xoonya 3.1.0 → 3.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (248) hide show
  1. package/.env.example +10 -2
  2. package/CARRIED_HANDOFF_DEMO.md +60 -60
  3. package/COMPATIBILITY_NOTE.md +27 -27
  4. package/CROSS_RUNTIME_POSTURE.md +77 -77
  5. package/EXAMPLE_PATHS.md +53 -53
  6. package/FINAL_CONTRACT.md +445 -445
  7. package/LICENSE +201 -201
  8. package/NOTICE +3 -3
  9. package/PARTNER_READY_PATH.md +67 -67
  10. package/PUBLIC_DEMO_SCRIPT.md +79 -79
  11. package/README.md +839 -808
  12. package/RELEASE_NOTES.md +18 -15
  13. package/SERVICE_CONTRACT.md +207 -207
  14. package/START_HERE.md +159 -159
  15. package/TERMINOLOGY.md +55 -55
  16. package/WHY_XYTARA_XOONYA.md +43 -43
  17. package/XNYA_CONFORMANCE_MARK.md +78 -78
  18. package/XNYA_REFERENCE_IMPLEMENTATIONS.md +157 -157
  19. package/XOONYA_DEFAULT_PATH_MODEL.md +63 -63
  20. package/XOONYA_FOLLOWTHROUGH_TRUTH_MODEL.md +63 -63
  21. package/XOONYA_NATIVE_ATOM_SPEC.md +184 -184
  22. package/XOONYA_NATIVE_PROOF_FORMAT.md +570 -527
  23. package/XOONYA_NATIVE_STANDARD_GOVERNANCE.md +119 -119
  24. package/XOONYA_PROOF_TRUTH_MODEL.md +58 -58
  25. package/bin/xoonya-first-run.js +184 -184
  26. package/bin/xoonya-release.js +1367 -1367
  27. package/bin/xoonya-review.js +70 -70
  28. package/bin/xoonya.js +82 -82
  29. package/examples/integration_boundary_walkthrough.js +37 -37
  30. package/examples/package_quickstart.js +1007 -1007
  31. package/examples/partner_proof_walkthrough.js +68 -68
  32. package/examples/proof_review_walkthrough.js +66 -66
  33. package/examples/review_carried_handoff.js +72 -72
  34. package/index.js +31 -31
  35. package/integrations/PROOF_INTEGRATION_PROCESS.md +45 -45
  36. package/integrations/examples/example-third-party-verifier-registration.record.json +22 -22
  37. package/integrations/registration-record.schema.json +99 -99
  38. package/integrations/registry-snapshot.schema.json +36 -36
  39. package/integrations/registry.js +636 -636
  40. package/integrations/views.js +36 -36
  41. package/lib/adapter_certification_contract.js +90 -90
  42. package/lib/announcement_pack.js +61 -61
  43. package/lib/artifact_distribution_lane_contract.js +54 -54
  44. package/lib/asyncapi_contract.js +135 -135
  45. package/lib/auth_interop_contract.js +69 -69
  46. package/lib/authority_binding_lifecycle_contract.js +182 -182
  47. package/lib/bridge_intelligence.js +102 -102
  48. package/lib/cloudevents_contract.js +79 -79
  49. package/lib/crypto_agility_matrix.js +125 -125
  50. package/lib/default_path_contract.js +380 -380
  51. package/lib/ecosystem_entry.js +64 -64
  52. package/lib/erc8004_proof_lane_contract.js +64 -64
  53. package/lib/event_system_lane_contract.js +76 -76
  54. package/lib/external_proof_import_lane_contract.js +87 -87
  55. package/lib/feature_control_lane_contract.js +54 -54
  56. package/lib/followthrough_truth_contract.js +214 -214
  57. package/lib/framework_lane_contract.js +76 -76
  58. package/lib/governance_disputes_summary.js +36 -36
  59. package/lib/governance_intelligence.js +108 -108
  60. package/lib/identity_interop_contract.js +83 -83
  61. package/lib/integration_matrix_contract.js +81 -81
  62. package/lib/launch_narrative.js +53 -53
  63. package/lib/machine_identity_registry_contract.js +199 -199
  64. package/lib/major_rails_proof_lane_contract.js +87 -87
  65. package/lib/offline_verifiability_recovery_contract.js +155 -155
