orangecheck 2.1.0__tar.gz → 2.2.0__tar.gz

{orangecheck-2.1.0 → orangecheck-2.2.0}/CHANGELOG.md

@@ -4,6 +4,29 @@ All notable changes to the **`orangecheck`** Python package. Follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
 [Semantic Versioning](https://semver.org/).
 
+## [2.2.0] — 2026-10-16
+
+Matches `@orangecheck/sdk` 1.13.0 and the spec's regenerated `tv24`–`tv27`.
+
+### Changed (security)
+
+- `bond_nullifier(key, audience, outpoint)` takes the registry's secret key
+  (at least 32 bytes) and returns HMAC-SHA256. 2.1.0's unkeyed hash could be
+  inverted by hashing every unspent output, which found the coin.
+- The signed acknowledgement reads "I back this subject with this coin. It
+  stays in my wallet."
+
+### Added
+
+- `verify_bond_signature` refuses a signing window longer than an hour
+  (`bond_window_too_long`; `max_window_seconds`, `BOND_MAX_WINDOW_SECONDS`).
+
+### Fixed
+
+- A bond's address is checked the way `@orangecheck/bip322` checks it,
+  checksum included, so a mistyped address is `bond_malformed` here as in
+  TypeScript rather than `sig_invalid`.
+
 ## [2.1.0] — 2026-10-16
 
 ### Added — bonds (oc-attest-protocol `BOND.md`)

{orangecheck-2.1.0 → orangecheck-2.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: orangecheck
-Version: 2.1.0
+Version: 2.2.0
 Summary: Python SDK for OrangeCheck — proof of Bitcoin stake + the OC Pledge primitive (commitments) for the open web.
 Project-URL: Homepage, https://ochk.io
 Project-URL: Documentation, https://ochk.io/docs

{orangecheck-2.1.0 → orangecheck-2.2.0}/orangecheck/__init__.py

@@ -43,6 +43,7 @@ except ImportError:  # pragma: no cover - optional-dep path
     verify_bip322_signature = None  # type: ignore[assignment]
 from .bond import (
     BOND_DAYS_FLOORS,
+    BOND_MAX_WINDOW_SECONDS,
     BOND_SATS_FLOORS,
     BondFields,
     bond_floors,
@@ -97,6 +98,7 @@ __all__ = [
     "verify_bond_signature",
     "BOND_SATS_FLOORS",
     "BOND_DAYS_FLOORS",
+    "BOND_MAX_WINDOW_SECONDS",
     # Types
     "CheckResult",
     "VerifyOutcome",
@@ -111,7 +113,7 @@ __all__ = [
     "VerificationError",
 ]
 
-__version__ = "2.1.0"
+__version__ = "2.2.0"
 
 # OC Pledge submodule — sibling primitive for forward-looking commitments
 # bound to a Bitcoin address. Imported here so consumers can write:

{orangecheck-2.1.0 → orangecheck-2.2.0}/orangecheck/bond.py

@@ -1,8 +1,7 @@
 """
-Bonds (oc-attest-protocol BOND.md): one unspent coin, pledged by its holder
-to back one subject. The coin never moves and nobody holds it; spending it
-ends the bond. An audience sees floors and a per-audience nullifier, never
-the coin.
+Bonds (oc-attest-protocol BOND.md): one unspent coin backing one subject.
+The coin stays in its holder's wallet; spending it ends the bond. An audience
+sees floors and a keyed per-audience nullifier, never the coin.
 
 The message, id, nullifier and floors are pure and need nothing installed.
 ``verify_bond_signature`` needs the ``[verify]`` extra for BIP-322. Checking
@@ -14,26 +13,102 @@ says.
 from __future__ import annotations
 
 import hashlib
+import hmac
 import re
 from dataclasses import dataclass
 from datetime import datetime, timezone
 from typing import Optional
 
 HEADER = "orangecheck-bond"
-ACK = "I pledge this coin to back this subject. It stays in my wallet."
+ACK = "I back this subject with this coin. It stays in my wallet."
 FIELDS = ("address", "outpoint", "subject", "nonce", "issued_at", "expires_at")
 
