@openwop/openwop-conformance 2.37.0 → 2.38.0

package/vectors/jcs-v1.json

@@ -0,0 +1,294 @@
+{
+  "$comment": [
+    "RFC 0212 — cross-language vectors for canonical JSON (RFC 8785 JCS) with the OpenWOP I-JSON refusal set.",
+    "Every signed or hashed preimage in the corpus MUST reproduce `canonical` and `sha256` for each `objects` entry, `canonical` for each `numbers` entry, and MUST refuse each `refusals` entry with a refusal (the `refuse` kind is informative).",
+    "Generated by a reference implementation that parses JSON TEXT (so duplicates, integer magnitude and lone surrogates are visible before coercion) and cross-checked against RFC 8785 Appendix B and §3.2.2/§3.2.3."
+  ],
+  "spec": "RFC 8785; RFC 7493 (I-JSON); RFC 0212",
+  "hash": "sha256, lowercase hex, over the UTF-8 bytes of `canonical`",
+  "numbers": [
+    {
+      "ieee754": "0000000000000000",
+      "canonical": "0"
+    },
+    {
+      "ieee754": "8000000000000000",
+      "canonical": "0"
+    },
+    {
+      "ieee754": "0000000000000001",
+      "canonical": "5e-324"
+    },
+    {
+      "ieee754": "8000000000000001",
+      "canonical": "-5e-324"
+    },
+    {
+      "ieee754": "7fefffffffffffff",
+      "canonical": "1.7976931348623157e+308"
+    },
+    {
+      "ieee754": "ffefffffffffffff",
+      "canonical": "-1.7976931348623157e+308"
+    },
+    {
+      "ieee754": "4340000000000000",
+      "canonical": "9007199254740992"
+    },
+    {
+      "ieee754": "c340000000000000",
+      "canonical": "-9007199254740992"
+    },
+    {
+      "ieee754": "4430000000000000",
+      "canonical": "295147905179352830000"
+    },
+    {
+      "ieee754": "44b52d02c7e14af5",
+      "canonical": "9.999999999999997e+22"
+    },
+    {
+      "ieee754": "44b52d02c7e14af6",
+      "canonical": "1e+23"
+    },
+    {
+      "ieee754": "44b52d02c7e14af7",
+      "canonical": "1.0000000000000001e+23"
+    },
+    {
+      "ieee754": "444b1ae4d6e2ef4e",
+      "canonical": "999999999999999700000"
+    },
+    {
+      "ieee754": "444b1ae4d6e2ef4f",
+      "canonical": "999999999999999900000"
+    },
+    {
+      "ieee754": "444b1ae4d6e2ef50",
+      "canonical": "1e+21"
+    },
+    {
+      "ieee754": "3eb0c6f7a0b5ed8c",
+      "canonical": "9.999999999999997e-7"
+    },
+    {
+      "ieee754": "3eb0c6f7a0b5ed8d",
+      "canonical": "0.000001"
+    },
+    {
+      "ieee754": "41b3de4355555553",
+      "canonical": "333333333.3333332"
+    },
+    {
+      "ieee754": "41b3de4355555554",
+      "canonical": "333333333.33333325"
+    },
+    {
+      "ieee754": "41b3de4355555555",
+      "canonical": "333333333.3333333"
+    },
+    {
+      "ieee754": "41b3de4355555556",
+      "canonical": "333333333.3333334"
+    },
+    {
+      "ieee754": "41b3de4355555557",
+      "canonical": "333333333.33333343"
+    },
+    {
+      "ieee754": "becbf647612f3696",
+      "canonical": "-0.0000033333333333333333"
+    },
+    {
+      "ieee754": "43143ff3c1cb0959",
+      "canonical": "1424953923781206.2"
+    }
+  ],
+  "numberRefusals": [
+    {
+      "ieee754": "7fffffffffffffff",
+      "refuse": "non-finite"
+    },
+    {
+      "ieee754": "7ff0000000000000",
+      "refuse": "non-finite"
