Proof of Process CDDL Schema

Complete CDDL Schema The following CDDL defines the complete wire format for Proof of Process packets. This schema is normative and implementations MUST conform to it. uint, ; version 2 => uuid, ; packet-id 3 => hash-value, ; document-hash 4 => pop-timestamp, ; created 5 => document-ref, ; document 6 => [+ checkpoint], ; checkpoints ; Tiered optional sections ? 10 => presence-section, ; presence ? 11 => forensics-section, ; forensics ? 12 => keystroke-section, ; keystroke ? 13 => hardware-section, ; hardware ? 14 => external-section, ; external ; Extension fields ? 20 => provenance-section, ; provenance ? 21 => continuation-section, ; continuation ? 22 => collaboration-section, ; collaboration ; Packet signature 99 => COSE_Sign1, ; packet-signature } ; Attestation Result (.war file) attestation-result = { 1 => uint, ; version 2 => uuid, ; reference-packet-id 3 => pop-timestamp, ; verified-at 4 => forensic-assessment, ; verdict 5 => float32, ; confidence-score 6 => [+ result-claim], ; verified-claims 7 => [* caveat], ; caveats ? 8 => verifier-info, ; verifier 99 => COSE_Sign1, ; result-signature } ; ============================================================ ; Core Types ; ============================================================ uuid = bstr .size 16 pop-timestamp = #6.1(uint) ; Unix timestamp hash-value = { 1 => uint, ; algorithm (1=SHA-256) 2 => bstr, ; digest } document-ref = { 1 => tstr, ; filename ? 2 => tstr, ; mime-type ? 3 => uint, ; size-bytes } ; ============================================================ ; Checkpoint Structure ; ============================================================ checkpoint = { 1 => uint, ; sequence-number 2 => hash-value, ; content-hash 3 => pop-timestamp, ; timestamp 4 => vdf-proof, ; vdf-proof ? 5 => delta-metrics, ; delta ? 6 => jitter-binding, ; jitter ? 7 => [+ anchor-reference], ; anchors } delta-metrics = { 1 => uint, ; chars-added 2 => uint, ; chars-deleted ? 3 => uint, ; words-added ? 4 => uint, ; words-deleted } ; ============================================================ ; VDF Structures ; ============================================================ vdf-proof = { 1 => uint, ; algorithm 2 => bstr, ; input 3 => bstr, ; output 4 => uint, ; iterations ? 5 => bstr, ; proof (for succinct VDFs) ? 6 => calibration-ref, ; calibration } calibration-ref = { 1 => hash-value, ; attestation-hash 2 => float32, ; rate (iter/sec) } ; ============================================================ ; Jitter Seal Structures ; ============================================================ jitter-binding = { 1 => hash-value, ; entropy-commitment 2 => [1*3 uint], ; sources 3 => jitter-summary, ; summary 4 => bstr, ; binding-mac ? 5 => [+ uint], ; raw-intervals (optional) } jitter-summary = { 1 => uint, ; sample-count 2 => [+ histogram-bucket], ; timing-histogram 3 => float32, ; entropy-bits } histogram-bucket = { 1 => uint, ; min-ms 2 => uint, ; max-ms 3 => uint, ; count } ; ============================================================ ; Optional Sections ; ============================================================ presence-section = { 1 => float32, ; active-ratio 2 => [+ activity-window], ; windows } activity-window = { 1 => pop-timestamp, ; start 2 => pop-timestamp, ; end 3 => float32, ; activity-level } forensics-section = { 1 => [* paste-event], ; paste-events 2 => [* focus-event], ; focus-events } paste-event = { 1 => pop-timestamp, ; timestamp 2 => uint, ; char-count 3 => uint, ; checkpoint-ref } focus-event = { 1 => pop-timestamp, ; timestamp 2 => bool, ; gained (true) or lost } keystroke-section = { 1 => jitter-binding, ; keystroke-jitter } hardware-section = { 1 => [+ hw-attestation], ; attestations } hw-attestation = { 1 => uint, ; type (1=SE, 16=TPM, 17=SGX) 2 => bstr, ; attestation-data 3 => pop-timestamp, ; timestamp } external-section = { 1 => [+ anchor-reference], ; external-anchors } anchor-reference = { 1 => uint, ; type 2 => tstr / bstr, ; reference 3 => pop-timestamp, ; timestamp ? 4 => uint, ; status } ; ============================================================ ; Extension Sections ; ============================================================ provenance-section = { 1 => uuid, ; parent-packet-id 2 => hash-value, ; parent-chain-hash 3 => uint, ; derivation-type ? 4 => COSE_Sign1, ; cross-packet-attestation } continuation-section = { 1 => uuid, ; series-id 2 => uint, ; sequence-number 3 => hash-value, ; prev-packet-hash ? 4 => continuation-summary, ; cumulative-summary } continuation-summary = { 1 => uint, ; total-checkpoints 2 => uint, ; total-chars-added 3 => uint, ; total-chars-deleted 4 => float32, ; total-duration } collaboration-section = { 1 => bstr, ; session-id 2 => [+ collaborator], ; collaborators } collaborator = { 1 => bstr, ; public-key 2 => uint, ; role ? 3 => tstr, ; name ? 4 => tstr, ; identifier } ; ============================================================ ; Attestation Result Types ; ============================================================ forensic-assessment = &( authentic: 1, suspicious: 2, inconclusive: 3, insufficient: 4, ) result-claim = { 1 => uint, ; claim-type 2 => any, ; threshold 3 => any, ; observed-value 4 => claim-status, ; status ? 5 => trust-basis, ; trust-basis } claim-status = &( proven: 1, high-confidence: 2, moderate-confidence: 3, low-confidence: 4, failed: 5, not-applicable: 6, ) trust-basis = { 1 => uint, ; basis-type ? 2 => float32, ; confidence-contribution } caveat = { 1 => uint, ; caveat-type 2 => tstr, ; description ? 3 => any, ; details } verifier-info = { 1 => tstr, ; verifier-id 2 => tstr, ; version ? 3 => [+ tstr], ; capabilities } ; ============================================================ ; COSE Placeholder (per RFC 9052) ; ============================================================ COSE_Sign1 = bstr ; Encoded COSE_Sign1 structure ]]>