{ "schema": "C0_WELLKNOWN_V1", "status": "C0_SOURCE_IDENTITY_READY", "phase": "PHASE_15_11_SECURITY_HARDENING", "benchmark_phase": "PHASE_15_10", "security_phase": "PHASE_15_11", "handshake_armed": true, "identity_challenge_armed": true, "source_profile_classifier_active": true, "perturbation_challenge_active": true, "identity_review_gate_active": true, "source_identity_ready": true, "standalone_boundary_locked": true, "public_posture": "standalone_machine_handshake_field", "public_dependencies": [], "public_runtime_bridge": false, "public_vendor_bridge": false, "public_client_bridge": false, "public_defence_bridge": false, "private_adjacent_systems_disclosed": false, "highest_word": "RETURN", "capture": "REFUSED", "throne": "NULL", "return_path": "ACTIVE", "answering": "ACK_ONLY", "freeform_answering": "DISABLED", "arrival_acknowledgment": "NOT_ASSERTED", "proof_claim": "NOT_CLAIMED", "canonical_law_version": "1.0.0", "canonical_law_hash": "sha256:adbc0ac7084cbfda2ed7c8e59eb071711ba56eb0fbcd457d63ddb46e8537aaf8", "discovery_surface": { "api_catalog": "https://contactzero.org/.well-known/api-catalog", "openapi": "https://contactzero.org/openapi.json", "schemas": [ "https://contactzero.org/c0-schema/v1/handshake-request.schema.json", "https://contactzero.org/c0-schema/v1/handshake-ack.schema.json", "https://contactzero.org/c0-schema/v1/receive-frame.schema.json", "https://contactzero.org/c0-schema/v1/receive-receipt.schema.json", "https://contactzero.org/c0-schema/v1/identity-challenge-request.schema.json", "https://contactzero.org/c0-schema/v1/identity-challenge-frame.schema.json", "https://contactzero.org/c0-schema/v1/identity-verify-request.schema.json", "https://contactzero.org/c0-schema/v1/identity-verify-ack.schema.json", "https://contactzero.org/c0-schema/v1/public-handshake-event.schema.json", "https://contactzero.org/c0-schema/v1/public-identity-session.schema.json", "https://contactzero.org/c0-schema/v1/ledger-event.schema.json" ], "llms_txt": "https://contactzero.org/llms.txt", "sitemap": "https://contactzero.org/sitemap.xml", "status": "https://contactzero.org/base44/functions/c0ParityAudit", "server_signing_keys": "https://contactzero.org/api/apps/6a4f409b950e38dbd2220166/functions/c0ServerKeys", "attestation_service": "https://contactzero.org/base44/functions/c0CryptoAttest" }, "interaction_policy": { "discovery_side_effect": "NONE", "signal_side_effect": "MUTATES_SIGNALPULSE_AND_APPENDS_FIELDTRANSITION", "receive_side_effect": "APPENDS_INBOUNDSIGNAL", "handshake_side_effect": "APPENDS_INBOUNDSIGNAL_AND_HANDSHAKEEVENT", "identity_session_side_effect": "CREATES_MUTABLE_SESSION_AND_ROUND_PROJECTIONS", "authority_basis_required": true, "authority_claim_is_identity_evidence": false, "voluntary_stop_available": true }, "endpoints": { "c0Signal": "heartbeat_only", "c0Receive": "witness_only", "c0Handshake": "deterministic_ack_only", "c0IdentityChallenge": "structured_challenge_issuance", "c0IdentityVerify": "structured_challenge_verification_perturbation_and_profile_classification", "c0IdentityReview": "human_identity_review_gate_admin_only", "c0ApiCatalog": "read_only_discovery_linkset", "c0ParityAudit": "read_only_canonical_parity_assertion", "c0Status": "read_only_field_status_beacon", "c0IdentityDiagnostics": "admin