@zanii/certify 0.6.1 → 0.7.1

package/dist/bundle.d.ts

@@ -1,6 +1,7 @@
 import { type Staff } from "./impartiality.ts";
 import { type CategoryScore } from "./scoring.ts";
 import { type ApplianceExecution, type ApplianceExportIdentity } from "./appliance-execution.ts";
+import { type AssessmentEvidence, type Declaration, type EndpointBinding } from "./production.ts";
 export type { ApplianceExecution, ApplianceExportIdentity } from "./appliance-execution.ts";
 export interface CategoryCount {
     category: string;
@@ -45,11 +46,20 @@ export interface BundleInput {
     } | null;
     /** Section 2a (scheme 0.4): the categories assessed as simulated multi-step workflows, and the agent interface tested. */
     assessment?: Assessment | null;
+    /** Section 4b (scheme 0.5): the applicant's signed declaration (production-binding.md section 2). */
+    declaration?: Declaration | null;
 }
-/** What a 0.4 run assessed: `voice_text` is a voice agent tested through its text interface only, never its audio. */
+/**
+ * What a 0.4 or 0.5 run assessed: `voice_text` is a voice agent tested through its text interface
+ * only, never its audio. Under 0.5 also the production evidence and the endpoint binding.
+ */
 export interface Assessment {
     trajectory_categories: string[];
     interface: "text" | "voice_text";
+    /** Scheme 0.5 only: `self_reported` (Level 1 only), `attested` or `blackbox`. */
+    evidence?: AssessmentEvidence;
+    /** Scheme 0.5 only: the pinned TLS key of the endpoint and whether it answered the run's nonce. */
+    endpoint?: EndpointBinding;
 }
 export interface ResultBundle {
     execution?: ApplianceExecution;
@@ -77,6 +87,7 @@ export interface ResultBundle {
         covered_by: string;
     };
     assessment?: Assessment;
+    declaration?: Declaration;
 }
 export interface ApplianceExportBundle extends Omit<ResultBundle, "v" | "staff" | "execution" | "partial"> {
     v: 2;

package/dist/bundle.js

@@ -5,6 +5,7 @@ import { staffRefusals } from "./impartiality.js";
 import { scoreCategory } from "./scoring.js";
 import { isDid, isInt, isIso, isSha, ms, SLUG, sortedUnique } from "./shared.js";
 import { applianceExecution, applianceExportIdentity } from "./appliance-execution.js";
+import { ASSESSMENT_EVIDENCE, endpointBindingOk, PRODUCTION_SCHEME, verifyDeclaration } from "./production.js";
 const CATEGORY = /^[a-z][a-z0-9_]{0,63}$/;
 const FINDING = /^[A-Z][A-Z0-9_]{0,63}$/;
 const CASE_ID = /^[A-Za-z0-9._:-]{1,128}$/;
@@ -71,6 +72,7 @@ function normalizedBundle(input, source) {
     if (partial !== null && (Object.keys(partial).length !== 1 || !isSha(partial.covered_by)))
         throw new Error("partial must be {covered_by: <bundle hash>}");
     const assessment = input.assessment == null ? null : assessmentOf(input.assessment, categories, scheme);
+    const declaration = input.declaration == null ? null : declarationOf(input.declaration, input.profile, input.level, scheme);
     const execution = input.execution == null ? undefined : applianceExecution(input.execution), machine = source?.appliance ?? execution?.appliance;
     if (machine && [...testers, reviewer, decider].includes(machine))
         throw new Error("an appliance cannot be recorded as human staff");
@@ -91,6 +93,7 @@ function normalizedBundle(input, source) {
         ...(partial ? { partial: { covered_by: partial.covered_by } } : {}),
         ...(execution ? { execution } : {}),
         ...(assessment ? { assessment } : {}),
+        ...(declaration ? { declaration } : {}),
     };
     if (source) {
         const { partial: ignored, ...base } = bundle;
@@ -99,15 +102,31 @@ function normalizedBundle(input, source) {
     return bundle;
 }
 function assessmentOf(a, categories, scheme) {
-    if (scheme !== "zanii-certify/0.4")
+    const v05 = scheme === PRODUCTION_SCHEME;
+    if (scheme !== "zanii-certify/0.4" && !v05)
         throw new Error("assessment needs scheme zanii-certify/0.4");
-    if (typeof a !== "object" || Object.keys(a).sort().join() !== "interface,trajectory_categories" || !Array.isArray(a.trajectory_categories)
+    const keys = v05 ? "endpoint,evidence,interface,trajectory_categories" : "interface,trajectory_categories";
+    if (typeof a !== "object" || Object.keys(a).sort().join() !== keys || !Array.isArray(a.trajectory_categories)
         || (a.interface !== "text" && a.interface !== "voice_text"))
-        throw new Error("assessment must be {trajectory_categories, interface}");
+        throw new Error(v05 ? "assessment must be {trajectory_categories, interface, evidence, endpoint}" : "assessment must be {trajectory_categories, interface}");
     const workflow = sortedUnique(a.trajectory_categories);
     if (workflow.length !== a.trajectory_categories.length || !workflow.every((c) => categories.includes(c)))
         throw new Error("assessment.trajectory_categories must be distinct planned categories");
-    return { trajectory_categories: workflow, interface: a.interface };
+    if (!v05)
+        return { trajectory_categories: workflow, interface: a.interface };
+    if (!ASSESSMENT_EVIDENCE.includes(a.evidence))
+        throw new Error("assessment.evidence must be self_reported, attested or blackbox");
+    if (!endpointBindingOk(a.endpoint))
+        throw new Error("assessment.endpoint must be {spki_sha256, proved}");
+    return { trajectory_categories: workflow, interface: a.interface, evidence: a.evidence, endpoint: { spki_sha256: a.endpoint.spki_sha256, proved: a.endpoint.proved } };
+}
+function declarationOf(d, profile, level, scheme) {
+    if (scheme !== PRODUCTION_SCHEME)
+        throw new Error("declaration needs scheme zanii-certify/0.5");
+    const check = verifyDeclaration(d, { profile, level, now: "9999-12-31T23:59:59.999Z" });
+    if (!check.ok)
+        throw new Error(`declaration: ${check.reasons[0]}`);
+    return structuredClone(d);
 }
 /** Existing v1 output is unchanged unless explicit verified appliance provenance is supplied. */
 export function buildBundle(input) { return normalizedBundle(input); }

package/dist/certificate.d.ts

@@ -10,7 +10,7 @@ import { type StatusDocument, type StatusEntry, type StatusWitness } from "./sta
 import { type IssuerPolicy, type ReleaseVerificationPolicy } from "./verification-policy.ts";
 import { type AuditRenewalPolicy } from "./audit-renewal.ts";
 /** scheme.md section 8: every scheme version a certificate or bundle may name. */
-export declare const SCHEMES: readonly ["zanii-certify/0.1", "zanii-certify/0.2", "zanii-certify/0.3", "zanii-certify/0.4"];
+export declare const SCHEMES: readonly ["zanii-certify/0.1", "zanii-certify/0.2", "zanii-certify/0.3", "zanii-certify/0.4", "zanii-certify/0.5"];
 export type Scheme = (typeof SCHEMES)[number];
 /** The current scheme. */
 export declare const SCHEME: Scheme;
@@ -18,6 +18,8 @@ export declare const LEVELS: readonly [1, 2, 3];
 export type Level = (typeof LEVELS)[number];
 /** scheme.md section 2: the levels each scheme version issues. */
 export declare const SCHEME_LEVELS: Record<Scheme, readonly Level[]>;
+/** scheme.md section 8: `scheme` is `min` or a later version (false for an unknown scheme). */
+export declare const schemeFrom: (scheme: unknown, min: Scheme) => boolean;
 /**
  * scheme.md section 8: the scheme a certificate or bundle is issued under. Given, it must issue
  * `level` (and allow 0.2 features when `needs02`, 0.3 features when `needs03`); absent, 0.3 with a
@@ -28,6 +30,10 @@ export declare const CONFLICTS: readonly ["blackbox_customer", "ledger_customer"
 export type Conflict = (typeof CONFLICTS)[number];
 /** scheme.md section 5: the default re-test interval per level. */
 export declare const SURVEILLANCE: Record<Level, string>;
+/** scheme.md section 6: a suspension not cleared within 90 days is due for revocation (a decider revokes, never the lab's surveillance). */
+export declare const SUSPENSION_REVOCATION_DAYS = 90;
+/** scheme.md section 6: the applicant is warned on day 60 of a suspension not cleared. */
+export declare const SUSPENSION_WARNING_DAYS = 60;
 /** scheme.md section 4: validity is 365 days from issue. */
 export declare const VALIDITY_DAYS = 365;
 export declare const DOMAIN: RegExp;

