xoonya 2.7.0 → 2.9.0

package/scripts/verify_release_candidate.js

@@ -40,6 +40,11 @@ function main() {
   assert.strictEqual(conformanceSummary.ok, true, "conformance command did not pass");
   assert.strictEqual(conformanceSummary.conformance_count >= 8, true, "conformance vector count too small");
   assert.strictEqual(conformanceSummary.adversarial_count >= 8, true, "adversarial vector count too small");
+  assert.strictEqual(
+    conformanceSummary.adversarial_reasons.includes("native_hybrid_design_gated"),
+    true,
+    "native hybrid design-gate adversarial reason missing"
+  );
   assert.deepStrictEqual(
     conformanceSummary.verification_methods,
     [
@@ -65,7 +70,13 @@ function main() {
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "bin/xoonya-first-run.js"), true, "npm pack dry-run missing xoonya-first-run");
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "bin/xoonya-review.js"), true, "npm pack dry-run missing xoonya-review");
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "bin/xoonya-release.js"), true, "npm pack dry-run missing xoonya-release");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_external_proof_import_gate.js"), true, "npm pack dry-run missing external proof import gate verifier script");
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_vectors.js"), true, "npm pack dry-run missing conformance verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_python.js"), true, "npm pack dry-run missing Python reference verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_python_crypto.js"), true, "npm pack dry-run missing Python crypto reference verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_promotion_gate.js"), true, "npm pack dry-run missing reference promotion gate verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_reference_rust_scaffold.js"), true, "npm pack dry-run missing Rust reference scaffold verifier script");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_native_hybrid_design_gate.js"), true, "npm pack dry-run missing native hybrid design-gate verifier script");
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "scripts/verify_all.js"), true, "npm pack dry-run missing package verifier script");
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "vectors/conformance-vectors.json"), true, "npm pack dry-run missing conformance vectors");
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "vectors/adversarial-vectors.json"), true, "npm pack dry-run missing adversarial vectors");
@@ -73,6 +84,14 @@ function main() {
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "README.md"), true, "npm pack dry-run missing README");
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "XOONYA_NATIVE_ATOM_SPEC.md"), true, "npm pack dry-run missing native atom spec");
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "XOONYA_NATIVE_STANDARD_GOVERNANCE.md"), true, "npm pack dry-run missing native governance doc");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "XNYA_CONFORMANCE_MARK.md"), true, "npm pack dry-run missing XNYA conformance mark doc");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "XNYA_REFERENCE_IMPLEMENTATIONS.md"), true, "npm pack dry-run missing XNYA reference implementations doc");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/python/xnya_reference.py"), true, "npm pack dry-run missing Python XNYA candidate reference");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/python/verify_vectors.py"), true, "npm pack dry-run missing Python XNYA vector verifier");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/python/requirements-optional.txt"), true, "npm pack dry-run missing Python optional requirements");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/rust/Cargo.toml"), true, "npm pack dry-run missing Rust candidate Cargo manifest");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/rust/src/lib.rs"), true, "npm pack dry-run missing Rust candidate source");
+  assert.strictEqual(dryRun.files.some((entry) => entry.path === "reference/rust/README.md"), true, "npm pack dry-run missing Rust candidate boundary doc");
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "RELEASE_NOTES.md"), true, "npm pack dry-run missing release notes");
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "START_HERE.md"), true, "npm pack dry-run missing start-here");
   assert.strictEqual(dryRun.files.some((entry) => entry.path === "SERVICE_CONTRACT.md"), true, "npm pack dry-run missing service contract");

