xoonya 2.10.0 → 2.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +13 -13
- package/RELEASE_NOTES.md +6 -8
- package/XNYA_CONFORMANCE_MARK.md +3 -3
- package/XNYA_REFERENCE_IMPLEMENTATIONS.md +1 -1
- package/XOONYA_NATIVE_ATOM_SPEC.md +6 -6
- package/XOONYA_NATIVE_PROOF_FORMAT.md +28 -28
- package/XOONYA_NATIVE_STANDARD_GOVERNANCE.md +6 -6
- package/bin/xoonya-release.js +8 -8
- package/index.js +2 -0
- package/lib/release_history.js +25 -1
- package/lib/trust_portability_pack.js +224 -0
- package/lib/verification_service_pack.js +149 -0
- package/package.json +4 -2
- package/proof_sdk.js +117 -117
- package/reference/python/xnya_reference.py +2 -2
- package/scripts/verify_all.js +45 -45
- package/scripts/verify_native_hybrid_design_gate.js +1 -1
- package/scripts/verify_reference_promotion_gate.js +7 -7
- package/scripts/verify_release_candidate.js +5 -6
- package/scripts/verify_service.js +26 -0
- package/scripts/verify_trust_portability.js +56 -0
- package/scripts/verify_vectors.js +3 -3
- package/scripts/verify_verification_services.js +56 -0
- package/server.js +65 -20
- package/vectors/native-atom-vectors.json +2 -2
package/README.md
CHANGED
|
@@ -237,28 +237,28 @@ Current built-in methods:
|
|
|
237
237
|
|
|
238
238
|
- `legacy-opreturn-v1` verifies the compatibility OP_RETURN receipt path.
|
|
239
239
|
- `detached-assertion-v1` accepts an explicit detached assertion after canonical receipt checks; cryptographic verification is expected to happen outside this helper.
|
|
240
|
-
- `xoonya-native-sha256-v1` verifies
|
|
241
|
-
- `xoonya-native-signed-v1` verifies
|
|
242
|
-
- `xoonya-native-anchored-v1` verifies
|
|
240
|
+
- `xoonya-native-sha256-v1` verifies xoonya's native deterministic digest format.
|
|
241
|
+
- `xoonya-native-signed-v1` verifies xoonya's native signed proof envelope with Ed25519, secp256k1, and P-256 implemented through the explicit suite registry. Other suites stay registry-only until validators exist.
|
|
242
|
+
- `xoonya-native-anchored-v1` verifies xoonya's native anchor-binding proof envelope for chain, batch, finality, content-hash, or external attestation refs. It verifies the binding, not the external provider or chain truth itself.
|
|
243
243
|
- `jwt-assertion-v1` accepts compact JWT assertion envelopes after canonical receipt checks; JWT signature, issuer, and audience verification remain external to this helper.
|
|
244
244
|
- `did-vc-v1` accepts DID/VC proof envelopes after canonical receipt checks; DID resolution and VC proof validation remain external to this helper.
|
|
245
245
|
- `sd-jwt-vc-v1` accepts SD-JWT VC disclosure envelopes after canonical receipt checks; issuer, holder binding, and disclosure verification remain external to this helper.
|
|
246
246
|
- `signed-envelope-v1` accepts generic signed envelopes after canonical receipt checks; envelope-specific signature verification remains external to this helper.
|
|
247
247
|
- `partner-proof-envelope-v1` accepts partner-specific proof envelopes after canonical receipt checks; partner verifier policy remains external to this helper.
|
|
248
248
|
|
|
249
|
-
`algorithm: "none"` is not a registered verification method and does not verify. External proof methods are first-class registry entries, but
|
|
249
|
+
`algorithm: "none"` is not a registered verification method and does not verify. External proof methods are first-class registry entries, but xoonya does not pretend to replace their own cryptographic verifier stacks. The proof core checks the canonical receipt, method registration, and method boundary; issuer-specific validation stays with the relevant JWT, DID/VC, SD-JWT VC, signed-envelope, or partner verifier.
|
|
250
250
|
|
|
251
|
-
###
|
|
251
|
+
### xoonya Native Proof Format
|
|
252
252
|
|
|
253
|
-
|
|
253
|
+
xoonya Native is the optional native proof/result/attestation format direction for machine proof. It is not a replacement for JWT, OAuth, OIDC, DID/VC, or SD-JWT VC. Those remain interoperability lanes.
