0.1.13 — coordinated public release
- Aligns the Python package, JavaScript package, website and downloadable releases at 0.1.13.
- Includes GOVP-EXT-1 evidence envelopes and byte-exact publication inclusion proofs.
- Retains the JavaScript Unicode scalar-value validation fix from 0.1.11.
Package alignment preserves existing APIs and the frozen GOVP-1 signing bytes.
0.1.11 — verification hardening
- Bounds live GOVP-STATUS-1 freshness to reject stale replay and excessive future skew.
- Rejects normalized JSON field collisions and exceptional Ed25519 encodings.
- Adds
snapshot_validwhile retainingsnapshot_trustedas a compatibility alias. - Publishes matching Python 0.1.11 and JavaScript 0.1.8 implementations against 19 core vectors.
The frozen GOVP-1 signing bytes and identifiers remain unchanged.
0.1.10 — status and issuance
- Adds path-like API compatibility and explicit enterprise CA selection.
- Publishes safe issuance APIs and
govp issue. - Publishes GOVP-STATUS-1, live revocation, key rotation and status conformance.
- Adds production endpoint monitoring and exact-canonical discovery records.
GOVP-STATUS-1 is a separate extension. The frozen GOVP-1 signing bytes and identifiers remain unchanged.
0.1.9 — stable public distribution
- Publishes GOVP through
pip install govpwith bundled specification, schema, conformance vectors and synthetic examples. - Adds
govp conformance --runandgovp examples --extract DIR. - Defines the supported top-level Python API and keeps
govp.corecompatible. - Publishes checksummed standalone binaries for Linux, macOS and Windows.
- Adds a live, signed GOVP record at
https://govp.io/.well-known/govp.txt.
Provenance
The website’s normative artifacts remain pinned to release 0.1.13, commit 94ebf0a0047baddfd6bcc08eb42c5bbed295d6d1. Exact source and normative artifact hashes are recorded in PROTOCOL-SOURCE.json.