• vlocality-kit-1.0.2 9115800232

    Johnb released this 2026-10-18 16:24:32 +00:00 | 32 commits to main since this release

    NOTE (kit 1.0.4): the standards editions now cite this kit as the range ^1.0.3 and name the re-released editions CP 0005 0.15.0, CP 0006 0.13.0, CP 0008 0.4.2, CP 0009 0.9.0, CP 0010 0.7.0 and CP 0011 0.3.2. CP 0005 0.14.1, CP 0006 0.12.1, CP 0009 0.8.1 and CP 0010 0.6.1 (mentioned below) are withdrawn. This release remains valid; see vlocality-kit-1.0.4.

    CORRECTION (see vlocality-kit-1.0.3): the statements below that the candidates pass the "hidden" suites are withdrawn. In kit 1.0.0 to 1.0.2, locality-assess --hidden ran the public suite. The public suite, the editions that name this kit, and the issuer-identity and kit-closure repairs are unaffected. Use kit 1.0.3 for hidden-instance assessment.

    Locality conformance kit 1.0.2: corrects 1.0.0 and 1.0.1.

    Changes since 1.0.1, after the independent second review:

    • Issuer-authorisation identity is now (world, issuing context, id) in CP 0005 0.14.1 (L-RES-2 step 6, L-RES-2a(v), L-ISS-1). Two regional managers may choose the same issuer id; a client visiting both no longer reports a false conflicting-evidence. Contradictory evidence under the same qualified identity is still conflicting-evidence. The kit adds five chain cases (C-CHAIN-pos-issuer-same-id-two-contexts, -reverse, -generation-per-context, neg-equivocation-issuer-qualified, neg-fork-issuer-qualified), provider test P-Q-18 and two negative controls.
    • The kit is self-contained: the contract text, its changelog, CONTRACT-QUESTIONS.md and ORACLE-FINDINGS.md that the inner manifest names are now shipped; KIT/tools/coverage.py, check_vectors.py, gen_reqmap.py and locality-assess list run from a clean unpack (verified by the build).
    • Standards: CP 0005 0.14.1, CP 0006 0.12.1, CP 0008 0.4.1, CP 0009 0.8.1, CP 0010 0.6.1, CP 0011 0.3.1; CP 0005, 0008, 0009, 0010 and 0011 name this kit release (CP 0006 defines no kit reference). Releases 1.0.0 and 1.0.1 are superseded and must not be used.
    • Candidates (Python provider, Node.js provider, Python client) pass the public suites 72/72, 72/72, 112/112 and the hidden suites, from a clean unpack of locality-kit-1.0.2.zip.

    Assets (sha256): locality-kit-1.0.2.zip 5da6df9893b6e8da28015004e6fd310d00d754128b7738a4f6e4a8b22ac248e9, locality-terrain-1.0.0.zip 81b7b222f3528d46556c2c486d51fa1bfe20a4368dbd948a2dbdcc06b32df1eb

    Evidence package (added after the production publication): locality-evidence-1.0.2.zip 24ee66f9098c8065794263e26040590e313faca6023b6e300c575b0429d2d06a. It carries the hidden-suite generator and cases, the readback receipts of the PUBLIC107 publication (278 paths, 0 mismatches), and the response to the second review.

    Downloads