ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Add typed schema records and strict version checks

Browse source
This commit is contained in:
ms2k 2026-07-13 04:00:50 +09:00
commit 16defc768a
1 changed files with 3164 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
docs/schema.md
View file

@ -768,3 +768,16 @@ identity with a schema-specific domain separator. Process identities and network
observations are attestation evidence but are not part of that fingerprint. The
Host Coordinator binds the accepted attestation and generation-bound reachability
probe into Network Readiness Evidence before publication.
`NetworkReadinessAttestation.schema_id` is exactly
`lazaret-network-attestation-v1`.
`NetworkReadinessIdentity.schema_id` is exactly
`lazaret-network-readiness-identity-v1`. They are independent version-dispatch
domains: the v1 attestation projects only to the v1 readiness identity, and any
other identifier or version is refused without fallback or cross-domain
interpretation.
The readiness-fingerprint domain separator is the UTF-8 bytes of
`lazaret-network-readiness-identity-v1` followed by exactly one zero byte. This
fixes the domain-separation context only; it does not select the byte encoding of
the canonical readiness-identity fields.