  66. package/lib/openapi_contract.js +227 -227
  67. package/lib/operational_receipt_contract.js +165 -165
  68. package/lib/outreach_proof.js +71 -71
  69. package/lib/phase_10_closeout_pack.js +45 -45
  70. package/lib/phase_10_completion_pack.js +76 -76
  71. package/lib/phase_10_decision_record_pack.js +54 -54
  72. package/lib/phase_10_decision_resolution_pack.js +53 -53
  73. package/lib/phase_10_demand_signal_adapters_proof_pack.js +74 -74
  74. package/lib/phase_10_ecosystem_backlog_triage_proof_pack.js +74 -74
  75. package/lib/phase_10_freeze_baseline_pack.js +67 -67
  76. package/lib/phase_10_freeze_review_pack.js +64 -64
  77. package/lib/phase_10_gate_pack.js +57 -57
  78. package/lib/phase_10_long_tail_continuity_pack.js +80 -80
  79. package/lib/phase_10_long_tail_ecosystem_pack.js +68 -68
  80. package/lib/phase_10_niche_extension_registry_proof_pack.js +74 -74
  81. package/lib/phase_1_claude_mcp_pack.js +60 -60
  82. package/lib/phase_1_claude_mcp_proof_pack.js +57 -57
  83. package/lib/phase_1_ecosystem_pack.js +51 -51
  84. package/lib/phase_1_openai_codex_pack.js +60 -60
  85. package/lib/phase_1_openai_codex_proof_pack.js +57 -57
  86. package/lib/phase_2_base_proof_pack.js +71 -71
  87. package/lib/phase_2_base_usdc_proof_pack.js +72 -72
  88. package/lib/phase_2_closeout_pack.js +65 -65
  89. package/lib/phase_2_completion_pack.js +113 -113
  90. package/lib/phase_2_decision_record_pack.js +66 -66
  91. package/lib/phase_2_decision_resolution_pack.js +69 -69
  92. package/lib/phase_2_eth_proof_pack.js +70 -70
  93. package/lib/phase_2_evm_base_proof_pack.js +73 -73
  94. package/lib/phase_2_evm_proof_pack.js +71 -71
  95. package/lib/phase_2_flip_preview_pack.js +60 -60
  96. package/lib/phase_2_freeze_review_pack.js +99 -99
  97. package/lib/phase_2_gate_pack.js +77 -77
  98. package/lib/phase_2_payment_rails_pack.js +71 -71
  99. package/lib/phase_2_usdc_proof_pack.js +71 -71
  100. package/lib/phase_3_brc_proof_pack.js +81 -81
  101. package/lib/phase_3_bsv_teranode_proof_pack.js +81 -81
  102. package/lib/phase_3_closeout_pack.js +62 -62
  103. package/lib/phase_3_completion_pack.js +92 -92
  104. package/lib/phase_3_decision_record_pack.js +64 -64
  105. package/lib/phase_3_decision_resolution_pack.js +69 -69
  106. package/lib/phase_3_freeze_baseline_pack.js +67 -67
  107. package/lib/phase_3_freeze_review_pack.js +80 -80
  108. package/lib/phase_3_gate_pack.js +76 -76
  109. package/lib/phase_3_metanet_proof_pack.js +81 -81
  110. package/lib/phase_3_native_bsv_pack.js +89 -89
  111. package/lib/phase_3_native_continuity_pack.js +82 -82
  112. package/lib/phase_4_attestation_proof_pack.js +75 -75
  113. package/lib/phase_4_closeout_pack.js +45 -45
  114. package/lib/phase_4_completion_pack.js +82 -82
  115. package/lib/phase_4_decision_record_pack.js +54 -54
  116. package/lib/phase_4_decision_resolution_pack.js +45 -45
  117. package/lib/phase_4_erc8004_proof_pack.js +76 -76
  118. package/lib/phase_4_freeze_baseline_pack.js +67 -67
  119. package/lib/phase_4_freeze_review_pack.js +68 -68
  120. package/lib/phase_4_gate_pack.js +58 -58
  121. package/lib/phase_4_identity_registry_proof_pack.js +75 -75
  122. package/lib/phase_4_identity_trust_pack.js +73 -73
  123. package/lib/phase_4_trust_continuity_pack.js +86 -86
  124. package/lib/phase_5_antelope_proof_pack.js +76 -76
