@aikdna/kdna-core 0.20.0 → 0.22.0

package/CHANGELOG.md

@@ -1,5 +1,76 @@
 # Changelog
 
+## Unreleased
+
+## 0.22.0 (2026-08-17)
+
+### Added
+
+- RFC-0021 M1 asset signatures (`kdsig.ed25519`): sign and verify packaged
+  `.kdna` assets with Ed25519 signature bundles — `signKDNA`,
+  `verifyKDNASignature`, `composeKDNA`, signing-payload builders, key-pair
+  generation, key fingerprints, and signature-bundle parse/serialize —
+  mirrored byte-for-byte in the Python Core, with cross-language signature
+  conformance vectors. M1 is bound as a pre-release candidate; M2–M6 are not
+  implemented and remain non-binding.
+- RFC-0020 minimal projection profile: a fifth load profile for small local
+  models, a strict subset of compact carrying the highest-question and
+  boundary-friendly axioms plus full boundaries (~0.8–1.1k tokens vs compact
+  ~5.4k on the reference assets). Availability follows the manifest
+  declaration; assets without a minimal declaration fail closed.
+
+### Fixed
+
+- Validate decrypted external-grant and password payload plaintext against the
+  same declared Payload schema used for ordinary assets. Correct credentials
+  can no longer load schema-invalid judgment bytes.
+- Close `core_structure` relation objects to the existing public relation
+  fields and project only that allowlist in compact Runtime Capsules, blocking
+  private Creation state hidden in arbitrary relation properties.
+- Make the external-grant conformance golden carry one deterministic, actual
+  encrypted `.kdna` byte snapshot. The regression now checks the exact package
+  digest, Core validation, signed authorization, LoadPlan and authorized load
+  against that same artifact instead of deriving grant identity from
+  zlib-dependent repacking.
+- Warn with `KDNA_DISPATCHER_DEGRADED` when the container dispatcher fails to
+  load for any reason other than the dispatcher file itself being absent,
+  instead of silently degrading to the legacy reader. The absence check now
+  resolves the dispatcher path up front, so a present dispatcher with a
+  missing internal dependency, a syntax or initialization error, or a
+  permission error is reported instead of being mistaken for a missing
+  module.
+- Fail closed on hostile Argon2id parameters in untrusted password envelopes:
+  `memory_kib`, `iterations`, and `parallelism` must be integers within
+  defensive bounds (256 MiB / 16 / 8), removing a remote denial-of-service
+  path when loading third-party protected assets.
+
+## 0.21.0 (2026-07-20)
+
+### Changed
+
+- Keep `planLoad` fail-closed for password-protected assets until the supplied
+  credential is actually verified by `load`; a mere password-present signal
+  no longer reports `ready` or `can_load_now: true`.
+- Require at least one non-empty, author-neutral judgment unit and explicit
+  scope or boundary semantics while keeping optional creator provenance
+  separate from format validity.
+- Preserve every declared pattern in compact projection instead of silently
+  applying a prefix budget.
+- Report every non-empty payload path intentionally omitted by compact
+  projection, including deterministic counts, in Runtime Capsule trace and
+  prompt output; preserve complete axiom applicability lists and stop trimming
+  a full-statement fallback.
+- Make `checksums.json` optional under one container authority and verify it
+  whenever it is present.
+- Withdraw asset-signature containers from the Development Preview contract;
+  malformed or legacy signature declarations now fail closed. External grants
+  and Human Lock provenance remain separate responsibilities.
+- Close licensed entitlement validation around the declared `password`,
+  `local_receipt`, `account`, and `org` profiles.
+- Load external-grant Schemas through static package imports so bundler-based
+  ecosystem adapters retain the exact Core validators instead of failing at
+  activation time.
+
 ## 0.20.0 (2026-07-17)
 
 ### Changed

package/README.md

@@ -1,5 +1,11 @@
 # @aikdna/kdna-core
 
+> **Status:** Pre-release. This source tree contains unreleased work beyond
+> the published incumbent `0.22.0` (RFC-0021 M1 asset signatures and the
+> RFC-0020 minimal projection profile); the next release coordinate is not
+> finalized. The older `0.21.0` line predates the signature track. Candidate
+> source, APIs, and evidence must not be described as already published.
+
 Core library for packaged `.kdna` judgment assets. It implements one current
 container contract, authorization planning, integrity evidence, Runtime Capsule
 projection, and the correlated Agent Host execution boundary.
@@ -7,9 +13,13 @@ projection, and the correlated Agent Host execution boundary.
 ## Install
 
 ```bash
-npm install @aikdna/kdna-core
+npm install @aikdna/kdna-core@0.22.0
 ```
 
+That command installs the published incumbent. Use its release notes for the
+exact `0.22.0` contract. The examples below describe the current source
+candidate and require its final release coordinate before registry use.
+
 ## Pack, validate, plan, and load
 
 Use the package root. Version-qualified entry points and parallel generation
@@ -58,7 +68,7 @@ separate from loadability: `planLoad` and every load path block a valid asset
 that requires a newer loader with `KDNA_LOADER_VERSION_UNSUPPORTED` before
 projection.
 
