aipackage/specs/001-enterprise-experience/contracts/test-vectors

Artifact Contract Test Vectors

These files are specification fixtures only. They contain conspicuous non-production identifiers and digests. They MUST NOT be copied into an installer or accepted by a release verifier.

• workstation-iso-manifest.valid.json: structurally valid Workstation ISO payload example.
• compatibility-cases.json: deterministic compatibility outcomes and primary reason codes.
• ed25519-test-public.pem, the four *-signature.valid.json envelopes, and signature-cases.json: real test-only Ed25519 positive vectors plus tamper and unknown-key negatives. The private key was transient and is intentionally absent.
• model-pack-manifest.valid.json, update-bundle-manifest.valid.json, and trust-bundle-manifest.valid.json: structural examples for the remaining artifact types.
• verification-evidence.md: current parsing, digest, signature, and scope-limited verification result.

Before Gate 1 approval, add:

1. independent security/platform review of the test-vector procedure;
2. owner approval of the schemas, compatibility contract, and signing policy.

No production key or customer license may appear in this directory.

Run the complete automated fixture suite with Python packages jsonschema and cryptography:

python3 validate_vectors.py