|
|
254
254
|
|
|
255
|
-
The native standard is
|
|
255
|
+
The native standard is xoonya's own fixed-size hot-path commitment atom, cold-path proof envelope, semantic-free core bytes, and deterministic validation. The current implemented native methods are `xoonya-native-sha256-v1`, `xoonya-native-signed-v1`, and `xoonya-native-anchored-v1`. The signed native method verifies Ed25519, secp256k1, and P-256 today and keeps PQ/hybrid suites in the registry until their validators are implemented, so the standard stays agnostic without overclaiming. The anchored native method binds receipts to declared anchor/finality/attestation refs without claiming the external system has been independently verified by xoonya.
|
|
256
256
|
|
|
257
|
-
The atom ladder is treated as native
|
|
257
|
+
The atom ladder is treated as native xoonya design, not a runtime dependency: `xoonya-native-atom/v1` is the 58-byte classical commitment atom, `xoonya-native-atom/v2` is the 70-byte PQ-horizon identity commitment candidate, and `xoonya-native-atom/v3-contingency` stays reserved for a future digest-family shift only if the underlying hash assumptions materially change.
|
|
258
258
|
|
|
259
|
-
The canonical
|
|
259
|
+
The canonical xoonya Native atom magic is `XNYA`. No other magic value is part of the xoonya Native atom standard. The formal atom spec ships inside the `xoonya` package first; a separate standards repo can be extracted later if external governance needs it.
|
|
260
260
|
|
|
261
|
-
XNYA atom conformance now includes stable machine-readable reject codes and adversarial vectors. Passing only the happy-path vectors is not enough to claim
|
|
261
|
+
XNYA atom conformance now includes stable machine-readable reject codes and adversarial vectors. Passing only the happy-path vectors is not enough to claim xoonya Native compatibility.
|
|
262
262
|
|
|
263
263
|
The native payload profile is now explicit: `xoonya-native-payload-profile/v1` uses the binary `XNYP` magic and typed fields with deterministic ordering, fixed-width integer encoding, unknown-field policy checks, and no floats or loose JSON semantics. The optional `xoonya-native-line-rate-frame/v1` wraps an existing 58-byte or 70-byte `XNYA` atom with a 2-byte checksum for transport fast rejection; it does not change the atom and does not claim signature, encryption, custody, settlement, or external finality truth.
|
|
264
264
|
|
|
@@ -285,9 +285,9 @@ Legacy compact receipt and profile helpers are still available during alignment:
|
|
|
285
285
|
- `verifyReceiptV2(...)`
|
|
286
286
|
- `createProofEnvelopeV1(...)`
|
|
287
287
|
- `verifyProofEnvelopeV1(...)`
|
|
288
|
-
- `
|
|
289
|
-
- `
|
|
290
|
-
- `
|
|
288
|
+
- `createxoonyaNativeAtomV1(...)`
|
|
289
|
+
- `createxoonyaNativeAtomV2(...)`
|
|
290
|
+
- `verifyxoonyaNativeAtom(...)`
|
|
291
291
|
- `createEconomicReceiptProfileV1(...)`
|
|
292
292
|
- `verifyEconomicReceiptProfileV1(...)`
|
|
293
293
|
- `createRegistryProfileV1(...)`
|
package/RELEASE_NOTES.md
CHANGED
|
@@ -1,11 +1,9 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
`xoonya` 2.10.0 is the release-hygiene and standard-boundary polish line for current-release-only package notes and stronger release-candidate packaging checks.
|
|
1
|
+
`xoonya` 2.12.0 is the proof-release truth line for aligned npm, GitHub, website, code, documentation, and public-copy surfaces.
