GOVP
Source
GOVP 0.1.11

Changelog

Public protocol and verifier publication history.

0.1.11 — verification hardening

  • Bounds live GOVP-STATUS-1 freshness to reject stale replay and excessive future skew.
  • Rejects normalized JSON field collisions and exceptional Ed25519 encodings.
  • Adds snapshot_valid while retaining snapshot_trusted as a compatibility alias.
  • Publishes matching Python 0.1.11 and JavaScript 0.1.8 implementations against 19 core vectors.

The frozen GOVP-1 signing bytes and identifiers remain unchanged.

0.1.10 — status and issuance

  • Adds path-like API compatibility and explicit enterprise CA selection.
  • Publishes safe issuance APIs and govp issue.
  • Publishes GOVP-STATUS-1, live revocation, key rotation and status conformance.
  • Adds production endpoint monitoring and exact-canonical discovery records.

GOVP-STATUS-1 is a separate extension. The frozen GOVP-1 signing bytes and identifiers remain unchanged.

0.1.9 — stable public distribution

  • Publishes GOVP through pip install govp with bundled specification, schema, conformance vectors and synthetic examples.
  • Adds govp conformance --run and govp examples --extract DIR.
  • Defines the supported top-level Python API and keeps govp.core compatible.
  • Publishes checksummed standalone binaries for Linux, macOS and Windows.
  • Adds a live, signed GOVP record at https://govp.io/.well-known/govp.txt.

Provenance

Release 0.1.11 is built from signed tag v0.1.11, commit 3c099c8e75e36fd28778c4da0ec8d0e4387690f3. Exact source and normative artifact hashes are recorded in PROTOCOL-SOURCE.json.

Release 0.1.11 and SHA256SUMS · Full source changelog