xoonya 3.1.0 → 3.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.env.example +10 -2
- package/CARRIED_HANDOFF_DEMO.md +60 -60
- package/COMPATIBILITY_NOTE.md +27 -27
- package/CROSS_RUNTIME_POSTURE.md +77 -77
- package/EXAMPLE_PATHS.md +53 -53
- package/FINAL_CONTRACT.md +445 -445
- package/LICENSE +201 -201
- package/NOTICE +3 -3
- package/PARTNER_READY_PATH.md +67 -67
- package/PUBLIC_DEMO_SCRIPT.md +79 -79
- package/README.md +839 -808
- package/RELEASE_NOTES.md +18 -15
- package/SERVICE_CONTRACT.md +207 -207
- package/START_HERE.md +159 -159
- package/TERMINOLOGY.md +55 -55
- package/WHY_XYTARA_XOONYA.md +43 -43
- package/XNYA_CONFORMANCE_MARK.md +78 -78
- package/XNYA_REFERENCE_IMPLEMENTATIONS.md +157 -157
- package/XOONYA_DEFAULT_PATH_MODEL.md +63 -63
- package/XOONYA_FOLLOWTHROUGH_TRUTH_MODEL.md +63 -63
- package/XOONYA_NATIVE_ATOM_SPEC.md +184 -184
- package/XOONYA_NATIVE_PROOF_FORMAT.md +570 -527
- package/XOONYA_NATIVE_STANDARD_GOVERNANCE.md +119 -119
- package/XOONYA_PROOF_TRUTH_MODEL.md +58 -58
- package/bin/xoonya-first-run.js +184 -184
- package/bin/xoonya-release.js +1367 -1367
- package/bin/xoonya-review.js +70 -70
- package/bin/xoonya.js +82 -82
- package/examples/integration_boundary_walkthrough.js +37 -37
- package/examples/package_quickstart.js +1007 -1007
- package/examples/partner_proof_walkthrough.js +68 -68
- package/examples/proof_review_walkthrough.js +66 -66
- package/examples/review_carried_handoff.js +72 -72
- package/index.js +31 -31
- package/integrations/PROOF_INTEGRATION_PROCESS.md +45 -45
- package/integrations/examples/example-third-party-verifier-registration.record.json +22 -22
- package/integrations/registration-record.schema.json +99 -99
- package/integrations/registry-snapshot.schema.json +36 -36
- package/integrations/registry.js +636 -636
- package/integrations/views.js +36 -36
- package/lib/adapter_certification_contract.js +90 -90
- package/lib/announcement_pack.js +61 -61
- package/lib/artifact_distribution_lane_contract.js +54 -54
- package/lib/asyncapi_contract.js +135 -135
- package/lib/auth_interop_contract.js +69 -69
- package/lib/authority_binding_lifecycle_contract.js +182 -182
- package/lib/bridge_intelligence.js +102 -102
- package/lib/cloudevents_contract.js +79 -79
- package/lib/crypto_agility_matrix.js +125 -125
- package/lib/default_path_contract.js +380 -380
- package/lib/ecosystem_entry.js +64 -64
- package/lib/erc8004_proof_lane_contract.js +64 -64
- package/lib/event_system_lane_contract.js +76 -76
- package/lib/external_proof_import_lane_contract.js +87 -87
- package/lib/feature_control_lane_contract.js +54 -54
- package/lib/followthrough_truth_contract.js +214 -214
- package/lib/framework_lane_contract.js +76 -76
- package/lib/governance_disputes_summary.js +36 -36
- package/lib/governance_intelligence.js +108 -108
- package/lib/identity_interop_contract.js +83 -83
- package/lib/integration_matrix_contract.js +81 -81
- package/lib/launch_narrative.js +53 -53
- package/lib/machine_identity_registry_contract.js +199 -199
- package/lib/major_rails_proof_lane_contract.js +87 -87
- package/lib/offline_verifiability_recovery_contract.js +155 -155
- package/lib/openapi_contract.js +227 -227
- package/lib/operational_receipt_contract.js +165 -165
- package/lib/outreach_proof.js +71 -71
- package/lib/phase_10_closeout_pack.js +45 -45
- package/lib/phase_10_completion_pack.js +76 -76
- package/lib/phase_10_decision_record_pack.js +54 -54
- package/lib/phase_10_decision_resolution_pack.js +53 -53
- package/lib/phase_10_demand_signal_adapters_proof_pack.js +74 -74
- package/lib/phase_10_ecosystem_backlog_triage_proof_pack.js +74 -74
- package/lib/phase_10_freeze_baseline_pack.js +67 -67
- package/lib/phase_10_freeze_review_pack.js +64 -64
- package/lib/phase_10_gate_pack.js +57 -57
- package/lib/phase_10_long_tail_continuity_pack.js +80 -80
- package/lib/phase_10_long_tail_ecosystem_pack.js +68 -68
- package/lib/phase_10_niche_extension_registry_proof_pack.js +74 -74
- package/lib/phase_1_claude_mcp_pack.js +60 -60
- package/lib/phase_1_claude_mcp_proof_pack.js +57 -57
- package/lib/phase_1_ecosystem_pack.js +51 -51
- package/lib/phase_1_openai_codex_pack.js +60 -60
- package/lib/phase_1_openai_codex_proof_pack.js +57 -57
- package/lib/phase_2_base_proof_pack.js +71 -71
- package/lib/phase_2_base_usdc_proof_pack.js +72 -72
- package/lib/phase_2_closeout_pack.js +65 -65
- package/lib/phase_2_completion_pack.js +113 -113
- package/lib/phase_2_decision_record_pack.js +66 -66
- package/lib/phase_2_decision_resolution_pack.js +69 -69