|
|
4
2
|
|
|
5
3
|
Highlights:
|
|
6
4
|
|
|
7
|
-
-
|
|
8
|
-
-
|
|
9
|
-
-
|
|
10
|
-
- keeps the canonical `https://naxytra.com/xoonya` public product URL and single
|
|
11
|
-
-
|
|
5
|
+
- normalizes visible `xoonya`, `xytara`, and `naxytra` product references to the lowercase convention across package docs, native-standard copy, CLI release surfaces, server routes, and verifier call sites
|
|
6
|
+
- preserves XNYA-compatible conformance, native reference implementation boundaries, external proof import boundaries, trust-portability surfaces, and the PQ/hybrid design gate
|
|
7
|
+
- keeps `RELEASE_NOTES.md` scoped to the current release so npm and GitHub release notes stay clean
|
|
8
|
+
- keeps the canonical `https://naxytra.com/xoonya` public product URL and single naxytra website positioning intact
|
|
9
|
+
- verifies the lowercase convention through the release candidate, full package verifier, umbrella pre-deploy gates, and clean-consumer release smoke
|
package/XNYA_CONFORMANCE_MARK.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# XNYA Conformance Mark
|
|
2
2
|
|
|
3
|
-
`XNYA-compatible` is the compatibility mark for implementations that preserve the
|
|
3
|
+
`XNYA-compatible` is the compatibility mark for implementations that preserve the xoonya Native atom, payload, proof-envelope, and vector behavior exactly enough for deterministic machine evidence to remain portable.
|
|
4
4
|
|
|
5
5
|
The mark is not an identity, auth, custody, transport-security, settlement, chain-finality, or external-provider truth claim.
|
|
6
6
|
|
|
@@ -50,7 +50,7 @@ Non-JavaScript implementations should publish deterministic pass/fail output aga
|
|
|
50
50
|
|
|
51
51
|
`xnya_native_proof_compatible` means registered native methods verify through the declared suite registry, reject `algorithm: "none"`, and keep signatures, anchors, and external references outside the atom core.
|
|
52
52
|
|
|
53
|
-
`xnya_external_interop_compatible` means external proof envelopes are bound to canonical
|
|
53
|
+
`xnya_external_interop_compatible` means external proof envelopes are bound to canonical xoonya receipts without claiming issuer, DID, JWT, SD-JWT, chain, or partner-provider truth unless an external verifier is declared and bound.
|
|
54
54
|
|
|
55
55
|
## Forbidden Claims
|
|
56
56
|
|
|
@@ -60,7 +60,7 @@ Do not claim the mark if:
|
|
|
60
60
|
- `algorithm: "none"` verifies as production proof
|
|
61
61
|
- happy-path vectors pass but adversarial vectors are skipped
|
|
62
62
|
- PQ/hybrid support is claimed without validators, vectors, downgrade tests, and deterministic error codes
|
|
63
|
-
- external issuer, chain, finality, custody, or provider truth is claimed as
|
|
63
|
+
- external issuer, chain, finality, custody, or provider truth is claimed as xoonya-verified without a declared external verifier
|
|
64
64
|
- the mark is used to imply login, session, wallet, custody, payment, transport, or regulatory compliance behavior
|
|
65
65
|
|
|
66
66
|
## Extra Evidence Gates
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# XNYA Reference Implementations
|
|
2
2
|
|
|
3
|
-
`XNYA-compatible` needs independent implementations, not only one JavaScript package. This document defines how
|
|
3
|
+
`XNYA-compatible` needs independent implementations, not only one JavaScript package. This document defines how xoonya treats reference implementations without overclaiming maturity before vector parity exists.
|
|
4
4
|
|
|
5
5
|
## Current Reference
|
|
6
6
|
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
#
|
|
1
|
+
# xoonya Native Atom Specification
|
|
2
2
|
|
|
3
3
|
Status: formal spec pack active
|
|
4
4
|
|
|
@@ -6,9 +6,9 @@ Spec version: `xoonya-native-atom-spec/v1`
|
|
|
6
6
|
|
|
7
7
|
## Decision
|
|
8
8
|
|
|
9
|
-
The canonical
|
|
9
|
+
The canonical xoonya Native atom magic is `XNYA`.
|
|
10
10
|
|
|
11
|
-
No other magic value is part of the
|
|
11
|
+
No other magic value is part of the xoonya Native atom standard. Implementations that use a different discriminator are separate formats and must not claim xoonya Native atom compatibility.
|
|
12
12
|
|
|
13
13
|
`XNYA` is four bytes, not three, because a fixed 4-byte ASCII discriminator is easier to index, validate, debug, and defend than a shorter clever header.
|
|
14
14
|
|
|
@@ -18,7 +18,7 @@ The native atom spec ships inside the `xoonya` package first.
