@interop/wallet-core 0.69.0 → 0.70.0

package/dist/space/index.d.ts

@@ -30,7 +30,9 @@
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
  *   replicas derive identically.
  * - The `was-link` QR hand-off contract (`buildWasLinkPayload` /
- *   `parseWasLinkPayload` / `encodeWasLinkSecret`).
+ *   `parseWasLinkPayload` / `encodeWasLinkSecret`) and `isWasLinkPayload`,
+ *   the recognizer a wallet hands `@interop/wallet-request`'s input
+ *   classifier.
  * - `CEREMONY_IDS` / `CeremonyId`, the typed vocabulary of shared account
  *   ceremony ids.
  */
@@ -43,7 +45,7 @@ export { plaintextCollection } from './plaintextCollection.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryWalletLogin, addHistoryAppRevoke, addHistoryAgentRevoke, addHistoryClientRevoked, addHistoryGenerationCollected } from './activity.js';
 export type { WalletActivity, ActivityGrant } from './activity.js';
 export { publicCredentialUrl } from './publicLink.js';
-export { encodeWasLinkSecret, buildWasLinkPayload, parseWasLinkPayload } from './wasLink.js';
+export { encodeWasLinkSecret, isWasLinkPayload, buildWasLinkPayload, parseWasLinkPayload } from './wasLink.js';
 export type { WasLinkPayload } from './wasLink.js';
 export { HumanReadableError } from './errors.js';
 export { CEREMONY_IDS } from './ceremony.js';

package/dist/space/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,+BAA+B,EAC/B,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,4BAA4B,EAC5B,kCAAkC,EAClC,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,+BAA+B,EAC/B,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,4BAA4B,EAC5B,kCAAkC,EAClC,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA"}

package/dist/space/index.js

@@ -30,7 +30,9 @@
  * - `publicCredentialUrl`, the world-readable shared-credential URL both
  *   replicas derive identically.
  * - The `was-link` QR hand-off contract (`buildWasLinkPayload` /
- *   `parseWasLinkPayload` / `encodeWasLinkSecret`).
+ *   `parseWasLinkPayload` / `encodeWasLinkSecret`) and `isWasLinkPayload`,
+ *   the recognizer a wallet hands `@interop/wallet-request`'s input
+ *   classifier.
  * - `CEREMONY_IDS` / `CeremonyId`, the typed vocabulary of shared account
  *   ceremony ids.
  */
@@ -41,7 +43,7 @@ export { provisionWalletSpace } from './provisioning.js';
 export { plaintextCollection } from './plaintextCollection.js';
 export { ACTIVITY_TYPE, addHistoryNewAccount, addHistorySpaceCreated, addHistoryCredentialCreated, addHistoryCredentialDeleted, addHistoryCredentialShared, addHistoryCredentialUnshared, addHistoryLogin, addHistoryWalletLogin, addHistoryAppRevoke, addHistoryAgentRevoke, addHistoryClientRevoked, addHistoryGenerationCollected } from './activity.js';
 export { publicCredentialUrl } from './publicLink.js';
-export { encodeWasLinkSecret, buildWasLinkPayload, parseWasLinkPayload } from './wasLink.js';
+export { encodeWasLinkSecret, isWasLinkPayload, buildWasLinkPayload, parseWasLinkPayload } from './wasLink.js';
 export { HumanReadableError } from './errors.js';
 export { CEREMONY_IDS } from './ceremony.js';
 //# sourceMappingURL=index.js.map

package/dist/space/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,+BAA+B,EAC/B,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,4BAA4B,EAC5B,kCAAkC,EAClC,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EACL,iBAAiB,EACjB,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,0BAA0B,EAC1B,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,+BAA+B,EAC/B,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,4BAA4B,EAC5B,kCAAkC,EAClC,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA"}

package/dist/space/wasLink.d.ts

@@ -9,10 +9,21 @@ export interface WasLinkPayload {
     secret: string;
 }
 /**
- * The `t` discriminator member every `was-link` payload carries. Exported so
- * input classification can match it structurally without calling the parser.
+ * The `t` discriminator member every `was-link` payload carries.
  */
 export declare const WAS_LINK_TYPE = "was-link";
+/**
+ * Whether some scanned or pasted text has a `was-link` payload's JSON shape.
+ * Matched structurally on the `t` member rather than by calling the parser,
+ * so an unrelated JSON blob is not refused with a connection-code error
+ * message. This is the recognizer a wallet hands `@interop/wallet-request`'s
+ * input classifier for its `was-link` branch; whether the payload is valid
+ * is {@link parseWasLinkPayload}'s answer.
+ *
+ * @param text {string}
+ * @returns {boolean}
+ */
+export declare function isWasLinkPayload(text: string): boolean;
 /**
  * Encodes a passphrase into the payload's `secret` field: `base64url(utf8(...))`,
  * no padding.