+    }
+  ],
+  "objects": [
+    {
+      "id": "rfc8785-3.2.2",
+      "why": "RFC 8785 §3.2.2 worked example: number shortest-round-trip, string escapes, member sort.",
+      "input": "{\"numbers\": [333333333.33333329, 1E30, 4.50, 2e-3, 0.000000000000000000000000001], \"string\": \"\\u20ac$\\u000F\\u000aA'\\u0042\\u0022\\u005c\\\\\\\"\\/\", \"literals\": [null, true, false]}",
+      "canonical": "{\"literals\":[null,true,false],\"numbers\":[333333333.3333333,1e+30,4.5,0.002,1e-27],\"string\":\"€$\\u000f\\nA'B\\\"\\\\\\\\\\\"/\"}",
+      "sha256": "2d5e01a318d0f0879ab568c4be289c8b1f64ef8921a53c6277d5e069978baacb"
+    },
+    {
+      "id": "rfc8785-3.2.3-sort",
+      "why": "RFC 8785 §3.2.3: members sorted by UTF-16 code units — CR, \"1\", U+0080, ö, €, 😀 (surrogate pair D83D), דּ (FB33). Locale collation gives a different order.",
+      "input": "{\"€\":\"Euro Sign\",\"\\r\":\"Carriage Return\",\"דּ\":\"Hebrew Letter Dalet With Dagesh\",\"1\":\"One\",\"😀\":\"Emoji: Grinning Face\",\"\\u0080\":\"Control\",\"ö\":\"Latin Small Letter O With Diaeresis\"}",
+      "canonical": "{\"\\r\":\"Carriage Return\",\"1\":\"One\",\"€\":\"Control\",\"ö\":\"Latin Small Letter O With Diaeresis\",\"€\":\"Euro Sign\",\"😀\":\"Emoji: Grinning Face\",\"דּ\":\"Hebrew Letter Dalet With Dagesh\"}",
+      "sha256": "5e321556d22018a9656991a9e94f77ec175fa193e52a2429d312f8419ec8b08c"
+    },
+    {
+      "id": "integer-like-keys",
+      "why": "Keys \"10\" and \"9\" sort by code unit (\"1\" < \"9\"). A canonicalizer that rebuilds a JS object and calls JSON.stringify emits {\"9\":…,\"10\":…} — the sabotage this vector exists for.",
+      "input": "{\"9\":\"nine\",\"10\":\"ten\",\"a\":0}",
+      "canonical": "{\"10\":\"ten\",\"9\":\"nine\",\"a\":0}",
+      "sha256": "ac5e0767681af2d226a2a4df567cee9cd3254a7819a7643f8bddbfa690792dad"
+    },
+    {
+      "id": "nested-sort",
+      "why": "Sorting applies at every level; arrays keep their order.",
+      "input": "{\"b\":[{\"z\":1,\"a\":2},{\"y\":[3,1,2]}],\"a\":{\"d\":null,\"c\":true}}",
+      "canonical": "{\"a\":{\"c\":true,\"d\":null},\"b\":[{\"a\":2,\"z\":1},{\"y\":[3,1,2]}]}",
+      "sha256": "fc8d1753fb837b89a49b6335715adb82c262e9a6bbfe7f4e7b8993e297951cca"
+    },
+    {
+      "id": "control-escapes",
+      "why": "U+0000–U+001F: short forms for \\b \\t \\n \\f \\r, lowercase \\u00xx otherwise; U+007F and U+2028 are emitted raw; \"/\" is not escaped.",
+      "input": "{\"s\":\"\\u0000\\u0007\\b\\t\\n\\u000b\\f\\r\\u001f\\u007f
/\"}",
+      "canonical": "{\"s\":\"\\u0000\\u0007\\b\\t\\n\\u000b\\f\\r\\u001f
/\"}",
+      "sha256": "993e6efcefb9f0bc08a2f896edce693cd6e80aa50ed6337ae0921b06a656c1a3"
+    },
+    {
+      "id": "non-ascii-raw",
+      "why": "Non-ASCII is emitted as raw UTF-8, never \\u-escaped (em dash, as in 625 registry pack strings).",
+      "input": "{\"title\":\"a — b\",\"emoji\":\"😀\"}",
+      "canonical": "{\"emoji\":\"😀\",\"title\":\"a — b\"}",
+      "sha256": "d2a26872e24a775a770515e000f1bb85a0949c08b40621292b7e70037006d02d"
+    },
+    {
+      "id": "nfc-composed",
+      "why": "U+00E9 (composed). MUST NOT hash equal to the decomposed vector: JCS applies no Unicode normalization.",
+      "input": "{\"name\":\"café\"}",
+      "canonical": "{\"name\":\"café\"}",
+      "sha256": "645fa443126a8954fc6d871912b8fc67bc2ee8feae417efe55546251962ca74d"
+    },
+    {
+      "id": "nfd-decomposed",
+      "why": "U+0065 U+0301 (decomposed). Pair with nfc-composed.",
+      "input": "{\"name\":\"café\"}",
+      "canonical": "{\"name\":\"café\"}",
+      "sha256": "4b7186ff40a64bfae3cb4bd75ac13b0de5ee693190f20812aaff208a77560ca7"
+    },
+    {
+      "id": "numbers-in-document",
+      "why": "Numbers inside a document: -0 → 0, 1.0 → 1, 1e21 → 1e+21, 1e-7 → 1e-7, 0.1+0.2 shortest form, 2^53−1 accepted.",
+      "input": "{\"n\":[-0,1.0,1e21,1e-7,0.30000000000000004,9007199254740991,-9007199254740991]}",
+      "canonical": "{\"n\":[0,1,1e+21,1e-7,0.30000000000000004,9007199254740991,-9007199254740991]}",
+      "sha256": "430e3fefe48227fd5ed7df3ba8b5a6da008c2077858a44bd265d4c7812c498c1"
+    },
+    {
+      "id": "empty-containers",
+      "why": "Empty object and array.",
+      "input": "{\"a\":{},\"b\":[]}",
+      "canonical": "{\"a\":{},\"b\":[]}",
+      "sha256": "aeeba1e56a144077f89e26c930dad7cf933e9383cfb8e33ddff618233b29be76"
+    }
+  ],
+  "refusals": [
+    {
+      "id": "duplicate-name",
+      "why": "I-JSON §2.3: duplicate member names.",
+      "input": "{\"a\":1,\"a\":2}",
+      "refuse": "duplicate-name"
+    },
+    {
+      "id": "lone-high-surrogate",
+      "why": "I-JSON §2.1: a lone surrogate is not a Unicode scalar value.",
+      "input": "{\"s\":\"\\ud800\"}",
+      "refuse": "lone-surrogate"
+    },
+    {
+      "id": "lone-low-surrogate",
+      "why": "I-JSON §2.1.",
+      "input": "{\"s\":\"x\\udc00\"}",
+      "refuse": "lone-surrogate"
+    },
+    {
+      "id": "integer-above-range",
+      "why": "Integer literal 2^53+1 exceeds ±(2^53−1) (I-JSON §2.2); a double cannot hold it exactly and a Python verifier would keep it exact — the two canonical forms differ.",
+      "input": "{\"n\":9007199254740993}",
+      "refuse": "integer-out-of-range"
+    },
+    {
+      "id": "integer-below-range",
+      "why": "Integer literal −2^53.",
+      "input": "{\"n\":-9007199254740992}",
+      "refuse": "integer-out-of-range"
+    },
+    {
+      "id": "nan-token",
+      "why": "NaN is not JSON. A JS canonicalizer given an in-memory NaN MUST refuse, not emit null.",
+      "input": "{\"n\":NaN}",
+      "refuse": "not-json"
+    },
+    {
+      "id": "infinity-overflow",
+      "why": "1e400 parses to Infinity: non-finite.",
+      "input": "{\"n\":1e400}",
+      "refuse": "non-finite"
+    }
+  ],
+  "ordering": {
+    "why": "witnessSha256 rows[] and RFC 0150 tools[] sort by UTF-16 code units of the key. Locale collation disagrees in both listed locales; a verifier using either computes a different digest.",
+    "ids": [
+      "d",
+      "h",
+      "ch",
+      "i",
+      "chain-pin-exact",
+      "h2",
+      "get_weather",
+      "getWeather",
+      "A",
+      "a",
+      "a-b",
+      "ab"
+    ],
+    "codeUnit": [
+      "A",
+      "a",
+      "a-b",
+      "ab",
+      "ch",
+      "chain-pin-exact",
+      "d",
+      "getWeather",
+      "get_weather",