|
|
|
18
18
|
|
|
19
19
|
This is intentional:
|
|
20
20
|
|
|
21
|
-
- there is one public website and one
|
|
21
|
+
- there is one public website and one xoonya package surface today
|
|
22
22
|
- the verifier implementation and conformance vectors live beside the spec
|
|
23
23
|
- builders should not need another repo to understand the native proof path
|
|
24
24
|
|
|
@@ -26,11 +26,11 @@ A separate standards repo can be created later if external adoption, independent
|
|
|
26
26
|
|
|
27
27
|
## Atom Purpose
|
|
28
28
|
|
|
29
|
-
The
|
|
29
|
+
The xoonya Native atom is a fixed-size commitment record.
|
|
30
30
|
|
|
31
31
|
It answers:
|
|
32
32
|
|
|
33
|
-
> Which typed machine identity committed to which payload hash under which frozen
|
|
33
|
+
> Which typed machine identity committed to which payload hash under which frozen xoonya Native version line?
|
|
34
34
|
|
|
35
35
|
It does not contain:
|
|
36
36
|
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
#
|
|
1
|
+
# xoonya Native Proof Format
|
|
2
2
|
|
|
3
3
|
Status: design contract active
|
|
4
4
|
|
|
@@ -6,11 +6,11 @@ Version: `xoonya-native-proof/v1`
|
|
|
6
6
|
|
|
7
7
|
## Purpose
|
|
8
8
|
|
|
9
|
-
|
|
9
|
+
xoonya Native is the optional native proof format for xoonya proof, result, attestation, and handoff artifacts.
|
|
10
10
|
|
|
11
11
|
It is not a generic login token, bearer token, wallet credential, or replacement for JWT, OAuth, OIDC, DID/VC, or SD-JWT VC. Those remain useful interoperability lanes.
|
|
12
12
|
|
|
13
|
-
|
|
13
|
+
xoonya Native exists for a different job:
|
|
14
14
|
|
|
15
15
|
- preserve machine evidence without runtime lock-in
|
|
16
16
|
- preserve deterministic replay truth
|
|
@@ -20,7 +20,7 @@ Xoonya Native exists for a different job:
|
|
|
20
20
|
|
|
21
21
|
## Native Design Carry-In
|
|
22
22
|
|
|
23
|
-
|
|
23
|
+
xoonya Native keeps the useful design substance and expresses it directly as xoonya. The durable invention is the split between:
|
|
24
24
|
|
|
25
25
|
- a fixed-size hot-path commitment atom
|
|
26
26
|
- a variable-size cold-path proof envelope
|
|
@@ -35,11 +35,11 @@ The strongest long-term posture is:
|
|
|
35
35
|
- keep the native core as a commitment primitive, not a signature or credential container
|
|
36
36
|
- put signatures, credentials, attestations, anchors, settlement refs, and ZK artifacts in envelopes or profiles
|
|
37
37
|
- keep external formats as interop lanes
|
|
38
|
-
- let
|
|
38
|
+
- let xoonya Native be the format agents choose when they want byte-stable proof rather than broad web credential compatibility
|
|
39
39
|
|
|
40
40
|
## Doctrine
|
|
41
41
|
|
|
42
|
-
-
|
|
42
|
+
- xoonya remains method-agnostic.
|
|
43
43
|
- Native proof is first-class but optional.
|
|
44
44
|
- External proof and credential formats stay supported as registry methods or integration lanes.
|
|
45
45
|
- The native format optimizes for deterministic machine proof, not human web sessions.
|
|
@@ -63,7 +63,7 @@ It does not contain signatures, timestamps, prices, settlement references, custo
|
|
|
63
63
|
|
|
64
64
|
The payload or intent bytes carry deterministic machine meaning.
|
|
65
65
|
|
|
66
|
-
For current
|
|
66
|
+
For current xoonya this is represented by `canonical_event`. For a future formal atom line, this should become a fixed binary or tightly canonicalized payload profile where every field order, integer width, unknown-field rule, and replay rule is specified.
|
|
67
67
|
|
|
68
68
|
JSON may remain a public SDK and service convenience, but the native standard should not depend on loose JSON interpretation for the hot path.
|
|
69
69
|
|
|
@@ -87,13 +87,13 @@ Profiles are versioned independently.
|
|
|
87
87
|
|
|
88
88
|
### L4: Runtime And Policy Consumers
|
|
89
89
|
|
|
90
|
-
|
|
90
|
+
xytara, agent runtimes, settlement systems, operator dashboards, and partner verifiers consume xoonya evidence. They must not redefine the atom byte layout.