package/dist/space/wasLink.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wasLink.d.ts","sourceRoot":"","sources":["../../src/space/wasLink.ts"],"names":[],"mappings":"AAgBA;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa,aAAa,CAAA;AA4CvC;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,SAAS,EACT,UAAU,EACX,EAAE;IACD,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB,GAAG,MAAM,CAOT;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAyC/D"}
+{"version":3,"file":"wasLink.d.ts","sourceRoot":"","sources":["../../src/space/wasLink.ts"],"names":[],"mappings":"AAgBA;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,aAAa,CAAA;AAEvC;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAgBtD;AA4CD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,SAAS,EACT,UAAU,EACX,EAAE;IACD,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB,GAAG,MAAM,CAOT;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAyC/D"}

package/dist/space/wasLink.js

@@ -14,10 +14,36 @@
 import { base64urlnopad } from '@scure/base';
 import { HumanReadableError } from './errors.js';
 /**
- * The `t` discriminator member every `was-link` payload carries. Exported so
- * input classification can match it structurally without calling the parser.
+ * The `t` discriminator member every `was-link` payload carries.
  */
 export const WAS_LINK_TYPE = 'was-link';
+/**
+ * Whether some scanned or pasted text has a `was-link` payload's JSON shape.
+ * Matched structurally on the `t` member rather than by calling the parser,
+ * so an unrelated JSON blob is not refused with a connection-code error
+ * message. This is the recognizer a wallet hands `@interop/wallet-request`'s
+ * input classifier for its `was-link` branch; whether the payload is valid
+ * is {@link parseWasLinkPayload}'s answer.
+ *
+ * @param text {string}
+ * @returns {boolean}
+ */
+export function isWasLinkPayload(text) {
+    const trimmed = text.trim();
+    if (!trimmed.startsWith('{')) {
+        return false;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(trimmed);
+    }
+    catch {
+        return false;
+    }
+    return (parsed !== null &&
+        typeof parsed === 'object' &&
+        parsed.t === WAS_LINK_TYPE);
+}
 const NOT_A_LINK = 'This QR code is not a wallet connection code.';
 const BAD_SERVER = 'Connection code points at an insecure or invalid server and was rejected.';
 /**

package/dist/space/wasLink.js.map

@@ -1 +1 @@
-{"version":3,"file":"wasLink.js","sourceRoot":"","sources":["../../src/space/wasLink.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAahD;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAA;AAEvC,MAAM,UAAU,GAAG,+CAA+C,CAAA;AAClE,MAAM,UAAU,GACd,2EAA2E,CAAA;AAE7E;;GAEG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AACjC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IACD,MAAM,UAAU,GACd,GAAG,CAAC,QAAQ,KAAK,WAAW;QAC5B,GAAG,CAAC,QAAQ,KAAK,WAAW;QAC5B,uDAAuD;QACvD,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAA;IAC1B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;QAC1E,OAAM;IACR,CAAC;IACD,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,SAAS,EACT,UAAU,EAIX;IACC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,CAAC,EAAE,CAAC;QACJ,CAAC,EAAE,aAAa;QAChB,SAAS;QACT,MAAM,EAAE,mBAAmB,CAAC,UAAU,CAAC;KACxC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAiC,CAAA;IACrE,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;QACxB,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,kBAAkB,CAC1B,kEAAkE,CACnE,CAAA;IACH,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAA;IACxE,CAAC;IACD,oBAAoB,CAAC,SAAS,CAAC,CAAA;IAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAA;IACxE,CAAC;IAED,IAAI,UAAkB,CAAA;IACtB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACnC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAC5C,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,kBAAkB,CAAC,sCAAsC,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;AAC1C,CAAC"}
+{"version":3,"file":"wasLink.js","sourceRoot":"","sources":["../../src/space/wasLink.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAahD;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAA;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,CACL,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QACzB,MAA0B,CAAC,CAAC,KAAK,aAAa,CAChD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,GAAG,+CAA+C,CAAA;AAClE,MAAM,UAAU,GACd,2EAA2E,CAAA;AAE7E;;GAEG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AACjC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IACD,MAAM,UAAU,GACd,GAAG,CAAC,QAAQ,KAAK,WAAW;QAC5B,GAAG,CAAC,QAAQ,KAAK,WAAW;QAC5B,uDAAuD;QACvD,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAA;IAC1B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;QAC1E,OAAM;IACR,CAAC;IACD,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,SAAS,EACT,UAAU,EAIX;IACC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,CAAC,EAAE,CAAC;QACJ,CAAC,EAAE,aAAa;QAChB,SAAS;QACT,MAAM,EAAE,mBAAmB,CAAC,UAAU,CAAC;KACxC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAiC,CAAA;IACrE,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;QACxB,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,kBAAkB,CAC1B,kEAAkE,CACnE,CAAA;IACH,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAA;IACxE,CAAC;IACD,oBAAoB,CAAC,SAAS,CAAC,CAAA;IAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,kBAAkB,CAAC,wCAAwC,CAAC,CAAA;IACxE,CAAC;IAED,IAAI,UAAkB,CAAA;IACtB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CACnC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAC5C,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,yCAAyC,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,kBAAkB,CAAC,sCAAsC,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;AAC1C,CAAC"}

