matrixscroll 0.3.0__tar.gz → 0.4.1__tar.gz

{matrixscroll-0.3.0 → matrixscroll-0.4.1}/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to the Matrix Scroll Python SDK are documented here. The
 format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
 this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.1] - 2026-06-29
+
+Universal provenance SDK expansion and SSX360 Scroll Phase 1 wrapper.
+
+### Added
+- **`matrixscroll.provenance`** — action envelope builders for `ci_step`, `iac_change`,
+  `db_migration`, `api_call`, and `contract_deploy` (`schemas/action-envelope.v1.json`).
+- **`matrixscroll sign-action`** CLI — sign typed action envelopes with Ed25519.
+- **`matrixscroll scroll commit`** — thin Git wrapper (Phase 1; not a Git replacement).
+- **MCP** — `sign_action` validates typed payloads; new `matrixscroll://schema/action-envelope.v1` resource.
+- **Docs** — SSX360 Scroll brief, Scroll Gate v2 SLSA L1–2 honest mapping.
+
 ## [0.3.0] - 2026-06-28
 
 Digital Rain removal and provenance-only SDK surface.

{matrixscroll-0.3.0 → matrixscroll-0.4.1}/PKG-INFO

@@ -1,23 +1,24 @@
 Metadata-Version: 2.4
 Name: matrixscroll
-Version: 0.3.0
+Version: 0.4.1
 Summary: Signed provenance for agent-assisted Git commits with offline verification; emulated Ed25519 ships today and the SE050 hardware path remains an optional preview.
-Project-URL: Homepage, https://matrixscroll.com
-Project-URL: Documentation, https://matrixscroll.com/docs
+Project-URL: Homepage, https://ssx360.com
+Project-URL: Documentation, https://ssx360.com/docs
+Project-URL: Repository, https://github.com/SSX360/matrixscroll
 Project-URL: Source, https://github.com/SSX360/matrixscroll
 Project-URL: Issues, https://github.com/SSX360/matrixscroll/issues
 Project-URL: Specification, https://github.com/SSX360/matrixscroll/blob/main/SPEC.md
 Project-URL: Whitepaper, https://github.com/SSX360/matrixscroll/blob/main/docs/WHITEPAPER.md
-Project-URL: Verifier, https://matrixscroll.com/verify
-Project-URL: Compare, https://matrixscroll.com/compare
+Project-URL: Verifier, https://ssx360.com/verify
+Project-URL: Compare, https://ssx360.com/docs
 Project-URL: Changelog, https://github.com/SSX360/matrixscroll/blob/main/CHANGELOG.md
 Project-URL: Discussions, https://github.com/SSX360/matrixscroll/discussions
 Project-URL: Security, https://github.com/SSX360/matrixscroll/blob/main/SECURITY.md
 Project-URL: GitHub Action, https://github.com/SSX360/matrixscroll-verify-action
 Project-URL: PyPI Provenance, https://pypi.org/project/matrixscroll/
+Project-URL: Reference Device, https://ssx360.com/hardware
 Project-URL: Tests, https://github.com/SSX360/matrixscroll/tree/main/tests
 Project-URL: Public Roadmap, https://github.com/SSX360/matrixscroll/blob/main/docs/ROADMAP_2026-07.md
-Project-URL: Reference Device, https://matrixscroll.com/device
 Author-email: SSX360 <security@matrixscroll.com>
 License-Expression: Apache-2.0
 License-File: LICENSE
@@ -40,6 +41,8 @@ Requires-Python: >=3.10
 Requires-Dist: cryptography>=41.0
 Provides-Extra: dev
 Requires-Dist: build>=1.0; extra == 'dev'
+Requires-Dist: hypothesis>=6.100; extra == 'dev'
+Requires-Dist: pytest-cov>=4.1; extra == 'dev'
 Requires-Dist: pytest>=7.4; extra == 'dev'
 Provides-Extra: git
 Provides-Extra: hardware
@@ -53,14 +56,21 @@ Description-Content-Type: text/markdown
 