|
|
91
91
|
|
|
92
92
|
## Native Atom Version Ladder
|
|
93
93
|
|
|
94
94
|
### `xoonya-native-atom/v1`
|
|
95
95
|
|
|
96
|
-
Canonical
|
|
96
|
+
Canonical xoonya Native byte identity: `XNYA`.
|
|
97
97
|
|
|
98
98
|
Purpose: classical minimal identity and payload commitment.
|
|
99
99
|
|
|
@@ -122,7 +122,7 @@ Use when:
|
|
|
122
122
|
|
|
123
123
|
### `xoonya-native-atom/v2`
|
|
124
124
|
|
|
125
|
-
Canonical
|
|
125
|
+
Canonical xoonya Native byte identity: `XNYA`.
|
|
126
126
|
|
|
127
127
|
Purpose: PQ-horizon identity anchoring while preserving the same fixed commitment philosophy.
|
|
128
128
|
|
|
@@ -155,7 +155,7 @@ This is not an implementation target.
|
|
|
155
155
|
|
|
156
156
|
It is a contingency line only if SHA-256 or the prevailing digest assumption changes materially. A future v3 should stay fixed-length and deterministic, most likely by moving to a different digest family with explicit domain separation. It should not introduce runtime negotiation inside the core.
|
|
157
157
|
|
|
158
|
-
## Current
|
|
158
|
+
## Current xoonya Object Model
|
|
159
159
|
|
|
160
160
|
### `canonical_event`
|
|
161
161
|
|
|
@@ -260,8 +260,8 @@ Native anchored proof material:
|
|
|
260
260
|
|
|
261
261
|
Important boundary:
|
|
262
262
|
|
|
263
|
-
-
|
|
264
|
-
-
|
|
263
|
+
- xoonya verifies that the receipt and event commitment bind to the declared anchors.
|
|
264
|
+
- xoonya does not independently assert that an external chain, settlement provider, or attestation issuer is truthful.
|
|
265
265
|
- External finality or provider verification remains a higher layer.
|
|
266
266
|
|
|
267
267
|
## Native Payload Profile
|
|
@@ -296,7 +296,7 @@ Canonical rules:
|
|
|
296
296
|
- floats, null, undefined, functions, and symbolic values are not supported
|
|
297
297
|
- payload hash is SHA-256 over `xoonya:payload-profile:v1:` plus canonical profile bytes
|
|
298
298
|
|
|
299
|
-
This gives
|
|
299
|
+
This gives xoonya a durable standard-grade payload path while keeping richer JSON, CBOR, DID/VC, JWT, or partner evidence envelopes available as external or higher-layer profiles. If deterministic CBOR is later needed, it should be a separate profile with its own vectors and reject rules, not a silent change to this binary profile.
|
|
300
300
|
|
|
301
301
|
Reference vectors ship at `vectors/native-payload-profile-vectors.json`.
|
|
302
302
|
|
|
@@ -329,13 +329,13 @@ Design-gated future extension.
|
|
|
329
329
|
|
|
330
330
|
This should provide stronger-crypto or PQC-sensitive proof lanes if production need appears. It should not become the default until there is a real reason.
|
|
331
331
|
|
|
332
|
-
The current rule is strict: `xoonya-native-hybrid-v1` remains design-gated until runtime validators, public key formats, conformance vectors, adversarial vectors, and deterministic error codes exist.
|
|
332
|
+
The current rule is strict: `xoonya-native-hybrid-v1` remains design-gated until runtime validators, public key formats, conformance vectors, adversarial vectors, and deterministic error codes exist. xoonya may expose readiness and promotion criteria for this method, but must not claim PQC or hybrid verification before those artifacts are real.
|
|
333
333
|
|
|
334
334
|
Before promotion, any proof bundle that directly asks the current verifier to accept `xoonya-native-hybrid-v1` must fail with the deterministic reason `native_hybrid_design_gated`. Hybrid-looking native signatures also must not verify through an external assertion method; those downgrade attempts fail as `signature_method_mismatch`.
|
|
335
335
|
|
|
336
336
|
## Crypto And Identity Support Boundary
|
|
337
337
|
|
|
338
|
-
|
|
338
|
+
xoonya Native supports cryptographic ecosystems by committing to their canonical identity or proof material. It does not become those ecosystems.
|
|
339
339
|
|
|
340
340
|
Cleanly supported above the atom:
|
|
341
341
|
|
|
@@ -351,7 +351,7 @@ Cleanly supported above the atom:
|
|
|
351
351
|
|
|
352
352
|
Important boundary:
|
|
353
353
|
|
|
354
|
-
-
|
|
354
|
+
- xoonya Native provides commitments and proof binding.