package/dist/unlock/index.d.ts

@@ -40,7 +40,7 @@ export type { StandingUnlockClient, UnlockClientIdentity } from './standingClien
 export { computeUnlockBinding, LADDER_SEED_BYTES, recordSealedRecipientKeys, remintUnlockRecordDelegations, UnlockBindingError, unlockRecordBinding, unlockRecordSealedTo, unwrapUnlockRecord, wrapUnlockRecord } from './unlockRecord.js';
 export type { SealedRecordMember, SignedUnlockRecord, UnlockRecordContents, UnlockRecordProofState } from './unlockRecord.js';
 export { assertLadderVmClaimed, ladderVmClaimOf, preflightUnlockCredentialRetirement, publishUnlockKey, removeUnlockKey, UnclaimedLadderVmRetirementError, unlockKeyVerificationMethod, unlockKeyVmId } from './standingWebvh.js';
-export type { LadderVmRemovalReport, StandingUnlockKeys, UnlockKeyAgreementPublication, UnlockLogStore } from './standingWebvh.js';
+export type { CredentialKeyAgreementMethod, LadderVmRemovalReport, StandingUnlockKeys, UnlockKeyAgreementPublication, UnlockLogStore } from './standingWebvh.js';
 export { retireUnlockCredential } from './retire.js';
 export type { ClientAnnexInventoryRetirement, UnlockCredentialRetirementResult } from './retire.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/unlock/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/unlock/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,mCAAmC,EACnC,gBAAgB,EAChB,eAAe,EACf,gCAAgC,EAChC,2BAA2B,EAC3B,aAAa,EACd,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,qBAAqB,EACrB,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,EACf,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EACV,8BAA8B,EAC9B,gCAAgC,EACjC,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/unlock/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,mCAAmC,EACnC,gBAAgB,EAChB,eAAe,EACf,gCAAgC,EAChC,2BAA2B,EAC3B,aAAa,EACd,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EACV,4BAA4B,EAC5B,qBAAqB,EACrB,kBAAkB,EAClB,6BAA6B,EAC7B,cAAc,EACf,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACpD,YAAY,EACV,8BAA8B,EAC9B,gCAAgC,EACjC,MAAM,aAAa,CAAA"}

package/dist/unlock/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/unlock/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAM5B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,mBAAmB,CAAA;AAQ1B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,mCAAmC,EACnC,gBAAgB,EAChB,eAAe,EACf,gCAAgC,EAChC,2BAA2B,EAC3B,aAAa,EACd,MAAM,oBAAoB,CAAA;AAQ3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/unlock/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAM5B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,EACzB,6BAA6B,EAC7B,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,mBAAmB,CAAA;AAQ1B,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,mCAAmC,EACnC,gBAAgB,EAChB,eAAe,EACf,gCAAgC,EAChC,2BAA2B,EAC3B,aAAa,EACd,MAAM,oBAAoB,CAAA;AAS3B,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA"}