package/scripts/verify_service.js

@@ -1047,6 +1047,28 @@ async function main() {
     assert.strictEqual(nativeStandardizationSummaryResponse.status, 200, 'native standardization summary route failed');
     assert.strictEqual(nativeStandardizationSummaryResponse.json.category, 'xoonya-native-standardization-summary', 'native standardization summary category missing');
     assert.strictEqual(nativeStandardizationSummaryResponse.json.public_claim.includes('deterministic'), true, 'native standardization summary claim missing');
+    const nativeConformanceMarkResponse = await getJson(baseUrl, '/v1/proof-center/native-conformance-mark');
+    assert.strictEqual(nativeConformanceMarkResponse.status, 200, 'native conformance mark route failed');
+    assert.strictEqual(nativeConformanceMarkResponse.json.mark, 'XNYA-compatible', 'native conformance mark missing');
+    assert.strictEqual(nativeConformanceMarkResponse.json.required_artifacts.includes('XNYA_CONFORMANCE_MARK.md'), true, 'native conformance mark doc missing');
+    assert.strictEqual(nativeConformanceMarkResponse.json.forbidden_claims_without_extra_evidence.some((entry) => entry.claim === 'pqc_or_hybrid_verified'), true, 'native conformance mark pq gate missing');
+    const nativeConformanceMarkSummaryResponse = await getJson(baseUrl, '/v1/proof-center/native-conformance-mark/summary');
+    assert.strictEqual(nativeConformanceMarkSummaryResponse.status, 200, 'native conformance mark summary route failed');
+    assert.strictEqual(nativeConformanceMarkSummaryResponse.json.category, 'xoonya-native-conformance-mark-summary', 'native conformance mark summary category missing');
+    assert.strictEqual(nativeConformanceMarkSummaryResponse.json.claim_class_count >= 4, true, 'native conformance mark claim classes missing');
+    const nativeReferenceImplementationResponse = await getJson(baseUrl, '/v1/proof-center/native-reference-implementations');
+    assert.strictEqual(nativeReferenceImplementationResponse.status, 200, 'native reference implementations route failed');
+    assert.strictEqual(nativeReferenceImplementationResponse.json.category, 'xoonya-native-reference-implementation-pack', 'native reference implementations category missing');
+    assert.strictEqual(nativeReferenceImplementationResponse.json.implemented_reference_implementations.some((entry) => entry.language === 'javascript' && entry.status === 'implemented'), true, 'native reference javascript implementation missing');
+    assert.strictEqual(nativeReferenceImplementationResponse.json.planned_reference_candidates.some((entry) => entry.language === 'python'), true, 'native reference python candidate missing');
+    assert.strictEqual(nativeReferenceImplementationResponse.json.planned_reference_candidates.some((entry) => entry.language === 'rust'), true, 'native reference rust candidate missing');
+    const nativeReferenceImplementationSummaryResponse = await getJson(baseUrl, '/v1/proof-center/native-reference-implementations/summary');
+    assert.strictEqual(nativeReferenceImplementationSummaryResponse.status, 200, 'native reference implementations summary route failed');
+    assert.strictEqual(nativeReferenceImplementationSummaryResponse.json.category, 'xoonya-native-reference-implementation-summary', 'native reference implementations summary category missing');
+    assert.strictEqual(nativeReferenceImplementationSummaryResponse.json.implemented_reference_count, 1, 'native reference implementations summary count mismatch');
+    assert.strictEqual(nativeReferenceImplementationSummaryResponse.json.planned_reference_count >= 2, true, 'native planned reference implementations summary count mismatch');
+    assert.strictEqual(nativeReferenceImplementationSummaryResponse.json.verified_candidate_scaffold_count >= 1, true, 'native verified candidate scaffold summary missing');
+    assert.strictEqual(nativeReferenceImplementationSummaryResponse.json.deterministic_rejection_code_count >= 11, true, 'native reference promotion rejection code count missing');
     const nativePayloadProfileResponse = await getJson(baseUrl, '/v1/proof-center/native-payload-profile');
     assert.strictEqual(nativePayloadProfileResponse.status, 200, 'native payload profile route failed');
     assert.strictEqual(nativePayloadProfileResponse.json.category, 'xoonya-native-payload-profile-pack', 'native payload profile category missing');
@@ -1104,10 +1126,12 @@ async function main() {
     assert.strictEqual(importAdapterResponse.json.category, 'xoonya-external-proof-import-adapter', 'external proof import category missing');
     assert.strictEqual(importAdapterResponse.json.supported_methods.some((entry) => entry.method === 'jwt-assertion-v1'), true, 'external proof import jwt method missing');
     assert.strictEqual(importAdapterResponse.json.verification_boundary.external_verifier_retains.includes('issuer_cryptographic_truth'), true, 'external proof import boundary missing');
+    assert.strictEqual(importAdapterResponse.json.deterministic_rejection_codes.includes('external_issuer_truth_claim_requires_external_verifier'), true, 'external proof import truth rejection code missing');
     const importAdapterSummaryResponse = await getJson(baseUrl, '/v1/proof-center/import-adapter/summary');
     assert.strictEqual(importAdapterSummaryResponse.status, 200, 'external proof import adapter summary route failed');
     assert.strictEqual(importAdapterSummaryResponse.json.category, 'xoonya-external-proof-import-adapter-summary', 'external proof import summary category missing');
     assert.strictEqual(importAdapterSummaryResponse.json.supported_methods.includes('did-vc-v1'), true, 'external proof import did-vc summary missing');
+    assert.strictEqual(importAdapterSummaryResponse.json.deterministic_rejection_code_count >= 11, true, 'external proof import rejection code summary missing');
     const proofLoopsResponse = await getJson(baseUrl, '/v1/proof-center/default-loops');
     assert.strictEqual(proofLoopsResponse.status, 200, 'proof loop catalog route failed');
     assert.strictEqual(proofLoopsResponse.json.loop_count >= 2, true, 'proof loop catalog count missing');