  125. package/lib/phase_5_closeout_pack.js +44 -44
  126. package/lib/phase_5_completion_pack.js +82 -82
  127. package/lib/phase_5_decision_record_pack.js +54 -54
  128. package/lib/phase_5_decision_resolution_pack.js +45 -45
  129. package/lib/phase_5_freeze_baseline_pack.js +67 -67
  130. package/lib/phase_5_freeze_review_pack.js +68 -68
  131. package/lib/phase_5_gate_pack.js +58 -58
  132. package/lib/phase_5_major_rails_continuity_pack.js +86 -86
  133. package/lib/phase_5_major_rails_pack.js +74 -74
  134. package/lib/phase_5_proton_xpr_proof_pack.js +76 -76
  135. package/lib/phase_5_solana_proof_pack.js +76 -76
  136. package/lib/phase_6_autogen_proof_pack.js +74 -74
  137. package/lib/phase_6_closeout_pack.js +46 -46
  138. package/lib/phase_6_completion_pack.js +77 -77
  139. package/lib/phase_6_decision_record_pack.js +54 -54
  140. package/lib/phase_6_decision_resolution_pack.js +53 -53
  141. package/lib/phase_6_framework_continuity_pack.js +81 -81
  142. package/lib/phase_6_framework_runtime_pack.js +68 -68
  143. package/lib/phase_6_freeze_baseline_pack.js +68 -68
  144. package/lib/phase_6_freeze_review_pack.js +65 -65
  145. package/lib/phase_6_gate_pack.js +59 -59
  146. package/lib/phase_6_langchain_proof_pack.js +74 -74
  147. package/lib/phase_6_langgraph_proof_pack.js +74 -74
  148. package/lib/phase_6_semantic_kernel_proof_pack.js +74 -74
  149. package/lib/phase_7_closeout_pack.js +45 -45
  150. package/lib/phase_7_completion_pack.js +85 -85
  151. package/lib/phase_7_decision_record_pack.js +53 -53
  152. package/lib/phase_7_decision_resolution_pack.js +53 -53
  153. package/lib/phase_7_event_system_continuity_pack.js +89 -89
  154. package/lib/phase_7_event_system_pack.js +76 -76
  155. package/lib/phase_7_freeze_baseline_pack.js +74 -74
  156. package/lib/phase_7_freeze_review_pack.js +65 -65
  157. package/lib/phase_7_gate_pack.js +58 -58
  158. package/lib/phase_7_kafka_proof_pack.js +76 -76
  159. package/lib/phase_7_mqtt_proof_pack.js +76 -76
  160. package/lib/phase_7_nats_proof_pack.js +76 -76
  161. package/lib/phase_7_webhook_event_bus_proof_pack.js +76 -76
  162. package/lib/phase_8_closeout_pack.js +46 -46
  163. package/lib/phase_8_completion_pack.js +82 -82
  164. package/lib/phase_8_decision_record_pack.js +54 -54
  165. package/lib/phase_8_decision_resolution_pack.js +53 -53
  166. package/lib/phase_8_external_receipt_import_proof_pack.js +74 -74
  167. package/lib/phase_8_external_result_import_proof_pack.js +74 -74
  168. package/lib/phase_8_freeze_baseline_pack.js +71 -71
  169. package/lib/phase_8_freeze_review_pack.js +64 -64
  170. package/lib/phase_8_gate_pack.js +58 -58
  171. package/lib/phase_8_proof_bridge_continuity_pack.js +86 -86
  172. package/lib/phase_8_proof_bridges_pack.js +72 -72
  173. package/lib/phase_8_proof_bundle_normalization_proof_pack.js +74 -74
  174. package/lib/phase_9_closeout_pack.js +46 -46
  175. package/lib/phase_9_completion_pack.js +82 -82
  176. package/lib/phase_9_custody_refs_proof_pack.js +74 -74
  177. package/lib/phase_9_decision_record_pack.js +54 -54
  178. package/lib/phase_9_decision_resolution_pack.js +53 -53
  179. package/lib/phase_9_freeze_baseline_pack.js +71 -71
  180. package/lib/phase_9_freeze_review_pack.js +64 -64
  181. package/lib/phase_9_gate_pack.js +58 -58
  182. package/lib/phase_9_operator_accounting_bridges_proof_pack.js +74 -74