 #: Value floors a bond claim reports, in sats (BOND.md §5).
 BOND_SATS_FLOORS = (1_000, 10_000, 100_000, 1_000_000, 10_000_000)
 #: Age floors a bond claim reports, in days of 144 blocks (BOND.md §5).
 BOND_DAYS_FLOORS = (7, 30, 90, 365)
+#: The longest signing window a verifier accepts by default, in seconds (BOND.md §2).
+BOND_MAX_WINDOW_SECONDS = 3600
 
 _OUTPOINT = re.compile(r"^[0-9a-f]{64}:(0|[1-9][0-9]{0,9})$")
 _NONCE = re.compile(r"^[0-9a-f]{32}$")
 _TIME = re.compile(r"^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$")
 _SUBJECT = re.compile(r"^[\x21-\x7e]{1,256}$")
-# Shape only; the signature check is what binds the address.
-_ADDRESS = re.compile(r"^(bc1|tb1|bcrt1)[02-9ac-hj-np-z]{8,87}$|^[123mn][1-9A-HJ-NP-Za-km-z]{25,34}$")
+
+_BECH32 = "qpzry9x8gf2tvdw0s3jn54khce6mua7l"
+_BECH32M_CONST = 0x2BC830A3
+_B58 = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"
+_B58_VERSIONS = (0x00, 0x05, 0x6F, 0xC4)
+
+
+def _polymod(values: list[int]) -> int:
+    gen = (0x3B6A57B2, 0x26508E6D, 0x1EA119FA, 0x3D4233DD, 0x2A1462B3)
+    chk = 1
+    for v in values:
+        top = chk >> 25
+        chk = (chk & 0x1FFFFFF) << 5 ^ v
+        for i in range(5):
+            chk ^= gen[i] if ((top >> i) & 1) else 0
+    return chk
+
+
+def _five_to_eight(words: list[int]) -> Optional[bytes]:
+    """BIP-173 regrouping with strict padding: None when the padding is wrong."""
+    acc = bits = 0
+    out = bytearray()
+    for w in words:
+        acc = (acc << 5) | w
+        bits += 5
+        while bits >= 8:
+            bits -= 8
+            out.append((acc >> bits) & 0xFF)
+    if bits >= 5 or (acc << (8 - bits)) & 0xFF:
+        return None
+    return bytes(out)
+
+
+def _segwit_ok(address: str, hrp: str) -> bool:
+    if len(address) > 90 or address.lower() != address:
+        return False
+    sep = address.rfind("1")
+    if address[:sep] != hrp or len(address) - sep < 8:
+        return False
+    try:
+        data = [_BECH32.index(c) for c in address[sep + 1 :]]
+    except ValueError:
+        return False
+    const = _polymod([ord(c) >> 5 for c in hrp] + [0] + [ord(c) & 31 for c in hrp] + data)
+    words = data[:-6]
+    if not words:
+        return False
+    program = _five_to_eight(words[1:])
+    if program is None:
+        return False
+    if words[0] == 0:
+        return const == 1 and len(program) in (20, 32)
+    if words[0] == 1:
+        return const == _BECH32M_CONST and len(program) == 32
+    return False
+
+
+def _base58_ok(address: str) -> bool:
+    n = 0
+    for c in address:
+        i = _B58.find(c)
+        if i < 0:
+            return False
+        n = n * 58 + i
+    raw = b"\0" * (len(address) - len(address.lstrip("1"))) + n.to_bytes((n.bit_length() + 7) // 8, "big")
+    payload, check = raw[:-4], raw[-4:]
+    if len(payload) != 21 or payload[0] not in _B58_VERSIONS:
+        return False
+    return hashlib.sha256(hashlib.sha256(payload).digest()).digest()[:4] == check
+
+
+def _address_ok(address: str) -> bool:
+    """An address @orangecheck/bip322's decodeAddress accepts, checksum included."""
+    m = re.match(r"^(bc|tb|bcrt)1", address)
+    return _segwit_ok(address, m.group(1)) if m else _base58_ok(address)
 