-## Stable Runtime contracts
+## Current candidate Runtime contracts
 
 There is one current responsibility chain:
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@aikdna/kdna-core",
-    "version": "0.20.0",
+    "version": "0.22.0",
     "description": "KDNA Core library for validating, planning, and loading local .kdna judgment assets.",
     "engines": {
         "node": ">=18.0.0"
@@ -64,7 +64,7 @@
     },
     "dependencies": {
         "@noble/hashes": "^1.8.0",
-        "cbor-x": "^1.6.4",
+        "cbor-x": "^1.6.5",
         "ajv": "^8.20.0",
         "ajv-formats": "^3.0.1"
     }

package/schema/load-contract.schema.json

@@ -9,7 +9,7 @@
   "properties": {
     "default_profile": {
       "type": "string",
-      "enum": ["index", "compact", "scenario", "full"]
+      "enum": ["index", "compact", "scenario", "full", "minimal"]
     },
     "profiles": {
       "type": "object",
@@ -19,7 +19,8 @@
         "index": { "$ref": "#/$defs/profile" },
         "compact": { "$ref": "#/$defs/profile" },
         "scenario": { "$ref": "#/$defs/profile" },
-        "full": { "$ref": "#/$defs/profile" }
+        "full": { "$ref": "#/$defs/profile" },
+        "minimal": { "$ref": "#/$defs/profile" }
       }
     }
   },

package/schema/load-plan.schema.json

@@ -15,6 +15,7 @@
     "can_load_now",
     "projection_policy",
     "checks",
+    "signature_state",
     "issues",
     "source",
     "input_fingerprint"
@@ -87,6 +88,7 @@
         "schema_valid",
         "payload_valid",
         "checksums_valid",
+        "signature_valid",
         "load_contract_valid",
         "overall_valid"
       ],
@@ -96,10 +98,15 @@
         "schema_valid": { "type": "boolean" },
         "payload_valid": { "type": "boolean" },
         "checksums_valid": { "type": "boolean" },
+        "signature_valid": { "type": "boolean" },
         "load_contract_valid": { "type": "boolean" },
         "overall_valid": { "type": "boolean" }
       }
     },
+    "signature_state": {
+      "description": "RFC-0021 M1 signature evidence state: absent (unsigned), verified (signature.kdsig verified), or invalid (present but rejected).",
+      "enum": ["absent", "verified", "invalid"]
+    },
     "issues": {
       "type": "array",
       "items": {

package/schema/manifest.schema.json

@@ -40,6 +40,14 @@
           }
         }
       }
+    },
+    {
+      "if": { "properties": { "access": { "const": "licensed" } }, "required": ["access"] },
+      "then": { "required": ["entitlement"] }
+    },
+    {
+      "if": { "required": ["entitlement"] },
+      "then": { "properties": { "access": { "const": "licensed" } }, "required": ["access"] }
     }
   ],
   "properties": {
@@ -139,6 +147,19 @@
       "enum": ["public", "licensed", "remote"],
       "description": "Stable delivery and authorization mode for the asset."
     },
+    "entitlement": {
+      "type": "object",
+      "required": ["profile"],
+      "additionalProperties": true,
+      "properties": {
+        "profile": {
+          "type": "string",
+          "enum": ["password", "local_receipt", "account", "org"]
+        },
+        "offline": { "type": "boolean" },
+        "revocable": { "type": "boolean" }
+      }
+    },
     "summary": { "type": "string" },
     "description": { "type": "string" },
     "language": { "type": "string" },
@@ -223,19 +244,8 @@
         }
       }
     },
-    "signatures": {
-      "type": "array",
-      "items": {
-        "type": "object",
-        "required": ["role", "path", "algorithm"],
-        "properties": {
-          "role": { "type": "string" },
-          "path": { "type": "string" },
-          "algorithm": { "type": "string" },
-          "key_id": { "type": "string" }
-        }
-      }
-    },
+    "signature": false,
+    "signatures": false,
     "dependencies": {
       "type": "object",
       "additionalProperties": {
@@ -243,7 +253,7 @@
       }
     },
     "extends": {
-      "description": "Asset inheritance declaration (Story 12). This asset inherits judgment content from the named base asset. Distinct from 'dependencies' (peer composition): 'extends' creates a single-inheritance hierarchy where the child specialises the parent. The child's cards override the parent's cards with the same ID; parent cards not overridden are inherited. Format: '@scope/name@semver-range' string, or an object with 'name' and optional 'version' fields.",
+      "description": "Asset inheritance declaration. This asset inherits judgment content from the named base asset. Distinct from 'dependencies' (peer composition): 'extends' creates a single-inheritance hierarchy where the child specialises the parent. The child's cards override the parent's cards with the same ID; parent cards not overridden are inherited. Format: '@scope/name@semver-range' string, or an object with 'name' and optional 'version' fields.",
       "oneOf": [
         {
           "type": "string",