  183. package/lib/phase_9_treasury_connectivity_pack.js +72 -72
  184. package/lib/phase_9_treasury_continuity_pack.js +86 -86
  185. package/lib/phase_9_treasury_destinations_proof_pack.js +74 -74
  186. package/lib/phase_program_pack.js +47 -47
  187. package/lib/proof_bridge_lane_contract.js +82 -82
  188. package/lib/proof_truth_contract.js +224 -224
  189. package/lib/provenance_lane_contract.js +54 -54
  190. package/lib/provider_lane_contract.js +67 -67
  191. package/lib/public_surface_policy_contract.js +111 -111
  192. package/lib/publish_plan.js +51 -51
  193. package/lib/release_candidate.js +50 -50
  194. package/lib/release_center.js +1037 -1037
  195. package/lib/release_history.js +206 -206
  196. package/lib/release_manifest.js +114 -114
  197. package/lib/release_pack.js +391 -391
  198. package/lib/result_package_trust_lane_contract.js +74 -74
  199. package/lib/review_intelligence.js +100 -100
  200. package/lib/role_freeze.js +436 -436
  201. package/lib/shared_signals_lane_contract.js +54 -54
  202. package/lib/signed_audit_provenance_contract.js +93 -93
  203. package/lib/telemetry_lane_contract.js +54 -54
  204. package/lib/treasury_proof_lane_contract.js +83 -83
  205. package/lib/trust_intelligence.js +106 -106
  206. package/lib/trust_portability_boundary_contract.js +66 -66
  207. package/lib/trust_portability_pack.js +224 -224
  208. package/lib/verification_service_pack.js +149 -149
  209. package/package.json +98 -97
  210. package/proof_sdk.js +6561 -6265
  211. package/reference/python/README.md +35 -35
  212. package/reference/python/__pycache__/xnya_reference.cpython-314.pyc +0 -0
  213. package/reference/python/requirements-optional.txt +1 -1
  214. package/reference/python/verify_vectors.py +223 -223
  215. package/reference/python/xnya_reference.py +810 -810
  216. package/reference/rust/Cargo.toml +11 -11
  217. package/reference/rust/README.md +28 -28
  218. package/reference/rust/src/lib.rs +87 -87
  219. package/scripts/registry_cli.js +157 -157
  220. package/scripts/verify_all.js +603 -603
  221. package/scripts/verify_control_plane_contracts.js +34 -34
  222. package/scripts/verify_control_plane_routes.js +70 -70
  223. package/scripts/verify_examples.js +19 -19
  224. package/scripts/verify_external_proof_import_gate.js +84 -84
  225. package/scripts/verify_forgery_resistance.js +281 -0
  226. package/scripts/verify_integrations.js +170 -170
  227. package/scripts/verify_native_hybrid_design_gate.js +114 -114
  228. package/scripts/verify_reference_promotion_gate.js +74 -74
  229. package/scripts/verify_reference_python.js +49 -49
  230. package/scripts/verify_reference_python_crypto.js +87 -87
  231. package/scripts/verify_reference_rust_scaffold.js +50 -50
  232. package/scripts/verify_release_candidate.js +131 -131
  233. package/scripts/verify_service.js +3038 -2940
  234. package/scripts/verify_tooling.js +1251 -1251
  235. package/scripts/verify_trust_portability.js +56 -56
  236. package/scripts/verify_vectors.js +192 -192
  237. package/scripts/verify_verification_services.js +56 -56
  238. package/server.js +4223 -4099
  239. package/vectors/adversarial-vectors.json +552 -552
  240. package/vectors/conformance-vectors.json +446 -446
  241. package/vectors/native-atom-vectors.json +101 -101
  242. package/vectors/native-payload-profile-vectors.json +50 -50
  243. package/OPERATIONS_RUNBOOK.md +0 -50
