Separation
Artifact, manifest, and signature are independent governed objects.
Registry / Governing contract
Canonical Artifact Specification.
Version 1.0.0 defines how TRH packages, identifies, hashes, validates, signs, and retires canonical artifacts.
Version 1.0.0ACTIVEValidator 0.1.0
Boundaries
TRH-WRAPPED-1 permits exactly one metadata wrapper and one payload wrapper, with no bytes outside them.
Hashing
Exact artifact bytes and normalized portable payload bytes receive distinct SHA-256 hashes.
BOM
A BOM invalidates a canonical artifact; it may be removed only for portable payload comparison.
Trust
Ed25519 signatures are verified against an explicitly trusted key registry.
States
Validation returns VALID, MODIFIED, UNREGISTERED, INVALID, or REVOKED.
Governing documentTRH_CANONICAL_ARTIFACT_SPEC_v1.0.0.md
Download exact document ↓