 # Matrix Scroll
 
+[![ci-unit](https://github.com/SSX360/matrixscroll/actions/workflows/ci-unit.yml/badge.svg)](https://github.com/SSX360/matrixscroll/actions/workflows/ci-unit.yml)
+[![Scroll Gate v2 (hosted)](https://github.com/SSX360/matrixscroll/actions/workflows/provenance-gate.yml/badge.svg)](https://github.com/SSX360/matrixscroll/actions/workflows/provenance-gate.yml)
+[![codecov](https://codecov.io/gh/SSX360/matrixscroll/graph/badge.svg)](https://codecov.io/gh/SSX360/matrixscroll)
+
+**112 tests** · Hypothesis-verified security properties · [Security properties](docs/SECURITY_PROPERTIES.md)
+
 **Signed proof of who — or what — wrote every commit.** Matrix Scroll is the
-open Ed25519 commit-provenance protocol for agent-assisted Git — verified
+**universal provenance SDK** — open Ed25519 envelopes for Git commits, CI steps,
+IaC changes, DB migrations, API calls, and smart-contract deploys — verified
 offline in CLI, browser, and CI. Hardware (SE050) is an optional preview trust
 upgrade; emulated mode ships today.
 
 **Hosted control plane:** identity, billing, and device confirmation live at
 [ssx360.com](https://ssx360.com/). Teams evaluating protected-branch enforcement should
-[book a provenance pilot](mailto:mission@ssx360.com?subject=Provenance%20Pilot%20Inquiry);
+[book a provenance pilot](https://ssx360.com/contact?intent=pilot);
 Provisioned pilot and team accounts sign in at [ssx360.com/signup](https://ssx360.com/signup).
 
 ## Compliance evidence mapping
@@ -74,22 +84,6 @@ Matrix Scroll **maps to** and **produces evidence for** (never “required by”
 
 Full matrix: [`controls/agentic_ai_controls.json`](controls/agentic_ai_controls.json)
 
-## Adoption signals
-
-Track outbound and registry traction while rolling out:
-
-| Signal | Counter |
-|--------|---------|
-| PyPI `matrixscroll` | [![PyPI downloads](https://img.shields.io/pypi/dm/matrixscroll)](https://pypi.org/project/matrixscroll/) |
-| PyPI `[mcp]` extra | [![PyPI MCP downloads](https://img.shields.io/pypi/dm/matrixscroll?label=mcp%20extra)](https://pypi.org/project/matrixscroll/) |
-| GitHub stars | [![GitHub stars](https://img.shields.io/github/stars/SSX360/matrixscroll?style=social)](https://github.com/SSX360/matrixscroll/stargazers) |
-| Scroll Gate Action | [![GitHub Action](https://img.shields.io/github/stars/SSX360/matrixscroll-verify-action?style=social)](https://github.com/SSX360/matrixscroll-verify-action) |
-| Glama MCP registry | [matrixscroll on Glama](https://glama.ai/mcp/servers/SSX360/matrixscroll) |
-
-## Hero demo (post–MCP merge)
-
-Record the 60–90s provenance flow in [`docs/HERO_DEMO.md`](docs/HERO_DEMO.md) — Scroll Gate + browser verifier + MCP verbs only.
-
 ## Install — MCP server (headline path)
 
 Agents sign commits in-loop via the **provenance-only** MCP server:
@@ -106,17 +100,18 @@ Agents sign commits in-loop via the **provenance-only** MCP server:
 ```
 
 ```bash
-pip install "matrixscroll[mcp]==0.3.0"
+pip install "matrixscroll[mcp]==0.4.1"
 matrixscroll-mcp   # stdio — register in Cursor / Claude Desktop / VS Code
 ```
 
-**MCP tools (provenance verbs only):** `create_envelope`, `verify_envelope`,
-`verify_pr_range` (Scroll Gate), `publish_notes`, `status`, `audit_export`.
+**MCP tools (provenance verbs only):** `create_envelope`, `sign_action`, `verify_envelope`,
+`verify_pr_range` (Scroll Gate), `publish_notes`, `status`, `audit_export`, `list_envelopes`,
+`connect_card` (SE050 preview).
 
 ## Also available — CLI & hooks
 
