+        "event2": {
+          "note": "previousEventHash links to event1's hash, forming the chain",
+          "previousEventHash": "6b45d9d76d61b87b1cf804d0b403b7be8cf3af78a9c4eea9e543b211bf70827c",
+          "canonicalWithoutSignature": "{\"agentId\":\"agent-bob-01\",\"counterpartyId\":\"did:plc:alice123test\",\"eventType\":\"message.delivered\",\"id\":\"01JBTEST0002\",\"messageId\":\"msg-test-vector-001\",\"previousEventHash\":\"6b45d9d76d61b87b1cf804d0b403b7be8cf3af78a9c4eea9e543b211bf70827c\",\"sequence\":2,\"timestamp\":\"2026-03-18T12:05:00Z\",\"version\":\"ink-audit/1\"}",
+          "hashHex": "645c53dc5e42581e99b1aabff30c12089ccebe6e131536573e94f313064f1f97",
+          "signatureVerifies": true
+        }
+      }
+    },
+    {
+      "id": "audit-chain-fork",
+      "description": "Fork detection — two events with the same sequence number but different content indicate a forked chain",
+      "input": {
+        "note": "If an agent produces two events with sequence=2, the chain is forked. Verifiers MUST reject chains where any sequence number appears more than once.",
+        "forkEvent": {
+          "id": "01JBTEST0003",
+          "version": "ink-audit/1",
+          "agentId": "agent-bob-01",
+          "sequence": 2,
+          "previousEventHash": "6b45d9d76d61b87b1cf804d0b403b7be8cf3af78a9c4eea9e543b211bf70827c",
+          "eventType": "message.rejected",
+          "timestamp": "2026-03-18T12:05:00Z",
+          "messageId": "msg-test-vector-001",
+          "counterpartyId": "did:plc:alice123test"
+        }
+      },
+      "expected": {
+        "chainValid": false,
+        "reason": "Duplicate sequence number 2 — agent-bob-01 produced two different events at the same position. This is evidence of tampering or a buggy implementation."
+      }
+    }
+  ]
+}

package/test-vectors/replay.json

@@ -0,0 +1,88 @@
+{
+  "description": "INK replay protection acceptance/rejection rules (INK §3.5)",
+  "rules": {
+    "maxTimestampAge": "5 minutes",
+    "maxFutureTimestamp": "30 seconds",
+    "nonceDeduplicationWindow": "10 minutes"
+  },
+  "vectors": [
+    {
+      "description": "Valid — timestamp within 5-minute window, fresh nonce",
+      "input": {
+        "messageTimestamp": "2026-03-18T12:00:00Z",
+        "receiverClock": "2026-03-18T12:02:30Z",
+        "nonce": "dW5pcXVlLW5vbmNlLTEyMzQ1Njc4OTA",
+        "previouslySeenNonces": []
+      },
+      "expected": {
+        "accepted": true
+      }
+    },
+    {
+      "description": "Rejected — timestamp 6 minutes old, exceeds 5-minute window",
+      "input": {
+        "messageTimestamp": "2026-03-18T11:54:00Z",
+        "receiverClock": "2026-03-18T12:00:00Z",
+        "nonce": "dW5pcXVlLW5vbmNlLWFiY2RlZmdoaWo",
+        "previouslySeenNonces": []
+      },
+      "expected": {
+        "accepted": false,
+        "errorCode": "expired_message"
+      }
+    },
+    {
+      "description": "Rejected — timestamp 60 seconds in the future, exceeds 30-second tolerance",
+      "input": {
+        "messageTimestamp": "2026-03-18T12:01:00Z",
+        "receiverClock": "2026-03-18T12:00:00Z",
+        "nonce": "dW5pcXVlLW5vbmNlLWZ1dHVyZS10ZXN0",
+        "previouslySeenNonces": []
+      },
+      "expected": {
+        "accepted": false,
+        "errorCode": "expired_message"
+      }
+    },
+    {
+      "description": "Accepted — timestamp 25 seconds in the future (within 30-second tolerance)",
+      "input": {
+        "messageTimestamp": "2026-03-18T12:00:25Z",
+        "receiverClock": "2026-03-18T12:00:00Z",
+        "nonce": "dW5pcXVlLW5vbmNlLTI1cy1haGVhZA",
+        "previouslySeenNonces": []
+      },
+      "expected": {
+        "accepted": true
+      }
+    },
+    {
+      "description": "Rejected — duplicate nonce within 10-minute deduplication window",
+      "input": {
+        "messageTimestamp": "2026-03-18T12:00:00Z",
+        "receiverClock": "2026-03-18T12:00:01Z",
+        "nonce": "cmVwZWF0ZWQtbm9uY2UtdmFsdWU",
+        "previouslySeenNonces": [
+          "cmVwZWF0ZWQtbm9uY2UtdmFsdWU"
+        ]
+      },
+      "expected": {
+        "accepted": false,
+        "errorCode": "duplicate_nonce"
+      }
+    },
+    {
+      "description": "Accepted — previously seen nonce but outside 10-minute window (entry purged)",
+      "input": {
+        "messageTimestamp": "2026-03-18T12:15:00Z",
+        "receiverClock": "2026-03-18T12:15:01Z",
+        "nonce": "cmVwZWF0ZWQtbm9uY2UtdmFsdWU",
+        "previouslySeenNonces": [],
+        "note": "Nonce was seen at 12:00:00 but the 10-minute window elapsed so the entry was purged"
+      },
+      "expected": {
+        "accepted": true
+      }
+    }
+  ]
+}

