{ "authority_seal_schema": "FIX7-AUTHORITY-SEAL-V1", "encoder_id": "FIX7-CANON-V1-AUTHORITY-SEAL-ENCODER", "encoder_sha256": "13344f92cafcaf0d07dcb21700bdb642f38b89351702e08080eacb0e957144b8", "spec_revision": "2026-06-11-failopen-provenance-patch", "grammar": { "forbidden_bytes": [ 0, 9, 10, 13, 92 ], "forbidden_bytes_names": [ "TAB(0x09)", "LF(0x0A)", "CR(0x0D)", "NUL(0x00)", "BACKSLASH(0x5C)" ], "record": "rec(*fields) = ("\t".join(fields)+"\n").encode("utf-8")", "digest": "digest(tag,records) = sha256((tag+"\n").encode()+b"".join(records))", "byte_identical_to": "canonicalizer rev3 sha256 49c386a9b9666c09786fc4f89bc79776b6046eaee6f4da6d8537d2c753b734d0 (rec/digest/FORBIDDEN_BYTES proven equal)" }, "dag": { "edges": { "N1": [], "N2": [], "N3": [], "N4": [], "N5": [], "N6": [ "N1" ], "N7": [ "N2", "N3", "N4", "N5", "N6", "N1" ], "N8": [ "N2", "N5", "N6", "N7" ], "P7": [ "N2", "N7", "N8" ], "N9_DIAG": [] }, "engineering_edges_source": "verbatim from canonicalizer SSOT EDGES (N1..N8,N9_DIAG)", "added_by_authority_layer": [ "P7" ], "acyclic": true }, "domain_tags": { "N7": "FIX7_ACTIVE_AUTHORITY_ENVELOPE_MANIFEST_V1", "N8": "FIX7_CODEX_DETACHED_SEAL_V1", "P7": "FIX7_AUTHORITY_SEAL_PIN_V1", "REPORTS": "FIX7_CODEX_SEAL_REPORTS_V1" }, "rosters": { "N7": [ "schema_version", "node_id", "membership_sha256", "canonicalizer_sha256", "marker_fence_registry_sha256", "superseded_boundary_sha256", "guard_set_sha256", "active_corpus_sha256", "approval_event_id", "approver_identity", "approval_event_timestamp", "owner_blueprint_decision", "approval_scope" ], "N8": [ "schema_version", "node_id", "canonicalizer_sha256", "guard_set_sha256", "active_corpus_sha256", "envelope_manifest_sha256", "sealed_by", "sealed_at", "parent_checkpoint", "report_documents_digest", "seal_scope" ], "P7": [ "schema_version", "node_id", "pinned_canonicalizer_document_id", "pinned_canonicalizer_revision", "pinned_canonicalizer_utf8_bytes", "pinned_canonicalizer_sha256", "pinned_packet_v3_tree_sha256", "codex_report_document", "codex_checkpoint_document", "envelope_manifest_sha256", "detached_seal_sha256", "approval_event_id", "pin_scope" ] }, "field_kinds": { "schema_version": "const", "node_id": "const", "approval_scope": "const", "seal_scope": "const", "pin_scope": "const", "membership_sha256": "hex", "canonicalizer_sha256": "hex", "marker_fence_registry_sha256": "hex", "superseded_boundary_sha256": "hex", "guard_set_sha256": "hex", "active_corpus_sha256": "hex", "envelope_manifest_sha256": "hex", "detached_seal_sha256": "hex", "report_documents_digest": "hex", "pinned_canonicalizer_sha256": "hex", "pinned_packet_v3_tree_sha256": "hex", "approval_event_id": "id", "approver_identity": "identity", "sealed_by": "identity", "approval_event_timestamp": "timestamp", "sealed_at": "timestamp", "owner_blueprint_decision": "decision", "pinned_canonicalizer_revision": "posint", "pinned_canonicalizer_utf8_bytes": "posint", "pinned_canonicalizer_document_id": "path", "parent_checkpoint": "path", "codex_report_document": "path", "codex_checkpoint_document": "path" }, "value_grammar": { "hex": { "regex": "^[0-9a-f]{64}$", "desc": "exactly 64 lowercase hex; rejects NOT_A_SHA, uppercase, short/long", "reject_status": "SEAL_FIELD_NOT_HEX" }, "id": { "regex": "^[A-Za-z0-9][A-Za-z0-9.:@+/-]{0,199}$", "desc": "non-empty safe identifier charset", "reject_status": "SEAL_FIELD_BAD_ID" }, "identity": { "regex": "non-empty printable ASCII 0x20-0x7E, not all-whitespace", "desc": "signer/authority identity; rejects empty signer", "reject_status": "SEAL_FIELD_BAD_IDENTITY" }, "timestamp": { "regex": "^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d{1,9})?Z$", "desc": "deterministic RFC3339 UTC with trailing Z", "reject_status": "SEAL_FIELD_BAD_TIMESTAMP" }, "decision": { "regex": "^[A-Z0-9][A-Z0-9]{0,127}$", "desc": "uppercase decision token (enum-style)", "reject_status": "SEAL_FIELD_BAD_ENUM" }, "posint": { "regex": "^[1-9][0-9]{0,17}$", "desc": "positive integer string, no leading zero, no sign; rejects -1, 