platformforge 0.3.1__tar.gz → 0.3.3__tar.gz

{platformforge-0.3.1 → platformforge-0.3.3}/.github/workflows/ci.yml

@@ -4,6 +4,7 @@ on:
   push:
     branches: [main]
   pull_request:
+  workflow_dispatch:
 
 permissions:
   contents: read

{platformforge-0.3.1 → platformforge-0.3.3}/CHANGELOG.md

@@ -1,5 +1,17 @@
 # CHANGELOG
 
+## [0.3.3] — 2026-11-10
+
+### Fixed
+
+- Published the Cycle 2.7 security certification baseline.
+
+## [0.3.2] — 2026-11-04
+
+### Fixed
+
+- Synced the hardened Forge Portal runtime and refreshed bundled portal assets.
+
 All notable changes. Format: wave/feature, the "why", key commits.
 ## [0.2.3] - 2026-10-23
 

{platformforge-0.3.1 → platformforge-0.3.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: platformforge
-Version: 0.3.1
+Version: 0.3.3
 Summary: Agentic Platform Engineering intelligence platform — deterministic, offline-first, evidence-first
 Project-URL: Homepage, https://github.com/EdgarSocrates98/platform-forge
 Project-URL: Repository, https://github.com/EdgarSocrates98/platform-forge

platformforge-0.3.3/VERSION_DUMP.cycle-2.7.json

@@ -0,0 +1,9 @@
+{
+  "cycle": "2.7",
+  "repository": "platform-forge",
+  "version": "0.3.3",
+  "tag": "v0.3.3",
+  "source_commit": "ab2ff78f135f3248fbb2848a9e8fc66226b64bac",
+  "version_source": "pyproject.toml and platformforge.__version__",
+  "verified_at": "2026-11-10"
+}

{platformforge-0.3.1 → platformforge-0.3.3}/docs/economy-parity/FINAL-REPORT.md

@@ -8,7 +8,7 @@ Authority & Final Freeze Alignment.
 
 | Field | Value |
 |---|---|
-| validated_sha | `d0e2ee0d4f40b020b1311c4e92e9142a45cc2abd` — functional commit the canonical gates ran against |
+| validated_sha | `10e23ba73199c62f953c9b62b569a39245857b68` — functional commit the canonical gates ran against |
 | closure_sha | the receipt-only commit landing this file — self-referential, so its SHA is what `HEAD` reports after that commit; the committed receipt records `closure_sha: null` by design (§65) |
 | receipt | `VALIDATION-RECEIPT.json` — `platformforge/economy-validation-receipt/v1`, generated by `python scripts/validate.py --economy-receipt` (two-pass: skeleton → self-referential gates → final) |
 | gates | 14 canonical `economy-*` gates — names derived from `GATES` in `scripts/validate.py`, never hand-listed |

{platformforge-0.3.1 → platformforge-0.3.3}/docs/economy-parity/VALIDATION-RECEIPT.json

