@scopeblind/core 0.2.0 → 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/PATENTS.md +53 -0
  2. package/package.json +2 -2
package/PATENTS.md ADDED
@@ -0,0 +1,53 @@
1
+ # Patent Notice
2
+
3
+ This software is open source. You are free to use, modify, and distribute it
4
+ under its stated license (MIT or Apache-2.0 — see each package's LICENSE file).
5
+
6
+ ## Patent Holdings
7
+
8
+ ScopeBlind Pty Ltd (ABN 41 693 027 440) holds provisional patent applications
9
+ covering specific methods used in conjunction with this software:
10
+
11
+ 1. **VOPRF Metering** (AU Provisional, ~October 2025) — Deterministic
12
+ credential derivation using Verifiable Oblivious Pseudorandom Functions
13
+ for privacy-preserving rate limiting and metering.
14
+
15
+ 2. **Verifier Nullifiers** (AU Provisional, ~October 2025) — Issuer-blind
16
+ verification scheme where the verifier confirms credential validity
17
+ without learning which organization issued it.
18
+
19
+ 3. **Offline Enforcement** (AU Provisional, ~October 2025) — Self-contained
20
+ policy enforcement with cryptographic receipts that are independently
21
+ verifiable without contacting the issuer.
22
+
23
+ 4. **Decision Receipts with Configurable Disclosure** (AU Provisional,
24
+ March 2026) — Signed decision artifacts with holder-bound zero-knowledge
25
+ compliance proofs, tool-calling gateway integration, agent manifests,
26
+ portable identity, and cross-algorithm key binding. 20 claims, 8 figures.
27
+
28
+ ## Scope
29
+
30
+ These patents cover specific server-side issuance methods and the novel
31
+ composition of VOPRF credentials with policy enforcement and receipt signing.
32
+ They do NOT restrict your use of:
33
+
34
+ - The open-source verification code (`@veritasacta/verify`)
35
+ - The policy enforcement gateway (`protect-mcp`)
36
+ - The Ed25519 signing primitives (`@veritasacta/artifacts`)
37
+ - The receipt format specified in the IETF Internet-Draft
38
+ - Standard cryptographic operations (Ed25519, JCS, SHA-256)
39
+
40
+ ## Apache-2.0 Patent Grant
41
+
42
+ Packages licensed under Apache-2.0 include an explicit patent grant per
43
+ Section 3 of the Apache License, Version 2.0. This grant covers the use
44
+ of the software as distributed. The grant terminates only if you initiate
45
+ patent litigation alleging that the software constitutes patent infringement
46
+ (retaliation clause, Section 3).
47
+
48
+ ## Contact
49
+
50
+ Patent inquiries: patents@scopeblind.com
51
+ General: tommy@scopeblind.com
52
+ Website: https://scopeblind.com
53
+ IETF Draft: https://datatracker.ietf.org/doc/draft-farley-acta-signed-receipts/
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@scopeblind/core",
3
- "version": "0.2.0",
3
+ "version": "0.2.1",
4
4
  "description": "ScopeBlind in one install. Bundles protect-mcp + passport + verify for AI agent governance.",
5
5
  "license": "Apache-2.0",
6
6
  "repository": {
@@ -23,7 +23,7 @@
23
23
  "policy"
24
24
  ],
25
25
  "dependencies": {
26
- "protect-mcp": "^0.4.6",
26
+ "protect-mcp": "^0.7.0",
27
27
  "@scopeblind/passport": "^0.4.2",
28
28
  "@veritasacta/verify": "^0.2.2"
29
29
  },