 
 @dataclass(frozen=True)
@@ -47,12 +122,13 @@ class BondFields:
 
 
 def _when(s: str) -> datetime:
+    # strptime refuses times that roll over, such as T24:00:00Z or February 30.
     return datetime.strptime(s, "%Y-%m-%dT%H:%M:%SZ").replace(tzinfo=timezone.utc)
 
 
 def _well_formed(f: BondFields) -> bool:
     return bool(
-        _ADDRESS.match(f.address)
+        _address_ok(f.address)
         and _OUTPOINT.match(f.outpoint)
         and _SUBJECT.match(f.subject)
         and _NONCE.match(f.nonce)
@@ -95,11 +171,16 @@ def bond_id(message: str) -> str:
     return hashlib.sha256(message.encode("utf-8")).hexdigest()
 
 
-def bond_nullifier(audience: str, outpoint: str) -> str:
-    """The per-audience nullifier for a coin (BOND.md §6)."""
-    return hashlib.sha256(
-        f"orangecheck-bond-nullifier\n{audience}\n{outpoint}".encode("utf-8")
-    ).hexdigest()
+def bond_nullifier(key: bytes, audience: str, outpoint: str) -> str:
+    """
+    The per-audience nullifier for a coin (BOND.md §6), keyed with a secret only
+    the registry holds. Unkeyed, an audience could hash every unspent output and
+    find the coin.
+    """
+    if len(key) < 32:
+        raise ValueError("bond nullifier key must be at least 32 bytes")
+    data = f"orangecheck-bond-nullifier\n{audience}\n{outpoint}".encode("utf-8")
+    return hmac.new(key, data, hashlib.sha256).hexdigest()
 
 
 def bond_floors(sats: int, age_blocks: int) -> dict[str, int]:
@@ -118,6 +199,7 @@ def verify_bond_signature(
     subject: Optional[str] = None,
     now: Optional[datetime] = None,
     skew_seconds: int = 60,
+    max_window_seconds: int = BOND_MAX_WINDOW_SECONDS,
 ) -> tuple[bool, str]:
     """
     Check a signed bond message: shape, subject, signing window, signature.
@@ -131,6 +213,9 @@ def verify_bond_signature(
         return False, "bond_malformed"
     if subject is not None and fields.subject != subject:
         return False, "bond_subject_mismatch"
+    window = (_when(fields.expires_at) - _when(fields.issued_at)).total_seconds()
+    if window > max_window_seconds:
+        return False, "bond_window_too_long"
     at = (now or datetime.now(timezone.utc)).timestamp()
     if _when(fields.issued_at).timestamp() - skew_seconds > at:
         return False, "bond_not_yet_valid"

{orangecheck-2.1.0 → orangecheck-2.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "orangecheck"
-version = "2.1.0"
+version = "2.2.0"
 description = "Python SDK for OrangeCheck — proof of Bitcoin stake + the OC Pledge primitive (commitments) for the open web."
 readme = "README.md"
 license = { text = "MIT" }

orangecheck-2.2.0/tests/test_bond_address.py

@@ -0,0 +1,34 @@
+"""
+A bond's address is read the way @orangecheck/bip322's decodeAddress reads it,
+checksum included, so both SDKs give the same reason for the same message.
+The verdicts below were produced by that function.
+"""
+
+from __future__ import annotations
+
+import pytest
+
+from orangecheck.bond import _address_ok
+
+TS_VERDICTS = [
+    ("bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4", True),
+    ("bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t5", False),
+    ("BC1QW508D6QEJXTDG4Y5R3ZARVARY0C5XW7KV8F3T4", False),
+    ("bc1pmfr3p9j00pfxjh0zmgp99y8zftmd3s5pmedqhyptwy6lm87hf5sspknck9", True),
+    ("bc1qrp33g0q5c5txsp9arysrx4k6zdkfs4nce4xj0gdcccefvpysxf3qccfmv3", True),
+    ("tb1qw508d6qejxtdg4y5r3zarvary0c5xw7kxpjzsx", True),
+    ("1BvBMSEYstWetqTFn5Au4m4GFg7xJaNVN2", True),
+    ("1BvBMSEYstWetqTFn5Au4m4GFg7xJaNVN3", False),
+    ("3J98t1WpEZ73CNmQviecrnyiWrnqRhWNLy", True),
+    # Valid checksums over bad padding (v0 and v1).
+    ("bc1qlllllllllllllllllllllllllllllllllp3sej9", False),
+    ("bc1plllllllllllllllllllllllllllllllllllllllllllllllllllllnjr3m8", False),
+    # bech32m on a v0 program, and witness version 2.
+    ("bc1qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqs9wcxj", False),
+    ("bc1zqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqupf6cj", False),
+]
+
+
+@pytest.mark.parametrize("address,ok", TS_VERDICTS)
+def test_address_agrees_with_typescript(address: str, ok: bool) -> None:
+    assert _address_ok(address) is ok