@@ -1,7 +1,7 @@
 {
   "benchmarks": {
     "control_plane_overhead": "docs/economy-parity/ECONOMY-BENCHMARKS.md",
-    "end_to_end": "insufficient evidence — no production corpus claimed"
+    "end_to_end": "insufficient evidence \u2014 no production corpus claimed"
   },
   "closure_sha": null,
   "cycle": "economy-parity",
@@ -11,81 +11,81 @@
     "economy-agentic": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_agents_waste.py tests/test_economy_evals.py -k uniqueness or debate or duplication or fanout or waste or stagnant",
-      "seconds": 3.87
+      "seconds": 4.81
     },
     "economy-budget": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_contracts.py -k budget or limit or protected or dimension",
-      "seconds": 2.49
+      "seconds": 1.46
     },
     "economy-cache": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_cache.py",
-      "seconds": 2.77
+      "seconds": 2.15
     },
     "economy-closure": {
       "ok": true,
       "reproduce": "python -c import sys\nfrom pathlib import Path\nreq = {'docs/economy-parity/FINAL-REPORT.md':\n         ['validated_sha', 'remote_ci', 'known gap'],\n       'docs/economy-parity/FINAL-MATRIX.md':\n         ['validated', 'externally-unverified'],\n       'docs/economy-parity/ECONOMY-BENCHMARKS.md':\n         ['Control Plane Overhead', 'End-to-End'],\n       'docs/economy/ROUTING.md':\n         ['decide', 'advisory'],\n       'docs/economy-parity/POLISH-BASELINE.md': ['drift']}\nbad = []\nfor f, needles in req.items():\n    p = Path(f)\n    if not p.is_file(): bad.append(('missing', f)); continue\n    txt = p.read_text()\n    for n in needles:\n        if n not in txt: bad.append((f, n))\nm = Path('docs/economy-parity/FINAL-MATRIX.md').read_text()\nif '\\n' + '|' in m and ' fully-production' in m:\n    bad.append(('matrix', 'overclaimed status'))\nif bad: print(bad); sys.exit(1)\nprint('closure docs coherent')\n && pytest -q tests/test_economy_closure.py",
-      "seconds": 3.45
+      "seconds": 2.37
     },
     "economy-context": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_gateway.py -k TestGateway or TestLazy or TestRole or Suff",
-      "seconds": 2.65
+      "seconds": 1.7
     },
     "economy-contracts": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_contracts.py tests/test_economy_v2.py",
-      "seconds": 3.97
+      "seconds": 2.42
     },
     "economy-evals": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_evals.py",
-      "seconds": 3.24
+      "seconds": 1.87
     },
     "economy-qpt": {
       "ok": true,
       "reproduce": "pytest -q tests/test_qpt_v2.py tests/test_economy_fleet_qpt.py",
-      "seconds": 8.76
+      "seconds": 5.43
     },
     "economy-receipt": {
       "ok": true,
-      "reproduce": "python -c import json, re, subprocess, sys\nfrom pathlib import Path\nsys.path.insert(0, 'scripts')\nimport validate as V\np = Path(V.ECONOMY_RECEIPT_PATH)\nif not p.is_file():\n    print('missing receipt:', p); sys.exit(1)\nr = json.loads(p.read_text())\nbad = []\nif r.get('schema') != V.ECONOMY_RECEIPT_SCHEMA:\n    bad.append(('schema', r.get('schema')))\nvs = r.get('validated_sha') or ''\nok_sha = subprocess.run(['git','cat-file','-e',\n    vs + '^{commit}'], capture_output=True).returncode == 0\nif not ok_sha: bad.append(('validated_sha-not-a-commit', vs))\nhead = subprocess.run(['git','rev-parse','HEAD'],\n    capture_output=True, text=True).stdout.strip()\n# PR merge ref: HEAD^2 is the pushed branch tip — the Option-A\n# pair (functional commit + receipt commit) sits one level down.\nhead2 = subprocess.run(['git','rev-parse','HEAD^2'],\n    capture_output=True, text=True).stdout.strip()\nbase = head2 if __import__('re').fullmatch(r'[0-9a-f]{40}', head2) else head\nhead1 = subprocess.run(['git','rev-parse', base + '~1'],\n    capture_output=True, text=True).stdout.strip()\nif vs not in (base, head1):\n    bad.append(('validated_sha-stale', vs, head))\ncanon = set(V._economy_gate_names())\nextra = set(r.get('gates', {})) - canon\nif extra: bad.append(('noncanonical-gates', sorted(extra)))\npat = re.compile('tests/' + r'\\S+' + r'\\.py')\nfor g, e in r.get('gates', {}).items():\n    for t in pat.findall(e.get('reproduce') or ''):\n        if not Path(t).is_file():\n            bad.append(('dead-reproduce-path', g, t))\nif r.get('verdict') not in ('validated', 'failed'):\n    bad.append(('verdict', r.get('verdict')))\nif bad: print(bad); sys.exit(1)\nprint('receipt coherent:', len(r['gates']), 'gates,',\n      'sha bound')\n",
-      "seconds": 0.34
+      "reproduce": "python -c import json, re, subprocess, sys\nfrom pathlib import Path\nsys.path.insert(0, 'scripts')\nimport validate as V\np = Path(V.ECONOMY_RECEIPT_PATH)\nif not p.is_file():\n    print('missing receipt:', p); sys.exit(1)\nr = json.loads(p.read_text())\nbad = []\nif r.get('schema') != V.ECONOMY_RECEIPT_SCHEMA:\n    bad.append(('schema', r.get('schema')))\nvs = r.get('validated_sha') or ''\nok_sha = subprocess.run(['git','cat-file','-e',\n    vs + '^{commit}'], capture_output=True).returncode == 0\nif not ok_sha: bad.append(('validated_sha-not-a-commit', vs))\nhead = subprocess.run(['git','rev-parse','HEAD'],\n    capture_output=True, text=True).stdout.strip()\n# PR merge ref: HEAD^2 is the pushed branch tip \u2014 the Option-A\n# pair (functional commit + receipt commit) sits one level down.