- package/lib/phase_2_eth_proof_pack.js +70 -70
- package/lib/phase_2_evm_base_proof_pack.js +73 -73
- package/lib/phase_2_evm_proof_pack.js +71 -71
- package/lib/phase_2_flip_preview_pack.js +60 -60
- package/lib/phase_2_freeze_review_pack.js +99 -99
- package/lib/phase_2_gate_pack.js +77 -77
- package/lib/phase_2_payment_rails_pack.js +71 -71
- package/lib/phase_2_usdc_proof_pack.js +71 -71
- package/lib/phase_3_brc_proof_pack.js +81 -81
- package/lib/phase_3_bsv_teranode_proof_pack.js +81 -81
- package/lib/phase_3_closeout_pack.js +62 -62
- package/lib/phase_3_completion_pack.js +92 -92
- package/lib/phase_3_decision_record_pack.js +64 -64
- package/lib/phase_3_decision_resolution_pack.js +69 -69
- package/lib/phase_3_freeze_baseline_pack.js +67 -67
- package/lib/phase_3_freeze_review_pack.js +80 -80
- package/lib/phase_3_gate_pack.js +76 -76
- package/lib/phase_3_metanet_proof_pack.js +81 -81
- package/lib/phase_3_native_bsv_pack.js +89 -89
- package/lib/phase_3_native_continuity_pack.js +82 -82
- package/lib/phase_4_attestation_proof_pack.js +75 -75
- package/lib/phase_4_closeout_pack.js +45 -45
- package/lib/phase_4_completion_pack.js +82 -82
- package/lib/phase_4_decision_record_pack.js +54 -54
- package/lib/phase_4_decision_resolution_pack.js +45 -45
- package/lib/phase_4_erc8004_proof_pack.js +76 -76
- package/lib/phase_4_freeze_baseline_pack.js +67 -67
- package/lib/phase_4_freeze_review_pack.js +68 -68
- package/lib/phase_4_gate_pack.js +58 -58
- package/lib/phase_4_identity_registry_proof_pack.js +75 -75
- package/lib/phase_4_identity_trust_pack.js +73 -73
- package/lib/phase_4_trust_continuity_pack.js +86 -86
- package/lib/phase_5_antelope_proof_pack.js +76 -76
- package/lib/phase_5_closeout_pack.js +44 -44
- package/lib/phase_5_completion_pack.js +82 -82
- package/lib/phase_5_decision_record_pack.js +54 -54
- package/lib/phase_5_decision_resolution_pack.js +45 -45
- package/lib/phase_5_freeze_baseline_pack.js +67 -67
- package/lib/phase_5_freeze_review_pack.js +68 -68
- package/lib/phase_5_gate_pack.js +58 -58
- package/lib/phase_5_major_rails_continuity_pack.js +86 -86
- package/lib/phase_5_major_rails_pack.js +74 -74
- package/lib/phase_5_proton_xpr_proof_pack.js +76 -76
- package/lib/phase_5_solana_proof_pack.js +76 -76
- package/lib/phase_6_autogen_proof_pack.js +74 -74
- package/lib/phase_6_closeout_pack.js +46 -46
- package/lib/phase_6_completion_pack.js +77 -77
- package/lib/phase_6_decision_record_pack.js +54 -54
- package/lib/phase_6_decision_resolution_pack.js +53 -53
- package/lib/phase_6_framework_continuity_pack.js +81 -81
- package/lib/phase_6_framework_runtime_pack.js +68 -68
- package/lib/phase_6_freeze_baseline_pack.js +68 -68
- package/lib/phase_6_freeze_review_pack.js +65 -65
- package/lib/phase_6_gate_pack.js +59 -59
- package/lib/phase_6_langchain_proof_pack.js +74 -74
- package/lib/phase_6_langgraph_proof_pack.js +74 -74
- package/lib/phase_6_semantic_kernel_proof_pack.js +74 -74
- package/lib/phase_7_closeout_pack.js +45 -45
- package/lib/phase_7_completion_pack.js +85 -85
- package/lib/phase_7_decision_record_pack.js +53 -53
- package/lib/phase_7_decision_resolution_pack.js +53 -53
- package/lib/phase_7_event_system_continuity_pack.js +89 -89
- package/lib/phase_7_event_system_pack.js +76 -76
- package/lib/phase_7_freeze_baseline_pack.js +74 -74
- package/lib/phase_7_freeze_review_pack.js +65 -65
- package/lib/phase_7_gate_pack.js +58 -58
- package/lib/phase_7_kafka_proof_pack.js +76 -76
- package/lib/phase_7_mqtt_proof_pack.js +76 -76
- package/lib/phase_7_nats_proof_pack.js +76 -76
- package/lib/phase_7_webhook_event_bus_proof_pack.js +76 -76
- package/lib/phase_8_closeout_pack.js +46 -46
- package/lib/phase_8_completion_pack.js +82 -82
- package/lib/phase_8_decision_record_pack.js +54 -54
- package/lib/phase_8_decision_resolution_pack.js +53 -53
- package/lib/phase_8_external_receipt_import_proof_pack.js +74 -74
- package/lib/phase_8_external_result_import_proof_pack.js +74 -74
- package/lib/phase_8_freeze_baseline_pack.js +71 -71
- package/lib/phase_8_freeze_review_pack.js +64 -64
- package/lib/phase_8_gate_pack.js +58 -58
- package/lib/phase_8_proof_bridge_continuity_pack.js +86 -86
- package/lib/phase_8_proof_bridges_pack.js +72 -72
- package/lib/phase_8_proof_bundle_normalization_proof_pack.js +74 -74
- package/lib/phase_9_closeout_pack.js +46 -46
- package/lib/phase_9_completion_pack.js +82 -82
- package/lib/phase_9_custody_refs_proof_pack.js +74 -74
- package/lib/phase_9_decision_record_pack.js +54 -54