package/scripts/verify_tooling.js

@@ -121,6 +121,29 @@ function main() {
   assert.strictEqual(releaseSummary.product, "xoonya", "xoonya-release cli product mismatch");
   assert.strictEqual(releaseSummary.release_cli, "xoonya-release --summary", "xoonya-release cli release command mismatch");
   assert.strictEqual(releaseSummary.install_command, "npm install xoonya", "xoonya-release cli install command mismatch");
+  const nativeConformanceMarkOutput = execFileSync(process.execPath, [
+    path.resolve(__dirname, "..", "bin", "xoonya-release.js"),
+    "--native-conformance-mark",
+    "--summary"
+  ], {
+    cwd: path.resolve(__dirname, ".."),
+    encoding: "utf8"
+  });
+  const nativeConformanceMarkSummary = JSON.parse(nativeConformanceMarkOutput);
+  assert.strictEqual(nativeConformanceMarkSummary.category, "xoonya-native-conformance-mark-summary", "xoonya native conformance mark cli category mismatch");
+  assert.strictEqual(nativeConformanceMarkSummary.mark, "XNYA-compatible", "xoonya native conformance mark cli mark mismatch");
+  const nativeReferenceImplementationOutput = execFileSync(process.execPath, [
+    path.resolve(__dirname, "..", "bin", "xoonya-release.js"),
+    "--native-reference-implementations",
+    "--summary"
+  ], {
+    cwd: path.resolve(__dirname, ".."),
+    encoding: "utf8"
+  });
+  const nativeReferenceImplementationSummary = JSON.parse(nativeReferenceImplementationOutput);
+  assert.strictEqual(nativeReferenceImplementationSummary.category, "xoonya-native-reference-implementation-summary", "xoonya native reference implementation cli category mismatch");
+  assert.strictEqual(nativeReferenceImplementationSummary.implemented_reference_count, 1, "xoonya native reference implementation cli count mismatch");
+  assert.strictEqual(nativeReferenceImplementationSummary.verified_candidate_scaffold_count >= 1, true, "xoonya native reference implementation cli scaffold mismatch");
   const comparisonOutput = execFileSync(process.execPath, [
     path.resolve(__dirname, "..", "bin", "xoonya-release.js"),
     "--comparison",

package/server.js

@@ -2386,6 +2386,26 @@ async function routeRequest(req, res) {
     return;
   }
 
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-conformance-mark') {
+    sendJson(res, 200, proofSdk.buildXoonyaNativeConformanceMarkPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-conformance-mark/summary') {
+    sendJson(res, 200, proofSdk.summarizeXoonyaNativeConformanceMarkPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-reference-implementations') {
+    sendJson(res, 200, proofSdk.buildXoonyaNativeReferenceImplementationPack());
+    return;
+  }
+
+  if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-reference-implementations/summary') {
+    sendJson(res, 200, proofSdk.summarizeXoonyaNativeReferenceImplementationPack());
+    return;
+  }
+
   if (req.method === 'GET' && url.pathname === '/v1/proof-center/native-payload-profile') {
     sendJson(res, 200, proofSdk.buildXoonyaNativePayloadProfilePack());
     return;

package/vectors/adversarial-vectors.json

@@ -159,6 +159,33 @@
       },
       "expected_reason": "verification_method_unsupported"
     },
+    {
+      "id": "reject-native-hybrid-design-gated",
+      "kind": "verify_bundle_reason",
+      "bundle": {
+        "version": "proof-bundle/v1",
+        "ceb": {
+          "version": "canonical-event-bundle/v1",
+          "domain_id": "vectors.native",
+          "sequence": "7",
+          "actor_id": "agent-native",
+          "adapter_source": "vector-suite",
+          "event_type": "native.event",
+          "event_hash": "3434343434343434343434343434343434343434343434343434343434343434"
+        },
+        "receipt": {
+          "version": "receipt/v1",
+          "receipt_id": "7c4930d56110f0b9623f79025c7be4789e0c0a6155b2645b243ce4c126f53e96",
+          "agent_identity": "agent-native-signing",
+          "domain_id": "vectors.native",
+          "sequence": "7",
+          "event_commitment": "7361278f20b4d6c6f305ebfb490989b0faa3928823954d1852a7d7e78d92d8cd",
+          "algorithm": "xoonya-native-hybrid-v1",
+          "signature": "xoonya-native-hybrid-v1:design-gated-placeholder"
+        }
+      },
+      "expected_reason": "native_hybrid_design_gated"
+    },
     {
       "id": "reject-replayed-receipt-sequence",
       "kind": "verify_bundle_reason",