\nhead2 = subprocess.run(['git','rev-parse','HEAD^2'],\n    capture_output=True, text=True).stdout.strip()\nbase = head2 if __import__('re').fullmatch(r'[0-9a-f]{40}', head2) else head\nhead1 = subprocess.run(['git','rev-parse', base + '~1'],\n    capture_output=True, text=True).stdout.strip()\nif vs not in (base, head1):\n    bad.append(('validated_sha-stale', vs, head))\ncanon = set(V._economy_gate_names())\nextra = set(r.get('gates', {})) - canon\nif extra: bad.append(('noncanonical-gates', sorted(extra)))\npat = re.compile('tests/' + r'\\S+' + r'\\.py')\nfor g, e in r.get('gates', {}).items():\n    for t in pat.findall(e.get('reproduce') or ''):\n        if not Path(t).is_file():\n            bad.append(('dead-reproduce-path', g, t))\nif r.get('verdict') not in ('validated', 'failed'):\n    bad.append(('verdict', r.get('verdict')))\nif bad: print(bad); sys.exit(1)\nprint('receipt coherent:', len(r['gates']), 'gates,',\n      'sha bound')\n",
+      "seconds": 0.29
     },
     "economy-reconcile": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_gateway.py tests/test_economy_evals.py -k reconcil or mismatch or unobserved",
-      "seconds": 2.91
+      "seconds": 1.6
     },
     "economy-resume": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_gateway.py -k resume or checkpoint",
-      "seconds": 2.58
+      "seconds": 1.52
     },
     "economy-routing": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_evals.py -k routing or profile or champion or simple_task",
-      "seconds": 2.86
+      "seconds": 1.52
     },
     "economy-surface": {
       "ok": true,
-      "reproduce": "python -c import subprocess, sys\ncmds = [\n ['platformforge','economy','doctor'],\n ['platformforge','economy','checkpoint','--run-id','gate',\n  '--spent','{\"tokens\":1}'],\n ['platformforge','economy','resume','--run-id','gate'],\n ['platformforge','economy','reconcile',\n  '--planned','{\"tokens\":1}','--observed','{\"tokens\":2}'],\n ['platformforge','economy','explain','--run-id','gate'],\n ['platformforge','cache','stats'],\n ['platformforge','cache','gc'],\n ['platformforge','context','capsule','--task','t',\n  '--facts','[{\"fact_id\":\"f\"}]'],\n ['platformforge','context','gc'],\n ['platformforge','routing','explain','--signal','{}'],\n ['platformforge','routing','compare',\n  '--champion','{}','--challenger','{}'],\n]\nfor c in cmds:\n    r = subprocess.run(c, capture_output=True)\n    if r.returncode not in (0, 2):\n        print('FAIL', c, r.returncode, r.stderr[-300:])\n        sys.exit(1)\nprint('all economy verbs respond')\n",
-      "seconds": 15.82
+      "reproduce": "python -c import subprocess, sys\ncmds = [\n [sys.executable,'-m','platformforge','economy','doctor'],\n [sys.executable,'-m','platformforge','economy','checkpoint','--run-id','gate',\n  '--spent','{\"tokens\":1}'],\n [sys.executable,'-m','platformforge','economy','resume','--run-id','gate'],\n [sys.executable,'-m','platformforge','economy','reconcile',\n  '--planned','{\"tokens\":1}','--observed','{\"tokens\":2}'],\n [sys.executable,'-m','platformforge','economy','explain','--run-id','gate'],\n [sys.executable,'-m','platformforge','cache','stats'],\n [sys.executable,'-m','platformforge','cache','gc'],\n [sys.executable,'-m','platformforge','context','capsule','--task','t',\n  '--facts','[{\"fact_id\":\"f\"}]'],\n [sys.executable,'-m','platformforge','context','gc'],\n [sys.executable,'-m','platformforge','routing','explain','--signal','{}'],\n [sys.executable,'-m','platformforge','routing','compare',\n  '--champion','{}','--challenger','{}'],\n]\nfor c in cmds:\n    r = subprocess.run(c, capture_output=True)\n    if r.returncode not in (0, 2):\n        print('FAIL', c, r.returncode, r.stderr[-300:])\n        sys.exit(1)\nprint('all economy verbs respond')\n",
+      "seconds": 6.83
     },
     "economy-verification": {
       "ok": true,
       "reproduce": "pytest -q tests/test_economy_pricing_verify.py",
-      "seconds": 2.73
+      "seconds": 1.66
     }
   },
-  "generated_at": "2026-10-23T10:19:50Z",
+  "generated_at": "2026-11-10T01:47:49Z",
   "kind": "platformforge/economy-validation-receipt/1",
   "known_gaps": [
     "real provider pricing catalog not bundled (declared-rates engine only, by design)",
-    "money axis lacks a real model-call corpus — QPC money is unresolved without declared pricing + measured usage",
+    "money axis lacks a real model-call corpus \u2014 QPC money is unresolved without declared pricing + measured usage",
     "production savings unproven; microbench overhead only",
-    "analysis cache reuse requires identical evidence/policy/risk tuple — conservative by construction"
+    "analysis cache reuse requires identical evidence/policy/risk tuple \u2014 conservative by construction"
   ],
   "quality": {
     "note": "QPT/QPC floors enforced inside economy-qpt / economy-evals gates; quality floors gate every economy claim"
@@ -93,7 +93,7 @@
   "remote_ci": "not independently verified",
   "schema": "platformforge/economy-validation-receipt/v1",
   "spec": "prompt_evo_economy.md",
-  "validated_sha": "4b82edf74a9294de2647378a50499ba84a1becd6",
+  "validated_sha": "73979f488654acadbf97bb8b0604bd095499366e",
   "validator": "scripts/validate.py",
   "validator_version": "economy-validation-receipt/v1",
   "verdict": "validated"