 ```bash
-pip install "matrixscroll==0.3.0"
+pip install "matrixscroll==0.4.1"
 matrixscroll hook-install
 export MATRIXSCROLL_ACTOR_TYPE=agent
 export MATRIXSCROLL_TOOL=agent-runner
@@ -124,6 +119,29 @@ git commit -m "feat: agent-assisted change"
 matrixscroll envelope-verify "$(git rev-parse HEAD)"
 ```
 
+### Universal action envelopes (Layer 2)
+
+Sign provenance for CI, IaC, migrations, API calls, and contract deploys:
+
+```bash
+matrixscroll sign-action --type ci_step \
+  --payload ./payloads/ci-step.json \
+  --output ./ci-step.signed.json \
+  --actor-type ci
+```
+
+Action schema: [`schemas/action-envelope.v1.json`](schemas/action-envelope.v1.json)
+
+### SSX360 Scroll — Git wrapper (Layer 3, Phase 1)
+
+Git under the hood; governance on top. **Not a Git replacement.**
+
+```bash
+matrixscroll scroll commit -m "feat: governed commit"
+```
+
+See [`docs/commercial/SSX360_SCROLL.md`](docs/commercial/SSX360_SCROLL.md).
+
 See [`docs/quickstart-git.md`](docs/quickstart-git.md) and
 [`examples/demo/agent-commit-demo.sh`](examples/demo/agent-commit-demo.sh).
 
@@ -147,13 +165,22 @@ The reference SDK ships pure Ed25519 over canonical manifest bytes today. The
 SSX360 / NXP SE050 path is the compatible next trust layer and remains a
 preview path until device acceptance is complete.
 
+## RFC 8032 (Ed25519) alignment
+
+Matrix Scroll v1 binds exclusively to [RFC 8032](https://www.rfc-editor.org/rfc/rfc8032)
+Ed25519: 32-byte seeds, 32-byte public keys, 64-byte detached signatures over
+canonical UTF-8 JSON bytes (see [`SPEC.md`](SPEC.md) §4). Verifiers reject any
+`signature.algorithm` other than `"ed25519"`. Conformance vectors live in
+[`vectors/`](vectors/); property tests in [`docs/SECURITY_PROPERTIES.md`](docs/SECURITY_PROPERTIES.md).
+
 ## Honest limits
 
-- Shipping now: PyPI `matrixscroll==0.3.0`, Git post-commit hooks,
-  `matrixscroll envelope-verify`, Scroll Gate PR verification, browser
+- Shipping now: PyPI `matrixscroll==0.4.1`, Git post-commit hooks,
+  `matrixscroll sign-action`, `matrixscroll scroll commit` (thin wrapper),
+  `matrixscroll envelope-verify`, Scroll Gate PR verification (partial SLSA L1–2),
   verifier, the GitHub Action, and a USB CDC host transport preview for the
   SE050 rollout path. Emulated mode is the default evaluation path.
-- In progress: RP2350 + SE050 firmware validation, external Ed25519-capable
+- In progress: nRF52840 + SE050 firmware validation (AP2 Vault Card PoC), external Ed25519-capable
   hardware key backends, and transparency-log integrations.
 - Not: IAM, sandboxing, prompt filtering, or an agent runtime.
 
@@ -194,7 +221,7 @@ alongside your existing scanners, branch protection, and build attestations.
 ## Quickstart (CLI)
 
 ```bash
-pip install "matrixscroll==0.3.0"
+pip install "matrixscroll==0.4.1"
 matrixscroll hook-install
 matrixscroll hook-status
 
@@ -221,7 +248,7 @@ See [`docs/quickstart-git.md`](docs/quickstart-git.md) and run
     head-ref: ${{ github.event.pull_request.head.sha }}
     base-ref: ${{ github.event.pull_request.base.sha }}
     source: notes
-    matrixscroll-version: "0.3.0"
+    matrixscroll-version: "0.4.1"
     require-mode: emulated
 ```
 
@@ -241,7 +268,7 @@ git push origin refs/notes/matrixscroll
     head-ref: ${{ github.event.pull_request.head.sha }}
     base-ref: ${{ github.event.pull_request.base.sha }}
     source: notes
-    matrixscroll-version: "0.3.0"
+    matrixscroll-version: "0.4.1"
     summary-output: provenance-summary.json
 ```
 
@@ -273,12 +300,12 @@ when they preserve the same pure Ed25519 byte contract.
 - GitHub Action: <https://github.com/SSX360/matrixscroll-verify-action>
 - Agentic AI controls: [`docs/AGENTIC_AI_SECURITY.md`](docs/AGENTIC_AI_SECURITY.md)
 - Site: <https://matrixscroll.com>
-- Reference device path: [SSX360](https://matrixscroll.com/device)
+- Reference device path: [AP2 Vault Card hardware](https://ssx360.com/hardware)
 
 ## Python API
 
 ```bash
-pip install "matrixscroll==0.3.0"
+pip install "matrixscroll==0.4.1"
 ```
 
 ```python
@@ -388,7 +415,7 @@ The MCP server exposes **provenance verbs only**: `create_envelope`, `verify_env
 Install and register in Cursor / Claude Desktop / VS Code:
 
 ```bash
-pip install "matrixscroll[mcp]==0.3.0"
+pip install "matrixscroll[mcp]==0.4.1"
 matrixscroll-mcp   # stdio
 ```
 
@@ -402,7 +429,8 @@ the recommended `mcp.json` snippet.
 
 ## Security
 
-See [`SECURITY.md`](SECURITY.md). Report vulnerabilities privately to
+See [`SECURITY.md`](SECURITY.md) and [`docs/SECURITY_PROPERTIES.md`](docs/SECURITY_PROPERTIES.md).
+Report vulnerabilities privately to
 **security@matrixscroll.com** or via a GitHub Security Advisory.
 
 ---

{matrixscroll-0.3.0 → matrixscroll-0.4.1}/README.md

@@ -1,13 +1,20 @@
 # Matrix Scroll
 
+[![ci-unit](https://github.com/SSX360/matrixscroll/actions/workflows/ci-unit.yml/badge.svg)](https://github.com/SSX360/matrixscroll/actions/workflows/ci-unit.yml)
+[![Scroll Gate v2 (hosted)](https://github.com/SSX360/matrixscroll/actions/workflows/provenance-gate.yml/badge.svg)](https://github.com/SSX360/matrixscroll/actions/workflows/provenance-gate.yml)
+[![codecov](https://codecov.io/gh/SSX360/matrixscroll/graph/badge.svg)](https://codecov.io/gh/SSX360/matrixscroll)
+
+**112 tests** · Hypothesis-verified security properties · [Security properties](docs/SECURITY_PROPERTIES.md)
+
 **Signed proof of who — or what — wrote every commit.** Matrix Scroll is the
-open Ed25519 commit-provenance protocol for agent-assisted Git — verified
+**universal provenance SDK** — open Ed25519 envelopes for Git commits, CI steps,
+IaC changes, DB migrations, API calls, and smart-contract deploys — verified
 offline in CLI, browser, and CI. Hardware (SE050) is an optional preview trust
 upgrade; emulated mode ships today.
 
 **Hosted control plane:** identity, billing, and device confirmation live at
 [ssx360.com](https://ssx360.com/). Teams evaluating protected-branch enforcement should
-[book a provenance pilot](mailto:mission@ssx360.com?subject=Provenance%20Pilot%20Inquiry);
+[book a provenance pilot](https://ssx360.com/contact?intent=pilot);
 Provisioned pilot and team accounts sign in at [ssx360.com/signup](https://ssx360.com/signup).
 
 ## Compliance evidence mapping
@@ -21,22 +28,6 @@ Matrix Scroll **maps to** and **produces evidence for** (never “required by”
 
 Full matrix: [`controls/agentic_ai_controls.json`](controls/agentic_ai_controls.json)
 
-## Adoption signals
-
-Track outbound and registry traction while rolling out:
-
-| Signal | Counter |
-|--------|---------|
-| PyPI `matrixscroll` | [![PyPI downloads](https://img.shields.io/pypi/dm/matrixscroll)](https://pypi.org/project/matrixscroll/) |
-| PyPI `[mcp]` extra | [![PyPI MCP downloads](https://img.shields.io/pypi/dm/matrixscroll?label=mcp%20extra)](https://pypi.org/project/matrixscroll/) |
-| GitHub stars | [![GitHub stars](https://img.shields.io/github/stars/SSX360/matrixscroll?style=social)](https://github.com/SSX360/matrixscroll/stargazers) |
-| Scroll Gate Action | [![GitHub Action](https://img.shields.io/github/stars/SSX360/matrixscroll-verify-action?style=social)](https://github.com/SSX360/matrixscroll-verify-action) |
-| Glama MCP registry | [matrixscroll on Glama](https://glama.ai/mcp/servers/SSX360/matrixscroll) |
-
-## Hero demo (post–MCP merge)
-
-Record the 60–90s provenance flow in [`docs/HERO_DEMO.md`](docs/HERO_DEMO.md) — Scroll Gate + browser verifier + MCP verbs only.
-
 ## Install — MCP server (headline path)
 
 Agents sign commits in-loop via the **provenance-only** MCP server:
@@ -53,17 +44,18 @@ Agents sign commits in-loop via the **provenance-only** MCP server:
 ```
 
 ```bash
-pip install "matrixscroll[mcp]==0.3.0"
+pip install "matrixscroll[mcp]==0.4.1"
 matrixscroll-mcp   # stdio — register in Cursor / Claude Desktop / VS Code
 ```
 
-**MCP tools (provenance verbs only):** `create_envelope`, `verify_envelope`,
-`verify_pr_range` (Scroll Gate), `publish_notes`, `status`, `audit_export`.
+**MCP tools (provenance verbs only):** `create_envelope`, `sign_action`, `verify_envelope`,
+`verify_pr_range` (Scroll Gate), `publish_notes`, `status`, `audit_export`, `list_envelopes`,
+`connect_card` (SE050 preview).
 
 ## Also available — CLI & hooks
 
 ```bash
-pip install "matrixscroll==0.3.0"
+pip install "matrixscroll==0.4.1"
 matrixscroll hook-install
 export MATRIXSCROLL_ACTOR_TYPE=agent
 export MATRIXSCROLL_TOOL=agent-runner
@@ -71,6 +63,29 @@ git commit -m "feat: agent-assisted change"
 matrixscroll envelope-verify "$(git rev-parse HEAD)"
 ```
 
+### Universal action envelopes (Layer 2)
+
+Sign provenance for CI, IaC, migrations, API calls, and contract deploys:
+
+```bash
+matrixscroll sign-action --type ci_step \
+  --payload ./payloads/ci-step.json \
+  --output ./ci-step.signed.json \
+  --actor-type ci
+```
+
+Action schema: [`schemas/action-envelope.v1.json`](schemas/action-envelope.v1.json)
+
+### SSX360 Scroll — Git wrapper (Layer 3, Phase 1)
+
+Git under the hood; governance on top. **Not a Git replacement.**
+
+```bash
+matrixscroll scroll commit -m "feat: governed commit"
+```
+
+See [`docs/commercial/SSX360_SCROLL.md`](docs/commercial/SSX360_SCROLL.md).
+
 See [`docs/quickstart-git.md`](docs/quickstart-git.md) and
 [`examples/demo/agent-commit-demo.sh`](examples/demo/agent-commit-demo.sh).
 
@@ -94,13 +109,22 @@ The reference SDK ships pure Ed25519 over canonical manifest bytes today. The
 SSX360 / NXP SE050 path is the compatible next trust layer and remains a
 preview path until device acceptance is complete.
 
+## RFC 8032 (Ed25519) alignment
+
+Matrix Scroll v1 binds exclusively to [RFC 8032](https://www.rfc-editor.org/rfc/rfc8032)
+Ed25519: 32-byte seeds, 32-byte public keys, 64-byte detached signatures over
+canonical UTF-8 JSON bytes (see [`SPEC.md`](SPEC.md) §4). Verifiers reject any
+`signature.algorithm` other than `"ed25519"`. Conformance vectors live in
+[`vectors/`](vectors/); property tests in [`docs/SECURITY_PROPERTIES.md`](docs/SECURITY_PROPERTIES.md).
+
 ## Honest limits
 
-- Shipping now: PyPI `matrixscroll==0.3.0`, Git post-commit hooks,
-  `matrixscroll envelope-verify`, Scroll Gate PR verification, browser
+- Shipping now: PyPI `matrixscroll==0.4.1`, Git post-commit hooks,
+  `matrixscroll sign-action`, `matrixscroll scroll commit` (thin wrapper),
+  `matrixscroll envelope-verify`, Scroll Gate PR verification (partial SLSA L1–2),
   verifier, the GitHub Action, and a USB CDC host transport preview for the
   SE050 rollout path. Emulated mode is the default evaluation path.
-- In progress: RP2350 + SE050 firmware validation, external Ed25519-capable
+- In progress: nRF52840 + SE050 firmware validation (AP2 Vault Card PoC), external Ed25519-capable
   hardware key backends, and transparency-log integrations.
 - Not: IAM, sandboxing, prompt filtering, or an agent runtime.
 
@@ -141,7 +165,7 @@ alongside your existing scanners, branch protection, and build attestations.
 ## Quickstart (CLI)
 
 ```bash
-pip install "matrixscroll==0.3.0"
+pip install "matrixscroll==0.4.1"
 matrixscroll hook-install
 matrixscroll hook-status
 
@@ -168,7 +192,7 @@ See [`docs/quickstart-git.md`](docs/quickstart-git.md) and run
     head-ref: ${{ github.event.pull_request.head.sha }}
     base-ref: ${{ github.event.pull_request.base.sha }}
     source: notes
-    matrixscroll-version: "0.3.0"
+    matrixscroll-version: "0.4.1"
     require-mode: emulated
 ```
 