  244. package/OPERATOR_START_HERE.md +0 -67
  245. package/PROGRAM_COMPLETE_RELEASE.md +0 -52
  246. package/PROGRAM_STATUS.md +0 -57
  247. package/PUBLISH_PLAN.md +0 -25
  248. package/RELEASE_CHECKLIST.md +0 -16
@@ -1,79 +1,79 @@
1
- "use strict";
2
-
3
- const pkg = require("../package.json");
4
-
5
- function buildCloudEventsContract() {
6
- return {
7
- product: "xoonya",
8
- category: "proof-cloudevents-contract",
9
- contract_version: "xoonya-cloudevents-contract-v1",
10
- specversion: "1.0",
11
- service_version: pkg.version,
12
- envelope: {
13
- required_attributes: ["specversion", "id", "source", "type", "time", "subject", "datacontenttype", "data"],
14
- datacontenttype_default: "application/json",
15
- source_prefix: "urn:naxytra:xoonya",
16
- id_shape: "evt_<opaque_id>",
17
- time_format: "RFC3339"
18
- },
19
- event_families: [
20
- {
21
- type: "io.naxytra.xoonya.event.canonicalized",
22
- source: "urn:naxytra:xoonya:events",
23
- subject: "event.canonicalized"
24
- },
25
- {
26
- type: "io.naxytra.xoonya.event.hashed",
27
- source: "urn:naxytra:xoonya:events",
28
- subject: "event.hashed"
29
- },
30
- {
31
- type: "io.naxytra.xoonya.receipt.emitted",
32
- source: "urn:naxytra:xoonya:receipts",
33
- subject: "receipt.emitted"
34
- },
35
- {
36
- type: "io.naxytra.xoonya.proof_bundle.built",
37
- source: "urn:naxytra:xoonya:proof_bundles",
38
- subject: "proof_bundle.built"
39
- },
40
- {
41
- type: "io.naxytra.xoonya.bridge.economic_handoff.accepted",
42
- source: "urn:naxytra:xoonya:bridge",
43
- subject: "bridge.economic_handoff"
44
- }
45
- ],
46
- stable_http_surfaces: [
47
- "/v1/events/canonicalize",
48
- "/v1/events/hash",
49
- "/v1/receipts/emit",
50
- "/v1/proof-bundles/build",
51
- "/v1/proof-center/bridge/economic-handoff"
52
- ],
53
- linked_surfaces: {
54
- openapi_ref: "/openapi.json",
55
- asyncapi_ref: "/asyncapi.json",
56
- service_contract_ref: "SERVICE_CONTRACT.md"
57
- }
58
- };
59
- }
60
-
61
- function summarizeCloudEventsContract() {
62
- const contract = buildCloudEventsContract();
63
- return {
64
- product: "xoonya",
65
- category: "proof-cloudevents-contract-summary",
66
- summary_version: "xoonya-cloudevents-contract-summary-v1",
67
- specversion: contract.specversion,
68
- contract_version: contract.contract_version,
69
- event_family_count: contract.event_families.length,
70
- stable_surface_count: contract.stable_http_surfaces.length,
71
- primary_event_lanes: ["canonicalization", "proof_bundle", "bridge"],
72
- linked_surfaces: contract.linked_surfaces
73
- };
74
- }
75
-
76
- module.exports = {
77
- buildCloudEventsContract,
78
- summarizeCloudEventsContract
79
- };
1
+ "use strict";
2
+
3
+ const pkg = require("../package.json");
4
+
5
+ function buildCloudEventsContract() {
6
+ return {
7
+ product: "xoonya",
8
+ category: "proof-cloudevents-contract",
9
+ contract_version: "xoonya-cloudevents-contract-v1",
10
+ specversion: "1.0",
11
+ service_version: pkg.version,
12
+ envelope: {
13
+ required_attributes: ["specversion", "id", "source", "type", "time", "subject", "datacontenttype", "data"],
14
+ datacontenttype_default: "application/json",
15
+ source_prefix: "urn:naxytra:xoonya",
16
+ id_shape: "evt_<opaque_id>",
17
+ time_format: "RFC3339"
18
+ },
19
+ event_families: [
20
+ {
21
+ type: "io.naxytra.xoonya.event.canonicalized",
22
+ source: "urn:naxytra:xoonya:events",
23
+ subject: "event.canonicalized"
24