- package/lib/phase_9_decision_resolution_pack.js +53 -53
- package/lib/phase_9_freeze_baseline_pack.js +71 -71
- package/lib/phase_9_freeze_review_pack.js +64 -64
- package/lib/phase_9_gate_pack.js +58 -58
- package/lib/phase_9_operator_accounting_bridges_proof_pack.js +74 -74
- package/lib/phase_9_treasury_connectivity_pack.js +72 -72
- package/lib/phase_9_treasury_continuity_pack.js +86 -86
- package/lib/phase_9_treasury_destinations_proof_pack.js +74 -74
- package/lib/phase_program_pack.js +47 -47
- package/lib/proof_bridge_lane_contract.js +82 -82
- package/lib/proof_truth_contract.js +224 -224
- package/lib/provenance_lane_contract.js +54 -54
- package/lib/provider_lane_contract.js +67 -67
- package/lib/public_surface_policy_contract.js +111 -111
- package/lib/publish_plan.js +51 -51
- package/lib/release_candidate.js +50 -50
- package/lib/release_center.js +1037 -1037
- package/lib/release_history.js +206 -206
- package/lib/release_manifest.js +114 -114
- package/lib/release_pack.js +391 -391
- package/lib/result_package_trust_lane_contract.js +74 -74
- package/lib/review_intelligence.js +100 -100
- package/lib/role_freeze.js +436 -436
- package/lib/shared_signals_lane_contract.js +54 -54
- package/lib/signed_audit_provenance_contract.js +93 -93
- package/lib/telemetry_lane_contract.js +54 -54
- package/lib/treasury_proof_lane_contract.js +83 -83
- package/lib/trust_intelligence.js +106 -106
- package/lib/trust_portability_boundary_contract.js +66 -66
- package/lib/trust_portability_pack.js +224 -224
- package/lib/verification_service_pack.js +149 -149
- package/package.json +98 -97
- package/proof_sdk.js +6561 -6265
- package/reference/python/README.md +35 -35
- package/reference/python/__pycache__/xnya_reference.cpython-314.pyc +0 -0
- package/reference/python/requirements-optional.txt +1 -1
- package/reference/python/verify_vectors.py +223 -223
- package/reference/python/xnya_reference.py +810 -810
- package/reference/rust/Cargo.toml +11 -11
- package/reference/rust/README.md +28 -28
- package/reference/rust/src/lib.rs +87 -87
- package/scripts/registry_cli.js +157 -157
- package/scripts/verify_all.js +603 -603
- package/scripts/verify_control_plane_contracts.js +34 -34
- package/scripts/verify_control_plane_routes.js +70 -70
- package/scripts/verify_examples.js +19 -19
- package/scripts/verify_external_proof_import_gate.js +84 -84
- package/scripts/verify_forgery_resistance.js +281 -0
- package/scripts/verify_integrations.js +170 -170
- package/scripts/verify_native_hybrid_design_gate.js +114 -114
- package/scripts/verify_reference_promotion_gate.js +74 -74
- package/scripts/verify_reference_python.js +49 -49
- package/scripts/verify_reference_python_crypto.js +87 -87
- package/scripts/verify_reference_rust_scaffold.js +50 -50
- package/scripts/verify_release_candidate.js +131 -131
- package/scripts/verify_service.js +3038 -2940
- package/scripts/verify_tooling.js +1251 -1251
- package/scripts/verify_trust_portability.js +56 -56
- package/scripts/verify_vectors.js +192 -192
- package/scripts/verify_verification_services.js +56 -56
- package/server.js +4223 -4099
- package/vectors/adversarial-vectors.json +552 -552
- package/vectors/conformance-vectors.json +446 -446
- package/vectors/native-atom-vectors.json +101 -101
- package/vectors/native-payload-profile-vectors.json +50 -50
- package/OPERATIONS_RUNBOOK.md +0 -50
- package/OPERATOR_START_HERE.md +0 -67
- package/PROGRAM_COMPLETE_RELEASE.md +0 -52
- package/PROGRAM_STATUS.md +0 -57
- package/PUBLISH_PLAN.md +0 -25
- package/RELEASE_CHECKLIST.md +0 -16
|
@@ -1,199 +1,199 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
|
|
3
|
-
const packageJson = require("../package.json");
|
|
4
|
-
|
|
5
|
-
function buildMachineIdentityRegistryContractPack() {
|
|
6
|
-
return {
|
|
7
|
-
ok: true,
|
|
8
|
-
product: packageJson.name,
|
|
9
|
-
category: "naxytra-machine-identity-registry-contract",
|
|
10
|
-
pack_version: "naxytra-machine-identity-registry-contract-v1",
|
|
11
|
-
doctrine: "xoonya_reviews_machine_identity_state_as_proof_linked_followthrough_without_claiming_identity_session_or_custody_truth",
|
|
12
|
-
model_state: "core_now",
|
|
13
|
-
core_claim: "the machine identity registry is the proof-linked state machine for subject, key, delegation, attestation, and revocation followthrough",
|
|
14
|
-
canonical_objects: [
|
|
15
|
-
{
|
|
16
|
-
object_id: "machine_identity_record",
|
|
17
|
-
role: "versioned_commitment_backed_registry_record_for_a_machine_subject",
|
|
18
|
-
required_fields: [
|
|
19
|
-