platformforge-0.3.3/forge.agentic.json

@@ -0,0 +1,87 @@
+{
+  "schema": "forge/SpecialistAgenticManifest/v1",
+  "provider": "platform-forge",
+  "version": "0.3.3",
+  "cli": "platformforge",
+  "cli_entry": "platformforge.cli.main:main",
+  "workflows": [
+    {
+      "id": "analyze",
+      "mode": "DIRECT_CAPABILITY",
+      "command": [
+        "{cli}",
+        "analyze",
+        "{target}"
+      ],
+      "description": "Analyze platform/IaC surfaces",
+      "read_only": true
+    },
+    {
+      "id": "doctor",
+      "mode": "DIAGNOSTIC_ONLY",
+      "command": [
+        "{cli}",
+        "doctor"
+      ],
+      "description": "Environment health",
+      "read_only": true
+    }
+  ],
+  "skills": [],
+  "agents": [
+    "pf-extractor",
+    "pf-graph-builder",
+    "pf-inventory",
+    "pf-judge",
+    "pf-reconciler",
+    "pf-simulator",
+    "pf-synthesizer",
+    "pf-verifier",
+    "platform-adversarial-critic",
+    "platform-ai-infra-specialist",
+    "platform-architecture-reviewer",
+    "platform-aws-specialist",
+    "platform-capacity-specialist",
+    "platform-change-coordinator",
+    "platform-crossplane-specialist",
+    "platform-debate-referee",
+    "platform-economy-reviewer",
+    "platform-evidence-reviewer",
+    "platform-federation-specialist",
+    "platform-finops-specialist",
+    "platform-fleet-coordinator",
+    "platform-fleet-specialist",
+    "platform-gitops-specialist",
+    "platform-graph-specialist",
+    "platform-iac-specialist",
+    "platform-incident-coordinator",
+    "platform-kubernetes-specialist",
+    "platform-operations-safety-reviewer",
+    "platform-optimization-coordinator",
+    "platform-orchestrator",
+    "platform-planner",
+    "platform-policy-specialist",
+    "platform-privacy-reviewer",
+    "platform-product-coordinator",
+    "platform-product-specialist",
+    "platform-release-guardian",
+    "platform-security-reviewer",
+    "platform-security-specialist",
+    "platform-sre-specialist",
+    "platform-task-spec-reviewer",
+    "platform-verifier"
+  ],
+  "coordinators": [],
+  "mcp_command": [
+    "platformforge-mcp"
+  ],
+  "host_adapters": [
+    "claude",
+    "devin",
+    "codex",
+    "copilot"
+  ],
+  "requires_network": false,
+  "requires_credentials": false,
+  "read_only_default": true
+}