{orangecheck-2.1.0 → orangecheck-2.2.0}/tests/test_conformance.py

@@ -156,7 +156,8 @@ def test_bond_nullifier(vector: dict) -> None:
     from orangecheck import bond_nullifier
 
     inp = vector["input"]
-    got = [bond_nullifier(a, inp["outpoint"]) for a in inp["audiences"]]
+    key = bytes.fromhex(inp["key"])
+    got = [bond_nullifier(key, a, inp["outpoint"]) for a in inp["audiences"]]
     assert got == vector["expected"]["nullifiers"]
 
 

{orangecheck-2.1.0 → orangecheck-2.2.0}/tests/vectors/index.json

@@ -127,12 +127,12 @@
   {
     "id": "tv26",
     "category": "bond_signature",
-    "description": "wrong signer and expired window — MUST NOT verify"
+    "description": "wrong signer, expired window, window over an hour, rolled-over time — MUST NOT verify"
   },
   {
     "id": "tv27",
     "category": "bond_nullifier",
-    "description": "one coin, two audiences (BOND.md §6)"
+    "description": "one coin, two audiences, one registry key (BOND.md §6)"
   },
   {
     "id": "tv28",

{orangecheck-2.1.0 → orangecheck-2.2.0}/tests/vectors/tv24.json

@@ -11,7 +11,7 @@
     "expires_at": "2026-10-16T12:10:00Z"
   },
   "expected": {
-    "canonical": "orangecheck-bond\naddress: bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T12:10:00Z\nack: I pledge this coin to back this subject. It stays in my wallet.\n",
-    "bond_id": "25fdfb7dd6211e74329eb533c2760f41c6e477e04bea71d270a4a1feb3f1cd42"
+    "canonical": "orangecheck-bond\naddress: bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T12:10:00Z\nack: I back this subject with this coin. It stays in my wallet.\n",
+    "bond_id": "c4a9465c3b161eccb18c479649ef93149ac38124def8c3b9c7552bb1915d129e"
   }
 }