package/schema/payload-profile.schema.json

@@ -18,11 +18,63 @@
     },
     "core": {
       "type": "object",
-      "required": ["highest_question", "axioms"],
+      "required": ["axioms"],
       "additionalProperties": true,
+      "anyOf": [
+        { "required": ["highest_question"] },
+        {
+          "required": ["judgment_role"],
+          "properties": {
+            "judgment_role": {
+              "anyOf": [
+                { "required": ["acts_as"] },
+                { "required": ["does_not_act_as"] },
+                { "required": ["responsibility"] }
+              ]
+            }
+          }
+        },
+        {
+          "required": ["boundaries"],
+          "properties": { "boundaries": { "minItems": 1 } }
+        },
+        {
+          "properties": {
+            "axioms": {
+              "contains": {
+                "type": "object",
+                "anyOf": [
+                  {
+                    "required": ["applies_when"],
+                    "properties": {
+                      "applies_when": {
+                        "type": "array",
+                        "minItems": 1,
+                        "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                      }
+                    }
+                  },
+                  {
+                    "required": ["does_not_apply_when"],
+                    "properties": {
+                      "does_not_apply_when": {
+                        "type": "array",
+                        "minItems": 1,
+                        "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                      }
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        }
+      ],
       "properties": {
         "highest_question": {
           "type": "string",
+          "minLength": 1,
+          "pattern": "\\S",
           "description": "The single most important question this judgment system answers."
         },
         "worldview": {
@@ -39,23 +91,121 @@
           "type": "object",
           "additionalProperties": true,
           "properties": {
-            "acts_as": { "type": "string" },
+            "acts_as": { "type": "string", "minLength": 1, "pattern": "\\S" },
             "does_not_act_as": {
               "oneOf": [
-                { "type": "string" },
-                { "type": "array", "items": { "type": "string" } }
+                { "type": "string", "minLength": 1, "pattern": "\\S" },
+                {
+                  "type": "array",
+                  "minItems": 1,
+                  "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                }
               ]
             },
-            "responsibility": { "type": "string" }
+            "responsibility": { "type": "string", "minLength": 1, "pattern": "\\S" }
           },
           "description": "The authority this asset exercises and the responsibilities explicitly outside it."
         },
+        "core_structure": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["from", "to", "via"],
+            "properties": {
+              "from": { "type": "string", "minLength": 1, "pattern": "\\S" },
+              "to": { "type": "string", "minLength": 1, "pattern": "\\S" },
+              "via": { "type": "string", "enum": ["priority", "exception"] },
+              "applies_when": {
+                "type": "array",
+                "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+              },
+              "does_not_apply_when": {
+                "type": "array",
+                "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+              }
+            }
+          },
+          "description": "Ordered public judgment relations. Relation objects are closed so private authoring state cannot enter Runtime projection."
+        },
         "axioms": {
           "type": "array",
-          "description": "The list of axioms. Phase 1 accepts an empty array."
+          "minItems": 1,
+          "items": {
+            "oneOf": [
+              { "type": "string", "minLength": 1, "pattern": "\\S" },
+              {
+                "type": "object",
+                "minProperties": 1,
+                "properties": {
+                  "applies_when": {
+                    "type": "array",
+                    "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                  },
+                  "does_not_apply_when": {
+                    "type": "array",
+                    "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                  }
+                },
+                "anyOf": [
+                  {
+                    "required": ["statement"],
+                    "properties": { "statement": { "type": "string", "minLength": 1, "pattern": "\\S" } }
+                  },
+                  {
+                    "required": ["one_sentence"],
+                    "properties": { "one_sentence": { "type": "string", "minLength": 1, "pattern": "\\S" } }
+                  },
+                  {
+                    "required": ["full_statement"],
+                    "properties": { "full_statement": { "type": "string", "minLength": 1, "pattern": "\\S" } }
+                  }
+                ]
+              }
+            ]
+          },
+          "description": "At least one non-empty judgment statement with an actual selection meaning."
         },
         "boundaries": {
           "type": "array",
+          "items": {
+            "oneOf": [
+              { "type": "string", "minLength": 1, "pattern": "\\S" },
+              {
+                "type": "object",
+                "minProperties": 1,
+                "anyOf": [
+                  { "required": ["scope"], "properties": { "scope": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["out_of_scope"], "properties": { "out_of_scope": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["text"], "properties": { "text": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["statement"], "properties": { "statement": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["one_sentence"], "properties": { "one_sentence": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["boundary"], "properties": { "boundary": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  { "required": ["stance"], "properties": { "stance": { "type": "string", "minLength": 1, "pattern": "\\S" } } },
+                  {
+                    "required": ["applies_when"],
+                    "properties": {
+                      "applies_when": {
+                        "type": "array",
+                        "minItems": 1,
+                        "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                      }
+                    }
+                  },
+                  {
+                    "required": ["does_not_apply_when"],
+                    "properties": {
+                      "does_not_apply_when": {
+                        "type": "array",
+                        "minItems": 1,
+                        "items": { "type": "string", "minLength": 1, "pattern": "\\S" }
+                      }
+                    }
+                  }
+                ]
+              }
+            ]
+          },
           "description": "Explicit out-of-scope statements."
         },
         "risk_model": {