package/dist/unlock/standingWebvh.d.ts

@@ -109,11 +109,32 @@ export declare function unlockKeyVmId({ did, keyAgreement }: {
 }): string;
 /**
  * What of a standing credential's ladder currently stands in the published
- * log, resolved with the recorded update key as ANCHOR and the credential's
- * own key-agreement id as the attribution's second arm. The removal edit uses
- * it to know what to strike; the retirement ceremony uses it one stage
- * earlier, to name the ladder VM it is about to strike to the pass that
- * re-mints whatever that VM signed for other credentials.
+ * log, resolved from the two anchors a ceremony holds and cross-checked
+ * between them. The registry's recorded update key (`updateKeyMultibase`,
+ * rung 0 at bind time or a later rung a self-enrollment advanced it to) is
+ * one anchor; the credential's own `keyAgreement` member names the other,
+ * its rung-0 commitment (`ladderCommitment`, read by
+ * {@link credentialLadderAnchor}). Either one alone can be wrong for this
+ * credential -- a registry entry recording another ladder's key, a member a
+ * foreign update-key holder restated -- and a walk that trusts one strikes
+ * whatever ladder that anchor names. The removal edit uses the result to
+ * know what to strike; the retirement ceremony uses it one stage earlier,
+ * to name the ladder VM it is about to strike to the pass that re-mints
+ * whatever that VM signed for other credentials.
+ *
+ * Seedless, both walks run when the member names an anchor. The
+ * member-anchored walk starts at rung 0 and needs no backward recovery, so
+ * it is the complete reading; the registry-anchored walk may start at a
+ * later rung and recover the earlier ones from the log's positional rules,
+ * which leaves it at best equal and in one reachable history (WC-158)
+ * short of the member's. So the registry-anchored inventory must be
+ * contained in the member-anchored one, and the member-anchored one is what
+ * is returned. Anything else -- the two anchors naming different ladders --
+ * refuses with {@link LadderAttributionError}. A member naming no anchor
+ * (a split bind torn before its authority entry, a member without the
+ * property) leaves the registry walk to answer alone, as before. With the
+ * ladder seed in hand the cross-check is direct: the seed's rung-0 hash must
+ * be the member's named anchor, and the seeded walk is returned.
  *
  * It lives here rather than in the ceremony because this module is the one
  * base-side holder of the annex attribution helpers (the pinned lint
@@ -264,6 +285,22 @@ export declare function preflightUnlockCredentialRetirement({ idStore, unlockKey
     ladderVmIds: string[];
     document: DIDDoc;
 }>;
+/**
+ * The write-side shape of a credential-class `keyAgreement` member, the
+ * twin of the read side's `ResolvedKeyAgreementMethod`: a `VerificationMethod`
+ * carrying the key verbatim (`publicKeyMultibase`) or its hash commitment
+ * (`publicKeyCommitment`), and always the ladder's rung-0 commitment. Every
+ * bind site builds one through {@link unlockKeyVerificationMethod}, so the
+ * permanent property is typed where it is written rather than cast in.
+ */
+export type CredentialKeyAgreementMethod = VerificationMethod & {
+    controller: string;
+    ladderCommitment: string;
+} & ({
+    publicKeyMultibase: string;
+} | {
+    publicKeyCommitment: string;
+});
 /**
  * The credential's `keyAgreement` verification method: an ordinary unmarked
  * entry carrying either the key verbatim (a `Multikey` with
@@ -275,15 +312,26 @@ export declare function preflightUnlockCredentialRetirement({ idStore, unlockKey
  * carry the controller marker a client listing or a revocation removal
  * matches on.
  *
+ * Either flavor names its ladder's rung-0 commitment (`ladderCommitment`):
+ * `hash(rung 0)` in the multihash form `nextKeyHashes` carries, the same
+ * value the bind commits there. It is what a seedless reader anchors the
+ * credential's ladder walk on (`credentialLadderAnchor`), so no reader
+ * infers the anchor from the shape of the entry that introduced the member.
+ * Every bind site builds the member here, so no emitter can omit it; the
+ * roster resolver and the client listings ignore it.
+ *
  * @param options {object}
  * @param options.did {string}   the account's did:webvh
  * @param options.keyAgreement {UnlockKeyAgreementPublication}
- * @returns {VerificationMethod}
+ * @param options.ladderCommitment {string}   `hash(rung 0)` of the
+ *   credential's ladder, as `deriveNextKeyHash` renders it
+ * @returns {CredentialKeyAgreementMethod}
  */
-export declare function unlockKeyVerificationMethod({ did, keyAgreement }: {
+export declare function unlockKeyVerificationMethod({ did, keyAgreement, ladderCommitment }: {
     did: string;
     keyAgreement: UnlockKeyAgreementPublication;
-}): VerificationMethod;
+    ladderCommitment: string;
+}): CredentialKeyAgreementMethod;
 /**
  * BIND (run by an enrolled client, root authority): publishes a standing
  * credential's split configuration into the document -- one entry adding the
@@ -299,7 +347,17 @@ export declare function unlockKeyVerificationMethod({ did, keyAgreement }: {
  * idempotence against the SAME seed, finds the completed stage and publishes
  * nothing -- where a mint-when-absent would publish a second VM that no
  * anchored attribution could later strike. A credential with no ladder at all
- * passes `null` and gets no VM.
+ * passes `null` and gets no VM. The same rule is enforced against the
+ * document, since a caller can mint a fresh seed for a member that already
+ * stands (a torn establishment re-run, a registry entry recording the wrong
+ * key): a standing member names its ladder's rung-0 commitment
+ * (`ladderCommitment`), and a bind whose rung-0 hash differs from it refuses
+ * with {@link LadderAttributionError} and writes nothing. Re-adding the
+ * member under the new hash would leave it unclaimable by every seedless
+ * reader for the rest of its standing run and the first ladder's VM and
+ * commitment as orphans; the re-run that converges holds the seed that bound
+ * the member. A standing member naming the same hash is extended as before,
+ * which is what a split bind's authority entry does.
  *
  * `part` splits the bind across two entries where a ceremony needs the
  * credential's decryption material to precede its authority: `'key'`
@@ -370,16 +428,20 @@ export declare function publishUnlockKey(options: {
  * too, reading the log's positional rules backwards, so an anchor advanced by
  * a self-enrollment resolves the same inventory a bind-time anchor does
  * wherever each rung's hash was committed by an entry that also revealed the
- * previous rung, or by a handover. One reachable shape falls outside that: a
- * ladder VM the last-client transition reinstalled, whose acting rung a later
- * self-enrollment then spends. That reveal-and-commit entry authorizes no key,
- * so the backward walk cannot name the rung that signed it, and the VM stays
- * standing as `unclaimed` (WC-158). A supplied `ladderSeed` is then a shortcut
- * and a cross-check rather than a requirement (every rung known outright, no
- * backward walk). For a
- * single-key credential (a
- * recovery code, a never-self-enrolled bind) the resolution degenerates to
- * exactly the recorded key's hash, as before.
+ * previous rung, or by a handover. The credential's own member names a
+ * second anchor, its rung-0 commitment, and the removal walks from both and
+ * cross-checks them ({@link attributeUnlockLadderInventory}): the
+ * member-anchored walk reads the whole history forward and is what the
+ * strike acts on, the registry-anchored one must be contained in it, and
+ * two anchors resolving to different ladders refuse with
+ * {@link LadderAttributionError}. That is what reads the one history the
+ * backward walk cannot -- a ladder VM the last-client transition reinstalled,
+ * whose acting rung a later self-enrollment then spends, so that the
+ * registry anchor advances past a reveal-and-commit entry that authorized no
+ * key. A supplied `ladderSeed` is then a shortcut and a cross-check rather
+ * than a requirement (every rung known outright, no backward walk). For a
+ * single-key credential (a recovery code, a never-self-enrolled bind) the
+ * resolution degenerates to exactly the recorded key's hash, as before.
  *
  * The credential's LADDER VM goes in the same entry, so a retired credential
  * no longer signs governed-log appends or account delegations. This is the

