mirror of
https://github.com/block/buzz.git
synced 2026-11-05 17:01:35 +00:00
6636ce9f68
The published contract named a `trusted-proxy-hmac-v1` profile that no implementation accepts. This replaces it with `trusted-proxy-hmac-v2` as the sole stock proxy transport, specified from the wire format: envelope layout, length-prefixed MAC input, canonical encodings, discovery identifier, replay namespace, and lease bounds, with negative vectors. Denial handling is re-scoped. The no-mutation invariant now covers authoritative authorization state only, and denial observability moves to a separately bounded, non-authoritative channel carrying reason codes and correlation identifiers under payload minimization. A denied admission creates no authorization receipt, and a failed observation write never blocks, retries, or latches the denial. Runtime operations, deployment, and integration guidance is framed as future contract rather than current behavior. Subject stability is stated as a verifier trust assumption with its reassignment consequence, and the key-snapshot rollback claim is narrowed to what the model enforces. This is a documentation change. It adds no runtime parser, adapter, or enforcement path. Session-path rechecks and the policy digest input set remain relay-side follow-ups. The 24 trace and 16 invariant identifiers are unchanged.
163 lines
3.8 KiB
JSON
163 lines
3.8 KiB
JSON
{
|
|
"schema": "nip-fi-conformance-report-v1",
|
|
"document_role": "shape-example-not-conformance-claim",
|
|
"claim": {
|
|
"implementation_revision": "REPLACE_WITH_40_HEX_COMMIT",
|
|
"adapter_revision": "REPLACE_WITH_40_HEX_COMMIT",
|
|
"build_artifact_sha256": "REPLACE_WITH_64_HEX_DIGEST",
|
|
"deployment_revision": "REPLACE_WITH_IMMUTABLE_DEPLOYMENT_ID",
|
|
"domain_policy_sha256": "REPLACE_WITH_64_HEX_DIGEST",
|
|
"transport_profiles": [
|
|
"trusted-proxy-hmac-v2"
|
|
],
|
|
"enrollment_mode": "attested-key",
|
|
"delegation": false
|
|
},
|
|
"results": [
|
|
{
|
|
"trace_id": "FI-TRACE-PROXY-SPOOF",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-PROXY-REPLAY",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-PROXY-CROSS-REQUEST",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-AUTHORITY-UNIFORM",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-VERIFIER-PARITY",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-DOMAIN-SPOOF",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-ASSERTION-KEY-MISMATCH",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-BINDING-CONFLICT",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-TOMBSTONE-REPLAY",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-ASSERTION-REFRESH",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-ADMIN-EXPIRY",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-JWKS-ADD",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-JWKS-REMOVE",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-PREPARED-STALE",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-FINAL-DENIAL-NO-MUTATION",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-CONCURRENT-ENROLLMENT",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-TOFU-THEFT",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-DELEGATE-OWNER-ROTATED",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-DELEGATION-EXPIRED",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-DENIAL-ORACLE",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-DEPENDENCY-FAIL-CLOSED",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-MULTI-KEY-SESSION",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-CROSS-DOMAIN-COLLISION",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
},
|
|
{
|
|
"trace_id": "FI-TRACE-PRIVACY-NONPUBLIC",
|
|
"status": "not-run",
|
|
"adapter_test_ids": [],
|
|
"evidence": []
|
|
}
|
|
]
|
|
}
|