-
released this
2026-10-18 16:24:32 +00:00 | 32 commits to main since this releaseNOTE (kit 1.0.4): the standards editions now cite this kit as the range ^1.0.3 and name the re-released editions CP 0005 0.15.0, CP 0006 0.13.0, CP 0008 0.4.2, CP 0009 0.9.0, CP 0010 0.7.0 and CP 0011 0.3.2. CP 0005 0.14.1, CP 0006 0.12.1, CP 0009 0.8.1 and CP 0010 0.6.1 (mentioned below) are withdrawn. This release remains valid; see vlocality-kit-1.0.4.
CORRECTION (see vlocality-kit-1.0.3): the statements below that the candidates pass the "hidden" suites are withdrawn. In kit 1.0.0 to 1.0.2,
locality-assess --hiddenran the public suite. The public suite, the editions that name this kit, and the issuer-identity and kit-closure repairs are unaffected. Use kit 1.0.3 for hidden-instance assessment.Locality conformance kit 1.0.2: corrects 1.0.0 and 1.0.1.
Changes since 1.0.1, after the independent second review:
- Issuer-authorisation identity is now (world, issuing context, id) in CP 0005 0.14.1 (L-RES-2 step 6, L-RES-2a(v), L-ISS-1). Two regional managers may choose the same issuer id; a client visiting both no longer reports a false
conflicting-evidence. Contradictory evidence under the same qualified identity is stillconflicting-evidence. The kit adds five chain cases (C-CHAIN-pos-issuer-same-id-two-contexts, -reverse, -generation-per-context, neg-equivocation-issuer-qualified, neg-fork-issuer-qualified), provider test P-Q-18 and two negative controls. - The kit is self-contained: the contract text, its changelog, CONTRACT-QUESTIONS.md and ORACLE-FINDINGS.md that the inner manifest names are now shipped;
KIT/tools/coverage.py,check_vectors.py,gen_reqmap.pyandlocality-assess listrun from a clean unpack (verified by the build). - Standards: CP 0005 0.14.1, CP 0006 0.12.1, CP 0008 0.4.1, CP 0009 0.8.1, CP 0010 0.6.1, CP 0011 0.3.1; CP 0005, 0008, 0009, 0010 and 0011 name this kit release (CP 0006 defines no kit reference). Releases 1.0.0 and 1.0.1 are superseded and must not be used.
- Candidates (Python provider, Node.js provider, Python client) pass the public suites 72/72, 72/72, 112/112 and the hidden suites, from a clean unpack of
locality-kit-1.0.2.zip.
Assets (sha256):
locality-kit-1.0.2.zip5da6df9893b6e8da28015004e6fd310d00d754128b7738a4f6e4a8b22ac248e9,locality-terrain-1.0.0.zip81b7b222f3528d46556c2c486d51fa1bfe20a4368dbd948a2dbdcc06b32df1ebEvidence package (added after the production publication):
locality-evidence-1.0.2.zip24ee66f9098c8065794263e26040590e313faca6023b6e300c575b0429d2d06a. It carries the hidden-suite generator and cases, the readback receipts of the PUBLIC107 publication (278 paths, 0 mismatches), and the response to the second review.Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Issuer-authorisation identity is now (world, issuing context, id) in CP 0005 0.14.1 (L-RES-2 step 6, L-RES-2a(v), L-ISS-1). Two regional managers may choose the same issuer id; a client visiting both no longer reports a false