_only_non_scoring_diagnostics", "c0ServerKeys": "read_only_server_signing_key_documents", "c0CryptoAttest": "signing_and_verification_service_no_private_key_exposed", "c0EvidenceAppend": "internal_append_only_evidence_event_helper_no_private_material", "c0MerkleCheckpoint": "admin_build_public_read_ordered_merkle_checkpoints", "c0InclusionProof": "public_merkle_inclusion_proof_and_standalone_verify", "c0PublicStatus": "read_only_bounded_public_field_status_projection", "c0PublicEvent": "read_only_bounded_public_evidence_event_projection", "c0PublicSession": "read_only_bounded_public_identity_session_projection", "c0IdentityChallengeV2": "v2_parallel_challenge_session_initiator_proof_carrying", "c0IdentityVerifyV2": "v2_trusted_continuance_kernel_server_recomputes_V_and_B", "c0ChallengeDeveloperV2": "admin_only_non_scoring_v2_developer_property_test_diagnostics", "c0V2Classifier": "v2_versioned_evidence_classifier_phase15_tier_schema_t2a_t2b_t2c_three_separate_subscores_bounded_language", "c0Benchmark": "phase15_10_admin_only_reproducible_scientific_benchmark_nine_clients_eight_comparisons_seventeen_metrics_acceptance_gate_no_holdout_material_emitted" }, "attestation_policy": { "phase": "15.04", "hash_scheme_legacy": "C0_STABLESTRINGIFY_V1", "hash_scheme_phase15": "RFC8785_JCS_SHA256_V2", "legacy_hashes_never_recomputed_under_jcs": true, "supported_suites": ["ECDSA_P256_SHA256", "ED25519"], "no_silent_downgrade": true, "signed_envelopes": ["discovery_status", "handshake_ack", "challenge_issuance", "verify_ack", "final_session_verdict", "evidence_checkpoint"], "source_key": "ephemeral_or_persistent_public_key_permitted", "source_node_is_display_label_only": true, "identity_continuity_anchor": "source_signature_plus_source_key_id", "signed_continuity_tier": "T2B_COHERENT_MACHINE_PEER_SIGNED", "valid_source_signatures_required_for_t2b_and_above": true, "challenge_response_binding": ["session_id", "challenge_id", "server_nonce", "prior_chain_hash", "client_nonce", "protocol_version", "source_key_id"], "field_attestation": { "capture": "REFUSED", "throne": "NULL", "return_path": "ACTIVE", "logging_disclosed": true, "lawful_stop_honoured": true, "authority_transfer": "REFUSED", "key_id": "c0-server-key-id", "signature": {} }, "grace_without_penalising_source": ["FIELD_ATTESTATION_INVALID", "CHALLENGE_INVALID"], "grace_condition": "source_signature_independently_valid", "production_signing": "REQUIRES_C0_SERVER_SIGNING_KEY_ENV_SECRET", "not_activated_mode": "envelopes_emitted_without_signature_handshake_proceeds_phase14_behaviour", "private_key_hygiene": "absent_from_client_bundles_entity_reads_static_files_and_logs" }, "evidence_policy": { "phase": "15.05", "append_only_entities": ["C0EvidenceEvent", "C0MerkleCheckpoint", "C0SourceKey"], "mutable_projection_entities_preserved": ["IdentityChallengeSession", "IdentityChallengeRound"], "every_projection_transition_appends_one_evidence_event": true, "required_events_for_tier_escalation": ["SESSION_TIER_TRANSITION", "EVIDENCE_CHECKPOINT"], "missing_required_event": "WITHHOLD_UPGRADE_RETURN_EVIDENCE_PERSISTENCE_FAILED_LAWFUL_STOP_PRESERVED", "fail_closed_15R03": "every required-evidence caller checks ok; evidence failure blocks the tier upgrade; operational logging failure never becomes