Two additions to the WAI standard, rebased clean onto current main:
- SPEC.md gains section 6 Confidentiality (OPTIONAL): a security.encryption
manifest field, keys as a requirement-of-existence (never transported),
relay-sees-only-ciphertext transparency, and a decrypt-then-dispatch
refinement of the capability-dispatch algorithm. Conformance/Versioning
renumbered to 7/8; the neural intent bullet's replicate-soundness ref
follows to 7. No cross-references broken.
- New extensions/confidentiality.md sub-spec: byte-level SFrame (RFC 9605
suite 0x0006) framing + HKDF-SHA-512 schedule + nonce, the MLS (RFC 9420)
exporter binding with single- vs multi-sender keying, and how it composes
with the JWP receipt chain over ciphertext.
- extensions/jwp-receipts.md: cross-links payload- vs receipt-confidentiality,
and documents the optional wall-clock freshness bound on the live edge
(companion to the monotonic group_id guard already in 6.1).
Grounded byte-for-byte in the moq-sframe / joule-comm-mls reference impl;
the private-channel path is live at wai.transaction.science/private-channel.
Co-authored-by: Transaction Science <[email protected]>
Co-authored-by: Claude Opus 4.8 <[email protected]>
fcb2e4483e