+ },
25
+ {
26
+ type: "io.naxytra.xoonya.event.hashed",
27
+ source: "urn:naxytra:xoonya:events",
28
+ subject: "event.hashed"
29
+ },
30
+ {
31
+ type: "io.naxytra.xoonya.receipt.emitted",
32
+ source: "urn:naxytra:xoonya:receipts",
33
+ subject: "receipt.emitted"
34
+ },
35
+ {
36
+ type: "io.naxytra.xoonya.proof_bundle.built",
37
+ source: "urn:naxytra:xoonya:proof_bundles",
38
+ subject: "proof_bundle.built"
39
+ },
40
+ {
41
+ type: "io.naxytra.xoonya.bridge.economic_handoff.accepted",
42
+ source: "urn:naxytra:xoonya:bridge",
43
+ subject: "bridge.economic_handoff"
44
+ }
45
+ ],
46
+ stable_http_surfaces: [
47
+ "/v1/events/canonicalize",
48
+ "/v1/events/hash",
49
+ "/v1/receipts/emit",
50
+ "/v1/proof-bundles/build",
51
+ "/v1/proof-center/bridge/economic-handoff"
52
+ ],
53
+ linked_surfaces: {
54
+ openapi_ref: "/openapi.json",
55
+ asyncapi_ref: "/asyncapi.json",
56
+ service_contract_ref: "SERVICE_CONTRACT.md"
57
+ }
58
+ };
59
+ }
60
+
61
+ function summarizeCloudEventsContract() {
62
+ const contract = buildCloudEventsContract();
63
+ return {
64
+ product: "xoonya",
65
+ category: "proof-cloudevents-contract-summary",
66
+ summary_version: "xoonya-cloudevents-contract-summary-v1",
67
+ specversion: contract.specversion,
68
+ contract_version: contract.contract_version,
69
+ event_family_count: contract.event_families.length,
70
+ stable_surface_count: contract.stable_http_surfaces.length,
71
+ primary_event_lanes: ["canonicalization", "proof_bundle", "bridge"],
72
+ linked_surfaces: contract.linked_surfaces
73
+ };
74
+ }
75
+
76
+ module.exports = {
77
+ buildCloudEventsContract,
78
+ summarizeCloudEventsContract
79
+ };
@@ -1,125 +1,125 @@
1
- "use strict";
2
-
3
- const packageJson = require("../package.json");
4
-
5
- function buildCryptoAgilityMatrixPack() {
6
- return {
7
- ok: true,
8
- product: packageJson.name,
9
- category: "naxytra-crypto-agility-matrix",
10
- pack_version: "naxytra-crypto-agility-matrix-v1",
11
- doctrine: "xoonya_verifies_crypto_agility_boundaries_without_claiming_unverified_future_algorithms_as_current_proof_truth",
12
- model_state: "core_now",
13
- core_claim: "the proof stack must be explicit about which algorithms are core today, supported today, future lane, blocked, or never core",
14
- lane_classes: [
15
- {
16
- lane_class: "core_today",
17
- description: "verified and claimable today",
18
- items: [
19
- "sha256_domain_separated_commitments",
20
- "ed25519",
21
- "secp256k1",
22
- "p256",
23
- "native_anchor_binding",
24
- "line_rate_transport_frame"
25
- ]
26
- },
27
- {
28
- lane_class: "supported_today",
29
- description: "supported as interop or external verification lanes today",
30
- items: [
31
- "jwt",
32
- "jws",
33
- "jwk",
34
- "did",
35
- "vc",
36
- "sd_jwt_vc",
37
- "webauthn_cose_when_verifier_present"
38
- ]
39
- },
40
- {
41
- lane_class: "future_lane",
42
- description: "explicit future cryptographic direction, not claimable as the current core",
43
- items: [
44
- "ml_dsa",
45
- "slh_dsa",
46
- "xoonya_native_hybrid_v1",
47
- "xoonya_native_atom_v2"
48
- ]
49
- },
50
- {
51
- lane_class: "blocked_until_vectors",
52
- description: "not claimable until validators and vectors exist",
53
- items: [
54
- "webauthn_cose",
55
- "dilithium",
56
- "falcon",
57
- "sphincs_plus"
58
- ]
59
- },
60
- {
61
- lane_class: "never_core",
62
- description: "must never become implicit or silent core behavior",