@@ -188,7 +212,7 @@ git push origin refs/notes/matrixscroll
     head-ref: ${{ github.event.pull_request.head.sha }}
     base-ref: ${{ github.event.pull_request.base.sha }}
     source: notes
-    matrixscroll-version: "0.3.0"
+    matrixscroll-version: "0.4.1"
     summary-output: provenance-summary.json
 ```
 
@@ -220,12 +244,12 @@ when they preserve the same pure Ed25519 byte contract.
 - GitHub Action: <https://github.com/SSX360/matrixscroll-verify-action>
 - Agentic AI controls: [`docs/AGENTIC_AI_SECURITY.md`](docs/AGENTIC_AI_SECURITY.md)
 - Site: <https://matrixscroll.com>
-- Reference device path: [SSX360](https://matrixscroll.com/device)
+- Reference device path: [AP2 Vault Card hardware](https://ssx360.com/hardware)
 
 ## Python API
 
 ```bash
-pip install "matrixscroll==0.3.0"
+pip install "matrixscroll==0.4.1"
 ```
 
 ```python
@@ -335,7 +359,7 @@ The MCP server exposes **provenance verbs only**: `create_envelope`, `verify_env
 Install and register in Cursor / Claude Desktop / VS Code:
 
 ```bash
-pip install "matrixscroll[mcp]==0.3.0"
+pip install "matrixscroll[mcp]==0.4.1"
 matrixscroll-mcp   # stdio
 ```
 
@@ -349,7 +373,8 @@ the recommended `mcp.json` snippet.
 
 ## Security
 
-See [`SECURITY.md`](SECURITY.md). Report vulnerabilities privately to
+See [`SECURITY.md`](SECURITY.md) and [`docs/SECURITY_PROPERTIES.md`](docs/SECURITY_PROPERTIES.md).
+Report vulnerabilities privately to
 **security@matrixscroll.com** or via a GitHub Security Advisory.
 
 ---

{matrixscroll-0.3.0 → matrixscroll-0.4.1}/controls/agentic_ai_controls.json

@@ -78,7 +78,7 @@
       "title": "Supply-chain and dependency management",
       "guidance": "Understand third-party components, models, tools, integrations, and update exposure.",
       "matrixscroll_control": "The repo uses minimal runtime dependencies, Dependabot, CI build verification, and a public spec/conformance suite.",
-      "evidence_paths": ["pyproject.toml", ".github/dependabot.yml", ".github/workflows/test.yml", "vectors/README.md"],
+      "evidence_paths": ["pyproject.toml", ".github/dependabot.yml", ".github/workflows/ci-unit.yml", "vectors/README.md"],
       "goes_beyond": "Third-party implementations can self-test against public vectors before being trusted."
     },
     {
@@ -94,7 +94,7 @@
       "title": "Governance and change control",
       "guidance": "Integrate agentic AI risk with existing security governance and define ownership before deployment.",
       "matrixscroll_control": "Spec, core crypto, vectors, security policy, and CI are CODEOWNERS-protected and tested across OS/Python versions.",
-      "evidence_paths": [".github/CODEOWNERS", ".github/workflows/test.yml", "CONTRIBUTING.md"],
+      "evidence_paths": [".github/CODEOWNERS", ".github/workflows/ci-unit.yml", ".github/workflows/ci-integration.yml", "CONTRIBUTING.md"],
       "goes_beyond": "Protocol-impacting changes require both human review and machine conformance checks."
     },
     {

{matrixscroll-0.3.0 → matrixscroll-0.4.1}/docs/ADOPTER_KIT.md

@@ -11,7 +11,7 @@ who want to trial Matrix Scroll without changing their core workflow.
 