"version",
|
|
20
|
-
"registry_record_id",
|
|
21
|
-
"registry_scope",
|
|
22
|
-
"subject_kind",
|
|
23
|
-
"subject_id",
|
|
24
|
-
"record_type",
|
|
25
|
-
"status",
|
|
26
|
-
"issuer_id",
|
|
27
|
-
"issued_at_ns",
|
|
28
|
-
"commitment_hash"
|
|
29
|
-
],
|
|
30
|
-
recommended_fields: [
|
|
31
|
-
"updated_at_ns",
|
|
32
|
-
"public_key_ref",
|
|
33
|
-
"delegation_ref",
|
|
34
|
-
"revocation_ref",
|
|
35
|
-
"proof_ref",
|
|
36
|
-
"anchor_ref"
|
|
37
|
-
],
|
|
38
|
-
optional_fields: [
|
|
39
|
-
"controller_id",
|
|
40
|
-
"parent_record_id",
|
|
41
|
-
"previous_record_id",
|
|
42
|
-
"subject_ref",
|
|
43
|
-
"trust_state",
|
|
44
|
-
"metadata"
|
|
45
|
-
],
|
|
46
|
-
primary_surfaces: [
|
|
47
|
-
"/v1/phases/phase-4/identity-registry/proof",
|
|
48
|
-
"/v1/phases/phase-4/identity-registry/proof/summary",
|
|
49
|
-
"/v1/phases/phase-4/attestation/proof",
|
|
50
|
-
"/v1/proof-center/trust-portability",
|
|
51
|
-
"/v1/proof-center/trust-portability/summary"
|
|
52
|
-
]
|
|
53
|
-
}
|
|
54
|
-
],
|
|
55
|
-
subject_kinds: [
|
|
56
|
-
{
|
|
57
|
-
subject_kind: "agent",
|
|
58
|
-
description: "a software agent or operator-facing autonomous identity"
|
|
59
|
-
},
|
|
60
|
-
{
|
|
61
|
-
subject_kind: "service",
|
|
62
|
-
description: "a runtime service or machine-facing backend identity"
|
|
63
|
-
},
|
|
64
|
-
{
|
|
65
|
-
subject_kind: "device",
|
|
66
|
-
description: "a physical or embedded device identity"
|
|
67
|
-
},
|
|
68
|
-
{
|
|
69
|
-
subject_kind: "key",
|
|
70
|
-
description: "a bound public-key or credential identity"
|
|
71
|
-
},
|
|
72
|
-
{
|
|
73
|
-
subject_kind: "delegation",
|
|
74
|
-
description: "a delegated authority or capability identity"
|
|
75
|
-
},
|
|
76
|
-
{
|
|
77
|
-
subject_kind: "attestation",
|
|
78
|
-
description: "an attestation-linked identity or evidence binding"
|
|
79
|
-
}
|
|
80
|
-
],
|
|
81
|
-
record_types: [
|
|
82
|
-
{
|
|
83
|
-
record_type: "identity_attestation",
|
|
84
|
-
description: "binds a subject to an attested identity state"
|
|
85
|
-
},
|
|
86
|
-
{
|
|
87
|
-
record_type: "registry_link",
|
|
88
|
-
description: "binds a subject into a registry scope or registry graph"
|
|
89
|
-
},
|
|
90
|
-
{
|
|
91
|
-
record_type: "key_binding",
|
|
92
|
-
description: "binds a subject to one or more active key references"
|
|
93
|
-
},
|
|
94
|
-
{
|
|
95
|
-
record_type: "delegation_grant",
|
|
96
|
-
description: "records that authority or capability has been delegated"
|
|
97
|
-
},
|
|
98
|
-
{
|
|
99
|
-
record_type: "delegation_revocation",
|
|
100
|
-
description: "records that a delegation has been revoked or retired"
|
|
101
|
-
},
|
|
102
|
-
{
|
|
103
|
-
record_type: "trust_state_update",
|
|
104
|
-
description: "records a trust, access, or permission-state update"
|
|
105
|
-
},
|
|
106
|
-
{
|
|
107
|
-
record_type: "device_registration",
|
|
108
|
-
description: "records a device subject into the registry"
|
|
109
|
-
},
|
|
110
|
-
{
|
|
111
|
-
record_type: "service_registration",
|
|
112
|
-
description: "records a service subject into the registry"
|
|
113
|
-
},
|
|
114
|
-
{
|
|
115
|
-
record_type: "agent_registration",
|
|
116
|
-
description: "records an agent subject into the registry"
|
|
117
|
-
}
|
|
118
|
-
],
|
|
119
|
-
lineage_model: [
|
|
120
|
-
{
|
|
121
|
-
layer_id: "subject_review",
|
|
122
|
-
order_index: 1,
|
|
123
|
-
objects: ["machine_identity_record"],
|
|
124
|
-
invariants: [
|
|
125
|
-
"the_registry_subject_is_reviewable_in_proof_form",
|
|
126
|
-
"the_registry_record_is_commitment_backed_and_versioned"
|
|
127
|
-
]
|
|
128
|
-
},
|
|
129
|
-
{
|
|
130
|
-
layer_id: "trust_portability",
|
|
131
|
-
order_index: 2,
|
|
132
|
-
objects: ["machine_identity_record"],
|
|
133
|
-
invariants: [
|
|
134
|
-
"keys_delegations_and_attestations_can_be_reviewed_across_bounded_lanes",
|
|
135
|
-
"revocation_and_status_changes_remain_explicit"
|
|
136
|
-
]
|
|
137
|
-
},
|
|
138
|
-
{
|
|
139
|
-
layer_id: "proof_followthrough",
|
|
140
|
-
order_index: 3,
|
|
141
|
-
objects: ["machine_identity_record"],
|
|
142
|
-
invariants: [
|
|
143
|
-
"the_registry_record_can_be_carried_into_proof_without_becoming_a_new_identity_standard",
|
|
144
|
-
"anchor_and_proof_refs_are_followthrough_layers_not_identity_truth_itself"
|
|
145
|
-
]
|
|
146
|
-
}
|
|
147
|
-
],
|
|
148
|
-
invariants: [
|
|
149
|
-
"commitment_hash_is_derived_from_the_canonical_registry_record",
|
|
150
|
-
"registry_record_id_is_stable_and_replay_safe",
|
|
151
|
-