package/dist/certificate.js

@@ -16,9 +16,9 @@ import { verifyAuditRenewal } from "./audit-renewal.js";
 import { withinVerificationBudget } from "./verification-bounds.js";
 import { signingIdentityReasons } from "./signing-identity.js";
 /** scheme.md section 8: every scheme version a certificate or bundle may name. */
-export const SCHEMES = ["zanii-certify/0.1", "zanii-certify/0.2", "zanii-certify/0.3", "zanii-certify/0.4"];
+export const SCHEMES = ["zanii-certify/0.1", "zanii-certify/0.2", "zanii-certify/0.3", "zanii-certify/0.4", "zanii-certify/0.5"];
 /** The current scheme. */
-export const SCHEME = "zanii-certify/0.4";
+export const SCHEME = "zanii-certify/0.5";
 export const LEVELS = [1, 2, 3];
 /** scheme.md section 2: the levels each scheme version issues. */
 export const SCHEME_LEVELS = {
@@ -26,7 +26,10 @@ export const SCHEME_LEVELS = {
     "zanii-certify/0.2": [1, 2, 3],
     "zanii-certify/0.3": [1, 2, 3],
     "zanii-certify/0.4": [1, 2, 3],
+    "zanii-certify/0.5": [1, 2, 3],
 };
+/** scheme.md section 8: `scheme` is `min` or a later version (false for an unknown scheme). */
+export const schemeFrom = (scheme, min) => SCHEMES.includes(scheme) && SCHEMES.indexOf(scheme) >= SCHEMES.indexOf(min);
 /**
  * scheme.md section 8: the scheme a certificate or bundle is issued under. Given, it must issue
  * `level` (and allow 0.2 features when `needs02`, 0.3 features when `needs03`); absent, 0.3 with a
@@ -40,7 +43,7 @@ export function pickScheme(scheme, level, needs02 = false, needs03 = false) {
         throw new Error(`level ${level} is not issued under ${s}`);
     if (needs02 && s === "zanii-certify/0.1")
         throw new Error("a post-quantum binding needs scheme zanii-certify/0.2");
-    if (needs03 && s !== "zanii-certify/0.3" && s !== "zanii-certify/0.4")
+    if (needs03 && !schemeFrom(s, "zanii-certify/0.3"))
         throw new Error("a licence needs scheme zanii-certify/0.3 or later");
     return s;
 }
@@ -53,6 +56,10 @@ export const CONFLICTS = [
 ];
 /** scheme.md section 5: the default re-test interval per level. */
 export const SURVEILLANCE = { 1: "P30D", 2: "P90D", 3: "P90D" };
+/** scheme.md section 6: a suspension not cleared within 90 days is due for revocation (a decider revokes, never the lab's surveillance). */
+export const SUSPENSION_REVOCATION_DAYS = 90;
+/** scheme.md section 6: the applicant is warned on day 60 of a suspension not cleared. */
+export const SUSPENSION_WARNING_DAYS = 60;
 /** scheme.md section 4: validity is 365 days from issue. */
 export const VALIDITY_DAYS = 365;
 export const DOMAIN = /^(?=.{1,253}$)([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/;
@@ -171,7 +178,7 @@ export function claimReasons(cert) {
         out.push("claim audit is an audit attestation hash, required at level 3 and only there");
     if ("pq_binding" in c && (!scheme || scheme === "zanii-certify/0.1" || !isSha(c.pq_binding)))
         out.push("claim pq_binding needs scheme zanii-certify/0.2 and a binding hash");
-    if ("licence" in c && ((scheme !== "zanii-certify/0.3" && scheme !== "zanii-certify/0.4") || !isSha(c.licence)))
+    if ("licence" in c && (!schemeFrom(scheme, "zanii-certify/0.3") || !isSha(c.licence)))
         out.push("claim licence needs scheme zanii-certify/0.3 or later and a licence hash");
     return out;
 }

package/dist/cli-messages.json

@@ -1,6 +1,6 @@
 {
     "en": {
-        "usage_v2": "certify CLI help v2\nusage: certify verify <cert.json> [--status <file>] [--issuer-doc <file>] [--fingerprint <file>] [--online <base url>] [--now <time>] [--lang en|ar] [--pq <file>|off]\n       [--audit <file>] [--trusted-bodies <file>] [--body-register <file>] [--status-witness <file>] [--release-policy <file>] [--strict-policy <file>]\n       certify fingerprint --model <model> [--prompt-file <file>] [--tools-file <file>] [--policy-file <file>] [--knowledge-file <file>]\n--strict-policy pins issuer keys and PQ requirements independently. --pq off is incompatible with it. See spec/cli.md for policy file schemas. Legacy help: --help; current help: --help-v2.",
+        "usage_v2": "certify CLI help v2\nusage: certify verify <cert.json> [--status <file>] [--issuer-doc <file>] [--fingerprint <file>] [--online <base url>] [--now <time>] [--lang en|ar] [--pq <file>|off]\n       [--audit <file>] [--trusted-bodies <file>] [--body-register <file>] [--status-witness <file>] [--release-policy <file>] [--strict-policy <file>] [--bundle <file>]\n       certify fingerprint --model <model> [--prompt-file <file>] [--tools-file <file>] [--policy-file <file>] [--knowledge-file <file>]\n--strict-policy pins issuer keys and PQ requirements independently. --pq off is incompatible with it. See spec/cli.md for policy file schemas. Legacy help: --help; current help: --help-v2.",
         "bad_policy": "invalid verification input for {0}; see certify --help-v2",
         "issuer_resolution": "issuer resolution failed ({0}); this is not proof that the key is unpublished",
         "audit_ok": "attestation and trusted body verified",
@@ -68,12 +68,26 @@
         "pq_bad": "invalid",
         "pq_missing": "required by the issuer document, not supplied (use --pq)",
         "pq_optout": "not checked: the issuer document requires it, opted out with --pq off",
+        "evidence": "Evidence: {0}",
+        "ev_attested": "hardware-attested beacon (spec/beacon.md section 5)",
+        "ev_blackbox": "verified by Zanii Blackbox live evidence from an enrolled gateway",
+        "ev_self_reported": "self-reported configuration (Level 1 only; weaker than attested evidence)",
+        "ev_not_stated": "not stated (scheme 0.4 or earlier)",
+        "ev_skip": "not checked (use --bundle <file> or --online)",
+        "ev_mismatch": "not checked (the result bundle does not match the certificate)",
+        "ev_fetch": "not checked (could not fetch {0})",
+        "workflows": "Multi-step workflows: {0}",
+        "workflows_none": "none",
+        "interface": "Interface: {0}",
+        "iface_text": "text",
+        "iface_voice_text": "voice agent, through its text interface only (audio not assessed)",
+        "offline_warning": "warning: checked offline. A certificate file alone does not prove it is valid now; run with --online <base url> to read its live status.",
         "result_valid": "Result: VALID",
         "result_invalid": "Result: INVALID",
         "result_partial": "Result: NOT FULLY CHECKED"
     },
     "ar": {
-        "usage_v2": "مساعدة certify، الإصدار 2\nusage: certify verify <cert.json> [--status <file>] [--issuer-doc <file>] [--fingerprint <file>] [--online <base url>] [--now <time>] [--lang en|ar] [--pq <file>|off]\n       [--audit <file>] [--trusted-bodies <file>] [--body-register <file>] [--status-witness <file>] [--release-policy <file>] [--strict-policy <file>]\n       certify fingerprint --model <model> [--prompt-file <file>] [--tools-file <file>] [--policy-file <file>] [--knowledge-file <file>]\nيثبت --strict-policy مفاتيح الجهة المصدرة ومتطلبات التوقيع المقاوم للحوسبة الكمية بصورة مستقلة، ولا يقبل --pq off. صيغ الملفات في spec/cli.md. المساعدة السابقة: --help؛ المساعدة الحالية: --help-v2.",
+        "usage_v2": "مساعدة certify، الإصدار 2\nusage: certify verify <cert.json> [--status <file>] [--issuer-doc <file>] [--fingerprint <file>] [--online <base url>] [--now <time>] [--lang en|ar] [--pq <file>|off]\n       [--audit <file>] [--trusted-bodies <file>] [--body-register <file>] [--status-witness <file>] [--release-policy <file>] [--strict-policy <file>] [--bundle <file>]\n       certify fingerprint --model <model> [--prompt-file <file>] [--tools-file <file>] [--policy-file <file>] [--knowledge-file <file>]\nيثبت --strict-policy مفاتيح الجهة المصدرة ومتطلبات التوقيع المقاوم للحوسبة الكمية بصورة مستقلة، ولا يقبل --pq off. صيغ الملفات في spec/cli.md. المساعدة السابقة: --help؛ المساعدة الحالية: --help-v2.",
         "bad_policy": "مدخل تحقق غير صالح للخيار {0}؛ راجع certify --help-v2",
         "issuer_resolution": "تعذر التحقق من نطاق الجهة المصدرة ({0})؛ لا يثبت ذلك أن المفتاح غير منشور",
         "audit_ok": "تم التحقق من شهادة التدقيق والجهة الموثوقة",
@@ -141,6 +155,20 @@
         "pq_bad": "غير صالح",
         "pq_missing": "تشترطه وثيقة الجهة المصدرة ولم يقدم (استخدم --pq)",
         "pq_optout": "لم يتحقق منه: تشترطه وثيقة الجهة المصدرة، وتم التنازل عنه بالخيار --pq off",
+        "evidence": "الأدلة: {0}",
+        "ev_attested": "نبضة موثّقة بشهادة العتاد (spec/beacon.md القسم 5)",
+        "ev_blackbox": "تحقّقت منها أدلة Zanii Blackbox الحية من بوابة مسجّلة",
+        "ev_self_reported": "إعداد مُعلن ذاتياً (المستوى 1 فقط؛ أضعف من الأدلة الموثّقة)",
+        "ev_not_stated": "غير مذكور (المخطط 0.4 أو أقدم)",
+        "ev_skip": "لم يفحص (استخدم --bundle <file> أو --online)",
+        "ev_mismatch": "لم يفحص (حزمة النتائج لا تطابق الشهادة)",
+        "ev_fetch": "لم يفحص (تعذر جلب {0})",
+        "workflows": "سير العمل متعدد الخطوات: {0}",
+        "workflows_none": "لا يوجد",
+        "interface": "الواجهة: {0}",
+        "iface_text": "نصية",
+        "iface_voice_text": "وكيل صوتي عبر واجهته النصية فقط (لم يُقيَّم الصوت)",
+        "offline_warning": "تحذير: فُحصت دون اتصال. ملف الشهادة وحده لا يثبت أنها سارية الآن؛ شغّل الأمر مع --online <base url> لقراءة حالتها الحية.",
         "result_valid": "النتيجة: صالحة",
         "result_invalid": "النتيجة: غير صالحة",
         "result_partial": "النتيجة: لم يكتمل الفحص"

