Skip to content

Normalise versions to 0.x; correct §8.1 truncation claim#2

Merged
koishore merged 1 commit into
mainfrom
consistency-0.x-notation
Jun 3, 2026
Merged

Normalise versions to 0.x; correct §8.1 truncation claim#2
koishore merged 1 commit into
mainfrom
consistency-0.x-notation

Conversation

@koishore

@koishore koishore commented Jun 3, 2026

Copy link
Copy Markdown
Member

Consistency pass on the spec.

  • Version notation → 0.x everywhere (header, §2.1 matrix, §10, CHANGELOG, README badge + status). Spec/protocol is two-component 0.x; only the reference package is 0.x.y. conformance.py regex fixed — it required three components and would have failed to parse 0.3.
  • §8.1 truncation claim corrected. Hash-chaining does not detect truncation of the most recent receipts (a truncated prefix verifies clean) or a holder of the local signing key. Added a normative caveat requiring external head anchoring for rollback detection. This matches the honest wording now in the reference's README/SECURITY (and the delego verify(expected_head=…) hook).

No vector or schema changes; validate.py green; conformance.py green (reference 0.2 <= spec 0.3).

AI assistance disclosure (required)

  • AI-generated, human-reviewed.

Kind of change

  • Normative (§8.1 verification caveat) + editorial (version notation).

Checklist

  • python validate.py green · python conformance.py green.
  • §2.1 matrix + tags consistent; spec leads the reference.
  • No receipt-field/canonicalization change; CHANGELOG updated.

- Version notation: spec/protocol is two-component 0.x everywhere (header, §2.1
  matrix, §10, CHANGELOG, README badge/status). Only the reference *package* is
  0.x.y. conformance.py now parses a two-component spec version (the regex
  required three components and would have failed on "0.3").
- §8.1: the chain does NOT detect truncation of the most recent receipts (a
  truncated prefix verifies clean), nor a holder of the local signing key. Added
  a normative caveat requiring the head be anchored externally for rollback
  detection, and corrected the false "deleting any receipt breaks a check" line.
  Matches the honest wording now in the reference's README/SECURITY.

validate.py and conformance.py both green; reference 0.2 <= spec 0.3.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@koishore koishore merged commit db73d42 into main Jun 3, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant