SPEC.md v0.7.0 amends v0.6.0 (archived byte-exact; the chain now carries
six verified anchors, v0.1–v0.6):
- The residual is derived, never carried — the implementation refused to
store a copy that could lie, and the implementation was right.
- Two-stage evaluation is normative: receipt-local validation witnesses
at most JR-2/managed; JR-3, JR-4, and certified are composed verdicts
over sealed evidence + key log + interval. A single-stage validator
grading higher is now non-conformant by text.
- The recourse regime is a per-discharge bound field (absent =
recourse_undeclared, a disclosure not a cap); the sector-equivalence
claim has a concrete structure and a mechanical binding test; the
lost/never evidence distinction is decided by the bundle address; the
cross-digest re-anchor record is named.
Reference implementation closes every deferred item: composition (§3.3)
with per-component ceiling accountability (intra-batch netting is
structurally dead — the round-three E7 attack is a failing test), the
per-EnB ratchet (§5.3) with anchored-ceiling + attribution
preconditions and amendment-only loosening, recourse + sector bindings,
the evidence_lost/unresolvable mechanical distinction, cross-digest
re-anchoring with hop-bounded resolution, and a receipt↔contract
address binding check. Every §15 demoted state is now producible.
76 tests green, clippy zero warnings, vectors regenerated against the
v0.7 shapes. Site chain updated.
Co-Authored-By: Claude Fable 5 <[email protected]>