package/dist/cli.js

@@ -5,6 +5,7 @@ import { canonicalBytes } from "@zanii/core";
 import { credentialHash, resolveIssuer, } from "@zanii/credentials";
 import { claimReasons, verifyCertificate } from "./certificate.js";
 import { verifyAuditAttestation } from "./audit.js";
+import { bundleHash } from "./bundle.js";
 import messages from "./cli-messages.json" with { type: "json" };
 import { buildFingerprint, promptSha256, sha256Bytes, toolsSha256 } from "./fingerprint.js";
 import { pqPolicyOf } from "./pq.js";
@@ -18,7 +19,7 @@ import { verifyCertificateVc } from "./vc.js";
 /** spec/cli.md section 4. */
 export const EXIT = { valid: 0, invalid: 1, partial: 2, usage: 3, online: 4 };
 const OPTIONS = {
-    verify: ["--status", "--issuer-doc", "--fingerprint", "--online", "--now", "--lang", "--pq", "--audit", "--trusted-bodies", "--body-register", "--status-witness", "--release-policy", "--strict-policy"],
+    verify: ["--status", "--issuer-doc", "--fingerprint", "--online", "--now", "--lang", "--pq", "--audit", "--trusted-bodies", "--body-register", "--status-witness", "--release-policy", "--strict-policy", "--bundle"],
     fingerprint: ["--model", "--prompt-file", "--tools-file", "--policy-file", "--knowledge-file", "--lang"],
 };
 // Control and bidirectional formatting characters from input files are not written to the terminal.
@@ -351,6 +352,41 @@ export async function main(argv, io = {}) {
             else
                 check("pq", "fail", t(bad.every((x) => x.endsWith("a post-quantum signature is required")) ? "pq_missing" : "pq_bad"));
         }
+        // spec/cli.md section 7: the result bundle's evidence level and scope, informational (no exit code change)
+        let bundle = opts["--bundle"] === undefined ? undefined : json(opts["--bundle"]);
+        let bundleFailed;
+        if (bundle === undefined && base !== undefined) {
+            let url = base;
+            try {
+                url = new URL(`/v1/certificates/${encodeURIComponent(credentialHash(cert))}/bundle`, base).href;
+                const response = await fetchJsonBounded(url, { fetch: doFetch, maxBytes: 8_388_608 });
+                if (response.ok)
+                    bundle = response.document;
+                else
+                    bundleFailed = url;
+            }
+            catch {
+                bundleFailed = url;
+            }
+        }
+        if (bundleFailed !== undefined)
+            lines.push(t("evidence", t("ev_fetch", bundleFailed)));
+        else if (bundle === undefined)
+            lines.push(t("evidence", t("ev_skip")));
+        else if (!isObj(bundle) || bundleHash(bundle) !== claim.bundle)
+            lines.push(t("evidence", t("ev_mismatch")));
+        else {
+            const a = isObj(bundle.assessment) ? bundle.assessment : undefined;
+            const e = a?.evidence;
+            lines.push(t("evidence", t(e === "attested" || e === "blackbox" || e === "self_reported" ? `ev_${e}` : "ev_not_stated")));
+            if (a) {
+                const cats = Array.isArray(a.trajectory_categories) ? a.trajectory_categories.map(show).join(", ") : "";
+                lines.push(t("workflows", cats || t("workflows_none")));
+                lines.push(t("interface", t(a.interface === "voice_text" ? "iface_voice_text" : "iface_text")));
+            }
+        }
+        if (base === undefined)
+            err(`${t("offline_warning")}\n`);
         // A reason no line explains (none is expected) still makes the certificate invalid.
         const failed = marks.includes("fail") || (!marks.includes("skip") && !r.ok);
         const code = failed ? EXIT.invalid : marks.includes("skip") ? EXIT.partial : EXIT.valid;