package/dist/unlock/standingWebvh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"standingWebvh.d.ts","sourceRoot":"","sources":["../../src/unlock/standingWebvh.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EACN,kBAAkB,EACnB,MAAM,2BAA2B,CAAA;AASlC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAGhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAMxD,OAAO,EAKL,KAAK,uBAAuB,EAC7B,MAAM,0BAA0B,CAAA;AAEjC;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,YAAY,EACZ,kBAAkB,GAAG,eAAe,GAAG,KAAK,CAC7C,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,KAAK,GAAG,WAAW,CAAA;AAE7D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAA;IACzC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;gBAExB,EACV,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EACnB,EAAE;QACD,oBAAoB,EAAE,MAAM,EAAE,CAAA;QAC9B,uBAAuB,EAAE,OAAO,CAAA;QAChC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAC5B;CAmBF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GACvC;IAAE,kBAAkB,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,6BAA6B,CAAA;IAC3C,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,EAC5B,GAAG,EACH,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,MAAM,CAMT;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,GAAG,EACH,GAAG,EACH,UAAU,EACV,UAAU,EACX,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAUnC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,eAAe,CAAC,EACpC,GAAG,EACH,GAAG,EACH,SAAS,EACT,UAAU,EACX,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,uBAAuB,CAAA;IAClC,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB,GAAG,OAAO,CAAC;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA+B1E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,GAAG,EACH,GAAG,EACH,cAAc,EACd,KAAK,EACL,kBAAkB,EACnB,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;IACrE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BhB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,mCAAmC,CAAC,EACxD,OAAO,EACP,UAAU,EACV,UAAU,EACV,WAAW,EACX,cAA2E,EAC5E,EAAE;IACD,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,GAAG,KAAK,CAAC,CAAA;IACvD,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,GAAG,OAAO,CACT,qBAAqB,GAAG;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CACpE,CAmCA;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,2BAA2B,CAAC,EAC1C,GAAG,EACH,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,kBAAkB,CAgBrB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE;IAC9C,OAAO,EAAE,YAAY,CAAA;IACrB,MAAM,EAAE,gBAAgB,CAAA;IACxB,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,EAAE,UAAU,GAAG,IAAI,CAAA;IAC7B,IAAI,CAAC,EAAE,mBAAmB,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0EG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,OAAO,EAAE,YAAY,CAAA;IACrB,MAAM,EAAE,gBAAgB,CAAA;IACxB,eAAe,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,GAAG,eAAe,CAAC,CAAA;IAC1E,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,qBAAqB,CAAA;CAChC,CAAC,CAID"}
+{"version":3,"file":"standingWebvh.d.ts","sourceRoot":"","sources":["../../src/unlock/standingWebvh.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EACV,MAAM,EACN,MAAM,EACN,kBAAkB,EACnB,MAAM,2BAA2B,CAAA;AASlC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAGhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAMxD,OAAO,EAQL,KAAK,uBAAuB,EAC7B,MAAM,0BAA0B,CAAA;AAEjC;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,YAAY,EACZ,kBAAkB,GAAG,eAAe,GAAG,KAAK,CAC7C,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,KAAK,GAAG,WAAW,CAAA;AAE7D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAA;IACzC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;gBAExB,EACV,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EACnB,EAAE;QACD,oBAAoB,EAAE,MAAM,EAAE,CAAA;QAC9B,uBAAuB,EAAE,OAAO,CAAA;QAChC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAC5B;CAmBF;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GACvC;IAAE,kBAAkB,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,6BAA6B,CAAA;IAC3C,kBAAkB,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,EAC5B,GAAG,EACH,YAAY,EACb,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,6BAA6B,CAAA;CAC5C,GAAG,MAAM,CAMT;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAsB,8BAA8B,CAAC,EACnD,GAAG,EACH,GAAG,EACH,UAAU,EACV,UAAU,EACX,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA0DnC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,eAAe,CAAC,EACpC,GAAG,EACH,GAAG,EACH,SAAS,EACT,UAAU,EACX,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,uBAAuB,CAAA;IAClC,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB,GAAG,OAAO,CAAC;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA+B1E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,GAAG,EACH,GAAG,EACH,cAAc,EACd,KAAK,EACL,kBAAkB,EACnB,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;IACrE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BhB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,mCAAmC,CAAC,EACxD,OAAO,EACP,UAAU,EACV,UAAU,EACV,WAAW,EACX,cAA2E,EAC5E,EAAE;IACD,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,GAAG,KAAK,CAAC,CAAA;IACvD,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,GAAG,OAAO,CACT,qBAAqB,GAAG;IAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CACpE,CAmCA;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,4BAA4B,GAAG,kBAAkB,GAAG;IAC9D,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,CAAC;IAAE,kBAAkB,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,mBAAmB,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,2BAA2B,CAAC,EAC1C,GAAG,EACH,YAAY,EACZ,gBAAgB,EACjB,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,6BAA6B,CAAA;IAC3C,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,4BAA4B,CAkB/B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE;IAC9C,OAAO,EAAE,YAAY,CAAA;IACrB,MAAM,EAAE,gBAAgB,CAAA;IACxB,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,EAAE,UAAU,GAAG,IAAI,CAAA;IAC7B,IAAI,CAAC,EAAE,mBAAmB,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAIrD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,OAAO,EAAE,YAAY,CAAA;IACrB,MAAM,EAAE,gBAAgB,CAAA;IACxB,eAAe,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,GAAG,eAAe,CAAC,CAAA;IAC1E,UAAU,EAAE,kBAAkB,CAAA;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC;IACV,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,qBAAqB,CAAA;CAChC,CAAC,CAID"}