"status_changes_are_explicit_and_versioned",
|
|
152
|
-
"optional_proof_anchor_and_revocation_refs_do_not_change_base_registry_record_meaning",
|
|
153
|
-
"machine_identity_is_a_shared_control_plane_substrate_not_a_generic_web_claim_container"
|
|
154
|
-
],
|
|
155
|
-
linked_surfaces: {
|
|
156
|
-
identity_registry_proof_ref: "/v1/phases/phase-4/identity-registry/proof",
|
|
157
|
-
identity_registry_proof_summary_ref: "/v1/phases/phase-4/identity-registry/proof/summary",
|
|
158
|
-
attestation_proof_ref: "/v1/phases/phase-4/attestation/proof",
|
|
159
|
-
trust_portability_ref: "/v1/proof-center/trust-portability",
|
|
160
|
-
trust_portability_summary_ref: "/v1/proof-center/trust-portability/summary"
|
|
161
|
-
},
|
|
162
|
-
claim_boundary: "claim_the_machine_identity_registry_proof_followthrough_only_without_claiming_universal_external_identity_session_or_custody_truth"
|
|
163
|
-
};
|
|
164
|
-
}
|
|
165
|
-
|
|
166
|
-
function summarizeMachineIdentityRegistryContractPack() {
|
|
167
|
-
const pack = buildMachineIdentityRegistryContractPack();
|
|
168
|
-
return {
|
|
169
|
-
ok: true,
|
|
170
|
-
product: pack.product,
|
|
171
|
-
category: pack.category,
|
|
172
|
-
summary_version: "naxytra-machine-identity-registry-contract-summary-v1",
|
|
173
|
-
pack_version: pack.pack_version,
|
|
174
|
-
model_state: pack.model_state,
|
|
175
|
-
subject_kind_count: pack.subject_kinds.length,
|
|
176
|
-
record_type_count: pack.record_types.length,
|
|
177
|
-
canonical_object_count: pack.canonical_objects.length,
|
|
178
|
-
layer_count: pack.lineage_model.length,
|
|
179
|
-
invariant_count: pack.invariants.length,
|
|
180
|
-
linked_surfaces: pack.linked_surfaces
|
|
181
|
-
};
|
|
182
|
-
}
|
|
183
|
-
|
|
184
|
-
function getMachineIdentitySubjectKindDetail(subjectKind) {
|
|
185
|
-
const normalized = String(subjectKind || "").trim().toLowerCase();
|
|
186
|
-
return (buildMachineIdentityRegistryContractPack().subject_kinds || []).find((entry) => entry.subject_kind === normalized) || null;
|
|
187
|
-
}
|
|
188
|
-
|
|
189
|
-
function getMachineIdentityRecordTypeDetail(recordType) {
|
|
190
|
-
const normalized = String(recordType || "").trim().toLowerCase();
|
|
191
|
-
return (buildMachineIdentityRegistryContractPack().record_types || []).find((entry) => entry.record_type === normalized) || null;
|
|
192
|
-
}
|
|
193
|
-
|
|
194
|
-
module.exports = {
|
|
195
|
-
buildMachineIdentityRegistryContractPack,
|
|
196
|
-
summarizeMachineIdentityRegistryContractPack,
|
|
197
|
-
getMachineIdentitySubjectKindDetail,
|
|
198
|
-
getMachineIdentityRecordTypeDetail
|
|
199
|
-
};
|
|
1
|
+
"use strict";
|
|
2
|
+
|
|
3
|
+
const packageJson = require("../package.json");
|
|
4
|
+
|
|
5
|
+
function buildMachineIdentityRegistryContractPack() {
|
|
6
|
+
return {
|
|
7
|
+
ok: true,
|
|
8
|
+
product: packageJson.name,
|
|
9
|
+
category: "naxytra-machine-identity-registry-contract",
|
|
10
|
+
pack_version: "naxytra-machine-identity-registry-contract-v1",
|
|
11
|
+
doctrine: "xoonya_reviews_machine_identity_state_as_proof_linked_followthrough_without_claiming_identity_session_or_custody_truth",
|
|
12
|
+
model_state: "core_now",
|
|
13
|
+
core_claim: "the machine identity registry is the proof-linked state machine for subject, key, delegation, attestation, and revocation followthrough",
|
|
14
|
+
canonical_objects: [
|
|
15
|
+
{
|
|
16
|
+
object_id: "machine_identity_record",
|
|
17
|
+
role: "versioned_commitment_backed_registry_record_for_a_machine_subject",
|
|
18
|
+
required_fields: [
|
|
19
|
+
"version",
|
|
20
|
+
"registry_record_id",
|
|
21
|
+
"registry_scope",
|
|
22
|
+
"subject_kind",
|
|
23
|
+
"subject_id",
|
|
24
|
+
"record_type",
|
|
25
|
+
"status",
|
|
26
|
+
"issuer_id",
|
|
27
|
+
"issued_at_ns",
|
|
28
|
+
"commitment_hash"
|
|
29
|
+
],
|
|
30
|
+
recommended_fields: [
|
|
31
|
+
"updated_at_ns",
|
|
32
|
+
"public_key_ref",
|
|
33
|
+
"delegation_ref",
|
|
34
|
+
"revocation_ref",
|
|
35
|
+
"proof_ref",
|
|
36
|
+
"anchor_ref"
|
|
37
|
+
],
|
|
38
|
+
optional_fields: [
|
|
39
|
+
"controller_id",
|
|
40
|
+
"parent_record_id",
|
|
41
|
+
"previous_record_id",
|
|
42
|
+
"subject_ref",
|
|
43
|
+
"trust_state",
|
|
44
|
+
"metadata"
|
|
45
|
+
],
|
|
46
|
+
primary_surfaces: [
|
|
47
|
+
"/v1/phases/phase-4/identity-registry/proof",
|
|
48
|
+
"/v1/phases/phase-4/identity-registry/proof/summary",
|
|
49
|
+
"/v1/phases/phase-4/attestation/proof",
|
|
50
|
+
"/v1/proof-center/trust-portability",
|
|
51
|
+
"/v1/proof-center/trust-portability/summary"
|
|
52