{orangecheck-2.1.0 → orangecheck-2.2.0}/tests/vectors/tv25.json

@@ -7,21 +7,21 @@
     "bonds": [
       {
         "address": "bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4",
-        "message": "orangecheck-bond\naddress: bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T12:10:00Z\nack: I pledge this coin to back this subject. It stays in my wallet.\n",
-        "signature": "AkcwRAIgXiBjNIVrHtzLTpQCwhreuR7CM0bM3opiP1nxPKsOI3cCIDda/wa1FZTXelNEKSSTxulsMX8iSkTlFL33O26flLg1ASECeb5mfvncu6xVoGKVzocLBwKb/NstzijZWfKBWxb4F5g="
+        "message": "orangecheck-bond\naddress: bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T12:10:00Z\nack: I back this subject with this coin. It stays in my wallet.\n",
+        "signature": "AkcwRAIgBtorUyg37InmZ8kY9+iWo7557g2YD5VsH0M+yHZke9wCIG0cnfgU0o+HXaTD1Tf7/uLi6+XWGpX32wMqIaHSNzxrASECeb5mfvncu6xVoGKVzocLBwKb/NstzijZWfKBWxb4F5g="
       },
       {
         "address": "bc1pmfr3p9j00pfxjh0zmgp99y8zftmd3s5pmedqhyptwy6lm87hf5sspknck9",
-        "message": "orangecheck-bond\naddress: bc1pmfr3p9j00pfxjh0zmgp99y8zftmd3s5pmedqhyptwy6lm87hf5sspknck9\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T12:10:00Z\nack: I pledge this coin to back this subject. It stays in my wallet.\n",
-        "signature": "AUEzVjEbyrc2uc/+2/fY8wq0b80qoiQomZHb93xrjurqCi6ZPAla20fXRTg4OWIccb77clZCCa/L4lhUlWuZeSiJAQ=="
+        "message": "orangecheck-bond\naddress: bc1pmfr3p9j00pfxjh0zmgp99y8zftmd3s5pmedqhyptwy6lm87hf5sspknck9\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T12:10:00Z\nack: I back this subject with this coin. It stays in my wallet.\n",
+        "signature": "AUHt6fHusZm0RTxT2rmOw/1lDkfxgzIANvN+V1K0/llB3JXApVUlzYZhC8Er3bQo6OKluAIvF/wDUKG43PvZZMnUAQ=="
       }
     ]
   },
   "expected": {
     "valid": true,
     "bond_ids": [
-      "25fdfb7dd6211e74329eb533c2760f41c6e477e04bea71d270a4a1feb3f1cd42",
-      "82fbacfc4e64f6a82e5b0efc67fa31a43b0e57f2d8d341080eec7c2594df9e0b"
+      "c4a9465c3b161eccb18c479649ef93149ac38124def8c3b9c7552bb1915d129e",
+      "5f7e7b49acab0088da4ef49b9b95a69ea5970190bf63659e3728b821efaa72a5"
     ]
   }
 }

orangecheck-2.2.0/tests/vectors/tv26.json

@@ -0,0 +1,36 @@
+{
+  "id": "tv26",
+  "category": "bond_signature",
+  "description": "the P2TR signature over the P2WPKH message MUST NOT verify; the P2WPKH bond after its window MUST be refused; a window over an hour MUST be refused even with a good signature; a time that rolls over (T24:00:00Z) is malformed",
+  "input": {
+    "cases": [
+      {
+        "now": "2026-10-16T12:05:00Z",
+        "message": "orangecheck-bond\naddress: bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T12:10:00Z\nack: I back this subject with this coin. It stays in my wallet.\n",
+        "signature": "AUHt6fHusZm0RTxT2rmOw/1lDkfxgzIANvN+V1K0/llB3JXApVUlzYZhC8Er3bQo6OKluAIvF/wDUKG43PvZZMnUAQ==",
+        "reason": "sig_invalid"
+      },
+      {
+        "now": "2026-10-16T12:20:00Z",
+        "message": "orangecheck-bond\naddress: bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T12:10:00Z\nack: I back this subject with this coin. It stays in my wallet.\n",
+        "signature": "AkcwRAIgBtorUyg37InmZ8kY9+iWo7557g2YD5VsH0M+yHZke9wCIG0cnfgU0o+HXaTD1Tf7/uLi6+XWGpX32wMqIaHSNzxrASECeb5mfvncu6xVoGKVzocLBwKb/NstzijZWfKBWxb4F5g=",
+        "reason": "bond_expired"
+      },
+      {
+        "now": "2026-10-16T12:05:00Z",
+        "message": "orangecheck-bond\naddress: bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T14:00:00Z\nack: I back this subject with this coin. It stays in my wallet.\n",
+        "signature": "AkcwRAIgCY8Rm6wdrZkbtup43Hjii70g+Hl1byYAVM+Z0405buACIAaE+P2t5Y9dH1fb9nCC3E8CrDVqEMi3j65l4Dh6UZMNASECeb5mfvncu6xVoGKVzocLBwKb/NstzijZWfKBWxb4F5g=",
+        "reason": "bond_window_too_long"
+      },
+      {
+        "now": "2026-10-16T12:05:00Z",
+        "message": "orangecheck-bond\naddress: bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T24:00:00Z\nack: I back this subject with this coin. It stays in my wallet.\n",
+        "signature": "AkcwRAIgSem/l3mNW3RuBevxUME7srZm4mY+iBVDwwGTLyz9VD4CIGERr4Ro/HGqOivXJvUatJcp0BgbOsJ+tf2fgqsKwEfIASECeb5mfvncu6xVoGKVzocLBwKb/NstzijZWfKBWxb4F5g=",
+        "reason": "bond_malformed"
+      }
+    ]
+  },
+  "expected": {
+    "valid": false
+  }
+}