package/dist/unlock/standingWebvh.js

@@ -38,7 +38,7 @@ import { ladderVmIds, relationIds } from '../resourceLog/document.js';
 // ladder inventory from the log itself (the shared attribution helpers in
 // `clientAnnex/ladder.ts`), never touching the annex log machinery, and
 // derives the credential's ladder VM from its seed at the install.
-import { attributeLadderInventory, LadderAttributionError, ladderVmIdsIntroducedWithCredential, ladderVmKeyMultibase } from '../clientAnnex/ladder.js';
+import { attributeLadderInventory, credentialLadderAnchor, credentialLadderCommitment, LadderAttributionError, ladderRung, ladderVmIdsIntroducedWithCredential, ladderVmKeyMultibase } from '../clientAnnex/ladder.js';
 /**
  * A retirement whose ladder attribution could not claim the retired
  * credential's ladder VM, refused with nothing written. The shape is the
@@ -106,11 +106,32 @@ export function unlockKeyVmId({ did, keyAgreement }) {
 }
 /**
  * What of a standing credential's ladder currently stands in the published
- * log, resolved with the recorded update key as ANCHOR and the credential's
- * own key-agreement id as the attribution's second arm. The removal edit uses
- * it to know what to strike; the retirement ceremony uses it one stage
- * earlier, to name the ladder VM it is about to strike to the pass that
- * re-mints whatever that VM signed for other credentials.
+ * log, resolved from the two anchors a ceremony holds and cross-checked
+ * between them. The registry's recorded update key (`updateKeyMultibase`,
+ * rung 0 at bind time or a later rung a self-enrollment advanced it to) is
+ * one anchor; the credential's own `keyAgreement` member names the other,
+ * its rung-0 commitment (`ladderCommitment`, read by
+ * {@link credentialLadderAnchor}). Either one alone can be wrong for this
+ * credential -- a registry entry recording another ladder's key, a member a
+ * foreign update-key holder restated -- and a walk that trusts one strikes
+ * whatever ladder that anchor names. The removal edit uses the result to
+ * know what to strike; the retirement ceremony uses it one stage earlier,
+ * to name the ladder VM it is about to strike to the pass that re-mints
+ * whatever that VM signed for other credentials.
+ *
+ * Seedless, both walks run when the member names an anchor. The
+ * member-anchored walk starts at rung 0 and needs no backward recovery, so
+ * it is the complete reading; the registry-anchored walk may start at a
+ * later rung and recover the earlier ones from the log's positional rules,
+ * which leaves it at best equal and in one reachable history (WC-158)
+ * short of the member's. So the registry-anchored inventory must be
+ * contained in the member-anchored one, and the member-anchored one is what
+ * is returned. Anything else -- the two anchors naming different ladders --
+ * refuses with {@link LadderAttributionError}. A member naming no anchor
+ * (a split bind torn before its authority entry, a member without the
+ * property) leaves the registry walk to answer alone, as before. With the
+ * ladder seed in hand the cross-check is direct: the seed's rung-0 hash must
+ * be the member's named anchor, and the seeded walk is returned.
  *
  * It lives here rather than in the ceremony because this module is the one
  * base-side holder of the annex attribution helpers (the pinned lint
@@ -126,15 +147,55 @@ export function unlockKeyVmId({ did, keyAgreement }) {
  * @returns {Promise<LadderStandingInventory>}
  */
 export async function attributeUnlockLadderInventory({ log, did, unlockKeys, ladderSeed }) {
-    return attributeLadderInventory({
+    const credentialVmId = unlockKeyVmId({
+        did,
+        keyAgreement: unlockKeys.keyAgreement
+    });
+    const memberAnchor = credentialLadderAnchor({ log, credentialVmId });
+    if (ladderSeed) {
+        const rung0 = await ladderRung({ ladderSeed, index: 0 });
+        const seedAnchorHash = await deriveNextKeyHash(rung0.keyMultibase);
+        if (memberAnchor !== undefined &&
+            memberAnchor.anchorHash !== seedAnchorHash) {
+            throw new LadderAttributionError("The credential's keyAgreement member names a ladder commitment the " +
+                'supplied ladder seed does not derive; refusing to act on a ladder ' +
+                'the seed and the document disagree about.');
+        }
+        // The seed derives every rung, so the recorded key adds nothing the walk
+        // needs -- and a registry entry recording a sibling's rung would put that
+        // key into the claims. The walk anchors on the seed's own rung 0.
+        return attributeLadderInventory({
+            log,
+            anchorHash: seedAnchorHash,
+            credentialVmId,
+            ladderSeed
+        });
+    }
+    const registryAnchored = await attributeLadderInventory({
         log,
         anchorKeyMultibase: unlockKeys.updateKeyMultibase,
-        credentialVmId: unlockKeyVmId({
-            did,
-            keyAgreement: unlockKeys.keyAgreement
-        }),
-        ...(ladderSeed ? { ladderSeed } : {})
+        credentialVmId
+    });
+    if (memberAnchor === undefined) {
+        return registryAnchored;
+    }
+    const memberAnchored = await attributeLadderInventory({
+        log,
+        anchorHash: memberAnchor.anchorHash,
+        credentialVmId
     });
+    const contained = (subset) => {
+        const within = new Set(memberAnchored[subset]);
+        return registryAnchored[subset].every(item => within.has(item));
+    };
+    if (!contained('revealedKeys') ||
+        !contained('committedHashes') ||
+        !contained('ladderVmIds')) {
+        throw new LadderAttributionError("The credential's recorded update key and its keyAgreement member's " +