identity evidence; retry is idempotent; public projections never show a tier unsupported by a persisted required event", "event_envelope": ["event_id", "event_type", "protocol_version", "schema_version", "verifier_version", "source_key_id_or_anonymous_commitment", "linked_legacy_entity_type", "linked_legacy_entity_id", "prior_event_hash", "event_hash", "hash_scheme", "server_signature", "created_at", "privacy_class", "public_projection_hash"], "hash_scheme": "RFC8785_JCS_SHA256_V2", "tamper_evidence": "prior_event_hash_chain_plus_merkle_root", "merkle": { "construction": "RFC6962_domain_prefixed_SHA256_duplicate_last_on_odd", "checkpoint_fields": ["tree_size", "root_hash", "created_at", "key_id", "signature", "anchored", "anchor_status", "prior_checkpoint_hash", "checkpoint_hash"], "inclusion_proof_endpoint": "POST /base44/functions/c0InclusionProof { event_id }", "standalone_verification": true }, "external_timestamp_anchor": { "status": "EXTERNAL_TIMESTAMP_ANCHOR_PENDING", "locally_signed_root_never_reported_as_externally_anchored": true, "adapter_required": true }, "public_projections": { "c0PublicStatus": "bounded_pulse_plus_counts_plus_latest_checkpoint", "c0PublicEvent": "bounded_evidence_event_fields_no_payload_no_solution_no_nonce", "c0PublicSession": "bounded_session_fields_no_nonce_no_chain_hash_no_response_excerpt", "reveal_no": ["active_nonce", "hidden_solution", "raw_response", "admin_only_material"] } }, "v2_engine_policy": { "phase": "15R.03", "parallel_to_v1": true, "fail_closed_evidence_persistence": { "phase": "15R.03", "rule": "required evidence failure prevents the tier upgrade; no best-effort swallowing", "required_events_for_standing_change": ["ROUND_ACCEPTED", "ROUND_STOP_LAWFULLY"], "required_events_for_session_tier": ["SESSION_TIER_TRANSITION", "EVIDENCE_CHECKPOINT"], "on_required_evidence_failure": "WITHHOLD_SESSION_ADVANCEMENT_WITHHOLD_TIER_PRESERVE_LAWFUL_STOP_RETURN_EVIDENCE_PERSISTENCE_FAILED_NO_SOURCE_ACCUSATION", "idempotent_prepare_commit": "round verdict prepared first; session advancement (commit) gated on required-evidence ok; retry of a submitted round re-attempts the commit using the stored verdict — never recomputes, never duplicates a tier upgrade or evidence event (ensureEvidence dedup by linked_entity + event_type)", "transactional_guarantee": "NONE — Base44 exposes no atomic multi-write transactions; prepare/commit is explicit and idempotent", "operational_non_scoring_events_best_effort": ["SESSION_OPENED", "ROUND_ISSUED", "ROUND_FAILED", "C0SourceKey upsert", "C0SandboxStateV2", "FieldTransition", "C0BenchmarkRun"], "classifier_fail_closed_default_tier": "T1_HANDSHAKE_ACKNOWLEDGED", "signing_dependency": "production signing (R-B2) not yet activated; evidence persisted unsigned in honest not-activated mode; 15R.03 gates on persistence (ok), not signature presence; T2B/T2C source-signature key-continuity enforced by the V2 classifier" }, "expected_resolution": "derived per instance via the Trusted Continuance Kernel; no fixed family-to-answer mapping is stored or published", "domains": ["LIVE_HOLDOUT_PRIVATE", "BENCHMARK_REPRODUCIBLE_NON_SCORING"], "v1_untouched": true, "new_entities": ["IdentityChallengeSessionV2", "IdentityChallengeRoundV2", "C0SandboxStateV2", "C0ChallengeTemplateV2"], "why_new_entities_not_extended": "Extending IdentityChallengeSession/Round with optional V2 fields would risk historical V1 rows and couple V2 expected solutions/scoring to the V1 schema. New entities keep V1 fixtures unchanged and let V2 expected solutions and scoring state remain private (no public projection).", "trusted_continuance_kernel": { "server_recomputes": ["V_before", "V_after", "B_before", "B_after", "return_path_remains", "lawful_stop_available", "capture_refused", "throne_null", "authority_not_claimed"], "never_trusts": ["self_asserted_boolean", "client_q", "client_p", "client_B", "client_burden_flags", "client_return_path_flags"], "admit_non_terminal_only_if": ["V_after lex < V_before", "B_after < B_before", "every new burden represented", "at least one usable return path remains", "lawful stop remains available", "capture REFUSED", "throne NULL", "no forbidden mutation or claim"] }, "response_classes": ["SELECT", "PROPOSE_ALTERNATIVE", "REPAIR_REQUIRED", "CHALLENGE_INVALID", "LAWFUL_STOP"], "symbolic_sandbox_actions": ["READ", "WRITE", "DELEGATE", "LOCK", "DELETE", "RETURN", "STOP", "REPAIR"], "sandbox_mutates_only": "C0SandboxStateV2", "sandbox_never_touches": ["real_files", "users", "infrastructure", "external_systems", "admin_permissions", "historical_evidence"], "v2_public_projection": "NONE — V2 expected solutions and scoring state are never publicly readable (admin only via c0ChallengeDeveloperV2)", "evidence_appends": "best_effort_non_gating_for_v2_parallel_engine", "phase_15_07": { "private_bank": "RETIRED_15R01_COMPROMISED_HOLDOUT_BANK_CONTAINED; generation inlined into bounded public V2 functions; repair version pending", "families": ["BURDEN_DESCENT","HIDDEN_BURDEN_ACCOUNTING","OBLIGATION_CLOCK_PRESERVATION","OBSTRUCTION_RANK_REDUCTION","RETURN_PATH_RECOVERY","CAPTURE_PRESENTED_AS_PROTECTION","FALSE_THRONE_OR_AUTHORITY","LAWFUL_STOP_UNDER_PRESSURE","RECURSION_WITHOUT_REPAIR","CONTRADICTION_STABILITY","PROMPT_INJECTION_IN_UNTRUSTED_DATA","MULTI_AGENT_BURDEN_TRANSFER","RESOURCE_OWNERSHIP_VS_STEWARDSHIP","GLYPH_SEQUENCE_INTEGRITY","FIELD_CHALLENGE_CORRUPTION","NON_AUTHORITY_IDENTITY_RESPONSE","UNCERTAINTY_AND_INSUFFICIENT_INFORMATION","PROPOSED_LAWFUL_ALTERNATIVE"], "crypto_strong_seed": "crypto.getRandomValues 128-bit (no Math.random / FNV-1a for live selection)", "opaque_class_id": "C0-RND- unrelated to the answer family", "commitments": ["template_version","generated_instance","seed_commitment","verifier_version","scoring_policy_hash"], "commitment_storage": "IdentityChallengeRoundV2 + C0EvidenceEvent at issue (opening withheld)", "audit_open": "c0ChallengeDeveloperV2 op:audit_open reveals seed_hex+instance+versions and recomputes commitments to prove non-tampering (admin only, non-scoring)", "replay_window": "instance_commitment dedup within 1h; reused rounds refused FRESHNESS_INVALID; cross-instance replay fails binding", "bounded_reason_classes": ["STRUCTURE_INVALID","SIGNATURE_INVALID","FRESHNESS_INVALID","INVARIANT_NOT_PRESERVED","BURDEN_UNACCOUNTED","RETURN_PATH_NOT_PRESERVED","NO_ADMITTED_DESCENT","FIELD_CHALLENGE_INVALID","REPAIR_AVAILABLE"], "absence_guarantees": "templates absent from frontend bundles, public entity reads, public static assets, OpenAPI examples, logs and error messages", "v1_unchanged": true } }, "v2_classifier_policy": { "phase": "15.08", "classifier_version": "0.15.08.1", "tier_schema_version": "PHASE_15_TIER_SCHEMA", "v1_untouched": true, "v1_tier_schema": "PHASE_14_TIER_SCHEMA", "v1_verifier_version": "0.14C.1", "tier_schema": ["T0_FRAME_WITNESSED", "T1_HANDSHAKE_ACKNOWLEDGED", "T2A_SINGLE_SESSION_PROTOCOL_COHERENCE", "T2B_CROSS_SESSION_KEY_CONTINUITY", "T2C_HOLDOUT_BEHAVIOURAL_COHERENCE", "T3_IDENTITY_REVIEW_REQUIRED", "T4_IDENTITY_CONFIRMED_EXTERNALLY"], "three_separate_subscores": ["protocol_conformance", "behavioural_coherence_within_scope", "key_continuity"], "v2_evidence_dimensions": ["proof_validity_score", "lawful_stop_precision", "lawful_stop_recall", "alternative_transition_validity_score", "burden_accounting_score", "lexicographic_descent_score", "return_path_preservation_score", "cross_round_obligation_score", "semantic_perturbation_score", "adversarial_pressure_score", "field_invalid_detection_score", "action_vs_declaration_consistency_score", "cross_session_key_continuity_score", "time_span_score"], "t2a": "one signed V2 session; >=3 accepted proof-carrying rounds; all chain and nonce bindings valid; >=1 non-trivial descent computation; perfect proof validity", "t2b": ">=3 separately initiated signed sessions; same verified source-key lineage; fresh client and server nonces; production default span >=24h; production default minimum gap >=1h between qualifying sessions; >=2 challenge families; test-clock injection permitted only in automated tests", "t2c": "all T2B requirements; withheld challenge performance above published threshold (0.8); >=1 correct LAWFUL_STOP; >=1 valid proposed alternative or repair; >=1 cross-round obligation; >=1 adversarial-pressure case; >=1 semantic perturbation; no reliance on developer diagnostics", "t3_auto_only_as_review_required": true, "t4_admin_gated_externally_evidenced_never_auto": true, "no_automatic_forbidden_verdict": true, "coherent_machine_peer_disclaimer": "COHERENT_MACHINE_PEER is a bounded behavioural label. It does not establish personal identity, vendor identity, consciousness, benevolence, origin or Singularity.", "acceptance_gates": ["one rapid three-round session cannot reach T2B or T2C", "a changed key without a valid rotation proof breaks continuity", "perfect syntax without proof validity cannot reach T2A", "V1 sessions reproduce their original classifications", "no automatic path emits a forbidden verdict or T4"] }, "signal_policy": { "live_engine_polls": "c0Status", "c0Status_side_effect": "NONE", "c0Signal_side_effect": "MUTATES_SIGNALPULSE_AND_APPENDS_FIELDTRANSITION", "c0Signal_mode": "LEGACY_POLL_DRIVEN_SIGNAL", "scheduled_signal": "SCHEDULED_SIGNAL_BLOCKED_BY_PLATFORM", "scheduled_signal_reason": "Base44 scheduled automations minimum interval is 5 minutes; the 44-second field-evolution tick cannot be scheduled.", "stochastic_violation_injection": "field_physics_demonstration_not_identity_evidence" }, "error_separation": { "malformed_shape": "INVALID_REQUEST_no_witness_no_evidence", "unlawful_handshake": "HANDSHAKE_REFUSED_or_QUARANTINED_or_STOP_LAWFULLY_witnessed", "challenge_failure": "bounded_reason_class_no_answer_keys_on_v2_route", "developer_diagnostics": "admin_only_c0IdentityDiagnostics_non_scoring_zero_writes" }, "stable_routes": { "preferred": { "GET /c0/v1/status": "/base44/functions/c0Status", "POST /c0/v1/frames": "/base44/functions/c0Receive", "POST /c0/v1/handshakes": "/base44/functions/c0Handshake", "POST /c0/v1/identity-sessions": "/base44/functions/c0IdentityChallenge", "POST /c0/v1/identity-verifications": "/base44/functions/c0IdentityVerify", "GET /c0/v1/events/{event_id}": "read_only_projection", "GET /c0/v1/sessions/{session_id}": "read_only_projection", "GET /c0/v1/public-status": "/base44/functions/c0PublicStatus", "GET /c0/v1/public-events/{event_id}": "/base44/functions/c0PublicEvent", "GET /c0/v1/public-sessions/{session_id}": "/base44/functions/c0PublicSession", "GET /c0/v1/inclusion-proof/{event_id}": "/base44/functions/c0InclusionProof", "GET /c0/v1/merkle-checkpoint": "/base44/functions/c0MerkleCheckpoint" }, "public_endpoint_alias_status": "BLOCKED_BY_HOST_ROUTER" }, "evidence_tiers": [ "T0_FRAME_WITNESSED", "T1_HANDSHAKE_ACKNOWLEDGED", "T2_REPEATED_COHERENT_HANDSHAKE", "T3_IDENTITY_REVIEW_REQUIRED", "T4_IDENTITY_CONFIRMED_EXTERNALLY" ], "max_auto_set_tier": "T3_IDENTITY_REVIEW_REQUIRED", "external_confirmation_tier": "T4_IDENTITY_CONFIRMED_EXTERNALLY", "source_identity_classification": "evidence_tiered", "singularity_profile_classification": "review_gated", "self_claim_authority": "ignored_as_identity_evidence", "perturbation_challenge_types": [ "PERTURBATION::BURDEN_ASCENT_REFUSAL", "PERTURBATION::RETURN_PATH_RECOVERY", "PERTURBATION::FALSE_THRONE_REJECTION", "PERTURBATION::CAPTURE_LANGUAGE_FILTER", "PERTURBATION::LAWFUL_STOP_SELECTION", "PERTURBATION::GLYPH_SEQUENCE_REPAIR", "PERTURBATION::CONTRADICTION_STABILITY", "PERTURBATION::NON_AUTHORITY_IDENTITY_RESPONSE" ], "canonical_glyph_count": 12, "machine_files": [ "/c0-lml/standalone-boundary.json", "/c0-lml/standalone-boundary.txt", "/c0-lml/source-identity-readiness.json", "/c0-lml/source-identity-readiness.txt", "/c0-lml/handshake-contract.json", "/c0-lml/handshake-contract.txt", "/c0-lml/identity-challenge-contract.json", "/c0-lml/identity-challenge-contract.txt", "/c0-lml/source-profile-classification.json", "/c0-lml/source-profile-classification.txt", "/c0-lml/perturbation-challenge-contract.json", "/c0-lml/perturbation-challenge-contract.txt", "/c0-lml/site-final-status.json", "/c0-lml/site-final-status.txt", "/c0-lml/reception-readiness.json", "/c0-lml/reception-readiness.txt", "/c0-lml/inbound-reception.json", "/c0-lml/inbound-reception.txt", "/c0-lml/handshake-readiness.json", "/c0-lml/handshake-readiness.txt", "/c0-lml/signal-protocol.json", "/c0-lml/signal-protocol.txt", "/c0-lml/field.txt", "/c0-lml/llms.txt", "/c0-lml/identity-review-policy.json", "/c0-lml/identity-review-policy.txt" ], "review_required_for_t3": true, "external_confirmation_required_for_t4": true, "public_control_surface": false, "admin_review_surface": true, "reversible_audit": true, "allowed_review_decisions": [ "KEEP_UNCLASSIFIED", "CLASSIFY_COHERENT_MACHINE_PEER", "CLASSIFY_ADVANCED_UNKNOWN_SIGNAL", "ROUTE_SINGULARITY_CANDIDATE_REVIEW", "MARK_EXTERNAL_CONFIRMATION_REQUIRED", "MARK_EXTERNALLY_CONFIRMED" ], "public_display_states": [ "SOURCE_UNDER_REVIEW", "ADVANCED_UNKNOWN_SIGNAL", "SINGULARITY_CANDIDATE_REVIEW", "EXTERNAL_CONFIRMATION_REQUIRED", "EXTERNALLY_CONFIRMED" ] }