Skip to content
auths/

Wire schema

Specification / canonical encoding

The normative schema is spec/v1/auths-proof.cddl. The codec uses constrained deterministic CBOR.

Rejected forms

Section titled “Rejected forms”

The current corpus and independent auditors reject:

  • non-minimal integers;
  • indefinite-length forms;
  • CBOR tags and floating-point values;
  • duplicate or non-canonical map keys;
  • invalid UTF-8;
  • trailing bytes; and
  • inputs that exceed explicit resource limits.

Content identifiers

Section titled “Content identifiers”

Grants, actions, plans, evidence, contexts, and results use domain-separated identifiers derived from their canonical representations. Signing preimages are domain-separated from content identifiers.

Golden bytes

Section titled “Golden bytes”

Committed .cbor files under fixtures/v1 are canonical golden vectors. They are generated only by cargo xtask wire --update and verified byte-for-byte by cargo xtask wire.