package/schema/runtime-capsule.schema.json

@@ -36,7 +36,7 @@
     },
     "signature": { "$ref": "#/$defs/signature" },
     "access": { "enum": ["public", "licensed", "remote"] },
-    "profile": { "enum": ["index", "compact", "scenario", "full"] },
+    "profile": { "enum": ["index", "compact", "scenario", "full", "minimal"] },
     "context": { "type": "object" },
     "trace": { "$ref": "#/$defs/trace" }
   },
@@ -78,13 +78,28 @@
       }
     },
     "signature": {
-      "type": "object",
-      "required": ["state"],
-      "additionalProperties": false,
-      "properties": {
-        "state": { "enum": ["verified", "not_checked", "absent"] },
-        "issuer": { "type": "string", "minLength": 1 }
-      }
+      "oneOf": [
+        {
+          "type": "object",
+          "required": ["state"],
+          "additionalProperties": false,
+          "properties": {
+            "state": { "const": "absent" }
+          }
+        },
+        {
+          "type": "object",
+          "required": ["state", "profile", "profile_version", "key_fingerprint", "content_digest"],
+          "additionalProperties": false,
+          "properties": {
+            "state": { "const": "verified" },
+            "profile": { "const": "kdsig.ed25519" },
+            "profile_version": { "const": "0.1.0" },
+            "key_fingerprint": { "$ref": "#/$defs/sha256" },
+            "content_digest": { "$ref": "#/$defs/sha256" }
+          }
+        }
+      ]
     },
     "trace": {
       "type": "object",
@@ -106,9 +121,51 @@
         "input_kind": { "enum": ["packaged_file", "packaged_bytes"] },
         "runtime_eligible": { "const": true },
         "schema_valid": { "const": true },
-        "signature_state": { "enum": ["verified", "not_checked", "absent"] },
-        "profile": { "enum": ["index", "compact", "scenario", "full"] }
+        "signature_state": { "enum": ["absent", "verified"] },
+        "profile": { "enum": ["index", "compact", "scenario", "full", "minimal"] },
+        "projection_report": { "$ref": "#/$defs/projectionReport" }
       }
+    },
+    "projectionReport": {
+      "type": "object",
+      "required": ["status", "omitted", "omitted_total"],
+      "additionalProperties": false,
+      "properties": {
+        "status": { "enum": ["complete", "partial"] },
+        "omitted": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["path", "count"],
+            "additionalProperties": false,
+            "properties": {
+              "path": { "type": "string", "pattern": "^/" },
+              "count": { "type": "integer", "minimum": 1 }
+            }
+          }
+        },
+        "omitted_total": { "type": "integer", "minimum": 0 }
+      },
+      "allOf": [
+        {
+          "if": { "properties": { "status": { "const": "complete" } } },
+          "then": {
+            "properties": {
+              "omitted": { "maxItems": 0 },
+              "omitted_total": { "const": 0 }
+            }
+          }
+        },
+        {
+          "if": { "properties": { "status": { "const": "partial" } } },
+          "then": {
+            "properties": {
+              "omitted": { "minItems": 1 },
+              "omitted_total": { "minimum": 1 }
+            }
+          }
+        }
+      ]
     }
   }
 }