+      "h",
+      "h2",
+      "i"
+    ],
+    "localeCs": [
+      "a",
+      "A",
+      "a-b",
+      "ab",
+      "d",
+      "get_weather",
+      "getWeather",
+      "h",
+      "h2",
+      "ch",
+      "chain-pin-exact",
+      "i"
+    ],
+    "localeEn": [
+      "a",
+      "A",
+      "a-b",
+      "ab",
+      "ch",
+      "chain-pin-exact",
+      "d",
+      "get_weather",
+      "getWeather",
+      "h",
+      "h2",
+      "i"
+    ],
+    "differsFromCs": true,
+    "differsFromEn": true
+  }
+}

package/vectors/semantic-request-digest-v2.json

@@ -141,6 +141,58 @@
       "canonical": "{\"model\":\"claude-x\",\"provider\":\"anthropic\",\"recipe\":\"openwop-semantic-request-v2\",\"request\":{\"messages\":[{\"content\":\"hello\",\"role\":\"user\"}],\"tools\":[{\"name\":\"alpha\",\"parameters\":{}},{\"name\":\"zeta\",\"parameters\":{}}]}}",
       "digest": "afb590dd7bf6c78915852e15318fd4c9d6d6e0d473288283f413e5e425ba0cd6"
     },
+    {
+      "id": "tools-code-unit-order",
+      "why": "RFC 0212 §D: tools sort by name in UTF-16 code units. `getWeather` (W = 0x57) precedes `get_weather` (_ = 0x5F); English collation ignores `_` and a Czech/English localeCompare orders them the other way, which is why `alpha`/`zeta` could not catch it.",
+      "input": {
+        "provider": "anthropic",
+        "model": "claude-x",
+        "messages": [
+          {
+            "role": "user",
+            "content": "hello"
+          }
+        ],
+        "tools": [
+          {
+            "name": "get_weather",
+            "parameters": {}
+          },
+          {
+            "name": "getWeather",
+            "parameters": {}
+          }
+        ]
+      },
+      "canonical": "{\"model\":\"claude-x\",\"provider\":\"anthropic\",\"recipe\":\"openwop-semantic-request-v2\",\"request\":{\"messages\":[{\"content\":\"hello\",\"role\":\"user\"}],\"tools\":[{\"name\":\"getWeather\",\"parameters\":{}},{\"name\":\"get_weather\",\"parameters\":{}}]}}",
+      "digest": "8ddc711c24f17c75efa8fd61e4060573461973ed0ae3fc79c056533d6bb1d0d0"
+    },
+    {
+      "id": "tools-code-unit-order-reversed",
+      "why": "Same two tools, opposite input order. MUST equal the previous vector.",
+      "input": {
+        "provider": "anthropic",
+        "model": "claude-x",
+        "messages": [
+          {
+            "role": "user",
+            "content": "hello"
+          }
+        ],
+        "tools": [
+          {
+            "name": "getWeather",
+            "parameters": {}
+          },
+          {
+            "name": "get_weather",
+            "parameters": {}
+          }
+        ]
+      },
+      "canonical": "{\"model\":\"claude-x\",\"provider\":\"anthropic\",\"recipe\":\"openwop-semantic-request-v2\",\"request\":{\"messages\":[{\"content\":\"hello\",\"role\":\"user\"}],\"tools\":[{\"name\":\"getWeather\",\"parameters\":{}},{\"name\":\"get_weather\",\"parameters\":{}}]}}",
+      "digest": "8ddc711c24f17c75efa8fd61e4060573461973ed0ae3fc79c056533d6bb1d0d0"
+    },
     {
       "id": "message-order-is-semantic",
       "why": "Message order IS semantic and MUST NOT be sorted — this must differ from a reordered twin.",