open-standards/wai/pack-conformance/mutations/receipt
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Transaction Science 9b5854aa4c Corpora: weak-key cases in every receipt family's corpus
Each family whose corpus lacked them gets the three signatures a verifier that
checks only the equation accepts and WAI's rule refuses (wai_sig::forgeries):
the identity as the key with (R, S) = (B, 1), the identity spelled y = p + 1,
and R of small order under the base point. Every case is new; no existing
vector's expectation changes.

- jwp: group_signer_key_identity_forged, group_signer_key_identity_y_not_reduced
  (step 1, bad_signer_key), group_signature_r_small_order (step 2).
- signer: anchor_root_identity_forged, anchor_root_identity_y_not_reduced,
  anchor_root_signature_r_small_order (not anchored, key_log_signature_invalid).
- pack: mutations receipt-key-identity, receipt-key-identity-y-not-reduced,
  receipt-r-small-order (receipt-signature); receipts/ v1-key-identity,
  v1-key-identity-y-not-reduced, v1-r-small-order, marked "signature": "refused",
  which wai-pack and pack_verify.py now read.
- quantum-ops: cal_q3_ and job_bell_ key_identity, key_identity_y_not_reduced and
  r_small_order, "verifies": false, which wai_quantum_ops_vectors checks are
  refused and hash as pinned.

claim (signer_key_identity, signer_key_identity_y_not_reduced,
signature_r_small_order and others) and http (sig-key-identity, -long,
sig-r-small-order) had them already. OER/2 keeps its own rule.

PackageReceipt::signing_payload (v1) and the calibration and job receipts'
signing_payload are public, so a corpus generator can sign over them;
wai-quantum re-exports wai_sig beside ed25519_dalek.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-07 10:16:21 -04:00
..
live pack-conformance: pack_verify.py verifies the golden package, the mutations and the version-1 receipts from the extension text; the mutation objects carry real WIV1 and WIR1 payloads 2026-10-06 06:40:07 -04:00
counts.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
duplicate-member.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
energy-member-missing.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
energy.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
evidence-without-class.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
index-digest.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
index-v.wsix pack-conformance: pack_verify.py verifies the golden package, the mutations and the version-1 receipts from the extension text; the mutation objects carry real WIV1 and WIR1 payloads 2026-10-06 06:40:07 -04:00
key-identity-y-not-reduced.json Corpora: weak-key cases in every receipt family's corpus 2026-10-07 10:16:21 -04:00
key-identity.json Corpora: weak-key cases in every receipt family's corpus 2026-10-07 10:16:21 -04:00
lone-surrogate.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
media-class.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
minus-zero.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
no-component.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
null-value.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
ok-labelled.json pack-conformance: pack_verify.py verifies the golden package, the mutations and the version-1 receipts from the extension text; the mutation objects carry real WIV1 and WIR1 payloads 2026-10-06 06:40:07 -04:00
ok-live-window.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
ok.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
parent-kind-live.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
parent-kind.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
policy-digest.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
r-small-order.json Corpora: weak-key cases in every receipt family's corpus 2026-10-07 10:16:21 -04:00
receipt-hash.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
signature.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
stage-root.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
two-components-one-id.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00
unknown-member.json wai: a package is bound to the policy its receipt signs; malformed packages are refused, never panicked on; floor key frames and members checked against the package; receipt JSON read strictly; MoQ dependencies never dangle 2026-10-06 07:42:47 -04:00