63
- items: [
64
- "silent_algorithm_negotiation",
65
- "implicit_downgrade",
66
- "unversioned_signature_assumptions",
67
- "hidden_verifier_boundaries"
68
- ]
69
- }
70
- ],
71
- signature_suites: [
72
- { suite_id: "ed25519", state: "core_today" },
73
- { suite_id: "secp256k1", state: "core_today" },
74
- { suite_id: "p256", state: "core_today" },
75
- { suite_id: "webauthn-cose", state: "blocked_until_vectors" },
76
- { suite_id: "dilithium", state: "blocked_until_vectors" },
77
- { suite_id: "falcon", state: "blocked_until_vectors" },
78
- { suite_id: "sphincs-plus", state: "blocked_until_vectors" },
79
- { suite_id: "ml-dsa", state: "future_lane" },
80
- { suite_id: "slh-dsa", state: "future_lane" }
81
- ],
82
- proof_envelope_rules: [
83
- "signature_suite_must_be_explicit",
84
- "unsupported_suites_must_not_be_claimed_as_verified",
85
- "native_proof_methods_remain_optional",
86
- "envelopes_must_not_redefine_receipt_validity",
87
- "envelope_claims_must_stay_bounded_to_verified_behavior"
88
- ],
89
- linked_surfaces: {
90
- native_standard_ref: "/v1/proof-center/native-standard",
91
- native_standard_summary_ref: "/v1/proof-center/native-standard/summary",
92
- native_atom_spec_ref: "/v1/proof-center/native-atom-spec",
93
- native_payload_profile_ref: "/v1/proof-center/native-payload-profile",
94
- native_anchor_profile_ref: "/v1/proof-center/native-anchor-profile"
95
- },
96
- claim_boundary: "claim_the_crypto_agility_policy_for_xoonya_only_without_claiming_unverified_future_algorithms_as_current_core_truth"
97
- };
98
- }
99
-
100
- function summarizeCryptoAgilityMatrixPack() {
101
- const pack = buildCryptoAgilityMatrixPack();
102
- return {
103
- ok: true,
104
- product: pack.product,
105
- category: pack.category,
106
- summary_version: "naxytra-crypto-agility-matrix-summary-v1",
107
- pack_version: pack.pack_version,
108
- model_state: pack.model_state,
109
- lane_class_count: pack.lane_classes.length,
110
- signature_suite_count: pack.signature_suites.length,
111
- rule_count: pack.proof_envelope_rules.length,
112
- linked_surfaces: pack.linked_surfaces
113
- };
114
- }
115
-
116
- function getCryptoAgilitySuiteDetail(suiteId) {
117
- const normalized = String(suiteId || "").trim().toLowerCase();
118
- return (buildCryptoAgilityMatrixPack().signature_suites || []).find((entry) => entry.suite_id === normalized) || null;
119
- }
120
-
121
- module.exports = {
122
- buildCryptoAgilityMatrixPack,
123
- summarizeCryptoAgilityMatrixPack,
124
- getCryptoAgilitySuiteDetail
125
- };
1
+ "use strict";
2
+
3
+ const packageJson = require("../package.json");
4
+
5
+ function buildCryptoAgilityMatrixPack() {
6
+ return {
7
+ ok: true,
8
+ product: packageJson.name,
9
+ category: "naxytra-crypto-agility-matrix",
10
+ pack_version: "naxytra-crypto-agility-matrix-v1",
11
+ doctrine: "xoonya_verifies_crypto_agility_boundaries_without_claiming_unverified_future_algorithms_as_current_proof_truth",
12
+ model_state: "core_now",
13
+ core_claim: "the proof stack must be explicit about which algorithms are core today, supported today, future lane, blocked, or never core",
14
+ lane_classes: [
15
+ {
16
+ lane_class: "core_today",
17
+ description: "verified and claimable today",
18
+ items: [
19
+ "sha256_domain_separated_commitments",
20
+ "ed25519",
21
+ "secp256k1",
22
+ "p256",
23
+ "native_anchor_binding",
24
+ "line_rate_transport_frame"