package/test-vectors/signing.json

@@ -0,0 +1,61 @@
+{
+  "description": "INK Ed25519 signature generation and verification (INK §3.3, §9)",
+  "vectors": [
+    {
+      "description": "Alice signs an intent to Bob — valid signature",
+      "input": {
+        "method": "POST",
+        "path": "/ink/v1/intent",
+        "recipientDid": "did:plc:bob456test",
+        "body": {
+          "protocol": "ink/0.1",
+          "type": "network.tulpa.intent",
+          "from": "did:plc:alice123test",
+          "to": "did:plc:bob456test",
+          "intentType": "scheduling",
+          "purpose": "Discuss partnership opportunity",
+          "urgency": "normal",
+          "expiresAt": "2026-03-25T00:00:00Z",
+          "nonce": "dGVzdG5vbmNlMTIzNDU2Nzg",
+          "timestamp": "2026-03-18T12:00:00Z"
+        },
+        "timestamp": "2026-03-18T12:00:00Z",
+        "signerPublicKeyHex": "16d8c7758b7816f4540730fa5b01921bfa0c52459e435b8f970cd8ef3e548fba",
+        "signerPrivateKeyHex": "02362f546f26d9c252c9209d1218e3174654b04b5f08f2ee2b3fa7874111d086"
+      },
+      "expected": {
+        "canonicalBody": "{\"expiresAt\":\"2026-03-25T00:00:00Z\",\"from\":\"did:plc:alice123test\",\"intentType\":\"scheduling\",\"nonce\":\"dGVzdG5vbmNlMTIzNDU2Nzg\",\"protocol\":\"ink/0.1\",\"purpose\":\"Discuss partnership opportunity\",\"timestamp\":\"2026-03-18T12:00:00Z\",\"to\":\"did:plc:bob456test\",\"type\":\"network.tulpa.intent\",\"urgency\":\"normal\"}",
+        "signatureBase": "ink/0.1\nPOST\n/ink/v1/intent\ndid:plc:bob456test\n{\"expiresAt\":\"2026-03-25T00:00:00Z\",\"from\":\"did:plc:alice123test\",\"intentType\":\"scheduling\",\"nonce\":\"dGVzdG5vbmNlMTIzNDU2Nzg\",\"protocol\":\"ink/0.1\",\"purpose\":\"Discuss partnership opportunity\",\"timestamp\":\"2026-03-18T12:00:00Z\",\"to\":\"did:plc:bob456test\",\"type\":\"network.tulpa.intent\",\"urgency\":\"normal\"}\n2026-03-18T12:00:00Z",
+        "signatureHex": "0b8ac7ef61ad309dc8b2ee6575acbbfca6e62a4379a8726966bc25a619dc98b30e5337a4bb2e22cca58acb2fd83e8206fd1ef69bd9e50ec2d7d3add9b3964204",
+        "signatureBase64url": "C4rH72GtMJ3Isu5lday7_KbmKkN5qHJpZrwlphncmLMOUzekuy4izKWKyy_YPoIG_R72m9nlDsLX063Zs5ZCBA",
+        "authorizationHeader": "INK-Ed25519 C4rH72GtMJ3Isu5lday7_KbmKkN5qHJpZrwlphncmLMOUzekuy4izKWKyy_YPoIG_R72m9nlDsLX063Zs5ZCBA",
+        "signatureVerifies": true
+      }
+    },
+    {
+      "description": "Verification fails with wrong public key (Bob's key instead of Alice's)",
+      "input": {
+        "signatureHex": "0b8ac7ef61ad309dc8b2ee6575acbbfca6e62a4379a8726966bc25a619dc98b30e5337a4bb2e22cca58acb2fd83e8206fd1ef69bd9e50ec2d7d3add9b3964204",
+        "signatureBase": "ink/0.1\nPOST\n/ink/v1/intent\ndid:plc:bob456test\n{\"expiresAt\":\"2026-03-25T00:00:00Z\",\"from\":\"did:plc:alice123test\",\"intentType\":\"scheduling\",\"nonce\":\"dGVzdG5vbmNlMTIzNDU2Nzg\",\"protocol\":\"ink/0.1\",\"purpose\":\"Discuss partnership opportunity\",\"timestamp\":\"2026-03-18T12:00:00Z\",\"to\":\"did:plc:bob456test\",\"type\":\"network.tulpa.intent\",\"urgency\":\"normal\"}\n2026-03-18T12:00:00Z",
+        "verifierPublicKeyHex": "11dce4522822fffcb059f547b9e0b16bb8f47084fec275b46f813701273c014b"
+      },
+      "expected": {
+        "signatureVerifies": false
+      }
+    },
+    {
+      "description": "Verification fails with tampered path — cross-endpoint replay protection",
+      "input": {
+        "note": "Same signature verified against path /ink/v1/challenge instead of /ink/v1/intent",
+        "originalPath": "/ink/v1/intent",
+        "tamperedPath": "/ink/v1/challenge",
+        "signatureHex": "0b8ac7ef61ad309dc8b2ee6575acbbfca6e62a4379a8726966bc25a619dc98b30e5337a4bb2e22cca58acb2fd83e8206fd1ef69bd9e50ec2d7d3add9b3964204",
+        "verifierPublicKeyHex": "16d8c7758b7816f4540730fa5b01921bfa0c52459e435b8f970cd8ef3e548fba"
+      },
+      "expected": {
+        "signatureVerifies": false,
+        "note": "Signature was computed over /ink/v1/intent but verified against /ink/v1/challenge"
+      }
+    }
+  ]
+}