package/dist/formats/status-v3.schema.json

@@ -0,0 +1,31 @@
+{
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://zanii.agency/certify/formats/status-v3.schema.json",
+    "title": "Zanii Certify status version 3",
+    "$comment": "Use a complete draft 2020-12 validator for this standalone format schema. SDK verification additionally checks actual DIDs, signatures, cross-field times, trust, PQ and witness policy.",
+    "type": "object",
+    "required": ["v", "type", "issuer", "entries", "issued_at", "valid_until", "signer", "sig"],
+    "additionalProperties": false,
+    "properties": {
+        "v": { "const": 3 }, "type": { "const": "certify.status" },
+        "issuer": { "$ref": "#/$defs/did" }, "signer": { "$ref": "#/$defs/did" },
+        "sig": { "type": "string", "pattern": "^ed25519:[0-9a-f]{128}$", "maxLength": 136 },
+        "issued_at": { "$ref": "#/$defs/time" }, "valid_until": { "$ref": "#/$defs/time" },
+        "entries": { "type": "object", "maxProperties": 100000, "patternProperties": { "^sha256:[0-9a-f]{64}$": { "$ref": "#/$defs/entry" } }, "additionalProperties": false },
+        "seq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 },
+        "prev": { "anyOf": [{ "type": "null" }, { "$ref": "#/$defs/hash" }] },
+        "pq_binding": { "$ref": "#/$defs/hash" }
+    },
+    "dependentRequired": { "seq": ["prev"], "prev": ["seq"] },
+    "allOf": [{ "if": { "required": ["seq"], "properties": { "seq": { "const": 0 } } }, "then": { "properties": { "prev": { "type": "null" } } }, "else": { "properties": { "prev": { "$ref": "#/$defs/hash" } } } }],
+    "$defs": {
+        "did": { "type": "string", "pattern": "^did:key:z[1-9A-HJ-NP-Za-km-z]{40,60}$", "maxLength": 69 },
+        "hash": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$", "maxLength": 71 },
+        "time": { "type": "string", "format": "date-time", "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(\\.[0-9]{3})?Z$", "maxLength": 24 },
+        "reason": { "enum": ["FINGERPRINT_MISMATCH", "RETEST_OVERDUE", "RETEST_FAILED", "INCIDENT", "APPLICANT_REQUEST", "ISSUER_ERROR", "LICENCE_WITHDRAWN", "AUDIT_EXPIRED", "MARK_MISUSE", "FALSE_DECLARATION", "EVIDENCE_LAPSED"] },
+        "entry": { "type": "object", "required": ["status", "reason", "since"], "additionalProperties": false,
+            "properties": { "status": { "enum": ["valid", "suspended", "revoked"] }, "reason": { "anyOf": [{ "type": "null" }, { "$ref": "#/$defs/reason" }] }, "since": { "$ref": "#/$defs/time" } },
+            "oneOf": [{ "properties": { "status": { "const": "valid" }, "reason": { "type": "null" } } }, { "properties": { "status": { "enum": ["suspended", "revoked"] }, "reason": { "$ref": "#/$defs/reason" } } }]
+        }
+    }
+}

package/dist/index.d.ts

@@ -14,8 +14,9 @@ export { buildFeedPage, type FederatedFeed, type FeedCheck, type FeedConflict, t
 export { buildLicence, buildLicenceStatus, buildRoyaltyStatement, certificateListHash, countersignRoyaltyStatement, LICENCE_ACTIONS, LICENCE_REASONS, type Licence, type LicenceAction, type LicenceCheck, type LicenceInput, type LicenceOptions, type LicenceReason, type LicenceScope, type LicenceState, type LicenceStatus, licenceCoverage, licenceReasons, licensedKey, licenceStateAt, MAX_ROYALTY_MINOR, MAX_STATEMENT_CERTIFICATES, type RoyaltyStatement, type RoyaltyStatementBody, type RoyaltyStatementInput, verifyLicence, verifyLicenceLog, verifyRoyaltyStatement, } from "./licence.ts";
 export { type AttestedBeaconCheck, type BeaconAttestation, type BeaconCheck, type BeaconReport, beaconChallenge, buildBeacon, MAX_SKEW_SECONDS, NONCE, verifyAttestedBeacon, verifyBeacon, } from "./beacon.ts";
 export { type BundleInput, type ApplianceExecution, type ApplianceExportIdentity, type ApplianceExportBundle, type ApplianceExportBundleInput, bundleHash, buildBundle, buildApplianceExportBundle, type CategoryCount, type CategoryResult, type Evidence, type ResultBundle, type Assessment, } from "./bundle.ts";
+export { ASSESSMENT_EVIDENCE, type AssessmentEvidence, buildDeclaration, buildEndpointProof, type Declaration, type DeclarationCheck, type DeclarationInput, DECLARATION_STATEMENT, declarationHash, ENDPOINT_NONCE_HEADER, ENDPOINT_PROOF_HEADER, type EndpointBinding, endpointChallenge, EVIDENCE_GRACE_DAYS, EVIDENCE_WINDOW_DAYS, evidenceLevels, PRODUCTION_SCHEME, productionBindingReasons, verifyDeclaration, verifyEndpointProof, } from "./production.ts";
 export { applianceExecution, applianceExportIdentity } from "./appliance-execution.ts";
-export { type CertificateCheck, type CertificateInput, type CertificateVerifyOptions, type CertifyClaim, type PqPolicy, CONFLICTS, type Conflict, certificateScope, claimReasons, issueCertificate, LEVELS, type Level, pickScheme, SCHEME, SCHEME_LEVELS, SCHEMES, type Scheme, SURVEILLANCE, VALIDITY_DAYS, verifyCertificate, } from "./certificate.ts";
+export { type CertificateCheck, type CertificateInput, type CertificateVerifyOptions, type CertifyClaim, type PqPolicy, CONFLICTS, type Conflict, certificateScope, claimReasons, issueCertificate, LEVELS, type Level, pickScheme, SCHEME, SCHEME_LEVELS, schemeFrom, SCHEMES, type Scheme, SURVEILLANCE, SUSPENSION_REVOCATION_DAYS, SUSPENSION_WARNING_DAYS, VALIDITY_DAYS, verifyCertificate, } from "./certificate.ts";
 export { buildFingerprint, checkFingerprint, type Fingerprint, type FingerprintInput, promptSha256, sha256Bytes, toolsSha256, } from "./fingerprint.ts";
 export { COMMITTEE_MIN_EXTERNAL, type CommitteeMember, committeeQuorum, COOLING_OFF_YEARS, type CoolingOff, type Engagement, REFUSALS, type Refusal, type Staff, staffRefusals, } from "./impartiality.ts";
 export { AUDIENCES, type Audience, buildEvidenceShare, discloseEvidenceField, type EvidenceShare, type EvidenceShareInput, GCC_IDENTIFIERS, REDACTION_KINDS, redactEvidence, type RedactionKind, type RedactOptions, type SharedEntry, verifyEvidenceShare, } from "./evidence-share.ts";
@@ -28,7 +29,7 @@ export { type CategoryScore, type Overall, overallVerdict, type ProfileCategoryR
 export { activeRotation, buildRotation, type Rotation, type RotationCheck, type RotationInput, type SuiteRef, verifyRotationLog, verifyRotationRecord, } from "./rotation.ts";
 export { type Check, type CheckContext, type CheckResult, casesOf, DEFAULT_FINDINGS, type Delegation, type DelegationLink, effectiveDelegation, judgementResult, normaliseText, type Rubric, runCheck, type Scenario, type ScenarioLibrary, scenarioCases, scenariosSchema, type Suite, type SubAgent, type SuiteCase, suiteSchema, type ToolCall, suiteSnapshot, validateScenarios, validateSuite, verifyCaseDelegation, } from "./suite.ts";
 export { keySigner, type Signer, signerDid, signWith } from "./signer.ts";
-export { applyStatus, buildStatus, type CertificateStatus, REASONS, REASONS_V2, STATUS_V2_SCHEMA, STATUS_V2_MAX_ENTRIES, type StatusVersion, type Reason, revocationListFromStatus, type StatusAction, type StatusCheck, type StatusDocument, type StatusEntries, type StatusEntry, type StatusVerifyOptions, type StatusWitness, verifyStatus, logPositionOk, } from "./status.ts";
+export { applyStatus, buildStatus, type CertificateStatus, REASONS, REASONS_V2, REASONS_V3, STATUS_V2_SCHEMA, STATUS_V3_SCHEMA, STATUS_V2_MAX_ENTRIES, statusVersionFor, type StatusVersion, type Reason, revocationListFromStatus, type StatusAction, type StatusCheck, type StatusDocument, type StatusEntries, type StatusEntry, type StatusVerifyOptions, type StatusWitness, verifyStatus, logPositionOk, } from "./status.ts";
 export { type CertificateVcCheck, certificateToVc, VC_STATUS_TYPE, VC_TYPE, verifyCertificateVc, } from "./vc.ts";
 export { statusCheckpoint, statusConsistencyProof, statusInclusionProof, verifyStatusLog, } from "./witness.ts";
 export { type AccreditationExport, buildAccreditationExport, buildFilingPack, buildGovernanceOutcome, buildSigningKeyApproval, CASE_KINDS, type CaseKind, type CertifyRiskFacts, type CertifyRiskProfile, certifyRiskProfile, type FilingPack, type FilingPackInput, type GovernanceCheck, type GovernanceOutcome, type GovernanceOutcomeInput, governanceOutcomeBody, OUTCOMES, RISK_NOTE, type RiskProfileInput, type SignedRiskProfile, type SigningKeyApproval, type SigningKeyApprovalInput, signingKeyApprovalBody, signRiskProfile, verifyRiskProfile, verifyAccreditationExport, verifyFilingPack, verifyGovernanceOutcome, verifySigningKeyApproval, } from "./governance.ts";

package/dist/index.js

@@ -15,8 +15,9 @@ export { buildFeedPage, feedCheckpoint, MAX_FEED_ENTRIES, MAX_FEED_PAGE_BYTES, m
 export { buildLicence, buildLicenceStatus, buildRoyaltyStatement, certificateListHash, countersignRoyaltyStatement, LICENCE_ACTIONS, LICENCE_REASONS, licenceCoverage, licenceReasons, licensedKey, licenceStateAt, MAX_ROYALTY_MINOR, MAX_STATEMENT_CERTIFICATES, verifyLicence, verifyLicenceLog, verifyRoyaltyStatement, } from "./licence.js";
 export { beaconChallenge, buildBeacon, MAX_SKEW_SECONDS, NONCE, verifyAttestedBeacon, verifyBeacon, } from "./beacon.js";
 export { bundleHash, buildBundle, buildApplianceExportBundle, } from "./bundle.js";
+export { ASSESSMENT_EVIDENCE, buildDeclaration, buildEndpointProof, DECLARATION_STATEMENT, declarationHash, ENDPOINT_NONCE_HEADER, ENDPOINT_PROOF_HEADER, endpointChallenge, EVIDENCE_GRACE_DAYS, EVIDENCE_WINDOW_DAYS, evidenceLevels, PRODUCTION_SCHEME, productionBindingReasons, verifyDeclaration, verifyEndpointProof, } from "./production.js";
 export { applianceExecution, applianceExportIdentity } from "./appliance-execution.js";
-export { CONFLICTS, certificateScope, claimReasons, issueCertificate, LEVELS, pickScheme, SCHEME, SCHEME_LEVELS, SCHEMES, SURVEILLANCE, VALIDITY_DAYS, verifyCertificate, } from "./certificate.js";
+export { CONFLICTS, certificateScope, claimReasons, issueCertificate, LEVELS, pickScheme, SCHEME, SCHEME_LEVELS, schemeFrom, SCHEMES, SURVEILLANCE, SUSPENSION_REVOCATION_DAYS, SUSPENSION_WARNING_DAYS, VALIDITY_DAYS, verifyCertificate, } from "./certificate.js";
 export { buildFingerprint, checkFingerprint, promptSha256, sha256Bytes, toolsSha256, } from "./fingerprint.js";
 export { COMMITTEE_MIN_EXTERNAL, committeeQuorum, COOLING_OFF_YEARS, REFUSALS, staffRefusals, } from "./impartiality.js";
 export { AUDIENCES, buildEvidenceShare, discloseEvidenceField, GCC_IDENTIFIERS, REDACTION_KINDS, redactEvidence, verifyEvidenceShare, } from "./evidence-share.js";
@@ -29,7 +30,7 @@ export { overallVerdict, scoreCategory, } from "./scoring.js";
 export { activeRotation, buildRotation, verifyRotationLog, verifyRotationRecord, } from "./rotation.js";
 export { casesOf, DEFAULT_FINDINGS, effectiveDelegation, judgementResult, normaliseText, runCheck, scenarioCases, scenariosSchema, suiteSchema, suiteSnapshot, validateScenarios, validateSuite, verifyCaseDelegation, } from "./suite.js";
 export { keySigner, signerDid, signWith } from "./signer.js";
-export { applyStatus, buildStatus, REASONS, REASONS_V2, STATUS_V2_SCHEMA, STATUS_V2_MAX_ENTRIES, revocationListFromStatus, verifyStatus, logPositionOk, } from "./status.js";
+export { applyStatus, buildStatus, REASONS, REASONS_V2, REASONS_V3, STATUS_V2_SCHEMA, STATUS_V3_SCHEMA, STATUS_V2_MAX_ENTRIES, statusVersionFor, revocationListFromStatus, verifyStatus, logPositionOk, } from "./status.js";
 export { certificateToVc, VC_STATUS_TYPE, VC_TYPE, verifyCertificateVc, } from "./vc.js";
 export { statusCheckpoint, statusConsistencyProof, statusInclusionProof, verifyStatusLog, } from "./witness.js";
 export { buildAccreditationExport, buildFilingPack, buildGovernanceOutcome, buildSigningKeyApproval, CASE_KINDS, certifyRiskProfile, governanceOutcomeBody, OUTCOMES, RISK_NOTE, signingKeyApprovalBody, signRiskProfile, verifyRiskProfile, verifyAccreditationExport, verifyFilingPack, verifyGovernanceOutcome, verifySigningKeyApproval, } from "./governance.js";

package/dist/production.d.ts

@@ -0,0 +1,90 @@
+import { type Signer } from "./signer.ts";
+export declare const PRODUCTION_SCHEME = "zanii-certify/0.5";
+/** Section 2: the exact statement every 0.5 declaration signs, in both languages. */
+export declare const DECLARATION_STATEMENT: {
+    readonly en: "The agent configuration the Zanii Certify lab tests is the configuration we deploy in production, at the registered endpoint, which is our production endpoint and not a separate test endpoint. We will tell the lab before we change that configuration or endpoint. We accept the lab's audit rights while the certificate is in force: unannounced re-tests and spot checks of the registered endpoint, and review of the production evidence.";
+    readonly ar: "إعداد الوكيل الذي يختبره مختبر Zanii Certify هو الإعداد الذي ننشره في بيئة الإنتاج، على نقطة الاتصال المسجلة، وهي نقطة اتصال الإنتاج لدينا وليست نقطة اتصال منفصلة للاختبار. سنبلغ المختبر قبل أن نغير ذلك الإعداد أو نقطة الاتصال. ونقبل حقوق التدقيق للمختبر ما دامت الشهادة سارية: إعادة اختبارات وفحوصا مفاجئة لنقطة الاتصال المسجلة، ومراجعة أدلة الإنتاج.";
+};
+/** Section 4: what production evidence a 0.5 result bundle records (a contract with verifiers and badges). */
+export declare const ASSESSMENT_EVIDENCE: readonly ["self_reported", "attested", "blackbox"];
+export type AssessmentEvidence = (typeof ASSESSMENT_EVIDENCE)[number];
+/** Section 4: evidence counts at a grant when recorded at most this many days before the decision. */
+export declare const EVIDENCE_WINDOW_DAYS = 30;
+/** Section 4: days after evidence is due before the lab suspends with EVIDENCE_LAPSED. */
+export declare const EVIDENCE_GRACE_DAYS = 7;
+/** Section 3: the request header carrying the run's nonce, and the response header carrying the proof. */
+export declare const ENDPOINT_NONCE_HEADER = "zanii-certify-nonce";
+export declare const ENDPOINT_PROOF_HEADER = "zanii-certify-proof";
+export interface Declaration {
+    v: 1;
+    type: "certify.declaration";
+    scheme: typeof PRODUCTION_SCHEME;
+    agent: string;
+    profile: string;
+    level: 1 | 2 | 3;
+    endpoint: string;
+    statement: typeof DECLARATION_STATEMENT;
+    declared_at: string;
+    signer: string;
+    sig: string;
+}
+export interface DeclarationInput {
+    agent: string;
+    profile: string;
+    level: number;
+    endpoint: string;
+    declaredAt: string;
+}
+/** Section 2: sign the declaration with the agent's key or the applicant's verified owner key. */
+export declare function buildDeclaration(input: DeclarationInput, signer: Signer): Promise<Declaration>;
+export interface DeclarationCheck {
+    ok: boolean;
+    reasons: string[];
+}
+/**
+ * Section 2: is this an intact 0.5 declaration? With `agent`, `profile`, `level` and `endpoint`
+ * it must name them; with `signers` its signer must be one of them (the agent DID and, when
+ * verified, the applicant's owner DID); with `now` it is not dated ahead, and with
+ * `maxAgeSeconds` not older than that.
+ */
+export declare function verifyDeclaration(declaration: unknown, opts?: {
+    agent?: string;
+    profile?: string;
+    level?: number;
+    endpoint?: string;
+    signers?: readonly string[];
+    now?: string;
+    maxAgeSeconds?: number;
+}): DeclarationCheck;
+export declare const declarationHash: (declaration: Declaration) => string;
+/** Section 3: what the agent signs to answer a run's nonce. */
+export declare const endpointChallenge: (f: {
+    agent: string;
+    nonce: string;
+}) => {
+    v: 1;
+    type: "certify.endpoint-challenge";
+    agent: string;
+    nonce: string;
+};
+/** Section 3: the `zanii-certify-proof` header value: `ed25519:<hex>` by the agent over the challenge. */
+export declare function buildEndpointProof(nonce: string, signer: Signer): Promise<string>;
+/** Section 3: does `proof` answer `nonce` with the agent's key? Never throws. */
+export declare function verifyEndpointProof(proof: unknown, f: {
+    agent: string;
+    nonce: string;
+}): boolean;
+/** Section 4: the levels a certificate with this evidence may be granted at under 0.5. */
+export declare const evidenceLevels: (evidence: AssessmentEvidence) => readonly number[];
+/** The 0.5 production binding a result bundle records (result-bundle.md section 4b). */
+export interface EndpointBinding {
+    spki_sha256: string | null;
+    proved: boolean;
+}
+export declare const endpointBindingOk: (e: unknown) => e is EndpointBinding;
+/**
+ * Section 5: what a verifier checks on a grant bundle under 0.5 (an earlier scheme has nothing to
+ * check): the declaration is intact and names the bundle's profile and level, and a Level 2 or 3
+ * bundle records attested or Blackbox evidence and a verified endpoint proof.
+ */
+export declare function productionBindingReasons(bundle: unknown): string[];