|
|
355
355
|
- It does not provide encryption, forward secrecy, access control, custody, or transport security.
|
|
356
356
|
- Those systems remain external layers.
|
|
357
357
|
|
|
@@ -365,13 +365,13 @@ External methods remain first-class:
|
|
|
365
365
|
- `signed-envelope-v1`
|
|
366
366
|
- `partner-proof-envelope-v1`
|
|
367
367
|
|
|
368
|
-
For these methods,
|
|
368
|
+
For these methods, xoonya checks canonical receipt shape, registration, and method boundary. Method-specific cryptographic verification stays with the relevant verifier stack unless and until a verifier is added behind that method.
|
|
369
369
|
|
|
370
370
|
## External Proof Import Adapter
|
|
371
371
|
|
|
372
372
|
Implemented version: `xoonya-external-proof-import-adapter-v1`
|
|
373
373
|
|
|
374
|
-
The import adapter is the bridge between external proof envelopes and
|
|
374
|
+
The import adapter is the bridge between external proof envelopes and xoonya proof bundles.
|
|
375
375
|
|
|
376
376
|
It accepts registered external proof methods:
|
|
377
377
|
|
|
@@ -385,7 +385,7 @@ It accepts registered external proof methods:
|
|
|
385
385
|
It then emits:
|
|
386
386
|
|
|
387
387
|
- a canonical import event
|
|
388
|
-
- a
|
|
388
|
+
- a xoonya receipt bound to the selected method
|
|
389
389
|
- a proof bundle
|
|
390
390
|
- bundle verification
|
|
391
391
|
- an import review that states the external-verifier boundary
|
|
@@ -412,7 +412,7 @@ The adapter verifies:
|
|
|
412
412
|
- the method is registered and importable
|
|
413
413
|
- the external proof material is present
|
|
414
414
|
- the material hash matches `declared_hash_sha256` when supplied
|
|
415
|
-
- the import material is deterministically bound into a canonical
|
|
415
|
+
- the import material is deterministically bound into a canonical xoonya event
|
|
416
416
|
- the emitted receipt and proof bundle verify structurally
|
|
417
417
|
|
|
418
418
|
The adapter does not claim:
|
|
@@ -424,26 +424,26 @@ The adapter does not claim:
|
|
|
424
424
|
- partner policy truth
|
|
425
425
|
- external issuer correctness
|
|
426
426
|
|
|
427
|
-
Those remain the job of the relevant external verifier.
|
|
427
|
+
Those remain the job of the relevant external verifier. xoonya's job is to bind the external proof into replayable proof continuity without pretending to own another ecosystem's trust root.
|
|
428
428
|
|
|
429
429
|
## Competitive Positioning
|
|
430
430
|
|
|
431
|
-
|
|
431
|
+
xoonya Native should be positioned as deterministic machine evidence, not as a universal identity credential.
|
|
432
432
|
|
|
433
433
|
Compared with JWT/JWS:
|
|
434
434
|
|
|
435
435
|
- JWT wins for broad web compatibility and signed JSON claims.
|
|
436
|
-
-
|
|
436
|
+
- xoonya Native wins when a machine needs fixed validation rules, replayable proof bundles, and no ambiguity about canonical evidence bytes.
|
|
437
437
|
|
|
438
438
|
Compared with DID/VC:
|
|
439
439
|
|
|
440
440
|
- DID/VC wins for rich identity and credential ecosystems.
|
|
441
|
-
-
|
|
441
|
+
- xoonya Native wins when the primary artifact is a compact machine receipt or proof root rather than a human credential.
|
|
442
442
|
|
|
443
443
|
Compared with chain-specific proofs:
|
|
444
444
|
|
|
445
445
|
- chain-specific proofs win for native settlement proof on that chain.
|
|
446
|
-
-
|
|
446
|
+
- xoonya Native wins when proof must cross runtimes, chains, settlement rails, and credential systems.
