xoonya 3.1.10 → 3.1.11

package/RELEASE_NOTES.md

@@ -1,3 +1,4 @@
-`xoonya` 3.1.10 refreshes the public README and package metadata to lead with the proven capabilities: deterministic and post-quantum (Ed25519 + ML-DSA-65 hybrid) verification of the native XNYA machine-evidence format, demonstrated live via the paid x402 lane.
+`xoonya` 3.1.11 is a packaging and classification refresh. The proof engine, verification behavior, vectors, and routes are unchanged.
 
-There is no change to the proof engine, verification behavior, vectors, or any route — this is a documentation and packaging refresh for public outreach.
+- The published package no longer carries a Python bytecode cache (it embedded a local build path); a `.gitignore` and a nested `.npmignore` keep caches, env files, and key material out of the repository and the tarball.
+- The crypto-agility matrix now classifies ML-DSA and SLH-DSA as runtime-supported and vector-covered, with the boundary stated honestly: the Ed25519 + ML-DSA-65 hybrid is exercised live via the paid x402 lane; SLH-DSA hybrids are implemented and vector-covered but not yet run through the paid lane. This is machine-evidence verification only — not an identity, custody, or chain-truth claim.

package/lib/crypto_agility_matrix.js

@@ -37,12 +37,18 @@ function buildCryptoAgilityMatrixPack() {
           "webauthn_cose_when_verifier_present"
         ]
       },
+      {
+        lane_class: "runtime_supported_vector_covered",
+        description: "post-quantum suites implemented in the proof SDK as classical+PQ hybrids with conformance vectors; claimable only for vector-covered suites. The Ed25519 + ML-DSA-65 hybrid is additionally exercised live via the paid x402 lane; SLH-DSA hybrids are implemented and vector-covered but not yet exercised through the paid lane. Machine-evidence verification only — not identity, custody, or chain truth.",
+        items: [
+          "ml_dsa",
+          "slh_dsa"
+        ]
+      },
       {
         lane_class: "future_lane",
         description: "explicit future cryptographic direction, not claimable as the current core",
         items: [
-          "ml_dsa",
-          "slh_dsa",
           "xoonya_native_hybrid_v1",
           "xoonya_native_atom_v2"
         ]
@@ -76,8 +82,8 @@ function buildCryptoAgilityMatrixPack() {
       { suite_id: "dilithium", state: "blocked_until_vectors" },
       { suite_id: "falcon", state: "blocked_until_vectors" },
       { suite_id: "sphincs-plus", state: "blocked_until_vectors" },
-      { suite_id: "ml-dsa", state: "future_lane" },
-      { suite_id: "slh-dsa", state: "future_lane" }
+      { suite_id: "ml-dsa", state: "runtime_supported_vector_covered" },
+      { suite_id: "slh-dsa", state: "runtime_supported_vector_covered" }
     ],
     proof_envelope_rules: [
       "signature_suite_must_be_explicit",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xoonya",
-  "version": "3.1.10",
+  "version": "3.1.11",
   "description": "Deterministic proof and review engine with post-quantum verification (Ed25519 + ML-DSA-65 hybrid) for receipts, handoffs, governance, and the native XNYA machine-evidence format. Verified live via the paid x402 lane.",
   "main": "index.js",
   "bin": {