|
+
]
|
|
53
|
+
}
|
|
54
|
+
],
|
|
55
|
+
subject_kinds: [
|
|
56
|
+
{
|
|
57
|
+
subject_kind: "agent",
|
|
58
|
+
description: "a software agent or operator-facing autonomous identity"
|
|
59
|
+
},
|
|
60
|
+
{
|
|
61
|
+
subject_kind: "service",
|
|
62
|
+
description: "a runtime service or machine-facing backend identity"
|
|
63
|
+
},
|
|
64
|
+
{
|
|
65
|
+
subject_kind: "device",
|
|
66
|
+
description: "a physical or embedded device identity"
|
|
67
|
+
},
|
|
68
|
+
{
|
|
69
|
+
subject_kind: "key",
|
|
70
|
+
description: "a bound public-key or credential identity"
|
|
71
|
+
},
|
|
72
|
+
{
|
|
73
|
+
subject_kind: "delegation",
|
|
74
|
+
description: "a delegated authority or capability identity"
|
|
75
|
+
},
|
|
76
|
+
{
|
|
77
|
+
subject_kind: "attestation",
|
|
78
|
+
description: "an attestation-linked identity or evidence binding"
|
|
79
|
+
}
|
|
80
|
+
],
|
|
81
|
+
record_types: [
|
|
82
|
+
{
|
|
83
|
+
record_type: "identity_attestation",
|
|
84
|
+
description: "binds a subject to an attested identity state"
|
|
85
|
+
},
|
|
86
|
+
{
|
|
87
|
+
record_type: "registry_link",
|
|
88
|
+
description: "binds a subject into a registry scope or registry graph"
|
|
89
|
+
},
|
|
90
|
+
{
|
|
91
|
+
record_type: "key_binding",
|
|
92
|
+
description: "binds a subject to one or more active key references"
|
|
93
|
+
},
|
|
94
|
+
{
|
|
95
|
+
record_type: "delegation_grant",
|
|
96
|
+
description: "records that authority or capability has been delegated"
|
|
97
|
+
},
|
|
98
|
+
{
|
|
99
|
+
record_type: "delegation_revocation",
|
|
100
|
+
description: "records that a delegation has been revoked or retired"
|
|
101
|
+
},
|
|
102
|
+
{
|
|
103
|
+
record_type: "trust_state_update",
|
|
104
|
+
description: "records a trust, access, or permission-state update"
|
|
105
|
+
},
|
|
106
|
+
{
|
|
107
|
+
record_type: "device_registration",
|
|
108
|
+
description: "records a device subject into the registry"
|
|
109
|
+
},
|
|
110
|
+
{
|
|
111
|
+
record_type: "service_registration",
|
|
112
|
+
description: "records a service subject into the registry"
|
|
113
|
+
},
|
|
114
|
+
{
|
|
115
|
+
record_type: "agent_registration",
|
|
116
|
+
description: "records an agent subject into the registry"
|
|
117
|
+
}
|
|
118
|
+
],
|
|
119
|
+
lineage_model: [
|
|
120
|
+
{
|
|
121
|
+
layer_id: "subject_review",
|
|
122
|
+
order_index: 1,
|
|
123
|
+
objects: ["machine_identity_record"],
|
|
124
|
+
invariants: [
|
|
125
|
+
"the_registry_subject_is_reviewable_in_proof_form",
|
|
126
|
+
"the_registry_record_is_commitment_backed_and_versioned"
|
|
127
|
+
]
|
|
128
|
+
},
|
|
129
|
+
{
|
|
130
|
+
layer_id: "trust_portability",
|
|
131
|
+
order_index: 2,
|
|
132
|
+
objects: ["machine_identity_record"],
|
|
133
|
+
invariants: [
|
|
134
|
+
"keys_delegations_and_attestations_can_be_reviewed_across_bounded_lanes",
|
|
135
|
+
"revocation_and_status_changes_remain_explicit"
|
|
136
|
+
]
|
|
137
|
+
},
|
|
138
|
+
{
|
|
139
|
+
layer_id: "proof_followthrough",
|
|
140
|
+
order_index: 3,
|
|
141
|
+
objects: ["machine_identity_record"],
|
|
142
|
+
invariants: [
|
|
143
|
+
"the_registry_record_can_be_carried_into_proof_without_becoming_a_new_identity_standard",
|
|
144
|
+
"anchor_and_proof_refs_are_followthrough_layers_not_identity_truth_itself"
|
|
145
|
+
]
|
|
146
|
+
}
|
|
147
|
+
],
|
|
148
|
+
invariants: [
|
|
149
|
+
"commitment_hash_is_derived_from_the_canonical_registry_record",
|
|
150
|
+
"registry_record_id_is_stable_and_replay_safe",
|
|
151
|
+
"status_changes_are_explicit_and_versioned",
|
|
152
|
+
"optional_proof_anchor_and_revocation_refs_do_not_change_base_registry_record_meaning",
|
|
153
|
+
"machine_identity_is_a_shared_control_plane_substrate_not_a_generic_web_claim_container"
|
|
154
|
+
],
|
|
155
|
+
linked_surfaces: {
|
|
156
|
+
identity_registry_proof_ref: "/v1/phases/phase-4/identity-registry/proof",
|
|
157
|
+
identity_registry_proof_summary_ref: "/v1/phases/phase-4/identity-registry/proof/summary",
|
|
158
|
+
attestation_proof_ref: "/v1/phases/phase-4/attestation/proof",
|
|
159
|
+
trust_portability_ref: "/v1/proof-center/trust-portability",
|
|
160
|
+
trust_portability_summary_ref: "/v1/proof-center/trust-portability/summary"
|
|
161
|
+
},
|
|
162
|
+
claim_boundary: "claim_the_machine_identity_registry_proof_followthrough_only_without_claiming_universal_external_identity_session_or_custody_truth"
|
|
163
|
+
};
|
|
164
|
+
}
|
|
165
|
+
|
|
166
|
+
function summarizeMachineIdentityRegistryContractPack() {
|
|
167
|
+