 ## 15-minute pilot
 
-1. Install `matrixscroll==0.2.6` in one repo.
+1. Install `matrixscroll==0.3.0` in one repo.
 2. Run `matrixscroll hook-install`.
 3. Make one agent-assisted commit and verify it locally.
 4. Publish notes with `matrixscroll envelope-publish-notes`.
@@ -38,7 +38,7 @@ jobs:
           head-ref: ${{ github.event.pull_request.head.sha }}
           base-ref: ${{ github.event.pull_request.base.sha }}
           source: notes
-          matrixscroll-version: "0.2.6"
+          matrixscroll-version: "0.3.0"
           require-mode: emulated
 ```
 
@@ -64,7 +64,7 @@ jobs:
 ## Clean-machine proof status
 
 Recorded on `2026-06-21` against the pinned public flow:
-`pip install "matrixscroll==0.2.6"` -> `matrixscroll hook-install` ->
+`pip install "matrixscroll==0.3.0"` -> `matrixscroll hook-install` ->
 `matrixscroll hook-status` -> first agent-assisted commit ->
 `matrixscroll envelope-verify`.
 

matrixscroll-0.4.1/docs/ADOPTION.md

@@ -0,0 +1,13 @@
+# Adoption signals (internal)
+
+Track outbound and registry traction while rolling out. Not published on the public README.
+
+| Signal | Counter |
+|--------|---------|
+| PyPI `matrixscroll` | [![PyPI downloads](https://img.shields.io/pypi/dm/matrixscroll)](https://pypi.org/project/matrixscroll/) |
+| PyPI `[mcp]` extra | [![PyPI MCP downloads](https://img.shields.io/pypi/dm/matrixscroll?label=mcp%20extra)](https://pypi.org/project/matrixscroll/) |
+| GitHub stars | [![GitHub stars](https://img.shields.io/github/stars/SSX360/matrixscroll?style=social)](https://github.com/SSX360/matrixscroll/stargazers) |
+| Scroll Gate Action | [![GitHub Action](https://img.shields.io/github/stars/SSX360/matrixscroll-verify-action?style=social)](https://github.com/SSX360/matrixscroll-verify-action) |
+| Glama MCP registry | [matrixscroll on Glama](https://glama.ai/mcp/servers/SSX360/matrixscroll) |
+
+Update this file during GTM reviews; keep badges out of user-facing install docs.

{matrixscroll-0.3.0 → matrixscroll-0.4.1}/docs/COMPARISON.md

@@ -60,7 +60,7 @@ No single competitor listed above combines all four today.
 - **CI gate:** Scroll Gate ships in **0.2.3+** — PR commit-range verification via `envelope-verify-range`, git notes transport (`refs/notes/matrixscroll`), and filesystem bundles. [`matrixscroll-verify-action`](https://github.com/SSX360/matrixscroll-verify-action) supports `head-ref`/`base-ref` range mode with agent/human counts.
 - **Owner/delegation attestation:** Optional `delegation` block in commit envelope schema (**0.2.4+**); see [`delegation-attestation-rfc.md`](delegation-attestation-rfc.md). Alien still leads on OIDC/DPoP owner binding.
 - **Multi-agent commits:** Multiple actors in one envelope — on the roadmap.
-- **Rekor / GUAC export:** Dry-run CLI ships in **0.2.6** (`envelope-publish-rekor`, `envelope-export-guac`); full Rekor upload integration still in progress.
+- **Rekor / GUAC export:** Dry-run CLI ships in **0.3.0** (`envelope-publish-rekor`, `envelope-export-guac`); full Rekor upload integration still in progress.
 - **Hardware:** SSX360 reference device and Scroll Key retail are **in progress**; L1 emulated key is what you can use now.
 
 ## When to use what

{matrixscroll-0.3.0 → matrixscroll-0.4.1}/docs/FIVE_MINUTES.md

@@ -12,7 +12,7 @@ five-minute path from `pip install` to a verifiable commit envelope.
 ## 1. Install the SDK
 
 ```bash
-pip install "matrixscroll==0.2.6"
+pip install "matrixscroll==0.3.0"
 matrixscroll hook-install
 matrixscroll hook-status
 ```
@@ -61,7 +61,7 @@ git push origin refs/notes/matrixscroll
     head-ref: ${{ github.event.pull_request.head.sha }}
     base-ref: ${{ github.event.pull_request.base.sha }}
     source: notes
-    matrixscroll-version: "0.2.6"
+    matrixscroll-version: "0.3.0"
     require-mode: emulated
 ```
 

{matrixscroll-0.3.0 → matrixscroll-0.4.1}/docs/ROADMAP_2026-07.md

@@ -8,13 +8,13 @@ what ships now before widening the story.
 ## Baseline on June 21, 2026
 
 - GitHub: early public repo, product-first docs, and offline verification
-- Current public release target: `matrixscroll==0.2.6`
+- Current public release target: `matrixscroll==0.3.0`
 - Public trust contract: pure Ed25519 over canonical manifest bytes
 - Hardware path: SSX360 SE050 reference implementation in progress
 