|
|
447
447
|
|
|
448
448
|
The unique claim is not "better than everything." The unique claim is:
|
|
449
449
|
|
|
@@ -466,13 +466,13 @@ Commercial and legal protection should be handled explicitly:
|
|
|
466
466
|
|
|
467
467
|
- preserve authorship and publication history through tagged releases and checksummed specs
|
|
468
468
|
- use clear Apache-2.0 implementation licensing where intended
|
|
469
|
-
- maintain trademark/brand usage rules for the
|
|
469
|
+
- maintain trademark/brand usage rules for the xoonya name and native conformance marks
|
|
470
470
|
- get qualified IP counsel before relying on patent, trademark, or defensive-publication strategy
|
|
471
471
|
|
|
472
472
|
## Standardization Steps
|
|
473
473
|
|
|
474
474
|
1. Keep `xoonya-native-sha256-v1` as the implemented deterministic method.
|
|
475
|
-
2. Publish the XNYA atom ladder as
|
|
475
|
+
2. Publish the XNYA atom ladder as xoonya Native design, without forcing the current SDK to expose raw atoms prematurely.
|
|
476
476
|
3. Keep `xoonya-native-signed-v1` behind the existing method registry with Ed25519 verification implemented first.
|
|
477
477
|
4. Maintain the signature suite registry and only mark suites as verified when validators exist.
|
|
478
478
|
5. Keep conformance vectors for native signed proof.
|
|
@@ -1,10 +1,10 @@
|
|
|
1
|
-
#
|
|
1
|
+
# xoonya Native Standard Governance
|
|
2
2
|
|
|
3
3
|
Status: active governance note
|
|
4
4
|
|
|
5
5
|
## Purpose
|
|
6
6
|
|
|
7
|
-
This document defines how
|
|
7
|
+
This document defines how xoonya Native evolves without losing its standard value.
|
|
8
8
|
|
|
9
9
|
The goal is not to create a format for novelty. The goal is to preserve a small deterministic machine-evidence primitive that can survive runtime churn, identity-system churn, settlement-rail churn, and cryptographic migration.
|
|
10
10
|
|
|
@@ -20,7 +20,7 @@ The phrase `XNYA-compatible` should mean:
|
|
|
20
20
|
- it does not redefine a published version line
|
|
21
21
|
- it follows the public mark rules in `XNYA_CONFORMANCE_MARK.md`
|
|
22
22
|
|
|
23
|
-
Implementations that use a different magic value, different field ordering, different hash derivation, or soft-forked validation behavior are not
|
|
23
|
+
Implementations that use a different magic value, different field ordering, different hash derivation, or soft-forked validation behavior are not xoonya Native atom implementations. They are separate formats.
|
|
24
24
|
|
|
25
25
|
## Registry Policy
|
|
26
26
|
|
|
@@ -76,7 +76,7 @@ Before promoting a native feature:
|
|
|
76
76
|
|
|
77
77
|
Current public claim:
|
|
78
78
|
|
|
79
|
-
>
|
|
79
|
+
> xoonya Native provides deterministic machine evidence with native digest, Ed25519 signed proof, and anchor-binding proof support, plus a formal XNYA atom spec for fixed-size commitment records.
|
|
80
80
|
|
|
81
81
|
Not current public claims:
|
|
82
82
|
|
|
@@ -90,7 +90,7 @@ Not current public claims:
|
|
|
90
90
|
|
|
91
91
|
## Current Conformance Surface
|
|
92
92
|
|
|
93
|
-
The current
|
|
93
|
+
The current xoonya Native atom conformance surface is:
|
|
94
94
|
|
|
95
95
|
- `GET /v1/proof-center/native-conformance-mark`
|
|
96
96
|
- `GET /v1/proof-center/native-conformance-mark/summary`
|
|
@@ -114,6 +114,6 @@ Use practical protection layers:
|
|
|
114
114
|
- checksummed spec artifacts
|
|
115
115
|
- public conformance vectors
|
|
116
116
|
- Apache-2.0 implementation licensing where intended
|
|
117
|
-
- clear
|
|
117
|
+
- clear xoonya name and conformance-mark usage
|
|
118
118
|
|
|
119
119
|
Patent, trademark, or defensive-publication strategy should be reviewed with qualified IP counsel before being relied on.