{platformforge-0.3.1 → platformforge-0.3.3}/forge.json

@@ -12,8 +12,9 @@
     "mcp"
   ],
   "lab": {
+    "extras": [],
     "command": [
-      "{checkout}/.venv/bin/python",
+      "{python}",
       "scripts/lab/platformforge_lab.py",
       "--checkout",
       "{checkout}",

{platformforge-0.3.1 → platformforge-0.3.3}/install.ps1

@@ -10,7 +10,7 @@ try {
     $py = $null
     $pyArgs = @()
     foreach ($c in @("python3", "python", "py")) {
-        $cmd = Get-Command $c -CommandType Application -ErrorAction SilentlyContinue
+        $cmd = Get-Command $c -CommandType Application -ErrorAction SilentlyContinue | Select-Object -First 1
         if ($cmd) {
             $py = $cmd.Source
             if ([IO.Path]::GetFileName($py) -in @("py.exe", "py")) { $pyArgs = @("-3") }

{platformforge-0.3.1 → platformforge-0.3.3}/platformforge/__init__.py

@@ -4,4 +4,4 @@ Deterministic-first, offline-first, evidence-first. The core never imports
 LLM SDKs, cloud SDKs, or MCP — those live behind optional adapters.
 """
 
-__version__ = "0.3.1"
+__version__ = "0.3.3"

{platformforge-0.3.1 → platformforge-0.3.3}/platformforge/_forge_portal.py

@@ -243,7 +243,7 @@ class PortalAdapter:
         return detect_account_environment(self)
 
 
-PORTAL_VERSION = "1.0.0"
+PORTAL_VERSION = "1.1.1"
 
 
 def portal_version() -> str:
@@ -997,6 +997,7 @@ class PortalServer(ThreadingHTTPServer):
             max_workers=8, thread_name_prefix="forge-portal"
         )
         super().__init__((host, port), PortalHandler)
+        self._serve_thread: threading.Thread | None = None
 
     # -- helpers used by the handler --------------------------------------
     def log(self, msg: str) -> None:
@@ -1060,9 +1061,55 @@ class PortalServer(ThreadingHTTPServer):
 
     def serve_in_thread(self) -> threading.Thread:
         t = threading.Thread(target=self.serve_forever, name="forge-portal-http", daemon=True)
+        self._serve_thread = t
         t.start()
         return t
 
+    def serve_forever(self, poll_interval: float = 0.5) -> None:
+        """Track direct ``serve_forever`` callers as well as our helper.
+
+        Embedded integrations often run the server directly in a thread
+        instead of calling :meth:`serve_in_thread`.  Tracking that thread
+        keeps ``shutdown(); server_close()`` ordered on Windows, where the
+        selector otherwise can briefly observe a closed socket.
+        """
+        self._serve_thread = threading.current_thread()
+        try:
+            super().serve_forever(poll_interval=poll_interval)
+        finally:
+            self._serve_thread = None
+
+    def shutdown(self) -> None:
+        """Stop the accept loop before the socket is closed.
+
+        Tests and embedded callers commonly call ``shutdown(); server_close()``
+        immediately.  Joining the serving thread here prevents the Windows
+        selector from observing a closed socket and emitting a spurious
+        ``WinError 10038`` warning.
+        """
+        super().shutdown()
+        thread = self._serve_thread
+        if thread and thread is not threading.current_thread():
+            thread.join(timeout=5)
+        self._executor.shutdown(wait=False, cancel_futures=True)
+
+    def server_close(self) -> None:
+        """Make direct ``server_close`` callers safe too.
+
+        ``ThreadingHTTPServer`` callers sometimes only retain the stdlib
+        lifecycle and invoke ``server_close`` without an earlier
+        ``shutdown``.  Closing the selector socket underneath a live
+        ``serve_forever`` thread raises WinError 10038 on Windows.  Stop and
+        join the loop before closing the descriptor, while keeping the
+        regular ``shutdown(); server_close()`` sequence idempotent.
+        """
+        thread = self._serve_thread
+        if thread and thread.is_alive() and thread is not threading.current_thread():
+            super().shutdown()
+            thread.join(timeout=5)
+        super().server_close()
+        self._executor.shutdown(wait=False, cancel_futures=True)
+
 