 ## Next 7 days
 
-- cut and publish `0.2.6` without widening the manifest or verify surface
+- cut and publish `0.3.0` without widening the manifest or verify surface
 - make the GitHub Action a real public proof surface
 - align site, README, action docs, and PyPI around one install flow
 - remove broken links and stale release drift from public copy

matrixscroll-0.4.1/docs/SECURITY_PROPERTIES.md

@@ -0,0 +1,36 @@
+# Matrix Scroll security properties
+
+Machine-checkable guarantees for the reference SDK (v0.4.0). Properties marked
+**verified** have Hypothesis property tests in `tests/test_security_properties.py`.
+Formal TLA+ models are on the public roadmap.
+
+| ID | Property | Statement | Status |
+| -- | -------- | ----------- | ------ |
+| **P1** | Sign–verify roundtrip | For any canonical manifest bytes, `verify(pub, msg, sign(msg, key))` is true when `pub` derives from the same key material. | **Verified** (Hypothesis) |
+| **P2** | Tamper detection | Changing any signed byte (manifest body or signature octet) causes verification to fail. | **Verified** (Hypothesis) |
+| **P3** | Wrong-key rejection | A signature valid under key A MUST NOT verify under key B's public key. | **Verified** (Hypothesis) |
+| **P4** | Canonical determinism | Identical logical manifests produce identical signing input bytes after canonical JSON encoding (sorted keys, ASCII escapes, no NaN). | **Verified** (unit + vectors) |
+| **P5** | Offline verification | Envelope verification requires no network, hosted API, or hardware ping once the envelope and trusted key set are local. | **Verified** (unit) |
+| **P6** | Algorithm binding | Only Ed25519 (RFC 8032) signatures with `algorithm: "ed25519"` are accepted; other algorithms are rejected. | **Verified** (unit + vectors) |
+
+## Standards alignment
+
+- **Ed25519:** [RFC 8032](https://www.rfc-editor.org/rfc/rfc8032) — 32-byte seed, 32-byte public key, 64-byte signature.
+- **Canonical JSON:** Deterministic UTF-8 encoding per [`SPEC.md`](../SPEC.md) §4.
+- **Commit envelopes:** `matrixscroll.commit_envelope.v1` schema in [`schemas/commit-envelope.v1.json`](../schemas/commit-envelope.v1.json).
+
+## Trust modes (honest scope)
+
+| Mode | Private key location | Shipping status |
+| ---- | -------------------- | --------------- |
+| **Emulated** | Owner-only file (`~/.matrixscroll/device.json`, mode 0600) | **Shipping today** |
+| **Hardware (SE050)** | NXP secure element on AP2 Vault Card pilot | **Pilot / preview** — same verifier contract, key not exportable from chip |
+
+## Roadmap (not claimed today)
+
+- TLA+ specification of Scroll Gate merge semantics
+- Third-party cryptographic audit and public threat model
+- npm `@ssx360/verify` browser/Node verifier package
+- IETF informational draft for commit-envelope wire format
+
+See [`SECURITY.md`](../SECURITY.md) for vulnerability reporting.

{matrixscroll-0.3.0 → matrixscroll-0.4.1}/docs/WHITEPAPER.md

@@ -71,7 +71,7 @@ Full wire format: [`SPEC.md`](../SPEC.md). Schema: [`schemas/commit-envelope.v1.
 ### 1. Install
 
 ```bash
-pip install "matrixscroll==0.2.6"
+pip install "matrixscroll==0.3.0"
 matrixscroll hook-install
 matrixscroll hook-status
 ```
@@ -87,7 +87,7 @@ matrixscroll envelope-verify "$(git rev-parse HEAD)"
 
 Hooks default to **warn mode**; set `"enforce": true` in `.git/matrixscroll/config.json` to block commits when signing fails. See [`docs/quickstart-git.md`](quickstart-git.md).
 
-**Windows:** support landed in matrixscroll **0.2.1**; pin **0.2.6** or newer in pilot environments.
+**Windows:** support landed in matrixscroll **0.2.1**; pin **0.3.0** or newer in pilot environments.
 
 ### 3. CI gate
 
@@ -95,12 +95,12 @@ Hooks default to **warn mode**; set `"enforce": true` in `.git/matrixscroll/conf
 - uses: SSX360/matrixscroll-verify-action@v1
   with:
     manifest: path/to/signed-manifest.json
-    matrixscroll-version: "0.2.6"
+    matrixscroll-version: "0.3.0"
     require-mode: emulated
     trusted-keys: trusted-keys.json
 ```
 
-Policy flags (`--require-mode`, `--trusted-keys`) are available in the `0.2.x` line; this whitepaper pins `0.2.6` for copy-and-paste examples.
+Policy flags (`--require-mode`, `--trusted-keys`) are available in the `0.2.x` line; this whitepaper pins `0.3.0` for copy-and-paste examples.
 
 ### 4. Optional scope manifest