+            'ladder commitment resolve to different ladders; refusing to strike ' +
+            'on anchors that disagree.');
+    }
+    return memberAnchored;
 }
 /**
  * What of the document's ladder VMs a credential's attribution claims: the
@@ -335,26 +396,38 @@ export async function preflightUnlockCredentialRetirement({ idStore, unlockKeys,
  * carry the controller marker a client listing or a revocation removal
  * matches on.
  *
+ * Either flavor names its ladder's rung-0 commitment (`ladderCommitment`):
+ * `hash(rung 0)` in the multihash form `nextKeyHashes` carries, the same
+ * value the bind commits there. It is what a seedless reader anchors the
+ * credential's ladder walk on (`credentialLadderAnchor`), so no reader
+ * infers the anchor from the shape of the entry that introduced the member.
+ * Every bind site builds the member here, so no emitter can omit it; the
+ * roster resolver and the client listings ignore it.
+ *
  * @param options {object}
  * @param options.did {string}   the account's did:webvh
  * @param options.keyAgreement {UnlockKeyAgreementPublication}
- * @returns {VerificationMethod}
+ * @param options.ladderCommitment {string}   `hash(rung 0)` of the
+ *   credential's ladder, as `deriveNextKeyHash` renders it
+ * @returns {CredentialKeyAgreementMethod}
  */
-export function unlockKeyVerificationMethod({ did, keyAgreement }) {
+export function unlockKeyVerificationMethod({ did, keyAgreement, ladderCommitment }) {
     const id = unlockKeyVmId({ did, keyAgreement });
     if ('publicKeyMultibase' in keyAgreement) {
         return {
             id,
             type: MULTIKEY_VM_TYPE,
             controller: did,
-            publicKeyMultibase: keyAgreement.publicKeyMultibase
+            publicKeyMultibase: keyAgreement.publicKeyMultibase,
+            ladderCommitment
         };
     }
     return {
         id,
         type: MULTIKEY_COMMITMENT_VM_TYPE,
         controller: did,
-        publicKeyCommitment: keyAgreement.commitment
+        publicKeyCommitment: keyAgreement.commitment,
+        ladderCommitment
     };
 }
 /**
@@ -372,7 +445,17 @@ export function unlockKeyVerificationMethod({ did, keyAgreement }) {
  * idempotence against the SAME seed, finds the completed stage and publishes
  * nothing -- where a mint-when-absent would publish a second VM that no
  * anchored attribution could later strike. A credential with no ladder at all
- * passes `null` and gets no VM.
+ * passes `null` and gets no VM. The same rule is enforced against the
+ * document, since a caller can mint a fresh seed for a member that already
+ * stands (a torn establishment re-run, a registry entry recording the wrong
+ * key): a standing member names its ladder's rung-0 commitment
+ * (`ladderCommitment`), and a bind whose rung-0 hash differs from it refuses
+ * with {@link LadderAttributionError} and writes nothing. Re-adding the
+ * member under the new hash would leave it unclaimable by every seedless
+ * reader for the rest of its standing run and the first ladder's VM and
+ * commitment as orphans; the re-run that converges holds the seed that bound
+ * the member. A standing member naming the same hash is extended as before,
+ * which is what a split bind's authority entry does.
  *
  * `part` splits the bind across two entries where a ceremony needs the
  * credential's decryption material to precede its authority: `'key'`
@@ -433,16 +516,20 @@ export async function publishUnlockKey(options) {
  * too, reading the log's positional rules backwards, so an anchor advanced by
  * a self-enrollment resolves the same inventory a bind-time anchor does
  * wherever each rung's hash was committed by an entry that also revealed the
- * previous rung, or by a handover. One reachable shape falls outside that: a
- * ladder VM the last-client transition reinstalled, whose acting rung a later
- * self-enrollment then spends. That reveal-and-commit entry authorizes no key,
- * so the backward walk cannot name the rung that signed it, and the VM stays
- * standing as `unclaimed` (WC-158). A supplied `ladderSeed` is then a shortcut
- * and a cross-check rather than a requirement (every rung known outright, no
- * backward walk). For a
- * single-key credential (a
- * recovery code, a never-self-enrolled bind) the resolution degenerates to
- * exactly the recorded key's hash, as before.
+ * previous rung, or by a handover. The credential's own member names a
+ * second anchor, its rung-0 commitment, and the removal walks from both and
+ * cross-checks them ({@link attributeUnlockLadderInventory}): the
+ * member-anchored walk reads the whole history forward and is what the
+ * strike acts on, the registry-anchored one must be contained in it, and
+ * two anchors resolving to different ladders refuse with
+ * {@link LadderAttributionError}. That is what reads the one history the
+ * backward walk cannot -- a ladder VM the last-client transition reinstalled,
+ * whose acting rung a later self-enrollment then spends, so that the
+ * registry anchor advances past a reveal-and-commit entry that authorized no
+ * key. A supplied `ladderSeed` is then a shortcut and a cross-check rather
+ * than a requirement (every rung known outright, no backward walk). For a
+ * single-key credential (a recovery code, a never-self-enrolled bind) the
+ * resolution degenerates to exactly the recorded key's hash, as before.
  *
  * The credential's LADDER VM goes in the same entry, so a retired credential
  * no longer signs governed-log appends or account delegations. This is the
@@ -523,7 +610,49 @@ async function setUnlockKeyInventoryOnce({ idStore, signer, projectionStore, unl
             const { did, doc } = published;