orangecheck-2.2.0/tests/vectors/tv27.json

@@ -0,0 +1,19 @@
+{
+  "id": "tv27",
+  "category": "bond_nullifier",
+  "description": "one coin, two audiences, one registry key: the same input gives the same nullifier, different audiences unrelated ones (BOND.md §6). The key is a public test key; a registry keeps its own secret.",
+  "input": {
+    "key": "000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f",
+    "outpoint": "1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0",
+    "audiences": [
+      "https://example.com",
+      "https://ochk.app"
+    ]
+  },
+  "expected": {
+    "nullifiers": [
+      "f9f4ac1b66f2244dfd1ba70f2a8291bdf98e5aad5d7d828d79fbd7a4d188a755",
+      "a927f6884c62e98fe5802588d026d0a041b6c8f30cea817126daae965780531e"
+    ]
+  }
+}

orangecheck-2.1.0/tests/vectors/tv26.json

@@ -1,24 +0,0 @@
-{
-  "id": "tv26",
-  "category": "bond_signature",
-  "description": "the P2TR signature presented over the P2WPKH bond message MUST NOT verify; the P2WPKH bond after its window MUST be refused",
-  "input": {
-    "cases": [
-      {
-        "now": "2026-10-16T12:05:00Z",
-        "message": "orangecheck-bond\naddress: bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T12:10:00Z\nack: I pledge this coin to back this subject. It stays in my wallet.\n",
-        "signature": "AUEzVjEbyrc2uc/+2/fY8wq0b80qoiQomZHb93xrjurqCi6ZPAla20fXRTg4OWIccb77clZCCa/L4lhUlWuZeSiJAQ==",
-        "reason": "sig_invalid"
-      },
-      {
-        "now": "2026-10-16T12:20:00Z",
-        "message": "orangecheck-bond\naddress: bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4\noutpoint: 1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0\nsubject: did:oc:0123456789abcdef0123456789abcdef\nnonce: 00112233445566778899aabbccddeeff\nissued_at: 2026-10-16T12:00:00Z\nexpires_at: 2026-10-16T12:10:00Z\nack: I pledge this coin to back this subject. It stays in my wallet.\n",
-        "signature": "AkcwRAIgXiBjNIVrHtzLTpQCwhreuR7CM0bM3opiP1nxPKsOI3cCIDda/wa1FZTXelNEKSSTxulsMX8iSkTlFL33O26flLg1ASECeb5mfvncu6xVoGKVzocLBwKb/NstzijZWfKBWxb4F5g=",
-        "reason": "bond_expired"
-      }
-    ]
-  },
-  "expected": {
-    "valid": false
-  }
-}

orangecheck-2.1.0/tests/vectors/tv27.json

@@ -1,18 +0,0 @@
-{
-  "id": "tv27",
-  "category": "bond_nullifier",
-  "description": "one coin, two audiences: same input gives the same nullifier, different audiences unrelated ones (BOND.md §6)",
-  "input": {
-    "outpoint": "1bd631f9d28188be398bae26c018e93ec4d276d25d8f969b6cbc28eab13686c9:0",
-    "audiences": [
-      "https://example.com",
-      "https://ochk.app"
-    ]
-  },
-  "expected": {
-    "nullifiers": [
-      "b95726767e6c00b97fd046bc612d7518c5987dd833cb69bf3cdb54a6268e8818",
-      "d70c6f2037f30dd8579cf504aae625eb8794dffe69dcf4d92752def0c5ec4a20"
-    ]
-  }
-}