Packages

charter_agreement_protocol

0.4.1
0.6.0 0.5.0 retired 0.4.1 retired 0.4.0 retired 0.3.2 retired 0.3.1 retired 0.3.0 retired 0.2.1 0.2.0 0.1.0

Portable, non-authorizing charter-agreement format and verification protocol.

Retired package: Security issue - Ed25519 forgery under two weak key encodings; upgrade to 0.6.0 (GHSA-xr83-9hrm-7hpm)
HexDocs Report package

Current section

Files

Jump to
Documentation
Changelog
License
Security
10 Versions
0 Dependencies
Dependants
Files
Activity
charter_agreement_protocol docs errata.md
Raw

docs/errata.md 

# Errata policy

CAP never authorizes.

This file records verdict-changing corrections to the published protocol. It
is empty for the current release candidate. A future correction must name the
affected stable `CAP-<SURFACE>-<kebab-tag>` requirements, update their corpus,
gate, and mutation evidence, re-certify the corpus index, and preserve the
no-versioning rule: semantic wire changes advance `protocol_revision`; they do
not introduce parallel module, path, or media-type families.

An archive build is verification evidence only. It is not authorization to
publish a package.

## Released-identity immutability

Released identities — digests, certified corpora, release manifests — are
never mutated in place. A correction to any released identity is a new
release; the retroactive semantics mapping is a documented classification
of already-released artifacts, never a rewrite of a released manifest
(docs/adr/release-identity.md).