const pack = buildMachineIdentityRegistryContractPack();
|
|
168
|
+
return {
|
|
169
|
+
ok: true,
|
|
170
|
+
product: pack.product,
|
|
171
|
+
category: pack.category,
|
|
172
|
+
summary_version: "naxytra-machine-identity-registry-contract-summary-v1",
|
|
173
|
+
pack_version: pack.pack_version,
|
|
174
|
+
model_state: pack.model_state,
|
|
175
|
+
subject_kind_count: pack.subject_kinds.length,
|
|
176
|
+
record_type_count: pack.record_types.length,
|
|
177
|
+
canonical_object_count: pack.canonical_objects.length,
|
|
178
|
+
layer_count: pack.lineage_model.length,
|
|
179
|
+
invariant_count: pack.invariants.length,
|
|
180
|
+
linked_surfaces: pack.linked_surfaces
|
|
181
|
+
};
|
|
182
|
+
}
|
|
183
|
+
|
|
184
|
+
function getMachineIdentitySubjectKindDetail(subjectKind) {
|
|
185
|
+
const normalized = String(subjectKind || "").trim().toLowerCase();
|
|
186
|
+
return (buildMachineIdentityRegistryContractPack().subject_kinds || []).find((entry) => entry.subject_kind === normalized) || null;
|
|
187
|
+
}
|
|
188
|
+
|
|
189
|
+
function getMachineIdentityRecordTypeDetail(recordType) {
|
|
190
|
+
const normalized = String(recordType || "").trim().toLowerCase();
|
|
191
|
+
return (buildMachineIdentityRegistryContractPack().record_types || []).find((entry) => entry.record_type === normalized) || null;
|
|
192
|
+
}
|
|
193
|
+
|
|
194
|
+
module.exports = {
|
|
195
|
+
buildMachineIdentityRegistryContractPack,
|
|
196
|
+
summarizeMachineIdentityRegistryContractPack,
|
|
197
|
+
getMachineIdentitySubjectKindDetail,
|
|
198
|
+
getMachineIdentityRecordTypeDetail
|
|
199
|
+
};
|
|
@@ -1,87 +1,87 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
|
|
3
|
-
const {
|
|
4
|
-
buildPhase5MajorRailsPack,
|
|
5
|
-
summarizePhase5MajorRailsPack
|
|
6
|
-
} = require("./phase_5_major_rails_pack");
|
|
7
|
-
const {
|
|
8
|
-
buildPhase5SolanaProofPack,
|
|
9
|
-
summarizePhase5SolanaProofPack
|
|
10
|
-
} = require("./phase_5_solana_proof_pack");
|
|
11
|
-
const {
|
|
12
|
-
buildPhase5AntelopeProofPack,
|
|
13
|
-
summarizePhase5AntelopeProofPack
|
|
14
|
-
} = require("./phase_5_antelope_proof_pack");
|
|
15
|
-
const {
|
|
16
|
-
buildPhase5ProtonXprProofPack,
|
|
17
|
-
summarizePhase5ProtonXprProofPack
|
|
18
|
-
} = require("./phase_5_proton_xpr_proof_pack");
|
|
19
|
-
|
|
20
|
-
function buildMajorRailsProofLanePack() {
|
|
21
|
-
return {
|
|
22
|
-
product: "xoonya",
|
|
23
|
-
category: "proof-major-rails-lane-pack",
|
|
24
|
-
pack_version: "xoonya-major-rails-lane-pack-v1",
|
|
25
|
-
lane_state: "first_party_major_rails_proof_family_present",
|
|
26
|
-
posture: "practical_settlement_evidence_breadth_lane",
|
|
27
|
-
family_summary: summarizePhase5MajorRailsPack(),
|
|
28
|
-
featured_lanes: {
|
|
29
|
-
solana: {
|
|
30
|
-
pack: buildPhase5SolanaProofPack(),
|
|
31
|
-
summary: summarizePhase5SolanaProofPack()
|
|
32
|
-
},
|
|
33
|
-
antelope: {
|
|
34
|
-
pack: buildPhase5AntelopeProofPack(),
|
|
35
|
-
summary: summarizePhase5AntelopeProofPack()
|
|
36
|
-
},
|
|
37
|
-
proton_xpr_and_metal: {
|
|
38
|
-
pack: buildPhase5ProtonXprProofPack(),
|
|
39
|
-
summary: summarizePhase5ProtonXprProofPack(),
|
|
40
|
-
named_family_members: ["proton_xpr", "metal"]
|
|
41
|
-
}
|
|
42
|
-
},
|
|
43
|
-
supported_surfaces: {
|
|
44
|
-
phase_summary_ref: "/v1/phases/phase-5/summary",
|
|
45
|
-
major_rails_summary_ref: "/v1/phases/phase-5/major-rails-continuity/summary",
|
|
46
|
-
solana_proof_summary_ref: "/v1/phases/phase-5/solana/proof/summary",
|
|
47
|
-
antelope_proof_summary_ref: "/v1/phases/phase-5/antelope/proof/summary",
|
|
48
|
-
proton_xpr_proof_summary_ref: "/v1/phases/phase-5/proton-xpr/proof/summary",
|
|
49
|
-
proof_bridge_ref: "/v1/proof-bridge/summary"
|
|
50
|
-
},
|
|
51
|
-
first_run_flows: [
|
|
52
|
-
{
|
|
53
|
-
flow_ref: "major_rails_proof_selection",
|
|
54
|
-
recommended_reason: "best first path for understanding practical settlement-evidence breadth across non-default rail families",
|
|
55
|
-
sequence: [
|
|
56
|
-
"inspect_major_rails_proof_lane_summary",
|
|
57
|
-
"inspect_phase_5_major_rails_summary",
|
|
58
|
-
"inspect_solana_antelope_and_proton_xpr_proof_profiles",
|
|
59
|
-
"choose_the_proof_lane_that_matches_external_settlement_evidence_shape"
|
|
60
|
-
]
|
|
61
|
-
}
|
|
62
|
-
],
|
|
63
|
-
guardrails: [
|
|
64
|
-
"major rails proof lanes should strengthen trust and compatibility rather than widen xoonya into a generic chain toolkit",
|
|
65
|
-
"named ecosystems help adoption only when they remain subordinate to canonical proof review and bridge followthrough"