|
package/bin/xoonya-release.js
CHANGED
|
@@ -52,10 +52,10 @@ const {
|
|
|
52
52
|
summarizeReleaseCandidatePack
|
|
53
53
|
} = require("../lib/release_candidate");
|
|
54
54
|
const {
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
55
|
+
buildxoonyaNativeConformanceMarkPack,
|
|
56
|
+
summarizexoonyaNativeConformanceMarkPack,
|
|
57
|
+
buildxoonyaNativeReferenceImplementationPack,
|
|
58
|
+
summarizexoonyaNativeReferenceImplementationPack
|
|
59
59
|
} = require("../proof_sdk");
|
|
60
60
|
const {
|
|
61
61
|
buildPhaseProgramPack,
|
|
@@ -855,13 +855,13 @@ function main() {
|
|
|
855
855
|
} else if (history) {
|
|
856
856
|
payload = buildReleaseHistory();
|
|
857
857
|
} else if (nativeConformanceMark && summary) {
|
|
858
|
-
payload =
|
|
858
|
+
payload = summarizexoonyaNativeConformanceMarkPack();
|
|
859
859
|
} else if (nativeConformanceMark) {
|
|
860
|
-
payload =
|
|
860
|
+
payload = buildxoonyaNativeConformanceMarkPack();
|
|
861
861
|
} else if (nativeReferenceImplementations && summary) {
|
|
862
|
-
payload =
|
|
862
|
+
payload = summarizexoonyaNativeReferenceImplementationPack();
|
|
863
863
|
} else if (nativeReferenceImplementations) {
|
|
864
|
-
payload =
|
|
864
|
+
payload = buildxoonyaNativeReferenceImplementationPack();
|
|
865
865
|
} else if (phases && summary) {
|
|
866
866
|
payload = summarizePhaseProgramPack();
|
|
867
867
|
} else if (phases) {
|
package/index.js
CHANGED
|
@@ -3,6 +3,8 @@
|
|
|
3
3
|
module.exports = {
|
|
4
4
|
...require("./proof_sdk"),
|
|
5
5
|
...require("./integrations/registry"),
|
|
6
|
+
...require("./lib/verification_service_pack"),
|
|
7
|
+
...require("./lib/trust_portability_pack"),
|
|
6
8
|
...require("./lib/release_pack"),
|
|
7
9
|
...require("./lib/release_manifest"),
|
|
8
10
|
...require("./lib/release_center"),
|
package/lib/release_history.js
CHANGED
|
@@ -10,6 +10,30 @@ function buildReleaseHistory() {
|
|
|
10
10
|
current_version: packageJson.version,
|
|
11
11
|
release_track: "public_release",
|
|
12
12
|
history: [
|
|
13
|
+
{
|
|
14
|
+
version: "2.12.0",
|
|
15
|
+
channel: "public_release",
|
|
16
|
+
maturity_posture: "proof_release_truth",
|
|
17
|
+
headline: "proof-release truth line aligning verification services, trust portability, and public release-coherence surfaces",
|
|
18
|
+
milestone_refs: [
|
|
19
|
+
"proof_release_truth_bundle",
|
|
20
|
+
"verification_service_public_surface",
|
|
21
|
+
"trust_portability_public_surface",
|
|
22
|
+
"public_release_surface_alignment"
|
|
23
|
+
]
|
|
24
|
+
},
|
|
25
|
+
{
|
|
26
|
+
version: "2.11.0",
|
|
27
|
+
channel: "public_release",
|
|
28
|
+
maturity_posture: "brand_convention_aligned",
|
|
29
|
+
headline: "lowercase-brand-convention release aligning npm, GitHub, website, code, native-standard docs, and public-copy surfaces",
|
|
30
|
+
milestone_refs: [
|
|
31
|
+
"lowercase_product_name_convention",
|
|
32
|
+
"native_standard_copy_alignment",
|
|
33
|
+
"server_and_verifier_surface_alignment",
|
|
34
|
+
"synchronized_2_11_release_prep"
|
|
35
|
+
]
|
|
36
|
+
},
|
|
13
37
|
{
|
|
14
38
|
version: "2.10.0",
|
|
15
39
|
channel: "public_release",
|
|
@@ -26,7 +50,7 @@ function buildReleaseHistory() {
|
|
|
26
50
|
version: "2.9.0",
|
|
27
51
|
channel: "public_release",
|
|
28
52
|
maturity_posture: "public_polish",
|
|
29
|
-
headline: "public-polish release with canonical
|
|
53
|
+
headline: "public-polish release with canonical naxytra product URLs while preserving XNYA native-standard claim boundaries",
|
|
30
54
|
milestone_refs: [
|
|
31
55
|
"canonical_naxytra_product_url",
|
|
32
56
|
"standalone_product_domain_guard",
|