0, not-an-int", "reject_status": "SEAL_FIELD_BAD_INT" }, "path": { "regex": "^[A-Za-z0-9][A-Za-z0-9._/@:+-]{0,399}$", "desc": "non-empty document path / id@rev", "reject_status": "SEAL_FIELD_BAD_PATH" }, "empty_any": { "desc": "any non-const field with value "" is rejected before grammar", "reject_status": "SEAL_FIELD_EMPTY" } }, "report_set_rules": { "function": "report_documents_digest(report_pairs)", "tag": "FIX7_CODEX_SEAL_REPORTS_V1", "record": "sorted rec(document_id, revision)", "rejects": { "empty_set": "SEAL_REPORT_SET_EMPTY", "duplicate_record": "SEAL_REPORT_SET_DUPLICATE", "duplicate_document_id": "SEAL_REPORT_SET_DUPLICATE", "invalid_document_id": "SEAL_REPORT_DOC_ID_INVALID", "invalid_revision": "SEAL_REPORT_REVISION_INVALID" }, "deterministic_sort": true }, "provenance": { "classes": [ "ENGINEERING_VERIFIED_CANDIDATE", "REHEARSAL", "AUTHORITY_INPUT", "CODEX_AUTHORED", "OFFICIAL_PIN", "FORBIDDEN_FOR_REAL_SEAL" ], "allowed_real_corpus": [ "ENGINEERING_VERIFIED_CANDIDATE", "OFFICIAL_PIN" ], "allowed_real_authority": [ "AUTHORITY_INPUT", "CODEX_AUTHORED", "OFFICIAL_PIN" ], "real_seal_api": [ "encode_real_n7", "encode_real_n8", "encode_real_p7" ], "rehearsal_api": "encode_node (provenance-agnostic; NEVER a real seal)", "rejects": { "missing_class": "SEAL_PROVENANCE_MISSING", "unknown_class": "SEAL_PROVENANCE_UNKNOWN_CLASS", "rehearsal_class": "SEAL_PROVENANCE_REHEARSAL_BLOCKED", "forbidden_class": "SEAL_PROVENANCE_FORBIDDEN_CLASS", "no_real_n6_chain": "SEAL_REAL_N6_NOT_AVAILABLE" }, "real_n6_available_in_lane": false, "note": "REHEARSAL corpus is BLOCKED from real N7. Even valid ENGINEERING_VERIFIED_CANDIDATE classes stay blocked by SEAL_REAL_N6_NOT_AVAILABLE until a real non-rehearsal N1..N6 chain is supplied. This is the standing true blocker." }, "cycle_forbidden_fields": { "N7": [ "authority_seal_pin_sha256", "detached_seal_sha256", "envelope_manifest_sha256" ], "N8": [ "authority_seal_pin_sha256", "detached_seal_sha256" ], "P7": [ "authority_seal_pin_sha256" ] }, "constant_fields": { "all": { "schema_version": "FIX7-AUTHORITY-SEAL-V1" }, "N7": { "node_id": "N7", "approval_scope": "BLUEPRINT_SEAL_ONLY_NO_IMPLEMENTATION" }, "N8": { "node_id": "N8", "seal_scope": "BLUEPRINT_SEAL_ONLY_NO_IMPLEMENTATION" }, "P7": { "node_id": "P7", "pin_scope": "CANDIDATE_TO_AUTHORITATIVE_PIN_BLUEPRINT_ONLY" } }, "output_fields": { "N7": "envelope_manifest_sha256", "N8": "detached_seal_sha256", "P7": "authority_seal_pin_sha256" }, "sub_digests": { "report_documents_digest": { "tag": "FIX7_CODEX_SEAL_REPORTS_V1", "records": "sorted rec(document_id, revision)" } }, "fail_closed_statuses": [ "SEAL_UNKNOWN_NODE", "SEAL_DOMAIN_TAG_MISMATCH", "SEAL_HASH_GRAPH_CYCLE", "SEAL_INPUT_MISSING", "SEAL_INPUT_EXTRA", "SEAL_INPUT_DUPLICATE", "SEAL_FIELD_ORDER_MISMATCH", "SEAL_CONSTANT_FIELD_MISMATCH", "SEAL_FIELD_NOT_STRING", "SEAL_FIELD_FORBIDDEN_BYTE", "SEAL_FIELD_RESERVED_TOKEN", "SEAL_FIELD_EMPTY", "SEAL_FIELD_NOT_HEX", "SEAL_FIELD_BAD_ID", "SEAL_FIELD_BAD_IDENTITY", "SEAL_FIELD_BAD_TIMESTAMP", "SEAL_FIELD_BAD_ENUM", "SEAL_FIELD_BAD_INT", "SEAL_FIELD_BAD_PATH", "SEAL_FIELD_UNKNOWN_KIND", "SEAL_PROSE_ONLY_PIN_REJECTED", "SEAL_REPORT_SET_EMPTY", "SEAL_REPORT_SET_DUPLICATE", "SEAL_REPORT_DOC_ID_INVALID", "SEAL_REPORT_REVISION_INVALID", "SEAL_PROVENANCE_MISSING", "SEAL_PROVENANCE_UNKNOWN_CLASS", "SEAL_PROVENANCE_REHEARSAL_BLOCKED", "SEAL_PROVENANCE_FORBIDDEN_CLASS", "SEAL_REAL_N6_NOT_AVAILABLE" ], "authority_inputs": { "N7": { "codex": [ "approval_event_id", "approver_identity(codex part)", "approval_event_timestamp" ], "owner": [ "approver_identity(owner part)", "owner_blueprint_decision" ] }, "N8": { "codex": [ "sealed_by", "sealed_at", "parent_checkpoint", "report_documents_digest" ] }, "P7": { "codex": [ "codex_report_document", "codex_checkpoint_document", "approval_event_id" ] } }, "fixture_digests_NOT_A_SEAL": { "N7": "6225f265155942c1d32ce3ed2d491b4c3b7b0109a3b4b6fde9a37f434b459bfd", "N8": "b1f001b64da50748823259593393b6e2d050c8c55c56918c99386984d075aa73", "P7": "3599f6635be42a695991f66f561642e26718403f4e14ad220480480a8da7d541" } }