Published in the open

The criteria are published, and so is the evidence format.

Any auditor, and any competitor, can check the result. Every publication, newest first, with one line on what it adds.

Publications

  • repository

    Open specification and reference verifier

    Living · updated with the bundle format

    What it adds. SPEC.md (0.1.1), the FORMAT.md field tables and test vectors, the JSON schema, the offline reference verifier ap-verify, and example records. CC BY 4.0 for the specification, Apache-2.0 for the code.

    github.com/csingcloud/authority-provenance

  • Verifiable Approval Records v0.1

    Minimum contents for standing authority behind non-person actor actions · November 3, 2026

    What it adds. The minimum an approval record must carry so an assessor can tell, without the system that produced it, who approved, whether they held the authority then, what they approved and until when, and which action ran under it.

    doi:10.5281/zenodo.23933521

  • Authority Provenance bundle v0.1

    Specification, field tables and test vectors · October 23, 2026

    What it adds. The open format of the sealed evidence record: what a record asserts and what it does not, the field tables, the evaluation states, and the test vectors the reference verifier is checked against.

    doi:10.5281/zenodo.23601519

  • Authority Exposure v0.1

    Standing authority reachable by undeclared input · October 12, 2026

    What it adds. A name for the condition where a non-person actor can be turned against its principal by content it was never told to distrust: no defect, no CVE, no patch, only a grant. Defined per grant.

    doi:10.5281/zenodo.23318689

  • Standing of Delegated Authority v0.3

    Companion to the IA-9 Overlay v1.1 · October 2, 2026

    What it adds. The property the overlay leaves open, standing: whether a currently accountable authority still holds the delegation a grant depends on at the point of use, the events that require it to be re-established, and how an assessor determines it. Supersedes v0.2.

    doi:10.5281/zenodo.23105657

  • Standing of Delegated Authority v0.2

    Companion to the IA-9 Overlay v1.0 · September 23, 2026 · superseded by v0.3

    What it adds. The first text of the companion, against the overlay's v1.0. Kept for the record; v0.3 is the current text.

    doi:10.5281/zenodo.22918825

Deposits are on Zenodo under CC BY 4.0, each at a DOI that does not change. The companion deposits cite the IA-9 Overlay (Murali and B) by its own DOIs; that overlay is their authors' work, not Cerydora's. The home page shows the latest three.