 def default_operations(adapter: PortalAdapter) -> list[Operation]:
     """Core read-only surface every portal gets for free, mapped to

{platformforge-0.3.1 → platformforge-0.3.3}/platformforge/agents/runstore.py

@@ -13,7 +13,7 @@ continuing (§141–142).
 from __future__ import annotations
 
 import json
-from pathlib import Path
+from pathlib import Path, PurePosixPath, PureWindowsPath
 from typing import Any
 
 from platformforge.agents.contracts import AgentRunRecord
@@ -25,9 +25,25 @@ class RunStore:
         self.dir.mkdir(parents=True, exist_ok=True)
 
     def _path(self, run_id: str) -> Path:
-        if "/" in run_id or ".." in run_id:
+        # Run ids are data, not path authority.  Check both path syntaxes so
+        # a Windows drive/UNC path or backslash traversal cannot escape when
+        # this code is exercised from another host or by a hostile MCP peer.
+        if (
+            not isinstance(run_id, str)
+            or not run_id
+            or any(char in run_id for char in ("/", "\\", ":", "\x00"))
+            or run_id in {".", ".."}
+            or any(part == ".." for part in PurePosixPath(run_id).parts)
+            or any(part == ".." for part in PureWindowsPath(run_id).parts)
+            or PurePosixPath(run_id).is_absolute()
+            or PureWindowsPath(run_id).is_absolute()
+        ):
             raise ValueError(f"bad run_id {run_id!r}")
-        return self.dir / f"{run_id}.json"
+        path = self.dir / f"{run_id}.json"
+        # Do not follow a pre-existing symlink planted in the run directory.
+        if path.is_symlink():
+            raise ValueError(f"bad run_id {run_id!r}: symlinked record")
+        return path
 
     def save(self, record: AgentRunRecord) -> Path:
         p = self._path(record.run_id)

{platformforge-0.3.1 → platformforge-0.3.3}/platformforge/context/capsule.py

@@ -14,6 +14,7 @@ SCHEMA = "platformforge/context-capsule/v1"
 
 SCOPES = ("repository", "resource", "cluster", "fleet", "incident",
           "operation", "service")            # §68
+CLASSIFICATIONS = ("public", "internal", "confidential", "restricted")
 
 # §111 — compression/projection may never strip these from a capsule.
 ESSENTIAL_FIELDS = ("facts", "findings", "open_questions")
@@ -26,6 +27,7 @@ class ContextCapsule:
     summary: str = ""
     task: str = ""
     scope: str = "repository"
+    classification: str = "internal"
     facts: list[Any] = field(default_factory=list)
     findings: list[Any] = field(default_factory=list)
     rules: list[str] = field(default_factory=list)
@@ -35,18 +37,24 @@ class ContextCapsule:
     open_questions: list[str] = field(default_factory=list)
     budget: dict[str, Any] = field(default_factory=dict)
     expandable: dict[str, str] = field(default_factory=dict)
+    warnings: list[str] = field(default_factory=list)
     # section name → context:// uri with full detail (§62)
 
     def __post_init__(self) -> None:
         if self.scope not in SCOPES:
             raise ValueError(f"scope {self.scope!r} not in {SCOPES}")
+        if self.classification not in CLASSIFICATIONS:
+            raise ValueError(
+                f"classification {self.classification!r} not in {CLASSIFICATIONS}"
+            )
 
     def to_dict(self) -> dict[str, Any]:
         return asdict(self)
 
     def serialize(self) -> bytes:
         return json.dumps(self.to_dict(), sort_keys=True,
-                          separators=(",", ":"), default=str).encode()
+                          separators=(",", ":"), ensure_ascii=False,
+                          default=str).encode("utf-8")
 
     @property
     def byte_size(self) -> int: