27 lines
1.3 KiB
Markdown
27 lines
1.3 KiB
Markdown
# Artifact Contract Test Vectors
|
|
|
|
These files are specification fixtures only. They contain conspicuous non-production identifiers and
|
|
digests. They MUST NOT be copied into an installer or accepted by a release verifier.
|
|
|
|
- `workstation-iso-manifest.valid.json`: structurally valid Workstation ISO payload example.
|
|
- `compatibility-cases.json`: deterministic compatibility outcomes and primary reason codes.
|
|
- `ed25519-test-public.pem`, the four `*-signature.valid.json` envelopes, and
|
|
`signature-cases.json`: real test-only Ed25519 positive vectors plus tamper and unknown-key
|
|
negatives. The private key was transient and is intentionally absent.
|
|
- `model-pack-manifest.valid.json`, `update-bundle-manifest.valid.json`, and
|
|
`trust-bundle-manifest.valid.json`: structural examples for the remaining artifact types.
|
|
- `verification-evidence.md`: current parsing, digest, signature, and scope-limited verification result.
|
|
|
|
Before Gate 1 approval, add:
|
|
|
|
1. independent security/platform review of the test-vector procedure;
|
|
2. owner approval of the schemas, compatibility contract, and signing policy.
|
|
|
|
No production key or customer license may appear in this directory.
|
|
|
|
Run the complete automated fixture suite with Python packages `jsonschema` and `cryptography`:
|
|
|
|
```bash
|
|
python3 validate_vectors.py
|
|
```
|