             const keyHash = await deriveNextKeyHash(unlockKeys.updateKeyMultibase);
             const vmId = unlockKeyVmId({ did, keyAgreement: unlockKeys.keyAgreement });
+            // What the bind commits and names as the member's ladder commitment:
+            // `hash(rung 0)` derived from the seed the bind holds, which is what
+            // the recorded key must be at bind time. A recorded key that has since
+            // advanced (a registry refreshed by a self-enrollment) must neither
+            // move the anchor a re-run tests against nor be published as one.
+            const seedRung0Hash = polarity === 'publish' && ladderSeed
+                ? await deriveNextKeyHash((await ladderRung({ ladderSeed, index: 0 })).keyMultibase)
+                : undefined;
+            const anchorHash = seedRung0Hash ?? keyHash;
             const vmPresent = (doc.verificationMethod ?? []).some(method => method.id === vmId);
+            const reading = polarity === 'publish' && vmPresent
+                ? credentialLadderCommitment({
+                    log: published.log,
+                    credentialVmId: vmId
+                })
+                : undefined;
+            if (polarity === 'publish' &&
+                !vmPresent &&
+                seedRung0Hash !== undefined &&
+                seedRung0Hash !== keyHash) {
+                throw new LadderAttributionError("did:webvh: the credential's recorded update key is not rung 0 of " +
+                    'the ladder seed handed to the bind; refusing to publish an ' +
+                    'inventory the seed does not derive.');
+            }
+            if (polarity === 'publish' && vmPresent) {
+                // The write-side half of the anchor rule: a standing member's
+                // `ladderCommitment` is what every seedless reader anchors the
+                // credential's ladder on, and only the ladder that bound the member
+                // may extend its inventory. A bind reaching a standing member under
+                // another rung-0 hash -- a torn establishment re-run that minted a
+                // fresh seed, a registry entry naming the wrong key, a sibling's
+                // rung -- would re-add the member naming the new hash, leaving the
+                // member unclaimable for the rest of its standing run and the first
+                // ladder's VM and commitment as orphans. It refuses instead, with
+                // nothing written: the re-run that converges is the one holding the
+                // seed that bound the member.
+                if (reading?.retargeted || reading?.named !== anchorHash) {
+                    throw new LadderAttributionError("did:webvh: the credential's keyAgreement member already stands " +
+                        'naming a ladder commitment this bind does not derive; ' +
+                        'refusing to re-bind a standing member under another ladder. ' +
+                        'Re-run with the ladder seed that bound it.');
+                }
+            }
             // The remove polarity strikes the ladder's CURRENT inventory, resolved
             // from the log with the recorded key as anchor -- never just the
             // recorded key's hash, which a self-enrollment since the bind leaves
@@ -579,7 +708,11 @@ async function setUnlockKeyInventoryOnce({ idStore, signer, projectionStore, unl
                 ? ladderVmId !== undefined && standingLadderVmIds.includes(ladderVmId)
                 : struckLadderVmIds.size > 0;
             const struckIds = new Set([vmId, ...struckLadderVmIds]);
-            const hashCommitted = published.nextKeyHashes.includes(keyHash);
+            // The authority half is settled once the log committed the anchor for
+            // the member: standing still, or spent since by a self-enrollment that
+            // climbed the ladder past it.
+            const hashCommitted = published.nextKeyHashes.includes(anchorHash) ||
+                reading?.committed === true;
             // What this entry is responsible for, by `part`: the key half publishes
             // the `keyAgreement` member alone, the authority half the ladder VM and
             // the rung's commitment, and the default entry both.
@@ -606,7 +739,7 @@ async function setUnlockKeyInventoryOnce({ idStore, signer, projectionStore, unl
             // the seam's `commitHashes`, so on a ladder-signed entry it lands after
             // the acting rung's own carry-over hash (`decisions/0007` order).
             const commitHashes = polarity === 'publish' && publishesAuthority && !hashCommitted
-                ? [keyHash]
+                ? [anchorHash]
                 : [];
             const nextKeyHashes = polarity === 'publish'
                 ? undefined
@@ -627,7 +760,14 @@ async function setUnlockKeyInventoryOnce({ idStore, signer, projectionStore, unl
                         ? [
                             unlockKeyVerificationMethod({
                                 did,
-                                keyAgreement: unlockKeys.keyAgreement
+                                keyAgreement: unlockKeys.keyAgreement,
+                                /**
+                                 * The recorded update key is rung 0 at bind time, so
+                                 * its hash is the member's ladder commitment -- on a
+                                 * split bind too, where the authority entry commits it
+                                 * two versions later.
+                                 */
+                                ladderCommitment: anchorHash
                             })
                         ]
                         : []),