alexmandClaude
3831b52a2b
- hashing.algorithm names the hash function in every document; a consumer refuses one it does not implement (doc.hash.algorithm) - ML-DSA-65 (FIPS 204) is an implemented signature scheme: pure-Python reference in tools/oracle/mldsa.py checked against NIST ACVP vectors, a receipt signed by the new roster key dana, and signature vectors for key generation and a deterministic signature - roster keys may carry a did:key, which the validator checks against the public key (doc.roster.did), and a witness purpose for parties that cosign log checkpoints - model provenance: a correction's author and an annotation's generator name the model with provider, version and the hashes of its weights, prompt and parameters, and where it ran - the transparency log gains the tlog-tiles static layout (fixtures/records/log/), a project settings.log with origin, witnesses and threshold, and an acceptance rule; the fixture checkpoint is cosigned by a witness - store.sql: roster_keys accepts cose and ml-dsa-65 and gains a did column - spec chapters 01, 08, 11, 18, 20 and 23, the rationale, glossary, fixture, vector and tool guides updated; stress harness covers ML-DSA Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
119 lines
2.9 KiB
JSON
119 lines
2.9 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"$id": "https://paperspec.scient.ing/schemas/roster.schema.json",
|
|
"title": "Roster",
|
|
"description": "scienting-roster/1: the keys that may sign; spec/08-fidelity.md.",
|
|
"type": "object",
|
|
"properties": {
|
|
"format": {
|
|
"const": "scienting-roster/1"
|
|
},
|
|
"store": {
|
|
"$ref": "common.schema.json#/$defs/key"
|
|
},
|
|
"keys": {
|
|
"type": "array",
|
|
"items": {
|
|
"type": "object",
|
|
"properties": {
|
|
"id": {
|
|
"$ref": "common.schema.json#/$defs/key"
|
|
},
|
|
"person": {
|
|
"type": "object",
|
|
"properties": {
|
|
"name": {
|
|
"type": "string",
|
|
"minLength": 1
|
|
},
|
|
"orcid": {
|
|
"type": "string",
|
|
"pattern": "^[0-9]{4}-[0-9]{4}-[0-9]{4}-[0-9]{3}[0-9X]$"
|
|
},
|
|
"email": {
|
|
"type": "string",
|
|
"minLength": 1
|
|
}
|
|
},
|
|
"required": [
|
|
"name"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
"role": {
|
|
"description": "The holder's role in the team that keeps the roster; a key with the role owner may revoke any receipt (spec/08 §8.7).",
|
|
"enum": [
|
|
"owner",
|
|
"editor",
|
|
"reader",
|
|
"guest"
|
|
]
|
|
},
|
|
"scheme": {
|
|
"enum": [
|
|
"ed25519",
|
|
"ssh",
|
|
"gpg",
|
|
"sigstore",
|
|
"cose",
|
|
"ml-dsa-65"
|
|
]
|
|
},
|
|
"public": {
|
|
"type": "string",
|
|
"minLength": 1
|
|
},
|
|
"did": {
|
|
"type": "string",
|
|
"pattern": "^did:key:z[1-9A-HJ-NP-Za-km-z]+$",
|
|
"description": "The key as a did:key decentralized identifier, which the public key determines (spec/08 §8.7)."
|
|
},
|
|
"purposes": {
|
|
"type": "array",
|
|
"items": {
|
|
"enum": [
|
|
"sign",
|
|
"spot-check",
|
|
"export",
|
|
"witness"
|
|
]
|
|
},
|
|
"minItems": 1,
|
|
"uniqueItems": true
|
|
},
|
|
"registered_at": {
|
|
"$ref": "common.schema.json#/$defs/time"
|
|
},
|
|
"revoked_at": {
|
|
"anyOf": [
|
|
{
|
|
"$ref": "common.schema.json#/$defs/time"
|
|
},
|
|
{
|
|
"type": "null"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"required": [
|
|
"id",
|
|
"person",
|
|
"role",
|
|
"scheme",
|
|
"public",
|
|
"purposes",
|
|
"registered_at",
|
|
"revoked_at"
|
|
],
|
|
"additionalProperties": false
|
|
}
|
|
}
|
|
},
|
|
"required": [
|
|
"format",
|
|
"store",
|
|
"keys"
|
|
],
|
|
"additionalProperties": false
|
|
}
|