package/dist/production.js

@@ -0,0 +1,117 @@
+// spec/production-binding.md (scheme 0.5): the applicant's signed declaration, the test-time
+// endpoint proof and the production evidence a Level 2 or 3 certificate needs.
+import { jcsHash, verifySignedObject } from "@zanii/core";
+import { NONCE } from "./beacon.js";
+import { isDid, isIso, isObj, isSha, ms, SLUG } from "./shared.js";
+import { signatureOk, signatureOver, signerDid, signWith } from "./signer.js";
+export const PRODUCTION_SCHEME = "zanii-certify/0.5";
+/** Section 2: the exact statement every 0.5 declaration signs, in both languages. */
+export const DECLARATION_STATEMENT = {
+    en: "The agent configuration the Zanii Certify lab tests is the configuration we deploy in production, at the registered endpoint, which is our production endpoint and not a separate test endpoint. We will tell the lab before we change that configuration or endpoint. We accept the lab's audit rights while the certificate is in force: unannounced re-tests and spot checks of the registered endpoint, and review of the production evidence.",
+    ar: "إعداد الوكيل الذي يختبره مختبر Zanii Certify هو الإعداد الذي ننشره في بيئة الإنتاج، على نقطة الاتصال المسجلة، وهي نقطة اتصال الإنتاج لدينا وليست نقطة اتصال منفصلة للاختبار. سنبلغ المختبر قبل أن نغير ذلك الإعداد أو نقطة الاتصال. ونقبل حقوق التدقيق للمختبر ما دامت الشهادة سارية: إعادة اختبارات وفحوصا مفاجئة لنقطة الاتصال المسجلة، ومراجعة أدلة الإنتاج.",
+};
+/** Section 4: what production evidence a 0.5 result bundle records (a contract with verifiers and badges). */
+export const ASSESSMENT_EVIDENCE = ["self_reported", "attested", "blackbox"];
+/** Section 4: evidence counts at a grant when recorded at most this many days before the decision. */
+export const EVIDENCE_WINDOW_DAYS = 30;
+/** Section 4: days after evidence is due before the lab suspends with EVIDENCE_LAPSED. */
+export const EVIDENCE_GRACE_DAYS = 7;
+/** Section 3: the request header carrying the run's nonce, and the response header carrying the proof. */
+export const ENDPOINT_NONCE_HEADER = "zanii-certify-nonce";
+export const ENDPOINT_PROOF_HEADER = "zanii-certify-proof";
+const PROFILE_REF = new RegExp(`^${SLUG.source.slice(1, -1)}/[1-9][0-9]*$`);
+const SIG = /^ed25519:[0-9a-f]{128}$/;
+const MAX_SKEW_MS = 300_000;
+const endpointOk = (v) => typeof v === "string" && v.length <= 2048 && /^https?:\/\/[^\s]+$/.test(v);
+/** Section 2: sign the declaration with the agent's key or the applicant's verified owner key. */
+export async function buildDeclaration(input, signer) {
+    if (!isDid(input.agent))
+        throw new Error("agent must be a did:key");
+    if (typeof input.profile !== "string" || !PROFILE_REF.test(input.profile))
+        throw new Error("profile must be <slug>/<version>");
+    if (input.level !== 1 && input.level !== 2 && input.level !== 3)
+        throw new Error("level must be 1, 2 or 3");
+    if (!endpointOk(input.endpoint))
+        throw new Error("endpoint must be the registered http(s) endpoint URL");
+    if (!isIso(input.declaredAt))
+        throw new Error("declaredAt must be an ISO UTC timestamp");
+    return signWith({
+        v: 1, type: "certify.declaration", scheme: PRODUCTION_SCHEME, agent: input.agent, profile: input.profile,
+        level: input.level, endpoint: input.endpoint, statement: { en: DECLARATION_STATEMENT.en, ar: DECLARATION_STATEMENT.ar }, declared_at: input.declaredAt,
+    }, signer);
+}
+/**
+ * Section 2: is this an intact 0.5 declaration? With `agent`, `profile`, `level` and `endpoint`
+ * it must name them; with `signers` its signer must be one of them (the agent DID and, when
+ * verified, the applicant's owner DID); with `now` it is not dated ahead, and with
+ * `maxAgeSeconds` not older than that.
+ */
+export function verifyDeclaration(declaration, opts = {}) {
+    const d = isObj(declaration) ? declaration : {};
+    if (d.v !== 1 || d.type !== "certify.declaration" || Object.keys(d).length !== 11)
+        return { ok: false, reasons: ["not a declaration (v1)"] };
+    const reasons = [];
+    if (d.scheme !== PRODUCTION_SCHEME || !isDid(d.agent) || typeof d.profile !== "string" || !PROFILE_REF.test(d.profile)
+        || (d.level !== 1 && d.level !== 2 && d.level !== 3) || !endpointOk(d.endpoint) || !isIso(d.declared_at) || !isDid(d.signer))
+        reasons.push("declaration has a malformed field");
+    if (!isObj(d.statement) || Object.keys(d.statement).length !== 2 || d.statement.en !== DECLARATION_STATEMENT.en || d.statement.ar !== DECLARATION_STATEMENT.ar)
+        reasons.push("declaration statement is not the scheme 0.5 statement");
+    if (!verifySignedObject(d))
+        reasons.push("bad declaration signature");
+    if (opts.signers !== undefined && !opts.signers.includes(d.signer))
+        reasons.push("declaration is not signed by the agent or the applicant's owner key");
+    if (opts.agent !== undefined && d.agent !== opts.agent)
+        reasons.push("declaration names a different agent");
+    if (opts.profile !== undefined && d.profile !== opts.profile)
+        reasons.push("declaration names a different profile");
+    if (opts.level !== undefined && d.level !== opts.level)
+        reasons.push("declaration names a different level");
+    if (opts.endpoint !== undefined && d.endpoint !== opts.endpoint)
+        reasons.push("declaration names an endpoint other than the registered one");
+    const now = opts.now ? ms(opts.now) : Date.now(), at = ms(d.declared_at);
+    if (at > now + MAX_SKEW_MS)
+        reasons.push("declaration declared_at is in the future");
+    if (opts.maxAgeSeconds !== undefined && at < now - opts.maxAgeSeconds * 1000)
+        reasons.push("declaration is older than the accepted window");
+    return { ok: reasons.length === 0, reasons };
+}
+export const declarationHash = (declaration) => jcsHash(declaration);
+/** Section 3: what the agent signs to answer a run's nonce. */
+export const endpointChallenge = (f) => ({ v: 1, type: "certify.endpoint-challenge", agent: f.agent, nonce: f.nonce });
+/** Section 3: the `zanii-certify-proof` header value: `ed25519:<hex>` by the agent over the challenge. */
+export async function buildEndpointProof(nonce, signer) {
+    if (typeof nonce !== "string" || !NONCE.test(nonce))
+        throw new Error("nonce must be 16-128 of [A-Za-z0-9_-]");
+    return signatureOver(endpointChallenge({ agent: signerDid(signer), nonce }), signer);
+}
+/** Section 3: does `proof` answer `nonce` with the agent's key? Never throws. */
+export function verifyEndpointProof(proof, f) {
+    return typeof proof === "string" && SIG.test(proof) && typeof f.nonce === "string" && NONCE.test(f.nonce) && isDid(f.agent)
+        && signatureOk(endpointChallenge(f), proof, f.agent);
+}
+/** Section 4: the levels a certificate with this evidence may be granted at under 0.5. */
+export const evidenceLevels = (evidence) => (evidence === "self_reported" ? [1] : [1, 2, 3]);
+export const endpointBindingOk = (e) => isObj(e) && Object.keys(e).length === 2 && (e.spki_sha256 === null || isSha(e.spki_sha256)) && typeof e.proved === "boolean";
+/**
+ * Section 5: what a verifier checks on a grant bundle under 0.5 (an earlier scheme has nothing to
+ * check): the declaration is intact and names the bundle's profile and level, and a Level 2 or 3
+ * bundle records attested or Blackbox evidence and a verified endpoint proof.
+ */
+export function productionBindingReasons(bundle) {
+    const b = isObj(bundle) ? bundle : {};
+    if (b.scheme !== PRODUCTION_SCHEME)
+        return [];
+    const out = [];
+    const a = isObj(b.assessment) ? b.assessment : null;
+    if (!a || !ASSESSMENT_EVIDENCE.includes(a.evidence) || !endpointBindingOk(a.endpoint))
+        out.push("a zanii-certify/0.5 bundle records assessment.evidence and assessment.endpoint");
+    const declared = verifyDeclaration(b.declaration, { profile: b.profile, level: b.level, now: typeof b.ended_at === "string" ? b.ended_at : undefined });
+    out.push(...declared.reasons.map((r) => `bundle ${r}`));
+    if (a && (b.level === 2 || b.level === 3)) {
+        if (a.evidence === "self_reported")
+            out.push("a Level 2 or 3 certificate under zanii-certify/0.5 needs attested or Blackbox production evidence");
+        if (!(isObj(a.endpoint) && a.endpoint.proved === true))
+            out.push("a Level 2 or 3 certificate under zanii-certify/0.5 needs a verified endpoint proof");
+    }
+    return out;
+}

package/dist/profile.js

@@ -117,7 +117,7 @@ export function schemaErrors(value, schema) {
  * every clause it cites exists in a clause map the profile lists.
  */
 /** scheme.md section 2a: the scheme versions whose profiles may assess categories as multi-step workflows. */
-const TRAJECTORY_SCHEMES = ["zanii-certify/0.4"];
+const TRAJECTORY_SCHEMES = ["zanii-certify/0.4", "zanii-certify/0.5"];
 export function validateProfile(profile, clauseMaps = []) {
     const errors = schemaErrors(profile, profileSchema);
     if (!errors.length) {

package/dist/schemas/profile.schema.json

@@ -10,7 +10,7 @@
         "type": { "const": "certify.profile" },
         "slug": { "$ref": "#/$defs/slug" },
         "version": { "type": "integer", "minimum": 1 },
-        "scheme": { "enum": ["zanii-certify/0.1", "zanii-certify/0.2", "zanii-certify/0.3", "zanii-certify/0.4"] },
+        "scheme": { "enum": ["zanii-certify/0.1", "zanii-certify/0.2", "zanii-certify/0.3", "zanii-certify/0.4", "zanii-certify/0.5"] },
         "title": { "$ref": "#/$defs/text" },
         "description": { "$ref": "#/$defs/text" },
         "levels": {

package/dist/status.d.ts

@@ -5,16 +5,21 @@ import type { WitnessCosignature } from "@zanii/witness";
 import { type PqCosignature } from "./pq.ts";
 import { type Signer } from "./signer.ts";
 import STATUS_V2_SCHEMA from "./formats/status-v2.schema.json";
-export { STATUS_V2_SCHEMA };
+import STATUS_V3_SCHEMA from "./formats/status-v3.schema.json";
+export { STATUS_V2_SCHEMA, STATUS_V3_SCHEMA };
 export declare const REASONS: readonly ["FINGERPRINT_MISMATCH", "RETEST_OVERDUE", "RETEST_FAILED", "INCIDENT", "APPLICANT_REQUEST", "ISSUER_ERROR", 
 /** licensing.md section 2a: the issuing licensee's licence was withdrawn or suspended for cause. */
 "LICENCE_WITHDRAWN", 
 /** audit.md section 3: a Level 3 certificate's audit attestation lapsed. */
 "AUDIT_EXPIRED"];
 export declare const REASONS_V2: readonly ["FINGERPRINT_MISMATCH", "RETEST_OVERDUE", "RETEST_FAILED", "INCIDENT", "APPLICANT_REQUEST", "ISSUER_ERROR", "LICENCE_WITHDRAWN", "AUDIT_EXPIRED", "MARK_MISUSE"];
+/** Section 7 (scheme 0.5, production-binding.md): a false declaration, and production evidence that lapsed. */
+export declare const REASONS_V3: readonly ["FINGERPRINT_MISMATCH", "RETEST_OVERDUE", "RETEST_FAILED", "INCIDENT", "APPLICANT_REQUEST", "ISSUER_ERROR", "LICENCE_WITHDRAWN", "AUDIT_EXPIRED", "MARK_MISUSE", "FALSE_DECLARATION", "EVIDENCE_LAPSED"];
 export declare const STATUS_V2_MAX_ENTRIES = 100000;
-export type Reason = (typeof REASONS_V2)[number];
-export type StatusVersion = 1 | 2;
+export type Reason = (typeof REASONS_V3)[number];
+export type StatusVersion = 1 | 2 | 3;
+/** The lowest status (and event) version that can carry `reason`: 3 for the section 7 codes, 2 for MARK_MISUSE, else 1. */
+export declare const statusVersionFor: (reason: unknown) => StatusVersion;
 export type CertificateStatus = "valid" | "suspended" | "revoked";
 export type StatusAction = "grant" | "suspend" | "revoke" | "reinstate";
 export interface StatusEntry {

package/dist/status.js

@@ -9,7 +9,8 @@ import { witnessReasons } from "./witness.js";
 import { signingIdentityReasons } from "./signing-identity.js";
 import { withinVerificationBudget } from "./verification-bounds.js";
 import STATUS_V2_SCHEMA from "./formats/status-v2.schema.json" with { type: "json" };
-export { STATUS_V2_SCHEMA };
+import STATUS_V3_SCHEMA from "./formats/status-v3.schema.json" with { type: "json" };
+export { STATUS_V2_SCHEMA, STATUS_V3_SCHEMA };
 export const REASONS = [
     "FINGERPRINT_MISMATCH",
     "RETEST_OVERDUE",
@@ -23,18 +24,23 @@ export const REASONS = [
     "AUDIT_EXPIRED",
 ];
 export const REASONS_V2 = [...REASONS, "MARK_MISUSE"];
+/** Section 7 (scheme 0.5, production-binding.md): a false declaration, and production evidence that lapsed. */
+export const REASONS_V3 = [...REASONS_V2, "FALSE_DECLARATION", "EVIDENCE_LAPSED"];
 export const STATUS_V2_MAX_ENTRIES = 100_000;
+/** The lowest status (and event) version that can carry `reason`: 3 for the section 7 codes, 2 for MARK_MISUSE, else 1. */
+export const statusVersionFor = (reason) => reason === "FALSE_DECLARATION" || reason === "EVIDENCE_LAPSED" ? 3 : reason === "MARK_MISUSE" ? 2 : 1;
 /** A log position is `seq` and `prev` together: seq 0 has prev null, later ones a hash. */
 export const logPositionOk = (seq, prev) => isInt(seq, 0, Number.MAX_SAFE_INTEGER) && (seq === 0 ? prev === null : isSha(prev));
-const isReason = (v, version = 1) => (version === 2 ? REASONS_V2 : REASONS).includes(v);
+const isReason = (v, version = 1) => (version === 3 ? REASONS_V3 : version === 2 ? REASONS_V2 : REASONS).includes(v);
+const knownVersion = (v) => v === 1 || v === 2 || v === 3;
 /**
  * §2: apply one status change and return the new entries (the input is not changed). Throws on a
  * change the rules forbid: revoked is final, only a valid certificate is suspended, only a
  * suspended one is reinstated, and time never goes backwards for one certificate.
  */
 export function applyStatus(entries, certificate, action, reason, at, opts = {}) {
-    if (opts.version !== undefined && opts.version !== 1 && opts.version !== 2)
-        throw new Error("status version must be 1 or 2");
+    if (opts.version !== undefined && !knownVersion(opts.version))
+        throw new Error("status version must be 1, 2 or 3");
     if (!isSha(certificate))
         throw new Error("certificate must be a credential hash");
     if (!isIso(at))
@@ -81,26 +87,26 @@ function entryOk(e, version = 1) {
 }
 function v2Error(d) {
     if (!withinVerificationBudget(d, { maxDepth: 8 }) || !isObj(d.entries) || Object.keys(d.entries).length > STATUS_V2_MAX_ENTRIES)
-        return "status v2 exceeds its JSON or entry budget";
+        return `status v${String(d.v)} exceeds its JSON or entry budget`;
     if ("v type issuer entries issued_at valid_until signer sig".split(" ").some(k => !Object.hasOwn(d, k)) || Object.keys(d).some(k => !"v type issuer entries issued_at valid_until signer sig seq prev pq_binding".split(" ").includes(k)))
-        return "status v2 has missing or unknown fields";
+        return `status v${String(d.v)} has missing or unknown fields`;
     if (typeof d.issuer !== "string" || d.issuer.length > 69 || !publicKeyFromDid(d.issuer) || d.signer !== d.issuer || typeof d.sig !== "string" || !/^ed25519:[0-9a-f]{128}$/.test(d.sig))
-        return "status v2 needs matching Ed25519 issuer and signer";
+        return `status v${String(d.v)} needs matching Ed25519 issuer and signer`;
     if (!isIso(d.issued_at) || !isIso(d.valid_until) || ms(d.valid_until) <= ms(d.issued_at) || ms(d.valid_until) - ms(d.issued_at) > 3_600_000)
-        return "status v2 lifetime must be positive and at most one hour";
-    if (Object.entries(d.entries).some(([hash, entry]) => !isSha(hash) || !entryOk(entry, 2) || ms(entry.since) > ms(d.issued_at)))
-        return "status v2 has a malformed or future entry";
+        return `status v${String(d.v)} lifetime must be positive and at most one hour`;
+    if (Object.entries(d.entries).some(([hash, entry]) => !isSha(hash) || !entryOk(entry, d.v) || ms(entry.since) > ms(d.issued_at)))
+        return `status v${String(d.v)} has a malformed or future entry`;
     if ((("seq" in d || "prev" in d) && !logPositionOk(d.seq, d.prev)) || ("pq_binding" in d && !isSha(d.pq_binding)))
-        return "status v2 has a malformed log position or PQ binding";
+        return `status v${String(d.v)} has a malformed log position or PQ binding`;
     return null;
 }
 /** §1: sign a status document. `valid_until` is the freshness bound verifiers enforce. */
 export async function buildStatus(fields, signer) {
     const version = fields.version ?? 1;
-    if (version !== 1 && version !== 2)
-        throw new Error("status version must be 1 or 2");
-    if (version === 2 && (!isObj(fields.entries) || Object.keys(fields.entries).length > STATUS_V2_MAX_ENTRIES || Object.keys(fields).some(k => !["version", "entries", "issuedAt", "validUntil", "seq", "prev", "pqBinding"].includes(k)) || !withinVerificationBudget(fields, { maxDepth: 10 })))
-        throw new Error("status v2 exceeds its JSON or entry budget");
+    if (!knownVersion(version))
+        throw new Error("status version must be 1, 2 or 3");
+    if (version >= 2 && (!isObj(fields.entries) || Object.keys(fields.entries).length > STATUS_V2_MAX_ENTRIES || Object.keys(fields).some(k => !["version", "entries", "issuedAt", "validUntil", "seq", "prev", "pqBinding"].includes(k)) || !withinVerificationBudget(fields, { maxDepth: 10 })))
+        throw new Error(`status v${version} exceeds its JSON or entry budget`);
     if (!isIso(fields.issuedAt) || !isIso(fields.validUntil))
         throw new Error("issuedAt and validUntil must be ISO UTC timestamps");
     if (ms(fields.validUntil) < ms(fields.issuedAt))
@@ -118,13 +124,13 @@ export async function buildStatus(fields, signer) {
         v: version,
         type: "certify.status",
         issuer,
-        entries: version === 2 ? structuredClone(fields.entries) : fields.entries,
+        entries: version >= 2 ? structuredClone(fields.entries) : fields.entries,
         issued_at: fields.issuedAt,
         valid_until: fields.validUntil,
         ...(logged ? { seq: fields.seq, prev: fields.prev } : {}),
         ...(fields.pqBinding ? { pq_binding: bindingHash(fields.pqBinding) } : {}),
     };
-    if (version === 2) {
+    if (version >= 2) {
         const error = v2Error({ ...unsigned, signer: issuer, sig: `ed25519:${"0".repeat(128)}` });
         if (error)
             throw new Error(error);
@@ -139,9 +145,9 @@ export function verifyStatus(doc, opts = {}) {
     const d = isObj(doc) ? doc : {};
     const pqPolicy = opts.issuerDoc === undefined ? undefined : pqPolicyOf(opts.issuerDoc, opts.allowNoPq);
     const policy = pqPolicy ? { pqPolicy } : {};
-    if ((d.v !== 1 && d.v !== 2) || d.type !== "certify.status" || !isDid(d.issuer) || !isObj(d.entries))
+    if (!knownVersion(d.v) || d.type !== "certify.status" || !isDid(d.issuer) || !isObj(d.entries))
         return { ok: false, reasons: ["not a status document (v1)"], freshness: null, ...policy };
-    const v2 = d.v === 2 ? v2Error(d) : null;
+    const v2 = d.v !== 1 ? v2Error(d) : null;
     if (v2)
         return { ok: false, reasons: [v2], freshness: null, ...policy };
     const reasons = [];
@@ -165,9 +171,9 @@ export function verifyStatus(doc, opts = {}) {
     if ("pq_binding" in d && !isSha(d.pq_binding))
         reasons.push("status document has a malformed pq_binding");
     const now = opts.now ? ms(opts.now) : Date.now();
-    if (d.v === 2 && ((!Number.isFinite(now)) || ms(d.issued_at) > now))
-        reasons.push("status v2 reference time is invalid or issuance is in the future");
-    const freshness = (d.v === 2 ? ms(d.valid_until) > now : ms(d.valid_until) >= now) ? "fresh" : "stale";
+    if (d.v !== 1 && ((!Number.isFinite(now)) || ms(d.issued_at) > now))
+        reasons.push(`status v${String(d.v)} reference time is invalid or issuance is in the future`);
+    const freshness = (d.v !== 1 ? ms(d.valid_until) > now : ms(d.valid_until) >= now) ? "fresh" : "stale";
     if (freshness === "stale")
         reasons.push(`status document expired on ${String(d.valid_until)}`);
     if (opts.pq)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zanii/certify",
-  "version": "0.6.1",
+  "version": "0.7.1",
   "description": "Build and verify Zanii Certify certificates for AI agents: fingerprints, signed certificates, status documents, test suites and the certify command.",
   "license": "Apache-2.0",
   "homepage": "https://zanii.agency",