|
|
66
|
-
]
|
|
67
|
-
};
|
|
68
|
-
}
|
|
69
|
-
|
|
70
|
-
function summarizeMajorRailsProofLanePack() {
|
|
71
|
-
const pack = buildMajorRailsProofLanePack();
|
|
72
|
-
return {
|
|
73
|
-
product: "xoonya",
|
|
74
|
-
category: "proof-major-rails-lane-pack-summary",
|
|
75
|
-
summary_version: "xoonya-major-rails-lane-pack-summary-v1",
|
|
76
|
-
lane_state: pack.lane_state,
|
|
77
|
-
posture: pack.posture,
|
|
78
|
-
featured_lane_count: Object.keys(pack.featured_lanes).length,
|
|
79
|
-
first_run_flow_count: pack.first_run_flows.length,
|
|
80
|
-
linked_surfaces: pack.supported_surfaces
|
|
81
|
-
};
|
|
82
|
-
}
|
|
83
|
-
|
|
84
|
-
module.exports = {
|
|
85
|
-
buildMajorRailsProofLanePack,
|
|
86
|
-
summarizeMajorRailsProofLanePack
|
|
87
|
-
};
|
|
1
|
+
"use strict";
|
|
2
|
+
|
|
3
|
+
const {
|
|
4
|
+
buildPhase5MajorRailsPack,
|
|
5
|
+
summarizePhase5MajorRailsPack
|
|
6
|
+
} = require("./phase_5_major_rails_pack");
|
|
7
|
+
const {
|
|
8
|
+
buildPhase5SolanaProofPack,
|
|
9
|
+
summarizePhase5SolanaProofPack
|
|
10
|
+
} = require("./phase_5_solana_proof_pack");
|
|
11
|
+
const {
|
|
12
|
+
buildPhase5AntelopeProofPack,
|
|
13
|
+
summarizePhase5AntelopeProofPack
|
|
14
|
+
} = require("./phase_5_antelope_proof_pack");
|
|
15
|
+
const {
|
|
16
|
+
buildPhase5ProtonXprProofPack,
|
|
17
|
+
summarizePhase5ProtonXprProofPack
|
|
18
|
+
} = require("./phase_5_proton_xpr_proof_pack");
|
|
19
|
+
|
|
20
|
+
function buildMajorRailsProofLanePack() {
|
|
21
|
+
return {
|
|
22
|
+
product: "xoonya",
|
|
23
|
+
category: "proof-major-rails-lane-pack",
|
|
24
|
+
pack_version: "xoonya-major-rails-lane-pack-v1",
|
|
25
|
+
lane_state: "first_party_major_rails_proof_family_present",
|
|
26
|
+
posture: "practical_settlement_evidence_breadth_lane",
|
|
27
|
+
family_summary: summarizePhase5MajorRailsPack(),
|
|
28
|
+
featured_lanes: {
|
|
29
|
+
solana: {
|
|
30
|
+
pack: buildPhase5SolanaProofPack(),
|
|
31
|
+
summary: summarizePhase5SolanaProofPack()
|
|
32
|
+
},
|
|
33
|
+
antelope: {
|
|
34
|
+
pack: buildPhase5AntelopeProofPack(),
|
|
35
|
+
summary: summarizePhase5AntelopeProofPack()
|
|
36
|
+
},
|
|
37
|
+
proton_xpr_and_metal: {
|
|
38
|
+
pack: buildPhase5ProtonXprProofPack(),
|
|
39
|
+
summary: summarizePhase5ProtonXprProofPack(),
|
|
40
|
+
named_family_members: ["proton_xpr", "metal"]
|
|
41
|
+
}
|
|
42
|
+
},
|
|
43
|
+
supported_surfaces: {
|
|
44
|
+
phase_summary_ref: "/v1/phases/phase-5/summary",
|
|
45
|
+
major_rails_summary_ref: "/v1/phases/phase-5/major-rails-continuity/summary",
|
|
46
|
+
solana_proof_summary_ref: "/v1/phases/phase-5/solana/proof/summary",
|
|
47
|
+
antelope_proof_summary_ref: "/v1/phases/phase-5/antelope/proof/summary",
|
|
48
|
+
proton_xpr_proof_summary_ref: "/v1/phases/phase-5/proton-xpr/proof/summary",
|
|
49
|
+
proof_bridge_ref: "/v1/proof-bridge/summary"
|
|
50
|
+
},
|
|
51
|
+
first_run_flows: [
|
|
52
|
+
{
|
|
53
|
+
flow_ref: "major_rails_proof_selection",
|
|
54
|
+
recommended_reason: "best first path for understanding practical settlement-evidence breadth across non-default rail families",
|
|
55
|
+
sequence: [
|
|
56
|
+
"inspect_major_rails_proof_lane_summary",
|
|
57
|
+
"inspect_phase_5_major_rails_summary",
|
|
58
|
+
"inspect_solana_antelope_and_proton_xpr_proof_profiles",
|
|
59
|
+
"choose_the_proof_lane_that_matches_external_settlement_evidence_shape"
|
|
60
|
+
]
|
|
61
|
+
}
|
|
62
|
+
],
|
|
63
|
+
guardrails: [
|
|
64
|
+
"major rails proof lanes should strengthen trust and compatibility rather than widen xoonya into a generic chain toolkit",
|
|
65
|
+
"named ecosystems help adoption only when they remain subordinate to canonical proof review and bridge followthrough"
|
|
66
|
+
]
|
|
67
|
+
};
|
|
68
|
+
}
|
|
69
|
+
|
|
70
|
+
function summarizeMajorRailsProofLanePack() {
|
|
71
|
+
const pack = buildMajorRailsProofLanePack();
|
|
72
|
+
return {
|
|
73
|
+
product: "xoonya",
|
|
74
|
+
category: "proof-major-rails-lane-pack-summary",
|
|
75
|
+
summary_version: "xoonya-major-rails-lane-pack-summary-v1",
|
|
76
|
+
lane_state: pack.lane_state,
|
|
77
|
+
posture: pack.posture,
|
|
78
|
+
featured_lane_count: Object.keys(pack.featured_lanes).length,
|
|
79
|
+
first_run_flow_count: pack.first_run_flows.length,
|
|
80
|
+
linked_surfaces: pack.supported_surfaces
|
|
81
|
+
};
|
|
82
|
+
}
|
|
83
|
+
|
|
84
|
+
module.exports = {
|
|
85
|
+
buildMajorRailsProofLanePack,
|
|
86
|
+
summarizeMajorRailsProofLanePack
|
|
87
|
+
};
|