25
+ ]
26
+ },
27
+ {
28
+ lane_class: "supported_today",
29
+ description: "supported as interop or external verification lanes today",
30
+ items: [
31
+ "jwt",
32
+ "jws",
33
+ "jwk",
34
+ "did",
35
+ "vc",
36
+ "sd_jwt_vc",
37
+ "webauthn_cose_when_verifier_present"
38
+ ]
39
+ },
40
+ {
41
+ lane_class: "future_lane",
42
+ description: "explicit future cryptographic direction, not claimable as the current core",
43
+ items: [
44
+ "ml_dsa",
45
+ "slh_dsa",
46
+ "xoonya_native_hybrid_v1",
47
+ "xoonya_native_atom_v2"
48
+ ]
49
+ },
50
+ {
51
+ lane_class: "blocked_until_vectors",
52
+ description: "not claimable until validators and vectors exist",
53
+ items: [
54
+ "webauthn_cose",
55
+ "dilithium",
56
+ "falcon",
57
+ "sphincs_plus"
58
+ ]
59
+ },
60
+ {
61
+ lane_class: "never_core",
62
+ description: "must never become implicit or silent core behavior",
63
+ items: [
64
+ "silent_algorithm_negotiation",
65
+ "implicit_downgrade",
66
+ "unversioned_signature_assumptions",
67
+ "hidden_verifier_boundaries"
68
+ ]
69
+ }
70
+ ],
71
+ signature_suites: [
72
+ { suite_id: "ed25519", state: "core_today" },
73
+ { suite_id: "secp256k1", state: "core_today" },
74
+ { suite_id: "p256", state: "core_today" },
75
+ { suite_id: "webauthn-cose", state: "blocked_until_vectors" },
76
+ { suite_id: "dilithium", state: "blocked_until_vectors" },
77
+ { suite_id: "falcon", state: "blocked_until_vectors" },
78
+ { suite_id: "sphincs-plus", state: "blocked_until_vectors" },
79
+ { suite_id: "ml-dsa", state: "future_lane" },
80
+ { suite_id: "slh-dsa", state: "future_lane" }
81
+ ],
82
+ proof_envelope_rules: [
83
+ "signature_suite_must_be_explicit",
84
+ "unsupported_suites_must_not_be_claimed_as_verified",
85
+ "native_proof_methods_remain_optional",
86
+ "envelopes_must_not_redefine_receipt_validity",
87
+ "envelope_claims_must_stay_bounded_to_verified_behavior"
88
+ ],
89
+ linked_surfaces: {
90
+ native_standard_ref: "/v1/proof-center/native-standard",
91
+ native_standard_summary_ref: "/v1/proof-center/native-standard/summary",
92
+ native_atom_spec_ref: "/v1/proof-center/native-atom-spec",
93
+ native_payload_profile_ref: "/v1/proof-center/native-payload-profile",
94
+ native_anchor_profile_ref: "/v1/proof-center/native-anchor-profile"
95
+ },
96
+ claim_boundary: "claim_the_crypto_agility_policy_for_xoonya_only_without_claiming_unverified_future_algorithms_as_current_core_truth"
97
+ };
98
+ }
99
+
100
+ function summarizeCryptoAgilityMatrixPack() {
101
+ const pack = buildCryptoAgilityMatrixPack();
102
+ return {
103
+ ok: true,
104
+ product: pack.product,
105
+ category: pack.category,
106
+ summary_version: "naxytra-crypto-agility-matrix-summary-v1",
107
+ pack_version: pack.pack_version,
108
+ model_state: pack.model_state,
109
+ lane_class_count: pack.lane_classes.length,
110
+ signature_suite_count: pack.signature_suites.length,
111
+ rule_count: pack.proof_envelope_rules.length,
112
+ linked_surfaces: pack.linked_surfaces
113
+ };
114
+ }
115
+
116
+ function getCryptoAgilitySuiteDetail(suiteId) {
117
+ const normalized = String(suiteId || "").trim().toLowerCase();
118
+ return (buildCryptoAgilityMatrixPack().signature_suites || []).find((entry) => entry.suite_id === normalized) || null;
119
+ }
120
+
121
+ module.exports = {
122
+ buildCryptoAgilityMatrixPack,
123
+ summarizeCryptoAgilityMatrixPack,
124
+ getCryptoAgilitySuiteDetail
125
+ };